Knowledge is the Power at Work

 To check the cisco device MAC address and IP address C2960#sh mac address-table interface gi1/0/3  and C2960#sh mac address-table address 2894.0f64.0340  Mac Address Table ------------------------------------------- Vlan    Mac Address       Type        Ports ----    -----------       --------    -----  413    2894.0f64.0340    DYNAMIC     Gi1/0/3 ========================================================= C2960#sh ip arp 2894.0f64.0340 Protocol  Address          Age (min)  Hardware Addr   Type   Interface Internet  191.65.230.30          154   2894.0f64.0340  ARPA   Vlan413

 Downgrade from 7.0.5 to 7.0.4    Requriement: Backup must have  Fortigate# diag sys flash list  In here: Image 304 is Version 7.0.7 and Image 301 is Version 7.0.4 FortiGate# exec set-next-reboot primary It will change to "Active-Yes". Downgrade Firmware Scenario-2 Version 6.4.7 Version 7.0.5 Version 7.2.0 Requirement: Backup config on 6.4.7 needed. 1)  Pre-download the firmware version from the support portal 2)  Directly downgrade it from the GUI firmware version 6.4.7. 3)  After downgrade and completely wipe off the config using 4)  FortiGate # exec factoryreset>Yes.  5) Restore the config Backup on version 6.4.7

To change the email alert interval from 15 mins to 60mins in FortiGate Firewall, 1. View the current setting: FW100F# config alertemail setting FW100F(setting) # show config alertemail setting     set username "myo@photostrikers.com"     set mailto1 "myo@photostrikers.com"     set email-interval 15     set HA-logs enable     set antivirus-logs enable     set violation-traffic-logs enable     set FDS-license-expiring-warning enable     set FDS-license-expiring-days 7 end 2. Edit the email-interval setting FW100F#config alertemail setting FW100F(setting)#set email-interval 60 FW100F(setting)#end

 Try to get the output the following commands in both Primary and Secondary Firewalls. 1. Connect the Putty or CLI      - get system ha status     - get system status     - diag system ha history read     - diag debug crashlog read | grep 2022     - config system ha     - show full 2. Running Debug     - diag debug reset     - diag debug application hasync -1     - diag debug application hatalk -1     - diag debug console timestamp enable     - diag debug enable Note: Keep run the debug to produce the output for 20-30mins. 3. To stop debug:     - diag debug disable https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-HA-synchronization-issue-cluster-out-of-sync/ta-p/193422

  1) Upgrade Aruba AP Firmware from 6.5.4.3 to 8.7.1.3 with cluster mode Download the firmware from Aruba Support Portal https://asp.arubanetworks.com Login with username and password Find the correct the AP models and Serial Number    Check the warranty status in HPE page     Login to the support portal to download the firmware     Software and Documents>Aruba Access Points>Product Series(IAP325)>Major Version 8.7>Minor Version 8.7.1.3. Download Ursa_8.7.1.3 Set up TFTP server from your laptop to AP Controller. Make sure both can able to ping each other. Put the downloaded files into the TFTP servers. Under Maintenance>Firmware(Eg for Hercules IAM325 and IAM305)   tftp://192.168.1.222/ArubaInstant_Hercules_8.7.1.3_79817   tftp://192.168.1.222/ArubaInstant_Ursa_8.7.1.3_79817 Enable reboot all the APs after upgrade Click Upgrade now. 2) To change back from standalone to cluster or cluster to standalon...

 FortiGate Firewall Admin reset password: 1. Login to the console of the firewall.  2. Reboot the firewall and wait for till you get the login screen. 3. While rebooting the firewall, you need to write  the username: "maintainer" and Password: " bcpb plus serial number into the notepad. Then copy both username and password. Example: I have serial number 1234MMMM, so the password will be bcpb1234MMM  4. After reboot, you will see the login screen then paste it all within just a second. #config system admin #edit admin #set password xxxxxxx 5. Note that you will get only 14 seconds or less to do it.

FortiGate Useful Command Line: To check FortiGate Version: get system status To login to secondary firewall: Login to the Primary firewall CLI: type the following execute ha manage (follow the number 0 or 1 ) username FW01#execute ha manage 0 admin 0 is the ( firewall unit ID )- Secondary Firewall admin is the username. To check the checksum for HA FW01#diagnose sys ha checksum show