Posted inLinux
Apache2 SSL增加安全性
https://www.ssllabs.com/ssltest/ 刪除支持SSLv2 SSLv3 TLSv1 TLSv1.1, 保留TLSv1.2, TLSv1.3 另外這個SSLCipherSuite SSLHonorCipherOrder應該是以High順序, 停用另外3個 vi /etc/ap...
Paloalto export address and address group
在Paloalto要將舊的Policy搬到另一台機, 最煩的不是Policy太多, 肯定是Object太多, Policy可能好多, 但Object肯定更多 所以使用Cli export & import address & address group便可以更快地設定Policy, ...
Paloalto can not delete Certificates
configure delete shared certificate [your certificate name]
Paloalto on Alicloud interface down
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPD3CAO Reboot not work https://knowledgebase.paloaltonetworks.com/KCSArticl...
PA-VM console設定MGT IP
admin@fw> show interface management admin@fw# set deviceconfig system type static admin@fw# set deviceconfig system ip-address netmask default-gateway...
Cisco Policy Based Routing (PBR)
https://www.stupid.hk/wordpress/?p=1929 https://www.stupid.hk/wordpress/?p=1571 再一次測試PBR 都是由PC1到R4的lo1 192.168.5.1 PC1 no ip domain-lookup no ip routi...
F5 Big-IP使用iRules指定不同Destination IP用不同的Wan IP
現在我們有4個Wan出口, 首先先設定gw-pool為預設的gateway pool, 和其他情怳用到的external_IP1_pool, external_IP2_pool, external_IP3_pool 按需要設定Priorty和Ratio 下圖的Priorty為0, 中間是5, 即是只...
Cisco AP can not join vWLC
在AP裏看到upgrade.sh: Script called with args:[ABORT], 初時以為是升級Backup image的版本失敗, 原來是不能和vWLC正常溝通 [*02/20/2023 02:26:38.0012] CAPWAP State: DTLS Setup [*02/...
Posted inNetwork
Apple Watch Unable to Check for Update
有一天有隻舊的Apple Watch 2的配對消失了, 但是還能看到時間, 重設Apple Watch後就彈出必須更新軟體, 不能Skip更新WatchOS, 現在連看時間都不能了, 手錶變磚了. 在網路上找到好多方法都失敗, 找Apple的線上專家, 到預約Genius Bar都只是說壞了, 維修...
F5 BIG-IP iRule Reject 指定domain
when HTTP_REQUEST { if { ( [string tolower [HTTP::host]] ends_with "lb.abc.com" ) } { reject } } Remark: 一般URL是 https://www.abc.com/abc/abc.php?name=a...