Just a little Blog

MPLS

2009-10-08T02:03:00.001-07:00

MPLS - Presentation Transcript
MPLS ( Multiprotocol Label Switching ) Oleh : Sunaryo Tandi N I M : 0801050005
Pengertian MPLS
Multiprotocol Label Switching (disingkat menjadi MPLS ) adalah teknologi penyampaian paket pada jaringan backbone berkecepatan tinggi.
Asas kerjanya menggabungkan beberapa kelebihan dari sistem komunikasi circuit-switched dan packet-switched yang melahirkan teknologi yang lebih baik dari keduanya
MPLS berada di antara lapisan kedua dan ketiga.
OSI
OSI sendiri merupakan singkatan dari Open System Interconnection . Model ini disebut juga dengan model " Model tujuh lapis OSI " ( OSI seven layer model ).
Managed IP Services Layer 4+ Data Services Contoh Aplikasi per Layer OSI System Integrator Layer 7 Application & Outsourcing Service Provider Layer 2 - 3 IP VPN Wireless Data Metro Optical Ethernet Internet Access Data Transport TDM Transport Enhanced Communication Transaction Processing Application Hosting Application Development System Management System Integration Business Process Consulting Hardware Management &support Network Operation & Management Application Management Content Delivery LAN Management IP Voice PBX/IP Centrex Storage Disaster Recovery Web Hosting Managed Security Video Conferencing
Prinsip kerja MPLS Routing Qos POLICY Forwading PAKET OUT PAKET IN SIGNALLING
Prinsip kerja MPLS
Menggabungkan kecepatan switching pada layer 2 dengan kemampuan routing dan skalabilitas pada layer 3
menyelipkan label di antara header layer 2 dan layer 3 pada paket yang diteruskan
Label dihasilkan oleh Label-Switching Router (LSR)
Label berisi informasi tujuan node selanjutnya kemana paket harus dikirim
Paket-paket diteruskan dalam path yang disebut LSP ( Label Switching Path ).
MPLS di Hirarki Network
Komponen MPLS
Label Switched Path (LSP): Merupakan jalur yang melalui satu atau serangkaian LSR dimana paket diteruskan oleh label swapping dari satu MPLS node ke MPLS node yang lain.
Label Switching Router : MPLS node yang mampu meneruskan paket-paket layer-3
MPLS Edge Node atau Label Edge Router (LER) : MPLS node yang menghubungkan sebuah MPLS domain dengan node yang berada diluar MPLS domain
MPLS Egress Node : MPLS node yang mengatur trafik saat meninggalkan MPLS domain
MPLS ingress Node : MPLS node yang mengatur trafik saat akan memasuki MPLS domain
MPLS label : merupakan label yang ditempatkan sebagai MPLS header
MPLS node : node yang menjalankan MPLS. MPLS node ini sebagai control protokol yang akan meneruskan paket berdasarkan label.
Keuntungan Menggunakan MPLS
MPLS benefits include better performance, lower total cost of ownership, greater flexibility to accommodate new technologies, better security and survivability.
Better performance: Uses Classes of Service (CoS/QoS) and priority queuing so your network knows which traffic is most important and ensures that it takes priority over other traffic.
Depending on your current enterprise class network, you can reduce your on-going WAN operating costs by up to 50%, while maintaining a high level of reliability and service.
“ Future-proof” the architecture of your network so it can respond rapidly to changing business needs (e.g. New services, latency sensitive traffic, bandwidth intensive traffic , VoIP, video).
Lower packet loss means faster response for many applications.
Keuntungan Menggunakan MPLS
Network survivability from its fully meshed nature.
Consolidate your network to a single, enterprise-wide view of your sites/group of companies.
Have the option to deliver firewalled internet access from the cloud to specified facilities to eliminate internet local loop costs
Reduce the time and cost involved in managing a technologically disparate “system of systems”.
Online reporting allows you to truly see what is happening on your network so you subscribe only to the bandwidth that you really need.
Simplify the administration and on-going management of your network.
VPN dengan MPLS
Salah satu feature MPLS adalah kemampuan membentuk tunnel atau virtual circuit yang melintasi networknya. Kemampuan ini membuat MPLS berfungsi sebagai platform alami untuk membangun virtual private network (VPN).
VPN yang dibangun dengan MPLS sangat berbeda dengan VPN yang hanya dibangun berdasarkan teknologi IP
VPN pada MPLS lebih mirip dengan virtual circuit dari FR atau ATM, yang dibangun dengan membentuk isolasi trafik.
Lapisan pengamanan tambahan seperti IPSec dapat diaplikasikan untuk data security.
Keuntungan VPN MPLS
Paket data dikirimkan berdasarkan kode-kode yang ada pada label. Tiap paket data yang dikirim akan membawa sebuah label yang mengindentifikasikan tujuannya.
Memungkinkan untuk membuat konfigurasi mesh dalam jasa penyelenggara telekomunikasi, tidak perlu dikonfigurasikan sendiri oleh pelanggan (Jaringan cost-effective fully-mesh topologies )
Tidak membutuhkan perangkat tambahan (seperti halnya IP Sec via Internet) di sisi pelanggan – enskapsulation MPLS terjadi di dalam jaringan penyelenggara
Memungkinkan bundling value added services ke dalam MPLS-VPN (Internet, voice dan data secara bersamaan).
Terima Kasih

Source http://www.slideshare.net/idnats/mpls

detikcom : Lewat FastFlip, Google Jadikan Internet Bagai Majalah

2009-09-14T19:11:00.001-07:00

title : Lewat FastFlip, Google Jadikan Internet Bagai Majalah
summary : Google memperkenalkan cara baru mereka dalam menampilkan berita-berita dari internet. Berbagai situs web ditampilkan bagai majalah. (read more)

Enabling Multiple Remote Desktop Sessions in Windows XP Professional and Media Center Edition 2005

2009-09-10T23:26:00.000-07:00

If you have ever used a real remote computer system like Citrix, then you have probably been craving multiple Remote Desktop sessions since you first fired up Windows XP Professional and/or Media Center Edition. Here is a HACK (translated: USE AT YOUR OWN RISK), to enable multiple Remote Desktop sessions on your XP Pro or MCE 2005 box:

NOTE: You will have to have knowledge of the Windows operating system and more specifically the Windows Registry. If you have no experience with the registry, then I would recommend you find someone who does or leave these alone. I do not make any kind of warranty that this will work for you or your friends. This is provided for entertainment purposes only. Don’t call me if your computer stops working. Got it?

Print these directions so that you have them to work from.

Restart your computer in Safe Mode - Follow this link to learn how to restart Windows XP in Safe Mode
Turn off/disable Remote Desktop Connection (RDC) and Terminal Services

Right click My Computer
Select Properties
Click on the Remote tab at the top of the window
UNCHECK the box next to, “Allow users to connect remotely to this computer“
Click OK
Go to Start -> Control Panel -> Administrative Tools -> Services
Find Terminal Services in the list
Right click on Terminal Services and click Properties
In the Startup Type box, select Disabled
Click OK to close the window

Next you will replace the current version of the Terminal Services DLL (termsrv.dll) with an unrestricted version from a previous release of Terminal Services.

Here is a copy of the Terminal Services DLL - Save it to your Desktop or other suitable location
Using a file manager like Windows Explorer open C:\Windows\system32\dllcache
Rename the file termsrv.dll to termsrv_dll.bak or whatever you would like.
Copy the downloaded termsrv.dll file (the one you just downloaded from the web) to C:\Windows\system32\dllcache
Open the C:\Windows\system32 folder
Delete the file termsrv.dll in C:\Windows\system32

Now we can edit the Windows Registry to enable more than one RDP connection. Go to Start -> Run and type regedit - Hopefully you knew that already

Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Licensing Core

Add a DWORD Key named EnableConcurrentSessions and give it a value of 1

Close the Registry Editor window

Go to Start -> Run and type gpedit.msc to run the Group Policy Editor

Browse to Computer Configuration -> Administrative Templates -> Windows Components -> Terminal Services and double click Limit number of connections

Select the Enabled button and enter the number of connections you would like to enable….at least 2.

Restart Windows

Right click My Computer and select Properties.

Click on the Remote tab at the top of the window

CHECK the box next to, “Allow users to connect remotely to this computer“

Click OK

Go to Start -> Control Panel ->Administrative Tools -> Services. Select Terminal Services from the list and double click it or right-click -> Properties. Set the Startup Type to Manual.

Restart Windows/Computer

You should be good to go.

Menghilangkan tanda pagar (#) pada file konfigurasi di linux

2009-09-10T20:49:00.000-07:00

Sering kali kita merasa disulitkan oleh banyaknya tanda pagar (#) pada file-file di linux, padahal yang akan belum tentu kita merasa perlu untuk membaca tulisan yang ada di belakang tanda tersebut.
Berikut cara simple untuk melihat suatu file konfigurasi pada linux tanpa menampilkan tanda pagar (#). Lewat command line interface, jalankan perintah berikut;

cat /lokasi/file/file.conf | sed '/ *#/d; /^ *$/d'

Open Source VOIP Software

2009-09-10T20:09:00.000-07:00

Open Source VOIP applications, both clients and servers.
Open source means all source code is available!! Do not post any "free but not open" software here!

