V dnešním návodu si podrobně probereme nastavení OpenVPN serveru na OPNsense firewallu s využitím nestandardního portu 443. Port 443 je zajímavý tím, že většina firemních sítí a veřejných WiFi ho povoluje, což vám umožní obejít mnoho síťových restrikcí. Proč právě port 443? Standardní OpenVPN port je 1194/UDP, ale ten je často blokován firewally. Port 443 […]
Rubrika: Firewall
MIKROTIK VLAN SWITCH
https://www.derekseaman.com/2021/03/home-lab-mikrotik-ccr2004-and-crs317-configuration.html Very recently I decided to completely re-do my home lab hardware, and really step things up a few notches. My previous home lab gear was too old to use for anything useful, so out with old and in with the new! As a result of this new gear, I wanted to publish at least […]
IP nat OSPF2
upgrade openwrt and build own image zabbix
download OpenWrt-ImageBuilder untar and jump into directory make image PROFILE=TLWA901 PACKAGES="-wpad-mini wpad luci zabbix-extra-mac80211 zabbix-extra-network zabbix-extra-wifi" copy image into old running AP scp ./bin/ar71xx/openwrt-15.05.1-ar71xx-generic-tl-wa901nd-v2-squashfs-fact ory.bin root@192.168.1.23:/tmp/ ssh into AP ssh root@[ip] cd /tmp sysupgrade -b backup.tar.gz # backup old config sysupgrade -f ./backup.tar.gz ./openwrt-15.05.1-ar71xx -generic-tl-wa901nd-v2-squashfs-factory.bin # install new image and restore old config configure zabbix echo […]
mikrotik wifi vlan eth2
/interface wireless add master-interface=wlan1 name=wlan1.10 ssid=ssid10 add master-interface=wlan1 name=wlan1.30 ssid=ssid30 /interface vlan add vlan-id=10 interface=ether2 name=ether2.10 add vlan-id=30 interface=ether2 name=ether2.30 /interface bridge add name=native add name=vlan1 add name=vlan10 add name=vlan30 /interface bridge port add bridge=vlan1 interface=ether2 add bridge=vlan1 interface=wlan1 add bridge=vlan10 interface=ether2.10 […]
Pfsense AES-NI in host kvm
in this manual are help for me https://www.sheldon.fr/2015/07/activer-lacceleration-materielle-aes-pour-son-vpn/ set in proxmox KVM CPU as host not QEMU64 pro openvpn hledat HW v pripade OpenVPN tady https://wiki.openwrt.org/doc/howto/benchmark.openssl
SNMP Ubuntu
http://cs.wikipedia.org/wiki/Simple_Network_Management_Protocol http://www.linuxsoft.cz/article.php?id_article=1963 Známé dohledové systémy Zabbix Nagios Big-Brother Big-Sister sudo apt-get install snmpd # zjisteni ze je spusten ps ax |grep snmp běží na portu udp/161 a doporučuji používat verzi 3 a snmp klient sudo apt-get install snmp snmpwalk # výpis možných OID dotazů snmpwalk -v 2c -c public [hostname] pokud Vám snmpd neposlouchá […]
Cisco NAT a Forwarding portu
interface FastEthernet0/0 ip address 213.155.225.1 255.255.255.0 ip nat outside duplex auto speed auto ! interface FastEthernet0/1 ip address 192.168.10.1 255.255.255.0 ip nat inside duplex auto speed auto ip nat inside source list 1 interface FastEthernet0/0 overload ip nat inside source static tcp 192.168.10.2 443 213.155.225.1 443 ip classless ! ! access-list 1 permit 192.168.10.0 0.0.0.255 […]
Cisco ACL
odkaz na web s dokumentaci http://www.cisco.com/c/en/us/support/docs/ip/access-lists/26448-ACLsamples.html ukázka blokování portu 80 a povoleni portu 443 na serveru CISCO ACL.pkt
Cisco dynamic routing protocol – RIP, EIGRP, OSPF, BGP
Interior Gateway Protocols Exterior Gateway Protocols Distance Vector Link-State Path Vector IPv4 RIPv2 EIGRP OSPFv2 IS-IS BGP-4 IPv6 RIPng EIGRP for IPv6 OSPFv3 IS-IS for IPv6 MBGP RIP routing http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/route_rip.pdf http://www.samuraj-cz.com/clanek/cisco-routing-1-obecne-vlastnosti-smerovacich-protokolu/ Ukázka v CPTR RIP-ukazka.pkt http://computernetworkingnotes.com/routing-static-dynamics-rip-ospf-igrp-eigrp/rip-routing-configurations.html