Wednesday, November 15, 2017

Mitel TA7102 SIP setup with MCD.


Do not use the wan port. It has a DHCP server that caused havoc on my network.

Use the lan port and find the IP address on your router. The MAC address usually begins with 00:90:f8.

Login with the default user of "public" and no password.

These three screens are the minimum configuration I needed to receive a fax with the device.







I can not get one of these to make calls on the Mitel 3300 yet!!!

If anyone knows how, let me know.


Monday, October 23, 2017

VPN setup between Fortinet and Meraki


I have this working with several Fortigate models and Meraki MX.

Fortigate setup on 5.2. It also worked on 4.0 but the screens are different.

Ipsec Tunnels
Create New
Custom VPN Tunnel
Name xxx
IP Address from Meraki dashboard
select Interface
Uncheck Nat Traveral and Dead Peer
Enter Pre-Shared key
Remove all Phase 1 Proposals except "3DES SHA1"
Check only DH group 2
Change key life to 28800
Enter name for Phase 2
Enter local and remote subnets for Phase 2
Click Advanced
Remove all Phase 2 proposals except "3DES SHA1"
Uncheck PFS
Add static route for remote subnet
Add two firewall policies two allow traffic to and from tunnel.

The Meraki side is simple.
Site-to-site VPN.
Add non-peer.

Cable modem setup
(This was required on one Meraki unit but I have several working with no change to the cable modem.)
Forward ports 500 and 4500 to Meraki.

Update: VPN setup between Fortinet and Meraki - Part 2

Friday, October 6, 2017

How to verify the telecom carrier for a phone number or 800 number.

I frequently need to verify the telco carrier of a phone number. Here are two useful sites.


freecarrierlookup.com





This one is for 800 or toll free numbers.

https://legacy.800forall.com



Tuesday, September 26, 2017

How to get ping and telnet on MacOS High Sierra.

I know these are not secure apps but I still use them all the time. Download inetutils and get ping and telnet.


open terminal
cd Downloads
cd inet*
./configure
Install command line tools
./configure
make
sudo make install

I have trouble with the inetutils ping because it ignores lost packets. This is my fix to stick with macos ping.

cd /usr/local/bin

sudo mv ping ping.bk

Monday, September 18, 2017

How to change Mitel 3300 system telnet password.

I recently found out you can telnet into Mitel systems with a default password. Https and telnet have different system passwords. Even if you change the password in the browser, telnet is still open.

Here is the way to change the telnet password.


telnet 1.2.3.4

Welcome to the SX-2000 (vxTarget)

login: sytem

Password:       

ESC 6 for maintenance.


Reset Password System, New Password       , Verify New Password


Friday, August 18, 2017

High Sierra hiding lost pings.



I just noticed that lost pings are hidden. It was irritating enough that ping now requires elevation.
jamsignal$ ping 10.133.1.1ping: Lacking privilege for raw socket.jamsignal$ 

jamsignal$ sudo ping 10.133.1.1PING 10.133.1.1 (10.133.1.1): 56 data bytes64 bytes from 10.133.1.1: icmp_seq=0 ttl=254 time=69.707 ms64 bytes from 10.133.1.1: icmp_seq=1 ttl=254 time=68.789 ms64 bytes from 10.133.1.1: icmp_seq=4 ttl=254 time=79.188 ms64 bytes from 10.133.1.1: icmp_seq=6 ttl=254 time=48.910 ms64 bytes from 10.133.1.1: icmp_seq=7 ttl=254 time=67.357 ms64 bytes from 10.133.1.1: icmp_seq=8 ttl=254 time=68.787 ms64 bytes from 10.133.1.1: icmp_seq=9 ttl=254 time=77.702 ms64 bytes from 10.133.1.1: icmp_seq=10 ttl=254 time=59.172 ms64 bytes from 10.133.1.1: icmp_seq=11 ttl=254 time=68.638 ms64 bytes from 10.133.1.1: icmp_seq=12 ttl=254 time=89.859 ms^C--- 10.133.1.1 ping statistics ---13 packets transmitted, 10 packets received, 23% packet lossround-trip min/avg/max/stddev = 48.910/69.811/89.859/10.544 msjamsignal$ 

Update: I had installed inetutils to get telnet and ftp on High Sierra. That is what broke my ping.

Wednesday, August 16, 2017

JetDirect printers on the Internet with no password.

This was my search on shodan.io. There are 700 JetDirect printers on the Internet with no telnet password. Why have the hackers not taken over these printers

"Jetdirect port:23 Password is not set"