Pages

Tuesday, October 8, 2013

DSL Line - PPPoE on Cisco Router Configuration Template

interface GigabitEthernet0/0
 no ip address
 ip virtual-reassembly
 duplex auto
 speed auto
 pppoe enable group global
 pppoe-client dial-pool-number 1



interface GigabitEthernet0/1
 ip address 100.199.14.7 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto

interface Dialer1
 ip address negotiated
 ip mtu 1492
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 ip tcp adjust-mss 1452
 dialer pool 1
 dialer-group 1
 ppp authentication pap callin
 ppp pap sent-username dsl@net.ca password 0 123456
!

ip nat inside source list 1 interface Dialer1 overload
ip nat inside source static 100.199.38.3 9.1.1.8
ip route 0.0.0.0 0.0.0.0 Dialer1

access-list 1 permit 100.199.38.0 0.0.0.255



Thursday, October 3, 2013

Upgrade Juniper JUNOS on SRX using USB Storage

1. Insert USB Pen Driver into USB port on SRX Firewall


2. log into SRX Firewall with root account. 

Create /var/tmp/usb folder
root@fw-1-1% cd /var/tmp
root@fw-1-1% ls
cleanup-pkgs.log        gksdchk.log             idp_license_info        krt_gencfg_filter.txt   policy_status           sec-download            vi.recover
eedebug_bin_file        gres-tp                 install                 pics                    rtsdb                   spu_kmd_init
root@fw-mex1-1% mkdir usb

3. Get usb device name

root@fw-1-1% cd /var/log
root@fw-1-1% cat messages 

then find out following messages:
Oct  3 17:55:23  fw-mex1-1 /kernel: %KERN-2: umass1: HP v220w, rev 2.00/11.00, addr 4
Oct  3 17:55:24  fw-mex1-1 /kernel: %KERN-2: da1 at umass-sim1 bus 1 target 0 lun 0
Oct  3 17:55:24  fw-mex1-1 /kernel: %KERN-2: da1: <hp v220w 1100> Removable Direct Access SCSI-4 device 
Oct  3 17:55:24  fw-mex1-1 /kernel: %KERN-2: da1: 40.000MB/s transfers
Oct  3 17:55:24  fw-mex1-1 /kernel: %KERN-2: da1: 7788MB (15950592 512 byte sectors: 255H 63S/T 992C)
Oct  3 17:55:30  fw-mex1-1 sshd[27752]: %AUTH-6: Did not receive identification string from 10.4.20.5

Device name will be da1s1


4. Mount device to folder /var/tmp/usb

root@fw-1-1% cd /dev/
root@fw-1-1% ls
altroot         bo0s3e          bpf10           bpf3            cfi0            da0             da0s3           da0s4e          fileassoc       md0             nfslock         ptyp1           stdout          usb
ata             bo0s3f          bpf11           bpf4            console         da0s1           da0s3c          da1             gblmem          md1             null            random          ttyp0           usb0
bo0s1a          bo0s4a          bpf12           bpf5            cpld            da0s1a          da0s3e          da1s1           geom.ctl        md2             octpkt          root            ttyp1           usb1
bo0s1c          bo0s4c          bpf13           bpf6            ctty            da0s1c          da0s3f          devctl          gpio            md3             pass0           rtfifo          ttyu0           veriexec
bo0s2a          bo0s4e          bpf14           bpf7            cuau0           da0s2           da0s4           devstat         klog            mdctl           pass1           smb             ttyu0.init      xpt0
bo0s2c          bpf0            bpf15           bpf8            cuau0.init      da0s2a          da0s4a          fd              kmem            mem             pci             stderr          ttyu0.lock      zero
bo0s3c          bpf1            bpf2            bpf9            cuau0.lock      da0s2c          da0s4c          fido            log             nfs4            ptyp0           stdin           urandom
root@fw-mex1-1% mount -t msdos /dev/da1s1 /var/tmp/usb

5. copy the file to folder /var/tmp/usb


6. add package into system software

root@fw-1-1> request system software add /var/tmp/usb/junos-srxsme-11.4R7.5-domestic.tgz no-copy no-validate

Follow the screen notification to do upgrade firewall.