Saturday, March 12, 2022

Fortinet get your paired devices back in sync

<!-- Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=G-6ZMZ3S49YN"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-6ZMZ3S49YN'); </script>

It's a Kuhlua in your coffee first thing in the morning when you suddenly find your paired Fortinet devices out of sync and the FortigateSDN down and certain dynamic addresses just bling with red exclamation marks. Like what in the world?

Well for one thing, the secondary is still showing green. However, it's not an actual full fail because the Policies with hard-coded IP addresses so traffic is still going through, so it was hard to see right away.

1. Get the FortigateSDN Connector with Azure with the correct secret, check in the GUI.

Use the CLI to check if information about the SDN Connectors is there, though obviously it is.

show full | grep -f FortigateSDN

diag debug enable

diag debug app azd -1

I don't like using the config command just to show, but you can hit end right away

config sys sdn-connector

show full

end

(or edit each item as needed)

 

2. some CLI commands to check the health status.

get system ha status

diag debug console timestamp enable

diag debug application hatalk -1

diag debug application hasync -1

diag sys ha checksum cluster

 

Forcing a sync again maybe

di deb app hasync-1

di deb app hatalk -1

exec ha sync start 

(exec ha sync stop) why?

(dia deb disable) makes it stop writing to the screen

di deb reset

diag sys ha checksum recalculate


3. can look at probes

show sys probe-response

show full-config sys probe-response

show full-conf sys interface 


4. Comparing working flows

diag debug reset

(diag debug enable)

diag debug flow filter dport 8008

diag debug flow show function-name enable

diag debug flow trace start 100

 diag debug enable

Type that one last or you'll have too many things pop up all over the screen!

 

5. here's to get rid of an annoying startup banner

 set gui-firmware-upgrade-warning <enable | disable>



 



 

 



Tuesday, November 3, 2020

Cisco Enterprise Core Technologies

During the ongoing months of COVID lockdown, and being sent to work from home for most of the week, I decided to gear up on some Cisco training.

I recently completed the Cisco Certified Network Administrator bootcamp course! I'm not sure if I have the intention of actually going through with the certification exam, but why not. However I went straight to the next course on the schedule and it was Cisco Enterprise Core Technologies.  It was the perfect combo because it refreshes and expands the material that was already covered in CCNA and makes things more practical. Of course we had the best instructor ever for both courses, gotta love Patrice and Raj.

I will post some of the links to other great topics we uncovered and also some great screen shots. I call this one, hot tips for fast subnetting and finding your address space. Boom. 4 seconds and no binary required. Can you see it? I will explain this later.




Friday, February 3, 2017

Talk to Your Kids

An important discussion popped up during dinner time conversation; a tough talk that I was hoping to postpone to the future.  That dreadful talk about drugs! Bring it up sooner when they are still willing to listen!  We were able to get the point across but in a humorous and serious way.  We basically flat out said, hey kids don't do drugs. What?

I had already warned them in the past, don't take candies from strangers, and I had used the same example before about not accepting "things that look like candies" from anybody. My kids are still young but not too young to be aware of the dangers; warning them to be strong in the face of a decision point. We talked about how drugs can be addictive, make someone do crazy things, make someone waste all their money, mess up their face, lose their friends and family....

Fast forward to 2020, we've been watching the teen drama, Riverdale. Lots of great conversation starters for important topics - jingle jangle, bootlegging maple rum, off-board gaming, and safe sex.

On a quiet bus ride home this evening from the downtown core, I overheard a conversation between two young men. One guy told his friend that he would like to try Ecstasy, the friend just said, "Don't do it man, it's bad for you, you don't know who you're getting it from or if it's the real thing. If you want to have fun, just have a beer, but don't drink too much..." They chatted some more and the guy had to get off the bus.  I really couldn't help but commend the young friend for counselling his buddy to stay away from drugs. We chatted about things, including the conversation I had with my kids, and how important it is to talk about it, and even be that friend who is strong enough to say no, please don't do it.

Friday, October 14, 2016

Pre-flying Operational Knowledge for the UAV Airman

The first assignment for the third and final course in the Professional UAV Certificate course.
"Pre-flying Operational Knowledge for the UAV Pilot"
 
If you think back to the time you were first learning to ride a bike, the first and most important thing about learning to ride a bike, was in fact, actually riding a bike. The act of balancing while riding in a straight line, turning and for sure, stopping! As well another important thing would be staying safe on the roads, abiding by traffic rules and looking both ways before rushing across the street, and possibly wearing a helmet.
 
