Thursday, April 30, 2009
Squirrel Mail Configuration File SCRIPT
Squirrel Mail Configuration File SCRIPT (LINK HERE)
guyz its a simple script to configure your Linux-squirrel mail server.
if i have anything wrong in this script or u have to share any information regarding this script or other Linux information Please shared with us, POST YOUR MESSAGE or EMAIL me at voasa1@gmail.com
Monday, April 27, 2009
VPN CONNECTION, on any OPERATING SYSTEM
- Step 1. Configure an Identity Certificate
- Step 2. Upload the SSL VPN Client Image to the ASA
- Step 3. Enable AnyConnect VPN Access
- Step 4. Create a Group Policy
- Step 5. Configure Access List Bypass
- Step 6. Create a Connection Profile and Tunnel Group
- Step 7. Configure NAT Exemption
- Step 8. Configure User Accounts
So let’s get started!
Step 1. Configure an Identity Certificate
Here I am creating a general purpose, self-signed, identity certificate named sslvpnkey and applying that certificate to the “outside” interface. You can purchase a certificate through a vendor such as Verisign, if you choose.
corpasa(config)#crypto key generate rsa label sslvpnkey
corpasa(config)#crypto ca trustpoint localtrust
corpasa(config-ca-trustpoint)#enrollment self
corpasa(config-ca-trustpoint)#fqdn sslvpn. mycompany.com
corpasa(config-ca-trustpoint)#subject-name CN=sslvpn.mycompany.com
corpasa(config-ca-trustpoint)#keypair sslvpnkey
corpasa(config-ca-trustpoint)#crypto ca enroll localtrust noconfirm
corpasa(config)# ssl trust-point localtrust outside
Step 2. Upload the SSL VPN Client Image to the ASA
You can obtain the client image at Cisco.com. As you choose which image to download to your tftp server, remember that you will need a separate image for each OS that your users have. After you select and download your client software, you can tftp it to your ASA.
corpasa(config)#copy tftp://192.168.81.50/anyconnect-win-2.0.0343-k9.pkg flash
After the file has been uploaded to the ASA, configure this file to be used for webvpn sessions. Note that if you have more than one client, configure the most commonly used client to have the highest priority. In this case, we’re using only one client and giving it a priority of 1.
corpasa(config)#webvpn
corpasa(config-webvpn)#svc image disk0:/anyconnect-win-2.3.0254-k9.pkg 1
Step 3. Enable AnyConnect VPN Access
corpasa(config)#webvpn
corpasa(config-webvpn)#enable outside
corpasa(config-webvpn)#svc enable
Step 4. Create a Group Policy
Group Policies are used to specify the parameters that are applied to clients when they connect. In this case, we’ll create a group policy named SSLClient. The remote access clients will need to be assigned an IP address during login, so we’ll also set up a DHCP pool for them, but you could also use a DHCP server if you have one.
corpasa(config)#ip local pool SSLClientPool 192.168.100.1-192.168.100.50 mask 255.255.255.0
corpasa(config)#group-policy SSLCLient internal
corpasa(config)#group-policy SSLCLient attributes
corpasa(config-group-policy)#dns-server value 192.168.200.5
corpasa(config-group-policy)#vpn-tunnel-protocol svc
corpasa(config-group-policy)#default-domain value mysite.com
corpasa(config-group-policy)#address-pools value SSLClientPool
Step 5. Configure Access List ByPass
By using the sysopt connect command we tell the ASA to allow the SSL/IPsec clients to bypass the interface access lists.
corpasa(config)#sysopt connection permit-vpn
Step 6. Create a Connection Profile and Tunnel Group
As remote access clients connect to the ASA, they connect to a connection profile, which is also known as a tunnel group. We’ll use this tunnel group to define the specific connection parameters we want them to use. In our case, we’re configuring these remote access clients to use the Cisco AnyConnect SSL client, but you can also configure the tunnel groups to use IPsec, L2L, etc.
First, let’s create the tunnel group SSL Client:
corpasa(config)#tunnel-group SSLClient type remote-access
Next, we’ll assign the specific attributes:
corpasa(config)#tunnel-group SSLClient general-attributes
corpasa(config-tunnel-general)#default-group-policy SSLCLient
corpasa(config-tunnel-general)#tunnel-group SSLClient webvpn-attributes
corpasa(config-tunnel-webvpn)#group-alias MY_RA enable
corpasa(config-tunnel-webvpn)#webvpn
corpasa(config-webvpn)#tunnel-group-list enable
Note that the alias MY_RA is the group that your users will see when they are prompted for login authentication.
