tukang-tukang oprek

Iphone 3G

vietrha — Wed, 14 May 2008 02:33:29 +0000

iphone with 3G ? yup it’s coming soon guys

Descriptions:

Almost have the same size and shape as the first iphone

3G HSDPA and GPS

5 Megapixels Camera

Push Email: the next generation iPhone will support Microsoft’s business e-mail server software Microsoft Exchange and a “push” email functionality similar to BlackBerry
Comes with 8 GB and 16 GB storage

hope can afford it though, or maybe i should give up my p1i ? anyone interested in my p1i? it’s still in perfect condition and complete package

Regards,

Indrajaya Pitra Perdana

Enhanced the Speed of P1i

vietrha — Tue, 13 May 2008 10:09:34 +0000

There are few things i like to share with u all p1i users
how to enhanced the speed of p1i when using contacs and messaging application in p1i
Quite simple, just follow these steps:

Unlock your phone and try to remember the speed of your application such as contacts and messaging like create new, scroll, search by letter and etc
Get and install pips_uiq_1_2_ss.sis from uiqblog
Get and install stdioserver_uiq_1_0.sis from uiqblog
Restart the phone
Do point 1 and compare the speed

Regards,

Indrajaya Pitra Perdana

Simple Script for Backuping Files

oprekan — Fri, 18 Apr 2008 07:10:14 +0000

#/bin/bash
#cd /
mt -f /dev/st0 status
sleep 3
mt -f /dev/st0 rewind
sleep 3
tar -cvf /dev/st0 -b 512 /var/www/ /var/lib/mysql/ /etc/httpd/ /var/named/chroot/ /etc/php.ini /etc/named.conf /etc/my.cnf > /var/log/backup/backup-tape-`date “+%Y%m%d”`.txt
sleep 2
gzip /var/log/backup/backup-tape-`date “+%Y%m%d”`.txt
sleep 20
#chown nmc /var/log/backup/backup-log-`date “+%Y%m%d”`.txt.gz
mt -f /dev/st0 offline

Here the data in which will be backed up by the script :

/var/www/ –> File-file web
/var/lib/mysql/ –> file-file databases
/etc/httpd/ –> Configuration Apache Web Server
/var/named/chroot/ –> Database Record DNS
/etc/php.ini –> Configuration PHP
/etc/named.conf –> Configuration DNS server
/etc/my.cnf –> Configuration MySQL Server

– IP –

Cisco STP for Redundancy & Resiliency

oprekan — Tue, 15 Apr 2008 12:02:44 +0000

Using STP for Redundancy, gives you :

- Resilience Time about 2 seconds for Link Recovery once primary trunk goes down and took over by the second one
- Resilience Time about 25 seconds for Link Recovery once primary trunk goes up and took over the link from the secondary trunk

Connection Scheme :

a. SWITCH 1 [SW1]
- Port F0/1 Trunked to Port F0/2 [SW2]
- Port F0/2 Trunked to Port F0/1 [SW3]
- Port F0/24 Vlan Access 20 to PC-A
b. SWITCH 2 [SW2]
- Port F0/1 Trunked to Port F0/2 [SW3]
- Port F0/2 Trunked to Port F0/1 [SW1]
c. SWITCH 3 [SW3]
- Port F0/1 Trunked to Port F0/2 [SW1]
- Port F0/2 Trunked to Port F0/1 [SW2]
- Port F0/24 Vlan Access 20 to PC-B

IP Address :
PC-A : 10.10.10.2 /24
PC-B : 10.10.10.3 /24

+++++++++++++++++++++++++++++++++++++++
SWITCH 1 :

interface FastEthernet0/1
duplex full
speed 100
switchport mode trunk
spanning-tree vlan 1 port-priority 1
!
interface FastEthernet0/2
duplex full
speed 100
switchport mode trunk
spanning-tree vlan 1 port-priority 2

interface FastEthernet0/24
duplex full
speed 100
switchport access vlan 20
spanning-tree portfast

++++++++++++++++++++++++++++++++++++++++

SWITCH 2 :

SWITCH-3 :

interface FastEthernet0/24
duplex full
speed 100
switchport access vlan 20
spanning-tree portfast
+++++++++++++++++++++++++++++++++++++++++

rgs
a. rahman isnaini r.sutan

Factors may cause “Cisco High CPU”

oprekan — Tue, 15 Apr 2008 06:39:25 +0000

From we have been through for years, High CPU may caused by :

a. IP Input
b. BGP Router
c. BGP Scanner
d. Virtual Exec

as they seen in below captured realtime cpu process :

