Majestic Blog

Training

2011-03-10T07:10:00.000+02:00

We will use this site to communicate our training solutions as well
Feel free to join and post questions

IAS Server Setup with Cisco Wireless AP

2011-03-10T07:03:00.000+02:00

Got this from Blindhog.net.

All credit to them.

This document will give you the bare minimum to provide RADIUS authentication to your Cisco Devices using Microsoft Internet Authentication Service (IAS) RADIUS server. Using RADIUS on your Microsoft server to authenticate Cisco devices allows you to use the same usernames and passwords on your Windows servers and Cisco devices.

Steps

1) Install IAS

2) Configure IAS

3) Configure Cisco Device

4) Test

=========================================
1) Install IAS
=========================================

Click "Start > Control Panel > Add & Remove Programs"
Click "Add/Remove Windows Components"
Double-Click "Networking Services"
Select "Internet Authentication Service"
Click "Ok"

=========================================
2) Configure IAS
=========================================

Click "Start>Programs>Administrative Tools>Internet Authentication Service"

*** Create Remote access Policy *** (left Pane)

Select "Remote Access Policies"
(right pane) Delete all policies
(right pane) Right-Click and Select "New Remote Access Policy"
Click "Next" Select "Set up a custom policy" and give it a name
Click "Next"
Click "Add"
Select "Windows Groups"
Click "Add" Type "Domain Admins" (or any other group you would like to use)
Click "Ok"
Click "Next"
Select "Grant remote access permission"
Click "Next"
Click "Edit Profile"
Select the "Authentication" tab
Select "Unencrypted Authentication" only
Select the "Advanced" tab
Change the service-type from "framed" to "login"
Delete "Framed-Protocol" Click "Add"
Select "Vendor Specific" Click "Add"
Select "Cisco" from the drop-down box
Select "Yes. It conforms" Click "Configure Attribute"
Change Attribute Number to "1"
Set the Attribute Format to "String"
Type "shell:priv-lvl=15" in the Attribute Value field
Click "Ok"
Click "Ok"
Click "Close"

If you get an error, select yes or no …. it doesn’t matter.

Click "Next"
Click "Finish"

*** Add Radius Clients ***

(Left Pane) Click "RADIUS Clients"
(Right Pane) Right-Click and click "New Radius Client"
Give the client a friendly name and enter the ip address
Click "Next"
Enter a shared secret password
Click "Finish"

=========================================
3) Configure Cisco Device
=========================================

*** IOS Configuration ***
aaa new-model

radius-server host 192.168.10.100 key P@ssw0rd

ip radius source-interface f0/0

aaa authentication login default group radius

local line vty 0 4
login authentication default

*** PIX Configuration ***

username blindhog password Raz0rb4ck

aaa-server RADIUS (inside) host 192.168.10.100 P@ssw0rd
aaa-server LOCAL protocol local

aaa authentication ssh console RADIUS LOCAL
aaa authentication telnet console RADIUS LOCAL

Cisco Online Training

2011-02-05T07:38:00.000+02:00

We have added our updated online training for the latest Cisco CCNA and CCNP courses
Have a look at our website for the best pricing and high quality training.

Backing up your ubuntu server with rsync

2011-02-05T05:35:00.000+02:00

# I wanted to move data from one server to the other without a slep, i.e. new server added for the internal files

ssh rsync stuff
This was the final command
rsync -e ssh -rvpo root@192.168.0.2:/home/samba/groups/DIRTOMOVE /home

-e execute remote command
-r recursive
-v verbose
-p preserve permissions. this is now files
-o preserve owner

I wanted to copy the data to the new server and destroy the old server

Before you can do this you have to enable the servers to log into each other.
This is achieved by ssh and exchanging keys. Once keys has been exchanged, you dont need to login in again

--------------
This is the "from" server. the server where the data currently resides.
Main sever
mkdir ~/.ssh
if ssh is installed this directory already exists if you logged in remotely for that user.
If you have a new user, it is necassary to do that. I used root

-----------------
backupserver
ssh-keygen -t dsa
generate the key on backup server, have to enter twice

copy the key to the main server
cat ~/.ssh/id_dsa.pub | ssh ad@192.168.0.222 “cat – >> ~/.ssh/authorized_keys”
say yes etc to finish key copy

to test from the backup server ssh with the same user to the main server. it should not prompt you for a password
ssh root@192.168.0.222
Dangerous to use root, but cool if you do it once

exit out and back to backup server
------------------------

We will now perform a dry run to test our settings.
rsync -e ssh -avzn –delete-after root@192.168.0.222:/backup ~
If it is successful, i.e. no errors displayed, then proceed to the next step to run the sync manually…
rsync -e ssh -avz –delete-after root@192.168.0.222:/backup ~
You should see some output such as this… this output could be very long depending on how many backups exist on your server.

Welcome to Majestic Data's Blog

2010-11-23T09:20:00.000+02:00

Welcome to our company blog.
We trust this will be a fruitfull experience

Hopefully in future, Google will make it easier to add a blog from the apps console