Routerjanitor

Mount VMware virtual disk in Windows (32 and 64bit)

2013-03-18T16:41:00.000+01:00

To mount VMware virtual disks on windows you can install the vSphere Virtual Disk Development Kit.

http://www.vmware.com/support/developer/vddk/
https://my.vmware.com/group/vmware/get-download?downloadGroup=VSP510-VDDK-510

After you download and install this you can straight-forward mount virtual disks on both windows 32 and 64bit.

Open a command prompt (run as administrator).
Go to C:\Program Files (x86)\VMware\VMware Virtual Disk Development Kit\bin\

To mount a disk stored locally on c:\temp\disk1.vmdk as the F-drive :
C:\Progra....\bin>vmware-mount F: c:\temp\disk1.vmdk

To unmount the same disk again :
C:\Progra....\bin>vmware-mount F: /d

To check what volumes are mounted :
C:\Progra....\bin>vmware-mount

If you want to see all options just run vmware-mount /?

The following limitations apply when mounting virtual disks:

You cannot mount virtual disks that are in use by a running or suspended virtual machine. You can mount disks from a powered off virtual machine, disks not associated with a virtual machine, or base disks when a Windows virtual machine is running off a snapshot (read-only).
On Windows virtual machines you can mount previous snapshots read-only. On Linux virtual machines you cannot mount previous snapshots.
If you specify a virtual disk with snapshots on a powered off virtual machine, VixMntapi locates and mounts the last snapshot in the disk chain. While a disk is mounted, do not revert to a previous snapshot using another VMware interface – this would make it impossible to unmount the partition.
You cannot mount virtual disk if any of its .vmdk files are encrypted, compressed, or read-only. However you can change these attributes and then mount the virtual disk.
With Windows, you must mount virtual disks on drive D: or greater, and choose a drive letter not in use.
You can mount Windows virtual disks on Windows hosts (with an NTFS volume) or Linux virtual disks on Linux hosts. Cross-mounting is restricted but may be allowed for cross-formatted file systems.

Read more on this in the VMware vSphere 5.1 Documentation Cente http://pubs.vmware.com/vsphere-51/index.jsp

DMVPN and IPSEC terminated on the same router. (GNS3 example)

2013-03-08T16:30:00.000+01:00

On Cisco routers using ISAKMP profiles you can terminate tunnels with a different Phase1 negotiation on the same router.

In this example we have a DMVPN spoke that terminates an IPSEC tunnel for another remote office. If we would do this without using profiles, the remote ipsec tunnel terminating on our router would match the DMVPN 0.0.0.0 and fail the Phase1 negotiation.
Having the isakmp profile REMOTEP2P with a match statement forces the router to use the correct keyring and process the Phase1 negotiation correctly.

crypto keyring dmvpnspokes
pre-shared-key address 0.0.0.0 0.0.0.0 key toeters
crypto keyring REMOTEP2P
pre-shared-key address 51.171.183.91 key 1234567890
!
crypto isakmp policy 5
encr aes 256
authentication pre-share
group 5
!
crypto isakmp policy 10
encr aes 256
authentication pre-share
group 2
!
crypto isakmp profile DMVPN
keyring dmvpnspokes
match identity address 0.0.0.0
crypto isakmp profile REMOTEP2P
keyring REMOTEP2P
match identity address 51.171.183.91 255.255.255.255
!
crypto ipsec transform-set DMVPN esp-aes 256 esp-sha-hmac
mode transport
crypto ipsec transform-set CLIENT esp-aes 256 esp-sha-hmac
crypto ipsec transform-set AES128_SHA esp-aes esp-sha-hmac
crypto ipsec df-bit clear
!
crypto ipsec profile DMVPN
set transform-set DMVPN
set isakmp-profile DMVPN
!
crypto map vpnmap 9 ipsec-isakmp
description REMOTEP2P
set peer 51.171.183.91
set transform-set AES128_SHA
match address 115
!
interface FastEthernet1/0
description OUTSIDE
ip address 94.78.29.66 255.255.255.248
crypto map vpnmap

I included a full GNS3 example using GNS3 version 0.8.3.1 and IOS version c7200-advipservicesk9-mz.124-24.T6 The GNS3 example can be downloaded here. (7zip format) IOS download is not available from this blog.

Windows Server 2008 R2 Backup Exec 2012 VSS erorrs

2013-02-23T15:50:00.002+01:00

On a clean install file server, with nothing else non MS then Backup exec we kept having issues with backup. The server would backup all files but not system state and throw up Backup Exec 2012 Error Code : 80042306.
Backup - Snapshot Technology: Initialization failure on: "\\SERVERNAME\System?State". Snapshot technology used: Microsoft Volume Shadow Copy Service (VSS).
V-79-10000-11217 - VSS Snapshot error. The Microsoft Volume Shadow Copy Service (VSS) snapshot failed. Make sure that all provider services and tasks are running. Check the Windows Event Viewer for details.

After alot of reading, checking event log, setting VHD service to start on startup etc... Nothing worked, it would sometimes backup once after a reboot, then throw the same error again.

Finding following post about Tivoli having the same issue http://www-01.ibm.com/support/docview.wss?uid=swg21502685 and a few others suggesting giving the System Reserved volume a drive letter (forcing it to mount every boot). I decided to go with the second option and set a drive letter for the System Reserved volume, this won't set automount on the server and still have the desired effect. After a reboot Backup Exec hasn't missed a beat. Looks like it's a Microsoft bug with VSS.

To set a drive letter for the System Reserved Volume, go to Administrative Tools, Computer Management, Disk Management.