SIP Proxies
Mini-SIP-Proxy A very tiny perl POE based SIP proxy
MjServer: cross-platform SIP proxy/registrar/redirect, written in java, based on MjSip stack
MySIPSwitch: SIP Proxy server which allows using multiple SIP accounts with a single SIP login
NethidPro3.0.6 Opensource Sip Encryption Bridge: www.vonets.com
Net-SIP A Perl SIP framework that includes a stateless proxy
JAIN-SIP Proxy
OpenSBC: MPL licensed SIP proxy/registrar/B2BUA with NAT traversal and ENUM
OpenSER: GPL SIP Server with TLS support - renamed to Kamailio
OpenSIPS forked from OpenSER.
partysip
SaRP SIP and RTP Proxy in Perl
sipd SIP Proxy
SIP Express Router (SER): the SIP router/proxy/jack-in-all-trades from IPtel.org
Siproxd SIP and RTP Proxy
SIPVicious tool suite: tools for auditing sip devices
sipX The SIP PBX for Linux: Complete, native SIP PBX solution from SIPfoundry
Vocal SIP softswitch with H.323 and MGCP translators for non-SIP endpoints
Yxa: Written in the Erlang programming language

SIP Clients (UA's)
Linux clients:
Cockatoo
Ekiga || SIP, H.323 audio and video softphone for various linux, solaris, windows, and various unix systems. Formerly GnomeMeeting
FreeSWITCH: Console client for SIP, IAX2, Woomera and Jingle/Google Talk
JPhone Rich software SDK support softphone development, Windows, Linux, ThreadX, Vxworks etc.
Kphone
Linphone audio and video SIP softphone for Linux and Windows XP
minisip cross-platform SIP softphone, Linux, Windows XP and soon Windows Mobile 2003 SE
MjUA: simple cross-platform SIP softphone, written in java, based on MjSip stack
OpenSIPStack MPL licensed SIP stack with ENUM, Presence (XMPP/SIMPLE) and NAT traversal. Reference implementation of Session Border Controller (OpenSBC) available.
OpenZoep: GPL telephone and IM messaging client engine
Peers Minimalist SIP softphone written in java (tested on linux and windows)
PhoneGaim
PJSUA: Command line SIP UA with SIMPLE, IM, call transfer, RTCP/RTCP, etc.
QuteCom ex-OpenWengo: a fully SIP compliant multiplatform softphone with many features
SFLphone, open-source multiplatform multi-protocol VoIP client
Shtoom: SIP softphone in Python, runs on Windows, Mac, Linux
SipToSis from mhspot.com Skype SIP UA - Multiplatform - Open Source
sipXezPhone ("sipX easy phone") from SIPfoundry based on sipXtapi
sipXphone from SIPfoundry, previously known as the Pingtel phone
Twinkle
YATE: YateClient is multiprotocol and multiplatform phone with H.323, SIP and IAX support.
YeaPhone: A SIP softphone for the Yealink USB-P1K handset based on the libLinphone backend

MacOS X clients:
FreeSWITCH: Console client for SIP, IAX2, Woomera and Jingle/Google Talk
PJSUA: Command line SIP UA with SIMPLE, IM, call transfer, RTCP/RTCP, etc.
QuteCom ex-OpenWengo: a fully SIP compliant multiplatform softphone with many features
SFLphone, open-source multiplatform multi-protocol VoIP client
Shtoom: SIP softphone in Python, runs on Windows, Mac, Linux
SipToSis from mhspot.com Skype SIP UA - Multiplatform - Open Source

Windows clients
Ekiga || SIP, H.323 audio and video softphone for various linux, solaris, windows, and various unix systems. Formerly GnomeMeeting
FreeSWITCH: Console client for SIP, IAX2, Woomera and Jingle/Google Talk
JPhone Rich software SDK support softphone development, Windows, Linux, ThreadX, Vxworks etc.
Linphone audio and video SIP softphone for Linux and Windows XP
minisip cross-platform SIP softphone, Linux, Windows XP and soon Windows Mobile 2003 SE
MjUA: simple cross-platform SIP softphone, written in java, based on MjSip stack
OpenSIPStack MPL licensed SIP stack with ENUM, Presence (XMPP/SIMPLE) and NAT traversal. Reference implementation of Session Border Controller (OpenSBC) available.
OpenZoep: GPL telephone and IM messaging client engine
Peers Minimalist SIP softphone written in java (tested on linux and windows)
PhoneGaim
PJSUA: Command line SIP UA with SIMPLE, IM, call transfer, RTCP/RTCP, etc.
QuteCom ex-OpenWengo: a fully SIP compliant multiplatform softphone with many features
Shtoom: SIP softphone in Python, runs on Windows, Mac, Linux
SIP COMMUNICATOR Java based softphone
SipToSis from mhspot.com Skype SIP UA - Multiplatform - Open Source
sipXezPhone ("sipX easy phone") from SIPfoundry based on sipXtapi
sipXphone from SIPfoundry, previously known as the Pingtel phone
VMukti (formerly 1videoConference) alpha: a web2.0 VoIP video conferencing software for Asterisk.
wxCommunicator Windows softphone based on sipXtapi and wxWidgets 2.8.x, multi-account, conferencing, NAT support
YATE: YateClient is multiprotocol and multiplatform phone with H.323, SIP and IAX support.

SIP tools
Callflow: Generates SIP Call Flow diagrams
Open Source Asterisk AMI: Open Source Asterisk AMI interface application
pjsip-perf: SIP transaction and call performance measurement tool
miTester for SIP: SIP testing tool; Automates test execution.
PROTOS Test-Suite: SIP Testing tools
SFTF: SIP Forum Test Framework - a SIP UA test suite primarily targeted at UA software developers hosted by SIPfoundry
SIP-CallerID: SIP Caller ID retrieval and lookup
SIPbomber: SIP proxy testing tool
Sipp: SIP performance tester
Sipper: SIPr (called Sipper) is an open source and a comprehensive SIP application testing framework. Generate any call flow in minutes.
SIP Proxy: SIP security testing tool.
Sipsak: SIP testing tool
SIP Soft client: Software development kit for SIP Softphone
SIPVicious tool suite: tools for auditing SIP devices
SMAP: Locating and fingerprinting remote SIP devices
Vovida.org load balancer: SIP Load Balancer

SIP Protocol Stacks and Libraries
Aloha Spring based J2SE SIP A/S which leverages optimistic concurrent model and supports multiple persistence models
eXosip - eXtended osip library
libdissipate SIP stack
minisip includes a SIP stack
MjSip - complete and powerful java-based SIP library for both J2SE and J2ME platforms.
NIST SIP Various SIP appications and tools in Java
oSIP Library SIP Library
OSP client protocol stack and SIPfoundry
PhClickDial - Verona based Active/X plugin for IE allowing ClickToDial functionallity
PJSIP: Small footprint, high performance, and ultra-portable SIP stack written in C, and has language binding for Python. Works on Symbian and support ZRTP encryption.
reSIProcate SIP stack and sample Application from SIPfoundry
Twisted Python protocol stacks and applications includes SIP support
Open Sip Stack MPL licensed SIP stack with ENUM, Presence (XMPP/SIMPLE) and NAT traversal. Reference implementation of Session Border Controller (OpenSBC) available.
sipXtackLib an RFC 3261, 3263 complient SIP stack from SIPfoundry
http://sofia-sip.sourceforge.net Sofia-Sip is SIP stack implementation with STUN and presense support
Verona - GPL licenesed VOIP engine based on oSIP,eXosip,oRTP,ffmepg, works on Linux,Windows Mac-OS/X
Vovida SIP Vovida SIP stack
YASS - Statefull SIP stack used in Yate written in C++ usable for client, server or proxy in a multithread or single thread model. It's working on both Windows and Linux, it's very small but full featured.
Zocol Rich software SDK support SIP, SDP, XML, RTP/RTCP, HTTP, STUN, ABNF etc. Support Windows, Linux, ThreadX, Vxworks etc.

H.323 Clients
Linux clients:
Ekiga || SIP, H.323 audio and video softphone for various linux, solaris, windows, and various unix systems. Formerly GnomeMeeting
FreeSWITCH: Console client using OPAL
GnomeMeeting
YATE: YateClient is multiprotocol and multiplatform phone with H.323, SIP and IAX support.

MacOS X clients:
FreeSWITCH: Console client using OPAL
ohphoneX

Windows clients:
Ekiga || SIP, H.323 audio and video softphone for various linux, solaris, windows, and various unix systems. Formerly GnomeMeeting
FreeSWITCH: Console client using OPAL
OpenPhone
YATE: YateClient is multiprotocol and multiplatform phone with H.323, SIP and IAX support.

H.323 Gatekeeper
GNU Gatekeeper - for Linux, Windows, Mac etc.

