Juniper – WARNING: THIS DEVICE HAS BOOTED FROM THE BACKUP JUNOS IMAGE
quick fix:
request system snapshot media internal slice alternate
then
request system reboot
check after boot from which partition system is booted
show system storage partitions
with output of:
root> show system storage partitions
fpc0:
--------------------------------------------------------------------------
Boot Media: internal (da0)
Active Partition: da0s2a
Backup Partition: da0s1a
Currently booted from: active (da0s2a)
|
Partitions information:
Partition Size Mountpoint
s1a 183M altroot
s2a 184M /
s3d 369M /var/tmp
s3e 123M /var
s4d 62M /config
{master:0}
root>
then you can change active partition to boot from first partition
request system reboot slice alternate media internal
Juniper – firmware upgrade
Upgrade firmware from usb – go to shell
root> start shell
find usb drive use
root@:RE:0% ls /dev/da*
then to test drive/partition
root@:RE:0% file -s /dev/da1s2
create folder for usb drive and mount usb drive to the folder
root@:RE:0% mkdir /var/tmp/usb
root@:RE:0% mount -t msdosfs /dev/da1s2 /var/tmp/usb
move image file to /var/tmp
cd /var/tmp/usb && mv jinstall-ex-2200-12.3R8.7-domestic-signed.tgz /var/tmp
go back to cli and run upgrade
root@bbc-temp-sw:RE:0% cli
{master:0}
root@bbc-temp-sw> request system software add /var/tmp/jinstall-ex-2200-12.3R8.7-domestic-signed.tgz validate reboot
Linux – add runinig .sh script output to syslog from cron
example command from cron:
/opt/netbox/netbox-backup.sh 2>&1 | /usr/bin/logger -t netbox-backup -p syslog.notice
-t: name in logs
-p: what log (syslog or cron)
Mac OS X – Serial Port
find serial port
ls /dev/cu.*
use screen
screen /dev/cu.
Mac OS X – File limits
file handles opend:
lsof | cut -f 1 -d ' ' | uniq -c | sort
run maxfiles limit
launchctl limit maxfiles
it should give you result like:
bartron ➜ ~/Users/bartosz launchctl limit maxfiles
maxfiles 256 unlimited
to up limit files run:
bartron ➜ ~/Users/bartosz sudo launchctl limit maxfiles 512 20000
Mac OS X command line – change cursor speed
speed up the courser move speed – lower value faster (choose between 0, 1 ,2)
defaults write NSGlobalDomain KeyRepeat -int 0
you need to logout and login again to make it work
Convert VirtualBox .ova to .qcow2
extract the disk image
tar -xvf junos-vsrx-12.1X47-D20.7-domestic.ova
convert VMDK to QCOW2 format
qemu-img convert -O qcow2 junos-vsrx-12.1X47-D20.7-domestic-disk1.vmdk junos-vsrx-12.1X47-D20.7-domestic.qcow2
Ubuntu GNS3 Server with KVM support
add gns3 repository
sudo add-apt-repository ppa:gns3/ppa
update apt
sudo apt-get update
install gns3 server
sudo apt-get install gns3-server
install kvm support
sudo apt-get install qemu-kvm libvirt-bin virtinst bridge-utils cpu-checker
make sure your system supports virtualisation
kvm-ok
than you should get something like this
INFO: /dev/kvm exists
KVM acceleration can be used
then run server
gns3server --host 192.168.7.15
Add ssh shortcut hostname to ~/.ssh/config
edit file: /home/username/.ssh/config
vim ~/.ssh/config
ad below code for each host
Host choose_short_name
HostName 192.168.7.21
Port 22
User remote_user
IdentityFile /home/username/username_ssh_priv.key
Send test SysLog msg to SysLog Server
send test syslog packet to remote server
nc -w0 -u 192.168.7.10 514 <<< "testing again from my home machine"
Install 32bit TeamViewer with 64bit Ubuntu
Install 32bit teamviewer in 64bit Ubuntu
sudo dpkg --add-architecture i386
Update Repository
sudo apt-get update
install additional packages
