Unknown Geek http://www.jd7.org Official Blog of an Unknown Geek ~ Mon, 06 Feb 2012 20:02:23 +0000 en hourly 1 http://wordpress.org/?v=3.2.1 Untitled http://www.jd7.org/2012/02/06/untitled/ http://www.jd7.org/2012/02/06/untitled/#comments Mon, 06 Feb 2012 20:02:23 +0000 JD http://www.jd7.org/2012/02/06/untitled/
Technical Note : iPhone and iPad Dialup User IPSec VPN sample configuration for FortiOS v4.0 MR3
Products

 

FortiGate

 

Description
This article provides a sample IPSec VPN configuration for use with iPhone and iPad.  The configuration is for FortiOS v4.0 MR3 and differs from the configuration that is required for previous firmware versions.

The related article provides a configuration guide for earlier firmware versions.


Scope
This example is intended for a dial-up VPN network that requires connections from iPhone or iPad clients.
Solution
This example is intended for a dial-up VPN network that requires connections from iPhone or iPad clients.

The following sample configuration has been tested and works correctly in FortiOS v4.0 MR3.

It should be noted that the VPN is configured as route-based, otherwise known as interface-based. The configuration requires a peer ID (“apple” in this case) as well as a user group. It is best to configure this VPN using the CLI as some of the required settings are not available in the web interface.

Setup a User, User Group, and Firewall Addresses:

 

config user local
   edit “test”
      set status enable
      set type password
      set passwd <password>
   next
end

config user group
   edit “apple”
      set group-type firewall
      set member “test” 
      set authtimeout 0
   next
end

config firewall address
   edit “LAN”
      set associated-interface “switch”
      set type ipmask
      set subnet 10.1.1.0 255.255.255.0
   next

   edit “iPhoneVPNUsers”
      set associated-interface “Any”
      set comment ”
      set type ipmask
      set subnet 172.16.1.0 255.255.255.0
   next
end

 

Phase 1 Settings:

 

name : iPhoneP1 
type : dynamic 
interface : port1 
ip-version : 4 
local-gw : 0.0.0.0 
nattraversal : enable 
dhgrp : 2 
keylife : 28800 
authmethod : psk 
peertype : one 
xauthtype : auto 
mode : aggressive 
mode-cfg : enable 
proposal : aes256-md5 aes256-sha1 
localid : (null) 
localid-type : auto 
negotiate-timeout : 30 
dpd : enable 
fcc-enforcement : disable 
peerid : apple 
authusrgrp : VPNUserGroup 
default-gw : 0.0.0.0 
default-gw-priority : 0 
assign-ip : enable 
mode-cfg-ip-version : 4 
assign-ip-from : range 
add-route : enable 
ipv4-start-ip : 172.16.1.1 
ipv4-end-ip : 172.16.1.40 
ipv4-netmask : 255.255.255.0 
dns-mode : auto 
ipv4-wins-server1 : 0.0.0.0 
ipv4-wins-server2 : 0.0.0.0 
ipv4-exclude-range: 
ipv4-split-include : (null) 
unity-support : enable 
psksecret : * 
keepalive : 10 
distance : 1 
priority : 0 
dpd-retrycount : 3 
dpd-retryinterval : 5

 

Phase 2 Settings:

 

name : iPhoneP2 
dst-addr-type : subnet 
dst-port : 0 
encapsulation : tunnel-mode 
keepalive : enable 
keylife-type : seconds 
pfs : disable 
phase1name : iPhoneP1 
proposal : aes256-md5 aes256-sha1 
protocol : 0 
replay : enable 
route-overlap : use-new 
single-source : disable 
src-addr-type : subnet 
src-port : 0 
dst-subnet : 0.0.0.0 0.0.0.0 
keylifeseconds : 1800 
src-subnet : 0.0.0.0 0.0.0.0

 

Configure Firewall Policies:

VPN => LAN

 

cconfig firewall policy
   edit 1
      set srcintf “iPhoneP1″
      set dstintf “switch”
         set srcaddr “iPhoneVPNUsers” 
         set dstaddr “LAN” 
      set action accept
      set status enable
      set logtraffic enable
      set schedule “always”
         set service “ANY” 
      set nat disable
   next
end

 

LAN => VPN

 

config firewall policy
   edit 2
config firewall policy
   edit 1
      set srcintf “switch”
      set dstintf “iPhoneP1″
         set srcaddr “LAN” 
         set dstaddr “iPhoneVPNUsers” 
      set action accept
      set status enable
      set logtraffic enable
      set schedule “always”
         set service “ANY” 
      set nat disable
   next
end
   next
end

 

Configuration required on the iPad/iPhone Cisco VPN Client:

 

description: FortiGate VPN
server: IP of the FortiGate WAN interface that is configured for VPN (interface : port1 in this case)
account: test (a user account on the FortiGate)
password: test123
Use certificate: off
group name: apple
secret: Pre-shared key for the tunnel