IAX clients
IAXComm for Linux, MacOS X and Windows
FreeSWITCH
Kiax - for Linux, Windows and MacOS, based on iaxclient, GPL
MozIAX
QtIax from http://www.holgerschurig.de/qtiax.html
SFLphone, open-source multiplatform multi-protocol VoIP client (IAX support is planned)
YakaPhoneSimple, Free, Open Source, Skinnable IAX/IAX2 Softphone from YakaSoftware
YATE: YateClient is multiprotocol and multiplatform phone with H.323, SIP and IAX support.

RTP Proxies
AG Projects: MediaProxy 1 works with SIP express router and OpenSER, has load-balancing using DNS SRV records and accounting capabilities
Maxim Sobolev's RTPproxy: Works with SIP express router to traverse NAT, also functions as RTP gateway between IPv4 and IPv6
MediaProxy 2 is more scalable using kernel space switching and works with OpenSIPs

RTP Protocol Stacks
Secure RTP - see: SRTP
ccRTP C++ library based on GNU Common C++
JRTPLIB C++ object oriented RTP library
libRTP part of gnome-o-phone
libzrtpcpp - ZRTP extension library for ccRTP stack
LIVE.COM Streaming Media includes C++ RTP stack
oRTP Written in C, running on linux, win32 and arm-linux.
PJMEDIA: Small footprint media stack with a tiny RTP/RTCP stack suitable for DSP or embedded deployment
RTPlib C library
sipXmediaLib RTP + audio bridges, audio splitters, echo suppression, tone from generation (e.g. DTMF), streaming support, RTCP, G711 codecs, etc. from SIPfoundry
UCL Common Multimedia Library includes cross platform RTP stack
Vovida RTP Stack
YRTP - Yate RTP stack, that can be used in other projects.
Zocol Rich software SDK include RTP/RTCP stack. Support Windows, Linux, ThreadX, Vxworks etc.
zrtp4j - ZRTP stack for Java, based on GNU ZRTP, used in SIP Communicator
MSRP Relays
MSRPRelay from AG Projects

XCAP servers
OpenXCAP from AG Projects

Other tools
Howler Technologies - optimised G.729 codec for softswitch market.
MORCC - automated online Calling Card store. Paypal integrated.
Oreka capture and retrieval of SIP, Cisco Skinny (SCCP) and raw RTP sessions with audio compression, rdbms metadata storage and web based user interface.
Vovida.org STUN server: A STUN server
Voipong - Voice over IP (VoIP) sniffer and call detector.
Vomit converts a Cisco IP phone conversation (recorded with TCPdump) into a standard WAV file

PBX platforms
Some of these include SIP proxy functionality
Asterisk: Open Source PBX. Supports IAX, SIP, MGCP, H.323 and other protocols
CallWeaver: a fork of Asterisk with T.38 termination
FreeSWITCH Open Source PBX and Soft Switch
OpenPBX: Open Source PBX developed using Perl
PBX4Linux: ISDN PBX with H.323 GW
SIPexchange PBX Pingtel's SIP PBX
sipwitch: GNU project's Pure SIP call server, sipwitch on freshmeat.net
sipX - The SIP PBX for Linux from SIPfoundry, sipX on freshmeat.net
YATE Yet Another Telephony Engine - supports H.323, SIP, IAX, PSTN

IVR platforms
Asterisk: Open Source PBX with built-in IVR server
Bayonne: GNU project IVR server
CT Server Perl based Open Source client/server library supporting Voicetronix Telephony hardware.
FreeSWITCH
OpenVXI: Implementation of VoiceXML
SEMS: Free/Open Source SIP media server with IVR capabilities
sipX PBX The SIP PBX for Linux (open source) with built-in IVR (voice mail & auto-attendant)
YATE Yet Another Telephony Engine
See Also: VoiceXML

Voicemail servers
Asterisk: Open Source PBX with built-in Voicemail Server
FreeSWITCH
Lintad: Linux Telephone Answering Device - A Voice and Faxmail Server
OpenPBX: Open Source PBX with built in voicemail
OpenUMS: Linux Voicemail and Unified Messaging Server
SEMS: Free/Open Source SIP media server with built-in Voicemail and Voicebox Server
sipX PBX The SIP PBX for Linux (open source) with built-in IVR (voice mail & auto-attendant)
VOCP: A Voicemail Server for voice modems
YATE Yet Another Telephony Engine with H.323, SIP and IAX support.

Speech
Text-to-speech and speech-to-text (voice recognition)
Festival: Voice synthesis system (implemented with a trainable neural network)
OpenSALT: Implementation of SALT
OpenVXI: Implementation of VoiceXML
Sphinx: speaker-independent speech recognizer
UniMRCP: cross-platform MRCP client and server

Fax Servers
Asterisk Fax Email Gateway
Lintad: Linux Telephone Answering Device - A Voice and Faxmail Server
Hylafax

Development platforms, protocol stacks
H323plus: Open Source H.323 Protocol Stack following on from the original openH323
OpenBloX: OpenBloX Open Source Java Diameter framework with all IMS and SIP servers interfaces; maintained by Traffix Systems,
OpenMGCP: Open Source MGCP Protocol Stack Developed with C and POSIX APIs,
OpenSS7: SS7 Protocol Stack
ooh323c: Open Source H.323 Protocol Stack Developed in C
++Skype C++ library for skype add-on platform independent software development. It is platform independent, easy to use, and easy to extend because of the flexible library design, inspired by modern C++ design ideas. Performance is one of the goals.

Radius Servers
Aradial: Radius server and Billing for VoIP
BSDRadius: Radius server for VoIP
Interlink RADIUS Server RADIUS Server Software
RadBox RADIUS Server + Billing System. (For a work, you nead instal Framework 2.0)

Ref : http://www.voip-info.org/wiki/view/Open+Source+VOIP+Software

VOIP PBX and Servers

2009-09-10T20:07:00.000-07:00

Numeric
1AVOIP.com:Hosted PBX SaaS with SIP & Exchange-class Email. Connect to VoIP using IP Phones, Softphones, Mobile SIP, Octopus Webmail and your existing handsets. Free Hosted PBX developer kit for SME and Enterprise - Call 1-888-460-8647
2cancall.co.uk:Asterisk-based converged telephone system for UK Businesses
2N NETSTAR PBX, virtual PBX: VoIP PBX system
2N Omega IP PBX: VoIP PBX system
2N VoiceBlue Enterprise: Simple VoIP SIP PBX
3CX: Windows IP PBX / VOIP Phone system
3VOIP:http://www.kgktechnologies.com:Full featured VoIP Switch for wholesale and retail models. Multi-level reseller modules. Customizable reports and much more. Contact info@kgktechnologies.com for more information.
4PSA VoipNow: Hosted PBX software for service providers and enterprises, accelerating SaaS deployment. It runs on Linux environments (RHEL, SuSE Linux, CentOS, Fedora) on x86 and Power PC architecture based servers.
800PBX Inc.: Provides commercial grade PBX servers for resellers for easy creation of independent extensions and features for each company.
8ix Zenith: 8ix Zenith spells an Asterisk derived IP Telephony application with the most advanced calling and communication features.

A
Apptix: Hosted PBX: Business VoIP Phone Service Provider
ASP-One Voice: Hosted Voice over Internet Protocol (VoIP) phone system that is tailored for the needs of small and medium-sized businesses.
AastraLink RP Aastra's Microsoft Powered Small Business system
Aastralink Pro Aastra's Asterisk Powered Small Business System
Active Telecom: Commercial IP CENTREX application server for service provider (MOSAICA)
Adopting a Business PBX: In a telephony environment that includes a single or multiple analog or digital PBXs, an IP gateway is required...
Advanced SoftSwitch with LCR:Advanced Softswitch offers real-time voice switches to diverse range of ITSPs (Internet Telephony Service Providers) over IP networks.
Advanced Voice Solutions - IPitomy VoIP PBX Systems. Small to Large scale deployments.
Advantage PBX Asterisk VoIP PBX Servers and small business solutions.
Aelintra Telecom's SARK UCS High Availability PBX: With over 2000 downloads and a vibrant user community, SARK UCS is gaining a reputation for reliability, functionality and ease of remote management. High availability failover on T1/E1 circuits takes around 15 seconds to complete. Full self installing .iso available from the site.
Allworx VoIP Key Systems: Allworx manufactures the 6x, 10x, and 24x IP Key System product line designed to provide the key system functionality found in traditional small office phone systems while still maintaining SIP standard interop with third-party phone, gateways and ITSPs.
ASTFIN: Embedded Asterisk Distribution for Blackfin DSP. Open hardware PRI, BRI Appliances.
AntiSPIT Server:AntiSPIT™ Server gives VoIP and video telephony service providers comprehensive network protection from spam.
Aquarius Telecoms' TritonOne Multi-Tenant VoIP PBX Server allows companies to offer VoIP services to residential and corporate clients. Based on proven, reliable HP hardware, we offer ease of use and cost effectiveness.
Advoco NetPBX: Advoco NetPBX is a commercial carrier grade, IP centrex and hosted communications platform offering a wide range of business telephony services.
ATcom: easily build your IP-PBX or Carrier system with handling 124 channels/calls.
AskoziaPBX: Embedded asterisk system based on m0n0wall.
Asterisk: Open Source PBX Introduction | FAQ | tips & tricks
Astimax ®: Commercial VoIP/ISDN PBX
Astium ®: Web managed commercial asterisk based PBX with multi tenanting, central phone configuration. Prompts and interface in Dutch, French, English
Asterisk Cluster: CTC Connections provides an full features Multi-Tenant asterisk cluster system with load balancing, high availability, DNS SRV with ability to remove a server from the cluster at anytime without informing the cluster management system. It scales upwards of 20,000 + calls with media pass trough and 100,000+ with no media pass through.
Astlinux: AstLinux is a custom Linux distribution and has many features that make it ideal for embedded, Live CD and commercial Asterisk based solutions.
ATL's Berkshire IP-PBX ATL Telecom's small business IP-PBX and Berkshire IP phones.
AVM VoIP Gateway 5188
AXEOS ®: Business VoIP Solutions.
Axon Virtual PBX by NCH Swift Sound: Windows VoIP PBX for small to medium sized business.
AYCTelecom IPcts: IP Converged Telephone System. Full featured SIP PBX designed for Small and Medium Sized Business.
Aztech IP-PBX : VoIP PBX; upto 8FXO & 50 extensions.

