Imperva 14 SCP Backup Key exchange was not finished,connection is closed
GUI 顯示 Key exchange was not finished, connection is closed. cannot negotiate, proposals do not match. 但是Cli用SCP完全正常, 最後發現原來GUI只能支援舊式算法 vi /var/log/mes...
Cisco EIGRP + BGP redistribute eigrp
host MPLS int e0/0 ip address 192.168.1.1 255.255.255.0 no shut int e0/1 ip address 192.168.2.1 255.255.255.0 no shut int e0/2 ip address 192.168.3.1 ...
Posted inPalo Alto
Paloalto Chrome 124 show ERR_SSL_KEY_USAGE_INCOMPATIBLE
Chrome 124 show ERR_SSL_KEY_USAGE_INCOMPATIBLE, 用regedit和shortcut的方法bypass檢查的方法已經不行了 用Powershell生成新的self sign cert, 然後export & import到PA New-SelfS...
Posted inNetwork
Imperva WAF OS Upgrade
先更新gateway, 然後更新mx md5sum SecureSphere-WAF-Update-Q4_23-14.7.0.41_0.46930.x cat SecureSphere-WAF-Update-Q4_23-14.7.0.41_0.46930.x.md5 chmod +x ...
Cisco ISE NAC Dot1x
請先看ISE NAC MAB再看ISE NAC 802.11x https://www.stupid.hk/wordpress/?p=2284 我們首先安裝CA Server 選擇Active Directory Certificate Services 一直Next, 然後除了原有的Certifi...
Cisco Switch copy ftp
ip ftp username ftpuser ip ftp password ftpuserpassword copy flash:xxx.bin ftp://xxx.xxx.xxx.xxx/ copy ftp://xxx.xxx.xxx.xxx/xxx.bin flash: no ip ftp ...
Posted in未分類
Cisco Switch Timezone
service timestamps debug datetime localtime service timestamps log datetime localtime clock timezone HKT 8 ip name-server 8.8.8.8 ntp server stdtime.g...
Cisco ISE NAC MAB
由於這個只是實驗性質, 以免測試過程中, Lock了這個Mac address, 影響結果, 可以先停用這個Suppress Repeated Failed Clients Administration -> System -> Settings -> Protocols ->...
Cisco Switch 使用 Cisco ISE 驗証
在Switch上的設定 hostname R6 enable algorithm-type scrypt secret {Password} ip domain name abc.com username admin algorithm-type scrypt secret {Password} l...