sudo apt-get install libdbus-1-3:i386 libasound2:i386 libexpat1:i386 libfontconfig1:i386 libfreetype6:i386 libjpeg62:i386 libpng12-0:i386 libsm6:i386 libxdamage1:i386 libxext6:i386 libxfixes3:i386 libxinerama1:i386 libxrandr2:i386 libxrender1:i386 libxtst6:i386 zlib1g:i386 libc6:i386
install downloaded package
sudo dpkg -i teamviewer*.deb
Mount NAS share to Ubuntu permanently
go to fstab and edit with root privileges and add this fragment
//server/folder /media/folder cifs username=user,password=password,iocharset=utf8,sec=ntlm 0 0
Copy key to remote host
Copy key to remote host
scp filelocation_name root@192.168.7.17:"/root/mykeys/"
copy key to remote host with .pem key
scp -i yourkey.pem filelocation_name root@192.168.7.17:"/root/mykeys/"
SSH to remote host with .pem key
login to remote host with .pem key:
ssh -i yourkey.pem ubuntu@10.0.0.1
make sure your key has permission set:
chmod 600 yourkey.pem
Generate .pub key from .pem key
use ssh-keygen
ssh-keygen -y -f yourkey.pem > yourkey.pem.pub
don not forget to change permissions to your key
chmod 600 yourkey.pem.pub
Configure Google Authenticator with Ubuntu
Configure Google Authenticator with Ubuntu
sudo dpkg-reconfigure tzdata
sudo apt-get install ntpdate
sudo ntpdate 0.uk.pool.ntp.org
sudo apt-get install ntp
check settings via controls below
ntpq -p
date
Install google auth module
sudo apt-get install libpam-google-authenticator
choose user you want to configure auth for
su username
google-authenticator
choose option Y
Do you want authentication tokens to be time-based (y/n)
scan barcode with google app or duo.com, follow instruction on the screen edit /etc/ssh/sshd_config and enable ChallengeResponseAuthentication to YES
ChallengeResponseAuthentication yes
edit /etc/pam.d/sshd and add below line at the top of the file
auth required pam_google_authenticator.so nullok
restart ssh service
sudo service ssh restart
How to add public key to remote host
copy public key
cat keyname_pub.key | ssh user@host ‘cat >> ~/.ssh/authorized_keys’
on local machine edit /home/username/.ssh/config and add
Host choose_short_name
HostName 192.168.7.21
Port 22
User remote_user
IdentityFile /home/username/username_ssh_priv.key
How to install DUO Security with Ubuntu 16.04 LTS
install ssh (if its not installed)- go to
cd /etc/apt/sources.list.d/
create file in /etc/apt/sources.list.d/
sudo nano duosecurity.list
edit file and add this
deb http://pkg.duosecurity.com/Ubuntu xenial main
exit and install curl
sudo apt-get install curl
download duosecurity key and add to system
curl -s https://duo.com/APT-GPG-KEY-DUO | sudo apt-key add –
update apt
sudo apt-get update
install duo-unix
sudo apt-get install duo-unix
add key’s to /etc/duo/pam_duo.conf (Integration, Secret, API hostname) from duo website
sudo nano /etc/duo/pam_duo.conf
edit common-auth
sudo nano /etc/pam.d/common-auth
add to file at the bottom /etc/pam.d/common-auth (make sure there are no duplicates)
auth requisite pam_unix.so nullok_secure
auth [success=1 default=ignore] /lib64/security/pam_duo.so
auth requisite pam_deny.so
auth required pam_permit.so
auth optional pam_cap.so
edit /etc/ssh/sshd_config add
sudo nano /etc/ssh/sshd_config
add
ChallengeResponseAuthentication yes
UsePAM yes
UseDNS no
if use public key add
PubkeyAuthentication yes
PasswordAuthentication yes
AuthenticationMethods publickey,keyboard-interactive
need to make some changes in the pam.d/sshd config
sudo nano /etc/pam.d/sshd
You need to comment out and add the following lines
#@include common-auth
auth [success=1 default=ignore] /lib64/security/pam_duo.so
auth requisite pam_deny.so
auth required pam_permit.so
auth optional pam_cap.so