Right Click the 100MB Volume and Add a drive letter.

The System Reserved Volume should be 100MB and shouldn't have a drive letter assigned on a fresh install. Right click it and select Change Drive Letter and Paths... Assign any drive letter.

This is what worked for us on a Dell Poweredge R310 running Microsoft Windows Server 2008 R2 connected to a Dell Powervault 124T Autoloader.

You should also make sure you're using the correct VSS provider for your Backup Exec job. You can change this in Backup Options, Advanced Open File. This should be set to System - Use Microsoft Software Shadow Copy Provider.

Advanced Open File : Snapshot options.

Windows Phone - Nokia Lumia 920 - battery life

2013-01-10T13:59:00.000+01:00

After using the phone for a month, and not being constantly fiddling with it I have to say I'm pretty impressed with battery life. First weeks it wasn't very good. Which was to be expected, LiPo batteries have to be charged a few times before reaching full performance and I was constantly downloading, installing, trying things ...

On my phone, bluetooth and WiFi is always on, my business mail is on push, personal mail is downloaded manually. Only thing turned off is NFC as allot of people reported this to drain the battery very quickly.

A typical day in the office the phone will last me almost 2 days. Leaving for work at 8, check mails, a few phone calls, bluetooth carkit. Checking the TV Guide at home, facebook/twitter. Not charging it over night battery will only go down to 20% by 6u30pm the next day. Which is reasonable for this type of phone.

I do however always quit applications with the <- button and not leave them running by exiting with the windows button.

Still impressed with the feel and build quality, just waiting for Microsoft to come up with that VPN solution (and a Microsoft made Remote Desktop client).

Windows Phone 8 - WPA2-Enterprise issues

2013-01-03T10:13:00.001+01:00

Just found another issue with WPA2 Enterprise. (in this case using (PEAP) EAP-MSCHAPv2 for authentication)

If the radius server certificate has expired, setting the off switch for validating the server certificate won't do you much good. It still won't connect. This is not really "unexpected" behavior, as the server certificate should be updated, but it's not unseen that self signed certificates are installed once and forgotten about.

Most devices (including Windows XP, Vista, 7, 8) won't check the certificate date when "validate certificate" is off.

So as far as an issue this is, it's more your network admins then your phones... But it gives me the feeling that the WiFi implementation on Windows Phone 8 has not been thought out properly.

Nokia Lumia 920 - Windows Phone 8 griefs.

2012-12-28T16:02:00.002+01:00

RANT { : Just found out that EAP-TLS is not supported for Wifi.

For those that don't know what this is, it's the most secure and most used authentication and encryption protocol for Wifi in the enterprise. My own fault for not looking it up of course, but who'd have thought .... It has been supported by Windows CE and Windows Mobile for ages.
(Small update my side, apparently EAP-TLS is not implemented that much anymore. Enterprises today are favoring EAP-MSCHAPv2 (PEAP) But if your wireless setup was done 2005 or earlier there's a big chance you're stuck with EAP-TLS)

If only VPN would be supported I would have a workaround to get on our corporate network.... (Think about that one Microsoft !)

No big deal you would say, as most people only use the phone for email / web based services which you don't need the internal network for, but for our user base we have implemented the same wireless standard across the globe to cut costs for roaming data. Which specifically in Europe is a big deal, if you travel 100km you can be in another country paying through the nose for data.
}RANT OVER

Microsoft / Nokia is releasing an update to Windows Phone 8 later in February, so I hope there will be a fix for the Wifi too. But couldn't find anywhere that could confirm.

On a good note, I received the Zagg Invisibleshield full coverage for the phone and it fits nicely. And as you can see on the photo's, it's more or less invisible indeed.

It gives the phone a bit more a "rubbery" feel and the back/side shields make it slide less on desks etc. Not bad at all. Applying it was easy enough with the instructions.

Overall I still like the phone, but Microsoft dropped the ball on some of the features ! I know it's a first release (well, not really, Windows Phone 7 and 7.5 lacked those features too). So anyone interested in this phone, if you need to get on your corporate network, check with the help desk what authentication protocol is used for Wireless before you buy. The phone itself is awesome, fast, gorgeous.. (even the yellow one ;-))

Nokia Lumia 920 - 3 weeks in.

2012-12-24T16:00:00.000+01:00

Well,

got the Nokia for about 3 weeks now and first impressions are quite good. Sound/call quality is miles better then the iPhone I had.
I actually like the bigger display and the extra weight doesn't bother me at all.
(well, it's just 185grams). Managed to injure my shoulder, so have not used it for work the last weeks.

Windows Phone 8 is absolutely gorgeous. I really like it. There's only a few things missing...

1. NO VPN ?
- Come on Microsoft, get this sorted.
2. Volume.
- I'd like to keep my ringtone volume separate from the video stuff please, now I have to keep remembering turning the volume back up after listening music or watching a video, makes no sense at all.
3. No Bluetooth network ?
OK, I know it's got Wifi Sharing, wich is awesome, but my car's car kit has bluetooth, not Wifi.
According to the information there are no network based bluetooth profiles available (no DUN nor PAN)

I cope with the no VPN by taking the iPad with me if I know something for work can come up.
The most annoying thing would be the volume control for me.

Then there are some companies like Citrix that should really start making an app for Windows Phone...

I'll be back at work later this week so will get some experience with battery life etc...

Nokia Lumia 920 day minus one....

2012-12-04T23:18:00.001+01:00

My brand spanking new Lumia 920 arrived at our French office today.