Step 7. Configure NAT Exemption
Now we need to tell the ASA not to NAT the traffic between the remote access clients and the internal network they will be accessing. First we’ll create an access list that defines the traffic, and then we’ll apply this list to the nat statement for our interface.
corpasa(config)#access-list no_nat extended permit
ip 192.168.200.0 255.255.255.0 192.168.100.0 255.255.255.0
corpasa(config)#nat (inside) 0 access-list no_nat
Step 8. Configure User Accounts
Now we’re ready for some user accounts. Here we’ll create a user and assign this user to our remote access vpn.
corpasa(config)#username hyde password l3tm3in
corpasa(config)#username hyde attributes
corpasa(config-username)#service-type remote-access
Finishing up
Don’t forget to save your configuration to memory.
corpasa#write memory
Verify your configuration by establishing a remote access session and use the following show command to view session details.
corpasa #show vpn-sessiondb svc
This guide should help you to get your remote access users up and running in no time. If you run into any difficulties, use the debug webvpn commands to diagnose the problem.
Good luck and have fun out there!
Clientless SSL VPN remote access set-up guide for the Cisco ASA
Keep in mind that the SSL VPN remote access solution does have some limitations. In a clientless SSL session, the Cisco ASA acts as a proxy between the remote user and the internal resources. When accessing resources, the ASA establishes a secure connection and validates the server SSL certificate. This certificate is never seen by the end user. The ASA does not permit communication with sites that have invalid certificates.
Step 1. Configure an identity certificate
Here, I am creating a general purpose, self-signed, identity certificate named sslvpnkey and applying that certificate to the “outside” interface. You can purchase a certificate through a vendor such as Verisign, etc., if you choose.
corpasa(config)#crypto key generate rsa label sslvpnkeycorpasa(config)#webvpn
corpasa(config)#crypto ca trustpoint localtrust
corpasa(config-ca-trustpoint)#enrollment self
corpasa(config-ca-trustpoint)#fqdn sslvpn. mycompany.com
corpasa(config-ca-trustpoint)#subject-name CN=sslvpn.mycompany.com
corpasa(config-ca-trustpoint)#keypair sslvpnkey
corpasa(config-ca-trustpoint)#crypto ca enroll localtrust noconfirm
corpasa(config)# ssl trust-point localtrust outside
Figure A
Step 2. Enable SSL VPN Access
corpasa(config-webvpn)#enable outside
corpasa(config-webvpn)#svc enable
Figure B
Step 3. Create a Group Policy
Group Policies are used to specify the parameters that are applied to clients when they connect. The remote access clients will need to be assigned an IP address during login; so we’ll set up an address pool for them, but you could also use a DHCP server if you have one.
corpasa(config)#ip local pool VPN 192.168.100.1-192.168.100.50 mask 255.255.255.0
Next, I’ve made some modifications to the default group policy for items such as the dns-servers, the default domain, etc. Typically, the default group policy is where you will set up the global values common to most users.
Corpasa (config)#group-policy DfltGrpPolicy attributesFigure C
Corpasa (config-group-policy)# wins-server value 192.168.80.205
Corpasa (config-group-policy)# dns-server value 172.20.100.1
Corpasa (config-group-policy)# dns-server value 192.168.80.216
Corpasa (config-group-policy)# vpn-tunnel-protocol svc webvpn
Corpasa (config-group-policy)# split-tunnel-policy tunnelspecified
Corpasa (config-group-policy)# split-tunnel-network-list value inside-network
Corpasa (config-group-policy)# address-pools value VPN
Then, I’ll create a group policy named Operations. This is where I’ll configure the items specific to our SSL users, which in this case is the operations team.
