Install Unifi Controller on VPS

Misc
I have realized why they are charging at least 20$/month for a hosted Unifi controller solution - one of the reasons for this price is that it actually took me a few days to set it up right. I bought a VPS (OVH.com) for about 5$/month and installed Unifi controller on which I have added (migrated) all my costumers Unifi APs. [wp_ad_camp_1] 1. My choosen OS is Ubuntu 16.04 Server (64 bits, Linux Kernel 4.4.0.45.48) 2. Add the Unifi repo so you can install Unifi with apt-get command I like to use NANO editor. nano /etc/apt/sources.list.d/100-ubnt.list and add "deb http://www.ubnt.com/downloads/unifi/debian stable ubiquiti" so you can install and update the controller. 3. Since there is a known kernel problem with the jsvc and that stopped Unifi controller from running normally so I…
Read More

Microsoft Exchange Connectivity test check

Microsoft
Wanted to share a great tool from Microsoft (I sound like it's a sponsored tutorial) which has helped me a great deal in troubleshooting costumers migration from GSuite to Exchange Online. To be honest, my problem was with the Outlook Autodiscover feature and this tool put me in the right direction. Btw, Autodiscover service is to establish initial connections to Exchange user mailboxes. Tool is called Microsoft Remote Connectivity Analyzer and you can visit it here -> https://testconnectivity.microsoft.com/ This tool is not just for Microsoft Exchange tests, it also includes troubleshooting for Lync, Office365 etc. Be sure to have all the right usernames and passwords.
Read More

Cisco ASA 5505 slow download or slow upload

Cisco
There was a strange problem at my costumers site where out of the sudden the Internet speeds were inconsistent. Let me clarify, the main Internet link was 50/50Mbps (provider optics) and speed in the network was sometimes 2/50Mbps and sometimes 45/8Mbps.       [wp_ad_camp_1] After checking every network device in the local network I have decided to check the ASA interfaces speed settings. Since the provider had a Cisco as their active terminal equipment and the costumer had also a Cisco ASA everything should be fine, right? I have manually chancged the uplink interface (link between provider Cisco and my ASA). In my case it was the speed 100Mbps   For some reason they would not negotiate when interface speed was set to auto.          …
Read More

Migrate G Suite email to Microsoft Exchange Online

Microsoft
Although the procedure is looking a bit of complex, it really isn't if you follow the official steps provided by Microsoft BUT there is always a BUT. https://support.office.com/en-us/article/Migrate-G-Suite-mailboxes-to-Office-365-665dc56c-581c-4e35-8028-6bc1e8497016 First, I used this guide on migrating and I must warn you to be meticulous about it because you have to read and do the steps very carefully. [wp_ad_camp_1]   ***The only thing that was missing was to allow less secure apps to get connected to GSuite and I got to that information via Google (not official documentation).*** Additional, the process of syncing could take even a few hours since the official Google bandwith limit for IMAP is 2500MB per day. It is a cool feeling when you succeed in this kind of data migration!
Read More

MikroTik: HotSpot https (not) working

MikroTik
Maybe you are familiar with the problem that sometimes HotSpot won't show the login page or if it shows it, you can't access any website that start with "https". There are solutions to the problem that involve buying a signed certificate (example: commodo or rapid SSL) and implement it into your HotSpot or to create a self-signed certificate from your MikroTik router. If you use a self-signed certificate, every browser will warn you that you are accessing a website with unknown and insecure certificate. That message could potentially scatteer of all your HotSpot users. There is a cool workoaround that my MikroTik trainer has taught me. Actually you need to allow preauthenticed HotSpot users to access Google via https and after that users will be redirested to your HotSpot Login…
Read More

How to access MikroTik router via Dynamic DNS?

MikroTik
It is always nice to administer your equipment remotely and in this particular blog post you will know how to do it:) This is only applicable to a situation where your MikroTik router is behind a commercial ISP (A)DSL router.  Step 1 Most ISP routers have this option - access and write your DynDns credentials so the router knows how to work with your DnyDns account but first create your DynDns (or other similar service) account with appropriate hostname.  Step 2 [wp_ad_camp_1] Forward the port that is connected to MikroTik to port 8081 (you can choose whatever port number you like).  Step 3 Now comes the MikroTik configuration. Using Winbox go to IP->Services->www and change that port 80 to 8081.                    …
Read More

ESET NOD32 Antivirus installation ended prematurely SOLUTION!

Security
Well, this is an error that looks really bad because it doesn't give you a specific explanation what went wrong. You can log it but that is for another blog post:) As people from ESET guided me, the solution (in 95% cases) is the ESETNecursCleaner tool because trojan is the problem - it is called Win32/TrojanDownloader.Necurs.A which tries to download other malware from the Internet... Check more detail HERE. The removal is pretty straightforward. [wp_ad_camp_1] 1. Download the cleaner tool from ESET - http://download.eset.com/special/ESETNecursCleaner.exe 2. Run it (Agree to any End User etc.) 3. If OK close it but if NOT than you will be asked do you want to remove it and after removal yo u will have to restart your computer.              …
Read More

Convenient Cisco Switchport Host Command

Cisco
Well, this is a short one but convenient as the title says:) This command was release by Cisco in the IOS version of 12.1(11)AX. It is very practical and a good to know command. This command basically optimizes a Layer 2 port for a host connection.   [wp_ad_camp_1] It does three things: 1) Configures a switchport interface to access mode (host mode) 2) Disables Etherchannel capabilities 3) Enables Portfast Command example: Switch(config)# interface fa0/1 (also available in interfance range command) Switch(config-if-range)# switchport host All of the said capabilities will be up and running.   Hope it helps! [wp_ad_camp_1]
Read More

Debug ICMP for Network Troubleshoot

Cisco
There is a nice little trick or tool in Cisco that we can use when we troubleshoot network problems. It is very simple and useful:) We create an Access list that filters only ICMP traffic and we turn on the debugging for that traffic.   [wp_ad_camp_1] Just follow this procedure below: R1#conf t R1(config)#access-list 101 permit icmp any any R1(config)#do debug ip packet 101 detail After creating an ACL and turning the debugging on we get the message "IP packet debugging is on (detailed) for access list 101". All we have to do now is just PING the other side that we suspect is causing us trouble.                   As you can see that we do not have Layer 2 reachability but we…
Read More
Visit Us On LinkedinVisit Us On Google PlusCheck Our Feed