Of course I managed to get injured biking this weekend and the Phone is 120km away...

All I have is a picture, thanks guys...

Can't wait to start playing with it. If all's good I should have it at home tomorrow.
Really curious about Windows Phone 8.

Add your own Domain to Outlook.com (windows live mail)

2012-11-22T11:28:00.004+01:00

I quite liked the new look of "Outlook.com", so decided to add my own domain to this service. If you are doing this for personal use or a photography club, soccer club etc... this functionality is free and is called "Custom Domains" in Microsoft Outlook.com (live mail).

First make sure you have access to the DNS settings for your domain before you try this. Then go to http://domains.live.com where you can add your domain name.

Choose the option "Custom Domains"

Insert your domain name here, then you have the option to immediately set it up for Mail or you can choose to add it later. It doesn't really matter. If this is an all new domain just go for the option to already setup mail for your domain.

Review if you typed the domain correctly and read and Accept the Terms.

On the next page Microsoft will ask you to provide proof of ownership of your domain. For an existing domain with working mail today go to "Prove domain ownership (optional)" Skip the Mail setup step. In your domain DNS panel you will have to add a TXT record or an MX record for Microsoft to be able to verify your domain. Again if this is a new domain with no currently active mail, you can go right ahead and just add the "Mail setup" MX record.

Example of adding a TXT record for your domain. My DNS provider is easily.co.uk. For instructions how to do this with your domain / DNS provider please refer to their help section.

After you have done this come back the next day and click the Refresh button. After this you should be OK to setup your required mail addresses.

Important notes :

There is no "catch all" option for Custom Domains. This might be important if you are moving an existing domain !
You can't set aliases referring to your own domain. "user@domain.com" can't have "sales@domain.com" as an alias. You can link accounts so you can switch between "aliases" as a workaround.
Did I already say there's no frigging "catch all" !!!

So as a result i'm not actively using this domain yet for email, I have to find out which email subscriptions I have done without specifying the account in my previous system. (as I was lazy and setup a catch all for that and just subscribed to services as "servicename@domain.com" so I could easily see who was selling my email address...) Let's hope MS fixes this soonish. As my Windows Phone 8 is on order and I'd love to use a Outlook.com account with that one. (Yes I know I can pop download my old email in Outlook.com but I refuse to do such workarounds when all Microsoft has to do is allow a catch all account for a domain owners !!!!)

Java vurnerabilities 2012-August-30

2012-08-31T08:26:00.001+02:00

Update desktops facing internet asap, more info on Oracle link below.

http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html

Dual boot Windows XP and Windows 8 from a Virtual Hard Drive

2012-08-27T19:37:00.000+02:00

Since Windows 8 Consumer Preview came out I wanted to test it on an older PC without going through the hassle of reserving a whole partition to it. This guide is to install a fresh Windows 8 copy on a Virtual Hard Drive. Check if you have enough free capacity on one of your hard drives. In my example I like to use 60Gb so I can install and test some additional programs in Windows 8.

First you'll have to download the ISO from the Microsoft Website and write down the product key. Then use the Windows 7 USB/DVD Download Tool ( http://www.microsoftstore.com ) to make a bootable USB thumb drive or DVD. When this is done boot your PC from USB or DVD.

The Windows Installation process will begin :
- choose location and language settings
- "install now"
- "enter product key"
- "accept license terms"
- "Custom: Install Windows Only"
Do not choose a disk to install to but hold shift and push F10

This will come up with a command prompt, here you launch diskpart (info here ) :

X:\Sources>diskpart
(then we will list the available volumes)
DISKPART>LIST VOLUME

  
  Volume ###  Ltr  Label        Fs     Type              Size     Status      Info    
  ----------  ---  -----------  -----  ----------------  -------  ----------  --------
  Volume 0     D   Label1       NTFS   Partition          480 GB  Healthy
  Volume 1     G   Label2       FAT32  Partition          648 GB  Failed
  Volume 2     H   Label3       NTFS   Partition          998 GB  Healthy
  Volume 3     I                NTFS   Partition           12 GB  Healthy
  Volume 4     F                CDFS   CD-ROM                0 B

Now check the drive letter for the partition where you wanted to create your virtual hard drive, this might not be the same as in Windows XP, be carefull. Then we'll create the new VHD. In this example we'll create a 60Gb Volume into an existing subdirectory on the D partition. (If you want to use a subdirectory and forgot to create it you can still exit diskpart and do "D:" "md directoryname". Then start diskpart again.

DISKPART>CREATE VDISK FILE="D:\VHD\Win8_32.vhd" Maximum=60000

Wait for Diskpart to create the new disk, then we'll mount the disk and create a partition.

DISKPART>ATTACH VDISK
DISKPART>create partition primary

We'll now list the volumes again and will see the additional disk :

DISKPART>LIST VOLUME
You should now see an extra volume :

  
  Volume ###  Ltr  Label        Fs     Type              Size     Status      Info    
  ----------  ---  -----------  -----  ----------------  -------  ----------  --------
  Volume 0     D   Label1       NTFS   Partition          480 GB  Healthy
  Volume 1     G   Label2       FAT32  Partition          648 GB  Failed
  Volume 2     H   Label3       NTFS   Partition          998 GB  Healthy
  Volume 3     I                NTFS   Partition           12 GB  Healthy
  Volume 4     F                CDFS   CD-ROM               0 B
  Volume 5     J                RAW    Partition           58 GB

Exit diskpart and command box.
DISKPART> exit
X:\Sources>exit

Click Refresh in "Where do you want to install windows".
Select the virtual disk, ignore the error "windows cannot be installed on this disk".
Click Next.
Windows will go through the installation routine.
"Restart now". - PC will reboot and start
You will now see the new Windows 8 bootloader.
"Preparing" Windows.
"Getting devices ready"
"Getting System ready" - This might take a while depending on the speed of the system.
"Restarting your PC"
New bootloader will ignore your XP installation and go straight to Windows 8, we will fix this later.
(If you would use this same procedure starting from Windows 7 you will now be able to choose Windows 7 or Windows 8)

All the next steps are the basic new windows, pick color, pc name, account creation etc...

