Monday, 30 July 2018

Switch command

CORE01.PUB.DAL01> user mode
CORE01.PUB.DAL01# privileged mode. In privileged mode, you can show anything.
CORE01.PUB.DAL01(config)# global configuration mode by typing config terminal (or config t). From here, you can change global parameters.
CORE01.PUB.DAL01(config-if)# interface configuration mode by typing interface port1.0.1

#############################################################
##save the configuration that is currently being modified (in RAM),  
##also known as the running-configuration, to the nonvolatile RAM (NVRAM).
##If the power is lost, the NVRAM will preserve this configuration.

copy running-configuration startup-configuration
wr mem

 #############################################################
CORE01.PUB.DAL01#show run | i user
username admin privilege 15 password 8 <someHashedPassword>

Change the password from configuration mode:
CORE01.PUB.DAL01>en
CORE01.PUB.DAL01#conf t
CORE01.PUB.DAL01(config)#username admin privilege 15 password <new password>
CORE01.PUB.DAL01(config)#exit
CORE01.PUB.DAL01#wr mem

#############################################################
CORE01.PUB.DAL01#terminal length 0
CORE01.PUB.DAL01#show run

#############################################################
##to see interface status (up/down), Protocol status on the interface, Utilization, Errors, MTU
CORE01.PUB.DAL01#terminal length 0
CORE01.PUB.DAL01#show interface status
Port       Name               Status            Vlan Duplex   Speed Type
port1.0.1  #Server FTP#       connected           88 a-full  a-1000 1000BASE-T

CORE01.PUB.DAL01#show interface brief
Interface             Status          Protocol
port1.0.1             admin up        running

CORE01.PUB.DAL01#show interface
Interface port1.0.1
  Scope: both
  Link is UP, administrative state is UP
  Thrash-limiting
    Status Not Detected, Action learn-disable, Timeout 1(s)
  Hardware is Ethernet, address is ecad.6cad.46e5
  Description: #Server FTP#
  index 5001 metric 1 mru 1500
  current duplex full, current speed 1000, current polarity mdi
  configured duplex auto, configured speed auto, configured polarity auto
  <UP,BROADCAST,RUNNING,MULTICAST>
  SNMP link-status traps: Disabled
    input packets 39687961322, bytes 42484636452052, dropped 0, multicast packets 32
    output packets 23903668488, bytes 10073459886452, multicast packets 26146261, broadcast packets 319810482
    input average rate : 30 seconds 70.13 Mbps, 5 minutes 83.95 Mbps
    output average rate: 30 seconds 5.64 Mbps, 5 minutes 6.10 Mbps
    input peak rate 407.97 Mbps at 2018/07/23 11:31:04
    output peak rate 584.86 Mbps at 2018/06/02 16:55:53
  Time since last state change: 37 days 17:19:50

CORE01.PUB.DAL01#show interface port1.0.1
Interface port1.0.1
  Scope: both
  Link is UP, administrative state is UP
  Thrash-limiting
    Status Not Detected, Action learn-disable, Timeout 1(s)
  Hardware is Ethernet, address is ecad.6cad.46e5
  Description: #Server FTP#
  index 5001 metric 1 mru 1500
  current duplex full, current speed 1000, current polarity mdi
  configured duplex auto, configured speed auto, configured polarity auto
  <UP,BROADCAST,RUNNING,MULTICAST>
  SNMP link-status traps: Disabled
    input packets 39687961322, bytes 42484636452052, dropped 0, multicast packets 32
    output packets 23903668488, bytes 10073459886452, multicast packets 26146261, broadcast packets 319810482
    input average rate : 30 seconds 70.13 Mbps, 5 minutes 83.95 Mbps
    output average rate: 30 seconds 5.64 Mbps, 5 minutes 6.10 Mbps
    input peak rate 407.97 Mbps at 2018/07/23 11:31:04
    output peak rate 584.86 Mbps at 2018/06/02 16:55:53
  Time since last state change: 37 days 17:19:50

#############################################
##provides a quick status of the interfaces on the router, 
##including their IP address, Layer 2 status, and Layer 3 status.
CORE01.PUB.DAL01#show ip interface
CORE01.PUB.DAL01#show ip interface brief
Interface             IP-Address         Status          Protocol
lo                       unassigned         admin up        running
vlan1                 10.0.0.1/24         admin up        running
vlan2                 unassigned         admin up        running

#############################################
##brings up interface
CORE01.PUB.DAL01(config-if)#no shutdown
##brings down interface
CORE01.PUB.DAL01(config-if)#shutdown

