Thursday, August 1, 2013

Setup Management IP Address BlueCoat PacketShaper 1700 using CLI

Picture below is front panel BlueCoat PacketShaper 1700

To setup IP address BlueCoat PacketShaper 1700 using CLI, first we must connect to console.

You could connect it using USB to serial cable and console cable like the picture below.

Then use your favorite application to connect to serial port / console.
I am using SecureCRT.

To configure IP address, type:
# setup ipaddress <addr> <netmask>
# setup ipaddress

After you setup ip address you could log in to web configuration.
on your browser.

Monday, July 22, 2013

NAT CISCO Router Configuration

This is an example to advertise your internal WEB Server and DNS Server using CISCO Router.

Example Network Diagram

The configuration are like the picture above.
You have one CISCO router which only have one ip address public and you have WEB server and DNS server on your DMZ network

Step 1
Make sure your CISCO router already have access to the Internet.
Configure ip address public:
interface FastEthernet0/0
 ip address
Configure default gateway to your ISP
ip route 

Step 2
Make sure your WEB server and DNS server could have access to your router.
Configure ip addess private for DMZ network:
interface FastEthernet0/1
 ip address

Step 3
Use NAT so your WEB server and DNS server could have access to the Internet.
Configure NAT overload:
ip access-list standard NAT-MASQUERADE

ip nat inside source list NAT-MASQUERADE interface FastEthernet0/0 overload

interface FastEthernet0/0
 ip nat outside

interface FastEthernet0/1
 ip nat inside

Step 4
Advertise your WEB server and DNS server to the Internet using NAT
NAT configuration:
ip nat inside source static tcp 80 80 
ip nat inside source static tcp 443 443 
ip nat inside source static tcp 53 53 
ip nat inside source static udp 53 53 


Below is the complete configuration on CISCO router:
hostname router
interface FastEthernet0/0
 ip address
 ip nat outside
interface FastEthernet0/1
 ip address
 ip nat inside
ip nat inside source list NAT-MASQUERADE interface FastEthernet0/0 overload
ip nat inside source static tcp 80 80 
ip nat inside source static tcp 443 443 
ip nat inside source static tcp 53 53 
ip nat inside source static udp 53 53 
ip route 
ip access-list standard NAT-MASQUERADE
line con 0
line vty 0 4

Friday, June 7, 2013

Find files on CentOS using locate

OS: CentOS 6.3

If you want to search a file on CentOS you could use locate and updatedb command.
First install mlocate
# yum install mlocate
Now you can find files on your system.
# locate <file_name_you_want_to_find>
To update database for mlocate use
# updatedb

Wednesday, June 5, 2013

Enable SNMP on VMware ESXi 5.0

To enable SNMP on your VMware ESXi 5.0, first you should install VMware vSphere CLI.

VMware vSphere CLI

Set Up Community --server <IP or host name> --username <username> --password <password> -c <community>
Check status: --server <IP or host name> --username <username> --password <password> -s
Enable SNMP: --server <IP or host name> --username <username> --password <password> -E
Disable SNMP: --server <IP or host name> --username <username> --password <password> -D

Picture below is an example of snmp check status:

VMware vSphere CLI

Tuesday, March 5, 2013

The Best IPv4 Calculator

One of my favorite IPv4 calculator on the Internet.
You can find it here.
IPv4 Calculator

Iptables Example

This is an example on how to allow some traffic input to CentOS server.

At first you already install apache, mod_ssl and mysql, but you still cannot access apache or mysql.
There is a possibility that you have not set up your firewall.

Open iptables configuration using your favorite editor.
Add 3 rule input to allow traffic for http, https and mysql.
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT

Don't forget to restart iptables
#service iptables restart
You could check your current iptables configuration with:
#iptables -L


Sometime you confuse what to do to make a better performance of your MySQL databases.

With MySQLTuner you can get a brief suggestion on how to tune in MySQL server.

MySQLTuner is a script written in Perl that allows you to review a MySQL installation quickly and make adjustments to increase performance and stability.

You can download the script at

Here are some screenshot MySQLTuner result.

MySQL Tuner

MySQL Tuner

Monday, March 4, 2013

Advanced Mikrotik Training - Routing (MTCRE)

Training: Advanced Mikrotik Training - Wireless (MTCRE)
Location: Yogyakarta, Indonesia
Date: 15-18 November 2011 (4 days)
Organizer: CV Citraweb Nusa Infomedia (

Training Outline:
  • Static Route, Policy Route, Route Mark
  • OSPF
  • BGP
  • Basic MPLS
My First MikroTik Training outside Jakarta. The training was held at Jogja Plaza Hotel at Jalan Affandi (Gejayan), Yogyakarta.

Lokasi Training MTCRE

Photo taken before exam.

Peserta Training MTCRE

Photo taken during exam.