"Your PC will be ready in just a moment" Wich is a bit optimistic if you do this on a Pentium 4 3.4 like I did...

To get Windows XP back in the boot menu we'll need to do a few more things.
First check in Disk Management (type computer management in the start space) if your original windows XP boot drive is marked as "Active", if not right click and "Mark Partition as Active" Reboot to see if this worked.

If this doesn't work you'll have to change the Windows Bootloader to include the Windows XP entry, the easiest way is to download EasyBCD 2.1.2. (free for non commercial use) This has a GUI where you can easily add a new entry to the Boot Menu. If you don't like third party tools feel free to read up on BCDedit, http://social.technet.microsoft.com/search/en?query=bcdedit you can launch this from a command prompt (Go to C:\Windows\System32, find cmd.exe right click and run as administrator).

Windows 8 - Add Google Mail account

2012-08-27T11:32:00.003+02:00

Windows 8 (consumer preview) supports Gmail for Calendar, Email and contacts. In a few screenshots i'll show you how to easily add Gmail to your Windows 8 Email.

Open the Email Tile

Hold the Windows key and push "c" to open the settings tab on the right.
Click Settings

Open Accounts.

Add Account

Choose Google.

Fill in Email address and password.
(usually youremail@gmail.com)

Click Enforce policies.
This won't actually do anything with Google Mail.
Microsoft uses exchange sync to connect to Google.

Enhjoy your Gmail inbox from within the Email app.

Alternative way of setting up Gmail :
After choosing "Add Account", choose the option Outlook.
Fill in all your details, leave domain empty and fill in m.google.com as server.
All the other steps will be the same.

You can add multiple accounts. From any of the applications, Calendar, Contacts or Email you can choose what the account should be used for.

Contents to Sync : Email, Contacts, Calendar.

You can also choose to only download 2 weeks worth of data for Email and Calendar etc...

Upgrade Cisco Access Point to Lightweight Mode

2012-04-12T14:50:00.002+02:00

This article describes how to upgrade an autonomous Cisco Aironet Access Point to lightweight mode so you can use it with a Cisco Wireless Controller.

In my example I use a Cisco 1240 AG

First install the Upgrade Tool, you can download this from the cisco support site, under the download section of your access point. (Autonomous To Lightweight Mode Upgrade Tool)
Also make sure you download a copy of the LWAPP recovery Image file for your AP.
(Lightweight AP IOS Software) In this example : c1240-rcvk9w8-tar.123-7.JX.tar
You will need a Cisco account and possible an active maintenance contract for your AP to be able to download these.

On the controller, enable telnet access. (under management, telnet-ssh).

If using Windows Vista or Windows 7, you'll have to run the Upgrade Tool as "administrator" for it to be able to start the built in TFTP server. (otherwise you can use an alternative tftp server).
Also, you can only create an IP file with all the same model AP's.

IP File : File with the list of AP's.
Upgrade Options: (what it says on the box)

LWAPP Recovery image, point to location of the file you downloaded earlier
TFTP server IP Addr: only use this when using another TFTP server as the built in.

System IP Addr: IP Address of the system performing the upgrade (the system you installed the tool on)

Controller Details : IP Address, Username and Password for the controller.
Time Details: Set the controller time or a user specified time.

DNS Address: DNS Server

Domain : DNS Domain

Detail Logging Level: Error, Warning, Info, Debug or All. Default is info.

Example IP FILE.

AP IP Address,Username,Password,Enable password

One line per AP.

If you have all this, click START.

Message when you have selected the All AP's to DHCP Option.

AP will download recovery image from TFTP Server

Upgrade tool will initiate Reload command

AP will boot with recovery Image

AP will find controller through DNS or DHCP Option 43

AP contacts controller and starts the full image download.

Controller Status when AP is downloading complete image.

AP searches for controller again and will now finally join.

Depending on your controller setup it will also activate your standard SSID's.

Controller Status after AP has finally joined.

Upgrade Tool status after completion.

Extra steps have to be done on the controller when converting Access Points from before July 18, 2005, these access points don't have a Manufacturer Installed Certificate (MIC) and you will have to explicitely allow them to connect to your controller. More info on the Cisco website : http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html
You might want to read this anyway as there's a few limitation with some of the IOS versions of your AP's.
It might be necessary to upgrade to a newer version of the autonomous image before going to LWAPP.

For completeness the joining process in text :

*Mar 1 00:00:10.783: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Mar 1 00:00:11.035: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Mar 1 00:00:11.035: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:00:11.035: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Mar 1 00:00:11.684: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
*Mar 1 00:00:12.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar 1 00:00:12.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Mar 1 00:00:19.659: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 172.21.88.20, mask 255.255.255.0, hostname AP001f.ca28.da94

*Mar 1 00:00:29.669: status of voice_diag_test from WLC is false
*Mar 1 00:00:29.748: Logging LWAPP message to 255.255.255.255.

