The Packets, Life and everything
Some notes on TCP bandwidth. Maybe you've seen it before: a server has a 10 Gbps interface, the path is not congested, and a local test reaches line rate — but a single TCP transfer across a WAN or hybrid-cloud path stops at a fraction of the expected speed. The link is fast, yet the …
Continue reading "TCP Bandwidth"
#!/bin/bash # Patrick Marc Preuss (c)2021 - 2025 # Check for required environment variable if [ -z "${SSHPASS}" ]; then echo "Error: Please set the SSHPASS environment variable." exit 127 fi # Check for firewall argument FW="$1" if [ -z "${FW}" ]; then echo "Usage: $0 <firewall-hostname-or-IP>" exit 127 fi # Timestamp for output file …
Note to my self. Looks like Fortigate changed the access to IPerf3. FG (global) # diagnose traffictest set_pair mgmt:mgmt Server:Client pair is mgmt:mgmt Server CPU affinity: None Client CPU affinity: None Stream number: 1 Traffic protocol: TCP Server IP address: 192.90.255.199 Server VDOM: vsys_hamgmt Client IP address: 192.90.255.199 Client VDOM: vsys_hamgmt FG (global) # diagnose …
FreeRadiustac_plusCiscoFortinetCheckPointLinks FreeRadius /usr/local/etc/raddb/clients.conf client cisco { ipaddr = 8.8.8.8 secret = testing123 } /usr/local/etc/raddb/users cisco Cleartext-Password := "cisco" Service-Type = NAS-Prompt-User, Reply-Message := "Hello, %{User-Name}", Cisco-AVpair = "shell:priv-lvl=15" /usr/local/etc/raddb/sites-available/default # Read the 'users' file. In v3, this is located in # raddb/mods-config/files/authorize files # MAC Auth rewrite_called_station_id # Now check against the authorized_macs file authorized_macs …
Avocent ACS – Forcing MTU and MSS per Route The Situation A WAN link did not offer the full Ethernet MTU of 1500 bytes (tunnel/overlay overhead). Two effects came together: The WAN environment did not advertise the lower MTU properly – ICMP "Fragmentation Needed" (type 3, code 4) never made it back to the sender, …
Some good presetation on BGP Links https://www.sanog.org/resources/sanog33/SANOG33_Tutorials-BGP_Communities_and_Geotags-Muhammad_Moinur_Rahman-DZCRD.pdf https://www.denog.de/media/DENOG10/day2_0900_communities-no-anim.pdf https://nsrc.org/workshops/2014/afnog-are/raw-attachment/wiki/Agenda/09-BGP-Communities.pdf
After a long day of back-and-forth debugging, here are some takeaways from trying to deploy a FortiGate cluster with dedicated management interfaces: FortiGates must without current support contract, needs to have the same version allready installed and FortiManager enforce Firmware needs to be set to this Version. Otherwhise this fails. FortiManager 6.4.14 and configure dedicated …
Continue reading "FortiGate Cluster Deployment – Zero Touch / Low Touch Debugging Notes"
Those are my personal notes towards the certification and do not reflect any training from Check Point.For official Information please refer to sk163417. APIGAIA APIManagement API API https://sc1.checkpoint.com/documents/latest/api_reference/index.html around 20 APIs 8 for Quantum GAIA API Management API The API can be run from SmartConsole Command Line interface / Gaia CLI Command line client mgmt_cli …
Those are my personal notes towards the certification and do not reflect any training from Check PointFor official Information please refer to sk163417. Primary InterfacesGaia Operating System ShellsCLIGUISmart Console Primary Interfaces Gaia Operating System Shells CLI Gaia Clish - Default Shell Bash - Export Mode Shell GUI Gaia Portal browser based shell Smart Console Smart …
Those are my personal notes towards the certification and do not reflect any training from Check PointFor official Information please refer to sk163417. Review Basic Deployment Standalone DeploymentDistributed Deployment Standalone Deployment All Functions run on the same computer. Security Management Sever and Security Gateway Distributed Deployment Security Management Sever and Security Gateway run on different …
Continue reading "Check Point – Review Basics Deployment Types"