One could just read books about bikes, or even complete an online course on riding bikes! While it would be important to understand the physics and mechanics of the bicycle movement, and the understanding the gear chain assembly, and the construction materials of the frame, and knowing all about the top brands, and quoting the specs of the bike itself and other bells and whistles, the most important thing still is actually riding the bike, and operating correctly on a nature trail, or the neighborhood streets or even at the bicycle park with ramps and jumps for fun. Take it a step further, and consider all the requirements for gearing up to ride a bike on the mean city streets along with motor vehicles!
 
The same could be applied to flying UAV in terms of studying background theoretical knowledge vs the practical knowledge of actually flying the UAV in a recreational environment, while completing meaningful tasks and missions and operating in the designated airspaces alongside other UAV and manned airplanes.
 


Step 1. Attain the Basic Knowledge for HOW TO fly a Quadcopter

This is a great tutorial retrieved from an online blogger and drone enthusiast: http://myfirstdrone.com/how-to-fly-a-quadcopter/ (Links to an external site.) as it covers the basics of how to hover and complete bank turns, with lots of practical exercises and basic techniques.


Step 2. The Know Before You Fly website (knowbeforeyoufly.org (Links to an external site.)) really nails it down what you need to do for Recreational, Business, Educational, and Government use. The Department of Transportation’s Federal Aviation Administration has released the first operational rules (Links to an external site.) (PDF) for Small UAV, under 55 lbs.

While flying aircraft would require airworthiness standards or aircraft certification, the FAA is not requiring UAV pilots to do that. Instead, the remote pilot must perform a preflight visual an operational all systems check on the UAV, including the comms link with the control station and UAV.


3. Complete the UAV registration process


Recommend privacy guidelines


* Comply with local and state laws


* FAA Remote Pilot Certification with small UAS rating


* Part 107 Rule


* Applying for a waiver for the Part 107 rule




There is a great merit for the written exam portion of the UAV Pilot Certificate. I think there would be an even greater need for the practical exam and the operational test. ERAU-Worldwide sUAS Consumer Guide Operational Test Plan (Links to an external site.). The two will truly test basic knowledge and hands-on competency. The two go together. We all stay safe if we all play by the rules.


The test criteria tests indoor and outdoor flight operations, and safe observer zones. The assessment sheets also cover every crazy scenario possible, with a threat/ risk assessment on items like if rotor blades hit the floor, batteries exploding and bad landings.

Source: Beyond the Drone Zone


4. Pushing the Envelope

The Waiver process adds the needed flexibility for new users to do greater things with drones than the average user, for example something as necessary as night flying AND simultaneously controlling more than one UAV, try 100 to attain a Guiness Book of World Records feat !

Intel obtained FAA approval to become the first company to manually control multiple drones by one pilot under the Section 333 exemption, using a unique and coordinated IP networking scheme, to demonstrate the power of "the Internet of Things". [3]

Quote retrieved from Intel Newsroom https://newsroom.intel.com/sydney-drone-100-field/ (Links to an external site.)

[An even 100 drones took to the air over Tornesch, Germany, on the evening of Nov. 4, 2015, to create Drone 100. The elaborate marriage of music and light and flight was the result of months of effort by Intel Corp. engineers and Ars Electronica FutureLab digital artists. Their sky-filling artwork was accompanied by an orchestra on the ground and fully enabled by Intel-powered PCs. All their efforts were rewarded with a Guinness World Records citing for the “most unmanned aerial vehicles airborne simultaneously.” (Credit: Intel Corporation) ]




A civilian non-regulatory body can help bridge the gap with drone enthusiasts, expert users and the FAA. The Drone Advisory Council was founded in May 2016. The FAA Administrator Michael Huerta announced that Intel CEO Brian Krzanich will lead the Drone Advisory Council (Links to an external site.), who had this to say: “A positive regulatory environment can be the great enabler for drone innovation, safety and industry expansion. I am honored to assist decision makers in prioritizing and addressing issues facing the integration of Unmanned Aerial Systems (UAS) into national airspace,” said Brian Krzanich, Intel CEO. “As a technology partner in the UAS ecosystem, our work at Intel has given us relevant insight into issues faced by a wide range of stakeholders. The creation of the Drone Advisory Council is an excellent step forward for all in this industry.” [4]

[3]https://software.intel.com/en-us/articles/beyond-the-drone-zone
[4] https://newsroom.intel.com/editorials/peter-cleveland-intel-ceo-and-drone-enthusiast-to-lead-new-faa-drone-advisory-council/