Latest Templates
April 22, 2013 –
ipsec config for juniper M/MX series
April 2, 2013 –
Creates an ip sla probe to measure udp-jitter and more namely mos scores based on icpif calculations
January 23, 2013 –
Transcribed [http://www.staticnat.com/WP/2012/12/17/a-few-easy-steps-cisco-ios-setup-dns-resolution/] into hatch
December 18, 2012 –
Transcribed [http://www.staticnat.com/WP/2012/12/18/a-few-easy-steps-cisco-ios-setup-ntp/] into hatch
October 21, 2012 –
LACP Layer 3 bundle.
October 21, 2012 –
Layer 2 802.1Q LACP bundle.
October 18, 2012 –
Cisco ASR L2L VPN Configuration (BETA) - This Template is for the configuration of a L2L IPSec VPN Tunnel on a Cisco ASR
July 26, 2012 –
Minimal kickstart template. Avoids the ginourmous @base package set in favor of the basics of yum and openssh-server.
July 25, 2012 –
The actual data of an entry
July 25, 2012 –
Creates: -entries for network blocks in rwhoisd.auth_area -schema file -actual data for netblock
July 15, 2012 –
Simple snippet of Nginx SSL configuration for running Puppetmaster as a rack app under passenger. Assumes a lot of defaults for RHEL and some paths may need to be adjusted.
July 15, 2012 –
An example of how to create layer 2 and layer 3 vlans
July 11, 2012 –
Shows the two methods - using LLDP or using DHCP Option 242 specified VLAN numbers in the L2Q and L2QVLAN options.
July 9, 2012 –
IPv4 only, no IPv6 options, see other template. Uses case insensitive local AAA only with enable secret and a local user. SSH and line timeouts are set to 15 minutes for PCI-DSS compliance requirement. FTP crashdump destination configured, remove if you don't want it. Bear in mind this disables the AUX port on routers, it isn't there on most switches, ...
July 8, 2012 –
Synchronize Cisco IOS device clock with trusted and authenticated NTP servers. The <%NTP KEY%> must be the same on both the router and the NTP servers. NOTE: Only the peer and serve-only ACL's are set here, you may wish to change to query-only or serve. - peer, Allows time requests and NTP control queries and allows the system to ...
June 21, 2012 –
NAT on JUNOS is better structured (IMO) then on IOS and IOS-like platforms. But it's still a different world. Here's a short to setting up NAT for packets moving from the Trust security zone to the Untrust security zone but using a dedicated "NAT address" not the untrust interface address. Proxy ARP is the key, it's what you'd usually forget ...
May 17, 2012 –
CLI commands to create various VMware ESX virtual switches to a basic level. These can be used post-install or as part of a kickstart driven installation. vSwitch0 is created by default with vmnic0 or whatever NIC you tell the installer to boot with via kernel options. The management IP address will by default be on vm kernel NIC vmk0. Hence ...
May 15, 2012 –
Static access port with configurable permitted MAC's, if you want to use a dot1q trunk configure it as so and look up the option extras - MAC's can be specified per-VLAN on a dot1q trunk. One static MAC, sticky mode for additional MAC's. Duplicate mac-address line for more statics. Violation mode configurable, ensure mls statement is used if using protect ...
May 2, 2012 –
The following generates a standard settings.py file that I use for all my apps.
April 4, 2012 –
How to import data from a text file into a databse table
April 4, 2012 –
This is a simple way to select a table into a text file.
March 5, 2012 –
Adding wysiwyg editors with image uploading is kind of a pain in the ass. The below template may need some cleanup, but it works for me now. This is on ubuntu using apache2, my projects are in /var/www/%{fqdn}%/%{project_name}%/. Make sure to grab django-filebrowser-no-grappelli-and-uploadify, I didn't want grappelli.
February 24, 2012 –
Despite htaccess being around forever, I always forget how to implement it. This is a simple "just get it to work" implementation.
February 22, 2012 –
A couple of friends and I utilize Campfire as a chat room, yeah I know there are free alternatives, blah blah. This room is essentially a better version of irc for us. Anyway.. there are a ton of tutorials on how to deploy hubot to heroku, but not a whole lot on how to deploy hubot on your own servers. ...
February 16, 2012 –
So I've been working on a development project for a client, and doing all of the development remotely. The issue I've been having is with their Citrix environment, I've launched Citrix from an IE8 browser and after a period of 30 minutes or so the remote session will die and the Citrix session will be gone due to inactivity. If ...
February 16, 2012 –
http://www.cisco.com/en/US/docs/ios/12_4/ip_sla/configuration/guide/hsicmp.html
May 11, 2012 –
Copying this entire config into an ssh window on a linux host will create all the necessary scaffolding to run a django 1.4 site on apache2 using wsgi and create the necessary database and user.
February 16, 2012 –
DHCP snooping allows you to create a white-list of interfaces for which trusted dhcp servers are connected. All dhcp specific traffic which passes through "untrusted" interfaces will be dropped. This helps guard against rogue dhcp servers.
February 16, 2012 –
Created from http://www.debian-administration.org/articles/442
February 17, 2012 –
OpenSSL command to convert from .crt and .key to .pfx.
