Browsing All Posts published on »March, 2012«

Debugging Fortigate VPNs

March 22, 2012

12

In the following post I will do some “research” on VPN debugs in Fortigate. It may usefull for those who has basic Foritgate VPN problems or the peer Fortigate has a Problem. Debugging should be usefull for troubleshooting, but should not only be used for troubleshooting. It should be used to understand and see how […]

Network topology with graphviz – Task 3.

March 20, 2012

1

Task 3. Create the input data for digraph: IPSO Firewall ‘clish -c “show route static”‘ output (filename: fw_static_routes_firewall1.txt): S 30.30.30.0/24 via 10.10.10.10, ae1c0, cost 0, age 6132971 S 40.40.40.0/24 via 10.10.10.10, ae1c0, cost 0, age 6132972 S 50.50.50.0/24 via 10.10.10.10, ae1c0, cost 0, age 6132973 S 60.60.60.0/24 via 20.20.20.10, ae2c1, cost 0, age 6132974 S […]

Network topology with graphviz – Task 2.

March 20, 2012

1

Task 2. List the interface name, the network address and the IP Address and the the DNS suffix. IPSO Firewall ‘clish -c “show route direct”‘ output (filename: fw_direct_routes_firewall1.txt): C 127.0.0.1/32 is directly connected, loop0c0 C 10.10.10.0/29 is directly connected, ae1c0 C 20.20.20.0/28 is directly connected, ae2c1 C 80.80.80.0/28 is directly connected, ae3c1 . # awk […]

Network topology with graphviz – Task 1.

March 20, 2012

1

Task 1. List the interface name, the IP address and the DNS suffix for the domain the IP belongs to. IPSO Firewall ‘clish -c “show interfaces”‘ output (filename: fw_interfaces_firewall1.txt): Physical Interface ae1 Up Logical Interface ae1c0 Active On link_avail Up Type i802.3ad IP Address Destination 10.10.10.1 10.10.10.0/29 Physical Interface ae2 Up Logical Interface ae2c0 Active […]

Network topology with graphviz

March 16, 2012

5

I am lazy that’s the truth, I will not paint with a microsoft Visio and not even with dia any networking topologies. It must be possible to do it with a program. A good question would be, how much time we need for a program and how much would it be if we would do […]

save and rotate backups

March 16, 2012

0

This is a really simply and of course my first script to copy firewall backups to a remote server and rotate the backups. – The script generate log files and list the files that were modified (copied or deleted). – The first part of the script checks on the remote server the old backups and […]

Timestamps of a file

March 16, 2012

1

For example to make a correct log file rotation or backup rotation or other kind of file rotation it is good to understand what kind of timestamp a file has and which one can be affected and how it can be affected. Here are documented the basic 3 linux commands that can be used to […]

Export and import the trustpoint

March 16, 2012

0

To test something in a Lab with another firewall or migrate a whole VPN with certificate to another ASA firewall we have a possibility to migrate the certificate of the firewall to another one. To do it so easily on a Checkpoint firewall  will be always just a dream… The exported data holds the followings: […]