Skip to content

Commit

Permalink
content-update
Browse files Browse the repository at this point in the history
  • Loading branch information
BitwiseOperator committed Jun 30, 2024
1 parent cf17550 commit 3f24082
Show file tree
Hide file tree
Showing 8 changed files with 9,366 additions and 0 deletions.
6 changes: 6 additions & 0 deletions docs/Cyber_Offensive/Misc/Interesting_Protocols.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
!!! info ""

[TR-069 Port 7547](https://www.speedguide.net/port.php?port=7547)



Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
!!! info ""

Example from Aruba Software revision : WC.16.10.00030

```shell
ip route 0.0.0.0 0.0.0.0 10.10.10.161 distance 20
ip route 0.0.0.0 0.0.0.0 20.20.20.65
ip route 20.20.20.0 255.255.255.240 10.10.10.161
ip route 20.20.20.0 255.255.255.240 20.20.20.65
ip routing

vlan 100
name "PrimaryISP"
untagged 2-5,11-17,19-20,22-23
ip address 20.20.20.78 255.255.255.240
exit

vlan 200
name "SecondaryISP"
untagged 6-7,9,18,21
ip address 10.10.10.164 255.255.255.224
exit
```
Original file line number Diff line number Diff line change
@@ -0,0 +1,121 @@
!!! info ""

[JUNOS Download](https://support.juniper.net/support/downloads/)

!!! example ""

#Before upgrading

```bash
show version
show chassis hardware | no-more
show chassis environment | no-more
show interface terse | no-more
show configuration | no-more | display set
```
Check system alarms and regarless of result run request
```bash
show system alarms
request system configuration rescue save
request system autorecovery state save
```
Check chassis alarms
```bash
show chassis alarms
show system storage partitions
request system snapshot slice alternate
show system snapshot media internal
request system reboot
show chassis alarms
```
Make sure you have enough storage before upgrading /var
```bash
show system storage | no-more
```
If need more space, check files dry-run
```bash
request system storage cleanup dry-run
```
If all good to delete in results above, then run it. if not needed then ignore this step
```bash
request system storage cleanup
```

Enable services & Connect to SRX through FTP & upload firmware file to Juni, might need to update the security zone command, for zone name and interface

```bash
configuration
set system service telnet
set system service ftp
set security zones security-zone MGMT interfaces irb.1234 host-inbound-traffic system-services ftp
commit
```


!!! warning "You have 3 methods below, use only one!"

**Method 1**: Upload the file into /var/tmp/ directory using filezilla or winscp and then check if you can see it
```bash
run file list /var/tmp/
request system software add /var/tmp/junos-srxsme-12.1X46-D40.2-domestic.tgz no-validate
```
**Method 2**: FTP Method
```bash
request system software add ftp://ftpuser:[email protected]/junos-srxsme-12.1X46-D40.2-domestic.tgz no-copy no-validate
```
**Method 3**: HTTPS Method
```bash
file copy "https://cdn.juniper.net/software/junos/20.4R3.8/[email protected]&__gda__=1674734823_bd7351a3514eb61069sad8yoasd9" /var/tmp/junos-srxsme-20.4R3.8.tgz
request system software validate /var/tmp/junos-srxsme-20.4R3.8.tgz
request system software add /var/tmp/junos-srxsme-20.4R3.8.tgz no-validate
```

!!! info ""
Reboot after choosing your method
```bash
request system reboot
```
It can take 10-15 minutes before becoming available again, after it's back run the below
```bash
show version
show system boot-messages | no-more
show chassis hardware | no-more
show chassis environment | no-more
show interface terse | no-more
```

Check DHCP Leases
```bash
show arp no-resolve
```

!!! info ""

#### extra sources

- [Junos Software Installation/Upgrade](https://supportportal.juniper.net/s/article/SRX-Getting-Started-Junos-Software-Installation-Upgrade?language=en_US)
- [JUNOS OS Firmware Release Notes](https://www.juniper.net/documentation/product/us/en/srx300/#cat=release_notes&tab=release_20.4&sgroup=junos-os)
- [JUNOS Download](https://support.juniper.net/support/downloads/)
- [YT - Upgrade Software on Juniper SRX using WinSCP](https://www.youtube.com/watch?v=tYXv65VXP74)
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
!!! info ""

** AP Firmware Compatability to Join ZD **

ZD firmware version 9.13.x or lower > AP with Standalone Firmware 100.x is supported.
ZD firmware version 10.x or later > AP with Standalone Firmware 104.x or above is supported.