CPU utilization for five seconds: 18%/18%; one minute: 20%; five minutes: 21%
47 2297526152-2139485143 0 0.07% 0.08% 0.11% 0 IP Input
126 12 1483 8 0.00% 0.00% 0.00% 2 Virtual Exec
133 15002844 84059163 178 0.15% 0.01% 0.00% 0 BGP Router
136 688579928 4168349 165198 0.00% 1.98% 2.61% 0 BGP Scanner

Suggestion :

1. IP Input
- Check Number of & Move IP Secondaries on one interfaces, simplify !
- Enable “ip cef” in global config
- Enable “ip route-cache same interface” on interface
- Enable “ip route-cache cef” on interface
- Check “ip nbar protocol discovery” on interface, disabled if it’s not needed !
- Check number of access-list rows
- Remove “log” sufix in access-list if it’s not needed
- Simplify your access-list by aggregating or use null 0 to block specific IP/Prefix
- Check service policy and how it matches the conditions (acl, prefix, ect), simplify !
- Check policy map and how it matches the conditions (acl, prefix, ect), simplify !

2. BGP Routing & Scanning
- Enable Fast switching [CEF]
- Filter more routes or internet routing table size (not full route)
- Check your Memory & Upgrade if needed
- Simplify your BGP config
- Simplify neighbors (peer-group).

3. Virtual Exec
- Check & Limit VTY
- Restrict VTY idle time login
- Check logging console > disabled
- Check Logging monitor > disabled

Other thing, simplify your config by removing any unused :

- access-list
- policy-map
- route-map
- prefix-list
- as-path access-list
- static routes
- BackUp your config periodically or even in shortime, should changes always made to this engine.

a. rahman isnaini r.sutan
2404:170:253::10

Cisco IP NBAR Protocol Discovery > Causing Extreme High CPU

oprekan — Mon, 14 Apr 2008 07:53:08 +0000

Finding another factor of what really makes your Cisco CPU High ?

Check this “ip nbar protocol-discovery”. if this not really necessary please have this remove.

You’ll have more and more extreme space on CPU heap.

ip nbar protocol-discovery

To configure Networked-Based Application Recognition (NBAR) to discover traffic for all protocols known to NBAR on a particular interface, use the ip nbar protocol-discovery interface configuration command. To disable traffic discovery, use the no form of this command.

ip nbar protocol-discovery

no ip nbar protocol-discovery

Example :

interface G 0/1

ip nbar protocol-discovery


Before Removing (2) IP NBAR DISCOVERY PROTOCOL on 2 GIG INTERFACES :

CPU utilization PID Runtime(ms)   Invoked 1           0         2 2       28336   5898931 3       70576  25848112 4           0         1 5   224966592  11311155 6       11712    159024 7           0         2 8           0         2 9           0         2 10           0         2 11           0         2 12           0         2 13     2965596  29327850 14          12 15        3944    491833 16           0         1 17      134516  29326709 18      105216  29326722 19           0         1 20      251292   1560171 21       99744   7320085 22           0         2 23           0         4 24           0         1 25      109144  29326651 26           0         2 27           0         9 28    58604344   8771551 29      147952   8664207 30      232880  29326703 31    24549660  29325429 32           0         1 33           0         1 34           0         1 35           0         1 36           0         2 37           0         1 38           0         2 39           0         2 40           0         2 41           8      2435 42           0         2 43           0         1 44           0         1 45           0         1 46           0         2