B
Bayonne: The telephony server of the GNU Telephony Project
BEA: J2EE-SIP Application Server
Belco PBX: IP PBX System
Bicnet: IPPBX VoIP Unified Communication solutions.
Bicom Systems: Open Standard Turnkey Telephony Systems for Businesses and Service Providers
Bicserver: Low cost IP PBX System Solutions
Billion Softswitch: SIP/H323 softswitch for Linux/FreeBSD/Solaris/Windows.
BlueWave Telecom's VoIPFlow 2.0: Deploys, manages, and scales 1000's of virtual Asterisk pbx systems. For ISP's and Service providers.
Brekeke: Commerical Multi-Tenant PBX and Carrier Grade SIP server
Broadsoft: Commerical SIP Application server
Build an iPBX that Provides Videoconferencing, Video Mail, IVR and Mobile Services: Download this white paper for application scenarios and development tips.

C
CloudWare VoIP Suite Windows software VoIP UC Softswitch operates in Class 4, Class 5 or Class 4/5 scalable 4-512,000 ports, SIP, CAPI
Connecto- All-in-one Office Communicator: IP-PBX, Voice, Data, FMC, WiFi & Internet over the cellular network
ConduIT3 VoIP PBX: Asterisk Based Hybrid PABX Systems
CallButler: Easy-To-Use IVR/Auto-Attendant/Voicemail server for Windows
Cameronet: VoIP-PBX-Systems based on Asterisk with an Configuration Webinterface
CarrierClass.net: GPL distributed, large-scale, highly-available IP PBX and provisioning system
CenIP: Commercial IP PBX with a web config interface, in spanish.
cfPBX: Hosted PBX - VoIP Business Phone System
ComCanada Communications CRTC Registered, Provider of Hosted PBX, DID service, Toll Free, equipment sales, consulting, and retail/wholesale origination & termination. Supported Protocols: SIP & IAX 1-877-697-VOIP
Clear Voice Telecom: Several communications solutions, including Hosted IP PBX, VoIP, and automated dialing systems.
Contaque: PBAX based VoIP solution
Converge: Hosted Enterprise PBX for SME and Call Centers from Corelynx
Centile: Hosted IP Telephony & Enterprise iPBX Solutions
Cisco CallManager
Cisco CallManager Express
CommuniGate Pro: Voice and data Internet Communications server with Active Dynamic Clustering and 99.999% uptime for all IMS
ComniPort-TK IP PBX-System based on Asterisk with ISDN-PRI, ISDN-BRI and POTS-Interfaces
Coms.Net - Advanced Business Phone System: Hosted VoIP IP-PBX
Convertec Asterisk based IP PBX systems, ViciDial based call center solutions. Hosted and virtual PBX. Remote Asterisk, FreePBX, and Trixbox support 24X7.
Creacode: NicSC SIP Session Controller is high performance and flexible SIP Call Controller, Registrar and NAT Traversal solution. Easy integration with an external Radius, HTTP based billing server or an ODBC compliant Database.
Critical-Links edgeBOX: Complete Asterisk based PBX, GUI configurable, all popular card interfaces available, with Router, Firewall, File and Print Server, e-Mail and Web server, Anti-virus, Anti-SPAM, Content Filtering, Radius, NAC and QoS.
Cruise phone: embedded Asterisk PBX with 4 isdn interfaces, german and english config, with root access!
CTC Connections: Multi-Tenant full featured IP PBX Cluster Solution with real-time interaction, sophisticated routing for inbound calls, flexible outbound capabilities with a range of dialing modes, quality monitoring and real-time statistics tools ensure that your customers are quickly connected to the best available services.
Cosmact COSMOS SIP Based CCXML and VoXML Application Server: High performance, carrier grade application server with CCXML and VoXML for application flow control. Supports SS7 ISUP, ISDN and SIP signaling interface. Available as general application platform for IVR and IVVR (Interactive Voice and Video Response) deployments or packaged products such as conference server, IP-PBX, SS7-SIP media/signaling gateway. Supports RADIUS for real time call billing.
C-zentrix: C-Zentrix is a next generation Linux appliance providing all the contact center functions in a single box.
CallFon: IP PBX, IVR, Call Center: Solutions based on Asterisk Web Gui Spanish.
ContactQ: ContactQ is the next generation Call Center Application Server providing IVR and ACD. ContactQ is being developed as both a supported commercial product and also as an open source GPL project.

D
Digisist Hosted PBX U.S. based Hosted(Virtual) PBX Provider. Unlimited Calling, free 4-line phone, free setup for $39.95/mo.
D-Link IP PBX D-link VoiceCenter powered by Microsoft Response Point
DM Link Npbxskype, Asterisk PCI Card with competitive price.
Daktela PBX: Commercial IP PBX with a web config interface, billing application, fax service, in Czech and English
Datera Call-eX: a full featured telecommunications server (IP PBX) for large and small companies (fully scalable). Allows integration of previously introduced solutions (PSTN, GSM, VoIP) into one. Configured via Web interface. Advanced call routing (multiple VoIP and PSTN operators) and functionality (VoiceMail Server, FaxMail Server, CallCenter, CallRecorder, MOH Server, Intercom).
DexgateMicro: A WEB-based VoIP Telephone Switchboard for voice and video, able to manage FAX, SMS/MMS, Email and Chat in a single solution. It includes support for SIP/T38 telephony, IVR, Conference, Videoconference, Call recording, WEB CTI and more. The software is 100% written in Java.
Dialexia: IP-PBX software (SIP-based), VoIP Traffic Termination on Dialexia.net with Billing Management (Radius or SIP) with Calling Card support, Call Shop/Cyber Cafe software, IP Phones & Quintum & Mediatrix products
DialLog IP PBX : Commercial grade IP PBX, IVR, Call Center solutions on Asterisk WEB GUI
DigAnTel, Automated install Centos/Asterisk/FreePBX

E
EasyPbx:Hybrid IP-PBX Solution for Service Providers and System Integrators that control and monitor thousands of PBX trough a Web Management System based on Level (Provider, Reseller, PBX Admin, User). EasyPbx is commerical grade PBX software and it provides the key system functionality found in traditional Enterprise or SoHo phone systems. Administration based on an Ajax Web Interface on remote Server (VLSRV). Service Providers and System Integrators can use their Private Label on the system. The Linux Distro (200 Mb) created from scratch is performed to work with E1-T1 and above all BRI network. Real Time VOIP and PSTN Diagnostic and Alerting System integrated into the platform. EasyPbx Wiki Page
EnGenius EnQue VOIP products: Low cost high feature asterisk based IPPBX, desk and WiFi phones.
easyAsterisk GUI: December 2006: 2.2rc3 updated release with some features added.
Easy Office Phone A complete PBX voip phone solution for small and medium sized businesses.
EasySpeak PBX EasySpeak PBX is a 15 min install, it gives you a complete PBX solution for small businesses, it includes an auto provisioning system which autimatically sets up the phones and is also available for a 14 day free trial.
EasyVoxBox.org A full featured IP PBX phone system. EasyVoxBox is based on Asterisk and freePBX and installs a complete system quick and easy. It gives full control and provides additional system utilities via the web based user interface.
eDial Advanced Communications Server
Elastix Also a pre-Configed CD w/CentOS & Asterisk + extras
edgeBOX: "Office-in-a-box" appliance with Asterisk web-based GUI interface. Full IP-PBX with Router, QoS, VPN, Firewall, SMTP, WWW, Network Access Control, Collaboration services. Integrates with BRI/PRI and FXS/FXO.
Enswitch - A full featured carrier grade soft-switch with pre-paid and post-paid billing, invoicing, multiple levels of reseller, full range of PBX features, calling cards, call shop, credit card integration, and much more. Built on Asterisk and SER, it supports clustering, high availability, and fail-over. In production today with systems up to high tens of thousands of users. See the feature list and the online demo web interface for more details.
Epygi Quadro devices unite conventional PSTN telephony and high-tech IP communication. From the Quadro2x models, small IP PBXs for private users and teleworkers up to the Quadro16x models, fully featured IP PBXes to the QuadroE1/T1 Gateway and the QuadroCS Conference Server - there is a Quadro device for every business need. Distributed in Australia by Alloy
Ernie Ernie is an open source VoIP application platform that integrates Web 2.0 design principals with next generation communications technologies, including VoIP, presence and web languages such as Python.
Evolution PBX: Complete TurnKey Asterisk PBX for small businesses. Easy to use interface with advanced innovative features.