Corpasa (config)#group-policy Operations internal
Corpasa (config)#group-policy Operations attributes
Corpasa (config-group-policy)# banner value Tech Op Remote Access
Corpasa (config-group-policy)# banner value Unauthorized access prohibited
Corpasa (config-group-policy)# vpn-tunnel-protocol webvpn
Corpasa (config-group-policy)# webvpn
Corpasa (config-group-webvpn)# url-list value TechOps
Corpasa (config-group-webvpn)# homepage none
Corpasa (config-group-webvpn)# svc ask none default webvpn
Corpasa (config-group-webvpn)# customization value TechOps
Corpasa (config-group-webvpn)# hidden-shares visible
Corpasa (config-group-webvpn)# file-entry enable
Corpasa (config-group-webvpn)# file-browsing enable
Corpasa (config-group-webvpn)# url-entry enable
Figure D
Step 4. Configure access list bypass
By using the sysopt connect command we tell the ASA to allow the SSL/IPsec clients to bypass the interface access lists.
corpasa(config)#sysopt connection permit-vpnStep 5. Create a connection profile and tunnel group
As remote access clients connect to the ASA, they connect to a connection profile, which is also known as a tunnel group. We’ll use this tunnel group to define the specific connection parameters we want them to use during this SSL VPN session.
First, let’s create the tunnel group RA_SSL:
corpasa(config)# tunnel-group RA_SSL webvpn-attributesFigure E
Next, I’ll assign the specific attributes:
corpasa(config)#tunnel-group RA_SSL webvpn-attributes
corpasa(config-tunnel-webvpn)# group-alias RA_SSL enable
corpasa(config-tunnel-webvpn)# customization TechOps
corpasa(config-webvpn)# group-url https://MyASAIP/RA_SSL enable
Figure F
Step 6. Configure NAT exemption
Now I need to tell the ASA not to NAT the traffic between the remote access clients and the internal network they will be accessing. First I’ll create an access list that defines the traffic, and then we’ll apply this list to the nat statement for our interface.
corpasa(config)#access-list no_nat extended permit ip 192.168.200.0 255.255.255.0 192.168.100.0 255.255.255.0corpasa(config)#nat (inside) 0 access-list no_nat
Figure G
Step 7. Configure user accounts
Now we’re ready for some user accounts. Here I’ll create a user and assign this user to our remote access VPN. While you are setting up local accounts here, you can also configure domain servers and use domain authentication if you choose to do so.
corpasa(config)#username hyde password l3tm3in
corpasa(config)#username hyde attributes
corpasa(config-username)#service-type remote-access
Figure H
Finishing up:
Don’t forget to save your configuration to memory.
corpasa#write memoryVerify your configuration by establishing a remote access session and use the following show command to view session details.
corpasa #show vpn-sessiondb webvpnThis should get the basics of your SSL VPN remote access configured on the Cisco ASA. Unfortunately, your users won’t have many resources until you configure them. In part 2, I’ll look at how to customize the SSL VPN portal to provide the required access for your remote users. Stay tuned!
for further link cisco:Remote Access for users with the Cisco ASA:
Clientless SSL VPN (WebVPN) on Cisco IOS with SDM Configuration Example
There are eight basic steps in setting up remote access for users with the Cisco ASA.
- Step 1. Configure an Identity Certificate
- Step 2. Upload the SSL VPN Client Image to the ASA
- Step 3. Enable AnyConnect VPN Access
- Step 4. Create a Group Policy
- Step 5. Configure Access List Bypass
- Step 6. Create a Connection Profile and Tunnel Group
- Step 7. Configure NAT Exemption
- Step 8. Configure User Accounts
So let’s get started!
for more information click on thiz link: ASA remote Access setup
Saturday, April 25, 2009
Netscreen configuration-Juniper
Netscreen Files:
Netscreen 1 Netscreen 2 Netscreen 3 Netscreen 4
Netscreen 5 Netscreen 6 Netscreen 7 Netscreen 8
Netscreen 9
CLI BASED:
Netscreen 10 Netscreen 11 Netscreen 12
Netscreen 13
Netscreen (version and Models):
GS_200 GS_25 GS_50
IN_200 IN_500 IN_500
Friday, April 24, 2009
How to do E-mail time synchronisation with ISP..?
Do you sometimes get confused when using your e-mail client (like outlook express, microsoft outlook, thunderbird, eudora etc) your e-mail gets sent (goes to sent items) view screenshot:
(Here is the LINK to clear view)
It gets sent from your side but could not reach the receiving end ? or recieves there but the sent time is incorrect, In that case you can try synchronising your SYSTEM TIME with your ISP's DNS server time, the steps are as follows:
<-----step1----->
<-----step2----->
<-----step3----->
Following these steps is one of the ways to solve your e-mail sending problem through an e-mail client if the issue is of time synchronisation.
if you have any query, please email me at sunil.babu101@gmail.com or post a msg on the chatroll box on the top right side or you can comment below as well.
posted by SUNIL BABU
Support engineer
Wednesday, April 22, 2009
CISCO-how to configure IPSEC VPN
CISCO-how to configure an IPSEC VPN ??????
