A quick post showing how to save the routing and interface information from your Check Point Management Servers and Gateways running on the Secure Platform OS. Simply SSH onto the box and enter netstat -rn > routes.txt ifconfig > ifconfig.txt Copy the 2 txt files off the box and then also grab a copy of /etc/sysconfig/netconf.C […]
To save me time searching for commonly used commands for administering Check Point SecurePlatform (SPLAT) based boxes, I’ve started to put together a list of them here: General: chsh -s /bin/bash username – ensures that user “username” is dropped automatically into Expert Mode when logging in through the console fw ctl pstat (displays data […]
I recently to needed to upgrade the Software Image on a Cisco ASA 5510 security appliance from version 8.2(2) to 8.2(5). This process also required upgrading the ASDM software to version 6.4(5) so that the newly upgraded appliance could still be managed via the GUI. The process for both pieces of the upgrade is […]
In this short blog post we step through upgrading the license on a Cisco Adaptive Security Appliance (ASA). The ASA ships with a “Base” license, and we will upgrade to “Security Plus”, which enables advanced features such as Failover. It’s a very simple process, as follows: Step 1. Ensure that the ASA […]
This post is a collection of other random information, config examples etc. that I’ve cobbled together in preparation for the SWITCH exam: AAA TACACS+ config enable AAA gloablly on the switch switch# conf t switch# (config) aaa new-model configure the switch with the IP of the TACACS+ server switch(config)# tacacs-server host 10.10.10.150 configure the encryption used […]
So…..with my SWITCH exam scheduled for a couple of weeks from now, it’s time to knuckle down for some serious prep work. This is going to be a mixture of reading, lab exercises and practice questions. To give this some structure and ensure I cover everything off I thought it would be a good idea to […]
Hierarchical Network Design predictable behavior low maintenance high availability recover from failure and topology changes in a pre-determined manner scale to support future expansion and upgrades design around traffic flows rather than a particular type of traffic keep end users at consistent distances from resources cisco approach enables designers to organize the network into distinct […]
InterVLAN Routing requires that routing be enabled for the layer 3 protocol – eg. IP Routing requires static routes or a dynamic routing protocol by default every port on most catalyst switch platforms is layer 2, and on 6500’s every port is layer 3 by default to determine the mode a switch port is in: […]
Protecting The Spanning Tree Protocol Topology There are 2 conditions that can occur to disrupt the loop free topology even when STP is running: BPDU’s suddenly being received on a port that shouldn’t be receiving them – can result in unexpected re-convergence results BPDU’s suddenly stop being received on a port that should be receiving them […]
STP Root Bridge Root bridge location should be determined as part of the design process. Adjustments to the STP configuration can be made for things like using redundant links to load balance in parrallel, or configuring STP to converge quickly and predictably if a major topology change occurs. note – if STP has […]