Posted inF5
F5 BIG-IP Multi Wan & Multi Node Persistence
有一個Web Server有3個Public IP, GSLB有一個Pool, 裏面有3個members 所以即是有3個Virtual Server, 3個Virtual Server都是指到同一個Pool, 而這個Pool只有一個member 今天因應需求而需要增加一個Web Server, 當增...
Paloalto SNMPv3 PRTG
Auth Password對應PRTG的Password Priv Password對應PRTG的Encryption Key OID & Option & Mask 文章底部再自行了解 需要改為SHA和AES MGMT的interface需要增加SNMP Reference htt...
Paloalto disable MGMT CBC ciphers & TLS 1.1
首先建立一個SSL/TLS Service Profile, 選擇Certificate, Self-sign或trusted certificate並便用最低TLSv1.2 預設只有2個設定 # show shared ssl-tls-service-profile AAAAAA protocol...
Paloalto export address and address group
在Paloalto要將舊的Policy搬到另一台機, 最煩的不是Policy太多, 肯定是Object太多, Policy可能好多, 但Object肯定更多 所以使用Cli export & import address & address group便可以更快地設定Policy, ...
Paloalto can not delete Certificates
configure delete shared certificate [your certificate name]
Paloalto on Alicloud interface down
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPD3CAO Reboot not work https://knowledgebase.paloaltonetworks.com/KCSArticl...
PA-VM console設定MGT IP
admin@fw> show interface management admin@fw# set deviceconfig system type static admin@fw# set deviceconfig system ip-address netmask default-gateway...
Cisco Policy Based Routing (PBR)
https://www.stupid.hk/wordpress/?p=1929 https://www.stupid.hk/wordpress/?p=1571 再一次測試PBR 都是由PC1到R4的lo1 192.168.5.1 PC1 no ip domain-lookup no ip routi...
F5 Big-IP使用iRules指定不同Destination IP用不同的Wan IP
現在我們有4個Wan出口, 首先先設定gw-pool為預設的gateway pool, 和其他情怳用到的external_IP1_pool, external_IP2_pool, external_IP3_pool 按需要設定Priorty和Ratio 下圖的Priorty為0, 中間是5, 即是只...
F5 BIG-IP iRule Reject 指定domain
when HTTP_REQUEST { if { ( [string tolower [HTTP::host]] ends_with "lb.abc.com" ) } { reject } } Remark: 一般URL是 https://www.abc.com/abc/abc.php?name=a...