<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Denie&#039;s Tech Blog &#187; Networking</title>
	<atom:link href="http://blog.nataprawira.com/tech/category/networking/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.nataprawira.com/tech</link>
	<description>Information Technology for Life!</description>
	<lastBuildDate>Mon, 19 Jul 2010 09:20:32 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>How to DISABLE ipv6 in CentOS5 System</title>
		<link>http://blog.nataprawira.com/tech/2010/07/19/how-to-disable-ipv6-in-centos5-system/</link>
		<comments>http://blog.nataprawira.com/tech/2010/07/19/how-to-disable-ipv6-in-centos5-system/#comments</comments>
		<pubDate>Mon, 19 Jul 2010 09:20:32 +0000</pubDate>
		<dc:creator>Denie</dc:creator>
				<category><![CDATA[BASH]]></category>
		<category><![CDATA[CentOS]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Tutorials]]></category>
		<category><![CDATA[tips]]></category>
		<category><![CDATA[disable]]></category>
		<category><![CDATA[ipv6]]></category>

		<guid isPermaLink="false">http://blog.nataprawira.com/tech/?p=163</guid>
		<description><![CDATA[

echo &#8220;NETWORKING_IPV6=no&#8221; &#62;&#62; /etc/sysconfig/network
echo &#8220;alias ipv6 off&#8221; &#62;&#62; /etc/modprobe.conf
echo &#8220;alias net-pf-10 off&#8221; &#62;&#62; /etc/modprobe.conf
reboot
# ifconfig
eth1      Link encap:Ethernet  HWaddr 00:1C:F0:BB:A7:28
inet addr:10.10.10.11  Bcast:10.10.10.255  Mask:255.255.255.0
 inet6 addr: fe80::21c:f0ff:febb:a728/64 Scope:Link
 UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
RX packets:470449435 errors:1 dropped:0 overruns:0 frame:0
TX packets:464084402 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:2563674692 (2.3 GiB)  TX bytes:2243518951 (2.0 GiB)
Interrupt:225 Base address:0&#215;2800
Don&#8217;t really [...]]]></description>
			<content:encoded><![CDATA[<div class="tweetmeme_button" style="float: right; margin-left: 10px;"><a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fblog.nataprawira.com%2Ftech%2F2010%2F07%2F19%2Fhow-to-disable-ipv6-in-centos5-system%2F"><img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fblog.nataprawira.com%2Ftech%2F2010%2F07%2F19%2Fhow-to-disable-ipv6-in-centos5-system%2F" height="61" width="51" /></a></div>
<!-- ALL ADSENSE ADS DISABLED -->
<div id="_mcePaste" style="width: 1px;height: 1px">echo &#8220;NETWORKING_IPV6=no&#8221; &gt;&gt; /etc/sysconfig/network</div>
<div id="_mcePaste" style="width: 1px;height: 1px">echo &#8220;alias ipv6 off&#8221; &gt;&gt; /etc/modprobe.conf</div>
<div id="_mcePaste" style="width: 1px;height: 1px">echo &#8220;alias net-pf-10 off&#8221; &gt;&gt; /etc/modprobe.conf</div>
<div id="_mcePaste" style="width: 1px;height: 1px">reboot</div>
<p><strong># ifconfig</strong></p>
<blockquote><p>eth1      Link encap:Ethernet  HWaddr 00:1C:F0:BB:A7:28<br />
inet addr:10.10.10.11  Bcast:10.10.10.255  Mask:255.255.255.0<br />
<strong> inet6 addr: fe80::21c:f0ff:febb:a728/64 Scope:Link<br />
</strong> UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br />
RX packets:470449435 errors:1 dropped:0 overruns:0 frame:0<br />
TX packets:464084402 errors:0 dropped:0 overruns:0 carrier:0<br />
collisions:0 txqueuelen:1000<br />
RX bytes:2563674692 (2.3 GiB)  TX bytes:2243518951 (2.0 GiB)<br />
Interrupt:225 Base address:0&#215;2800</p></blockquote>
<div>Don&#8217;t really need of ipv6 to be run on your server. Want to disable it ?</div>
<p><span id="more-163"></span>Just run the following syntax&#8230;</p>
<p><em><span style="color: #993300">Make sure no such entries inside: </span></em><strong><em><span style="color: #333300">/etc/sysconfig/network</span></em></strong><em><span style="color: #993300"> and </span></em><strong><em><span style="color: #333300">/etc/modprobe.conf</span></em></strong><em><span style="color: #993300"> file <img src='http://blog.nataprawira.com/tech/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </span></em></p>