 

Related Articles
Technical Note : FortiGate-to-iPhone IPSec VPN configuration guide (Japanese and English version)
Last Modified Date: 01-20-2012 Document ID: FD3337

 

]]> http://www.jd7.org/2012/02/06/untitled/feed/ 0 The Linux Mint Blog » Blog Archive » Linux Mint 12 “Lisa” released! http://www.jd7.org/2012/02/03/the-linux-mint-blog-%c2%bb-blog-archive-%c2%bb-linux-mint-12-%e2%80%9clisa%e2%80%9d-released/ http://www.jd7.org/2012/02/03/the-linux-mint-blog-%c2%bb-blog-archive-%c2%bb-linux-mint-12-%e2%80%9clisa%e2%80%9d-released/#comments Fri, 03 Feb 2012 21:30:46 +0000 JD http://www.jd7.org/2012/02/03/the-linux-mint-blog-%c2%bb-blog-archive-%c2%bb-linux-mint-12-%e2%80%9clisa%e2%80%9d-released/

The team is proud to announce the release of Linux Mint 12 “Lisa”.

Linux Mint 12 “Lisa”

New features at a glance:

For a complete overview and to see screenshots of the new features, visit: “What’s new in Linux Mint 12“.

Important info and release notes:

The Release Notes are an important source of information. Here are some of the topics they cover:

  • Tips and Tricks
    • Information about DuckDuckGo
    • Switch to a single top panel
    • Switch to a black panel, menu and window list
    • Quickly preview files without opening them
    • Restart Gnome Shell when needed
    • Debug Gnome Shell (for developers or to troubleshoot)
    • Run Gnome Shell in Virtualbox (for testers and reviewers)
    • Install MATE from the CD edition
    • Workaround for a disappearing MATE panel
    • Workaround for 100% CPU usage in MATE
  • MATE
  • mint4win
  • Moonlight
  • Upstream issues

System requirements:

  • x86 processor (Linux Mint 64-bit requires a 64-bit processor. Linux Mint 32-bit works on both 32-bit and 64-bit processors).
  • 512 MB RAM (1GB recommended for a comfortable usage).
  • 5 GB of disk space
  • Graphics card capable of 800×600 resolution
  • CD/DVD drive or USB port

Upgrade instructions:

  • To upgrade from a previous version of Linux Mint follow these instructions.
  • To upgrade from Linux Mint 12 RC, simply apply any level 1 and 2 updates (if any), as well as level 3 “mate” and “caja” updates available in the Update Manager.

Download:

Md5 sums:

  • DVD 32-bit: ee3d6e2ca498bc7685b7f17cdb5f2eea
  • DVD 64-bit: 548f0ac303fea840ef138e5669880a74
  • CD no codecs 32-bit: 40562d26447207cb5111f94b93957a58
  • CD no codecs 64-bit: 641e0ab8f746b82c36fc3f0bbca70dc7

Torrents:

HTTP Mirrors for the 32-bit DVD ISO:

HTTP Mirrors for the 64-bit DVD ISO:

HTTP Mirrors for the 32-bit CD No codecs ISO:

HTTP Mirrors for the 64-bit CD No codecs ISO:

Enjoy!

We look forward to receiving your feedback. Thank you for using Linux Mint and have a lot of fun with this new release!

You can follow any responses to this entry through the RSS 2.0 feed.
Both comments and pings are currently closed.

via blog.linuxmint.com

Great Linux OS Distro for everyone to try.

]]> http://www.jd7.org/2012/02/03/the-linux-mint-blog-%c2%bb-blog-archive-%c2%bb-linux-mint-12-%e2%80%9clisa%e2%80%9d-released/feed/ 0 Enhanced Recorded TV Interface for Windows Media Center® – Includes Backdrops, Genres & Favorites! http://www.jd7.org/2012/02/03/enhanced-recorded-tv-interface-for-windows-media-center%c2%ae-includes-backdrops-genres-favorites/ http://www.jd7.org/2012/02/03/enhanced-recorded-tv-interface-for-windows-media-center%c2%ae-includes-backdrops-genres-favorites/#comments Fri, 03 Feb 2012 20:05:33 +0000 JD http://www.jd7.org/2012/02/03/enhanced-recorded-tv-interface-for-windows-media-center%c2%ae-includes-backdrops-genres-favorites/
Media_httpwwwrecorded_gsiwa
via recordedtvhd.com

Awesome Plugin for Windows Media Center.