F
FacetPhone Commercial IP-PBX, Business Telephone System
Fonality: Asterisk-based IP PBX for SMBs
FonAngle Communications A complete Hosted PBX platform over carrier grade business VoIP. Perfect for small businesses and comes complete with a 30 Day Guarantee.
FreePBX: GUI Frontend and PBX configuration for Asterisk. Supports modules for adding various functionality, but primarly designed as an SMB PBX system
FreeSwitch: Open source cross platform (*nix, Windows) multiprotocol (SIP, IAX, WOOMERA/H.323) softswitch.
Free H.323 Embedded Gatekeeper:Free H.323 Gatekeeper for H.323 devices registering and visiting
Frontrange IPOS: solution includes SIP Communications Server with CSTA link for 3-rd party call control, IRV+router with GUI application builder, Unified Messaging voice mail server, TTS and ASR support, Microsoft Live Communications Server (LCS) integration, SoftPhone, Web-based configuration access.

G
G1000 PBX http://www.globaliptel.com: G1000 PBX (hardware variant or hosted PBX).
Gemeinschaft - (http://www.amooma.de/gemeinschaft/): A toolkit based on Asterisk. Designed for high availability and mass deployment. Configurable via GUI or shell scripts.
GPBX: A fanless PBX with a nice GUI and lots of advanced features.
Gridborg HMP Commercial Host Media Processing server with H.323 and SIP frontends, and simple ASCII control protocol. It can handle 240 ports on dual processor servers. It works in both Linux & Windows environments. It's client-server architecture enables you to use any programming or scripting language. Gridborg HMP is free for development purposes.
Goldennet Technology: Embedded/Economical IP PBX for Small Business, allow upto 200 users.

H
HANASHI - Pre-configured Asterisk-based solutions, servicing Buenos Aires, Argentina.
HelloWorld: Commercial VOIP PBX
Hi-Brid Norleaf Newtorks (Next Generation VOIP Solutions) - Asterisk based PBX
Hosted PBX service from VoIP Supply. Lowest priced.
Hotsip: Commercial SIP Server

I
Intelligent Solutions Phils., Inc. (Philippines) - System Integration, Intelligent PABX(PSTN+GSM+VOIP) Solutions, Call Center Solutions, Network Infrastructure Consulting and Solutions.
JmcSoft Distribution - Importer and distributor of quality competitively priced Voice over Internet Protocol (VoIP) and networking equipment.
http://www.singcomm.com.sg/pabx/hkc/index.html The IP64 System, designed and developed by HKC Technology Limited, is using the VoIP as the core technology which could be implemented in a highly flexible and scalable system that fulfills all communication requirements and comes with automation features.
Insido ipbx: spanish manufacturer of VoIP solutions backed by IBM eServers and Novell Linux
iareaPhone Hosted iareaPBX Asterisk Servers, Pre built fully loaded and fully managed - Voice and Data Termination is available - iareaPBX User Company Administration and Billing System Call or visit Hosted iareaPBX Standard, Hosted iareaPBX Midrange IAX phones available
Interactive Intelligence Commercial call center and Enterprise server solutions, Free SIP Proxy TRIAL
ipcortex PABX Simple reseller friendly PABX system based on Asterisk. Emphasis on quick setup with simple web configuration for all features and auto configuration of phones for speedy and profitable mass deployment. Economical for 10-1000 users.
IPsmarx Technology, Inc. is a leading Voice over IP (VoIP) solution provider and system integrator dedicated to delivering customer management and billing solutions for entrepreneurs, carriers, VoIP Calling Card Operators and ISPs.
IVR Technologies, Inc. - IVR Technologies, Inc. is a leading software development company providing a fully integrated SIP based application, media and billing server to next generation networks.
ICONSA Canada Inc. - ICONSA.CA is a Canadian Company whose objective is to offer communication services using high speed internet. Our idea is to offer the general public means of communicating with family and friends completely free or at a very low cost.]
IVRCat is an IVR System for SIP Servers & IP/PBX Systems providing Calling Cards, Callback and IVR Account Payment and Administration features
iPline open voip Let your voice over ip flow

K
Kalliope PBX is an asterisk-based SIP PBX with ease of use in mind.
Kamailio GPL SIP server (formerly called OpenSER)

L
Logic PBX system comes in three editions: “Business Edition”, “Call Center Edition” and “Unified Messaging Edition”. Ideal for businesses of 1 to 100000 people.
Linux LiveCD VoIP Server SER Proxy with prepaid support. All in one solution.
Luxsys Inc. IP PBX with Call Manager based on Asterisk 1.2.x and 1.4.x. Call Center Solution.

M
MailStreet voice MailStreet Voice is the enterprise class alternative to costly telephone systems and expensive long distance bills, using VoIP technology.
Massxess IP PBX Massxess services customers with leading IP software, including hosted IP PBX and a full IP hosted contact center on demand platform.
MOR Advanced Billing solution. Retail/Wholesale. For VoIP providers/Call Centers/etc. LiveCD available. Homepage
Microsoft Response Point Microsoft's Small Business Phone System with Advanced Speech Recognition. See AastraLink RP, Dlink and Syspine
Microsoft OCS Microsoft's UC platform for Enterprise
miniSipServer SIP based VOIP Server for MS-Windows. Powerful and very easy to use.
Matrix IPPBX Xtreme Networks Commercial IPPBX System (SIP/IAX/H323).
Magiclink IPPBX S1-series IPPBX BOX system, user friendly web control, full system in 1U/A4 size box, OEM for other company.
MKC Networks: Available worldwide the MKC Networks 7000-series SIP Enterprise Application Server offers hybrid/hosted SIP-PBX functionality and stand-alone vertical market specialization including: conference server (500+ users), time of day routing, IPDR analyzer, auto-attendant, call recorder and adjunct ITSP manager for legacy systems
MySIPSwitch: The SIP Switch is an experimental stateful SIP Proxy server sponsored by Blueface to allow the use of multiple supplier SIP accounts from a single SIP login. This is a free and open source software.
MERA VoIP Softswitches Class 4/5 switching & billing solutions for VoIP networks.
Maintel VOIP PBX Maintel provide total voice and data solutions to meet all telecom needs in the UK
Mizu VOIP Server is a high speed VOIP Softswith for the Windows / MS SQL platform

N
NBX: 3com's Commercial VoIP System
Network monitor Network monitor with hardware and Asterisk package (dutch).
NEGIA NexGen PBX: Turnkey Asterisk based VoIP PBX server appliances with complete web management interface
Nortel BCM: Nortel Business Communication Manager Interoperability
NovaTec: ISDN (BRI and PRI and UP0), IP (SIP), GSM (Cellular), Analogue, Media-Gateways and ATA's incl. T.37 and T.38 for Fax over IP

O
OfficeSIP Server: Free enterprise sip server for Windows.
OnSIP Hosted PBX: OnSIP is a hosted PBX solution from Junction Networks with unlimited free users and extensions. OnSIP offers free SIP-SIP calling and is interoperable with other standards compliant SIP providers.
Obelisk: Obelisk is the new VoIP virtual switchboard by Eutelia, completely remotised, easy to use (no software download is needed). Obelisk is the best way to optimise the management of phone traffic and expenditure within each company branch, among different branches and towards the traditional phone networks.
Objectworld Communications: Objectworld UC Server is a Windows based Unified Communications Server with built-in SIP PBX and Unified Messaging platform for Exchange, Lotus Notes, and any IMAP4 server. Available worldwide, the UC Server offers hybrid/hosted SIP-PBX solutions including: video and audio conference server, time of day routing, IVR, auto-attendant, call recorder and ITSP access. Simple to install using Wizard-based applications, Fully SIP compliant, and will work with any SIP Phone, SIP Gateway or SIP Trunking ITSP.
Octopus IP Communications Inc: Hosted PBX Server with VoIP, Email, Groupware, SIP and Unified IP Communications services. Set up VoIP phone numbers in out of town markets. Connect to VoIP over high speed Internet using: IP Phones, Mobile SIP Apps, Softphones, VoIP-to-Analog adapters and Octopus Unified Webmail.
OpenPBX: PBX in Perl
CallWeaver: open source IP-PBX software, vendor independent, cross-platform, PSTN and VoIP, software fax and fax over IP.
OpenSER: GPL SIP server (also known as Kamailio)
OpenSIPg: SIP service platform for operators. A multitude of features

P
PrettyMay Skype PBX software for Windows: a full-featured Skype PBX software on Windows system.
Pandora Networks: Worksmart Multimedia PBX
Pan Tone Communications: One Stop Solution to Office computer networks and VoIP PABX telephone systems.
Partysip: Open Source SIP server
Patton SIPxNANO: compact full-featured VOIP IP-PBX
PBXes - full featured Asterisk PBX as a free service, open source dial plan and configuration
pbxnsip: Commercial SIP-based PBX with SRTP support
PBXpress: 24/7 supported IP PBX for business clients, PBX cluster, auto VoIP phone discovery and configuration
PBXware: Business, Call Center, Multi-Tenant Edition
Phone Systems from VoIP Supply. Largest selection online. Expert consultants.
Pingtel: Enterprise-class SIP PBX for Linux, SIP Proxy Servers, SIP Softphones and User Agents
Power Systems: Talkswitch PSTN/VOIP Hybrid Small Business Phone Systems. All analog, all SIP VOIP, or mixed.
RadiusCat RADIUS Billing Software: Windows RADIUS Billing for Quintum Version 1.2.3 RELEASED...
PCBest Networks SIP PBX v2: A Windows-based software SIP PBX system. It is very easy to use and deploy, with powerful features like:ACD, Auto Attendant, Call Park, Ring Group, Conference, Call Pickup Group, Auto Outbound Dialer, Database CDR report, Database PBX Status Report. It supports SIP extensions, SIP accounts, inbound and outbound calls, and customized dial plans. With new plugin feature, you can use C# or vb.NET to build customized auto-attendant for PBX, or develop your own IVR menu in just minutes.

