IPSec default Azure Route based Acces VPN

IKE Phase 1 setup

Property Policy-based Route-based and Standard or High Performance VPN gateway
IKE Version IKEv1 IKEv2
Diffie-Hellman Group Group 2 (1024 bit) Group 2 (1024 bit)
Authentication Method Pre-Shared Key Pre-Shared Key
Encryption Algorithms AES256 AES128 3DES AES256 3DES
Hashing Algorithm SHA1(SHA128) SHA1(SHA128), SHA2(SHA256)
Phase 1 Security Association (SA) Lifetime (Time) 28,800 seconds 10,800 seconds

Continue reading IPSec default Azure Route based Acces VPN

Setup ADFS

This is a typical highly available setup into Office 365. Ideally this server will be installed as virtual servers on multiple Hyper-V hosts. Think about redundancy, not only in the virtual servers, but in the Hyper-V servers as well. Install one AD FS and one AD FS Proxy on one Hyper-V host and the other AD FS and AD FS Proxy on another Hyper-V host. This prevents loss of service from a hardware failure. Keep in mind that once you are using Single Sign-on with Office 365, you rely on your local Active Directory for authentication. Both video and printed steps have provided to ease your implementation of AD FS and SSO.

 

Continue reading Setup ADFS

Export / Import VMWare ESX & ESXi configuration.

 

  • Enable SSH on the host.
  • Sync the config with persistant storage:vim-cmd hostsvc/firmware/sync_config
  • Export the current config:vim-cmd hostsvc/firmware/backup_config
  • The server will provide a download link for the config file.
  • Reinstall the host.
  • Open the new ESX install en enable SSH.
  • Connect with WINSCP and place the exported config in the directory /tmp/ (change the name to: configBundle.tgz. Other file ames will not be accepted.
  • Connect with Putty and run the following command to restore the config:vim-cmd hostsvc/firmware/restore_config /tmp/configBundle.tgz
  • The server will reboot and the config is restored.

Update vmware esx(i) host online

  1. Enter ESXi Maintenance mode
  2. Download ESXi600-201507001.zip, upload to ESXi using Datastore Browser
  3. use PuTTY to SSH in and type this install command:

esxcli software vib install -d /vmfs/volumes/SSD3-256GB/patch-directory/ESXi600-201507001.zip
substituting the SSD3-256GB part with the full path to your .zip file. Tab/type-ahead is your friend!

  1. reboot
  2. verify the new build that’s seen as the system reboots. After boot, an alternative is to use the vSphere Web Client, select the host, select Summary, then select the Configuration pane.

Before the upgrade, using the March 12 initial release of vSphere 6.0 it shows:
VMware ESXi, 6.0.0, 2494585
After this patch and the reboot, it should show:
VMware ESXi, 6.0.0, 2809209

WordPress Appliance - Powered by TurnKey Linux