AP utilizes SSH to communicate with the controller

- APs running Solo 110.X and above
- APs running SZ 5.x and above
- APs running Unleashed 200.x and newer
AP utilizes LWAPP to communicate with the controller

- APs running ZD 9.x
- APs running solo 104.x or prior

++++++++++

In SmartZone under Cluster Information > Only first time config you can enable the AP Conversion (This enables LWAPP) > if not enabled then, you can re-enable it from GUI, you have to go to CLI
You can enable this option or disable it through CLI when onboarding APs depending on compatabiliy

>enable
>Show run lwapp2scg
check the policy if deny all or allow all

#config
#lwapp2scg
#policy accept-all > choose this depending on what you need
#policy deny-all > choose this depending on what you need
#end


It is similar for vSZ/SZ, so for SZ/vSZ lower than 3.6.x, the AP standalone firmware 100.x is supported and for the firmware version higher than 5.x, the AP firmware version 104.x or higher is supported.


IP mode on dual mode
AP solo 114 latest .6565 and avoid .1360
will have issue 5.1 or 5.2 SZ
So you need to have only IPv4

Latest APs should be on 114 but older try either 104 or 110 solo fimrware version

on AP having issue with run
get syslog log

#set Controller IP
set scg ip
ping controller also if needed to check if you can reach it out



------------------------------


Controller upgrade then you need to upgrade the APs

Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
!!! info ""

http://docs.ruckuswireless.com/fastiron/08.0.60/fastiron-08060-securityguide/GUID-173BF914-D248-4CAE-9D80-B036E8EC54E6.htmlhttp://docs.ruckuswireless.com/fastiron/08.0.60/fastiron-08060-securityguide/GUID-173BF914-D248-4CAE-9D80-B036E8EC54E6.html

```bash
conf t
authentication
no mac-authentication enable ethernet 1/1/X
exit
no dot1x enable ethernet 1/1/X
wr mem
```

Check `Show run`, now you can untag VLAN to Port.
Original file line number Diff line number Diff line change
@@ -0,0 +1,89 @@
!!! info ""

```bash
ICX7150-C12 Switch>show flash

Stack unit 1:
NAND Type: Micron NAND 2GiB (x 1)
Compressed Pri Code size = 31457280, Version:08.0.95kT211 (SPS08095k.bin)
Compressed Sec Code size = 33554432, Version:08.0.95kT213 (SPR08095k.bin)
Compressed Pri Boot Code size = 786944, Version:10.1.26T225 (mnz10126)
Compressed Sec Boot Code size = 786944, Version:10.1.26T225 (mnz10126)
Code Flash Free Space = 1052270592
```


```bash
ICX7150-C12 Switch>show version

Copyright (c) Ruckus Networks, Inc. All rights reserved.
UNIT 1: compiled on Jun 9 2023 at 06:14:36 labeled as SPS08095k
(31457280 bytes) from Primary SPS08095k.bin (UFI)
SW: Version 08.0.95kT211
Compressed Primary Boot Code size = 786944, Version:10.1.26T225 (mnz10126)
Compiled on Tue Nov 29 12:43:26 2022

HW: Stackable ICX7150-C12-POE
==========================================================================
UNIT 1: SL 1: ICX7150-C12-2X10GR POE 12-port Management Module
Serial #:ABCDE32U01M
Software Package: BASE_SOFT_PACKAGE
Current License: 2X10GR
P-ASIC 0: type B160, rev 11 Chip BCM56160_B0
==========================================================================
UNIT 1: SL 2: ICX7150-2X1GC 2-port 2G Module
==========================================================================
UNIT 1: SL 3: ICX7150-2X10GF 2-port 20G Module
==========================================================================
1000 MHz ARM processor ARMv7 88 MHz bus
8 MB boot flash memory
2 GB code flash memory
1 GB DRAM
STACKID 1 system uptime is 1 day(s) 9 hour(s) 3 minute(s) 19 second(s)
The system started at 06:14:38 GMT+00 Fri Jun 09 2023
```

```bash
ICX7150-C12 Switch>enable

No password has been assigned yet...
```

```bash
ICX7150-C12 Switch#boot system flash secondary

Are you sure? (enter 'y' or 'n'): y
Could not verify if the Running Config data has been changed.
Do you want to continue the reload anyway? (enter 'y' or 'n'): y
```

```bash
ICX7150-C12 Router#copy flash flash primary

Flash Memory Write (8192 bytes per dot)
ICX7150-C12 Router#................
Processing the bundle image...
Flashing application image to Primary partition...

SYNCING IMAGE TO FLASH. DO NOT SWITCH OVER OR POWER DOWN THE UNIT(65536 bytes per dot)...

Flashing bootrom image to Primary partition...

SYNCING IMAGE TO FLASH. DO NOT SWITCH OVER OR POWER DOWN THE UNIT(65536 bytes per dot)...
............
Post processing bundle image...
Bundle image processed successfully

Copy Done
```

```bash
ICX7150-C12 Router#reload
ICX7150-C12 Router#y
ICX7150-C12 Router#y
```

```bash
CLI>enable
CLI>show flash
```
Loading

0 comments on commit 3f24082

Please sign in to comment.