Printable View
A question about Network Mngmnt/Support:-
Is it possible to find out a remote machine's Default Gateway? If a network manager needs to know if a certain node, situated at a distant location has had its default gateway configured correctly, how can he do so, without having to take a nice long walk?
Thanx for the input folks,
--Scim
I think if, using windows, you type in ipconfig in dos or winipcfg in run it should tell you. I think.
If that machine has someone using it, ask them to run ipconfig /all or the equivalent linux command and report back to you with the results. It's not that hard to step someone through it, and I think it would certainly be easier and more secure than remote administratin software.
I got a mail from one of the faculty member's that his connection wasn't working. I couldn't determine what was the problem, and given that it was the end of the week, decided to check up the switches over the weekend [Here, Thursday and Friday are weekends]. Yesterday I found some machines in the graduate labs were still configured with the old gateway x.x.x.254, which unfortunately started malfunctioning over the past week - intermittently starts/stops working. The actual [new] gateway is supposed to be x.x.x.253. Before I got down to checking up the switch nearest to the professor's pc, I wanted to make sure he didn't have his default gateway also set to the old one [this could explain his on/off connection]. Its the weekend, he's not here, and I really shouldn't put it out till saturday - if it IS something wrong with the switch, swapping it for another one would really mess up things during working hours.
If you can see the remote machine use the vbscript I wrote that is attached. You need to know the admin login name and password for the domain or the machine. Run it from the directory you put it in from the command prompt with the command cscript currentstate.vbs then answer the questions. You will find the IP settings in there and it will have the DG right there.
I have posted this here in the forensics forum and it has been checked/tested by others. nothing has changed. If you want - get the one from the forensics forum.
Good luck
Am I missing something? Unless you are on the same network segment as the machine you are trying to get to...wouldn't that mean you wouldn't be able to connect because the reply traffic would never make it back to you if they Default isn't set/set correctly?
Oh, Scimitar, one thing you could do is give your Switch/router multiple IP's on one interface (old default and new default), then as you see the traffic, ding the ones that haven't switched...
/nebulus
Sometimes you get this nice warm feelin in your stomach.. especially when you believe you've asked a real intelligent question. Other times, you get a real friggin heartburn when u realize what a dork u've been, and feel like shooting yourself in the foot. Rite now I feel that way. DUH, rite, Nebulus, darn.. of course the machine wouldn't reply if it didn't have the DGateway set properly. Thanx for knocking sense into me. Really dumb on my part, though in retrospect, I think I was more interested in the possibility of remotely determining DGateways, than actually solving my problem. And for that, thanx a Mega-ton for the vb script Tiger Shark. It works like a charm!
And Nebulus, I didn't get that about having multiple IPs on one Interface.
>>"one thing you could do is give your Switch/router multiple IP's on one interface (old default and new default), then as you see the traffic, ding the ones that haven't switched.." <<
Could you please expand on that, especially the phrase 'ding the ones that haven't switched' [English isn't my first language as you can prolly tell]
Again thanx a ton, and oh yeah, prof's machine was reachable. Hence, it oughta be a problem in the switch. *Cant always get away easy... *
-- Scim
Nebulus: Er.... Yeah.... Er... I was just tring to see if the rest of you were paying attention.... Yep, that's it..... testing Y'all......
Well spotted..... :o
LOL ....Quote:
Er.... Yeah.... Er... I was just tring to see if the rest of you were paying attention.... Yep, that's it..... testing Y'all......
hey nebulus havent seen you post in a long time ..whats been up with you
Work work and more work...
A bunch of new equipment just got ordered, take training, develop policies and install. Throw in a few OpenSSH/OpenSSL vulns and all the worms running around...And you have one tired puppy...:P
/nebulus
EDIT: Scimitar. Unless it a very basic router/switch, you can make an interface/switch have/respond to more than one IP. What kind of hardware are we talking about here, maybe i can provide more info ...
try a traceroute on the ip. the last entry on the table is most likely the gateway.
But you are not gonna see any switches, unless it's a layer 3 switch.
Thanx Nebulus,
The router is a Cisco 3550 12T Layer 3 Switch - the one with 10 Gigabit UTP connectors and 2 Gigabit fibre optic connectors. I think I understood what you meant by more than 1 IP at a router's interface - akin to subinterfaces used while implementing VLANs.
So, put both IPs [old and new Gateway] on one interface - that would take care of any machines that still have the old gateway configured. But what was meant by 'Ding those that haven't switched'.
Thanx again for your help
As an aside, how come Tiger Shark's location shows 'Near Detroit, MI, USA', but the flag icon shows the Union Jack? I thought the flag image depended directly on one's location.
--Scim
Scimitar:You get the choice of flag and the opportunity to say where you are.... I chose the flag for my nationality and the location for where i am.... simple as that... no trickery..... :)