Entradas

Mostrando entradas de julio, 2019

Symantec SBE Error: "One of the required support libraries for this installation is unavailable" and install fails

Imagen
Situation You see the error "One of the required support libraries for this installation is unavailable" when installing Symantec Endpoint Protection Small Business Edition cloud (SEP SBE) agents, and the install fails. Solution Check for and resolve malfunctioning certificates Create a redistributable package for the agent, and save it to the local desktop. Right-click on the SymRedistributable.exe file (created in step 1), and extract all files to the local computer. Open the extracted files, and locate the support library that is noted in the errors, such as: PA Support Library HE Support Library Rename the appropriate support library .ZIP file to use a .DLL extension: For PASupportLibrary.zip , rename it to PASupportLibrary.dll For HESupportLibrary.zip , rename it to HESupportLibrary.dll Right-click the .DLL file you just renamed, and click

Integrating Squid with Active Directory

Imagen
Thanks to:  https://www.odrakir.com Recently I needed to integrate a Squid Proxy server in an Active Directory environment. The main objective was to grant / deny access to the Internet by user / group validation, using single sign on. The solution might not be the most elegant, but it’s a working one. You’ll need to install the Kerberos, Samba, Squid and NTP packages. In this solution will be allowing all users in the  InternetOn  AD group to have access automatically. Any users outside this group will be denied access. Computers outside the AD trying to use the proxy will be prompt for username and password. This is a simple way of keeping access restricted to certain groups without an unnecessary amount of fuss, whether you’re managing the office computers at  http://www.partycasino.com/  or building a school network. krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_real

How to reclaim space after removing virtual volume 3PAR?

Thanks to: https://community.hpe.com/ It depends on how large the virtual volumes were. Each CPG has a growth size. This lets the CPG keep some chunklets pre-reserved. Also, when volumes are deleted, it will retain some space in the CPG assuming the space will be reused. Try compacting your CPGs: compactcpg -f -pat * The following command will set up a job to run weekly (Sundays, 0000 hours): createsched -no_alert "compactcpg -f -pat *" @weekly Compact_All_CPGs

Using Active Directory to Authenticate VPN Users on Cisco ASA

Imagen
Thanks to:  http://blog.danmassey.net We have a client who has circa 200 users with a significant number of roaming users. The roaming users access to the network is via a remote access VPN. Initially the users credentials were added to the Cisco ASA like so: username <username> password <password> By default the ‘LOCAL’ database is used, but we wanted the users to use their AD credentials to simplify administration and prevent confusion. To start with, create a server group: aaa-server AD-SERVERS protocol kerberos Then add individual servers aaa-server AD-SERVERS (inside) host 192.168.1.2 kerberos-realm MYREALM.PRIV Obviously you need to use your own realm and the correct ip addresses for your AD servers. Before making any further changes, its possible to test the authentication from the command line. test aaa-server authentication AD-SERVERS host 192.168.1.2 username testuser password testpass INFO: Attempting Authentication test to IP address (timeout: 12

Configuration ADSL to PPOE Services

Thanks to:  http://blog.danmassey.net Converting Cisco 877 from ADSL to FTTC Normally when we deploy FTTC to a client in an MPLS VPN we use the Cisco 887 and bypass the BT installed VDSL modem. On this occasion the client is already fully kitted out with Cisco 877 routers and is not minded to replace them all straight away so we need to check out the config needed. In short we need to stop using the ATM interface and hook up an ethernet interface into the VDSL modem supplied by BT. Stage 1 – Disable the ATM port int ATM0 shutdown Stage 2 – Create the new vlan and and assign to a switch port vlan 100 name FFTC_VLAN int E3 switchport access vlan 100 Stage 3 – Create the BVI and enable PPPoE interface Vlan100 description *** FTTC *** no ip address pppoe enable group local pppoe-client dial-pool-number 1 Stage 4 – Enable VPDN vpdn enable vpdn-group 1 Stage 5 – Set up the dialer interface interface Dialer0 mtu 1492 ip address negotiated ip virtual-reassembly

Troubleshooting Cisco VPN Client on Windows 10 Issue

Imagen
Thanks to:  http://www.techspacekh.com 1. Objective In this article, we will see how to install Cisco VPN client on Windows 10 Operating System and fix the issue that it cannot establish remote VPN connection. 2. Problem Description There are two problems actually occur about Cisco VPN client on Windows 10. The first problem is Cisco VPN client software is not able to to install on Windows 10 Operating System. Normally, we get the error message of “ Error 27850. Unable to manager networking component. Operating system corruption may be preventing installation ” at almost the final step of the installation process. The second problem occur accordingly after the installation is successfully done and we try to connect Cisco VPN client. The error message is “ Secure VPN Connection terminated locally by the Cleint. Reason 442: Failed to enable Virtual Adapter error” . 2. Problem Resolution Cisco VPN client software is somehow missing something to be able to w

Troubleshooting Email Fail Delivery To an External Recipient Issue

Imagen
Thanks to:  http://www.techspacekh.com/ 1. Objective In this article will give some ideas to fix the problem that an email was sent but it is fail to deliver to an external recipient email. 2. Problem Description An internal user complains, while the rest is fine,  that she/he had sent an email to a person who is working in another company and she/he have never got the reply from him/her. The internal user calls to check with that external person and got the reply the email have never reached him/her. 3. Problem Resolution Check Internal Spam Firewall The issue may happen somewhere along the way from our internal mail server to that affected external company mail server. Check on our internal spam firewall to make sure that the email had already delivered out from our internal spam firewall. Check IP/Domain Blacklist It is also a problem if the public IP addresses that is NATed for mail server of both sites are in black list. We can check it with

Installing GNS3 VM on VMware Workstation

Imagen
Thanks to: 1. Overview This article will guide you about installing GNS3 VM virtual server and configuring GNS3 network simulation software to works with GNS3 VM virtual server. You might come up with a question in mind that why do we need GNS3 VM virtual server while we already have GNS3 network simulation software. GNS3 VM virtual server is an isolated Ubuntu virtual server power by GNS3 Technologies Inc. It consumes CPU and memory usage from local virtual server itself, not from a real physical computer. So, it can improve your computer performance while running GNS3 network simulation software. Qemu in GNS3 VM virtual server work much better on Linux, Cisco ASAv Qemu firewall virtual servers as an example, which is less randomly problem happened. 2. Prerequisites In this instruction install GNS3 VM virtual server , it is assumed that: a. You have some basic knowledge of using GNS3 network simulation software. b. You have some basic knowledge about VMware workstat

Configuring Dual ISP load balancing on Single Cisco Router

Imagen
Thanks to:  http://www.techspacekh.com 1. Overview For today network with multiple internet connections/dual ISP connections would need a network load balancer to load balance LAN IP subnets.  ISP load balancing is very important not only in the enterprise networks but even in some small networks also need ISP load balancing for LAN IP subnets. Most of the case, people want end user LAN can access to internet with different ISP from server farm LAN. To achieve the objective of ISP load balancing for LAN IP subnets of a network, we can use Policy Based routing PBR on Cisco router. In this article will show how to configure dual ISP load balancing on single Cisco router with Policy Based routing PBR on Cisco router to load balance two IP subnet, end user LAN and server farm LAN. End user LAN will access to internet via ISP01 and  server farm LAN will access to the internet via ISP02. 2. Prerequisites In this article of how to configure dual ISP load balancing on single Cisc