升级 FortiGate 固件后打不开 Web 控制台

旧固件版本：5.4.4
新固件版本：5.6.2

1. 进入 CLI
2. 重置 HTTPS server 证书为 "Fortinet_Factory"

config system global
set admin-server-cert "Fortinet_Factory"
next

VirtualBox "Call to WHvSetupPartition failed"

解决方法：关闭 Hyper-V

管理员权限打开PowerShell，执行以下命令后重启：

bcdedit /set hypervisorlaunchtype off

给 RDP 安装证书

准备工作：

1. 安装 Root CA

2. 安装 Intermediate CA
3. IIS 安装签发好的证书

方法一： (PowerShell)

Open a PowerShell console (Runas administrator) on your RD Session Host. Type/paste the commands below:

This command displays the thumbprint of the certificate, copy it to a text file or something similar:

Get-ChildItem "Cert:\LocalMachine\My"

This is a variable to set the WMI path to the RD Session Host RDP listener (Where the certificate needs to be changed):

$PATH = (Get-WmiObject -class "Win32_TSGeneralSetting" -Namespace root\cimv2\terminalservices)

Finally this is the command to change the active certificate on the RDP listener:

Set-WmiInstance -Path $PATH -argument @{SSLCertificateSHA1Hash="thumbprint"}

The "thumbprint" above, is the value you noted earlier, just insert it between the ".

参考：
https://social.technet.microsoft.com/Forums/en-US/bcedb97f-b86f-485a-a39f-579f947cf367/how-install-ssl-certificate-for-rds-on-windows-server-2016?forum=winserverTS

https://serverfault.com/questions/444286/configure-custom-ssl-certificate-for-rdp-on-windows-server-2012-and-later-in-r


方法二：

wmic /namespace:\\root\cimv2\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash="thumbprint"

参考：
 https://blog.brankovucinec.com/2016/12/06/how-to-install-custom-certificate-on-rdsh-server/

理解 Cisco ACL Vlan 的 in 和 out

1.

2.

An access-list applied outbound to a vlan interface filters traffic going TO machines on that vlan.
An access-list applied inbound to a vlan filters traffic coming FROM machines on that vlan.

 参考：
https://community.cisco.com/t5/switching/acl-direction-when-applied-to-a-vlan-on-a-switch/td-p/1423652