*Mar 1 00:00:30.814: %CDP_PD-4-POWER_OK: Full power - INJECTOR_CONFIGURED_ON_SOURCE inline power source
*Mar 1 00:00:30.852: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
*Mar 1 00:00:30.891: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 00:00:31.815: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Mar 1 00:00:31.815: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 started - CLI initiated
*Mar 1 00:00:31.857: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
Translating "CISCO-CAPWAP-CONTROLLER.domain.local"...domain server (172.21.100.180)

Translating "CISCO-LWAPP-CONTROLLER.domain.local"...domain server (172.21.100.180) [OK]

*Mar 1 00:00:40.800: %CAPWAP-5-DHCP_OPTION_43: Controller address 172.21.86.222 obtained through DHCP
wmmAC status is FALSE
*Apr 12 11:43:40.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.21.86.222 peer_port: 5246
*Apr 12 11:43:40.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Apr 12 11:43:41.505: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.21.86.222 peer_port: 5246
*Apr 12 11:43:41.506: %CAPWAP-5-SENDJOIN: sending Join Request to 172.21.86.222
*Apr 12 11:43:41.507: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
*Apr 12 11:43:41.628: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG
*Apr 12 11:43:41.755: %CAPWAP-5-CHANGED: CAPWAP changed state to UP
*Apr 12 11:43:41.835: %CAPWAP-5-JOINEDCONTROLLER: AP has joined controller CONTROLLERNAME

How to : Print safety sheets / instructions on demand

2011-12-13T16:14:00.000+01:00

Last year I had a question from one of our warehouses. They had several items where they would need to add a material safety sheet or a short one page instruction to the order.

They used to have dozens of pages ready printed and an area in the picking zone where they could pick those pages and add to the order.

Every time a product was updated the MDS would get updated or the instructions and they had to throw away the already printed pages. Also the person updating the sheets would need to contact the warehouse and inform them of the updated pages so they could print the new ones. This wasn't very efficient.

The idea came to keep the line on the picking sheet but also adding the actual path and filename in a barcode. This would enable us to print the required pages on demand.

We worked that out a bit more and agreed using one directory with all the "on demand" prints, with separate subdirectories for the type of page. So one subdirectory for MDS, one for instructions etc...
Now we needed a simple application that would print when we scanned the subdirectory and filename in a text box.
So I fired up visual basic and just used the standard functions (hey, i'm not a programmer).

Scan the file name in the box and if you've set your scanner to add Return after each scan, it will start printing.

In the settings you can set the path the app prints from. It assumes that all paths end on "\" (c:\scan\), when you want to print from subfolders, do not add "\" at the start of your barcode, but only "subfolder\filename.txt"

It will print all files that you can print from Windows Explorer by right clicking the file and choosing "Print". It will always use the default printer in Windows.

Application and source code (Visual Basic 2010) are downloadable from http://code.google.com/p/scan-to-print/downloads/list You'll need .NET 4.0 for this as this came with the fool proof settings.
It isn't exactly rocket science, but it works good enough for our needs.

Rootkit and Malware removal : Microsoft Standalone System Sweeper (Beta)

2011-12-09T15:49:00.001+01:00

If you think your PC is infected with a virus / rootkit / .... and your antivirus program cannot remove the virus, or worse prevents your PC from starting up at all, Microsoft has made available a bootable cleanup software. This software doesn't require your PC to start up into windows. You however need another (clean) PC to create a boot disk, this can be an USB flash drive or a CD.

First on the page you will be presented by the question to download the 32bit or the 64bit version of the program. This references to the architecture of the infected PC (32 or 64 bits), not to the architecture of the PC you're creating the bootable media.

On the Microsoft website choose your infected PC's architecture.

Clicking on this link will download a small program that will download the necessary files (around 250Mb) and create the bootdisk. Obviously your clean PC will need to be connected to the internet.

USB is preferred.
For CD rom you'll have to install an additional software from Microsoft called IMAP v2.0
If your infected PC doesn't support USB boot, then CD will be your choice.

After this, put the USB flash drive (or CD rom) in your infected PC and start it with the boot menu.
(F12 on Dell PC's, on other brands, Esc, F12, F11 or F8 are most used)

Choose USB boot or CD rom.

I have included a Youtube video to show and explain the next steps.

To download Microsoft Standalone System Sweeper (Beta) please visit the Microosft website at : http://connect.microsoft.com/systemsweeper

Cisco Wireless Controllers

2011-12-08T13:26:00.001+01:00

Don't forget to order your SFP modules.....

Just had 2 5508 delivered, didn't know they would deliver them without any means to connect them.

Integrated it has only 1 service port and one disabled port. The other 8 are SFP expansion ports and it doesn't come with any installed module as standard.

Lesson of the day, assumption is the mother of all f*ups.

Still no sign of an Xbox 720

2011-11-23T10:43:00.001+01:00

I've been on the market for a console for a while, but can't decide.
Playstation network is not my thing, Xbox 360 is showing its age ....
Wii is for babies...

So what would I want from a Microsoft Console, let's call it Xbox 720 for now...

-Windows 9 ? platform, so I can play the same games or communicate with the game on PC / Xbox / Phone...
(if anyone can make this happen it's going to be our friends in Redmond)
- Integrated internet browser
- Browser choice (Firefox / IE ...)
- Apps (Skype, Facebook, Twitter, ....)
- Widgets for home screen (for above apps)
- "smart mode" e.g. Device is standby but still powers the front OLED and keeps some programs like Skype running so you can quickly answer calls with a Bluetooth headset or the headset attached to the controller.
- Quiet hardware, but with sufficient cooling.
- HDMI and Displayport
- 3D
- Design : 2 models, the normal "student room" one and one that would fit right in your A/V/ cabinet.
- Anything else the Xbox 360 does today (well maybe not the RROD function)

If they can do something like this I'll buy it.
But we've still not heard of any release date from Microsoft, so it can be 2013 or even 2015...

