Goodies – Page 3

HAProxy Use Multiple Config Files from a folder

Create a folder to contain the .cfg files sudo mkdir -p /etc/haproxy/haproxy.d Change the systemd file used for the HAProxy Service sudo vim /etc/systemd/system/multi-user.target.wants/haproxy.service Find the line that starts with…

pje August 16, 2023

Goodies | Microsoft Goodies | Windwos

Two-Tier CA structure ( Online Subordinate CA )

Prerequisites IIS must be installed and working from the clients that will need the RootCA or certs signed by the RootCA server. See more for a simple IIS install guide…

pje August 15, 2023

Goodies | Microsoft Goodies | Windwos

Two-Tier CA structure ( Offline RootCA )

Prerequisites IIS must be installed and working from the clients that will need the RootCA or certs signed by the RootCA server. See more for a simple IIS install guide…

pje August 15, 2023

Goodies Goodies | Microsoft Goodies | Windwos

Install IIS for Certificate Authority CRL and Root Certificate distribution

Open powershell and install the iis windwos feature mkdir c:\inetpub\certs New-WebVirtualDirectory -Site "Default Web Site" -Name "certs" -PhysicalPath "c:\inetpub\certs" Open the IIS manager Expand the Sites and expand the Default…

pje August 15, 2023

Goodies Goodies | Fortinet

Disable SIP-ALG on VDOM and policy

config system settings set sip-expecation disable end config voip profile next edit Disable-SIP-ALG show config sip show set status disable set strict-register disable end next end

pje August 15, 2023

Goodies Goodies | Fortinet Knowledge

Fortigate Best practices – CLI Examples

Management *Missing from this guide. Management users from central user database ( LDAP, SAML etc ) Configure the web management portsHostname and the Alias of the firewalls.I enable LLDP for…

pje July 19, 2023

Goodies Goodies | Fortinet Knowledge

Fortigate Best practices – Introduction

Management Network Should be independent from production or business traffic, it does not have to compete for resources and management access can be maintained when reconfiguring the production network. Policies…

pje July 11, 2023

Goodies Goodies | Lenovo

Add VLAN to a Lenovo switch in a MCLAG cluster

There are consistency check in the Lenovo swtiches when they are participating in a MCLAG cluster. Therefor the switche will shutdown the ports if there are an inconsistency between the…

pje July 2, 2023

802.1x Goodies Goodies | Microsoft

Microsoft CA Server installation

Install the Windows feature. Open powershell as admin and execute the following command I strongly reccomend to not use the server name as the CA Common Name, since this will…

pje July 2, 2023

Goodies Goodies | Linux

Bash Generate random number

Number between 1 and 10 $((1 + RANDOM % 10))

pje July 2, 2023