Posted inGoodies Goodies | Unifi
Unifi – Set Option 43 for controller IP
Unifi uses option 43 so the switches and AccessPoints can find its controller if it is not present on the same L2 network. Option 43 should be filled out with…
Posted inGoodies Goodies | Linux Goodies | Rsyslog
Rsyslog – Forward logs to another server
Create a new config file under the rsyslog config directory sudo vim /etc/rsyslog.d/30-forward-logs.conf Use single @ for udp forwardingUse double @ for tcp forwarding Example of udp forwarding *.* @172.16.204.1:514…
Posted inGoodies Goodies | Linux Goodies | Rsyslog
Rsyslog – Save login to a seperate file
Create a new rsyslog config file sudo vim /etc/rsyslog.d/10-auth.log.conf Add the following text :msg, contains, ":session" /var/log/rsyslog-auth.log :msg, contains, ":auth" /var/log/rsyslog-auth.log :msg, contains, "COMMAND=" /var/log/rsyslog-auth.log :msg, contains, "session opened for…
Posted inGoodies Goodies | HAProxy
HAProxy Use Multiple Config Files from a folder
Create a folder to contain the .cfg files sudo mkdir -p /etc/haproxy/haproxy.d Change the systemd file used for the HAProxy Service sudo vim /etc/systemd/system/multi-user.target.wants/haproxy.service Find the line that starts with…
Posted inGoodies | Microsoft Goodies | Windwos
Two-Tier CA structure ( Online Subordinate CA )
Prerequisites IIS must be installed and working from the clients that will need the RootCA or certs signed by the RootCA server. See more for a simple IIS install guide…
Posted inGoodies | Microsoft Goodies | Windwos
Two-Tier CA structure ( Offline RootCA )
Prerequisites IIS must be installed and working from the clients that will need the RootCA or certs signed by the RootCA server. See more for a simple IIS install guide…
Posted inGoodies Goodies | Microsoft Goodies | Windwos
Install IIS for Certificate Authority CRL and Root Certificate distribution
Open powershell and install the iis windwos feature mkdir c:\inetpub\certs New-WebVirtualDirectory -Site "Default Web Site" -Name "certs" -PhysicalPath "c:\inetpub\certs" Open the IIS manager Expand the Sites and expand the Default…
Posted inGoodies Goodies | Fortinet
Disable SIP-ALG on VDOM and policy
config system settings set sip-expecation disable end config voip profile next edit Disable-SIP-ALG show config sip show set status disable set strict-register disable end next end
Posted inGoodies Goodies | Fortinet Knowledge
Fortigate Best practices – CLI Examples
Management *Missing from this guide. Management users from central user database ( LDAP, SAML etc ) Configure the web management portsHostname and the Alias of the firewalls.I enable LLDP for…
Posted inGoodies Goodies | Fortinet Knowledge
Fortigate Best practices – Introduction
Management Network Should be independent from production or business traffic, it does not have to compete for resources and management access can be maintained when reconfiguring the production network. Policies…