Re: telnet into a netgear switch?

2013-11-25 Thread Christopher Morrow
On Sun, Nov 24, 2013 at 9:47 PM, David Birdsong da...@imgix.com wrote:
 JGS524E


kinda thinking that:
NETGEAR 24 Port Gigabit Unmanged Plus Business-Class Rackmount Switch
- Lifetime Warranty (JGS524E)

coupled with:
Network Management Type Unmanaged

on:
http://www.newegg.com/Product/Product.aspx?Item=N82E16833122404

means you are boned.



Re: telnet into a netgear switch?

2013-11-25 Thread Garrett Skjelstad
That netgear link you submitted is primarily for routers, not switches.

Sent from my (old) iPhone5

On Nov 24, 2013, at 18:47, David Birdsong da...@imgix.com wrote:

 Hey all, last night while at the datacenter I was in a pinch to extend a
 rack's LAN. I compromised and ran out to the local Fry's to buy whatever
 switch I could find so as to allow some configuration to happen while
 we wait for the real network gear to show up.
 
 I left before confirming I could access the switch remotely; it was very
 late and I was pretty groggy and hey, any network gear has to be
 telnet'table this day and age. Of course I was mostly wrong.
 
 The switch expects some signed payload before allowing a telnet through. I
 found this: https://code.google.com/p/netgear-telnetenable/...but I'm
 having a hell of a time getting anything to respond.
 
 The most confounding part is the switch doesn't respond to a single SYN
 packet on low ports. I'm scanning all the ports now, but if nothing shows
 up, I'm not sure what a payload is good for if the switch doesn't ACK a
 single SYN.
 
 I'm curious if anybody's got any tips besides not using Netgear in the
 datacenter.
 
 I have the MAC, I've IP'd it via DHCP, and the model number: JGS524E and I
 can power cycle the switch as much as needed.
 
 
 P.S. long time listener, first time caller. i'm more of a sysadmin
 dangerously standing in for a proper network person.



Re: telnet into a netgear switch?

2013-11-25 Thread David Birdsong
On Nov 25, 2013 6:47 AM, Christopher Morrow morrowc.li...@gmail.com
wrote:

 On Sun, Nov 24, 2013 at 9:47 PM, David Birdsong da...@imgix.com wrote:
  JGS524E


 kinda thinking that:
 NETGEAR 24 Port Gigabit Unmanged Plus Business-Class Rackmount Switch
 - Lifetime Warranty (JGS524E)

 coupled with:
 Network Management Type Unmanaged

 on:
 http://www.newegg.com/Product/Product.aspx?Item=N82E16833122404

 means you are boned.

Good catch. I ripped it out of the box, racked and cabled it, tossed the
trash and went home fully expecting to sort it out w/ nmap, tcpdump, tftp
etc...

I guess I am sorted out now.


RE: telnet into a netgear switch?

2013-11-25 Thread Jason Pope
--
Message: 2
Date: Sun, 24 Nov 2013 18:47:09 -0800
From: David Birdsong da...@imgix.com
To: nanog@nanog.org
Subject: telnet into a netgear switch?
Message-ID:
CAOMvUQfeM_Wnc=es1vz0gh_pp-vz+sprk9td-1u0a34c3a6...@mail.gmail.com
Content-Type: text/plain; charset=ISO-8859-1

Hey all, last night while at the datacenter I was in a pinch to extend a
rack's LAN. I compromised and ran out to the local Fry's to buy whatever
switch I could find so as to allow some configuration to happen while
we wait for the real network gear to show up.

I left before confirming I could access the switch remotely; it was very
late and I was pretty groggy and hey, any network gear has to be
telnet'table this day and age. Of course I was mostly wrong.

The switch expects some signed payload before allowing a telnet through. I
found this: https://code.google.com/p/netgear-telnetenable/...but I'm
having a hell of a time getting anything to respond.

The most confounding part is the switch doesn't respond to a single SYN
packet on low ports. I'm scanning all the ports now, but if nothing shows
up, I'm not sure what a payload is good for if the switch doesn't ACK a
single SYN.

I'm curious if anybody's got any tips besides not using Netgear in the
datacenter.

I have the MAC, I've IP'd it via DHCP, and the model number: JGS524E and I
can power cycle the switch as much as needed.


