Networking on Tell Me Aboot

Juniper Switch SSH 'Expecting SSH2_MSG_KEX_ECDH_REPLY' Error

Tue, 02 Aug 2022 22:40:32 +1000

I was trying to SSH into a Juniper switch running JunOS 12.3, the connection would fail with Connection closed by <switch IP>. Using ssh -vvv showed an error: Debug: debug1: expecting SSH2_MSG_KEX_ECDH_REPLY. This is a nice rabbit hole to go down as we’re going to use SSH’s verbose mode, nmap to debug the solution.

PfSense AX88179 vs RTL8153 USB 3 Ethernet Compatibility

Thu, 20 Jan 2022 19:36:09 +1000

Trying to add another interface to a pfSense box but because it has run out of ports, I had to resort to using a USB 3 Ethernet dongle. Assuming (wrongly) that since it is based on the AX88179 chip and being somewhat older that it would be supported better. That wasn’t the case.

Client to NVR Isolated CCTV with VLAN and a Virtual Machine

Thu, 11 Nov 2021 21:33:43 +1000

Installing NVR software is a bit of a blackbox. In this post, we’re going to isolate the software, network and NVR via a VLAN and use the software in a Virtual Machine that has a separate dedicated interface to that VLAN.

Ubiquiti AP Proxy ARP Disruption

Mon, 09 Aug 2021 19:37:15 +1000

A client was having issues with a real time video or voice streaming dropping out for a few seconds every 20 minutes - only via WiFi using a Ubiquiti AP-AC-LR access point.

Cisco SG300 Port Security and Static Mac Filtering

Sun, 25 Jul 2021 19:52:07 +1000

I’ve got a device attached to a Cisco SG300 switch that I don’t trust which is on a separate VLAN. As an exercise, using DAI(Dynamic ARP Inspection) is the preferred solution but I want to manually statically assign the IP and MAC to the port instead.