gdp's Comments

Fir3net.com - Keeping You In The Know : Configuring a Hairpin VPN with Double NAT on a Cisco ASA running 8.0 | Cisco - ASA

Sat, 12 Jul 2014 16:10:51 +0000

This has been updated to ... "As we want to NAT the destination when the source address is 2.2.2.20, POLICYNAT-2 reads slighty differently to the previous NAT statement. The NAT entry reads. When traffic is destined for 172.16.30.1 with a source IP of 2.2.2.20 on the outside interface translate the destination address to 192.168.30.1." This has been updated on fir3net 2.0 which is set to be released in the next 4 weeks....

Fir3net.com - Keeping You In The Know : BigIP F5 LTM - How to Create a Sorry Page with Image | Big-IP F5 LTM

Tue, 25 Feb 2014 16:25:36 +0000

v11.4 update ----> add the file to desktop and add via import within 'system/file management/data group file list'

Fir3net.com - Keeping You In The Know : BigIP F5 LTM - How to Create a Sorry Page with Image | Big-IP F5 LTM

Wed, 12 Feb 2014 22:10:43 +0000

This should work. Or you could add a cache-control header to the response.

Fir3net.com - Keeping You In The Know : How do I configure PMTU on a Juniper SRX series gateway ? | Juniper - SRX Series Gateway

Tue, 7 Jan 2014 19:35:00 +0000

When you enable PTMU if a packet bigger then the MTU is received the SRX will send an ICMP message including its MTU. In short the value will be the MTU of the ingress interface.

Fir3net.com - Keeping You In The Know : How do I to rename a Virtual Server on a F5 LTM ? | Big-IP F5 LTM

Tue, 7 Jan 2014 13:42:08 +0000

Did you only make the config changes on the active and then issue a "b load" on the active only. And then sync`d the config over to the standby ???

Fir3net.com - Keeping You In The Know : Juniper SRX - The Static NAT / Policy based VPN Problem | Juniper - SRX Series Gateway

Fri, 15 Nov 2013 23:33:58 +0000

I think you will need to use route based, as you need to add the source interface so you can dictate when the NAT rule is triggered.

Fir3net.com - Keeping You In The Know : Juniper SRX - How to configure a policy based VPN | Juniper - SRX Series Gateway

Fri, 15 Nov 2013 23:28:02 +0000

Its basically done within the policy. i.e the proxy ids (with srx policy based vpns) are defined from the entries configured within the security policy. Any other questions just let me know.....

Fir3net.com - Keeping You In The Know : Brocade ADX - How to perform an image upgrade | Brocade ADX

Wed, 13 Nov 2013 08:02:07 +0000

make sure it in flash .. SSH@ADX#sh flash Active management module: Compressed Pri Code size = 25666421, Version 12.4.00dT403 Dec 6 2012 19:36:14 PST label: ASR12400d Compressed Sec Code size = 25810297, Version 12.4.00jT403 Aug 19 2013 21:13:21 PDT label: ASR12400j Used Configuration Flash Size=27053, Max Configuration Flash Size=1441790

Fir3net.com - Keeping You In The Know : UNIX - Sed By Example | General UNIX | UNIX / Linux

Mon, 4 Nov 2013 12:52:05 +0000

sed -r 's/(^.*".*\\" \\{)/\\L\\1/' 1234.txt

Fir3net.com - Keeping You In The Know : How to configure a Cisco ASA Site to Site VPN between Static and Dynamic IP based Peers | Cisco - AS

Fri, 20 Sep 2013 07:10:35 +0000

Dynamic 10.1.100.0 / Static = 172.16.1.0

Fir3net.com - Keeping You In The Know : Juniper SRX - The Static NAT / Policy based VPN Problem | Juniper - SRX Series Gateway

Mon, 9 Sep 2013 20:50:40 +0000

If you are wanting to NAT VPN traffic, then you could just use a route based VPN using the following config, root@srxA-1# show static { rule-set static-nat { from interface [ st0.0 ]; rule static-nat-rule { match { destination-address [mapped network]/24; } then { static-nat prefix [real network]/24; } } } } The reason that this article focus`s in on NAT exemption is that when the packet hits the policy no source translation would of occurred so the policy is only going to build the proxy ids from the "real" source address. Hope these points help....

Fir3net.com - Keeping You In The Know : How to configure a Cisco ASA Site to Site VPN between Static and Dynamic IP based Peers | Cisco - AS

Mon, 9 Sep 2013 20:41:25 +0000

Thanks for letting us know. This has now been updated.

Fir3net.com - Keeping You In The Know : Configuring Wireless Connectivity within Backtrack 4 r2 | Debian / Ubuntu

Sat, 31 Aug 2013 19:48:01 +0000

how are you mapping the wireless card to the vm, to get the driver across you could save it to an iso and then mount this on the vm.

Fir3net.com - Keeping You In The Know : Juniper SRX - How to configure the time, date and NTP | Juniper - SRX Series Gateway

Mon, 22 Jul 2013 18:21:11 +0000

Great feedback. Thanks ....

Fir3net.com - Keeping You In The Know : Configuring Wireless Connectivity within Backtrack 4 r2 | Debian / Ubuntu

Thu, 20 Jun 2013 15:37:55 +0000

Is your machine able to connect to the repo servers ?

Fir3net.com - Keeping You In The Know : BigIP LTM F5 - Balancing Methods

Thu, 30 May 2013 07:53:27 +0000

Dynamic Ratio - http://support.f5.com/kb/en-us/solutions/public/9...

Fir3net.com - Keeping You In The Know : How do I password protect / encrypt a file within Linux using OpenSSL ? | Redhat / Fedora | UNIX / L

Tue, 21 May 2013 10:08:25 +0000

IIRC Ive had issues before with using a single file name, so I have always used different files and then cleared up/deleted any files once the file had been decrypted/encrypted. Though you should be able to test this easily enough via shell to confirm either way.

Fir3net.com - Keeping You In The Know : Brocade ADX Commands | Brocade ADX

Thu, 25 Apr 2013 11:45:15 +0000

low level debug commands more \\usb0\\eventlog.txt dm save_area mp

Fir3net.com - Keeping You In The Know : Juniper SRX Commands | Juniper - SRX Series Gateway

Mon, 25 Mar 2013 14:04:22 +0000

show security match-policies from-zone <ZONE> to-zone <ZONE> source-ip .....

Fir3net.com - Keeping You In The Know : Brocade ADX - Healthcheck Elements | Brocade ADX

Wed, 20 Mar 2013 10:49:15 +0000

To tie 2 healthchecks together(port 80 and 443) the following command can be used : ==== hc-track-port 80 443 =====