<blockquote><p># echo &#8220;NETWORKING_IPV6=no&#8221; &gt;&gt; /etc/sysconfig/network<br />
# echo &#8220;alias ipv6 off&#8221; &gt;&gt; /etc/modprobe.conf<br />
# echo &#8220;alias net-pf-10 off&#8221; &gt;&gt; /etc/modprobe.conf<br />
# reboot <span style="color: #0000ff"> </span><em><span style="color: #0000ff">(your server to make affect)</span></em></p></blockquote>
<p>Once reboot-ed, do :</p>
<p># ifconfig</p>
<blockquote><p>eth1      Link encap:Ethernet  HWaddr 00:1C:F0:BB:A7:28<br />
inet addr:10.10.10.11  Bcast:10.10.10.255  Mask:255.255.255.0<br />
UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br />
RX packets:470471884 errors:1 dropped:0 overruns:0 frame:0<br />
TX packets:464109169 errors:0 dropped:0 overruns:0 carrier:0<br />
collisions:0 txqueuelen:1000<br />
RX bytes:2574513731 (2.3 GiB)  TX bytes:2255015395 (2.1 GiB)<br />
Interrupt:225 Base address:0&#215;2800</p></blockquote>
<div></div>

<div class="bitly_links">
<div class="bitly_linkstext">
Share this on : 
</div>
<ul>
	<li class="bitly_linksfirst"><a rel="nofollow" id="facebook" target="_blank" href="javascript:window.location='http%3A%2F%2Fwww.facebook.com%2Fshare.php%3Fu%3Dhttp%253A%252F%252Fbit.ly%252FbDLXEH%26amp%3Bt%3DHow%2520to%2520DISABLE%2520ipv6%2520in%2520CentOS5%2520System';" title="Facebook">Facebook</a></li>
	<li><a rel="nofollow" id="friendfeed" target="_blank" href="javascript:window.location='http%3A%2F%2Fwww.friendfeed.com%2Fshare%3Ftitle%3DHow%2520to%2520DISABLE%2520ipv6%2520in%2520CentOS5%2520System%26amp%3Blink%3Dhttp%253A%252F%252Fbit.ly%252FbDLXEH';" title="Friendfeed">Friendfeed</a></li>
	<li><a rel="nofollow" id="posterous" target="_blank" href="javascript:window.location='http%3A%2F%2Fposterous.com%2Fshare%3Flinkto%3Dhttp%253A%252F%252Fbit.ly%252FbDLXEH%26amp%3Btitle%3DHow%2520to%2520DISABLE%2520ipv6%2520in%2520CentOS5%2520System%26amp%3Bselection%3D';" title="Posterous">Posterous</a></li>
	<li><a rel="nofollow" id="tumblr" target="_blank" href="javascript:window.location='http%3A%2F%2Fwww.tumblr.com%2Fshare%3Fv%3D3%26amp%3Bu%3Dhttp%253A%252F%252Fbit.ly%252FbDLXEH%26amp%3Bt%3DHow%2520to%2520DISABLE%2520ipv6%2520in%2520CentOS5%2520System%26amp%3Bs%3D';" title="Tumblr">Tumblr</a></li>
	<li class="bitly_linkslast"><a rel="nofollow" id="twitter" target="_blank" href="javascript:window.location='http%3A%2F%2Ftwitter.com%2Fhome%3Fstatus%3DHow%2520to%2520DISABLE%2520ipv6%2520in%2520CentOS5%2520System%2520-%2520http%253A%252F%252Fbit.ly%252FbDLXEH';" title="Twitter">Twitter</a></li>
</ul>
</div>
<br/><br/>]]></content:encoded>
			<wfw:commentRss>http://blog.nataprawira.com/tech/2010/07/19/how-to-disable-ipv6-in-centos5-system/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to recover domain when the primary domain controller failes and there are member domain controllers</title>
		<link>http://blog.nataprawira.com/tech/2008/08/13/how-to-recover-domain-when-the-primary-domain-controller-failes-and-there-are-member-domain-controllers/</link>
		<comments>http://blog.nataprawira.com/tech/2008/08/13/how-to-recover-domain-when-the-primary-domain-controller-failes-and-there-are-member-domain-controllers/#comments</comments>
		<pubDate>Wed, 13 Aug 2008 17:02:04 +0000</pubDate>
		<dc:creator>Denie</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://blog.nataprawira.com/tech/?p=5</guid>
		<description><![CDATA[

Many of us have probably dabbled in setting up our own domain and forest for development purposes. For me &#8211; a domain is a must &#8211; I have my development environment that is heavily used to model development projects for clents &#8211; and I have my family &#8211; me, my wife, and 7 children with [...]]]></description>
