Using the ‘register’ clause and ‘debug’ module in Ansible to display specific...
register: Used to register variables defined in a module when it is invoked in a task The registered data is stored in JSON format The value of the variables set using the register clause is always a...
View ArticleAnsible – IOError: [Errno 13] Permission denied:
After spending more than year learning Ansible and Python and doing nothing about it, I have been getting my hands dirty with Ansible yet again. Only this time it will be more aligned to a real world...
View ArticleAdvanced grep filters for F5 logs
grep X number of lines after matching pattern is found [root@ltm02:Active:Standalone] config # zless /var/log/ltm* | grep -A 2 "16:03:23" -n 230:May 3 16:03:23 ltm02 notice bigd[5171]: 01060001:5:...
View ArticleTroubleshooting SSL handshake in F5 BIG-IP LTM – Part 1 (SSL/TLS Protocol...
How to identify if there is an SSL/TLS protocol mismatch between Client and F5 LTM? 1. Check the protocol version used by the client in wireshark captures under the “Client Hello” packet 2. Check...
View ArticleF5 iRules – Unconditionally redirect based on host header content and close...
when HTTP_REQUEST { if { [string tolower [HTTP::host]] equals "site2.lab.com" } { HTTP::respond 302 noserver -reset Connection close Location http://site3.lab.com } } With the above iRule, the...
View ArticleF5 iRules – Unconditionally redirect to another VIP based on host header...
when HTTP_REQUEST { if { [string tolower [HTTP::host]] equals "site2.lab.com" } { HTTP::redirect "http://site3.lab.com" } } With this iRule, the initial connection to site2.lab.com is...
View ArticleF5 iRules – Unconditionally redirect to another VIP using pool member up/down...
when HTTP_REQUEST { if { ( [active_members site2.lab.com-pool-80] < 2 ) or ( [active_members site2.lab.com-pool-80] ) > 0 } { HTTP::redirect http://site3.lab.com/ } }
View ArticleF5 iRules – If pool is down, then redirect to another VIP
when HTTP_REQUEST { if { ( [active_members site2.lab.com-pool-80] < 1 ) } { HTTP::redirect http://site3.lab.com/ } }
View ArticleDebug health monitor for a single pool member in F5 LTM
Here’s an old post that shows how to debug bigd that gets you the debugs of all the health monitors that are running on the system. The rule of thumb with debugs is that the files get too large and may...
View ArticleClik here to view.
Using curl for troubleshooting
View only response headers curl -I only retrieves the header of the resource. The ‘I’ is case sensitive. root@ubnsrv01:/etc/ssl/certs# curl -I https://site3.lab.com HTTP/1.1 200 OK Content-Length: 191...
View ArticleClik here to view.
Query refused for recursive DNS lookup in Infoblox
I recently configured my lab DNS infoblox server in a grid and setup some authoritative forward-mapping zones on it for my lab web-servers; The DNS queries for the authoritative zones were working...
View ArticleClik here to view.
How to setup and configure Infoblox vNIOS in EVE-NG
Place the Infoblox DDI KVM image in the below path in EVE-NG. /opt/unetlab/addons/qemu/linux-vInfoBlox-NIOS-8.1.2 Fix permissions /opt/unetlab/wrappers/unl_wrapper -a fixpermissions Open a new lab and...
View ArticleClik here to view.
Learning Linux – bookmarks and commands I forget :)
This post is for my self-learning and I’ll be updating it with all the handy docs/blogs I come across over the internet. Linux Directory Structure How to Use Fdisk to Manage Partitions on Linux sudo...
View ArticleClik here to view.
Quick Notes – Cisco FireAMP Linux Commands
A quick post on (CentOS) Linux commands for FireAMP Connector FireAMP connector install [root@localhost Downloads]# yum install fireamplinux_connector.rpm FireAMP connector install location...
View ArticleClik here to view.
Configure IOS router to initiate a VPN in Aggressive Mode
Enabling Aggressive Mode globally on an IOS router is pretty straight forward and is the default any way; no crypto isakmp aggressive-mode disable But the problem with this is that the router will only...
View ArticleClik here to view.
Section 2: Threat Identification and Mitigation – 2.1 to 2.5 (CCIE Notes)
2.1 Identify and protect against fragmentation attacks Background Info: IP fragmentation is the process of breaking up a single Internet Protocol (IP) datagram into multiple packets of smaller size....
View ArticleClik here to view.
Dynamic Multipoint VPN (CCIE Notes)
Disclaimer: These are my rough cut notes for CCIE Security studies! Not a detailed explanation of DMVPN. Three components that make up DMVPN: 1. Mulitpoint GRE (mGRE) Tunnel interface having multiple...
View ArticleClik here to view.
TCP Intercept for DoS Attack Prevention (CCIE Notes)
TCP Intercept It protects a TCP server from TCP SYN-flooding attacks (DoS) attacks. It intercepts and validates TCP connection requests. Establishes connection with the client on behalf of the...
View ArticleClik here to view.
Analyzing FW Monitor Output in CLI
If you understand the inspection points in Check Point and can use FW Monitor to get the required logs/captures then you can read further on how how to analyze those logs. So to start off with, lets...
View ArticleClik here to view.
Debug F5 monitor response from the server
It is quite simple to see if a pool member failed it’s health check by checking the pool status via GUI/CLI and the ltm logs also give you more information on the time lines when the pool went down/up;...
View Article
![Cloonee, Yandel & ATLAC – Movimiento – Single [iTunes Plus M4A]](http://i.imgur.com/Q8tO40p.jpeg)
