Friday, October 24, 2008

IPSO Installation on Nokia Firewall and CheckPoint Installation on Nokia Firewall

My First experience on Nokia Firewall :-). I wanted this to be documented, may useful for others too. Let me know if you have any feedback.

Installing IPSO on Nokia IP330 through FTP

Pre-Install

Connect IP330 with your machine through console cable on COM port.
Connect Nokia IP330 with your machine through cross over cable (or make both the machine in same network and provide concern gateway)

Create a Hyper Terminal

Provide a name for a connection and select Icon and click OK

Select COM Port on which the console cable is connected from Nokia IP330, (COM1 is in this example) and click OK

Click Restore Defaults and click OK

Now Power ON the Nokia IP330 device, you should able to see the basic booting messages, wait till you get the following options :

1. Boot Manager
2. IPSO

Press 1

On boot manager command, type "install" and provide the required information when asked.
Basically it asks, type of FTP Connection (Make sure, FTP is running on your machine and Firewall is off, and the gate way is the IP you are going to assign for your Nokia IP330. Make ftp home directory as where IPSO CD is loaded), IP Address of Nokia Device and FTP IP address, and Speed/Duplex settings, etc.

You will be prompted with three options

1. Install all packages without prompt
2. Install all packages with prompt
3. No packages

We select option 3 so that only IPSO will be installed.

Once installation is completed, reboot the machine and provide the required data when it prompts.

Now you should able to open GUI (Voyager) from your machine through browser with the IP assigned for Nokia IP330 and you can able to manage your Nokia IP330

INSTALLAING CHECKPOINT THROUGH VOYAGER)

1. Download IPSO Wrapper from CheckPoint site and store it into your ftp home folder
2. Open Voyager GUI through browser and login with admin id and password
3. Goto Manage installed packages - FTP and new packages - provide FTP server IP, user id and password and Finally click Apply
4. It will extract the wrapper. Now install the wrapper. You may watch the status in console by seeing online log file which is located in /var/log/ (tail -f /var/log/newpkg.log)
5. restart machine or relogin (su -).
6. Restart CheckPoint "cpstop" and "cpstart" from /opt/CPshared-50-04/bin
7. Now run cpconfig from console from /opt/CPshared-50-04/bin
8. Provide all required details when prompts. Usually, License details, Management stations IP, GUI Enable, and Admin users, etc....
9. Install Checkpoint Client (Smart Center) on Management station and connect to the Nokia IP330 Firewall.
10. Make necessary settings and rules according to your company policies.


Have lot of fun ......

Sikkandar dot linux at Gmail.Com

Wednesday, October 15, 2008

Recover Corrupted Partition From A Bad Superblock

1. Find a backup superblock using newfs command

Example

newfs -N /dev/sda2

OR

dumpe2fs /dev/sda2 | grep superblock

2. Now you have the superblock (if you are lucky). Recover the superblock.

fsck -b /dev/sda2

Example

fsck -b 32768 /dev/sda2

-----------------------------------------------------------------------------------------------------------------
Topics will be covered in this Blog are : Linux System Administrator - Memory Performance Tuning - File System - User Group - Linux / Unix Commands Processes - Virtual Swap Memory - Mail Server - Remote Access - Linux Permissions - Boot procedure system Logging - Network (xinetd) Configuration (ifconfig) - DNS - DHCP - Web Server - Kernel - Shell Script - Tuning Optimization High Availability Heart-BeatClustering-Backup and Recovery - Network Time Protocol - NIS - NFS - RPM Partition - /proc - Scheduling (crontab) - mount unmount - secured shell (ssh) - Remote Access - Virtual Network Computing (VNC) Default Ports - Services
-----------------------------------------------------------------------------------------------------------------