Month: February 2024

Posted on

Checkpoint – Gratious ARP

Get the interface IPsip a | grep inet | awk '{print $2}' | cut -d/ -f1 cphaprob -m tablestat ---- Unique IP's Table ---- Member Interface IP-Address MAC-Address (Local)0 2 13.49.132.78 00:1c:7f:c3:ff:b80 24 192.168.0.2 00:1c:7f:a5:ff:d7 1 2 13.49.132.79 00:1c:7f:c3:ff:cc1 24 192.168.0.3 00:1c:7f:a5:ff:6f https://community.checkpoint.com/t5/Security-Gateways/How-to-send-G-ARP-manually/td-p/69895 echo 1 > /proc/sys/net/ipv4/ip_nonlocal_bind ip l | grep UP | grep -v …

Continue reading "Checkpoint – Gratious ARP"

Posted on

VMWare to bhyve

Lately i decided to migrate my VM ESX Servers over to FreeBSD VM bhyve Installing pkg install vm-bhyve bhyve-firmware Configuration Storage zfs create zroot/bhyve zfs set recordsize=64K zroot/bhyve zfs create zroot/bhyve/.templates Add the following lines to /etc/rc.conf:  # needed for virtualization support vm_enable=”YES” vm_dir=”zfs:zroot/bhyve” Now, add the following line to the end of /boot/loader.conf:  # needed for …

Continue reading "VMWare to bhyve"

Posted on

Check Point Kernel Settings

Photo by Kvistholt Photography on Unsplash

cat $FWDIR/boot/modules/fwkern.conf fw_allow_simultaneous_ping=1 fwha_monitor_all_vlan=1 vmalloc_softretry_enable=1 initial_hmem_pct=30 initial_hmemmax_pct=50 hmem_avoid_vmalloc=2 fwha_vmac_disable_promisc_on_standby=1

Posted on

Check Point – SNMP – SHA1 Support in R81

Photo by Carl Solder on Unsplash

Check Point has removed SHA1 support from R81. It is possible to get SHA1 back. Applies up to R81.20 clish add snmp usm user myuser security-level authPriv auth-pass-phrase TEMP-AUTH-PHRASE privacy-pass-phrase TEMP-PRIV-PHRASE privacy-protocol AES authentication-protocol SHA512 expert dbset snmp:v3:user:myuser:auth:proto .1.3.6.1.6.3.10.1.1.3 clish set snmp usm user myuser security-level authPriv auth-pass-phrase REAL-AUTH-PHRASE privacy-pass-phrase REAL-PRIV-PHRASE

Blogger my old blog Powered by WordPress.com.