Articles by Yuri Slobodyanyuk





Fortigate BGP cookbook of example configuration and debug commands

Last updated: August 2020 BGP with two ISPs for multi-homing, each advertising default gateway and full routing table. Uses route-map, prefix list, weight Prevent our Fortigate from becoming a transit AS, do not advertise learned via eBGP routes. Uses route-map, aspath-list Force FG1 to advertise default route without having one …



AWS cli cookbook

Get a list of all the buckets under user account Recursively list contents of a given bucket yurisk.info Recursively list contents of a given bucket printing sizes in a friendly format List contents of a bucket, add summary for number of objects and their total size Get access-list associated …



RAD ETX 203, 205, 220 debug and information commands

Table of Contents Cheat sheet of debug commands Examples show configure port summary show config port eth 4/2 status show config port eth 4/1 statistics Measuring the traffic rate passing the interface Run ping between 2 ETXes show config system system-date show configure flows summary brief show configure …



Curl examples cookbook

Last updated: 19 December 2020 Get coronavirus/Covid-19 statistics for your country, real-time or historical Force curl not to show the progress bar Download a web page via GET request setting Chrome version 74 as the User-Agent. Download a web page via GET request setting Googlebot version 2.1 as …



Fortiweb Cookbook: content routing based on URL configuration example

I wrote this step by step walkthrough as an answer for the forum.fortinet.com here https://forum.fortinet.com/FindPost/183028 . This example uses Fortiweb 6.2.2 but the configuration is valid at least starting with 5.x. Problem: You want to route user requests according to the …



Fortigate - enable e-mail as a two-factor authentication for a user and increase token timeout

I'll say outright that FortiToken (be it a mobile app or a physical token) is the most secure and preferable way today for multi-factor authentication. The other two - SMS message and e-mail message are vulnerable to many attacks, including not so technically sofisticated SIM swapping. But sometimes less secure method …



Fortigate CLI command alias to create shortcuts and save time

Fortigate CLI commands can be long, like really long. And it is no fun to get an error running a command of 6 words because of the typo! The solution to this is simple - command aliases. Coming from the Cisco world I got used to creating command aliases as a …



What GEO location database Fortinet products are using?

This is the easiest question I got asked about the Fortigate/FortiWeb/etc. The GEO location database provider for all the Fortinet products has been the same for many years - it is Maxmind.com. Follow me on https://www.linkedin.com/in/yurislobodyanyuk/ not to miss what I publish on …



Fortigate has iperf client for traffic testing built in, here are all the details

Starting with the FortiOS 5.x Fortinet have a built-in iperf3 client in Fortigate so we can load test connected lines. If new to iperf, please read more here iperf.fr. iperf in Fortigate comes with some limitations and quirks, so let's have a better look at them: - The version …



MRV Optiswitch OS904 OS906 OS912 debug and diagnostic commands

MRV Communications (acquired in 2017 by ADVA Optical Networking) is an Israeli company known for their optical network equipment, most notably their Optiswitch Carrier Ethernet Switch series. The switches (OS904, OS906G, OS912) are not available for purchase from them anymore, but if you work for a telco company, you surely …