Search Results

(2020-06-24) Problem Soft-bounce bgp sessions. This should cause peers to hold on to the routes we've agreed on while the sessions renegotiate. Solution # exec router clear bgp all soft # exec router clear bgp ip <ip> soft

(2019-03-13) Problem What are the recommended settings for IPSEC VPNs? (Updated 25 April 2023) IKE: In general IKEv1 is still acceptable, unless you're dealing with a Cisco ASA which as of 2020 will only do SHA-1 in IKEv1 DH Group: ideal is DH-19 or DH-20 m...

(2019-10-30) FortiCloud Debug Commands fgt300d-a (global) # di test app forticldd 1. dump fds setting 2. dump log controller status 3. dump log server status 4. dump msg controller status 5. dump msg server status 7. dump FDS default update server status 8. du...

(2019-01-22) Solution So apparently FortiGates can do LLDP, you just have to turn it on. config system global set lldp-transmission enable end [...] edit "internal14" set vdom "root" set type physical set lldp-transmission enable next "type ...

(2019-09-12) Problem IPsec tunnel to another device (in this case, a Watchguard). Tunnel shows as being up on all phase2 definitions, but no packets pass. Diagnostics Some exchanges appear to work, for example the IKE/IPsec negotiations and DPD communications....

(2019-02-13) Problem Using the CLI, list current assigned DHCP leases. Solution For interface "internal": execute dhcp lease-list internal

(2020-03-13) Creating Whitelists For Microsoft Internet Services See: (https://docs.microsoft.com/en- us/office365/enterprise/office-365-ip-web- service)[https://web.archive.org/web/20231204031448/https://docs.microsoft.com/en- us/office365/enterprise/office-3...

(2019-05-28) Problem Routing table? Solution get router info routing-table all get router info bgp summary

(2018-12-19) Problem Want SSH Pubkey authentication for my AD-backed administrative user. Specifically because having to have my AD password in plaintext in my home directory in order for rancid to work is stupid, security-wise. Solution conf global conf sys a...

(2019-03-13) Problem Standard configuration for (more) secure crypto Solution config sys global set admin-https-ssl-versions tlsv1-2 set fds-statistics disable set strong-crypto enable end For each vDom with SSLVPN active in it: config vpn ssl setting ...