Search Results

(2015-03-26) Problem Phase 1 connects then drops seconds later. In the trace options, you see the message: iked_pm_id_validate id NOT matched. ...after the message identifying that Phase 1 is up. Solution The remote side is using IPs as peer-IDs (note: differ...

(2017-08-22) Loading Configuration From The Terminal To replace the current configuration with a new brace-style configuration you have (probably from a configuration backup or the like): [edit] user@host# load override terminal Paste your new configuration, ...

(2017-08-22) TFTP Installing Firmware From The Loader connect a console reboot the device interrupt the boot process when it says Press SPACE to abort autoboot set U-boot environment (note that the gatewayip may not be necessary if you are on the same subn...

(2024-08-28) Remember you need to have basic support in order for this db to be populated. Firewalls without a contract do not have this db. Search for a service: FortiGate80D # diagnose internet-service id | grep -i microsoft ID: 327681 name: "Microsoft-Web" ...

(2024-09-03) Problem SNMP on ASA please Solution snmp-server group GlobalRead v3 priv snmp-server user me GlobalRead v3 auth sha MyAuthString priv aes 128 MyPrivString snmp-server host inside 192.168.1.125 poll community myV2cCommunity version 2c snmp-server h...

(2024-09-05) Example ip access-list standard snmp-access permit 10.11.12.13 snmp-server view snmp-v3-ReadOnly-View iso included snmp-server group snmp-v3-ReadOnly v3 priv read snmp-v3-ReadOnly-View access snmp-access snmp-server user MY-SNMP-USER snmp-v3-ReadO...

2024-09-09 Problem xml is hard to read Solution set cli config-output-format set Now when in configure mode, the output will be copy/pasteable.

(2024-09-09) Problem: WARNING: The running configuration is not currently synchronized to the HA peer, and therefore, this commit will only be applied to the local device. Please synchronize the peers by running 'request high-availability sync-to-remote runnin...

(2024-09-18) SW# show logging

(2024-09-18) Problem: Can't ping my ASA. Design: With Cisco ASA, it is impossible to ping any interface of the ASA itself except the interface facing towards the pinging host, or an interface configured for "management-access" or as "management-only". So for e...

Why the fuck do PC guys think that they can "clean" infected PCs? I'm old-school unix -- if there's even a hint of compromise, you can't trust the box any more and it should be paved and rebuilt from scratch and carefully checked backups. So I'm the linux/netw...

(2018 sometime) 15 years ago, I accidentally ran a complicated shell command that muffed a couple variables and ended up trying to do a rm-f /. Through ssh. Via cron. On the NIS master system. Which was in New Jersey. From Ottawa. As a contractor. Fortunately,...

(2014-ish) What has been my best moment in IT? There have been several moments -- how about the overnight datacenter maintenance window when I discovered that I'd bricked the DC's main router redundant pair -- by following the documentation for doing something...

(2024-10-10) Problem: I want to ping something. Solution: ping host 1.1.1.1

(2024-10-10) Problem: Ping WAN interface IP from LAN Solution: Pinging from an internal host to an external interface when using source NAT is an incorrect test method. Packets are dropped since the source address is the external address of the firewall and t...

(2018-04-05) TL/DR: If you want something done right, you have to check the math and be willing to do it yourself. ...or, a descent into madness So we have a new internet service provider. Unlike our previous connections, this new connection is a burstable con...

(2011-12-04) Jonathan Zittrain explains that the personal computer is dead because our computing environments are becoming walled gardens. And he thinks this is bad. Personally I don't think this is the end of the world that he claims it is. First, you have to...

(2024-06-03) Found this set of recommendations for TCP tuning while chasing some iperf3 issues revolving around windowing problems. I created this as /etc/sysctl.d/20-network-tcp-tuning: # https://blog.cloudflare.com/optimizing-tcp-for-high-throughput-and-low-...