BGP Over IPsec Tunnel: Palo Alto Configuration Guide – Part2

You got a palo alto firewall at the edge of your branch network and the headquarters, and you are planning to run IPsec with a dynamic routing protocol on top of it. But you are confused with all the IPsec and BGP configurations, even if you get everything up and running how do you manage …

You have been working with KVM and heard about the Proxmox hypervisor which is a greate alternative to KVM. Mainly because of the nice web GUI it provides, similar to the one found in vmware esxi. At the same time, in KVM, you are missing out on the GUI experience that you get with vmware …

Proxmox is one of my favourite hypervisors out there, though it does not support all the features that ESXi provides, it is still a great alternative to ESXi and moreover it is open source and free for anyone to use it. Only when you need to get a support you need to pay, other than …

The other day I was trying to install Proxmox in VMware workstation, which requires me to do nested virtualisation, and all of the sudden at the start of the installation, I got an error ‘Virtualized Intel VT-x/EPT is not supported on this platform. Continue without virtualized Intel VT-x/EPT?’ If I click on Yes, I would …

Palo Alto Networks is a leading provider of next-generation firewalls, and in my previous blog article, I have covered several topics related to the Palo Alto Firewall. In this article, I will provide a step-by-step guide on how to set up a basic DMZ configuration in the Palo Alto Firewall. By the end of this …

The pfSense firewall is a great open-source product that you can set up in your home network. If you would like to use it in an enterprise network, you can use a different version of the same product called pfSense Plus. Both products are identical, but the enterprise derivative receives the latest feature upgrades and …

The Sophos firewall is a powerful next-generation firewall commonly used by enterprise networks. As a network administrator or engineer, you may want to set up a test environment where you can make changes without impacting the production network. The best and cost-effective way to do this is by setting up a virtual lab. In this …

Two important aspects of networking are documentation and consistency in following standards.  Once you have both in place, it will help you in the long run when it comes to managing, troubleshooting, configuring, planning, and expanding your network. There are many network documentation tools available, but one popular open-source software among network engineers is NetBox. …

You followed the steps here to install windows 11 on your KVM environment. Now, you want to access the virtual machine for your day-to-day use. how do you go about and access the windows 11 guest virtual machine from your host operating system? There are two ways you can connect to the guest windows machine. …

There are several firewall vendors, and Sophos is one of them, when it comes to network security. Many Enterprise customers utilize Sophos Firewall at the network’s edge, and it can also be used in a home lab. But not many of us have the resources to purchase expensive equipment and install it in our home …

One of the annoying aspects of traveling overseas is that you cannot access specific local network services from your country when you arrive in a new place. For instance, Some network services you have utilized in your home country might no longer function in the country you traveled to since those services might only be …

This is the continuation of the previous article, where we have set up two site-to-site tunnels from AWS to pfSense, as shown below. First being the primary and second being standby. Basically, we have built the transport over which you can now communicate with each side. However, to dynamically send and receive route advertisements and …

When you deploy the site-to-site VPN between AWS and pfSense using a static route, a phase1 will come up. However, the phase2 will remains down. As a result, the devices on both ends cannot communicate. Even if you try to connect phase 2 from Status->IPsec in pfsense manually, you will see the connection is not …

I’ve had pfSense running on my home network for a long time now. You might use it as your home network’s firewall because it is an excellent open-source firewall. However, you should utilize hardware from Netgate if you wish to integrate pfSense to an enterprise network. I have a PPPoE configured in my network to connect …

I had been putting off getting my AWS certification, specifically the AWS Solution Architect Associate test, for a long time. I eventually passed the exam using a step-by-step method and earned my first cloud credential. I wouldn’t say it was simple, but it wasn’t very challenging either. So, in this blog post, I’ll explain the …

The Ubuntu version 22.04 LTS iso image for the server recently came out for the public, and I decided to spin it up in the VirtualBox hypervisor. So in this blog article, we will see how we can install Ubuntu 22.04 LTS server in VirtualBox step by step. After the installation, we will install the …

When you install the windows server 2022, the next thing you would want to do is to manage the operating system remotely. For that, we could use something called Remote desktop in Windows. RDP provides remote desktop access to the windows machine over port 3389. This blog post will configure RDP access on windows server …

The best way to test the latest operating system is by virtualizing them in the lab environment before moving it to production. You can test things out and understand what works for you and what doesn’t. In this blog, we will virtualize windows server 2022 on a VirtualBox hypervisor. Many users choose VirtualBox hypervisor because …

We have covered plenty of blog articles related to the Ubuntu server in this blog. When the Ubuntu server 22.04 came out, I couldn’t wait to get my hand on, so I spun up the Ubuntu server 22.04 in the Proxmox VE server. So in this blog post, we will install Ubuntu server 22.04 on …

Ubuntu Server is one of the popular Linux servers available from Canonical. After Redhat killed centos, its popularity increased even more. People are starting to move from Centos to the Ubuntu server. We have covered extensive blog articles related to Ubuntu servers in the past. And in this blog, we will take a look at …

The windows server 2022 is the latest version of the server operating system from Microsoft. It provides good performance and a more cloud-centric design. Windows server is usually installed as a virtual machine, and it can be virtualized in almost all the hypervisors out there. Can windows 2022 be installed on Proxmox? Windows 2022 is …

The windows server 2019 is the popular version of the Windows server operating system used by many enterprise users worldwide, not only in the on-premises network but also in the cloud. Our previous blog covered how you can install Proxmox VE on a server using a USB drive. We even spun up multiple firewalls virtual …

We use an IPsec site-to-site VPN tunnel to connect two sites. It provides security and is a lot cheaper than other means of connecting the WAN network. By default, most of the network will have internet access, and the devices they have at the edge of the network will have IPsec capability. That’s the only …

Asa is one of the popular firewall offerings from cisco, used by many on-prem enterprise networks. Many users are now using the ASAv on the AWS cloud; it sits at the edge of the cloud network protecting your AWS resources. You can also take advantage of this setup and configure end-user VPNs such as Any …

There are multiple ways to connect your inter offices using WAN. You can get MPLS, a Dedicated link. Those are the expensive ones, and there is SD-WAN. However, the cheapest and most popular method of connecting two different branch networks is using an IPsec site to site a VPN tunnel. If you have ASA on …

The Paloalto firewall is one of the popular next-generation firewalls in the market. I like Palolalto because it is very easy to use, especially for those who come from the Cisco world. The firewall offering from Cisco is the ASA – Adaptive security appliance. Though it provides security in your infrastructure, it lacks the features …

When you want to connect two remote sites, the easiest and cheapest way is to deploy an IPsec tunnel. The only requirement to connect both offices is that you need a device that supports IPsec capability and an internet connection. That’s it, and you can now build an IPsec tunnel successfully between two sites. ASA …

FortiGate is one of the popular commercial firewalls used by enterprise networks. It is even available for home usage with a smaller hardware version. Sometimes, you might have a virtual license for the FortiGate firewall and wonder how you can virtualize the FortiGate firewall in your network. For the learning purpose, you can install the …

The Proxmox VE is one of the popular open-source hypervisors. You can see that the enterprise setup also uses the Proxmox server. So if you are new to Proxmox, what is the best way to learn about the hypervisor quickly? You can turn an old laptop or PC into Proxmox by installing the Proxmox server …

I have been working with KVM for a long time now. I stuck to it because it is open-source and free for anyone to use it. I recently moved some of my KVM virtual machines to my newly built Proxmox server. As you may know, Proxmox is a virtualization hypervisor based on KVM itself, and …