ITAdminGuide.com

Configuration guides for IT Administrators

Administrator

Configure High Availability (Active/Standby) of BIG-IP F5 LTMs

September 12, 2016

⏱︎

Read time:

BIG-IP F5

HA Prerequisites: All devices in device group are running the same version of BIG-IP system software. Configure NTP and verify that both devices show same date and time. You must perform this task locally on each device in the device group. Step 1: Create dedicated VLAN and Self IP for HA: Here we have chosen interface…
Read More →: Configure High Availability (Active/Standby) of BIG-IP F5 LTMs
Different Load balancing methods of BIG-IP LTM

September 11, 2016

⏱︎

Read time:

BIG-IP F5

BIG-IP LTM provides various load balancing methods Under Pool > New Pool screen option. Most load balancing methods will allow you to choose between member and node. You will see the difference in the further article. Basically, you can load balance between either nodes or members. Node is just an IP address (10.240.102.50) of the…
Read More →: Different Load balancing methods of BIG-IP LTM
HP Switch CLI Commands

September 4, 2016

⏱︎

Read time:

HP Switch

Configuration Commands: 1.Create a VLAN and assign an IP address that will be used as default gateway for computers belonging to this specific VLAN. In Cisco terms, you call it as SVI. SWITCH(config)# vlan 4 name CLIENTS SWITCH(vlan-4)# ip address 10.10.10.1 255.255.255.0 2.Assign a switch port to a specific VLAN SWITCH(config)# vlan 4 SWITCH(vlan-4)# untagged 24…
Read More →: HP Switch CLI Commands
Configure Static NAT in Cyberoam Firewall

August 29, 2016

⏱︎

Read time:

Cyberoam Firewall, Firewall

In order to configure Static NAT in Cyberoam firewall, navigate to Firewall > NAT Policy and specify Public IP address to be NAT into. In LAN to WAN firewall rule, map the internal host to be NAT with the previous created NAT policy.
Read More →: Configure Static NAT in Cyberoam Firewall
How to block specific MAC address in Cisco Switch

August 29, 2016

⏱︎

Read time:

Cisco, Cisco Switch

(config)# mac address-table static 0349.1245.95ca vlan 192 drop just repeat with as many VLANs that you wanted to deny access for the specific MAC address
Read More →: How to block specific MAC address in Cisco Switch
iRule for single VIP but with multiple pool

August 26, 2016

⏱︎

Read time:

BIG-IP F5

Here I want to redirect our two websites visitors (en.microsoft.com and ph.microsoft.com) to same public IP but to two different pool. If someone types en.microsoft.com, LTM needs to redirect to a specific path /en and specific pool name en_pool If someone types ph.microsoft.com, LTM needs to redirect to a specific path /ph and specific pool name…
Read More →: iRule for single VIP but with multiple pool
F5 – http monitor newline character error

August 25, 2016

⏱︎

Read time:

BIG-IP F5

when you attempt to save the http monitor configuration, a warning message may appear as value may not contain literal newline characters even though you might have entered correct syntax in the string. This is actually a bug SOL14162 explained with a work around solution, you need create the http monitor via tmsh. However we found…
Read More →: F5 – http monitor newline character error
Create CSR and Install certificate in Cisco ASA Firewall

August 15, 2016

⏱︎

Read time:

Cisco, Cisco ASA

Generate CSR via Cisco ASA CLI Commands 1. Before generating a CSR request, you must create a private key (config)# crypto key generate rsa label itadminguide.key modulus 2048 INFO: The name for the keys will be:itadminguide.key Keypair generation process begin. Please wait… 2. Once the private key is created, you will then need to create a…
Read More →: Create CSR and Install certificate in Cisco ASA Firewall
Cisco ASA AnyConnect Configuration and Troubleshooting

August 13, 2016

⏱︎

Read time:

Cisco, Cisco ASA

1.Create Network Objects (config)# object network office-subnet subnet 172.20.100.0 255.255.255.0 (config)# object network anyconnect-subnet subnet 192.168.210.0 255.255.255.0 2.Create DHCP Pool for Anyconnect client (config)# ip local pool anyconnect-pool 192.168.210.50-192.168.210.200 mask 255.255.255.0 3.Create ACL and NAT (config)# access-list InternalHosts-SplitTunnelAcl standard permit 172.20.100.0 255.255.255.0 (config)# nat (inside,outside) source static office-subnet office-subnet destination static anyconnect-subnet anyconnect-subnet 4.Enable AnyConnect.…
Read More →: Cisco ASA AnyConnect Configuration and Troubleshooting
Static bidirectional NAT on Cisco ASA firewall

August 11, 2016

⏱︎

Read time:

Cisco, Cisco ASA

In this configuration, 192.168.100.255 is an SMTP Server that we would like to publish on internet with public IP address 221.200.200.51 and open port tcp/25. STATIC NAT: (config)# access-list outside_access_in extended permit tcp any host 192.168.100.235 eq smtp (config)# access-group outside_access_in interface outside (config)# object network srv_192.168.100.235 (config)# host 192.168.100.235 (config)# nat (inside,outside) static 221.200.200.51 service tcp…
Read More →: Static bidirectional NAT on Cisco ASA firewall

Lucas Brey

I’m Lucas Brey, a travel blogger sharing practical guides, hidden gems, and honest tips from the road. Follow along for smart itineraries, great food finds, and stories worth bookmarking.

Tags