#############################################
##10.0.0.1 is firewall
##10.0.0.3 is other project firewall
##in show run:
###ip route 0.0.0.0/0 10.0.0.1
###ip route 10.200.1.0/24 10.0.0.18

CORE01.PUB.DAL01#show ip route
Codes: C - connected, S - static, R - RIP, B - BGP
       O - OSPF, D - DHCP, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       * - candidate default

Gateway of last resort is 10.0.0.1 to network 0.0.0.0

S*      0.0.0.0/0 [1/0] via 10.0.0.1, vlan1
C       10.0.0.0/24 is directly connected, vlan1
S       10.200.1.0/24 [1/0] via 10.0.0.3, vlan1

#############################################
CORE01.PUB.DAL01#show version
Cisco IOS Software, C2600 Software (C2600-ADVIPSERVICESK9-M),
Version 12.3(4)T4,  RELEASE SOFTWARE (fc2)

#############################################
Server_SW#show vlan all
VLAN ID    Name            Type       State           Member ports
                                         (u)-Untagged, (t)-Tagged
====================================
1                  default          STATIC   ACTIVE   sa1(u) sa2(u) po1(t) po2(u)
                                                                           port1.0.1(u) port1.0.2(u) port1.0.3(u)
2                  vlan2            STATIC   ACTIVE   port1.0.4(t)

#############################################
#In core switch, check mac address with IP.
CORE01.PUB.DAL01#show arp | i 10.10.49.95
10.10.49.95     3c18.a050.ef4a  vlan49       po2         dynamic

#In Distribution switch, check the port number, shutdown the port.
BlkD_ES94# show bridge address-table address 3c18.a050.ef4a
Aging time is 300 sec

  Vlan        Mac Address       Port     Type
-------- --------------------- ------ ----------
   49      3c:18:a0:50:ef:4a    g11    dynamic

#############################################
In Server switch
Server_SW#show run int port1.0.48
!
interface port1.0.48
 description * DS*
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 1,36-37
 switchport trunk native vlan none
 spanning-tree portfast
!
#############################################

Wednesday, 25 July 2018

VMware OVF tool-How to convert OVA to OVF

ovftool.exe "C:\Users\stanley.chong\Desktop\HoneyDrive_3_Royal_Jelly.ova" "C:\sample_data\HoneyDrive_3_Royal_Jelly.ovf"








Preparing to Import the VM

Once the export is complete you can try deploy the OVA to ESXi but you will receive the following error, "The OVF package requires unsupported hardware. Details: Line 25: Unsupported hardware family 'virtualbox-2.2'.".

 

 

 

 

 

 

Make a backup copy of the OVF file and then open the OVF file with a text editor such as notepad++.
Change the following line:
 
<vssd:VirtualSystemType>virtualbox-2.2</vssd:VirtualSystemType>

to
 
<vssd:VirtualSystemType>vmx-07</vssd:VirtualSystemType>

After you have made this change, the checksum in the mf file will no longer match. To fix this error, you can just remove the line that references the OVF file. For reference, my file looked like this:
SHA1 (MyVM.ovf)= 15d2f22b24990179e414df556fe4a2e4697caee7

Import the VM

At this point you can try to attach the VM to your VMware box. Open the VMware vSphere client and connect to your host machine. Now choose file "Deploy OVF Template". Select the OVF file you just edited and click next. Make sure to select the OVF file, not the original OVA file.
At this point, you may receive a hardware error: "The OVF package requires unsupported hardware. Details: Line 74: OVF hardware element 'ResourceType' with instance ID '6'. No support for the virtual hardware device type '35'."


To fix this error, open the OVF file and remove the <item> element at the line # in question. In this case it was the sound card:
    <Item>
        <rasd:AddressOnParent>3</rasd:AddressOnParent>
        <rasd:AutomaticAllocation>false</rasd:AutomaticAllocation>
        <rasd:Caption>sound</rasd:Caption>
        <rasd:Description>Sound Card</rasd:Description>
        <rasd:ElementName>sound</rasd:ElementName>
        <rasd:InstanceID>6</rasd:InstanceID>
        <rasd:ResourceSubType>ensoniq1371</rasd:ResourceSubType>
        <rasd:ResourceType>35</rasd:ResourceType>
    </Item>
After you have made these adjustments to the OVF, try to load the file again. If you happened to leave the select OVF window open, you may not be able to select the OVF file from the browse or the drop down list selector. Just cancel and try again.