Philips VOIP 8551 firmware upgrade

2011-11-16T09:42:00.001+01:00

Looks like Philips finally sorted the firmware upgrade for the VOIP 8551, I had some issues before after receiving the "there's an update available for Skype". It would just fail.
This is firmware version V66.36 and Skype software version 1.10.847.

Software update : Firmware V66.36 - Skype Software Version : 1.10.847.
Start Update ?

Downloading new software.
This is where it would timeout before.

Installing new software !!!!

System is being reset.

System is being started.

Searching, please wait.

For half a minute or so it sits "out of range of base", looks like the base is still starting up.

Select Langauge, then Country.

Connecting.

After this I just had to manually log in to Skype again, the device still remembered my username but had forgotten the password, so I checked the box again to save the password.

This model phone only supports firmware upgrades through the handset (it connects to the Philips website and downloads the file itself) Older models you would be able to log on to the base with a laptop and upload the file manually.

Clearing corrupt SAV definitions

2011-11-09T10:22:00.000+01:00

This Guide is for Symantec Antivirus clients. (Symantec Client Security - tested with version 10.1.x)

Stop all Symantec services (also the Defwatch service, if it's there)

Go to c:\Program Files\Common files\Symantec Shared\VirusDefs

There will be several files named for a date, eg 20060412.005 - delete all of them except the most recent.

Open the definfo.dat file in notepad, change both lines to say the name of the folder you left (the most recent) - eg 20100225.022

Open usage.dat - it will show [DATE] followed by the names of SAV components. You need to change it so all SAV components are under the name of the folder you left above, so eg:
[20100225.006]
DEFWATCH_10=1
NAVCORP_70=1
NAVCORP_70_2=1

Go to c:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5
Delete any .wdb files and .vdb files EXCEPT the most recent .vdb
Go to the \I2_LDVP.VDB subfolder and delete anyfolders inside it.
Restart the Symantec services, within a couple of minutes the definitions should update.

Cisco Site to Site VPN

2011-11-08T13:09:00.003+01:00

Using an ISR. (IOS)

Example.
Head office.
IP RANGE : 172.16.0.0/12

2nd office.
IP RANGE : 10.99.32.0/19

1.Setup IKE Phase 1.
we choose aes 256 encryption and a diffe helman group 5 key.

crypto isakmp policy 10
encr aes 256
authentication pre-share
group 5
crypto isakmp key Yourchosenkey address PublicIP2ndOffice.

2.Setup IKE Phase 2

crypto ipsec transform-set AES128_SHA esp-aes esp-sha-hmac

crypto map VPN_CRYPTO_NAME 10 ipsec-isakmp
description VPN to 2nd Office.
set peer PublicIP2ndOffice
set transform-set AES128_SHA
match address 101

Create the access list 101 to match the traffic to be encrypted.
(if you would have multiple ranges, you can add multiple lines as access-list 101)

access-list 101 permit ip 172.16.0.0 0.15.255.255 10.99.32.0 0.0.31.255

Now apply the crypto map to your outside interface.

Interface FastEthernet0/0
description Outside Interface
crypto map VPN_CRYPTO_NAME

Direct traffic for the 2nd office to the outside interface by pointing it to the next router.
(mostly the ISP router IP, same IP as the default gateway if this is an internet router too).
ip route 10.99.32.0 255.255.224.0 NextIPforInternet

This means that all traffic for 10.99.32.0/19 is now directed to the outside interface,
the crypto map on the outside interface will now see that all traffic originating from the head office's IP range 172.16.0.0/12 to 10.99.32.0/19 matches the access list 101 and as such will encrypt this traffic.

On the router in the 2nd office, do exactly the same, using the same isakmp key and a reverse access list and
set the peer address in the isakmp policy and the crypto map to the IP of the outside interface from the Head office router.

NOTE:
Of course if this is a router that directly faces the internet you would apply an INBOUND access list on the Outside interface.

This could look like this :

ip access-list extended INBOUND
............ (your previous entries)
remark VPN_TO_2ND_OFFICE
permit esp host PublicIP2ndOffice host PublicIPHeadOffice
permit udp host PublicIP2ndOffice host PublicIPHeadOffice eq isakmp
permit udp host PublicIP2ndOffice host PublicIPHeadOffice eq non500-isakmp
permit icmp host PublicIP2ndOffice host PublicIPHeadOffice echo
permit esp host PublicIPHeadOffice host PublicIP2ndOffice
permit udp host PublicIPHeadOffice host PublicIP2ndOffice eq isakmp
permit udp host PublicIPHeadOffice host PublicIP2ndOffice eq non500-isakmp
permit icmp host PublicIPHeadOffice host PublicIP2ndOffice echo

Windows Symbolic Links (Junction)

2011-11-08T10:45:00.000+01:00

I had to administer some Symantec Antivirus servers lately, and they like to download multiple copies of their virus definitions. In the standard setup of course it's installed in C:\Program Files\SAV.

With part of the virus definitions under C:\Program Files\SAV\I2_LDVP.VDB

On some of our (virtual) servers the C drivers aren't that big, so I decided moving the definition files to a dedicated disk would be advisable. Of course Symantec Antivirus Server doesn't offer that option.

