Getting mac-address table from Fortiswitch
Tracking down MACs from a switch can be very beneficial. You can use the information from the MAC table to track down where a device is plugged into, or if there is some kind of loop in the network....
View ArticleClik here to view.
Enabling SNMPv3 on FortiOS 6.4.5
SNMPv3 should always be enabled if possible over v2. First enable the SNMP agent and set the location/device name. Make sure to press apply down at the bottom of the page. Next lets create the V3...
View ArticleClik here to view.
Finding Transceiver info in Ruckus ICX switches
I needed to find out what type of Optic was installed into a switch, and if it read up correctly. In most vendors its “show interface transceivers” or some other command. I struggled to find Ruckus’s...
View ArticleCisco Nexus C92160YC-X Port Breakout
The Cisco C92160YC has the option to change the port layout for different bandwidth needs. Below hows the command to change the default (In my case) port config from 48x25G ports, with 2 X 100G, and 4...
View ArticleCisco ASR 1002-X bandwidth license increase
I installed a new license to a ASR 1002-X going from the default 5 gig to 20 gig throughput. Installing the license was no problem, but after the reboot nothing changed. I found that I had forgotten...
View ArticleClik here to view.
Enabling Cisco 3850 VRRP
So, you went into to the interface and are looking for VRRP, but cant find it. I had done this 1000 times in other firmwares/devices and had no issues setting up VRRP. But for some reason on I could...
View ArticleClik here to view.
Setting up Static Addresses for Fortigate SSL VPN clients
I needed to have a specific SSL VPN client to always have the same IP address. This is not overly simple as it seems it should be. I have read there are very neat ways to do it through FortiAuth, or...
View ArticleRuckus ICX switching – Displaying files on USB or flash
I needed to update the firmware on a Ruckus ICX 7150, but could not remember the file name of the firmware I was updating. I looked through the commands for a dir: flash, or dir:usb and really...
View ArticleReset HP 5900 back to default
Below is how to factory reset a HP 5900. This will remove all configuration. reset saved-configuration main reset saved-configuration backupThe saved configuration file will be erased. Are you sure?...
View ArticleClik here to view.
Adding Mobile tokens to Fortiauthenticator
When purchasing mobile tokens for Fortiauthenticator FGT or a partner will usually send a PDF with an activation code. The PDF has good instructions on how to register the code, but I thought I would...
View ArticleCisco ASR “private key not found” Error
I was working on a ASR running code: asr1000rp1-ipbasek9.02.02.01.122-33.XNB1.bin. I wiped the config and started over from the last setup, and tried to SSH in. I was continually getting denied, and...
View ArticleRecover Cisco 9200 switch from firmware loss
recently I had an issue where the firmware on a 9200 switch was corrupted. This can help during an upgrade, or removal, etc. After a reboot the switch came up to rom monitor mode, no biggie I thought-...
View ArticleClik here to view.
Microsoft NPS logs not showing in Event Viewer?
One of the best troubleshooting steps for Radius/NPS is to look in the event viewer to see why you are having failures. This shows if the server is actively denying the user login attempts due to...
View ArticleClik here to view.
Enable Open wifi authentication in Fortios 7.0+
I was creating an SSID from within the Fortigate to manged Fortiaps and noticed I could not change the security to “Open”. The only options were security options, and Captive-Portal. I was like, where...
View ArticleClik here to view.
Fortinet LDAP/RADIUS Source address with SD-WAN setup
I found this a neat tidbit of knowledge that I thought I should share. Created a Fortinet SDWAN setup with many sites – works awesome. Fortinet’s SDWAN is simple, but very effective with some really...
View ArticleClik here to view.
Enabling Syslog for Cisco 9800 Controller and APs
Below details how to enable Syslogging for both the controller and APs. In the controller, it seems its CLI only (If not, please comment how to do from GUI). First lets set the Controller to send...
View ArticleClik here to view.
Fortigate – Separate IP pools out of multiple SDWAN Interfaces
Now that I setup SD-WAN interfaces in Fortigate for almost any deployment – due to future proofing. I have struggled with how to make internal resources that need to nat out publicly from a certain IP...
View Article
