Friday, October 29, 2010

How to configure Ethernet Port or Fiber port on 3com and h3c devices


#system-view   (Like configuration view in cisco)
#[sys]# interface eth0/0
#[sys]#shutdown
#[sys]# undo shutdown
#[sys]# description xxxx
#[sys]# duplex { auto | full | half }            duplex setup in interface
#[sys]# speed { 10 | 100 | 1000 | auto }  Set the transmission rate
(By default, the port speed is in the auto-negotiation mode)


# Specify GigabitEthernet 0/3 to operate as an electrical port (assuming that the port is a Combo port).

<Sysname> system-view

[Sysname] interface gigabitethernet 0/3

[Sysname-GigabitEthernet0/3] combo enable copper

# Specify GigabitEthernet 0/3 to operate as an optical port (assuming that the port is a Combo port).

#<Sysname> system-view

#[Sysname] interface gigabitethernet 0/3

#[Sysname-GigabitEthernet0/3] combo enable fiber

Tuesday, October 26, 2010

How to configure easy VPN in H3C firewall

configuring the vpn connection for remote user (use i-node client for vpn connection )
 
interface Virtual-Template10 (create ip pool for client pc to get ip address from this pool )
 ppp authentication-mode pap domain system
 remote address pool 1
 ip address 192.168.10.1 255.255.255.0

Note :-Interface virtual-template10 should be in trusted zone (security preferences should be higher). 3com is supporting only L2TP tunneling for VPN client  .VPN client you should use is I-Node(freeware),

Note: -Public facing ip address should be assign on Inode  LNS server session


l2tp-group 10
 allow l2tp virtual-template 10
 tunnel password simple xxxx     Security
 tunnel name lns

local-user xxx
password simple xxxx
service-type ppp

local-user xxxx
password simple xxxx
  service-type ssh telnet
 service-type ppp


domain system
 authentication ppp local
 access-limit disable
 state active
 idle-cut disable
 self-service-url disable

Documentation Link


https://drive.google.com/file/d/0B5xs49dCPrhncmFUYmREOE1GX28/edit?usp=sharing


Inode installation and setup











Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...