Search Results

Bypass cisco system configuration Plug in your serial console, reboot the ASA press 'ESC' when its booting # Now get into configuration management rommon #0> confreg # Record this next line we'll need it later. Current Configuration Register: 0x00000001 Confi...

(2017-04-26) Some Console Commands # show run | in <string> # more run | begin <string> useful eg: # more run | begin tunnel-group

Session Monitoring This is the vocabulary that Cisco uses to describe port mirroring, port monitoring, RMON Roving Port Analysis, whatever. This example shows how to create SPAN session 1 to monitor both sent and received traffic on a source interface and on a...

(Note from 2024: probably dangerously outdated) Customer Information (brains) : # export PATH=/opt/sfw/bin:/usr/local/bin:/usr/bin:/sbin:/usr/sbin # ././configure --prefix=/usr --disable-cram --disable-digest --disable-otp --with-dblib=none --disable-krb4 --di...

Lists the contents of the sasldb2 database. # sasldblistusers2 cyrus@gwx1: userPassword dave@gwx1: userPassword

This is the utility for creating, changing, and deleting users and passwords from the local sasl database (usually /etc/sasldb2). You can run it either as root or the cyrus admin user (in our case, cyrus ). Check the ownership of the sasl database if you are u...

Hi Dave Finally got the daemontools on netmon01 to supervise radiusd, and it should restart if the computer is restarted. netmon01# cd /service/radiusd/ netmon01# ls env/ run* supervise/ netmon01# cat run #!/bin/sh echo "Starting FreeRadius" ...

(2017-05-30) Problem I don't want to get prompted for sudo access. Solution Run visudo At the end of the file, add: myusername ALL=NOPASSWD: ALL For some reason it doesn't work if you add it before the end of the file. (Learned, later: the last definitio...

(2015-02-18) Problem Jessie not fully integrated with Hyper-V out of the box. Solution /usr/bin/hv_get_dhcp_info #!/bin/bash # This example script retrieves the DHCP state of a given interface. # In the interest of keeping the KVP daemon code free of distro s...

(2016-02-19) Problem Veeam can't connect to the target Debian server, fails with: Server does not support diffie-hellman-group1-sha1 for keyexchange Solution Add the following to /etc/ssh/sshd_config: KexAlgorithms diffie-hellman-group1-sha1,curve25519-sha256@...

(2023-10-31) DH Group to OAKLEY_GROUP values DH Oakley DH Group 1 768-bit MODP Group DH Group 2 1024-bit MODP Group DH Group 5 1536-bit MODP Group DH Group 14 2048-bit MODP Group DH Group 15 3072-bit MODP Group DH Group 16 4096-bit MODP Group ...

2023-06-30 About generating dhparams with 4096 bits instead of 2048 bits When you use dhparam, OpenSSL not only generates DH parameters; it also wants to assert his social status by taking care to use for the modulus a so-called "strong prime", which is usele...

Log to a file with enough information to make it useful. CAUTION: there's no built in log rotation, you get to roll your own. logging { channel named_log { file "/var/log/named.log"; severity debug; print...

(2013-03-28) Problem I want to tell a BIND server that a particular DNS zone can be resolved at some arbitrary DNS server. I do not want to forward all requests through this arbitrary DNS server. Solution In /etc/named.conf: zone "myzone.local" { type for...

(24 January 2012) So years ago we get called into this small company working out of I don't remember where. We were doing some network discovery so that we could estimate some professional services work, mostly Windows work, which is why I wasn't involved. All...

(2018-10-16) Problem What is CAA record Solution CAA record is a DNS record that indicates who is permitted to issue SSL certs for a domain. Information. bind entry: xdroop.com. IN CAA 128 issue "letsencrypt.org" In action: # dig @n1 caa xdroop.com ; <<>> D...

(2016-05-09) Problem Show IPs getting denied responses to queries on my local DNS server, sorted by the number of denies in the log file. Solution # grep denied named.log.1 | awk '{print $4}' | awk -F '#' '{print $1}' | sort | uniq -c | sort -n | less Comment...

(12 October 2012) Problem: I need to delegate part of my /24 to another name server. Solution This is known as the RFC-2317 solution. Basically for each address you are delegating, you put in a CNAME to a subdomain zone. Then you put in a NS record indicating ...