for five seconds: 75%/74%; one minute: 78%; five minutes: 77%
 uSecs   5Sec   1Min   5Min TTY Process
 0  0.00%  0.00%  0.00%   0 Chunk Manager
 4  0.00%  0.00%  0.00%   0 Load Meter
 2  0.00%  0.00%  0.00%   0 NTP
 0  0.00%  0.00%  0.00%   0 EDDRI_MAIN
 19889  0.00%  0.20%  0.28%   0 Check heaps
 73  0.00%  0.00%  0.00%   0 Pool Manager
 0  0.00%  0.00%  0.00%   0 Timers
 0  0.00%  0.00%  0.00%   0 Serial Backgroun
 0  0.00%  0.00%  0.00%   0 ATM Idle Timer
 0  0.00%  0.00%  0.00%   0 ATM AutoVC Perio
 0  0.00%  0.00%  0.00%   0 ATM VC Auto Crea
 0  0.00%  0.00%  0.00%   0 AAA high-capacit
 101  0.00%  0.00%  0.00%   0 EnvMon
 3       4000  0.00%  0.00%  0.00%   0 OIR Handler
 8  0.00%  0.00%  0.00%   0 IPC Dynamic Cach
 0  0.00%  0.00%  0.00%   0 IPC Zone Manager
 4  0.00%  0.00%  0.00%   0 IPC Periodic Tim
 3  0.00%  0.00%  0.00%   0 IPC Deferred Por
 0  0.00%  0.00%  0.00%   0 IPC Seat Manager
 161  0.00%  0.00%  0.00%   0 ARP Input
 13  0.00%  0.00%  0.00%   0 HC Counter Timer
 0  0.00%  0.00%  0.00%   0 DDR Timers
 0  0.00%  0.00%  0.00%   0 Entity MIB API
 0  0.00%  0.00%  0.00%   0 SERIAL A'detect
 3  0.00%  0.00%  0.00%   0 GraphIt
 0  0.00%  0.00%  0.00%   0 Dialer event
 0  0.00%  0.00%  0.00%   0 Critical Bkgnd
 6681  0.15%  0.17%  0.14%   0 Net Background
 17  0.00%  0.00%  0.00%   0 Logger
 7  0.00%  0.00%  0.00%   0 TTY Background
 837  0.23%  0.22%  0.25%   0 Per-Second Jobs
 0  0.00%  0.00%  0.00%   0 Inode Table Dest
 0  0.00%  0.00%  0.00%   0 CSP Timer
 0  0.00%  0.00%  0.00%   0 SONET alarm time
 0  0.00%  0.00%  0.00%   0 POS APS Event Pr
 0  0.00%  0.00%  0.00%   0 VNM DSPRM MAIN
 0  0.00%  0.00%  0.00%   0 CES Line Conditi
 0  0.00%  0.00%  0.00%   0 Flash MIB Update
 0  0.00%  0.00%  0.00%   0 ATM OAM Input
 0  0.00%  0.00%  0.00%   0 ATM OAM TIMER
 3  0.00%  0.00%  0.00%   0 TurboACL
 0  0.00%  0.00%  0.00%   0 AAA Server
 0  0.00%  0.00%  0.00%   0 AAA ACCT Proc
 0  0.00%  0.00%  0.00%   0 ACCT Periodic Pr
 0  0.00%  0.00%  0.00%   0 AAA_SERVER_DEADT
 0  0.00%  0.00%  0.00%   0 AAA Dictionary R
After Removing (2) IP NBAR DISCOVERY PROTOCOL on 2 GIG INTERFACES :
CPU utilization for five seconds: 18%/18%; one minute: 28%; five minutes: 38%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

