Blog
802.11ax Cisco APs not getting IP address from the DHCP server
This post is more of a reminder for myself to remember this in the future. With introduction of Cisco AX access points, the requirement is for the APs to be able to resolve gateway IP address sent via DHCP in ARP. If that doesn't work, no IP address for you! Usually this is not a problem, but I was
2 min readProxmox - Changing Windows 10 BIOS from SeaBIOS to OVMF (UEFI)
Changing Windows 10 BIOS from SeaBIOS to OVMF in Proxmox
2 min readstep-ca Certificate Revocation
In previous posts we successfully deployed our own PKI with step-ca and even configured traefik to use ACME protocol to request certificates from our PKI server. Now we are going to add an additional feature to our PKI, which is active certificate revocation. Smallstep’s step-ca as CA with ACME sup
7 min readTraefik with mTLS
We are discussing how to enable mTLS for services behind Traefik reverse proxy
7 min readUsing traefik with local CA with ACME support
How to use custom PKI through ACME calls with traefik.
8 min readSmallstep's step-ca as CA with ACME support
In this blog post, we will go through the basic installation process and install both the step-ca and step-cli tool that will help us manage our CA and certificates issued by the CA.
14 min readHow to install PA firewall device certificate for Panorama managed devices
Palo Alto device certificates are required for devices that need to communicate with Palo Alto cloud services. There are two ways to install them - one is directly from the firewall itself, while the other one is for Panorama managed devices.
3 min readChanging/Adding SSL certificates to Proxmox
I decided to add custom CA-signed certificates to my Proxmox cluster, but the last time I did that, I managed to get my cluster all screwed up (I did what I wasn't supposed to do!) The only thing that matters is that you don't replace existing pve-ssl.pem certificate file or pve-ssl.key key file,
1 min readQNA-T310G1S 10GbE SFP+ adapter no longer working after Proxmox upgrade to 8.2.4
Today I upgraded my Proxmox servers to 8.2.4, and after restart, I noticed that my networking stack wasn't working properly. I resolved the issue by moving all of my VMs and my Migration and Cluster Sync networking to the bridge associated with my other network adapter, but that was just a temporary
2 min readGetting real IP address from visitors when using Cloudflare as a reverse proxy
To be honest, I wasn't paying a lot of attention to my analytics, but I did notice one thing - there was a lot of users coming to this blog that all had similar IP addresses. I didn't really care too much about this, but it got me thinking. And then I had a Eureka! moment. Stupid, I know - but most
2 min readHow to edit file in a docker container when no editor is installed
I recently needed to edit a file in a docker container, but when I tried editing the file, no luck: /var/www/html/config# vi config.ini.php bash: vi: command not found Of course, I tried installing an editor right away: /var/www/html/config# apt install nano Reading package lists... Done Buildin
1 min readInstall Palo Alto GlobalProtect to use default browser for SAML
There is a 'funny' situation when installing Palo Alto GlobalProtect client for RA VPN. If you are using SAML to authenticate your users, with the default installation it will use builtin browser to open SAML IdP.
1 min read