Posted inActive Directory Fortigate Network
FortiGate AD authentication
config user ldap edit "LDAP server" set secondary-server 10.110.1.5 end
Huawei Switch + Ubuntu + FreeRadius + AD authentication
Huawei Switch 10.255.255.1 FreeRadius 192.168.1.10 先安裝FreeRadius apt install freeradius freeradius-utils freeradius-ldap ldap-utils systemctl enable f...
My Huawei Switch standard configure
reset saved reboot sys sysname SW0001 vlan 100 int vlan 100 ip address 192.168.100.249 255.255.255.0 port-group vlan100 group-member g1/0/1 to g1/0/47...
Cacti SNMP v3 error
snmpwalk -v3 -u User -a SHA256 -A "Password" -x aes256 -X "Password" -l authPriv IP 如果是正常的, 但是Cacti no response, internal error 可能是php8.1-snmp不能正常運作, ...
Cacti Upgrade
https://www.stupid.hk/wordpress/?p=2488 Cacti: 1.2.27 to 1.2.30 Weathermap: 1.3 to 1.3.1 cd /var/www/html/cacti cat include/cacti_version git status g...
Huawei Switch Firmware upgrade
Model: S5720S-12TP-LI-AC Firmware: V200R011C10SPC600 Patch: V200R011SPH016 to Firmware: V200R022C00SPC500 Patch: V200R022SPH223 <HUAWEI>dis vers...
FortiGate Dialup IPSec VPN取代SSLVPN
由於Fortnet在新版本中已經開始對Desktop Firewall移除SSLVPN, 而Fortinet建議改用ZTNA, 但是ZTNA還需要一個EMS Server, 對於小公司來說就太覆習了, 所以就測試改用Dialup IPSec VPN 這個Lab是以IKEv1測試的, IKEv2暫時測...
FortiGate SDWan for IPSec Tunnel (BGP)
https://www.stupid.hk/wordpress/?p=2694 這篇文章把Static Route改成BGP 先改一下HQ 改其中一個Branch 把原先的Static Routes Disabled了 兩邊都設好BGP就已經Established Learn到BGP route &...
FortiGate SDWan for IPSec Tunnel (Static Route)
https://www.stupid.hk/wordpress/?p=2658 首先要先設定好基本Network, Desktop1經過Internet已經可以ping通3.3.3.3和4.4.4.4 然後建立Site to Site Tunnel(HQ WAN1 to DC WAN1) 建立Sit...
Posted inNetwork
WireShark + Windows Display vLan Tag
Intel Lan Card [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0001] "MonitorModeEnabled"=dword:00000001...