TechTalkSecurity

 GRE Tunnel Configuration on Paloalto Firewall  Network Topology:   Configuration:    devices {     localhost.localdomain {       network {         interface {           ethernet {             ethernet1/1 {               layer3 {                 ipv6 {                   neighbor-discovery {                     router-advertisement {                       enable no;  ...

Adding extension to a self-signed x509 certificate and signing a CSR with extensions (basic constraint CA:True/False, key usage, extended key usage, SAN etc.) Generating self-signed x509 certificate with extensions(basic constraint, key usage, extended key usage, SAN) :   > openssl req -x509 -nodes -newkey rsa:2048 -keyout key.pem -out certificate.pem -days 1000  -addext "keyUsage = digitalSignature, keyEncipherment, keyCertSign" -addext "extendedKeyUsage = serverAuth" -addext basicConstraints=critical,CA:FALSE -addext "subjectAltName = DNS:tgclean.cisco.com, IP:10.106.72.231" Generating CSR with extensions (basic constraint, key usage, extended key usage, SAN):   >openssl.exe req -x509 -out signing.csr -new -newkey rsa:2048 -nodes -keyout signing.key -addext "keyUsage = digitalSignature, keyEncipherment, keyCertSign"  -addext "extendedKeyUsage = serverAuth" -addext basicConstraints=critical,CA:FALSE -addext "subjectAltName =...

 OSPF-over-IPsec [Fortigate<>SRX] Topology:    Fortigate: Interface Configuration: config system interface     edit "OSPF-over-ipsec"         set vdom "root"         set ip 1.1.1.8 255.255.255.255         set allowaccess ping         set type tunnel         set remote-ip 1.1.1.200 255.255.255.0         set snmp-index 5         set mtu-override enable         set mtu 1400         set interface "port1"     next end OSPF Configuration: config router ospf     set router-id 1.1.1.8     config area         edit 0.0.0.0         next ...