Brian Tobin's Website

Cisco Router to Checkpoint FW-1 — IPSEC VPN Headaches with Supernetting

Brian — Wed, 01 Feb 2012 17:27:57 +0000

I setup quite a few IPSEC site-to-site VPNs. Hundreds maybe. Most go fine. 10 minutes on the line, bing, bam boom, we have a working IPSEC tunnel. My company uses Cisco router/ASRs for our termination points for IPSEC VPNs. We also have Checkpoint firewalls doing the filtering. Why the separation, cause we love a good [...]

Porsche Boxster Alternator Replacement

Brian — Tue, 11 Oct 2011 14:01:48 +0000

БогородицаThe alternator died on the Boxster so I decided to tackle this project myself. I have never done a major repair to any of my cars, but figured I’d give the alternator replacement a try. All of the articles on the internet and in my tech manual made it look pretty easy, so what the [...]

PTY allocation request failed

Brian — Fri, 29 Jul 2011 13:47:22 +0000

иконографияикониMy hosting provider, Razor Servers, recently moved hosted centers from the 401 North Broad St location in Philadelphia to a building right next door. As part of my VM move to the new location, I was no longer able to SSH into the device. I got this strange error about PTY allocation request failed. In [...]

How to configure a Checkpoint UTM device without using the GUI

Brian — Fri, 18 Mar 2011 14:39:30 +0000

There is an annoying aspect of configuring a Checkpoint UTM appliance, you are forced to enter the web based GUI to do some basic config before using the command line interface (CLI) to complete the install. If you try to use the CLI before using the GUI, you receive the following message: Welcome to VPN-1 [...]

How to configure DNS NAT or DNS Doctoring on Checkpoint FW-1

Brian — Mon, 13 Dec 2010 15:04:30 +0000

In some topologies, it is required to DNS reply traffic from a DNS server so that the querying host will think that a certain DNS entry (example smtp.company.com) is resolvable to a different IP address than the one written in the database of the DNS server. Procedure: The feature has a global on/off switch, in [...]