Free Juniper Training Materials and Courses

Juniper is providing all kinds of free materials on their education portal website. Even more that, Juniper can provide you exam discount after you passed their evaluation exam before you really take VUE exam.  For those new to Juniper, it is best place you can learn Juniper and get into Junos world.

1. https://learningportal.juniper.net/juniper/default.aspx , register a account with your username, password and email. From my testing, no need more info.

2. Download or take free course from Juniper learning Portal by clicking courses link

3. After self-studied WBT, you will have unlimited chance to take practice exam and get a exam voucher for half price exam at VUE.

4. For day one series books, the link is

http://www.juniper.net/us/en/community/junos/training-certification/day-one/ 

so far Juniper has published 21 day one books covered most of its products. The most important and pretty thing is they are completely free. You can use it on iPAD/ iPhone / iPod touch or even Android phone since they are providing multiple format including pdf.

JUNOS FUNDAMENTALS SERIES

This Week: Hardening Junos Devices

Configuring Junos Policies and Firewall Filters

Deploying Basic QoS

Junos Tips, Techniques, and Templates 2011

Securing the Routing Engine on M, MX, and T Series

Exploring the Junos CLI

Configuring Junos Basics

Monitoring and Troubleshooting

JUNOS AUTOMATION SERIES

This Week: Junos Automation Reference for SLAX 1.0

This Week: Mastering Junos Automation

This Week: Applying Junos Automation

Navigating The Junos XML Hierarchy

JUNOS DYNAMIC SERVICES SERIES

Deploying SRX Series Services Gateways

Configuring SRX Series with J-Web

JUNOS FABRIC AND SWITCHING TECHNOLOGIES SERIES

Configuring EX Series Ethernet Switches

JUNOS NETWORKING TECHNOLOGIES SERIES

Dynamic Subscriber Management

This Week: Deploying MPLS

This Week: Deploying MBGP Multicast VPNs

Advanced IPv6 Configuration

Exploring IPv6

Migrating EIGRP to OSPF

Real Full Functional Free VPN over browsing port 80/443/8080

I has been busy in found a real vpn service which can encrypted your Internet activities from home or office. Mostly what I found a proxy or paid service which I already listed on previous posts. Happily announced here, in our world, there is real free online vpn service provider - proXPN.com . I am a little bit concern how this going to break our security policy and make it become a new security breach. Basically, it will auto-detect three ports opened by your firewall, tcp 80, tcp 443 and tcp8080, which are already opened by almost all firewalls to allow internet browsing.

This site give you a public ip from US which is only option from basic account (free service). But you will get more option once paid a little money monthly.

Your IP Address Is: 173.0.11.186 

thats screenshot how to get your free account. Please make sure you will select basic account service which will not charge you anything. 

Thats amazing.

all steps are listed on their website. Please check this site out and let me know if there is any issue. 

Free VPN - cross firewall or proxy limitation to access Internet

http://www.xpdo.net/

According to what this site said " it provide Free VPN Tunnel Account for people to unblock filters at office or school to browse the websites you want. With the free VPN tunnel you can easily unblock facebook and also youtube without any limits. Browsing through us both keeps you anonymous from the sites you visit and allows you to bypass any network restrictions from your government, workplace or college. "

Mostly what it does is to hide your public ip behind its public address "205.185.118.117"

IP Information: 205.185.118.117
ISP: FranTech Solutions
Organization: FranTech Solutions
Services: Suspected Network Sharing Device
City: Victoria
Region: British Columbia
Country: Canada

If you are running windows system, the tutor how to build vpn is listed in this link. basiclly step in XP is :
1.  Start -> Control Panel
2. Network Connection -> New Connection Wizard
3. Connect to the network at my workplace ->Virtual Private Network Connection ->Company name (Any words) -> Host name or ip address (vpn1.xpdo.net or vpn2.xpdo.net) -> Finish and check ' add a shotcut to this connection to my desktop"
4. Double click this connection on Desktop. Type username (xpdo.net) and password (found it from homepage)
5. Enjoy your anonymous Internet browsing.

note: the password will change every 30 minutes on the homepage.

VPN Account:


IP Address: vpn1.xpdo.net
username: xpdo.net
password: 30123484
location: San jose, USA


IP Address: vpn2.xpdo.net
username: xpdo.net
password: 89221288
location: San jose, USA

(Jan 7 2012) Two new accounts just added on the homepage:

   VPN #1 (IP): vpn1.ixour.com
username: xpdo.net
password: 31794136
location: San jose, USA

VPN #2 (IP): vpn2.ixour.com
username: xpdo.net
password: 99228830
location: San jose, USA  

Please make sure your firewall  allow following packets pass first to allow VPN to be built:

1. TCP/1723
2. IP Protocol/47 GRE

ASA 8.42 in VMware Workstation

Here are all related ASA(v) posts in this blog:

• ASA 8.02 in Vmware Workstation
• ASA 8.42 in VMware Workstation
• ASA 9.21 in Vmware Workstation 10
• Cisco ASAv 9.4.1 and ASDM 7.4.1 in Workstation / ESXi (1)
• Cisco ASAv 9.4.1 and ASDM 7.4.1 in Workstation / ESXi (2)
• Cisco ASAv 9.5.1 200 and ASDM 7.5.1 in Workstation / ESXi 

