Peter Luk's Blog

A cat lover's weblog

Cisco ASA 5505 Routing Between Two (Internal) VLANS

http://www.petenetlive.com/KB/Article/0000869.htm

NAT for Cisco ASA’s Version 8.3+

http://www.tunnelsup.com/nat-for-cisco-asas-version-8-3

Cisco ASA configuration guides

http://www.cisco.com/en/US/products/ps6120/products_installation_and_configuration_guides_list.html

Cisco ASA5500 – L2TP over IPSEC VPN

http://www.petenetlive.com/KB/Article/0000571.htm

Configuring L2TP over IPSec

http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/vpn/vpn_l2tp_ipsec.html

How to setup a VPN to Azure with the CISCO ASA 5505

http://www.theworkflowelement.com/2013/02/how-to-setup-a-vpn-to-azure-with-the-cisco-asa-5505.html

Site-to-Site IPsec VPN Between ASA/PIX and an IOS Router Configuration Example

http://www.cisco.com/en/US/products/ps9422/products_configuration_example09186a0080b4ae61.shtml

ASA and Native L2TP-IPSec Android Client Configuration Example

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080bc7540.shtml

KMB Exhibition

[hgallery3 id=”10380″ height=”231″ width=”320]

use snmpget to get linux cpu loading, etc

CPU Statistics

Load
1 minute Load: .1.3.6.1.4.1.2021.10.1.3.1
5 minute Load: .1.3.6.1.4.1.2021.10.1.3.2
15 minute Load: .1.3.6.1.4.1.2021.10.1.3.3

CPU
percentage of user CPU time: .1.3.6.1.4.1.2021.11.9.0
raw user cpu time: .1.3.6.1.4.1.2021.11.50.0
percentages of system CPU time: .1.3.6.1.4.1.2021.11.10.0
raw system cpu time: .1.3.6.1.4.1.2021.11.52.0
percentages of idle CPU time: .1.3.6.1.4.1.2021.11.11.0
raw idle cpu time: .1.3.6.1.4.1.2021.11.53.0
raw nice cpu time: .1.3.6.1.4.1.2021.11.51.0

Memory Statistics

Total Swap Size: .1.3.6.1.4.1.2021.4.3.0
Available Swap Space: .1.3.6.1.4.1.2021.4.4.0
Total RAM in machine: .1.3.6.1.4.1.2021.4.5.0
Total RAM used: .1.3.6.1.4.1.2021.4.6.0
Total RAM Free: .1.3.6.1.4.1.2021.4.11.0
Total RAM Shared: .1.3.6.1.4.1.2021.4.13.0
Total RAM Buffered: .1.3.6.1.4.1.2021.4.14.0
Total Cached Memory: .1.3.6.1.4.1.2021.4.15.0

Disk Statistics

The snmpd.conf needs to be edited. Add the following (assuming a machine with a single ‘/’ partition):

disk / 100000 (or)

includeAllDisks 10% for all partitions and disks

The OIDs are as follows

Path where the disk is mounted: .1.3.6.1.4.1.2021.9.1.2.1
Path of the device for the partition: .1.3.6.1.4.1.2021.9.1.3.1
Total size of the disk/partion (kBytes): .1.3.6.1.4.1.2021.9.1.6.1
Available space on the disk: .1.3.6.1.4.1.2021.9.1.7.1
Used space on the disk: .1.3.6.1.4.1.2021.9.1.8.1
Percentage of space used on disk: .1.3.6.1.4.1.2021.9.1.9.1
Percentage of inodes used on disk: .1.3.6.1.4.1.2021.9.1.10.1

System Uptime: .1.3.6.1.2.1.1.3.0

Examples

These Commands you need to run on the SNMP server

Get available disk space for / on the target host

#snmpget -v 1 -c “community” target_name_or_ip .1.3.6.1.4.1.2021.9.1.7.1

this will return available disk space for the first entry in the ‘disk’ section of snmpd.conf; replace 1 with n for the nth entry

Get the 1-minute system load on the target host

#snmpget -v 1 -c “community” target_name_or_ip .1.3.6.1.4.1.2021.10.1.3.1

Get the 5-minute system load on the target host

#snmpget -v 1 -c “community” target_name_or_ip .1.3.6.1.4.1.2021.10.1.3.2

Get the 15-minute system load on the target host

#snmpget -v 1 -c “community” target_name_or_ip .1.3.6.1.4.1.2021.10.1.3.3

Get amount of available swap space on the target host

#snmpget -v 1 -c “community” target_name_or_ip .1.3.6.1.4.1.2021.4.4.0

Reduce the size of titlebar and windows border in Windows 8

Modify the below registry :

Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
    "CaptionHeight"="-285"
    "CaptionFont"=hex:f4,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,00,\
      00,00,00,01,00,00,05,00,53,00,65,00,67,00,6f,00,65,00,20,00,55,00,49,00,00,\
      00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
      00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
    "ScrollWidth"="-240"
    "ScrollHeight"="-240"
    "PaddedBorderWidth"="0"