R
Resonance Networks: Piccolo IP PBX Platform based on Asterisk
Response Point: Microsoft's SMB Phone System - Aastralink RP
RUOK Dialer: DSC Senior check autodialer using Analog or VOIP lines.
Radvision: Video conferencing equipment and web software. SDK solutions for VoIP, SIP, H.323, Megaco, MGCP; SIP server; IMS 3G-324M products; ECS Gatekeeper, MCU, gateways
Ring Carrier: Ring Carrier Office provides small/medium-sized businesses with cost-effective VoIP/PBX service. Ring Provider delivers Class 5 Softswitch with provider, enterprise, end-user interface; VoIP fabric and enterprise building block architecture in cloud computing model solves Asterisk scalability and user interface issues.
RadiusCat AAA Billing is a RADIUS AAA Billing system for SIP, H.323 VoIP Gateways including Brekeke SIP Server, Quintum, CISCO, EPYGI, IVRCat, RadiusCat CallShop, RadiusCat Click-To-Call
RSDevs.com: provides multiprotocol (SIP, H.323 and IAX) Audio Conferencing Server (MCU), SIP,H.323 and IAX VideoPhone (SoftPhone with video) for PDA/PPC/PocketPC (Windows Mobile 5.0/6.0). Also provides contract VoIP development services and custom programming.

S
Solution4VOIP Inc: Our Voip SoftSwitch Solution enables you to successfully manage Prepaid/Postpaid Calling Card Services, Wholesale, Termination, Callback, PC2Phone, IP Phones, Direct DID, DID2IP, IP2IP and a Hosted Callshop All in one pack solution.
Select Phone Solutions: Our Spartan PBX appliance's are geared to the small to medium size VoIP solution with all the bells and whistles.
Softswitch.US: Our Solution enables you to successfully manage Prepaid/Postpaid Calling Card Services, Wholesale, Termination, Callback, PC2Phone, IP Phones, Direct DID, DID2IP, IP2IP and a Hosted Callshop in one solution.
S5000: SIP/H323 VOIP Softswitch and IPBX system for Linux and Windows platforms, with advanced call routings, audio/video conferences, and more. Web based. Open APIs C/Java available. From PC to appliance boxes. Ready in minutes.
ScopServ: Complete Web GUI for Asterisk & Commercial VoIP PBX (http://www.scopserv.com/)
SARK UCS PBX: A professional Unified Communications Server on a hardened Centos 4.2 platform.
SARK UCS PBX: Documentation pages.
SerComm Original maker of embedded web GUI based Asterisk IP PBX + SIP phones & gateway — ISO 9001 certified production.
SERVERware: Bicom System's own virtualisation platform that helps service provider produce the simplest set up and self-healing clusters for multiple applications.
Signate Signate, Open Source Carrier, Provider and Enterprise VoIP Solutions
SIP Express Router: Open Source SIP Proxy
SIP Express Media Server (SEMS) : Open Source SIP Media Server
SIPpy: Open Source carrier grade RFC3261-compliant SIP Stack and Back-to-Back User Agent (B2BUA)
SIP Reality: Reasonably priced commercial carrier grade SIP Softswitch for Service Provider Community
Sipcat Downloadable VoIP PBX software application (ISO install) based on Asterisk
SIPPSTAR: SIPPSTAR Proxy Server Software
SIPfoundry: Open source SIP PBX for Linux, open source source proxies, open source SIP softphones, open source SIP stack
Siproxd: Open Source SIP and RTP proxy
SIP Proxy Server: Enables service providers to deploy scalable VoIP and video telephony applications and services. Standards compliant with a comprehensive feature-set.
SIPSP-PBX and Proxy: Commerical VOIP PBX and proxy for ISPs and Enterprises
Mini-SIP-Proxy: A small SIP proxy which allows you to link local SIP phones together (for home use, written in POE perl)
sipwitch: GNU Project's secure media path SIP call server
sipX The SIP PBX for Linux (open source) sipX, sipX Architecture sipx_screenshots, SIPfoundry, Pingtel
CloudWare SoftBX Windows software VoIP-Telephony Platform scalable 4-512,000 ports, SIP, H.323, CAPI
SOFAswitch Spanking new PBX from Derek Smithies (of OpenH323 fame and more) Have a seat!
Song812 IPPBX a hardware based ippbx with 4-8 ports
Soft-Switch : Carrier Class Soft-Switch
SOHO PBX World - Hybrid VOIP/PSTN Phone Systems and VOIP phones
Soundwin Network: - Soundwin Compact Asterisk Telephony solution for SMB and SOHO users.
Sphericall: Commerical VOIP PBX
Spiderstar:: Commercial VOIP PBX
Stalker Software:: CommuniGate Pro VOIP, email, IM, and unified messaging server
starface pbx:: STARFACE PBX is a professional asterisk based Voice-over-IP solution.
Starfish PBX aims to be a open source alternative to Digium’s Switchvox.
A market leader in the realm of voice and data communication: Storm are committed to providing cost effective telecommunication solutions to South African businesses.
Sutus Inc.::Sutus Business Central(tm) is an integrated small business appliance combining VoIP server, file server, email server, firewall, wireless access point, VPN remote acces
Switchvox: Based on Asterisk, Switchvox is completely web based and comes preinstalled.
SWYX: Commercial VOIP PBX
Sylantro: SIP Application Server
Synsip Voip solutions Asterisk based including Microsoft API .NET synsip
SysMaster VoIP PBX - SIP/H323 Class 5 IP PBX server for telecom applications.
Syspine Microsoft Response Point Syspine's Small Business Phone System with Advanced Speech Recognition by Microsoft Response Point. Extremely easy to set-up, use and manage.
Surf Communication Solutions, Ltd.: MoP (Media over Packet) Triple Play (Voice, Video, and Modem/Fax/Data) conversion solutions to communication equipment manufacturers.
SVK Software Corp: SVK Software Corp is a Canadian company offering many VoIP software solutions including RADIUS Billing, SIP Calling Card & Callback module, Click-To-Call modules, etc

T
Talking SIP - Turnkey platform with a fully integrated application (IVR enhanced services), media server and real-time billing engine that supports prepaid, postpaid, flat-rate, multi-tier and packaged minute plans + much more
Talkswitch: VoIP - PBX system for less than 32 users per location
Taridium ipbx eXpress: ipbx eXpress software is designed for small to medium sized environments, offering all the key advantages of Taridium's ipbx software. ipbx eXpress configurations are fully compatible with Taridium's ipbx enterprise solution allowing for a seamless upgrade path.
Tedas: Commercial VOIP PBX
TEDAS VoIP DECT PABX: VOIP PBX with cordless DECT phones
Teleon Networks - Low cost soft PBX based on PCTel modem and Skype.
Telephone Reassurance - PBX for contacting elderly ensuring they are OK.
TELES complete Class 4 and Class 5 soft switch solutions, VoIP gateways, and mobile gateways for GSM, CDMA, and UMTS networks
Telesis PX24U, PX24M, PX24X - Hybrid IP PBX Phone Systems
Thirdlane PBX - Complete Asterisk based PBX for SMBs. CentOS based CD - easy to install, easy to configure and easy to manage
Thirdlane PBX MTE - Multi-Tenant Asterisk based solution for service providers offering hosted virtual PBX services.
Thirdlane PBX Manager GUI - Webmin based GUI for managing Asterisk based PBXs.
TigerPBX - IP PBX component of TigerCube products
Tpad.com Bespoke IP PBX Solutions for SME/SMB's. Hosted and Managed Telephony Solutions with custom made Call Management Software, compatible with any SIP /VoIP Hardware (ATA / IP Phones / PC Softphones / Nokia WiFi Mobiles).
TransNexus VoIP Routing, Accounting & Security
Trixbox: (the project formerly known as Asterisk at Home) Pre-Configured start up cd with CentOS and Asterisk + add-ons (FreePBX/AMP, FlashPanel, etc)
TrueBill from Cylogistics Complete billing solution for Pre-Paid, Post-Paid, Real Time, On Demand, Credit Card, Taxes. Integrates with most VoIP switches including Asterisk, Ring Carrier, YATE, TrueSwitch, Nextone & more.
TurboPBX - Virtual PBX that breaks new ground in Business Phone System Solutions for a fraction of the cost of less effective systems on the market.
TekSIP by Yasin KAPLAN - Freeware SIP Registrar/Proxy for Windows XP/2003/Vista
TekIVR by Yasin KAPLAN - Freeware SIP IVR/Call Attendant for Windows XP/2003/Vista