]]> http://www.jd7.org/2012/02/03/enhanced-recorded-tv-interface-for-windows-media-center%c2%ae-includes-backdrops-genres-favorites/feed/ 0 Snapseed – Free, iPhone and iPad http://www.jd7.org/2011/09/22/snapseed-free-iphone-and-ipad/ http://www.jd7.org/2011/09/22/snapseed-free-iphone-and-ipad/#comments Thu, 22 Sep 2011 16:09:15 +0000 JD http://www.jd7.org/2011/09/22/snapseed-free-iphone-and-ipad/
Image

Ever wanted to just do some quick edits on a photo you just took so that you could upload it to facebook or flickr, but didnt want to pay the money for the really nice ones?  Snapseed is free for only the next couple of days, and it is great!

The learning curve is not too bad but it will take a bit of practice but it does try to show you for each different thing.

 

 

]]> http://www.jd7.org/2011/09/22/snapseed-free-iphone-and-ipad/feed/ 0 Chromium OS? In my VirtualBox? – Hexxeh’s Blog http://www.jd7.org/2011/05/13/chromium-os-in-my-virtualbox-hexxehs-blog/ http://www.jd7.org/2011/05/13/chromium-os-in-my-virtualbox-hexxehs-blog/#comments Fri, 13 May 2011 16:24:25 +0000 JD http://www.jd7.org/2011/05/13/chromium-os-in-my-virtualbox-hexxehs-blog/
Media_httphexxehnetwp_bbfgb
via hexxeh.net

For all the people that are wanting to try Chrome OS but don’t want to buy a $500 laptop to do it. You can go here download the latest build of Chromium OS and install it on VirtualBox.

]]> http://www.jd7.org/2011/05/13/chromium-os-in-my-virtualbox-hexxehs-blog/feed/ 0 CrackBook Air 13″ http://www.jd7.org/2011/05/03/crackbook-air-13/ http://www.jd7.org/2011/05/03/crackbook-air-13/#comments Tue, 03 May 2011 14:01:59 +0000 JD http://www.jd7.org/2011/05/03/crackbook-air-13/
Photo

Oh yes nice little Cracked screen on the 13″ macbook air. No damage to the laptop, still factory plastic on the Laptop and box.  It had 3 boxes as you can see all with no damage. RMA has been ordered.  This would have had to come from the factory like this, I can see this being a shipping issue.

 

]]> http://www.jd7.org/2011/05/03/crackbook-air-13/feed/ 1 CleanMyMac http://www.jd7.org/2011/03/29/cleanmymac/ http://www.jd7.org/2011/03/29/cleanmymac/#comments Tue, 29 Mar 2011 18:56:44 +0000 JD http://www.jd7.org/2011/03/29/cleanmymac/
Media_httpmacpawcomim_hfrhk
via macpaw.com

CleanMyMac is a great tool for cleaning off your old cache, logs and other system files they you don’t really need but don’t want to mess with either. My first run I cleaned out 2GB of useless stuff.

]]> http://www.jd7.org/2011/03/29/cleanmymac/feed/ 0 DaisyDisk – Analyze disk usage and free up disk space on Mac http://www.jd7.org/2011/03/29/daisydisk-analyze-disk-usage-and-free-up-disk-space-on-mac/ http://www.jd7.org/2011/03/29/daisydisk-analyze-disk-usage-and-free-up-disk-space-on-mac/#comments Tue, 29 Mar 2011 18:53:32 +0000 JD http://www.jd7.org/2011/03/29/daisydisk-analyze-disk-usage-and-free-up-disk-space-on-mac/
Media_httpwwwdaisydis_rcgdk
via daisydiskapp.com

Probably the best tool I have used for cleaning up my hard drive from old files and stuff I dont need anymore. I cleaned off 50GBs of old worthless stuff. Got more than 20% of my Macbook Pros HD back.

]]> http://www.jd7.org/2011/03/29/daisydisk-analyze-disk-usage-and-free-up-disk-space-on-mac/feed/ 0 WordPress 2.7 iPhone – Too little to late? http://www.jd7.org/2011/03/16/wordpress-2-7-iphone-too-little-to-late/ http://www.jd7.org/2011/03/16/wordpress-2-7-iphone-too-little-to-late/#comments Thu, 17 Mar 2011 02:53:38 +0000 JD http://www.jd7.org/2011/03/16/wordpress-2-7-iphone-too-little-to-late/
P137

So after a while of waiting for issues to be fixed in the iPhone wordpress app they finally release it.

]]> http://www.jd7.org/2011/03/16/wordpress-2-7-iphone-too-little-to-late/feed/ 0 Wunderlist in JoliOS http://www.jd7.org/2011/03/11/wunderlist-in-jolios/ http://www.jd7.org/2011/03/11/wunderlist-in-jolios/#comments Fri, 11 Mar 2011 21:38:10 +0000 JD http://www.jd7.org/2011/03/11/wunderlist-in-jolios/
Wunderlist

Using wunderlist in JoliOS, just submitted the App to put it in the web store. 

]]> http://www.jd7.org/2011/03/11/wunderlist-in-jolios/feed/ 0