Why can’t find new quick IME in Windows 8? 速成關聯字

Get the fix from http://support.microsoft.com/kb/2827860

如真有需要用到關聯字功能

速成機碼如下:

http://staff.ie.cuhk.edu.hk/~sfluk/files/quick.REG

倉頡機碼如下:

http://staff.ie.cuhk.edu.hk/~sfluk/files/changjei.REG

off utorrent ads

First go to ADVANCED and set the following to FALSE:

net.discoverable – to FALSE / this makes your utorrent more secure

web.ui.allow paring – set to FALSE / this makes your utorrent more secure

This following will turn off all the ads – set everything to FALSE (if it is not already set that way):

gui.show_plus_upsell – set to FALSE

offers.left_rail_offer_enabled – set to FALSE

offers.sponsored_torrent_offer_enabled – set to FALSE

gui.show_notorrents_node – set to FALSE

offers.content_offer_autoexec – set to FALSE

Vmware workstation Linux version cannot bridge to a vlan interface directly

The vmware workstation virtual network editor cannot bridge to a vlan interface

Follow the below procedures :

1. edit /etc/vmware/networking

2. append the line : add_bridge_mapping vlan4 3

3. vmware-networks –stop;vmware-networks –start

4. vmware-networks –status and you will get : Bridge networking on vmnet3 is running

5. select /dev/vmnet3 at your vm settings and it is bridge to vlan interface : vlan4

Gundam Dock Hong Kong

[hgallery3 id=”10338″ height=”231″ width=”320]

Dovecot with MBOX, IMAP and subfolders, or “Target mailbox doesn’t allow inferior mailboxes”

The MBOX format limits your clients to creating subfolders that can either store folders, or emails, not both. When creating a folder, you differentiate between a folder for storing folders or for storing emails by adding or leaving out a forward slash at the end of the folder name: A folder name like ‘withsubfolders/’ will be able to store folders, a folder name like ‘onlyemails’ will only be able to store emails. If you try to create a subfolder in a folder that has been created without the forward slash you will get the nice error “Target mailbox doesn’t allow inferior mailboxes”.

A nice problem this limitation causes is when deleting folders in Microsoft Outlook you encounter the problem that the ‘removed items’ folder has been created to store only mails, so it will not be able to store deleted folders. You will get the ‘inferior mailboxes’ error from the previous paragraph. You can however work around this by pressing shift when trying to delete a folder, which will delete it immediately.

For thunderbird, go to Uncheck Tools -> Account Settings -> Server Settings -> Advanced -> “Server supports folders that contain sub-folders and messages” and try again.

See http://blog.workingweb.nl/2012/01/04/dovecot-with-mbox-imap-and-subfolders-or-target-mailbox-doesnt-allow-inferior-mailboxes/

http://wiki2.dovecot.org/MboxChildFolders

awstats + GeoIP

1.當你安裝號Awstats後，報表會反解IP位置，當然你可以加入外掛讓Awstats顯示國家與程式還有組織的訊息

2.下載所需要的資料
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz
wget http://geolite.maxmind.com/download/geoip/database/asnum/GeoIPASNum.dat.gz

3.建立資料夾sudo mkdir /usr/share/GeoIP

4.移檔與解壓縮

mv GeoIP.dat.gz /usr/share/GeoIP/
gunzip /usr/share/GeoIP/GeoIP.dat.gz

mv GeoLiteCity.dat.gz /usr/share/GeoIP/
gunzip /usr/share/GeoIP/GeoLiteCity.dat.gz

mv GeoIPASNum.dat.gz /usr/share/GeoIP/
gunzip /usr/share/GeoIP/GeoIPASNum.dat.gz

5.下載與安裝GeoIP套件
wget http://geolite.maxmind.com/download/geoip/api/c/GeoIP.tar.gz
tar -xvzf GeoIP.tar.gz 
cd GeoIP-1.4.6

./configure
make
make check
sudo make install

*注意你在./configur，查看是否有錯誤，版主出現少一個套件名稱
configure: error: Zlib header (zlib.h) not found. Tor requires zlib to build. You may need to install a zlib development package.

安裝缺少的套件
sudo apt-get install zlib1g-dev
記得在重新./configure 後，在接下去make......等等步驟

6.下載安裝編譯程式
wget http://geolite.maxmind.com/download/geoip/api/perl/Geo-IP-1.38.tar.gz

tar -xvzf Geo-IP-1.38.tar.gz
cd Geo-IP-1.38

perl Makefile.PL LIBS='-L/usr/local/lib'
make
make test
sudo make install

7.修改sudo vi /etc/awstats/awstats.www.conf檔案
DNSLOOKUP=0
LoadPlugin="geoip GEOIP_STANDARD /usr/share/GeoIP/GeoIP.dat"
LoadPlugin="geoip_city_maxmind GEOIP_STANDARD /usr/share/GeoIP/GeoLiteCity.dat"
LoadPlugin="geoip_org_maxmind GEOIP_STANDARD /usr/share/GeoIP/GeoIPASNum.dat"

8.完成

參考文件:
http://www.antezeta.com/awstats/geoip.html

Peter Luk's Blog

Travel

Categories

Archives

Cisco ASA 5505