The Packets, Life and everything
After dealing with CBQoS in the past days, some observations i have made Cisco seams not to fill the SNMP variables on Catalyst 2960C /2960CG / 2960CX platforms. snmp genarator is picky about ordering. You may find this line "- source_indexes: [cbQosObjectsIndex, cbQosPolicyIndex]" in the GitHub Issues but this "- source_indexes: [cbQosPolicyIndex, cbQosObjectsIndex]" seams to …
Creating some cool DNS based load balancing and geo aware server selection. gdnsd is an opensource alternative to commercial products. Setup will monitor the Service (SQUID) and remove non responsive services. Install on FreeBSDConfig for gdnsdZone configurationTests Install on FreeBSD pkg install gdnsd3 Config for gdnsd /usr/local/etc/gdnsd/config options => { tcp_timeout => 15 ; zonefile-style …
Create the Switch Add an uplink port Create the VMVM Configuration Booting the KernelCPU / RAMHarddisksNetworkThe HarddisksConvert the Harddisks from vmdk to rawDisk0Disk 1 Migrating the FortiManager from VMWare ESXi to FreeBSD bhyve. Be aware you doing this on your own without any support from Fortinet. bhyve is not a supported platform. Create the Switch …
FreeBSD freebsd:~ $ netstat -rWRouting tablesInternet:Destination Gateway Flags Nhop# Mtu Netif Expiredefault 11.155.93.1 UGS 6 1500 em011.155.93.0/24 link#1 U 3 1500 em011.155.93.77 link#2 UHS 5 16384 lo0localhost link#2 UH 1 16384 lo0Internet6:Destination Gateway Flags Nhop# Mtu Netif Expire::/96 link#2 URS 6 16384 lo0default fe80::1%em0 UGS 7 1500 em0localhost link#2 UHS 1 16384 lo0::ffff:0.0.0.0/96 link#2 URS …
Some interestion observation over the past weeks, is that i have seen Linux is selecting only even source ports. So lets have a closer look. An exampleDoes this have any effect? How does LACP work?Does this make a difference? Yes certainly it does make a diffrence. What can we do? Where does this come from? …
Continue reading "Source Port selection on Linux results allways in even ports"
Quick setup a Central Syslog Server https://wiki.freebsd.org/Ports/sysutils/syslog-ng Install Syslog NG pkg install syslog-ng Edit the Configuration /usr/local/etc/syslog-ng.conf @version: 4.4source s_remote { tcp(port(514)); udp(port(514));};destination d_remote { file( "/var/log/remote/${HOST}/${YEAR}_${MONTH}_${DAY}.log" create-dirs(yes) );};log { source(s_remote); destination(d_remote);}; Enables the Service sysrc syslog_ng_enable="YES" Create nessesary directory mkdir /var/log/remotechown root:wheel /var/log/remotechmod g+w /var/log/remote Start the Service service syslog-ng start
FreeBSD Wifi - RTL8821CEEdimax USB WiFi - RTL8188CUSRealtek Edimax AC600 (EW-7811UTC) - RTL8811AU FreeBSD Wifi - RTL8821CE pciconf -l -vrtw880@pci0:5:0:0: class=0x028000 rev=0x00 hdr=0x00 vendor=0x10ec device=0xc821 subvendor=0x10ec subdevice=0xc821 vendor = 'Realtek Semiconductor Co., Ltd.' device = 'RTL8821CE 802.11ac PCIe Wireless Network Adapter' class = network Driver compatiblity vi /boot/loader.confcompat.linuxkpi.skb.mem_limit=1 Enable Setting in rc.conf sysrc wlans_rtw880="wlan0"sysrc create_args_wlan0="country …
Check interface settings in SMS. Bond4 should be sync Mgmt should be Cluster + Sync
Check Point has removed SHA1 support from R81. It is possible to get SHA1 back. Applies up to R81.20 clish add snmp usm user myuser security-level authPriv auth-pass-phrase TEMP-AUTH-PHRASE privacy-pass-phrase TEMP-PRIV-PHRASE privacy-protocol AES authentication-protocol SHA512 expert dbset snmp:v3:user:myuser:auth:proto .1.3.6.1.6.3.10.1.1.3 clish set snmp usm user myuser security-level authPriv auth-pass-phrase REAL-AUTH-PHRASE privacy-pass-phrase REAL-PRIV-PHRASE
In the first part we gain the ability to control the power switches in Home Assistant. Now we can utilize the API to control the status of the power switch. For now i use the homeassistant_api in python, to do this. Below you can find an example. Looking ahead, the vision includes functionalities for power …
Tests is there someone listening netstat -an | findstr 0.0.0.0:80 TCP 0.0.0.0:80 0.0.0.0:0 LISTENING UDP 0.0.0.0:80 *:* Powershell port test Test-NetConnection -ComputerName "10.55.113.101" -Port 80 -InformationLevel "Detailed" Lookup soure interface get router info routing-table details 10.255.2.250 Lookup the policy diagnose firewall iprope lookup 10.255.2.250 30000 10.137.2.104 80 tcp port1 matches policy id: 1039431 The policy …
Patrick Marc's Networks 