Understanding SPAN,RSPAN,and ERSPAN

Introduction: Switch port Analyzer (SPAN) is an efficient, high performance traffic monitoring system. It duplicated network traffic to one or more monitor interfaces as it transverse the switch. SPAN is used for troubleshooting connectivity issues and calculating network utilization and performance, among many others. There are three types of SPANs supported on Cisco products, which … Continue reading Understanding SPAN,RSPAN,and ERSPAN

Fortigate: Web Filtering is “Unreachable”

Came across this problem that I am unable to use "Web  Filtering" feature on my Fortigate 200B on Firmware 5.2.11 Web Filter error shows the following error before you can create a profile. Licensing information on Fortigate Portal shows I am licensed to use Web Filtering, but on my local firewall error shows "Unreachable" Things … Continue reading Fortigate: Web Filtering is “Unreachable”

UniFi: Run the Controller as a Windows service

Here is a useful guide from Ubiquiti with regards to running the Controller service as a Windows Service. This is essential when running a centralized controller for your APs and to make sure you contoller would run automatically after a restart rather than enabling it to run maunally.   Originally posted at: https://help.ubnt.com/hc/en-us/articles/205144550-UniFi-Run-the-Controller-as-a-Windows-service Readers will learn … Continue reading UniFi: Run the Controller as a Windows service

Fortigate: How to allow (or deny) wildcard FQDN (Domains) in Policy

The answer is No. It won't work. As we all know, Wildcard FQDN firewall address should not be used in a firewall policy (Full details here). Simple explanation is that because the Firewall wont be able to query on to *.example.com when it tests the policy. There, however is a workaround. Use WEB-POLICY. In my … Continue reading Fortigate: How to allow (or deny) wildcard FQDN (Domains) in Policy

Cisco Meraki: How to set a wireless network to 2.4Ghz only?

In some challenging wireless environments, specifically those where you do not have 100% coverage, and especially those with a lot of concrete, leaded glass and other RF challenges – 5Ghz can be problematic.  Some devices just love to hold on to 5Ghz connections even if the 2.4Ghz signal is better. On your Meraki dashboard, it … Continue reading Cisco Meraki: How to set a wireless network to 2.4Ghz only?

Fortigate: How to Source NAT traffic into a VPN Tunnel

Came across an issue on FortiOS 5.4 where a connection to remote peer via an IPSEC Tunnel suddenly stopped working. (My user told me it was working in the past atleast) Setup is the internal IP needs to be NAT'd to an IP that is known to the VPN peer. So for example, 10.5.0.5 (internal) … Continue reading Fortigate: How to Source NAT traffic into a VPN Tunnel

Tricks: How to debug a specific IPSec VPN Tunnel on Cisco.

Let’s say you’ve got a router with well over 100 IPSec VPN peers, and you’ve got this one tunnel that just won’t form correctly. Your not sure why and want nothing more than to debug the IPSec process for this one peer but you know if you debug the isakmp or ipsec process your going … Continue reading Tricks: How to debug a specific IPSec VPN Tunnel on Cisco.

IOS 11 Tip. “Turning Off” your Bluetooth or WiFi from Control Panel doesnt really turns it OFF

BAD NEWS: In IOS 11, turning off BLUETOOTH and WIFI doesnt really turn it off in the background. It just disconnects you from your connected bluetooth peers (or wireless networks)   The GOOD NEWS is, there is still away to totally TURN OFF your Bluetooth (and WIFI) to save power. You can do this from … Continue reading IOS 11 Tip. “Turning Off” your Bluetooth or WiFi from Control Panel doesnt really turns it OFF

Restarting VPN Tunnels on Cisco

In some rare cases, VPN Tunnels hang-up randomly and needs to be bounced or restarted to restart the VPN Tunnel negotiate that on some cases the easiest fix on VPN Down issues Check Phase 1 Status of the Tunnel: show crypto ipsec sa Normal/UP status should show: QM_IDLE (More info on Status here) Restarting VPN … Continue reading Restarting VPN Tunnels on Cisco