NAT64/46
Today I experimented with NAT64 / NAT46 a bit. The Setup to test this is relatively easy: I took 2 Windows-Servers (2008R2), one with only IPv4 and one with only… Read more »
Category: Security
OSPF between a vSRX-Cluster and a standalone vSRX over vQFX on EVE-NG
I promised to deliver this and here it is: OSPF over vQFX 😉 These days I lab a lot with EVE and I love it more every day – the… Read more »
Running vQFX 15.1X53-D63 on EVE (KVM)
The KVM version of the latest vQFX routing engine VM (vqfx10k-re-15_X53-D63) seems to be broken. If you try to run it, it will crash with a kernel9 panic and will… Read more »
The itself not so secure JIPS-Course
Last week I attended the 2-days JIPS (Junos Intrusion Prevention Systems), which will soon be part of the shiny new 5-day AJSEC (hopefully way way way better)… Anyways – currently… Read more »
SRX ssh brute-force countermeasures
It’s always a good idea to secure and also harden your SRX in case it is reachable via the Internet. Today I labbed a bit to see if this Filter… Read more »
vSRX on Hyper-V – I still prefer VMware…
Yesterday with the Release of the new vSRX (15.1X49-D80) I thought “why not give Hyper V a try?”. I spinned up a Windows Server 2012 R2, installed Hyper-V and deployed… Read more »
vSRX Lab – initial Phase
Hi all, I’m currently very busy on the Job so today it’s just a short Update: I added the first 10 vSRX’es to the Server – besides my CPU everyone… Read more »
JND-SEC
This week is about Designing Security Solutions the Juniper-Way: JND-SEC in Cologne. So far the course is really “dry” and “theoretical” – I will post an Update of our Topologies… Read more »
Redesign of Lab – Done
This weekend my Goal was to redesign my Lab at home for the JNCIE-SEC. Came out pretty nice – all running on my DL360G7 🙂 The Pro-Side is, that I… Read more »
IPsec Site-to-Site Tunnel between SRX100 and PfSense (Policy-Based VPN)
Today (with the help of my friend and skillful netadmin Malte) we finally figured out how to bring up an IPsec Site-to-Site Policy-based VPN with multiple phase2-entries behind the PfSense… Read more »