P.S. long time listener, first time caller. i'm more of a sysadmin
dangerously standing in for a proper network person.
--

Seems to me that you need to use their Switch Configuration Utility to
manage the switch.  I didn't read all the documentation, but that is what
jumps out at me after a brief look.  Maybe it will allow you to enable
telnet or ssh from there.  See the following link:

http://downloadcenter.netgear.com/en/product/JGS524E

Jason


RE: telnet into a netgear switch?

2013-11-25 Thread David Birdsong
On Nov 25, 2013 1:51 PM, Jason Pope boards...@gmail.com wrote:

 --
 Message: 2
 Date: Sun, 24 Nov 2013 18:47:09 -0800
 From: David Birdsong da...@imgix.com
 To: nanog@nanog.org
 Subject: telnet into a netgear switch?
 Message-ID:
 CAOMvUQfeM_Wnc=
es1vz0gh_pp-vz+sprk9td-1u0a34c3a6...@mail.gmail.com
 Content-Type: text/plain; charset=ISO-8859-1

 Hey all, last night while at the datacenter I was in a pinch to extend a
 rack's LAN. I compromised and ran out to the local Fry's to buy whatever
 switch I could find so as to allow some configuration to happen while
 we wait for the real network gear to show up.

 I left before confirming I could access the switch remotely; it was very
 late and I was pretty groggy and hey, any network gear has to be
 telnet'table this day and age. Of course I was mostly wrong.

 The switch expects some signed payload before allowing a telnet through. I
 found this: https://code.google.com/p/netgear-telnetenable/...but I'm
 having a hell of a time getting anything to respond.

 The most confounding part is the switch doesn't respond to a single SYN
 packet on low ports. I'm scanning all the ports now, but if nothing shows
 up, I'm not sure what a payload is good for if the switch doesn't ACK a
 single SYN.

 I'm curious if anybody's got any tips besides not using Netgear in the
 datacenter.

 I have the MAC, I've IP'd it via DHCP, and the model number: JGS524E and I
 can power cycle the switch as much as needed.


 P.S. long time listener, first time caller. i'm more of a sysadmin
 dangerously standing in for a proper network person.
 --

 Seems to me that you need to use their Switch Configuration Utility to
 manage the switch.  I didn't read all the documentation, but that is what
 jumps out at me after a brief look.  Maybe it will allow you to enable
 telnet or ssh from there.  See the following link:


No windows box handy, nor the desire for that hoop.

...but what magic is a windows app going to perform to wake up an
unresponsive TCP stack?

 http://downloadcenter.netgear.com/en/product/JGS524E

 Jason


Re: telnet into a netgear switch?

2013-11-25 Thread Pedro Cavaca
On 25 November 2013 23:42, David Birdsong da...@imgix.com wrote:

 On Nov 25, 2013 1:51 PM, Jason Pope boards...@gmail.com wrote:
 
  --
  Message: 2
  Date: Sun, 24 Nov 2013 18:47:09 -0800
  From: David Birdsong da...@imgix.com
  To: nanog@nanog.org
  Subject: telnet into a netgear switch?
  Message-ID:
  CAOMvUQfeM_Wnc=
 es1vz0gh_pp-vz+sprk9td-1u0a34c3a6...@mail.gmail.com
  Content-Type: text/plain; charset=ISO-8859-1
 
  Hey all, last night while at the datacenter I was in a pinch to extend a
  rack's LAN. I compromised and ran out to the local Fry's to buy whatever
  switch I could find so as to allow some configuration to happen while
  we wait for the real network gear to show up.
 
  I left before confirming I could access the switch remotely; it was very
  late and I was pretty groggy and hey, any network gear has to be
  telnet'table this day and age. Of course I was mostly wrong.
 
  The switch expects some signed payload before allowing a telnet through.
 I
  found this: https://code.google.com/p/netgear-telnetenable/...but I'm
  having a hell of a time getting anything to respond.
 
  The most confounding part is the switch doesn't respond to a single SYN
  packet on low ports. I'm scanning all the ports now, but if nothing shows
  up, I'm not sure what a payload is good for if the switch doesn't ACK a
  single SYN.
 
  I'm curious if anybody's got any tips besides not using Netgear in the
  datacenter.
 
  I have the MAC, I've IP'd it via DHCP, and the model number: JGS524E and
 I
  can power cycle the switch as much as needed.
 