A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or individual users with secure access to their organization’s network. The following tutorial will show you how to connect two locations together with an IPSec VPN using pre-shared authentication.
(------link Here------)
In thiz link you can find video tutorial of IPSEC VPN, a clear view of configuration. you can find also other cisco stuff with video tutorial etc CCVP CCNP CCSP CCNA
(---------Link Here-------)
if you have any query plz let me know with your post or email me voasa1@gmail.com or leave your message on your left CHATROLL box thank u
simple PIX Firewall configuration
simple scenario is given here where you have a corporate network with a PIX Firewall
connected to the Internet through the Outside Interface, Internal Network through
the Inside interface and DMZ through the DMZ Network. This paper would assist you
in a simple step by step, near complete configuration for a PIX Firewall running a
midsized corporate network.
here is the complete link -------- PIX FIREWALL CONFIGURATION
Tips and tips: How to recover PIX Firewall image using monitor mode? link here
In this website you can find more tips regards pix config as well as some Advance routing protocols configuration tips it is very useful...! plz check it out
Tuesday, April 21, 2009
BSCI students simlet,simulation,LABs
http://www.digitaltut.com/
A.wadood khan
Network support Engineer
Provided By:
Fahad Ahmed Khan
Network Engineer
leave ur message or post or email me voasa1@gmail.com
Friday, April 17, 2009
Redundancy Protocols Config...in Cisco IOS routers etc VRRP,HSRP,GLBP,ETHERCHANNEL .....!
Redundancy techniques which you can apply on the network to get the better performance, provide redundancy and load balancing All i am providing cisco based router configuration so you can better view to understand how cisco configured to use these techniques. Below have some links where you find whole configuration and understand the techniques..........!
1.Virtual Router Redundancy Protocol (VRRP) makes your network more reliable
URL:http://blogs.techrepublic.com.com/networking/?p=653
2.Increase network bandwidth using Cisco's EtherChannel
URL:http://blogs.techrepublic.com.com/networking/?p=662
3.How to configure HSRP in Cisco IOS Routers
URL:http://www.itsyourip.com/cisco/how-to-configure-hsrp-in-cisco-ios-routers/
(video link: HSRP configuration)
4.configuring HSRP and VRRP on cisco routers
5.How to configure GLBP in Cisco IOS Routers
URL:http://www.itsyourip.com/cisco/how-to-configure-glbp-in-cisco-ios-routers/
Block website.......access through Webproxy and Guides of any Device...!
PIE blocks some websites like person.com etc, websites which you want to access but you cant be able to get it. you can be able to access through web proxy......... site known as:
URL here[http://anonymouse.org/]
some people want to configure the device but due to lack of information about the device they cant be configure but here a website give you the guide of any device like wifi-routers of any brand name you just have to search that model and website give you the whole guide of that device, a good website for technical people as well as non-technical people.......... site know as
URL here[http://safemanuals.com/]
Cisco Manuals and DYNagen....!
BSCI (Link)
ISCW (Link)
WinPcap (Download link)
IOS image Link: http://rapidshare.com/files/25862116/c3725-ipvoice-mz.123-14.T7.bin
A renowned teacher in karachi purely network field his name Irfan ghauri he has also a 4shared link you can take cisco material as well here, the link is below:
Note:Guyz plz check out if you have any query regarding this post plz let me know throught your post message else leave your message on your right side CHATROLL box thank you or u can email me: voasa1@gmail.com thank u
How to Block Website in Windows XP.....!
Want to bully your friends by blocking their favorite websites or just want to hide some web pages from your children? Here’s how you can block certain websites on your home computer:
Step 1: Click the Start button and select Run. Type the following text in that Run box:
notepad c:\WINDOWS\system32\drivers\etc\hosts
Step 2: You will see a new notepad window on your screen containing some cryptic information. Don’t panic. Just go to the last line of the file, hit the enter key and type the following
(for example):
127.0.0.1 myspace.com
(host file image)
Save the file and exit. That’s it. None of the above sites will now open on your computer.
You can block as many websites as you like with the above technique. If you want to remove the ban later, open the same file as mentioned in Step 1 and delete the above lines.
if you have any problem please post your comment or cat with me on your left chatroll and leave me message thank you
Protect your PC from Confiker Virus
I have found this link at our FTP side like to share with you Guys .Please makeensure to run this tool on every client who are complaining about browsing/CPE hang issues
Protect your PC from Confiker Virus!
