[afnog] DHCP configuration on cisco router 2600 series

[Antonio Godinho]

Common ports being exploited by the trojans and viruses are ports 139, 135,
445 and 1025 which are services on windows machines. If you are not using any
windows specific services to outside your network you can block these ports
safely. There are huge numbers of scans going on using these ports from
machines with viruses.

Cheers,

On Mon, 12 Sep 2005 13:07:35 +0200, Mark Tinka wrote
> On Saturday 10 September 2005 14:46, Paul wrote:
> > mark,
> 
> Hi Paul.
> 
> > "flash:c2600-is56i-mz.120-7.bin.bin" cisco 2611
>   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> 
> From what I can see about your IOS, this is 12.0(7), 
> feature set is IP PLUS IPSEC 56.
> 
> The only DHCP capability of this IOS is 'DHCP Proxy 
> Client'. Essentially, this feature manages a pool of IP 
> addresses available to PPP or SLIP dial-in clients 
> without a known IP address. You can designate all of the 
> router's async interfaces to use DHCP or you can turn 
> off DHCP on individual interfaces. You can also assign a 
> specific IP address to use on a given interface.
> 
> In short, your present IOS does not have support for a 
> DHCP server.
> 
> It is clear you will need to upgrade your IOS to one that 
> supports a DHCP server. In your current train, 12.0 does 
> not have support for your platform, but 12.0T does. 
> Usually, I do not recommend running T trains in 
> production environments, so the next available version 
> is 12.1. However, due to insufficient DRAM on your part, 
> you will only be able to afford the IP feature set. IP 
> PLUS or IP PLUS IPSEC 56 require at least 40MB of DRAM, 
> while you only have 32MB. The latest stable IOS for this 
> version is 12.1(27b), which only requires 24MB DRAM and 
> 8MB Flash, which you've got.
> 
> However, if you feel you still need the IP PLUS IPSEC 56 
> feature set, then 12.0(5)T1 is the IOS you need to 
> upgrade to. It requires 32MB DRAM and 8MB Flash.
> 
> Good luck,
> 
> Mark.


--
Antonio Godinho
B.Sc.,MCP, MCSE, CCNA, CCNP
Maputo
Mozambique