 
  P.S. long time listener, first time caller. i'm more of a sysadmin
  dangerously standing in for a proper network person.
  --
 
  Seems to me that you need to use their Switch Configuration Utility to
  manage the switch.  I didn't read all the documentation, but that is what
  jumps out at me after a brief look.  Maybe it will allow you to enable
  telnet or ssh from there.  See the following link:
 

 No windows box handy, nor the desire for that hoop.

 ...but what magic is a windows app going to perform to wake up an
 unresponsive TCP stack?


In view that the application needs to be run directly on the LAN, I'm not
sure why you'd expect any TCP/IP like protocol - I asked a friend for a
packet capture and it seems that the configuration utility is using RRCP (
http://en.wikipedia.org/wiki/Realtek_Remote_Control_Protocol).

HTH


  http://downloadcenter.netgear.com/en/product/JGS524E
 
  Jason



Re: telnet into a netgear switch?

2013-11-25 Thread Geraint Jones
It could be any number of things, APC for example need a vendor option set
in DHCP or a ³Magic² ping. It could be that the app just talks to it on L2
like Microtik¹s. I suspect the windows app will be your only option.
-- 
Geraint Jones






On 26/11/13 12:42 pm, David Birdsong da...@imgix.com wrote:

On Nov 25, 2013 1:51 PM, Jason Pope boards...@gmail.com wrote:

 --
 Message: 2
 Date: Sun, 24 Nov 2013 18:47:09 -0800
 From: David Birdsong da...@imgix.com
 To: nanog@nanog.org
 Subject: telnet into a netgear switch?
 Message-ID:
 CAOMvUQfeM_Wnc=
es1vz0gh_pp-vz+sprk9td-1u0a34c3a6...@mail.gmail.com
 Content-Type: text/plain; charset=ISO-8859-1

 Hey all, last night while at the datacenter I was in a pinch to extend a
 rack's LAN. I compromised and ran out to the local Fry's to buy whatever
 switch I could find so as to allow some configuration to happen while
 we wait for the real network gear to show up.

 I left before confirming I could access the switch remotely; it was very
 late and I was pretty groggy and hey, any network gear has to be
 telnet'table this day and age. Of course I was mostly wrong.

 The switch expects some signed payload before allowing a telnet
through. I
 found this: https://code.google.com/p/netgear-telnetenable/...but I'm
 having a hell of a time getting anything to respond.

 The most confounding part is the switch doesn't respond to a single SYN
 packet on low ports. I'm scanning all the ports now, but if nothing
shows
 up, I'm not sure what a payload is good for if the switch doesn't ACK a
 single SYN.

 I'm curious if anybody's got any tips besides not using Netgear in the
 datacenter.

 I have the MAC, I've IP'd it via DHCP, and the model number: JGS524E
and I
 can power cycle the switch as much as needed.


 P.S. long time listener, first time caller. i'm more of a sysadmin
 dangerously standing in for a proper network person.
 --

 Seems to me that you need to use their Switch Configuration Utility to
 manage the switch.  I didn't read all the documentation, but that is
what
 jumps out at me after a brief look.  Maybe it will allow you to enable
 telnet or ssh from there.  See the following link:


No windows box handy, nor the desire for that hoop.

...but what magic is a windows app going to perform to wake up an
unresponsive TCP stack?

 http://downloadcenter.netgear.com/en/product/JGS524E

 Jason





Re: telnet into a netgear switch?

2013-11-25 Thread Jason Pope
On Mon, Nov 25, 2013 at 5:42 PM, David Birdsong da...@imgix.com wrote:


 On Nov 25, 2013 1:51 PM, Jason Pope boards...@gmail.com wrote:
 
  --
  Message: 2
  Date: Sun, 24 Nov 2013 18:47:09 -0800
  From: David Birdsong da...@imgix.com
  To: nanog@nanog.org
  Subject: telnet into a netgear switch?
  Message-ID:
  CAOMvUQfeM_Wnc=
 es1vz0gh_pp-vz+sprk9td-1u0a34c3a6...@mail.gmail.com
  Content-Type: text/plain; charset=ISO-8859-1
 
  Hey all, last night while at the datacenter I was in a pinch to extend a
  rack's LAN. I compromised and ran out to the local Fry's to buy whatever
  switch I could find so as to allow some configuration to happen while
  we wait for the real network gear to show up.
 