1           0         2          0  0.00%  0.00%  0.00%   0 Chunk Manager

2       28340   5899323          4  0.00%  0.00%  0.00%   0 Load Meter

3       70584  25850083          2  0.00%  0.00%  0.00%   0 NTP

4           0         1          0  0.00%  0.00%  0.00%   0 EDDRI_MAIN

5   224984364  11312051      19888  0.00%  0.73%  0.48%   0 Check heaps

6       11712    159024         73  0.00%  0.00%  0.00%   0 Pool Manager

7           0         2          0  0.00%  0.00%  0.00%   0 Timers

8           0         2          0  0.00%  0.00%  0.00%   0 Serial Backgroun

9           0         2          0  0.00%  0.00%  0.00%   0 ATM Idle Timer

10           0         2          0  0.00%  0.00%  0.00%   0 ATM AutoVC Perio

11           0         2          0  0.00%  0.00%  0.00%   0 ATM VC Auto Crea

12           0         2          0  0.00%  0.00%  0.00%   0 AAA high-capacit

13     2965608  29329775        101  0.00%  0.00%  0.00%   0 EnvMon

14          12         3       4000  0.00%  0.00%  0.00%   0 OIR Handler

15        3944    491865          8  0.00%  0.00%  0.00%   0 IPC Dynamic Cach

16           0         1          0  0.00%  0.00%  0.00%   0 IPC Zone Manager

17      134524  29328634          4  0.00%  0.00%  0.00%   0 IPC Periodic Tim

18      105240  29328647          3  0.00%  0.00%  0.00%   0 IPC Deferred Por

19           0         1          0  0.00%  0.00%  0.00%   0 IPC Seat Manager

20      251308   1560257        161  0.00%  0.00%  0.00%   0 ARP Input

21       99748   7320571         13  0.00%  0.00%  0.00%   0 HC Counter Timer

22           0         2          0  0.00%  0.00%  0.00%   0 DDR Timers

23           0         4          0  0.00%  0.00%  0.00%   0 Entity MIB API

24           0         1          0  0.00%  0.00%  0.00%   0 SERIAL A'detect

25      109168  29328576          3  0.00%  0.00%  0.00%   0 GraphIt

26           0         2          0  0.00%  0.00%  0.00%   0 Dialer event

27           0         9          0  0.00%  0.00%  0.00%   0 Critical Bkgnd

28    58610892   8772010       6681  0.00%  0.12%  0.12%   0 Net Background

29      147952   8664221         17  0.00%  0.00%  0.00%   0 Logger

30      232940  29328628          7  0.00%  0.00%  0.00%   0 TTY Background

31    24559620  29327354        837  0.00%  0.00%  0.00%   0 Per-Second Jobs

32           0         1          0  0.00%  0.00%  0.00%   0 Inode Table Dest

33           0         1          0  0.00%  0.00%  0.00%   0 CSP Timer

34           0         1          0  0.00%  0.00%  0.00%   0 SONET alarm time

35           0         1          0  0.00%  0.00%  0.00%   0 POS APS Event Pr

36           0         2          0  0.00%  0.00%  0.00%   0 VNM DSPRM MAIN

37           0         1          0  0.00%  0.00%  0.00%   0 CES Line Conditi

38           0         2          0  0.00%  0.00%  0.00%   0 Flash MIB Update

39           0         2          0  0.00%  0.00%  0.00%   0 ATM OAM Input

40           0         2          0  0.00%  0.00%  0.00%   0 ATM OAM TIMER

41           8      2435          3  0.00%  0.00%  0.00%   0 TurboACL

42           0         2          0  0.00%  0.00%  0.00%   0 AAA Server

43           0         1          0  0.00%  0.00%  0.00%   0 AAA ACCT Proc

44           0         1          0  0.00%  0.00%  0.00%   0 ACCT Periodic Pr

45           0         1          0  0.00%  0.00%  0.00%   0 AAA_SERVER_DEADT

46           0         2          0  0.00%  0.00%  0.00%   0 AAA Dictionary R

a. rahman isnaini r.sutan

Cisco ACL and HIGH CPU due to IP INPUT

oprekan — Fri, 11 Apr 2008 10:58:24 +0000

High CPU – IP Input on Cisco Router [PART II]

As written in Part I Cisco High CPU due to IP Input :

PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
47 22949526882139777808 1072 21.11% 26.99% 29.53% 0 IP Input

And everything has been checked on the list detail explained.
One more thing today I found : ACL rows + log.
The more rows more CPU resources.
It’s going to raise more if you have log applied at the end of acl row.

I’ve been minimizing and simplifizing my ACL.
It’s getting more and more space on CPU resources available that would give a more stable performance of your gear.

My suggestions :

- Remove the log sufix if it’s not realy needed.
- Replace deny ip host/network with null route (static).

That’s all

rgs.
a. rahman isnaini r.sutan

Youtube FITNA & Cisco Regex Filter [NBAR] – Tested : OK

oprekan — Tue, 08 Apr 2008 03:45:21 +0000

Sehubungan dengan keluarnya peraturan menteri serta kegelisahan para pengakses Youtube, yang mengharuskan setiap ISP block youtube sampai keakar2nya. Berikut ada sekelumit solution dari Cisco..