U
Ubiquity SIP Application Server
USB2PBX Asterisk and FreePBX bundled together on a single USB key. Boot your server from the USB key and it will transform in a powerful PBX system.
UTM5 by NetUP Inc. - a high performance VoIP RADIUS Server developed in C++, SIP and H.323 compatible, also able to parse any CDR files

V
VoIP-IRAN: تنها سایت فارسی زبان وویپ دنیا The first Free Persian VoIP Site and Forum
Vdex-40 Asterisk Appliance: Vdex-40 - USA distributor TAA.com: , Australian Manafacturer Technoco.biz
VentureVoIP PABX Systems: New Zealand Based PABX Supplier
Veraz Networks Softswitch and media gateways
VegaStream VoIP Gatways : reliable IP convergence solution
Vidanetwork Technologies, Inc. IntelliGate IP PBX (Industrial parts, Fanless design) supporting 10 to 2000 users. Web-based admin, end user interfaces w/ integration of CRM system
Voicedata IP Communications Develops Asterisk based pbx's for commercial end-users
VOCAL: Open Source toolkits, servers and gateways
VocalData: SIP Application Server
VoipCenter SIP widely used commercial SIP Application Server and SIP Media Server
VoiceCenter IVR widely used SIP IVR platform
VoiceCenter Response Point D-Link VoiceCenter Microsoft Response Point IP PBX System.
VoIP Gateways: FXS, FXO, PRI, SS7, C7 gatewayse
VoIP-One GmbH Schweiz (CH) : Commercial VoIP/ISDN/GSM PBX
VoIP Phone Systems from VoIP Supply. Largest selection online.
VoipRent Turnkey hosted VoIP softswitch for pc2phone, web2phone, callback, prepaid cards, callshop billing
VoIP TelePort: a full VoIP PBX on a USB memory stick w/web based management
voipEntity: safe and economical IP PBX based on Linux Asterisk's architecture. Ideal for SoHo customers.
VOIspeed IP PBX: VOIspeed is an IP telephony software technology for advanced and flexible solutions for every type of requirement and company.
VoLANs Embedded Asterisk based and Freeswitch based IP-PBX for SME and SOHO customers. Perfectly compatible with any SIP based solutions.
Vonexus EIC IP PBX on Microsoft/Intel platform
VS-1 Full-featured Asterisk appliance from The VoIP Connection
VoxBox is an Open, Simple, and Standard package for VoIP PBXs based on CentOS, Asterisk, FreePBX, and Webmin.
Vox Office PBX Vox Office is a Full Blown Asterisk Management system with windows admin apps and web services gateway.
VoxSy PBX VoxSy is an Asterisk based IP PBX system with support SIP, IAX and Zap trunks.
VoipSwitch Complete IP Telephone Platform integrating all the elements, that are required for successful implentation of VOIP services.
Voicecurve VoiceCurve is a Call Center service that leverages VoIP technology.

W
Webphone: Allows web site visitors to call direct to your call center.
Windows VOIP Business Phone System: VOIP and ISDN Ready, Very Easy to Manage and Configure. Highly Featured. Good Alternative to Asterisk.
Wildix: Gateways Series, Advanced Asterisk based gateways (WMS onboard).

X
Xoasis Networks Prodigy VoIP PBX Full VoIP PBX with support for 20-250 users that includes full web based management and auto provisioning of IP handsets from Polycom, Cisco, and Grandstream
Xorcom TS-1 - Asterisk based solid state PBX. Full VoIP. Supports up to 100 concurrent SIP calls (G711). One PCI card. Supports Astribank USB Channel banks.
Xeepe Project presents a fully integrated SIP & ISDN Telephone System.
WeON Communication Everywhere is the pioneer CallCenter/IPBX Asterisk based solution in Latin America.

Y
YATE Yet Another Telephony Engine is a software PBX running on Linux with support for Zaptel PRI cards and H.323 protocol.
Yonder: Turnkey Asterisk based VoIP PBX server appliances with full web GUI.
Yxa: Open Source SIP library and server

Z
Zervina Technologies VoIP CPE Configuration and Firmware Management Platform
Zirkon Commercial VoIP PBX with multi-level web config interface, user web interface, online billing, fax2mail, mail2fax, callback, DISA, IVR, SIP, ISDN2, ISDN30, in Czech
Zultys Linux based SIP PBX server appliance with integrated private IM system
Teleco:NEC and Toshiba VoIP telephone systems in NY and NJ
ComWealth:CW Billing&Gateway Complete PSTN/VoIP switch,based an Asterisk. includes prepaid&postpaid billing, Calling Card facilities.Supports SIP,H323,IAX,ZAP,MGCP.
VPBX24: Hosted Asterisk Server with carrier grade VoIP terminations and SMS
Voip2system Callback Solution: Callback, Pc2phone, Calling card, and Hosted Solution with dedicated server.
Zaphardware is an open source telecommunication equipment supplier
Zonetel:Offers VOIP PBX, Mobile SIP, DID, VOIP voice recording, Web conferencing, Web fax broadcast, Click2Call solutions, customizable IM platform and Asterisk consultancy service.

REf : http://www.voip-info.org/wiki/view/VOIP+PBX+and+Servers

What Is VOIP

2009-09-10T20:03:00.000-07:00

Introduction
VOIP is an acronym for Voice Over Internet Protocol, or in more common terms phone service over the Internet.
If you have a reasonable quality Internet connection you can get phone service delivered through your Internet connection instead of from your local phone company.

Some people use VOIP in addition to their traditional phone service, since VOIP service providers usually offer lower rates than traditional phone companies, but sometimes doesn't offer 911 service, phone directory listings, 411 service, or other common phone services. While many VoIP providers offer these services, consistent industry-wide means of offering these are still developing.

How does VOIP work?
A way is required to turn analog phone signals into digital signals that can be sent over the Internet.
This function can either be included into the phone itself or in a separate box like an ATA .

VOIP Using an ATA

Ordinary Phone ---- ATA ---- Ethernet ---- Router ---- Internet ---- VOIP Service Provider

VOIP using an IP Phone

IP Phone ----- Ethernet ----- Router ---- Internet ---- VOIP Service Provider

VOIP connecting directly
It is also possible to bypass a VOIP Service Provider and directly connect to another VOIP user. However, if the VOIP devices are behind NAT routers, there may be problems with this approach.

IP Phone ----- Ethernet ----- Router ---- Internet ---- Router ---- Ethernet ---- IP Phone

Applications using VOIP
Traditional telephony applications, such as outbound call center applications and inbound IVR applications, normally can be run on VOIP.

Why use VOIP?
There are two major reasons to use VOIP

Lower Cost

In general phone service via VOIP costs less than equivalent service from traditional sources. This is largely a function of traditional phone services either being monopolies or government entities. There are also some cost savings due to using a single network to carry voice and data. This is especially true when users have existing under-utilized network capacity that they can use for VOIP without any additional costs.

In the most extreme case, users see VOIP phone calls (even international) as FREE. While there is a cost for their Internet service, using VOIP over this service may not involve any extra charges, so the users view the calls as free. There are a number of services that have sprung up to facilitate this type of "free" VOIP call. Examples are: Free World Dialup and Skype for a more complete list see: VOIP Service Providers

Increased Functionality

VOIP makes easy some things that are difficult to impossible with traditional phone networks.
Incoming phone calls are automatically routed to your VOIP phone where ever you plug it into the network. Take your VOIP phone with you on a trip, and anywhere you connect it to the Internet, you can receive your incoming calls.
Call center agents using VOIP phones can easily work from anywhere with a good Internet connection.

