Comments for ~/blog

Comment on The Amazing Unmanaged Trunk Mode Switch by ngara

ngara — Wed, 24 Jun 2009 18:34:32 +0000

Thank you for this post. I was trying to figure out whether an unmanaged switch would forward VLAN tags to a managed switch, because I need an Ethernet repeater that handles them. This article seemed to answer my question in the affirmative, so I’m going to go test it out. Keep up the posts!

Comment on Cisco Wireless LAN Controllers and DHCP Option 43 by maniek

maniek — Fri, 10 Apr 2009 12:39:48 +0000

Hello Daniel,
great document!!!
It’s work!
I configurated DHCP server with option 43 on Linux Server like Cisco recommends, but it doesn’t work
I tried find a reason and your explain help at all
Thanks and regards
maniek

Comment on Retrieving NetScreen/SSG config via scp by romain

romain — Fri, 28 Nov 2008 17:27:54 +0000

Hi Daniel,
Thanks for your explanations, that was perfect, I used the terminal and the web browser methods and both worked with me

Thank you again.

Have a nice weekend.

Romain

Comment on Retrieving NetScreen/SSG config via scp by daniel

daniel — Thu, 27 Nov 2008 22:58:24 +0000

Hi Romain,

It’s not possible to use ssh-copy-id, since the NetScreen only implements a subset of SSH features. Instead, you can load RSA/DSA keys via the ScreenOS CLI like the following (assuming the username is alice):

set ssh pka-dsa user-name alice key AAAAB3NzaC1kc3MAAABBAPrdVkvpSiLMT7NfZJm24pqMU2FFpO49+LFmbOipljEYelWTA4J5…

You can also get the NetScreen to retrieve the key via tftp, like this:

exec ssh tftp pka-dsa user-name alice file-name key_file_alice ip-addr 172.16.10.11

For SSHv1 replace “pka-dsa” with “pka-rsa”.

Finally, you can also add keys via the NetScreen web UI, under Configuration > Admin > Administrators. There you should see a “SSH-PKA” link in one of the columns of the table of administrators.

Comment on Retrieving NetScreen/SSG config via scp by romain

romain — Thu, 27 Nov 2008 13:03:18 +0000

Hi Daniel,
First of all, thanks for your post which help me to get the netscreen config file of my severals netscreen… But I miss something, I try to do this operation automaticaly with a bash script without entering the password but I don’t know how to set up it using RSA key and stuff.

I tried with these commands but without sucess:
ssh-keygen -t rsa
ssh-copy-id -i ~/.ssh/id2_rsa.pub user@10.1.1.x (user & IP of one my netscreen)

Can you help me on this point?

Thanks in advance,
Romain