Архивы Hardware - Page 41 of 54

Restoring MikroTik (RouterOS) using NetInstall

NetInstall is used to reinstall RouterOS when it is damaged, the access password is incorrectly set or the access password is not known.

I will describe the basic steps:

1) Download NetInstall from the official site
https://www.mikrotik.com/download

2) Register a static IP address to the computer, for example 192.168.88.254

3) Connect the Ethernet cable to the router through the ETH1 port with the computer using the switch or directly.

4) Run the NetInstall application. Click the “Net booting” button, check “Boot Server” enabled and enter the IP address from the same subnet where the computer is located, for example 192.168.88.200, its NetInstall will temporarily assign it to the router. Any firewall on the computer must be disabled.

5) When the router is disconnected from the mains, press the “reset” button and continue to turn it on, wait for about half a minute until the NetInstall program displays a new device in the device list.

6) In “Packages”, click the “Browse” button and specify the directory with the firmware. In the list of devices (Routers/Drives) select a router, in the bottom of the list, tick the firmware to be downloaded to the router and click “Install”. The firmware is downloaded to the router and the status will be written “Waiting for reboot”, after which, instead of the install button, there will be a reboot button, and you will need to click it.

The router will boot with the new firmware. If there are any problems with the loading of the router, you can try to reset it to the standard settings by holding the reset button, or if there is a display, select “Restore settings” and enter the standard pin code 1234. Alternatively, restore via Netinstall with the tick “Keep Old Configuration” and indicating below your “Configure script”.

Firmware update of MikroTik devices

Updating the MikroTik firmware is easy enough, just open the web-interface of the device or WinBox, select “System” – “Packages” from the menu and click “Check For Updates”, if a new firmware is found, then click “Download & Upgrade”. The device will download the firmware from the official website and starts from it.

To flash MikroTik devices not to the newest version, or when the device does not have access to the Internet, I propose the following:

1) Download the firmware from the official website
https://www.mikrotik.com/download

2) Connect via WinBox (not through the web interface!), Select “Files” in the menu, a window will appear, just drag the firmware file with the *.npk extension and wait for the file to upload.

3) Reload the router. It will have to start with a new firmware.

Done.

To downgrade the firmware version, you need to perform steps 1 and 2, then connect to the device via telnet and run the command:

/system package downgrade

In case of problems, you can restore the router by following the instructions
Restoring MikroTik (RouterOS) using NetInstall

Configuring Storm Control on Alcatel OmniStack LS 6224

In this article I will give an example of setting up broadcast and multicast control on the Alcatel OmniStack LS 6224 switch.

Connect to the switch and go into the configuration mode:

enable
configure

Select the ports on which you want to enable Storm Control:

interface range ethernet e1-24

Turn on the control of broadcast traffic and specify a limit of 70 kilobits per second:

port storm-control broadcast enable
port storm-control broadcast rate 70

If you want to limit also multicast traffic, then execute the following command:

port storm-control include-multicast

The standard value is 3500, the possible range for ethernet ports is 70 – 100000, for gigabit ports 3500 – 1000000.

Now it remains to exit the configuration mode and save the configuration:

exit
exit
copy running-config startup-config

To see the data of the packet counters on the port, for example:

show interfaces counters ethernet g1

Firmware Upgrade Alcatel OmniStack LS 6224

I will describe the process of updating the firmware on Alcatel OmniStack LS 6224.

Let’s connect to the device and switch to the mode of elevated privileges:

enable

See the current firmware version:

show version

We look at what firmware versions are downloaded and what is active:

show bootvar

See how much memory is free:

dir

Run the command to copy the firmware file from the TFTP server to the switch:

copy tftp://10.0.0.18/alc6224-1.7.1.12.img image-2

I had an active firmware image-1, so I saved a new one like image-2.
I used the firmware version 1.7.1.12
https://files.ixnfo.com/Firmware/Alcatel-Lucent/alc6224-1.7.1.12.img

Let’s make an active uploaded firmware:

boot system image-2
show bootvar

We reboot the switch:

reload

After reboot, the switch will boot with the new firmware.

If necessary, the firmware file can also be copied from the switch to TFTP:

copy image-1 tftp://10.10.0.18/image-1

How to start the TFTP server I described in these articles:
Installing and Configuring a TFTP Server in Ubuntu
Starting a TFTP server in Windows

Reset Alcatel OmniStack LS 6224

I will describe examples of resetting the settings on the Alcatel OmniStack LS 6224 in several ways.

