2021 Ending

I am wishing you all a good 2022 and hope that you find room in your heart for God.  Please do remember that Jesus (Yeshua) did die for you. So that all of the sins we have done can be forgiven.  If you don't understand the significance of that sacrifice, please go research it.  I know in our day and time, we have drifted away from living godly lives as the norm.  And unfortunately, our norm today is way off from what it was long ago.  Take the time to research it.  It can turn your whole eternity around.  We all die, as we see evidence of this with everyone who has ever lived.  Its important to know for sure where you are going to go after you die.  I pray that you will find your way to Jesus.  

Acts 4:8-12  

... Salvation is found in no one else, for there is no other name under heaven given to men by which we must be saved.

IPRhino.com: A New IP Reporting Tool

I hope everyone had a good Christmas holiday and all is well.  

I wanted to introduce to you a new site for reporting your public IP address (below).  Its an addition to the White Rhino Security site, and its called "IPRhino".  Take a visit.

www.iprhino.com

Ruckus (Brocade) 7650: "2:_bcm_esw_linkscan_update_port: Port xe4: Failed to recover link status: Operation failed"

  I recently did an upgrade on a 7650 stack from 8.0.70 to 8.0.90. I was seeing an error message on the console that looked like this below.

2:_bcm_esw_linkscan_update_port: Port xe4: Failed to recover link status: Operation failed
2:_bcm_esw_linkscan_update: Port xe4: temporarily removed from linkscan
2:_bcm_esw_linkscan_update_port: Port xe8: Failed to recover link status: Operation failed
2:_bcm_esw_linkscan_update_port: Port xe9: Failed to recover link status: Operation failed
2:_bcm_esw_linkscan_update_port: Port xe10: Failed to recover link status: Operation failed
2:_bcm_esw_linkscan_update_port: Port xe8: Failed to recover link status: Operation failed
2:_bcm_esw_linkscan_update_port: Port xe9: Failed to recover link status: Operation failed
2:_bcm_esw_linkscan_update_port: Port xe10: Failed to recover link status: Operation failed
2:_bcm_esw_linkscan_update_port: Port xe8: Failed to recover link status: Operation failed

I talked to my local SE about it, and he said that this was a bug in the software and that it could cause a reboot at any time.  We should upgrade from 08.0.70dT233 to 08.0.90mcT233.  So that is what we did.

Below are the steps for the upgrade.  

1. I was already using the secondary image on the boxes, so I put this in the primary spot, so I could revert back to the original if needed.  I was told my my local SE to go to 8.0.80f first, because I could loose some ACLs if I went straight to 8.0.90.  copy tftp system 192.168.0.101 FI08080f_Manifest.txt all-images-pri

2. boot sys flash pri

3.  wr mem

4.  reboot  (When going to 8.0.80, the primary unit reboots once, the rest of the units in the stack reboot TWO times.  Make sure you wait on that, because if you try to start upgrading to the next code, this will cause you problems.)

5.  copy tftp flash 192.168.0.101 TNR08090mcufi.bin primary

6.  reboot

Brocade (Ruckus) ICX7650: Change From 100G Stacking To 40G Stacking

 I recently added another switch into a stack of five 7650s that were doing 40Gig on the stacking uplinks.  By default, the 7650 will want to do 100Gig.  In this case, I needed to change the speed from 100G to 40G.  Below is how I did it.

ICX7650-48ZP Switch(config)#rear-module stack-40g

ICX-7650 rear module setting changes requires a reload to take effect!!!

The rear module operates in stacking mode with 40Gbps speed after reload.

ICX7650-48ZP Switch(config)#exit

Pic Of The Week: Teton Sunset

 

Sumo Springs

Finally got these on. 

Another PA-820 Install

From a technical standpoint, Palo Alto is the best firewall on the market. 

Michigan

Michigan is a beautiful state. I never knew that. The Upper Peninsula in particular has turned out to be one of my favorite places in the US. 

Solar Panel Project

 I added a second solar panel to the RV. This should help charge the house batteries faster,  when traveling down the road. 

Palo Alto 3220s

 New hardware and a great product.  

Pic Of The Week: Pennsylvania Dutch Farm

This would not mean much to you guys,  but I met some really nice people while on a customer visit.  A guy named Lamar who is a farmer in Pennsylvania and a guy named Mike, a veteran from New York state. We all shared a similar view from Lamar's property. 

A Hectic Weekend

 Sometimes in IT things can get hectic.  I have a customer whose log files filled up the hard drives on two of their firewalls.  One in Alabama and one in Pennsylvania.  This happened on a Friday night. 

So my customer had to be back up on Monday at open of business day. So off I went.  First to the Alabama site on Saturday then drove to the Pennsylvania site on Sunday.  I was able to reinstall the firewalls from scratch and do a restore of the configurations and have everything back up and going without issue by Sunday evening.  

I have said recently that interstates are for getting somewhere and the back roads are for seeing the country.  I always enjoy the back roads better. 

Blackwater Falls State Park in West Virginia

Fortigate HA Install

 

Sunset At Pensacola Beach

 

Palo Alto 3260 Install

 Palo Alto had a great firewall compared to the competition.  Below is another install as only an IPS box.  

Fortigate 50E Install

PBR: Policy Based Routing On Aruba 3810

 Quick example that I did on an Aruba 3810 to force traffic out to another firewall.

============== Begin =====================

class ipv4 "Camera"

     10 ignore ip 192.168.1.45 0.0.0.0 10.0.0.0 0.255.255.255

     20 match ip 192.168.1.45 0.0.0.0 0.0.0.0 255.255.255.255

   exit

policy pbr "Camera"

     10 class ipv4 "Camera"

      action ip next-hop 10.102.12.2

      exit

   exit

vlan 10

   name "Camaras"

   untagged 1/10,2/10

   ip address 192.168.1.1 255.255.252.0

   service-policy "Camera" in

   exit

============ End ===================