Configuration Example, Management

CactiEZ – configuration basics

René Jorissen on December 19, 2011 0 Comments • Tags: #cacti #netconfig #networking #ntp #sync #time

Every time I install CactiEZ or Cacti on another platform, I am searching for the commands to basically install the most common parameters, like static IP addressing, NTP sync and time zones. Several times I thought about writing a simple article with the necessary commands and final I had time to create it. Networking netconfig … Read More

Configuration Example, Wireless

AeroHive Spectrum Analysis

René Jorissen on November 3, 2011 0 Comments • Tags: #aerohive #analysis #hiveap #hivemanager #spectrum

One cool feature about AeroHive is the build-in Spectrum Analysis feature, which is enabled by default from HiveOS 4 and higher. Spectrum analysis is very useful to get a view of the RF environment near an access-point.  This is especially useful when troubleshooting bad connections (high volume of retransmissions) or other problems related to the … Read More

Configuration Example, Firewalling

Cisco ASA – Reset TCP connection

René Jorissen on August 22, 2011 2 Comments • Tags: #application #asa #cisco #idle #legacy #packet #psh #reset #rset #tcp #timeout

“Normal” TCP applications use a three-way handshake to establish a session. After data has been send the session is closed. Some legacy applications don’t always close a TCP session. They keep the session open, even when the session is idle for a long time (+ 2 hours). When the session is idle and a client … Read More

Configuration Example, Security

Windows CA template – web server and private key export

René Jorissen on May 23, 2011 1 Comment • Tags: #ca #duplicate #export #grayed #key #out #private #server #template #web #windows

Creating a web server certificate request is very easy when using a Windows CA server. There is one disadvantage. The requested certificate is directly stored in the user store (by default) or the local computer store, if specified during the request. The disadvantage is that you cannot export the requested certificate including the private keys. … Read More

Configuration Example, Firewalling, Routing

NBAR and smart filtering

René Jorissen on February 15, 2011 2 Comments • Tags: #application #based #http #match #mime #nbar #network #protocol #recognition

NBAR (Network Based Application Recognition) is a cool Cisco tool to identify and classify content flowing through a router. You can identify applications as mission critical, business-related, non-critical or unwanted. Once these mission critical applications are classified they can be guaranteed a minimum amount of bandwidth, policy routed, and marked for preferential treatment. Non-critical applications … Read More

Configuration Example, IPSec / SSL VPN

OpenVPN ALS

René Jorissen on November 29, 2010 1 Comment • Tags: #adito #als #install #openvpn #ubuntu

A few days ago I installed and configured the SSL VPN solution OpenVPN ALS, which is a direct descendant of Adito, which has a fork of SSL-Explorer. OpenVPN ALS is a simple to use SSL VPN solution to publish multiple services via browser-based portal. OpenVPN uses Java to publish multiple services. OpenVPN ALS isn’t an … Read More