Friday, February 8, 2008

Associate an Exchange Mailbox with a new User

Occasionally you will need to move an existing Exchange 2003 mailbox from one user to another. This may be the result of employee turn over or change of responsibilities. To move the mailbox, you must first detach it from the current user account. To detach a mailbox you will use the Exchange Tasks wizard in Active Directory to delete the mailbox. In Exchange 2003, deleted mailboxes are not completely removed until the time specified in Keep Deleted Mailbox for XX Days has expired. The default is 30 days, but you need to verify this setting in your Exchange Org BEFORE deleting a mailbox. This setting can be viewed on the Limits tabbed page of the Mailbox Store that contains the mailbox. Once you have verified the Keep Deleted Mailbox for XX Days setting, follow the steps below.

  1. Locate the user in Active Directory
  2. Right click on the user object
  3. Select Exchange Tasks
  4. Click to highlight Delete Mailbox
  5. Click Next
  6. Click Next to detach the mailbox
  7. Open Exchange System Manager
  8. Navigate to the mailbox folder that contains the mailbox that you need to move
  9. Right click and select Run Cleanup Agent
  10. A small x will appear next to the mailbox
  11. Right click on the mailbox and select Reconnect
  12. Select the user object that you want to associate the mailbox with and click OK.
The mailbox is now associated with the new user object.

Labels: ,

Monday, January 21, 2008

Removing a Provisioned Switch from a Switch Stack

When a provisioned switch is removed from a switch stack, the member number must be manually changed back to 1 and the provision information must be removed from the switch. If you try to remove the provision information from the switch before the member number has been reset to 1, you may receive the following errors:

%Switch can not be un-provisioned when it is physically present
%IDBs can not be removed when switch is active

Back up the switch configuration before starting, renumbering and removing the provisioned information will destroy the current interface specific configuration of the switch.

To remove the switch from the stack, we first determine the member number of the switch.

switch# show switch

 

The switch will produce a table listing all of the stack members. In our example, we will assume that member 2 matched the MAC address from the switch that we want to remove from the stack. With the switch disconnected from the stack, issue the following command:

switch(config)# switch 2 renumber 1

This will renumber the switch to member number 1, but it does not remove the provisioned information (information about the stack) from the switch. To remove the provisioned information, issue the following command:

switch(config)# no switch 2 provision

When the switch is restarted it will come up as switch number 1 and the interfaces will be renumbered accordingly.

Labels:

Wednesday, January 16, 2008

MAC Access Lists

Just as we can create access lists based on IP addresses, we can also create access lists based on MAC addresses. The first section sets up an extended access list based on MAC address named mac_filter. It then adds an allow statement for a single host with the MAC address 00 00 00 00 00 00, and allows it access to any other host. This is followed by a deny any any, which will deny any other host (that isn't 00 00 00 00 00 00) from passing packets to any other host via this interface.

Switch(config)#mac access-list extended mac_filter
Switch(config-ext-nacl)#permit host 0000.0000.0000 any
Switch(config-ext-nacl)#deny any any
Switch(config-ext-nacl)#exit

After the access list is created it is applied to the interface just as it would be if it were an IP access list.

Switch(config)#interface GigabitEthernet1/0/1
Switch(config-if)#mac access-group mac_filter in
Switch(config)#exit

Labels: