InfoSecMonkey: No fluff. Just the config that works.

Category Archives: Network

FortiGate IP-in-IP Tunnels: Configuring, Interoperating, and Knowing When to Use ipip-tunnel

FortiGate IP-in-IP Tunnels: Configuring, Interoperating, and Knowing When to Use ipip-tunnel

Learn FortiGate ipip-tunnel configuration. Build RFC 2003 compliant IPv4-in-IPv4 tunnels, compare IPIP to GRE, and write working firewall policies for overlays.

Read More
FortiGate l2forward: Bridging Non-IP Frames in Transparent Mode (and Why It Does Nothing in NAT Mode)

FortiGate l2forward: Bridging Non-IP Frames in Transparent Mode (and Why It Does Nothing in NAT Mode)

Configure FortiGate l2forward transparent mode to bridge non-IP frames like PPPoE. Learn why this setting is required for Layer 2 passthrough and why it...

Read More
RFC 1918 Private Address Space: The Practitioner’s Guide

RFC 1918 Private Address Space: The Practitioner’s Guide

Enforce RFC 1918 on FortiGate to block private IP leaks. Configure ACLs and BGP filters to prevent routing collisions and secure your edge.

Read More
ITsecur Firewall for Webmin: A Point-and-Click IPTables GUI

ITsecur Firewall for Webmin: A Point-and-Click IPTables GUI

Install the ITsecur Firewall Webmin module on Rocky Linux 9. Replace firewalld with iptables, configure NAT, and manage stateful rules via a point-and-click GUI.

Read More
HopMatrix: A great little tool packed with features

HopMatrix: A great little tool packed with features

Master HopMatrix network troubleshooting. Install the tool, verify signatures, and use all 8 modes for ECMP traces, SNMP, and iPerf3 testing.

Read More
Configuring VRRP on FortiGate Firewalls

Configuring VRRP on FortiGate Firewalls

Configure VRRP on FortiGate using CLI for first-hop redundancy. Learn to set up virtual IPs, priorities, and failover without FGCP HA clusters.

Read More
LLDP on FortiSwitch Managed by FortiLink

LLDP on FortiSwitch Managed by FortiLink

Enable LLDP on FortiSwitch ports using FortiLink CLI. Learn to configure rx-tx status and view neighbor details to identify connected device IPs.

Read More
FortiGate Wildcard Addresses: The IP Kind, Not the FQDN Kind

FortiGate Wildcard Addresses: The IP Kind, Not the FQDN Kind

Configure FortiGate wildcard address objects for non-contiguous IP matching. Learn the bit math, avoid the Cisco trap, and verify policy hits.

Read More
IANA Reserved IP Address Space

IANA Reserved IP Address Space

Master IANA reserved IP address space for secure network design. Learn RFC 1918 rules, bogon filtering, and FortiGate config to prevent routing leaks.

Read More
FortiGate Route-Tag Address Objects: Firewall Rules That Follow Your BGP Table

FortiGate Route-Tag Address Objects: Firewall Rules That Follow Your BGP Table

Configure FortiGate route-tag address objects to automate firewall policies. Learn how to map BGP routes to dynamic address objects in FortiOS 7.4 without manual...

Read More
RFC 6598 Explained: The Shared Address Space Behind Carrier-Grade NAT

RFC 6598 Explained: The Shared Address Space Behind Carrier-Grade NAT

Understand RFC 6598 shared address space for Carrier Grade NAT. Learn to configure FortiGate for CGN, fix traceroute gaps, and update security blocklists.

Read More
IP Addressing and VLSM Made Simple for Beginners

IP Addressing and VLSM Made Simple for Beginners

Learn VLSM subnetting with a clear worked example. Master IP addressing, CIDR notation, and how to allocate variable length subnets without wasting address space.

Read More
IPv6 Deep Dive: A Training Guide for Engineers Who Have Never Really Used It

IPv6 Deep Dive: A Training Guide for Engineers Who Have Never Really Used It

Master IPv6 address configuration with this practical guide. Learn SLAAC, DHCPv6, and Neighbor Discovery. Get working configs for FortiGate, Linux, and Cisco.

Read More
Deploying Fortinet IPAM on FortiOS: Centralized IP Address Management Across the Security Fabric

Deploying Fortinet IPAM on FortiOS: Centralized IP Address Management Across the Security Fabric

Configure FortiOS IPAM to automate subnet allocation across the Security Fabric. Define pools, set rules, and integrate DHCP without manual spreadsheets.

Read More
DHCP Server Health Checks on macOS with dhcping

DHCP Server Health Checks on macOS with dhcping

Run dhcping macOS health checks to verify DHCP server availability. Install via Homebrew, handle sudo privileges, and configure targeted probes for reliable monitoring.

Read More
ipcalc Deep Dive: Mastering Subnet Math Across Every Linux Implementation and Homebrew

ipcalc Deep Dive: Mastering Subnet Math Across Every Linux Implementation and Homebrew

Master ipcalc Linux subnetting across Debian, RHEL, and BusyBox. Identify your implementation, handle VLSM splitting, and avoid parsing traps in automation scripts.

Read More
Creating and IP Addressing Scheme Design

Creating and IP Addressing Scheme Design

Master IP addressing scheme design with this practical framework. Learn VLSM, summarization, and segmentation rules to build scalable, secure network infrastructure.

Read More
The FortiGate Interfaces You Never Created: naf.root, ssl.root, and Every Default VLAN Explained

The FortiGate Interfaces You Never Created: naf.root, ssl.root, and Every Default VLAN Explained

Identify and manage FortiGate default interfaces like naf.root, ssl.root, and FortiLink VLANs. Learn which are removable and how to avoid config collisions.

Read More