Monday, 9 July 2018

Command Prompt and AD Troubleshoot

Network Location Test - List domain controllers(DCs), Query the status of trust.

##AD Server

1. Verify DCs in a domain
In this example, the /dclist parameter is used to create a list of domain controllers of the domain fourthcoffee.com
nltest /dclist:fourthcoffee
Output displays similar to the following:
Get list of DCs in domain 'ntdev' from '\\fourthcoffee-dc-01'.
    fourthcoffee-dc-01.forthcoffee.com       [DS] Site: Rome
    fourthcoffee-dc-03.forthcoffee.com       [DS] Site: LasVegas
    fourthcoffee-dc-04.forthcoffee.com       [DS] Site: LA
    fourthcoffee-dc-09.forthcoffee.com       [DS] Site: NYC
    fourthcoffee-dc-12.forthcoffee.com       [DS] Site: Paris
    fourthcoffee-dc-24.forthcoffee.com       [DS] Site: Chattaroy
    fourthcoffee-dc-32.forthcoffee.com       [DS] Site: Haifa
    fourthcoffee-dc-99.forthcoffee.com       [DS] Site: Redmond
    fourthcoffee-dc-63.forthcoffee.com [PDC] [DS] Site: London
The command completed successfully

2. Show trust relationships for a domain
In this example, you want to view the established trust relationships for your domain. At the command prompt, type:
nltest /domain_trusts
Output displays similar to the following:
List of domain trusts:
    0: forthcoffee forthcoffee.com (NT 5) (Forest Tree Root) (Primary Domain)
The command completed successfully
This example shows that one domain is trusting itself and no others.

3. check FSMO roles
Forest Wide Roles: Schema Master, Domain naming master
Domain Wide Roles: PDC, RID pool manager, Infrastructure Master

netdom query fsmo












4. check user password expires
#/domain = This switch forces net user to execute on the current domain controller instead of the local computer.

net user [user] /domain









##########################################################
System Information:
1. Click Start and Run.
2. Type msinfo32 and press Enter.



























Get Serial Number:
C:\WINDOWS\system32>wmic bios get serialnumber


Get Memory Info:
C:\WINDOWS\system32>wmic MemoryChip get BankLabel, Capacity, MemoryType, TypeDetail, Speed, DeviceLocator

C:\WINDOWS\system32>wmic MemoryChip list full


Collect ping result in txt:
C:\Users\Administrator>ping 8.8.8.8 -t > c:\pingdns.txt

###########################################################
Top Active Directory Tools:
https://www.ittsystems.com/best-free-active-directory-tools/

AD Info - Active Directory Reporting Tool:
http://www.cjwdev.com/Software/ADReportingTool/Info.html




WiseSoft Bulk AD Users:
http://www.wisesoft.co.uk/software/bulkadusers/default.aspx


#######################################################
To show user connect to which DC:
C:\WINDOWS\system32>echo %logonserver%
\\DC001
 
C:\WINDOWS\system32>set L
LOCALAPPDATA=C:\Users\mike.choo\AppData\Local
LOGONSERVER=\\DC001

#######################################################

To show users in which OU:















#######################################################

Delete cached temporarily credentials for a network share:

net use    #view current network connection

net use * /d       #delete all network authentication

net use \\10.10.10.10\folder /u:DOMAIN\USER password

klist purge      #remove the Kerberos authentication ticket 
 
#######################################################
 
In windows 10, to enable offline files, click Enable offline files

































To disable offline files, click Disable offline files in the Offline Files window.






































#######################################################
Generating HTML Reports: All GPOs
 
In PS: PS C:\> Get-GPOReport -All -ReportType Html -Path "C:\All-GPOs.html"
 
In CMD: C:\>gpresult /h gpo.htm

#######################################################
Search AD powershell for mobile:

Search by user: Get-ADUser michael.wong -Properties mobile

Search by mobile: 
get-aduser -filter {Mobile -like "+60 123456789"} -prop DisplayName | select SamAccountName

get-aduser -filter {Mobile -like "*123456789"} -prop DisplayName | select SamAccountName

#######################################################
Check Domain and Forest Functional Level:

Method 1:
To find the Domain Functional Level:
Get-ADDomain | fl Name,DomainMode






To find the Forest Functional Level:
Get-ADForest | fl Name,ForestMode






Method 2:
1) “Active Directory Domains and Trusts” or “Active Directory Users and Computers“
2) Right-click the root domain, then select “Properties“.