Skip to main content

Posts

Install Softether VPN

What is Softether VPN? https://www.softether.org/ Dependency yum groupinstall "Development Tools" yum install wget Change directory location cd /opt/ Download wget http://www.softether-download.com/files/softether/v4.34-9745-rtm-2020.04.05-tree/Linux/SoftEther_VPN_Server/64bit_-_Intel_x64_or_AMD64/softether-vpnserver-v4.34-9745-rtm-2020.04.05-linux-x64-64bit.tar.gz Extract tar zxvf softether-vpnserver-v4.34-9745-rtm-2020.04.05-linux-x64-64bit.tar.gz the extract process will produce a directory named vpnserver and files in it. cd vpnserver Manual Start/Stop ./vpnserver stop ./vpnserver start Configure ./vpncmd Next steps check the manual: https://www.softether.org/4-docs/1-manual/9._Installing_SoftEther_VPN_Bridge/9.3_Install_on_Linux_and_Initial_Configurations

Install Hbase standalone

Ada beberapa opsi untuk membangun sebuah server database hbase yaitu: 1) Standalone mode installation (No dependency on Hadoop system) 2) Pseudo-Distributed mode installation (Single node Hadoop system + HBase installation) 3) Fully Distributed mode installation (MultinodeHadoop environment + HBase installation) untuk kali ini akan simple yaitu memilih nomor 1 diatas: Hbase memerlukan Java Kali ini menggunakan Java  jdk1.8.0_241 1. Install Java Download Extract misalnya di /opt/ Kemudian membuat environment JAVA_HOME export JAVA_HOME=/opt/jdk1.8.0_241 tambahkan juga di ~/.bashrc atau /etc/profile agar tidak hilang saat system reboot Cukup simple seperti diatas, anda bisa menambahkan opsi command alternative, namun saat ini belum diperlakukan karena hbase akan cukup melihat lokasi environment JAVA_HOME aja. 2. Download Hbase mkdir /opt cd /opt wget https://archive.apache.org/dist/hbase/hbase-1.2.9/hbase-1.2.9-bin.tar.gz tar -zxvf https://archive.apache.org/dist/hbase/hbase-1.2.9/hbase-1

How to download files from website recursively

In this case I used wget with the following options: Example: wget --http-user=admin99 --http-password=p4ssw0rd! --recursive --no-parent http://yourserver.com/data/albums/2020/ or if you want to use FTP wget --ftp-user=admin99 --ftp-password=p4ssw0rd! --recursive --no-parent ftp://yourserver.com/data/albums/2020/ --http-user HTTP User for authentication --http-password HTTP Password for authentication --recursive Turn on recursive retrieving --no-parent Do not ever ascend to the parent directory when retrieving recursively. This is a useful option, since it guarantees that only the files below a certain hierarchy will be downloaded. Man page:  https://linux.die.net/man/1/wget

Tips konfigurasi IKEV2 VPN on Windows Server

1. Certificate untuk VPN sudah sesuai perhatikan Common name, EKU. 2. CA root sudah terinstall di client. 3. Pastikan protokol autentikasi sesuai, seperti EAP-MS-CHAP-V2 atau PEAP, dll. 4. NPS dengan group sesuai yang akan diautentikasi dengan Active Directory Dibawah tutorial untuk menggunakan PEAP namun bisa disesuai sendiri misal cukup menggunakan MSCHAP dan tetap menggunakan username and password namun memang untuk lebih aman baiknya pakai certificate client authentication dan protokol PEAP. https://michaelfirsov.wordpress.com/testing-ikev2-vpn-with-peap-authentication-in-windows-server-2016-part1/ https://michaelfirsov.wordpress.com/testing-ikev2-vpn-with-peap-authentication-in-windows-server-2016-part 2/ https://michaelfirsov.wordpress.com/testing-ikev2-vpn-with-peap-authentication-in-windows-server-2016-part3/

Referensi bagus untuk konfigurasi always on VPN windows server mode device tunnel

Always on VPN merupakan salah satu nama produk dari Microsoft Windows Server, sama seperti nama-nama produk dari Cisco vendor yang populer seperti FlexVPN, yang pada intinya menggunakan beberapa protokol open standard seperti Ikev2,  Oke berikut referensinya: Kebutuhan sertifikat:  https://directaccess.richardhicks.com/2018/04/30/always-on-vpn-certificate-requirements-for-ikev2/ Konfigurasi always on vpn:  https://directaccess.richardhicks.com/2017/12/11/always-on-vpn-windows-10-device-tunnel-step-by-step-configuration-using-powershell/ Untuk catatan: pastikan common name yang digunakan pas, untuk mode device tunnel akan menggunakan machine certificate authentication https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-device-tunnel-config#:~:text=Always%20On%20VPN%20connections%20include,logs%20on%20to%20the%20device.