Skip to main content

Posts

Showing posts from June, 2020

Install Softether VPN

What is Softether VPN? https://www.softether.org/ Dependency yum groupinstall "Development Tools" yum install wget Change directory location cd /opt/ Download wget http://www.softether-download.com/files/softether/v4.34-9745-rtm-2020.04.05-tree/Linux/SoftEther_VPN_Server/64bit_-_Intel_x64_or_AMD64/softether-vpnserver-v4.34-9745-rtm-2020.04.05-linux-x64-64bit.tar.gz Extract tar zxvf softether-vpnserver-v4.34-9745-rtm-2020.04.05-linux-x64-64bit.tar.gz the extract process will produce a directory named vpnserver and files in it. cd vpnserver Manual Start/Stop ./vpnserver stop ./vpnserver start Configure ./vpncmd Next steps check the manual: https://www.softether.org/4-docs/1-manual/9._Installing_SoftEther_VPN_Bridge/9.3_Install_on_Linux_and_Initial_Configurations

Install Hbase standalone

Ada beberapa opsi untuk membangun sebuah server database hbase yaitu: 1) Standalone mode installation (No dependency on Hadoop system) 2) Pseudo-Distributed mode installation (Single node Hadoop system + HBase installation) 3) Fully Distributed mode installation (MultinodeHadoop environment + HBase installation) untuk kali ini akan simple yaitu memilih nomor 1 diatas: Hbase memerlukan Java Kali ini menggunakan Java  jdk1.8.0_241 1. Install Java Download Extract misalnya di /opt/ Kemudian membuat environment JAVA_HOME export JAVA_HOME=/opt/jdk1.8.0_241 tambahkan juga di ~/.bashrc atau /etc/profile agar tidak hilang saat system reboot Cukup simple seperti diatas, anda bisa menambahkan opsi command alternative, namun saat ini belum diperlakukan karena hbase akan cukup melihat lokasi environment JAVA_HOME aja. 2. Download Hbase mkdir /opt cd /opt wget https://archive.apache.org/dist/hbase/hbase-1.2.9/hbase-1.2.9-bin.tar.gz tar -zxvf https://archive.apache.org/dist/hbase/hbase-1.2.9/hbase-1

How to download files from website recursively

In this case I used wget with the following options: Example: wget --http-user=admin99 --http-password=p4ssw0rd! --recursive --no-parent http://yourserver.com/data/albums/2020/ or if you want to use FTP wget --ftp-user=admin99 --ftp-password=p4ssw0rd! --recursive --no-parent ftp://yourserver.com/data/albums/2020/ --http-user HTTP User for authentication --http-password HTTP Password for authentication --recursive Turn on recursive retrieving --no-parent Do not ever ascend to the parent directory when retrieving recursively. This is a useful option, since it guarantees that only the files below a certain hierarchy will be downloaded. Man page:  https://linux.die.net/man/1/wget

Tips konfigurasi IKEV2 VPN on Windows Server

1. Certificate untuk VPN sudah sesuai perhatikan Common name, EKU. 2. CA root sudah terinstall di client. 3. Pastikan protokol autentikasi sesuai, seperti EAP-MS-CHAP-V2 atau PEAP, dll. 4. NPS dengan group sesuai yang akan diautentikasi dengan Active Directory Dibawah tutorial untuk menggunakan PEAP namun bisa disesuai sendiri misal cukup menggunakan MSCHAP dan tetap menggunakan username and password namun memang untuk lebih aman baiknya pakai certificate client authentication dan protokol PEAP. https://michaelfirsov.wordpress.com/testing-ikev2-vpn-with-peap-authentication-in-windows-server-2016-part1/ https://michaelfirsov.wordpress.com/testing-ikev2-vpn-with-peap-authentication-in-windows-server-2016-part 2/ https://michaelfirsov.wordpress.com/testing-ikev2-vpn-with-peap-authentication-in-windows-server-2016-part3/

Referensi bagus untuk konfigurasi always on VPN windows server mode device tunnel

Always on VPN merupakan salah satu nama produk dari Microsoft Windows Server, sama seperti nama-nama produk dari Cisco vendor yang populer seperti FlexVPN, yang pada intinya menggunakan beberapa protokol open standard seperti Ikev2,  Oke berikut referensinya: Kebutuhan sertifikat:  https://directaccess.richardhicks.com/2018/04/30/always-on-vpn-certificate-requirements-for-ikev2/ Konfigurasi always on vpn:  https://directaccess.richardhicks.com/2017/12/11/always-on-vpn-windows-10-device-tunnel-step-by-step-configuration-using-powershell/ Untuk catatan: pastikan common name yang digunakan pas, untuk mode device tunnel akan menggunakan machine certificate authentication https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-device-tunnel-config#:~:text=Always%20On%20VPN%20connections%20include,logs%20on%20to%20the%20device.