February 16, 2012 –
PHP script to test if you can connect to a MySQL database
February 16, 2012 –
This script allows you to replace a string in multiple files with a new string
February 16, 2012 –
Save this script as a .bat file Example script: cd .. c: cd "C:Program Files (x86)IIS ResourcesIIS 6.0 Migration Tool" iismt.exe server-name w3svc/1 /serverbindings 127.0.0.1:80:dev-site2.example.com /siteid 1 /configonly
February 16, 2012 –
This script will change the ID of a site for you in IIS. You will need to save the output as a .bat file
February 16, 2012 –
Launch files as a specific user. Sample: set WshShell = WScript.CreateObject("WScript.Shell") WshShell.run "runas /user:Administrator ""C:Program FilesInternet Exploreriexplore.exe""" 'Open command prompt WScript.Sleep(1000) WshShell.SendKeys("AdminPassword") 'send password WshShell.SendKeys("{ENTER}") 'send enter keystroke WScript.Sleep(1000) set wshshell = Nothing Launches IE as a Administrator.
February 16, 2012 –
This is a standard configuration for powerstack redundancy. This was tested with 2 3750X switches each with a single 1100W power supply. In this configuration power can be removed from a single power supply and all the switches in this stack will stay powered on. http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps6406/white_paper_c11-578931.html
February 16, 2012 –
Simple template to configure tacacs on a given IOS piece of gear. A "network" entry should be added to your CiscoACS configuration for the ip address of %[tacacs_source_interface]%.
February 16, 2012 –
A simple template to configure snmp community strings for read-only and read-write access according to access-lists
February 16, 2012 –
This is a simple template to configure an ASA device using asa821-k8.bin code. Interfaces: Ethernet0/0 is connected to a DSL modem and that DSL modem dishes out dhcp addresses. Ethernet0/1 is the management interface for this device. Ethernet0/2 is a trunk interface to a Cisco wireless controller. The guest wireless network is 192.168.10.0/24
February 16, 2012 –
It's easy to copy and paste urls to share links, but its easier to just click on a button to do it.
February 16, 2012 –
Example of how to use a Cisco router as a terminal server using an NM-32A 32-port async serial line card. In use with 2811's and IOS 12.4T. SSH is used to securely make the serial lines available on the network. Be aware that SSH requires a username/password combination, hence this is not like when you simply bind the serial ports ...
February 16, 2012 –
Example of Cisco IOS IPSec LAN2LAN VPN with local on device AES (type 6) encryption of PSK's to protect them. WARNING - This will encrypt your PSK with non-reversible encryption. MAKE SURE YOU HAVE A SECURE BACKUP OF IT. Notes: - xauth is disabled for the peer - AES 256 with PFS using group 5 for phase 1 ISAKMP. - ...
February 17, 2012 –
A recent feature request for hatch was to have a twitter feed. A twitter feed would allow people to be notified when new config templates are created via twitter.
February 16, 2012 –
Configures the use of a NM-16A card in a cisco 2600 router as a terminal server.
February 16, 2012 –
Build an ipsec tunnel between Router A and Router B.
February 16, 2012 –
The following allows you to grab the IOS version of a list of cisco devices.
February 16, 2012 –
login.conf file which configures radius authentication for an OpenBSD host servers file which contains keys for each of these radius servers
February 16, 2012 –
A simple template to setup a django site for apache2 and mod_wsgi.
February 16, 2012 –
F5 base system configuration template. * LACP based 802.1Q trunk for uplink * Failover configuration for HA pair with state mirror and config sync password Dump template output to file and use bigpipe merge. If it errors fix file and try again :-)
February 22, 2012 –
This configures and schedules the pinging of a destination ip address. I tend to define "site codes" which is generally the third octet of a given site's /24 address space. For example: Beijing, China = 192.168.56.0/24 , site code is "56" rtr 56 type echo protocol ipIcmpEcho 192.168.56.1 frequency 300 rtr schedule 56 life forever start-time now Once this is ...
February 16, 2012 –
Create a VLAN and it's L3 interface on Cisco IOS.
February 16, 2012 –
Cisco tcl ping script
February 17, 2012 –
Simple shell script which will ping all devices which are in text file. Please enter your filename %[file]%
February 16, 2012 –
Create Rservers Create Serverfarm Create VIP This is specific to my environment and doesn't create the probes but should be easy enough or enough of a baseline for most simple configs.
February 16, 2012 –
Enables netflow monitoring on the %[interface_to_monitor]% interface and configures netflow exporting to a %[destination_ip]% and %[destination_port]%
February 16, 2012 –
Simple bash script to retrieve ingress and egress traffic statistics for an ipsec tunnel.
February 17, 2012 –
Apache Log4J basic configuration file Test edit.
February 16, 2012 –
A basic Hibernate configuration file
September 26, 2011 –
Simple way to loop through a text file in a shell script using bash.
February 16, 2012 –
This template generates the commands to create a new MySQL user with full permissions on a given database.
February 16, 2012 –
This template helps create apache 2 configurations for django applications using mod_python. The assumed structure is that "/var/www/" is the base path and that sites exist in a directory such as "/var/www/%[app_name]%/. This file should be placed named %[fqdn]% and placed in /var/www/sites-available. After this file is saved you should issue a2ensite %[fqdn]% then restart apache.