RE: VERY strange 2621 behavior [7:6636]

2001-06-02 Thread Chuck Larrieu

Might want to take a look at this link. courtesy of Adam Quiggle, who used
to spend a lot of time here.

http://home.nc.rr.com/quiggle/ConfigReg.xls

CCIE candidates, anyway, should be familiar with the config register values.
Manipulating them can provide one part of a router security  program.

Chuck


-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John
Neiberger
Sent:   Friday, June 01, 2001 7:23 AM
To: [EMAIL PROTECTED]
Subject:RE: VERY strange 2621 behavior [7:6636]

I discovered that somehow the configuration register was changed to
0x3922!  What the heck does that do??  I was watching the person who
initially booted the router and he did absolutely nothing that would
alter the configuration register;  it just seems to have done it during
a reload because we didn't notice this odd behavior until we did a warm
reboot.

Very bizarre.  But, since I changed the config register back to 0x2102
it seems to be working normally.  I can think of nothing that would
cause an unexpected configuration register change like that.  Oh well,
another weird issue in the books.  I think I'll be upgrading the IOS on
that pretty quickly!

John

 Daniel Cotts  5/31/01 12:36:51 PM 
Time to change your terminal emulation software to different speeds
until
you find the correct one.
I have heard that with Hyperterminal that you need to completely close
down
the application for each speed change. Others may comment from
experience.
BTW Do you have a SmartNet service contract on that box?

 -Original Message-
 From: John Neiberger [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, May 31, 2001 12:41 PM
 To: [EMAIL PROTECTED]
 Subject: VERY strange 2621 behavior [7:6636]


 This is exceptionally strange

 We just received a used 2621 running 12.0(7)T.  Initially it booted
 just fine and we got a prompt.  While in priveleged mode we did a
show
 run and intertwined with the output was a portion of a message.  The
 readable portion said something about environment write to NVRAM
 failed.  We saw this three or four times.

 So, after poking around a bit we did a reload.  During the reload we
 saw the error again.  Toward the end of the reload we
 received a warning
 message that said something like this:  This action will disable
 password recovery.  Be sure that you have alternatives to password
 recovery before continuing.  Continue with operation [yes/no]? 

 I have absolutely no idea what that means, I have never seen
anything
 like it before.  We answered no, of course.  At this point the
router
 locked up and it appears that the console baud rate has changed but
so
 far we're unable to figure out what it changed to.  I've rebooted
the
 router several times to no avail.  Nothing but gibberish on
 my terminal
 screen.

 Any thoughts?  I've searched CCO and have yet to see anything about
 this behavior yet.

 Thanks,
 John
 Report misconduct
 and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6889t=6636
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VERY strange 2621 behavior [7:6636]

2001-06-02 Thread Brian

Rule 1:Don't use hyperterminal

See cws.internet.com or any other shareware/freeware site for apps that
can do a break properly and do not suck.

Brian Sonic Whalen
Success = Preparation + Opportunity


On Thu, 31 May 2001, Daniel Cotts wrote:

 Time to change your terminal emulation software to different speeds until
 you find the correct one.
 I have heard that with Hyperterminal that you need to completely close down
 the application for each speed change. Others may comment from experience.
 BTW Do you have a SmartNet service contract on that box?

  -Original Message-
  From: John Neiberger [mailto:[EMAIL PROTECTED]]
  Sent: Thursday, May 31, 2001 12:41 PM
  To: [EMAIL PROTECTED]
  Subject: VERY strange 2621 behavior [7:6636]
 
 
  This is exceptionally strange
 
  We just received a used 2621 running 12.0(7)T.  Initially it booted
  just fine and we got a prompt.  While in priveleged mode we did a show
  run and intertwined with the output was a portion of a message.  The
  readable portion said something about environment write to NVRAM
  failed.  We saw this three or four times.
 
  So, after poking around a bit we did a reload.  During the reload we
  saw the error again.  Toward the end of the reload we
  received a warning
  message that said something like this:  This action will disable
  password recovery.  Be sure that you have alternatives to password
  recovery before continuing.  Continue with operation [yes/no]? 
 