Soal dan pembahasan LKSN ITNSA

Berikut adalah koleksi soal-soal ITNSA dan beberapa website yang memberikan pembahasan pada event perlombaaan LKS SMK Nasional bidang lomba IT Network Systems Administration. 2014 Palembang Di tahun ini ada 1 soal packet tracer. Di website dibawah ini diberikan juga cara pembahasannya. https://agussas.wordpress.com/2015/04/02/review-soal-lks-nasional-it-network-23-packet-tracer-challenge/ Semua soal:  https://www.dropbox.com/sh/l90zyke2ib5msgv/AAA3kPOFo-zEn4wPOW4a3iMwa?dl=0 dan https://drive.google.com/file/d/18lDhtMjAnPAhkfOJ6uFHsC5j6ycg3K4I/view Pembahasan juga dalam bentuk video di youtube:  https://www.youtube.com/watch?v=8QML594nQBU 2015 Banten Pembahasan:   https://www.youtube.com/watch?v=quDbpC2xSfQ Soal:  https://drive.google.com/file/d/1B09IYfdoGENBL3txSQodpptG1zdQxBWI/view 2016 Malang Soal:   https://drive.google.com/file/d/13-2bRtb5IXO9vxAhLfhghZbDXeUzD0FI/view Pembahasan:   https://www.youtube.com/watch?v=zmUSUZguH24 2017 Solo Soal dan pembahasan

Troubleshooting flowchart

As an IT man who considers himself as a problem solver, this flowchart diagram will be important to troubleshoot the problem. https://www.learncisco.net/courses/icomm-ccna-voice/cisco-uc-solution-maintenance/general-troubleshooting.html

WorldSkills Competition Skill53 Cloud Computing Preparation

Install AWS-CLI  https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html 1. Create a VPC aws ec2 create-vpc --cidr-block 172.16.0.0/16 2. Create three subnets Subnet LB 172.16.0.0/24 Subnet A 172.16.1.0/24 Subnet B 172.16.2.0/24 nasohi@DESKTOP-EQC1K12 : ~ $ aws ec2 create-subnet --vpc-id vpc-007283a0796292c04 --cidr-block 172.16.0.0/24 nasohi@DESKTOP-EQC1K12 : ~ $ aws ec2 create-subnet --vpc-id vpc-007283a0796292c04 --cidr-block 172.16.1.0/24 nasohi@DESKTOP-EQC1K12 : ~ $ aws ec2 create-subnet --vpc-id vpc-007283a0796292c04 --cidr-block 172.16.2.0/24                 3. Create an internet gateway nasohi@DESKTOP-EQC1K12 : ~ $ aws ec2 create-internet-gateway 4. Attach the Internet gateway to your VPC 5. Create a custom route table for your VPC 6. Create a route in the routing table that points all traffic (0.0.0.0/0) to the Internet gateway 7. Associate the routing table with a subnet in the VPC. Follow a complete guide from AWS   https

System troubleshooting investigation checklist

Iinvestigation: Check nodes total, be familiar with the environment (connection flow, device/software naming). Check resources via monitoring command and monitoring graph. Check network & port connection, check the firewall. Check variable, naming, username, hostname, domain name. Check Linux processes. Check installation guideline/steps, operation procedures. Check speed (network, disk i/o, CPU, memory). Check log messages. Check software dependency (library). Check software environment (Linux environment)/virtual environment. Check user, file & directory permission. Check, coordinate and communicate with colleagues, supervisor, and 3rd party. Check user and vendor. Check notes. Check history. Check and crosscheck with other information. Check browser inspection. Check limitation(DB connection, java max connection, kernel max connection, etc). Check and run the app in debug mode. Check and compare with another environment, another end client. Check