1. Download following files:

• a. asa842-initrd.gz from http://7200emu.hacki.at/viewtopic.php?p=33838
• b. asa842-vmlinuz from http://7200emu.hacki.at/viewtopic.php?p=33838
• c. get isolinux.cfg,isolinux.bin from dsl_asa.iso
• d. xxx.vmdk file from asa802 in vmware (from my previous post "ASA 8.02 in VM")

2. Change and replace files

a. change isolinu.cfg

DEFAULT asa842-vmlinuz

APPEND root=/dev/hda1 rw initrd= asa842-initrd.gz console=ttyS0,9600n8 auto nousb bigphysarea=16384 hda=980,16,32 ide_generic.probe_mask=0x01

TIMEOUT 1

b. Use genisoimage to create ISOLInux LiveCD

create a work folder in linux, such as /rrot/asa. create a subfolder isolinux

put all files (asa842-initrd.gz,asa842-vmlinuz.isolinux.cfg,isolinux.bin) into isolinux folder

in /boot/asa folder to run this command:

genisoimage -o dsl_asa.iso -J -r -v -b isolinux/isolinux.bin -c isolinux/boot.cat -no-emul-boot -boot-load-size 4 -boot-info-table -V "Gentoo linux x86" .

generate a dsl_asa.iso file and then replace dsl_asa.iso in 802 vm files.

3. CPU is a little bit high than asa802 version after tested . 

One core is used alomost 100%. Booting period is longer than asa802 too. I will still stick on asa802 for now. Wait the perfect simulating solution out to resolve cpu issue.

note: CPU issue can be resolved with a windows software BES  and you can download from here.

ASA 8.02 in Vmware Workstation

Here are all related posts in this blog:

• ASA 8.02 in Vmware Workstation
• ASA 8.42 in VMware Workstation
• ASA 9.21 in Vmware Workstation 10
• Cisco ASAv 9.4.1 and ASDM 7.4.1 in Workstation / ESXi (1)
• Cisco ASAv 9.4.1 and ASDM 7.4.1 in Workstation / ESXi (2)
• Cisco ASAv 9.5.1 200 and ASDM 7.5.1 in Workstation / ESXi 

1. Found a post regarding ASA on vm solution in which says write issue has been resolved.
Going to try it today and will post a update. DSL_ASA ISO file can download from this link.
Created vmware in vmware version 7.1.0 build-261024. All configuration is listed in the following pictures:

It is use COM to do output. Named Pipe TCP Proxy or vmwaregateway.exe will help VMWARE to transfer COM output to a TCP port. At host machine, do telnet localhost PORT. Then DSL interface should be up. Enter ./asa/bin/lina (there is . in the command, do not forget for those new to linux)to go into ASA interface.

ciscoasa> en
Password:
ciscoasa# show ver
Cisco Adaptive Security Appliance Software Version 8.0(2)
Compiled on Fri 15-Jun-07 19:29 by builders
System image file is "Unknown, monitor mode tftp booted image"
Config file at boot was "startup-config"
ciscoasa up 4 mins 5 secs
Hardware:   , 128 MB RAM, CPU Pentium 4 2804 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash Firmware Hub @ 0xffe00000, 1024KB
0: Ext: Ethernet0/0         : address is 000c.2918.e2fa, irq 255
1: Ext: Ethernet0/1         : irq 255
2: Ext: Ethernet0/2         : irq 255
3: Ext: Ethernet0/3         : irq 255
4: Ext: Ethernet0/4         : irq 255
5: Ext: Ethernet0/5         : irq 255
VLANs                        : 200
Failover                     : Active/Active
3DES-AES                     : Enabled
Security Contexts            : 20
GTP/GPRS                     : Enabled
VPN Peers                    : 5000
WebVPN Peers                 : 2500
ADV END SEC                  : Enabled
Serial Number: 123456789AB
Running Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Configuration register is 0x0
Configuration has not been modified since last system restart.
ciscoasa#

2. ftp FLAHS1 (from post http://www.netemu.cn/bbs/thread-9540-1-1.html) file into you linuxLive CD system. Run following command:
dd if=FLASH1 of=/dev/hda

note: Please make sure you are using IDE mode for your vmdk file. Also 0.256G should be enough for your virtual ide disk.

3. Save file. Wr won't work. Please use following command to try. Your disk0 should have right file structure to allow you save file. Unfortunately, copy run to start is not work as expected. 

asa802(config)# wr
Building configuration...
Cryptochecksum: c36d1836 b550a452 0b1a8782 bc03594f

%Error opening disk0:/.private/startup-config ()
Error executing command
[FAILED]

Even tried to copy running-config disk0:/.private/startup-config, got same error.

found a way to do copy:

asa802(config)# copy running-config disk0:/.private/startup-config1
Source filename [running-config]?
Destination filename [/.private/startup-config1]?
Cryptochecksum: 25eef8d7 63159cf2 e2b20271 786bb932
1964 bytes copied in 2.240 secs (982 bytes/sec)

Dont forget to set boot from startup-config1

boot config disk0:/.private/startup-config1

4. reload your vm, your change should be able to survive a reboot. CPU is really low.

 All your nic can be connected to this vm without any problem. Not sure multicast issue existing or not. will try and post later.

Note: ASA 8.4.2 has been running quite good in my machine with BES resolved CPU issue.