Monday, June 20, 2011

Cisco and Nortel Switch Storm Control

int F0/1
storm-control broadcast level 10.00 05.00
storm-control unicast level 89.00 67.00
int G0/1
storm-control broadcast level 10.00 05.00



/cfg/port 1/brate 26000
/cfg/port 2/brate 26000
/cfg/port 3/brate 26000
/cfg/port 4/brate 26000
/cfg/port 5/brate 26000
/cfg/port 6/brate 26000
/cfg/port 7/brate 26000
/cfg/port 8/brate 26000
/cfg/port 9/brate 26000
/cfg/port 10/brate 26000
/cfg/port 11/brate 26000
/cfg/port 12/brate 26000
/cfg/port 13/brate 26000
/cfg/port 14/brate 26000
/cfg/port 15/brate 26000
/cfg/port 16/brate 26000

Friday, June 3, 2011

Install Lotus Notes on Citrix or Roaming Profile Environment

The help document of IBM syntax is wrong, it is the correct syntax that I have tried many times for it

setup.exe /v"SETMULTIUSER=1 MULTIUSERBASEDIR=!APPDATA! MULTIUSERCOMMONDIR=C:\\ProgramData  CITRIX=1 "

Thursday, June 2, 2011

Copy Admin Profile to Default Profile by Sysprep in Windows 7

Unattend.xml

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="specialize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<CopyProfile>true</CopyProfile>
</component>
</settings>
<cpi:offlineImage cpi:source="wim://<computerName>/g$sources/install.wim#Windows 7 Professional" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>


sysprep /generalize /oobe /unattend:unattend.xml

Windows 7 Delete User Profile

Computer Properties-> Advanced system settings (on the left side) -> Settings for User Profiles (in the middle) -> Select the profile you want to delete and click the delete button.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Monday, May 30, 2011

Enable HTTP Compression

IIS


cscript adsutil.vbs set W3Svc/Filters/Compression/Parameters/HcDoDynamicCompression true
cscript adsutil.vbs set W3Svc/Filters/Compression/Parameters/HcDoStaticCompression true
cscript adsutil.vbs set W3Svc/Filters/Compression/GZip/HcDynamicCompressionLevel 7
cscript adsutil.vbs set W3Svc/Filters/Compression/GZip/HcScriptFileExtensions "asp" "dll" "exe" "aspx"
cscript adsutil.vbs set W3Svc/Filters/Compression/GZip/HcOnDemandCompLevel 7
cscript adsutil.vbs set W3Svc/Filters/Compression/GZip/HcFileExtensions "txt" "htm" "html" "js" "htc"
cscript adsutil.vbs set W3Svc/Filters/Compression/Deflate/HcDynamicCompressionLevel 7
cscript adsutil.vbs set W3Svc/Filters/Compression/Deflate/HcFileExtensions "txt" "htm" "html" "js" "htc"
cscript adsutil.vbs set W3Svc/Filters/Compression/Deflate/HcOnDemandCompLevel 7
cscript adsutil.vbs set W3Svc/Filters/Compression/Deflate/HcScriptFileExtensions "asp" "dll" "exe" "aspx"
cscript adsutil.vbs set W3Svc/Filters/Compression/Parameters/HcNoCompressionForHttp10 true
cscript adsutil.vbs set W3Svc/Filters/Compression/Parameters/HcNoCompressionForProxies true



Apache



# Insert filter
SetOutputFilter DEFLATE


# Netscape 4.x has some problems...
        BrowserMatch ^Mozilla/4 gzip-only-text/html


# Netscape 4.06-4.08 have some more problems
        BrowserMatch ^Mozilla/4\.0[678] no-gzip


# MSIE masquerades as Netscape, but it is fine
        BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
# Don't compress images
        SetEnvIfNoCase Request_URI \
        \.(?:gif|jpe?g|png)$ no-gzip dont-vary


# Make sure proxies don't deliver the wrong content
        Header append Vary User-Agent env=!dont-vary

Friday, May 20, 2011

iptables as WOL packet proxy

sudo iptables -t nat -A PREROUTING -p udp --dport 7 -j DNAT --to-destination <UNUSED_IP>
sudo ip neigh add <UNUSED_IP> lladdr ff:ff:ff:ff:ff:ff nud permanent dev eth0

Download
http://www.depicus.com/wake-on-lan/wake-on-lan-cmd.aspx

wolcmd <mac> <proxy_ip> 255.255.255.255 7

DogTag Certificate System on CentOS 5.5 x64

https://fedoraproject.org/wiki/QA:Testcase_Dogtag_Certificate_System_Configure

yum install pki-ca pki-ra pki-kra pki-ocsp pki-tks pki-tps.x86_64 pki-console pki-common pki-native-tools centos-ds

pkicreate -pki_instance_root=/var/lib        \
          -pki_instance_name=pki-ca          \
          -subsystem_type=ca                 \
          -agent_secure_port=9443            \
          -ee_secure_port=9444               \
          -ee_secure_client_auth_port=9446   \
          -admin_secure_port=9445            \
          -unsecure_port=9180                \
          -tomcat_server_port=9701           \
          -user=pkiuser                      \
          -group=pkiuser                     \
          -redirect conf=/etc/pki-ca         \
          -redirect logs=/var/log/pki-ca     \
          -verbose

setup-ds.pl

User Firefox or IE
Open the link shown after running the above script.
If it failed, change to use http with port 9180