CheckPoint dbedit

# dbedit # http://www.cpwiki.net/index.php/Creating_objects_with_dbedit # https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=skI3301 http://msdk.fusiondementes.net/ # creating a new host create host_plain H.FW.angmar2 modify network_objects H.FW.angmar2 ipaddr 10.0.8.8 update network_objects H.FW.angmar2 modify network_objects H.FW.angmar2 comments "Created by fwadmin with dbedit" <http://dl3.checkpoint.com/paid/fd/fdd98fb831a41d62debbdf80cec0f341/CP_R77_CLI_ReferenceGuide.pdf?HashKey=1405256814_16d7518520e77124c7528f55f5372ac0&xtn=.pdf#page=12&zoom=auto,0,841&gt; # creating a new network create network N.Trust.10.0.8.0--21 modify network_objects N.Trust.10.0.8.0--21 ipaddr 10.0.8.0 modify network_objects N.Trust.10.0.8.0--21 netmask 255.255.248.0 update network_objects N.Trust.10.0.8.0--21 # …

Enterasys C2 SNMPv2

To enable SNMPv2 access on the Enterasys C2 Switches you have to issue following commands: [sourcecode] set snmp access gReadOnlyV1V2C security-model v1 exact read vUnsecured set snmp access gReadOnlyV1V2C security-model v2c exact read vUnsecured set snmp community mycomunity securityname sn_v1v2c_ro set snmp group gReadOnlyV1V2C user sn_v1v2c_ro security-model v1 set snmp group gReadWriteV1V2C user sn_v1v2c_rw security-model …

Enterasys C2 and SSH

To enable the SSH Service on a Enterasys SecureStack C2 and similar you have to issue "set ssh enabled" on the cli. [sourcecode autolinks="false" gutter="false" highlight="2"] C2(su)->set ssh enabled SSH hostkey generation initiated. Process should complete in 60 seconds. C2(su)-> [/sourcecode] If you feel this helps a bit or may be not ? Please leave …

Cisco ASA and SMTP

We recently bought so new Firewalls to replace to aged Cisco PIX515e with some new Gear. We decided to use Ciscos new Firewall flagship the Cisco ASA Devices. Everything was fine after the replacement, we transfered the configuration from the old boxes to the new with the help of the Cisco Security Manager. Later that …

Cisco MDS 9222i with ACS

If you want to configure tacacs+ on the Cisoc MDS9222i Series you have to enable first the feature. [sourcecode autolinks="false" gutter="false"] feature tacacs+ [/sourcecode] After this the commands to configure the Tacacs+ are available. [sourcecode autolinks="false" gutter="false"] feature tacacs+ ! tacacs+ distribute tacacs-server timeout 10 tacacs-server host 10.0.243.247 key 0 secertkey tacacs-server host 10.0.243.248 key …

Enterasys C2 Switch Traffic Shaping

Configuring Traffic Shaping on the Enterasys C2 Switch. show port ratelimit <portstring> set port ratelimit <portstring> clear port ratelimit <portstring> If you feel this helps a bit or may be not ? Please leave a comment.

BGP – MultiHomeing

BGP Prevent becoming an Transit ASNo-Export CommunityCisco cisco01config show ip bgp summaryshow ip routeshow ip bgpcisco02config show ip bgp summaryshow ip routeEdgeRouter-Xedge01configshow ip routeedge02configshow ip routeFortiGateconfigget router info routing-table detailsTestsLinks BGP Prevent becoming an Transit AS The soution at hand is a Filter-list with AS-PATH access-list on the provider bgp session to let only local …