Luckily Windows offers Symbolic links (Windows 2K and later). And someone wrote a tool to easily use them.

Technet article.
http://technet.microsoft.com/en-us/sysinternals/bb896768

So after disabling the necessary services that kept the files in use and cutting and pasting the I2_LDVP.VDB folder to a new V: partition, a simple
"junction C:\Program Files\SAV\I2_LDVP.VDB V:\I2_LDVP.VDB" sorted it.

(this basicly creates the symbolic link "I2_LDVP.VDB" under C:\Program Files\SAV and links it to the existing directory I2_LDVP.VDB on the V: partition.

When browsing to C:\Program Files\SAV\I2_LDVP.VDB it shows you the files and sub directories as if they were still on the C-drive.

Update:
In Windows Vista, Windows Server 2008 and later this has been included in the OS with the mklink command.
Technet article.
http://technet.microsoft.com/en-us/library/cc753194%28WS.10%29.aspx

Cisco - replace a 24 port with a 48 port switch using usb to copy the config.

2011-09-27T16:35:00.000+02:00

The newer ranges of Cisco switches now also have a USB host port where you can plug in a USB flashdrive to easily transfer config files, IOS update etc..making life much easier when doing like for like replacements or when prepping LAN upgrades.

In this example I have a 24 port switch that's installed live in a warehouse environment where we are running short of ports. We'll replace it with a 48 port model catalyst 2960S.
You'll need a copy of the old switch's config, (tftp, ftp, cattools, ....). and copy it to a flash drive using a PC. Also at this moment you'll want to change some of the config parameters directly in the file. (if going from a 24 to a 48 port model, alter the fibre uplinks to read Gi1/0/49 and 50 ... instead of Gi1/0/25 and 26, also depending on the situation you alter or remove the line "switch 1 provision ws-c2960s-24ps-l").

Remark : http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/hardware/installation/guide_stack/HIGOVERV.html

The USB Type A interface provides access to external USB FLASH devices (also known as thumb drives or USB keys).The interface supports Cisco USB flash drives with capacities from 64 MB to 1 GB. Cisco IOS software provides standard file system access to the flash device: read, write, erase, and copy, as well as the ability to format the flash device with a FAT file system.

Hook your pc to a console cable, go to enable mode and plug your FAT formatted flash drive into the switch.

Switch#
*Mar 1 00:03:17.913: %USBFLASH-5-CHANGE: usbflash0 has been inserted!

Look for the correct file on usbflash0: using the dir command.

Switch#dir usbflash0:
Directory of usbflash0:/
508 -rw- 10833 Sep 27 2011 14:22:06 +00:00 NewXXXC001.txt
2004582400 bytes total (1148256256 bytes free)

We will first copy the file on the flashdrive to the startup-config.

Switch#copy usbflash0:/NewXXXC001.txt startup-config
Destination filename [startup-config]?
10833 bytes copied in 0.257 secs (42152 bytes/sec)

Then reboot the switch.

Switch# reload
Proceed with reload? [confirm]

It might come up with a few errors, but most can be ignored, after some more changes and a 2nd reload all errors should be gone.

In this example I want all ports that previously weren't configured changed to the same config as port Gi1/0/20. Do a show run interface command to find out the current config :

XXXC001#sh run int Gi1/0/20
Building configuration...

Current configuration : 198 bytes
!
interface GigabitEthernet1/0/20
description Access_Whs_Data_102
switchport access vlan 102
switchport mode access
no logging event link-status
mls qos trust dscp
spanning-tree portfast
end

Then we want port 21-44 to get that same config. (I had configured 45-48 manually in my config file)
XXXC001#config terminal

XXXC001(config)#int range Gi1/0/21-44
XXXC001(config-if-range)# description Access_Whs_Data_102
XXXC001(config-if-range)# switchport access vlan 102
XXXC001(config-if-range)# switchport mode access
XXXC001(config-if-range)# no logging event link-status
XXXC001(config-if-range)# mls qos trust dscp
XXXC001(config-if-range)# spanning-tree portfast
%Warning: portfast should only be enabled on ports connected to a single
host. Connecting hubs, concentrators, switches, bridges, etc... to this
interface when portfast is enabled, can cause temporary bridging loops.
Use with CAUTION

%Portfast will be configured in 24 interfaces due to the range command
but will only have effect when the interfaces are in a non-trunking mode.
XXXC001(config-if-range)#end
XXXC001#
*Mar 1 00:15:05.158 UTC: %SYS-5-CONFIG_I: Configured from console by euadmin on console

Save the configuration to startup-config :
XXXC001#wr
Building configuration...
[OK]
Reboot the switch to make sure all errors are gone :
XXXC001#reload
Proceed with reload? [confirm]

*Mar 1 00:16:52.800 UTC: %SYS-5-RELOAD: Reload requested by euadmin on console. Reload reason: Reload command

The only other thing you might want to do depending of your situation is setting up the vlans manually, or if using vtp set the vtp configuration.