  I have absolutely no idea what that means, I have never seen anything
  like it before.  We answered no, of course.  At this point the router
  locked up and it appears that the console baud rate has changed but so
  far we're unable to figure out what it changed to.  I've rebooted the
  router several times to no avail.  Nothing but gibberish on
  my terminal
  screen.
 
  Any thoughts?  I've searched CCO and have yet to see anything about
  this behavior yet.
 
  Thanks,
  John
  Report misconduct
  and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6935t=6636
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VERY strange 2621 behavior [7:6636]

2001-06-01 Thread John Neiberger

I discovered that somehow the configuration register was changed to
0x3922!  What the heck does that do??  I was watching the person who
initially booted the router and he did absolutely nothing that would
alter the configuration register;  it just seems to have done it during
a reload because we didn't notice this odd behavior until we did a warm
reboot.

Very bizarre.  But, since I changed the config register back to 0x2102
it seems to be working normally.  I can think of nothing that would
cause an unexpected configuration register change like that.  Oh well,
another weird issue in the books.  I think I'll be upgrading the IOS on
that pretty quickly!

John

 Daniel Cotts  5/31/01 12:36:51 PM 
Time to change your terminal emulation software to different speeds
until
you find the correct one.
I have heard that with Hyperterminal that you need to completely close
down
the application for each speed change. Others may comment from
experience.
BTW Do you have a SmartNet service contract on that box?

 -Original Message-
 From: John Neiberger [mailto:[EMAIL PROTECTED]] 
 Sent: Thursday, May 31, 2001 12:41 PM
 To: [EMAIL PROTECTED] 
 Subject: VERY strange 2621 behavior [7:6636]
 
 
 This is exceptionally strange 
 
 We just received a used 2621 running 12.0(7)T.  Initially it booted
 just fine and we got a prompt.  While in priveleged mode we did a
show
 run and intertwined with the output was a portion of a message.  The
 readable portion said something about environment write to NVRAM
 failed.  We saw this three or four times.
 
 So, after poking around a bit we did a reload.  During the reload we
 saw the error again.  Toward the end of the reload we 
 received a warning
 message that said something like this:  This action will disable
 password recovery.  Be sure that you have alternatives to password
 recovery before continuing.  Continue with operation [yes/no]? 
 
 I have absolutely no idea what that means, I have never seen
anything
 like it before.  We answered no, of course.  At this point the
router
 locked up and it appears that the console baud rate has changed but
so
 far we're unable to figure out what it changed to.  I've rebooted
the
 router several times to no avail.  Nothing but gibberish on 
 my terminal
 screen.
 
 Any thoughts?  I've searched CCO and have yet to see anything about
 this behavior yet.
 
 Thanks,
 John
 Report misconduct 
 and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6763t=6636
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VERY strange 2621 behavior [7:6636]

2001-05-31 Thread Daniel Cotts

Time to change your terminal emulation software to different speeds until
you find the correct one.
I have heard that with Hyperterminal that you need to completely close down
the application for each speed change. Others may comment from experience.
BTW Do you have a SmartNet service contract on that box?

 -Original Message-
 From: John Neiberger [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, May 31, 2001 12:41 PM
 To: [EMAIL PROTECTED]
 Subject: VERY strange 2621 behavior [7:6636]
 
 
 This is exceptionally strange 
 
 We just received a used 2621 running 12.0(7)T.  Initially it booted
 just fine and we got a prompt.  While in priveleged mode we did a show
 run and intertwined with the output was a portion of a message.  The
 readable portion said something about environment write to NVRAM
 failed.  We saw this three or four times.
 
 So, after poking around a bit we did a reload.  During the reload we
 saw the error again.  Toward the end of the reload we 
 received a warning
 message that said something like this:  This action will disable
 password recovery.  Be sure that you have alternatives to password
 recovery before continuing.  Continue with operation [yes/no]? 
 
 I have absolutely no idea what that means, I have never seen anything
 like it before.  We answered no, of course.  At this point the router
 locked up and it appears that the console baud rate has changed but so
 far we're unable to figure out what it changed to.  I've rebooted the
 router several times to no avail.  Nothing but gibberish on 
 my terminal
 screen.
 
 Any thoughts?  I've searched CCO and have yet to see anything about
 this behavior yet.
 
 Thanks,
 John
 Report misconduct 
 and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6644t=6636
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]