			<content:encoded><![CDATA[<div class="tweetmeme_button" style="float: right; margin-left: 10px;"><a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fblog.nataprawira.com%2Ftech%2F2008%2F08%2F13%2Fhow-to-recover-domain-when-the-primary-domain-controller-failes-and-there-are-member-domain-controllers%2F"><img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fblog.nataprawira.com%2Ftech%2F2008%2F08%2F13%2Fhow-to-recover-domain-when-the-primary-domain-controller-failes-and-there-are-member-domain-controllers%2F" height="61" width="51" /></a></div>
<!-- ALL ADSENSE ADS DISABLED -->
<p>Many of us have probably dabbled in setting up our own domain and forest for development purposes. For me &#8211; a domain is a must &#8211; I have my development environment that is heavily used to model development projects for clents &#8211; and I have my family &#8211; me, my wife, and 7 children with their own computers.</p>
<p>So, we have a fairly detailed setup on the home front &#8211; but the following applies to ANY environment in which your primary domain controller gives up the ghost &#8211; and you do not have an image backup of the PDC.</p>
<p><b>Foremost &#8211; clarity: In an Active Directory forest, where you have several domain controllers, but one primary domain controller (PDC) &#8211; you may think that you must RESTORE or recover this PDC to salvage the domain. In other words, if the PDC fails &#8211; is all lost? Nope, not at all. Unless you do not have backup domain controllers. If you do not &#8211; then reading the rest of this is moot &#8211; but if you do, then read on.</b></p>
<p>When you promote additional servers on your domain, and make them member DC&#8217;s in the same forest, then your domain details are available to you &#8211; and you simply need to transfer the Operation Master role to another DC &#8211; but before doing that &#8211; there are the FSMO&#8217;s &#8211; yea, something hardly anyone knows about: FSMO = Flexible Single Master Operation &#8211; something your PDC or master of operations &#8211; manages. If a PDC &#8211; and Global Catalog for that matter &#8211; goes offline, a backup DC will generally pickup and juggle traffic for the PDC. But what happens if the PDC crashes altogether, and you need to basically assign a member backup DC the PDC role?</p>
<p><b>FSMO must be transferred to a backup DC before that DC can assume the Master of Operations role. This is done at the command-line level, and you must be careful before you make this call &#8211; ONLY do this if you are sure you cannot recover the original PDC because once you do this &#8211; you cannot later recover the PDC and bring it online. It cannot be added back into the forest at all.</b></p>
<p>So, the FSMO roles and how we transfer these. In a word, you cannot simply transfer the FSMO roles because the PDC is off line and not available to authorize the transfer. However, you &#8216;can&#8217; SEIZE the FSMO roles from the original PDC &#8211; even with the machine offl line.</p>
<blockquote><p>Caution: Using the Ntdsutil utility incorrectly may result in partial or complete loss of Active Directory functionality.</p>
</blockquote>
<p>Open a <b>CMD prompt on the backup DC</b> you want to perform this on. At the command-line prompt, type <b>Ntdsutil</b> and press enter .</p>
<blockquote>
<p>Microsoft Windows [Version 5.2.3790]<br />
(C) Copyright 1985-2003 Microsoft Corp.</p>
<p>C:\WINDOWS&gt;ntdsutil<br />
ntdsutil:</p>
</blockquote>
<p>At this prompt, type roles and press :</p>
<blockquote>
<p>ntdsutil: roles<br />
fsmo maintenance:</p>
</blockquote>
<p>Now type connections and press :</p>
<blockquote>
<p>fsmo maintenance: connections<br />
server connections:</p>
</blockquote>
<p>Now type <b>connect to server SERVERNAME</b>  where  is the name of the backup DC you are working on, and press :</p>
<blockquote>
<p>server connections: connect to server hamddc02</p>
<p>Connected to hamdc02 using credentials of locally logged on user.<br />
server connections:</p>
</blockquote>
<p>At the server connections prompt type <b>q</b> and press enter :</p>
<blockquote>
<p>server connections: q<br />
fsmo maintenance:</p>
</blockquote>