  I left before confirming I could access the switch remotely; it was very
  late and I was pretty groggy and hey, any network gear has to be
  telnet'table this day and age. Of course I was mostly wrong.
 
  The switch expects some signed payload before allowing a telnet through.
 I
  found this: https://code.google.com/p/netgear-telnetenable/...but I'm
  having a hell of a time getting anything to respond.
 
  The most confounding part is the switch doesn't respond to a single SYN
  packet on low ports. I'm scanning all the ports now, but if nothing shows
  up, I'm not sure what a payload is good for if the switch doesn't ACK a
  single SYN.
 
  I'm curious if anybody's got any tips besides not using Netgear in the
  datacenter.
 
  I have the MAC, I've IP'd it via DHCP, and the model number: JGS524E and
 I
  can power cycle the switch as much as needed.
 
 
  P.S. long time listener, first time caller. i'm more of a sysadmin
  dangerously standing in for a proper network person.
  --
 
  Seems to me that you need to use their Switch Configuration Utility to
  manage the switch.  I didn't read all the documentation, but that is what
  jumps out at me after a brief look.  Maybe it will allow you to enable
  telnet or ssh from there.  See the following link:
 

 No windows box handy, nor the desire for that hoop.

 ...but what magic is a windows app going to perform to wake up an
 unresponsive TCP stack?

  http://downloadcenter.netgear.com/en/product/JGS524E
 
  Jason


Ahh; I don't use windows either, but I keep a VM handy just in case I need
it.

jp


Re: telnet into a netgear switch?

2013-11-25 Thread David Birdsong
On Mon, Nov 25, 2013 at 5:18 PM, Pedro Cavaca pmsac.na...@gmail.com wrote:




 On 25 November 2013 23:42, David Birdsong da...@imgix.com wrote:

 On Nov 25, 2013 1:51 PM, Jason Pope boards...@gmail.com wrote:
 
  --
  Message: 2
  Date: Sun, 24 Nov 2013 18:47:09 -0800
  From: David Birdsong da...@imgix.com
  To: nanog@nanog.org
  Subject: telnet into a netgear switch?
  Message-ID:
  CAOMvUQfeM_Wnc=
 es1vz0gh_pp-vz+sprk9td-1u0a34c3a6...@mail.gmail.com
  Content-Type: text/plain; charset=ISO-8859-1
 
  Hey all, last night while at the datacenter I was in a pinch to extend a
  rack's LAN. I compromised and ran out to the local Fry's to buy whatever
  switch I could find so as to allow some configuration to happen while
  we wait for the real network gear to show up.
 
  I left before confirming I could access the switch remotely; it was very
  late and I was pretty groggy and hey, any network gear has to be
  telnet'table this day and age. Of course I was mostly wrong.
 
  The switch expects some signed payload before allowing a telnet
 through. I
  found this: https://code.google.com/p/netgear-telnetenable/...but I'm
  having a hell of a time getting anything to respond.
 
  The most confounding part is the switch doesn't respond to a single SYN
  packet on low ports. I'm scanning all the ports now, but if nothing
 shows
  up, I'm not sure what a payload is good for if the switch doesn't ACK a
  single SYN.
 
  I'm curious if anybody's got any tips besides not using Netgear in the
  datacenter.
 
  I have the MAC, I've IP'd it via DHCP, and the model number: JGS524E
 and I
  can power cycle the switch as much as needed.
 
 
  P.S. long time listener, first time caller. i'm more of a sysadmin
  dangerously standing in for a proper network person.
  --
 
  Seems to me that you need to use their Switch Configuration Utility to
  manage the switch.  I didn't read all the documentation, but that is
 what
  jumps out at me after a brief look.  Maybe it will allow you to enable
  telnet or ssh from there.  See the following link:
 

 No windows box handy, nor the desire for that hoop.

 ...but what magic is a windows app going to perform to wake up an
 unresponsive TCP stack?


 In view that the application needs to be run directly on the LAN, I'm not
 sure why you'd expect any TCP/IP like protocol - I asked a friend for a
 packet capture and it seems that the configuration utility is using RRCP (
 http://en.wikipedia.org/wiki/Realtek_Remote_Control_Protocol).


t'was finding this that made reassured me towards TCP/IP:
https://code.google.com/p/netgear-telnetenable/

 but yes, i'd completely forgotten about other protocols.

HTH


  http://downloadcenter.netgear.com/en/product/JGS524E
 
  Jason