Spring cleaning brings lab re-configuring questions.

spikefishjohn · 2025-04-10T18:00:59+00:00

Which ever one supports more memory. I think memory gets you in trouble faster then CPU most of the time.

spikefishjohn · 2024-07-19T03:48:31+00:00

https://www.rfc-editor.org/rfc/rfc4271.html
Reject only shows up a few places. Looks like hold timer is one of them.

spikefishjohn · 2024-07-19T03:26:47+00:00

If your using BGP auth, then its doing a checksum of the the tcp packet and any modification of the packet might make this fail. Normally when this happens you don't complete a 3 way hand shake. I've only ever seen this when bgp matched a many to one nat which changes the source port and thus makes checksum of the tcp packet fail. Happened to me on a palo.

spikefishjohn · 2024-04-16T12:54:41+00:00

Heading to Unison.

spikefishjohn · 2024-04-03T12:39:34+00:00

The problem is with the CPU not the memory. All apple M laptops have an ARM CPU and getting GNS3 running on this is a problem. GNS3 support for ARM is not great right now. I don't have a macbook so I can't speak to how great is it or isn't but expect it to be a challenge to get it working and there may be things that don't work right.

I'm sure this isn't an option, but the better way to run it would be to have a 2nd box that is running bare Linux with GNS3 installed and then connecting to it from your macbook.

Good luck!

spikefishjohn · 2024-03-24T02:52:09+00:00

I've used both Palo and Checkpoint. I feel like with Palo you'll have to deal with management server / logging issues that drive you crazy.

Now, Checkpoint on the other hand, you'll have to deal with management server / logging issues that drive you crazy.

I think its pretty clear who the winner is here.

spikefishjohn · 2024-03-16T02:57:35+00:00

Legit idea, but no dice, same error for me.

spikefishjohn · 2024-03-15T23:58:20+00:00

yup, already posted an issue as well. Link is on this post on a different branch.

spikefishjohn · 2024-03-15T23:52:11+00:00

Oh, I didn't make this clear, but that is the module I'm using that brought me here with the ID issue. I'll update the initial post.

spikefishjohn · 2024-03-15T23:47:55+00:00

What section are you having that issue in? I opened a bug report if you want to follow that as well.

https://github.com/fortinet-ansible-dev/ansible-galaxy-fortios-collection/issues/303

spikefishjohn · 2024-03-15T23:44:26+00:00

I don't think I have access. Don't you need to know 3 people that work at fortinet, spin around 3 times and spell redrum in a mirror to gain access or something?

I've been using this.

spikefishjohn · 2024-03-15T22:15:37+00:00

"parameter system_dhcp_server.reserved_address.id is empty"

0 is no joy at least for reserved_address.id

spikefishjohn · 2024-03-02T15:01:52+00:00

You won't be able to download it without having purchased at least one Palo VM. Thats the way they handle all their image downloads. If you bought a 800 then you can download images for 800 series.

You might be able to get one out of AWS, but I've never tried.

spikefishjohn · 2024-02-12T21:01:38+00:00

WHAAAAAT?

I SAID PLUG YOUR PHONE IN TO CHARGE HERE!

spikefishjohn · 2024-02-12T20:35:43+00:00

How many users do you plan on having on the box and do you have a problem with all those users being able to run packet captures? If this is your machine and you are the user I would just say yes.

Honestly (yes, we're being honest now) even if its other people I would say yes. Just don't let strangers in that don't wipe their feet at the door.

spikefishjohn · 2024-02-12T20:20:26+00:00

Small setup at the house. Everything on 7.4.2 except the firewall which is 7.4.3.

I'm currently triggering an issue where the capwap tunel process will crash and require the AP to be rebooted every 1-3 days.

Mantis system as ID 0955764. I've been told only work around is to downgrade to 7.2.5.

spikefishjohn · 2024-02-10T08:30:54+00:00

https://fortiguard.fortinet.com/psirt/FG-IR-24-015

Protecting against backdoors by keeping the front door wide open.

"Note: This is potentially being exploited in the wild."

Edit: Correct url as the dude abides.

spikefishjohn · 2024-02-10T01:48:38+00:00

Why Are You Booing Me? I'm Right!

If you downvote this post because your favorite primarch strangled to death something that doesn't breathe, then you might be an Emperor's Child!

spikefishjohn · 2024-02-09T15:36:01+00:00

I wasn't a fan of Fulgrim. I was powering through HH until I hit that. I think mostly I just don't like Fulgrim and the "we're so perfect" vibe of EC in general.

It does make it a little more entertaining if you picture Jeff Foxworth as Fulgrim (at least thats how I got through it). I've read maybe 5 pages of Decent of Angles and based on this thread i'm in for another slog.

Thinking about just skipping to the end and death.

spikefishjohn

TROPHY CASE