Verbal Kint - Misr

Verbal Kint

Configuring a Dial-Up S2S IPSec tunnel between a Mikrotik and Fortigate Responder

Configuring a Dial-Up S2S IPSec tunnel between a Mikrotik and Fortigate Responder

Introduction IPSec tunnels provide a robust and reliable solution for establishing secure communications over public networks. In this guide, we will walk through the process of configuring a dial-up IPSec VPN tunnel between a MikroTik router (as the initiator) and a FortiGate firewall (as the responder). This setup is ideal

Fortigate and Linux: Creating a Secure GRE over IPSEC Tunnel

Fortigate and Linux: Creating a Secure GRE over IPSEC Tunnel

Introduction In today’s network environments, secure and efficient communication between remote sites is critical. A popular solution for achieving this is by configuring a GRE (Generic Routing Encapsulation) tunnel over an IPSEC (Internet Protocol Security) tunnel. GRE provides a way to encapsulate various network layer protocols, while IPSEC ensures

Introduction to Linux Networking

Introduction to Linux Networking

Show mac address table of a linux bridge sudo brctl showmacs <bridge-name/interface> Creating a Vlan subinterface Create the VLAN Sub-Interface: sudo ip link add link eth0 name vlan99 type vlan id 99 Assign an IP Address to the VLAN Sub-Interface: sudo ip addr add 10.99.0.

The Mikrotik DHCP Relay Process

The Mikrotik DHCP Relay Process

Introduction There appears to be a subtle distinction in how Mikrotik manages the DHCP relay process compared to other vendors such as Cisco and Aruba. Unlike these vendors, Mikrotik sources DHCP Discover and Request packets using the address of the egress interface, rather than the GIADDR/Proxy address Below is

Configuring VLTi on Dell Switches

Configuring VLTi on Dell Switches

Configuring VLTi What is VLTi A layer 2 technology that allows you to stack switches without dedicated stacking cables, The VLT peers (switches running VLT protocol) synchronise protocol state information, MAC address and ARP tables, between them. All VLANs are also automatically allowed on the VLTi link without any manual

Configuring Layer 2 Access Lists/vACLs

Configuring Layer 2 Access Lists/vACLs

Introduction If the switch is a multilayer switch, you can restrict intra-vlan traffic, provided that the traffic passes through the switch. Step 1: Define Access List ip access-list extended PROTECT-PHONE permit ip 10.0.15.0 0.0.0.255 10.0.15.0 0.0.0.255 Step 2:

Differences between PACL, VACL, and RACL

Networking Featured

Differences between PACL, VACL, and RACL

Summary: When a PACL, a VACL, and a RACL are all configured in the same VLAN, the ACLs are applied in a specific order, depending on whether the incoming traffic needs to be bridged or routed: Bridged traffic processing order (within the same VLAN) 1. Inbound PACL on the switchport

Useful Cisco Commands

Useful Cisco Commands

"Is traffic actually using that new route?" (config)# ip cef accounting non-recursive per-prefix sh ip cef $subnet/$mask "Is anyone sending me traffic to unroutable destinations?" debug ip cef drops "What changed between the running and startup config?" show archive config differences nvram:startup-config

How to circumvent Firewall blocks

How to circumvent Firewall blocks

This a quick guide on how to use ssh tunneling Local Tunneling In the below example, we can assume that you are allowed to ssh to 192.168.0.135 BUT you are not allowed to RDP to that machine. ssh -L 8181:192.168.0.135:3389 pi@192.

How to Install FortiAnalyzer on Proxmox

How to Install FortiAnalyzer on Proxmox

Set up FAZ on Proxmox Following this guides: https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-install-FortiGate-VM-on-Proxmox/ta-p/301097 https://carbonara.tech/post/2020/08/installing-a-fortianalyzer-in-proxmox/ Step 1: Download the image from Sorti Support Step 2: Copy the image into the Proxmox server scp fortios.qcow2 [email protected]:/root/

Bulding a weather station with a Raspberry Pi

Bulding a weather station with a Raspberry Pi

New Page What you need * Reflective IR Sensor with 470 and 10K Resistors * DHT11 Temperature and Relative Humidity Sensor Module * Ping Pong Balls * Screws * PVC Plastic sheets * Raspberry Pi Build It Wiring Schematic I ended up soldering male pins onto the end 2 ethernet cables, then plugging both the temp

Exploring Route Selection on a PC: A Research Hypothesis

Exploring Route Selection on a PC: A Research Hypothesis

Introduction: Recently, I became intrigued by the low-level mechanisms that govern route selection on a PC. I hypothesised that the host machine calculates a bitwise AND operation between its IP address and subnet mask to determine the network address. Similarly, when forwarding a packet, I suspected the PC performs the

How to remotely conduct 4G Failover testing on a Cisco Router

How to remotely conduct 4G Failover testing on a Cisco Router

Prerequisites test that the cellular interface is up ping 8.8.8.8 source-interface cellular 0/0/0 if there is no response, then power-cycle the cellular module and test again test cellular 0/0/0 modem-power-cycle // this is a hidden command so if it doesn't come up,

Temperature Sensor on a RaspberryPi

Temperature Sensor on a RaspberryPi

Stage 1: Buy the parts * https://littlebirdelectronics.com.au/products/raspberry-pi-4-model-b-4-gb?srsltid=AfmBOoqT3RC3q_bGMFhvK6RIbb4JgoVNzBar5etBRj7jJ71FqGjt3ajw * https://littlebirdelectronics.com.au/products/standard-lcd-16x2-extras-white-on-blue?pr_prod_strat=e5_desc&pr_rec_id=343d54447&pr_rec_pid=8812086690081&pr_ref_pid=8811427430689&pr_seq=uniform * https://littlebirdelectronics.com.au/products/bme680-breakout-air-quality-temperature-pressure-humidity-sensor?

How to Recover a Dual-Boot System after a Windows Update

How to Recover a Dual-Boot System after a Windows Update

Introduction Ah, the age-old dual-boot dilemma: install Windows after your Linux distro, and you’re practically inviting trouble. “No problem,” you say, “I’ll just install Windows first!” Easy, right? Well, not really it turns out. Even if you follow the rules and everything’s running smoothly, one day your