<p>Now we are going to <b>SEIZE the FSMO roles</b> we want. <u>NOTE</u>: Out of the 5 FSMO roles, we are NOT going to seize the Infrastructure Master. We do not want to put the Infrastructure Master (IM) role on the same domain controller as the Global Catalog server. If the Infrastructure Master runs on a GC server it will stop updating object information because it does not contain any references to objects that it does not hold. This is because a GC server holds a partial replica of every object in the forest. <b>For now, we&#8217;ll seize the following</b>:</p>
<blockquote>
<p>
<b><br />
Seize domain naming master<br />
Seize PDC<br />
Seize RID master<br />
Seize schema master<br />
</b></p>
</blockquote>
<p>We do this by typing the line shown above. For example, to seize the domain naming master, type seize domain naming master and press </p>
<p>You will receive a Windows dialog prompting to confirm this move &#8211; click  and then you&#8217;ll see the attempt to safely transfer the FSMO role, a failure message, and then it will seize the role, assigning it to the backup DC you specified when you connected to the server above.</p>
<p>Once you have completed this for the 4 roles, type <b>Quit</b> to exit the utility, then Exit to return to Windows.</p>
<p>From the <b>Start menu</b>, select <b>Run</b> and enter <b>dsa.msc</b> and press enter.</p>
<p>On the domain that is displayed, <b>right click</b> and select <b>Operations Masters</b>. You should now see that this backup domain controller (HAMDC02 in this case) is not the Operations master.</p>
<p>From here you simply <b>re-create the failed domain controller</b>, and promote it &#8211; joining it to this existing forest. </p>
<p>Hopefully others will find this useful.</p>
</p>
<p>Source:<br /><a href="http://geekswithblogs.net/mhamilton/archive/2007/04/15/111674.aspx">geekswithblogs.net/mhamilton/archive/2007/04/15/111674.aspx</a></p>
<br/><br/>]]></content:encoded>
			<wfw:commentRss>http://blog.nataprawira.com/tech/2008/08/13/how-to-recover-domain-when-the-primary-domain-controller-failes-and-there-are-member-domain-controllers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>VPN Ports</title>
		<link>http://blog.nataprawira.com/tech/2008/08/13/vpn-ports/</link>
		<comments>http://blog.nataprawira.com/tech/2008/08/13/vpn-ports/#comments</comments>
		<pubDate>Wed, 13 Aug 2008 17:01:18 +0000</pubDate>
		<dc:creator>Denie</dc:creator>
				<category><![CDATA[Networking]]></category>

		<guid isPermaLink="false">http://blog.nataprawira.com/tech/?p=4</guid>
		<description><![CDATA[

PPTP uses IP protocol 47, designed for &#8220;General Routing Encapsulation&#8221; or GRE packets. A common mistake in configuring firewalls for use with PPTP is to open PPTP port 1723 (allowing connections to be established) but forget to forward GRE protocol type 47 (denying port data from passing through the tunnel). Some operating systems include &#8220;PPTP [...]]]></description>
			<content:encoded><![CDATA[<div class="tweetmeme_button" style="float: right; margin-left: 10px;"><a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fblog.nataprawira.com%2Ftech%2F2008%2F08%2F13%2Fvpn-ports%2F"><img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fblog.nataprawira.com%2Ftech%2F2008%2F08%2F13%2Fvpn-ports%2F" height="61" width="51" /></a></div>
<!-- ALL ADSENSE ADS DISABLED -->
<p>PPTP uses IP protocol 47, designed for &#8220;General Routing Encapsulation&#8221; or GRE packets. A common mistake in configuring firewalls for use with PPTP is to open PPTP port 1723 (allowing connections to be established) but forget to forward GRE protocol type 47 (denying port data from passing through the tunnel). Some operating systems include &#8220;PPTP ping&#8221; utilities (pptpsrv and pptpclnt in Windows 2000) that verify both PPTP ports are opened.</p>
<br/><br/>]]></content:encoded>
			<wfw:commentRss>http://blog.nataprawira.com/tech/2008/08/13/vpn-ports/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