If you can't remember your vtp configuration, just logon to the original switch and do following commands :

XXXC001#sh vtp status
VTP Version capable             : 1 to 3
VTP version running             : 1
VTP Domain Name                 : THISVTPDOMAIN
VTP Pruning Mode                : Disabled
VTP Traps Generation            : Enabled
Device ID                       : d0c2.xxx3.bxx0
Configuration last modified by 0.0.0.0 at 0-0-00 00:00:00

Feature VLAN:
--------------
VTP Operating Mode                : Client
Maximum VLANs supported locally   : 255
Number of existing VLANs          : 5
Configuration Revision            : 0
MD5 digest                        : 0xxx 0xxx 0xxx 0xxx xxx 0xxx xxxx xxxx
                                    0xxx 0xxx 0xxx 0xxx 0xxx 0xxx xxxx xxxx
BERXC001#sh vtp password
VTP Password: vtppassword

On the new switch set the same options :

XXXC001#config terminal

XXXC001(config)#vtp domain THISVTPDOMAIN

XXXC001(config)#vtp mode Client

XXXC001(config)#vtp password vtppassword

If you have setup your VLANS manually you can get them by doing :

XXXC001#show vlan

then use that information to :

XXXC001#config t

XXXC001(config)#vlan number

XXXC001(config-vlan)#name vlanname

XXXC001(config-vlan)#end

I did my best to make this readable, but if you have any questions leave a comment and i'll get back to you.

Cisco - Copy config to other switch using Xmodem

2011-09-23T14:02:00.001+02:00

I just had a request to replace an old 24 port switch with a 48 port from the stock.
The old one was a Catalyst 2950, the new one is a Catalyst 3550.

Luckily we do a weekly backup of all our configs with Cattools, so I had the old config saved. Both the 2950 and the 3550 are Fast Ethernet switches, and have 2 slots for Gigabit GBICs.
I fired up hyperterminal and connected it to the 3550, first I did "del start" and "reload" to delete the old startup-config.
Of course the 3550 is one of the older models that doesn't have an USB port yet, so Xmodem was my (easiest) only option.

On the switch do the following commands to copy the old config to flash :

Switch#copy xmodem flash
Destination filename []? backup
Begin the Xmodem or Xmodem-1K transfer now... (Now, send the file with hyperterminal)
CCCCCCCCC
6912 bytes copied in 26.796 secs (258 bytes/sec)

Send File option

Xmodem option, and select file.


In progress...

Check if the file has been saved correctly to flash :

Switch#sh flash:
Directory of flash:/

2 -rwx 348 Mar 1 1993 02:22:30 +00:00 system_env_vars
3 -rwx 16856 Jul 7 2009 11:09:46 +00:00 config.text.renamed
4 -rwx 5144 Mar 1 1993 00:02:48 +00:00 multiple-fs
5 -rwx 1876 Feb 25 2010 14:37:41 +00:00 vlan.dat.renamed
6 -rwx 6912 Mar 1 1993 00:10:02 +00:00 backup
361 drwx 128 Mar 1 1993 02:21:14 +00:00 c3550-ipbasek9-mz.122-25.SEE2
7 -rwx 1962 Jul 7 2009 11:09:46 +00:00 private-config.text.renamed
8 -rwx 0 Mar 1 1993 02:22:29 +00:00 env_vars
15998976 bytes total (8224256 bytes free)

Copy the "backup" file to the Switch startup-config :

Switch#copy flash:backup start
Destination filename [startup-config]?
[OK]
6912 bytes copied in 0.216 secs (32000 bytes/sec)

Reboot the switch and watch for errors :

Switch#reload
Proceed with reload? [confirm]
00:11:41: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.

When the switch boots without errors, login again, you'll need the original switchs passwords as those are also copied.

At this moment port Fa0/1 to 24 will be configured the same as the original switch, so you might want to set the default values to the same for port 25-48 depending of your needs. The Gigabit ports will both have the same config as the old switch.

For instance our default config is copied from Fa0/24 :

interface FastEthernet0/24
description Legacy
switchport access vlan 180
switchport mode access
no logging event link-status
spanning-tree portfast

to copy this to port 25 to 48 do :

NewSwitch#config terminal
NewSwitch(config)#int range fa0/25 - 48
NewSwitch(config-if-range)#description Legacy
NewSwitch(config-if-range)# switchport access vlan 180
% Access VLAN does not exist. Creating vlan 180
NewSwitch(config-if-range)# switchport mode access
NewSwitch(config-if-range)# no logging event link-status
NewSwitch(config-if-range)# spanning-tree portfast
%Warning: portfast should only be enabled on ports connected to a single host. Connecting hubs, concentrators, switches, bridges, etc... to this interface when portfast is enabled, can cause temporary bridging loops. Use with CAUTION
%Portfast will be configured in 24 interfaces due to the range command
but will only have effect when the interfaces are in a non-trunking mode.

You might have to add other vlans manually depending on the original switch.

Next week I have to do a 2960S 24port to 2960S 48port, those already have an USB port which will make it less painfull then using Xmodem.

Cacti - Monitor Citrix Sessions from Linux

2011-09-07T15:33:00.000+02:00

I just wanted to share a cacti template I made ages ago to graph Citrix sessions with Cacti.

It's based on the script from this topic: Monitor Windows via WMI from Cacti on Linux

Montly, 2 hour average

Daily, 5 minute average.

You can download the actual template from the following post: Citrix Sessions Template
Before installing the template make sure you have successfully installed the script from the 1st page of the topic.

Skype for iPad

2011-09-05T14:57:00.000+02:00

I recently installed Skype for iPad on my first generation iPad.

I must say i'm very impressed with its performance.

My iPad doesn't have a camera being a gen1, so could only test one way video calling.
For the audio part I use the optional Apple in ear headset.

Apple in-ear headphones

Skype main window

Full screen video chat.

Video chat.

Text chat option.

On the PC I use a Logitech C510 as webcam. Can't beat that for price and quality.
Couldn't help it but play with the Logitech-webcamcontroller to add some stupid effects.

Obviously if you have an iPad 2, you are able to use the video chat function both ways, same as on the iPhone.