1) Connect to the device and execute the command to delete the configuration and restart:

enable
delete startup-config
reload

Just in case, before deleting the configuration, you can make a backup copy to the tftp server or locally:

copy startup-config tftp://10.10.0.18/startup-config 
copy startup-config startup-config-backup
dir

To return it is possible so:

copy tftp://10.10.0.18/startup-config startup-config
copy startup-config-backup startup-config

2) If the password for the switch is unknown, then connect to it with a console cable, the speed is usually 9600.
Turn on the power switch, waiting for the message:

Autoboot in 2 seconds – press RETURN or Esc. to abort and enter prom.

When the message appears – press the “Enter” or “Esc” key, in the resulting menu select “[3] Password Recovery Procedure”, then “[7] Back” and wait for the device to start.

After that, the switch will start and will not ask for the password, just delete the configuration as I wrote above or change the password to the user:

enable
configure
username admin password PASSWORD level 15
exit
copy running-config startup-config
reload

Configuring Loopback Detection on Alcatel OS-LS 6200

For example, configure Loopback Detection on the Alcatel OmniStack LS 6224 switch.

Let’s look at the current settings for Loopback Detection:

enable
show loopback-detection

Let’s go into the configuration mode, enable and specify some parameters of Loopback Detection:

configure
loopback-detection enable
loopback-detection mode src-mac-addr
loopback-detection interval 30

Turn on the client ports Loopback Detection:

interface range ethernet e1-24,g2-4
loopback-detection enable
exit

g1 I have an uplink, so I did not enable Loopback Detection on it.

Let’s configure automatic activation of the port after 3000 seconds, if it was turned off due to the loop (you can specify the value in seconds 30-86400, standard 300):

errdisable recovery interval 3000
errdisable recovery cause loopack-detection
show errdisable recovery
show errdisable interfaces

Exit the configuration mode and save the configuration:

exit
copy running-config startup-config

Configuring the Alcatel OmniStack LS 6224

By the way, console cable for Huawei and D-Link switches (for example S2326TP, DES-3200) did not approach the Alcatel OmniStack LS 6224, because it does not use the first contact.
When I assembled the working cable according to the scheme, it did not work through the Chinese USB-RS232 adapter, so I had to connect directly to the COM port of the computer.
The standard connection speed is 9600-8-N-1.

The circuit on which I assembled the cable:
1 – white-brown
2 – green
3 – white-green
4 – orange
5 – blue and white-blue
6-4 – jumper
7 – white-orange
8 – brown

Where the digits are RS-232, but I crimped the RJ45 according to the standard)

After connecting to the switch, we will switch to the mode of elevated privileges:

enable

Let’s look at the existing configuration:

show running-config
show startup-config

Now go into the configuration mode:

configure

Continue reading “Configuring the Alcatel OmniStack LS 6224”

Alcatel OmniStack LS 6200 User Guide

Size: 10.2 МБ
Format: PDF
Description: Alcatel OmniStack LS 6200 Series Switch User’s Guide

Configuring video recording to an FTP server from IP cameras and Dahua DVRs

I recently configured the next IP camera Dahua DH-IPC-HFW1320SP-W and decided to use an FTP server for recording.
Since the menu is basically the same on Dahua cameras and DVRs, the FTP entry is configured the same way.

Open the device interface, for example by typing an IP address in the browser.
Open the “Setting” tab, then “Storage” – “Destination”, in the “Path” tab, where “Motion Detection” and “Alarm”, I marked the FTP checkboxes, by the way I could choose only one thing, or “Local ( write to a memory card or HDD) “,” FTP “or” NAS “. After the selection, click “Save” to save the changes.

Now go to the tab “FTP”, tick the “Enable” and specify the connection parameters in “Server Address”, “Username”, “Password” and press “Save” to save the changes.

After that, the device began to write video to the FTP server in mp4 format, however it was impossible to view the history entries via the mobile application and the camera interface.
Files on FTP are sorted into folders by date and time, as a variant of the video can be viewed through any FTP client from a computer or phone, if the camera writes for motion detection, accordingly if there is no motion detection, then there will be no folders and records.

Required! In the “Storage” – “Record Control” menu, you need to select “Stop” in “Disk Full”, if “Overwrite” is selected, then after restarting the camera, in my case, all records from the FTP server were deleted.

If the FTP server is running on Linux, you can, for example, add to Cron a command that will delete the directory older than 30 days so that the disk does not overflow:

find /srv/ftp/ipcam/SNCAM/ -type d -mtime +30 -exec rm -rfv {} \; >> /srv/ftp/ipcam/remove.log

Removing exploits from Ubiquiti devices

Once I noticed the spread of the virus/exploit on the network with Ubiquiti devices. Exploit using a vulnerability in older versions of firmware copied itself to other devices and from them attacked the following.