My personal collection of CheckPoint Commands. Most of them work best in expert mode. [Expert@gateway:0]# CommandDescriptioncpconfigchange SIC, licenses and morecpview -tshow top style performance counterscphaprob statlist the state of the high availability cluster members. Should show active and standby devices.cphaprob -a ifdisplay status of monitored interfaces in a clustercphaprob -l listdisplay registered cluster devices and …
Cisco / IronPort Web Proxy – Useful Commands
Some commands if find use full while working with Cisco Ironport Proxies. Kick the Proxy Process Packet CaptureList and Download the Captures Kick the Proxy Process This forces the proxy to reconnect to upstream proxies, etc. proxy> diagnostic Choose the operation you want to perform: - NET - Network Diagnostic Utility. - PROXY - Proxy …
Continue reading "Cisco / IronPort Web Proxy – Useful Commands"
Heading to US
Cisco Policy Based NAT
ip access-list standard dialer1-acl    permit 10.0.0.0 255.0.0.0   permit 192.168.2.0 255.255.255.0 ip access-list standard vlan4-nat-acl    permit 10.0.0.0 255.255.255.0 route-map dialer1-nat permit 10 match ip address dialer1-acl match interface dialer1  route-map vlan4-nat permit 10   match ip address vlan4-acl    match interface vlan4 ip nat inside source route-map vlan4-nat interface vlan4 route-map vlan4-route permit …
Netscreen – ARP
FWCLUSTER:FWNODE(M)-> get arp usage: 42/8192 miss: 0 always-on-dest: disabled ----------------------------------------------------------------------------------------- IP Mac VR/Interface State Age Retry PakQue Sess_cnt ----------------------------------------------------------------------------------------- 10.62.92.62 92e2ba6225e4 vpn-vr/agg1.971 VLD 371 0 0 55 Arp entries on ASIC chip(s) L2idx IP Dst_Mac Interface Src_Mac Vlan Sat Flag Ref_cnt 218 10.62.92.62 92e2ba6225e4 agg1.971 0010dbff62d0 971 0 0x2 0
Beijing
Fortigate – get router info routing-table all
get router info routing-table all Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF …
Continue reading "Fortigate – get router info routing-table all"
CheckPoint dbedit
# dbedit # http://www.cpwiki.net/index.php/Creating_objects_with_dbedit # https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=skI3301 http://msdk.fusiondementes.net/ # creating a new host create host_plain H.FW.angmar2 modify network_objects H.FW.angmar2 ipaddr 10.0.8.8 update network_objects H.FW.angmar2 modify network_objects H.FW.angmar2 comments "Created by fwadmin with dbedit" <http://dl3.checkpoint.com/paid/fd/fdd98fb831a41d62debbdf80cec0f341/CP_R77_CLI_ReferenceGuide.pdf?HashKey=1405256814_16d7518520e77124c7528f55f5372ac0&xtn=.pdf#page=12&zoom=auto,0,841> # creating a new network create network N.Trust.10.0.8.0--21 modify network_objects N.Trust.10.0.8.0--21 ipaddr 10.0.8.0 modify network_objects N.Trust.10.0.8.0--21 netmask 255.255.248.0 update network_objects N.Trust.10.0.8.0--21 # …
Cisco Password recovery
http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-software-releases-121-mainline/6130-index.html http://www.cisco.com/c/en/us/support/docs/routers/2600-series-multiservice-platforms/22188-pswdrec-2600.html confreg 0x2142 Eingefügt aus <http://www.cisco.com/c/en/us/support/docs/routers/2600-series-multiservice-platforms/22188-pswdrec-2600.html> Use this command in order to change the boot statement:config-register 0x2102 Eingefügt aus <http://www.cisco.com/c/en/us/support/docs/routers/2600-series-multiservice-platforms/22188-pswdrec-2600.html>
Juniper Junos (JNCIA-Junos)
Junos (JNCIA-Junos) Certification
Puppet
http://blog.credativ.com/de/2010/02/howto-einstieg-in-puppet.html http://itand.me/using-puppet-to-manage-users-passwords-and-ss apt-get install puppetmaster apt-get install puppet apt-get install subversion vi /etc/puppet/fileserver.conf # This file consists of arbitrarily named sections/modules # defining where files are served from and to whom # Define a section 'files' # Adapt the allow/deny settings to your needs. Order # for allow/deny does not matter, allow always takes precedence …
