I recently experienced a situation where an attempted push of firewall configuration was failing for a single production HA firewall. The error being received when attempting the push was the following: The validation error can be fixed by simply performing
Network Design – VDSL
Introduction I’ve been through many network designs over the years and pretty much every UK ISP. A great design I settled on for business grade VDSL connections was by utilising a separate router on the front end with firewall behind.
NetBox Automation
Introduction I’ve not posted about NetBox before, which I really should have done as I’ve been using it for years. It is a fantastic piece of open-source software that has been steadily improving over time. Originally conceived by Jeremy Stretch
Assigning IP Addresses APC PDU via ARP
Introduction If you have ever ended up in the situation in which you have APC PDUs connected to your network which were never assigned management IP addresses then this is a nifty trick you can use to get them up
SNMPv3 Setup
Introduction SNMP has been around for many years and even though the acronym stands for simple network management protocol, it is quite complex and takes significant time to understand exactly how to get the best from it. It is well
Configuring Multiple Default Routes Linux
Introduction No real need to explain the problem too in depth. A Linux machine with multiple interfaces accepts a packet on one interface but sends the reply out of another. Not going to work in the bulk of situations. Solution
OSPFv3 Authentication Palo Alto to Cisco Router
Introduction OSPFv3 authentication is quite generally quite straightforward to configure between two Cisco devices. There are some great posts regarding this topic, in fact one of the best I’ve read is by the great Jeremy Stretch. http://packetlife.net/blog/2008/sep/3/ospfv3-authentication/ The issue I
Palo Alto Dual WAN branch office to Netscreen HQ
Introduction The deployment of dual WAN firewall solutions in branch offices is often required to ensure fail-over for unreliable WAN connections. This type of deployment however can add additional complexity compared to a full BGP setup using capable routers. With
Juniper Netscreen Track IP
Introduction IP tracking can be used to change routing based on the connectivity of configured IP addresses. This can be used with either default routes or static routes which in normal circumstances would not change in the event of reachability
Cisco Span Port Configuration
Introduction If you’ve ever needed to perform packet analysis for troubleshooting then you have options. If you have an IP base IOS image or above then it is likely you can do a packet capture directly on the switch however