Proven, mampu meblock setiap pencarian dengan kata2 fitna, terkecuali sudah dalam bentuk video, maka string value videonya harus ditambahkan dalam list class-map. Jadi ibarat cerita rekan2 Opisboy membunuh tikus tepat pada jantungnya )

Steps

1. Config Class Map untuk match apa saja dalam baris protocol

class-map match-any URL-FITNA
match protocol http url “*fitna*”
match protocol http url “*fitna”
match protocol http url “fitna*”
match protocol http url “*spysurfing.com*”
match protocol http url “spysurfing.com*”
match protocol http url “*spysurfing.com”

2. Config Policy Map untuk Mark Traffic FITNA ini (DSCP x) (question : koq DSCP 10 jadi AF11 yah ?, makanya pakai 5).
policy-map FILTER-FITNA
class URL-FITNA
set ip dscp 5

3. Buat Access _ List untuk match marking traffic (DSCP) sesuai dengan Policy Route-Map yang akan di Null.

access-list 150 permit ip any any dscp 5
access-list 150 deny ip any any

4. Buat Route-Map untuk Null traffic sesuai access-list
route-map FITNA-BLOCK permit 10
match ip address 150
set interface Null0

5. Apply Service Policy di Interface LAN-SIAPA-YANG-MAU-AKSES.. juga apply IP Policy ROute-Map
int f0/0.6
desc LAN-ENGINEER-ACCESS-URL-STRING-FITNA
ip policy route-map FITNA-BLOCK
service-policy input FILTER-FITNA

Untuk Dikshie, CPU increase sementara dengan 1 PC access tidak ada. Mungkin dengan user banyak akan nambah resources, dan masih dalam pengamatan..

Wassalam

a. rahman isnaini r.sutan

Secured Path via Public Network using IPSec [No Tunnel]

oprekan — Tue, 01 Apr 2008 10:57:54 +0000

Securing your private traffic over public network wihout tunnel established ?
Scheme below is config at first site, with purpose of securing traffic from host 192.168.32.13 only to hosts 78.74.95.90 & host 78.74.95.94
by the way of mapping & encrypting with IPSec technology.

Here is the config :

SITE : A

crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp policy 2
encr 3des
authentication pre-share
group 2
lifetime 3600
crypto isakmp key S3CUR3D-P4TH address 192.168.27.2
!
!
crypto ipsec transform-set r3m0t3 esp-3des esp-sha-hmac
!
crypto map secured-path 1 ipsec-isakmp
description to-REMOTE-SITE
set peer 192.168.27.2
set security-association lifetime seconds 28800
set transform-set r3m0t3
set pfs group2
match address 133

interface GigabitEthernet0/3.11
description SECURED-SEGMENT-32-0/23
encapsulation dot1Q 11
ip address 192.168.33.32 255.255.254.0
crypto map secured-path

access-list 133 remark SECURED-SEGMENT-MAPPED-IPSec
access-list 133 permit ip host 192.168.32.13 host 78.74.95.90
access-list 133 permit ip host 192.168.32.13 host 78.74.95.94
access-list 133 deny ip any any

SITE B :

crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp policy 2
encr 3des
authentication pre-share
group 2
lifetime 3600
crypto isakmp key S3CUR3D-P4TH address 192.168.33.32
!
!
crypto ipsec transform-set r3m0t3 esp-3des esp-sha-hmac
!
crypto map secured-path 1 ipsec-isakmp
description to-SITE-A
set peer 192.168.33.32
set security-association lifetime seconds 28800
set transform-set r3m0t3
set pfs group2
match address 133

interface GigabitEthernet0/3.11
description SECURED-SEGMENT-32-0/23
encapsulation dot1Q 11
ip address 192.168.27.2 255.255.255.0
crypto map secured-path

access-list 133 remark SECURED-SEGMENT-MAPPED-IPSec
access-list 133 permit ip host 78.74.95.90 host 192.168.32.13
access-list 133 permit ip host 78.74.95.94 host 192.168.32.13
access-list 133 deny ip any any

Wassalam
a. rahman isnaini r.sutan

Lenovo 3000 G400 [DRIVERS]

oprekan — Wed, 19 Mar 2008 13:23:29 +0000

Pretty cool black.
Instalasi Driver tidak serumit Acer 4310.
Meski sama2 bawaan untuk Windows Vista.
Namun Lenovo 3000 G400 jauh lebih mudah.

Semua proses tinggal diikuti.
Yang penting untuk WinXP adalah 2 Driver :

- Chipset
- VGA / Intel Display

Silakan download disini untuk WinXP
Karena dari CD bawaan adalah untuk Windows Vista

http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-68891

Sebenarnya kalo dipaksa menggunakan Driver Vista bisa juga.
Namun untuk Game seperti Revolt & Crazy taxi tidak jalan.
Ada Error “No Available Zbuffer”

Demikian

a. rahman isnaini r.sutan