Peserta Training MTCRE

MTCRE Certificate

Setting up Internet Connection Sharing at Windows 8

The situation are:
1. You have Windows 8 and installed with VMware workstation.
2. You already have virtual server installed with CentOS 6.3 and already assign IP address

Now we want to set up an internet connection sharing on Windows 8 so virtual server could get access to the internet.

Network diagram

First check virtual server configuration which network adapter is used.
In this picture we can see it is using VMnet1.

Make sure you already configure the network at CentOS server.

Now go to Windows 8, to configure Internet Connection Sharing.

Open "Network Connections"
Control Panel\Network and Internet\Network Connections
Right click on "Ethernet" > "Properties"

Click "Sharing".
Check "Allow other network users to connect through this computer's Internet connection"
Home networking connection "VMware Network Adapter VMnet1"

After you click "OK", there will be information windows that your IP address will be change to Click "Yes".

Now back to "Network Connections"
Right click "VMware Network Adapter VMnet1" > Properties.
Choose Internet Protocol Version 4 (TCP/IPv4) and click Properties

Edit IP address to, just like the picture bellow.
Click "OK"

Now your Windows 8 already configure as a Gateway, and server CentOS could get internet access.

Check it with ping at server CentOS.

Don't forget to set up your DNS :-)

Friday, March 1, 2013

Advanced Mikrotik Training - Wireless (MTCWE)

Training: Advanced Mikrotik Training - Wireless (MTCWE)
Location: Jakarta, Indonesia
Date: 24-27 May 2011 (4 days)
Organizer: CV Citraweb Nusa Infomedia (

Training Outline:
  • Wireless Security
    • Access List and Connect List
    • Management Frame Protection
    • Radius Mac Authentication
    • Encryption
  • Wireless WDS and Mesh
  • Wireless Transparent Bridge
    • WDS
    • VPLS/MPLS transparent bridging
  • Wireless NStream Protocol
  • Wireless 802.11n

Good training, to bad there is only 6 participant and there is no outside lab. I think it would be great if the training was held with bootcamp style, camping and do outdoor wireless installation.

Test bandwidth using 802.11n

Photo during coffee break.

Photo at our classroom, it's very cramp >.<

Print Server Mini-300PU Configuration and Printer Installation on Windows 8

First prepare all your hardware is already in place and already connected.

In this picture we can see that my PC and Mini-300PU are connected to switch via UTP cable, and all the printers already connected to Mini-300PU via USB cable. Don't forget to turn on all the device. :-)

1. Assign IP address on Mini-300PU
Make sure you already assign IP address on your print server Mini-300PU.
You can configure static or dynamic IP address using PSAdmin application, this apps usually comes with the CD when you buy Mini-300PU, or you can download it here.

Open PSAdmin check connected printer to Mini-300PU and configure IP address

At the above picture we can see that I already assign dynamic IP address and information of  connected printer (Canon MP280 connected to Port2 and EPSON L200 connected to Port3)

2. Install Printer
For this time I will install printer EPSON L200 on my PC which is attached to Port3 (USB 2) on Mini-300PU.

Go to "Devices and Printers"
Control Panel\Hardware and Sound\Devices and Printers

Add Printer
Stop search

Add a local printer or network printer with manual settings

Create a new port
Type of port: Standard TCP/IP Port

Hostname or IP address:
Port name: Mini300PU

Device Type: Custom
Click Settings...

Protocol: LPR
Queue Name: lp3
Click "OK"

Choose printer driver, EPSON L200 Series

Use the driver that is currently installed (recommended)

Type Printer name

Do not share this printer


Check again at "Devices and Printers"
Make sure "EpsonL200 on Mini300" icon already in there.

And now you can use your printer.

Thursday, February 28, 2013

VPN PPTP Client Configuration on Windows 7

Go to "Network and Sharing Center"

Start > Control Panel > Network and Internet > Network and Sharing Center

Click "Set up a new connection or network"

Click "Connect to a workplace" > "Next"

Click "No, create a new connection" > "Next"

Click "Use my Internet connection (VPN)"

Fill the field
Internet address: IP address or domain name of VPN server
Destination name: example: VPN Connection
Click "Don't connect now; just set it up so I can connect later"

Input "User name" and "Password".
Click "Create"

Do not connect now. Click "Close"

Back to "Network and Sharing Center"

Start > Control Panel > Network and Internet > Network and Sharing Center

Clik "Change adapter settings"

Right click at new VPN Connection icon you just made. Click "Properties"
Click "Security" Tab
Choose "Point to Point Tunneling Protocol (PPTP)" at drop down menu Type of VPN
Click "OK"

If you already done all the configuration above, you can try to connect to VPN PPTP. Click icon Network and click "Connect" at taskbar.

Congratulation you already connect to VPN PPTP.