Confiker Virus is a new virus that will affect millions of computers around theworld on 1st April. If your PC is working at a dead slow speed then it may be a signthat your PC is affected with the virus. Removal of Confiker can be somewhat trickyas it blocks access to the most well-known security websites, such as Microsoft,McAfee, Norton, etc.
For the conveniece of LINKdotNET customers and to ensure that their machines areprotected, LINKdotNET has a special security patch available for download. All youhave to do to stay protected from this malicious virus is to download the SecurityPatch.
Select the version that matches your Operating System:
Security Patch for Windows XP (downloadable .exe file)
Security Patch for Windows Vista (downloadable .exe file)
Once you have downloaded the Security Patch, follow these simple instructions:
1- First run the patch with Quick Scan. This will take merely a few minutes. Thepatch will automatically detect and remove Confiker Virus from your PC.
2- Restart your system once the scan has been completed.
3- Now run the patch again with Full Scan. This will take 4 to 5 hours ofscanning and any leftover infected files will also be removed.
4- Once Full Scanning is completed, make sure to restart your system again andupdate your antivirus.
Remember, you will have to run this Security Patch twice to ensure complete removalof the Confiker Virus.
Stay protected with LINKdotNET!
ftp://ftp.link.net.pk/
User Name : ftp.client
Password : ftp123
MAXcom user can access thiz webiste to Get the Patch:
ftp://ftp.max.com.pk/uploads/ConfickerVirusRemoval
How to Configure Dlink DSL-2500U......???????
step 2:insert Atm values VPI/VCI (like maxcom have VPI = 0 and VCI = 32) which ISP provide you.
step 3:select type of connection whether you want PPoE/PPoA then Next
step 4:Insert username and password then Next
step 5:Already select NAT/Firewall then Next
step 6:after step 5 you get summary of whole configuration if you want to revert this configuartion you can do that if not then next and save configuration
step 7:show you WAN status then click on save/reboot option.
step 8:after save/reboot option goto Advance setup>DNS ........insert dns values
If you have any query plz post your message or you can email me voas_a1@hotmail.com
or you can chat live on your left chatroll box or leave yur message with you email id thank you
Step by Step Configuration of MRTG on Windows XP ????
Start > Settings > Control Panel > Add or Remove Program >
Add or Remove Programs > Add/Remove Windows Component >
Management and Monitoring Tools > Simple Network Management Protocol.
• Download Perl (www.activestate.com)
1. Double click to start the installation and Next to proceed.
2. To verify the Installation:
(clear view image)
See the path listed under System Variables
(clear view image)
• Download MRTG (www.mrtg.org).
1. WinZip MRTG (preferably in same drive as of Perl)
2. Create another folder “mrtghtml” (can be any sensible name) to hold graph files.
3. Run cfgmake: Run following command on command prompt
c:\mrtg\bin> perl cfgmaker public@
c:\mrtg\bin> perl indexmaker --output intel510t.htmintel510t.cfg"- -output
intel510t.htm" is the name of the webpage output file. Be sure and use the "htm” extension
"intel510t.cfg" is the name of the configuration file you want to use in making an index of targets
perl mrtg server.cfg
6. Running MRTG as a Daemon:
Open server.cfg with notepad (C:\mrtg\bin\server.cfg) and add these lines: RunAsDaemon: Yes
Interval: 5
(clear view image)
7. Return to DOS window and run MRTG again and don’t close the window else MRTG will die!!!
How to Configure WRT54G linksys router and enable security ????
step2>select AUTO DHCP........then change value of local ip address 192.168.1.1 if your DSL modem etc provide you same ip address 192.168.1.1 then change local ip address into 192.168.0.1 after that you can access linksys router through 192.168.0.1..... then enter DNS values which ISP provide you........and save
Wireless Security:
step3>select wireless> wireless security>enable security security
step4>select any encryption technique like WPA personal then enter Password on passphrase field then save setting.......restart your Linksys router and connect through wifi
(Note:you can click on steps links which is above to get the better view of pics)
If you have any query plz post your comments and you can email me:voas_a1@hotmail.com
or chat with me on your left chatroll box thank you
How to Configure Port Forward in Zyxel ........!.
Thank you if you have any query plz let me know on the left in Chatroll or email me:
voas_a1@hotmail.com
Steps Clear view download:
step1 step2