Comparison BW VOIP Allwin IP Phone

2009-09-10T19:56:00.000-07:00

Ini sekedar Capture comparison bandwidth voip dengan perangkat Allwin IP Phone

Harga Tiket Masuk Trans Studio

2009-09-10T19:53:00.000-07:00

Studio pass dengan microchip card dan dipakai sebagai alat pembayaran baru pertama kali digunakan di Makassar. Belum ada wahana di dunia ini yang menggunakan teknologi seperti ini.
Teknologi ini baru ada di Makassar. Di Disneyland yang ada di Orlando, AS, saja baru akan memakai teknologi seperti ini tahun depan

Kartu Studi Pass sebagai pengganti uang, berlaku seumur hidup, juga dapat digunakan untuk membeli merchadise dan kartu tol pra - bayar

Harga Minimum Paket Perorang : Rp. 100.000
Sudah termasuk :
Harga Kartu Studio Pass (Dapat digunakan seterusnya) = Rp. 10.000
Tarif masuk berikut 15 wahana permainan (masing2 1x main) = Rp. 90.000

Harga tiket tambahan perorang perwahana :

1. Trans City Theater Rp.15.000
2. Studio Tour Rp.15.000
3. Grand Esia Studio View Rp.10.000
4. Hollywood Bumper Car Rp.15.000
5. Sepeda Terbang Rp.15.000
6. Rimba Express Rp.15.000
7. Si Bolang Rp.10.000
8. Safari Track Rp.15.000
9. Balloon House Rp.10.000
10. Karosel Rp.15.000
11. Ayun Ombak Rp.15.000
12. Angin Beliung Rp.15.000
13. Kano Kali Rp.15.000
14. Mini Boom Boom Car Rp.15.000
15. Putar Petir Rp.15.000

Harga tiket permainan yang tidak termasuk dalam paket perorang :

1. Bioskop 4D Rp.25.000
2. Kids Studio Rp.25.000
3. Magic Thunder Coaster Rp.25.000
4. Dragon's Tower Rp.25.000
5. Jelajah Rp.25.000
6. Dunia Lain Rp.25.000

Bagaimana Cara Pemesana

2009-09-10T00:20:00.001-07:00

Pesan Kriuk

Kriuk 10

2009-09-09T23:55:00.002-07:00

Kriuk 9

2009-09-09T23:55:00.001-07:00

Kriuk 8

2009-09-09T23:54:00.000-07:00

Kriuk 7

2009-09-09T23:52:00.002-07:00

Kriuk 6

2009-09-09T23:52:00.001-07:00

Kriuk 5

2009-09-09T23:51:00.000-07:00

Kriuk 4

2009-09-09T23:50:00.002-07:00

Kriuk 3

2009-09-09T23:50:00.001-07:00

Kriuk 2

2009-09-09T23:47:00.000-07:00

Kriuk1

2009-09-09T18:50:00.000-07:00

Virtualization With KVM On Ubuntu

2009-09-08T01:08:00.000-07:00

This guide explains how you can install and use KVM for creating and running virtual machines on an Ubuntu 8.10 server. I will show how to create image-based virtual machines and also virtual machines that use a logical volume (LVM). KVM is short for Kernel-based Virtual Machine and makes use of hardware virtualization, i.e., you need a CPU that supports hardware virtualization, e.g. Intel VT or AMD-V.

I do not issue any guarantee that this will work for you!

1 Preliminary Note

I'm using a machine with the hostname server1.example.com and the IP address 192.168.0.100 here as my KVM host.

Because we will run all the steps from this tutorial with root privileges, we can either prepend all commands in this tutorial with the string sudo, or we become root right now by typing

sudo su

2 Installing KVM And vmbuilder

First check if your CPU supports hardware virtualization - if this is the case, the command

egrep '(vmx|svm)' --color=always /proc/cpuinfo

should display something, e.g. like this:

root@server1:~# egrep '(vmx|svm)' --color=always /proc/cpuinfo
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext
fxsr_opt rdtscp lm 3dnowext 3dnow rep_good nopl pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy 3dnowprefetch
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext
fxsr_opt rdtscp lm 3dnowext 3dnow rep_good nopl pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy 3dnowprefetch
root@server1:~#

If nothing is displayed, then your processor doesn't support hardware virtualization, and you must stop here.

To install KVM and vmbuilder (a script to create Ubuntu-based virtual machines), we run

apt-get install ubuntu-virt-server python-vm-builder

Afterwards we must add the user as which we're currently logged in (root) to the group libvirtd:

adduser `id -un` libvirtd

You need to log out and log back in for the new group membership to take effect.

To check if KVM has successfully been installed, run

virsh -c qemu:///system list

It should display something like this:

root@server1:~# virsh -c qemu:///system list
Connecting to uri: qemu:///system
Id Name State
----------------------------------

root@server1:~#

If it displays an error instead, then something went wrong.

Next we need to set up a network bridge on our server so that our virtual machines can be accessed from other hosts as if they were physical systems in the network.

To do this, we install the package bridge-utils...

apt-get install bridge-utils

... and configure a bridge. Open /etc/network/interfaces:

vi /etc/network/interfaces

Before the modification, my file looks as follows

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
       address 192.168.0.100
       netmask 255.255.255.0
       network 192.168.0.0
       broadcast 192.168.0.255
       gateway 192.168.0.1

I change it so that it looks like this:

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet manual

auto br0
iface br0 inet static
       address 192.168.0.100
       network 192.168.0.0
       netmask 255.255.255.0
       broadcast 192.168.0.255
       gateway 192.168.0.1
       bridge_ports eth0
       bridge_fd 9
       bridge_hello 2
       bridge_maxage 12
       bridge_stp off

(Make sure you use the correct settings for your network!)

Restart the network...

/etc/init.d/networking restart

... and run

ifconfig

It should now show the network bridge (br0):

root@server1:~# ifconfig
br0 Link encap:Ethernet HWaddr 00:1e:90:f3:f0:02
inet addr:192.168.0.100 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::21e:90ff:fef3:f002/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:23 errors:0 dropped:0 overruns:0 frame:0
TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1580 (1.5 KB) TX bytes:2356 (2.3 KB)

eth0 Link encap:Ethernet HWaddr 00:1e:90:f3:f0:02
inet6 addr: fe80::21e:90ff:fef3:f002/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:13539 errors:0 dropped:0 overruns:0 frame:0
TX packets:7684 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:19476849 (19.4 MB) TX bytes:647692 (647.6 KB)
Interrupt:251 Base address:0xe000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

vnet0 Link encap:Ethernet HWaddr 3e:7c:6f:ab:0e:8c
inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0
inet6 addr: fe80::3c7c:6fff:feab:e8c/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:468 (468.0 B)

root@server1:~#

We can now create our first VM - an image-based VM (if you expect lots of traffic and many read- and write operations for that VM, use an LVM-based VM instead as shown in chapter 6 - image-based VMs are heavy on hard disk IO).

We will create a new directory for each VM that we want to create, e.g. ~/vm1, ~/vm2, ~/vm3, and so on, because each VM will have a subdirectory called ubuntu-kvm, and obviously there can be just one such directory in ~/vm1, for example. If you try to create a second VM in ~/vm1, for example, you will get an error message saying ubuntu-kvm already exists (unless you run vmbuilder with the --dest=DESTDIR argument):

root@server1:~/vm1# vmbuilder kvm ubuntu -c vm2.cfg
2008-12-10 16:32:44,185 INFO Cleaning up
ubuntu-kvm already exists
root@server1:~/vm1#

We will use the vmbuilder tool to create VMs. (You can learn more about vmbuilder here.) vmbuilder uses a template to create virtual machines - this template is located in the /etc/vmbuilder/libvirt/ directory. Because we must modify the template, we create a copy and modify that one:

mkdir -p ~/vm1/mytemplates/libvirt
cp /etc/vmbuilder/libvirt/* ~/vm1/mytemplates/libvirt/

Now we open ~/vm1/mytemplates/libvirt/libvirtxml.tmpl...

vi ~/vm1/mytemplates/libvirt/libvirtxml.tmpl

... and change the network section from

[...]
   
     
   
[...]

[...]
   
     
   
[...]

because we want the VM to use our network bridge.

Now we come to the partitioning of our VM. We create a file called vmbuilder.partition...

vi ~/vm1/vmbuilder.partition

... and define the desired partitions as follows:

root 8000
swap 4000
---
/var 20000

This defines a root partition (/) with a size of 8000MB, a swap partition of 4000MB, and a /var partition of 20000MB. The --- line makes that the following partition (/var in this example) is on a separate disk image (i.e., this would create two disk images, one for root and swap and one for /var). Of course, you are free to define whatever partitions you like (as long as you also define root and swap), and of course, they can be in just one disk image - this is just an example.

I want to install openssh-server in the VM. To make sure that each VM gets a unique OpenSSH key, we cannot install openssh-server when we create the VM. Therefore we create a script called boot.sh that will be executed when the VM is booted for the first time. It will install openssh-server (with a unique key) and also force the user (I will use the default username administrator for my VMs together with the default password howtoforge) to change the password when he logs in for the first time:

vi ~/vm1/boot.sh

# This script will run the first time the virtual machine boots
# It is ran as root.

# Expire the user account
passwd -e administrator

# Install openssh-server
apt-get update
apt-get install -qqy --force-yes openssh-server

Make sure you replace the username administrator with your default login name.

(You can find more about this here: https://help.ubuntu.com/community/JeOSVMBuilder#First%20boot)

(You can also define a "first login" script as described here: https://help.ubuntu.com/community/JeOSVMBuilder#First%20login)

Whenever vmbuilder builds a new VM, it has to download all packages from an Ubuntu mirror which can take quite some time. To speed this up, we install apt-proxy...

apt-get install apt-proxy

... to cache the downloaded packages so that subsequent VM installations will be a lot faster.

Now open /etc/apt-proxy/apt-proxy-v2.conf...

vi /etc/apt-proxy/apt-proxy-v2.conf

... and replace the default Ubuntu mirror with a mirror close to you (e.g. http://de.archive.ubuntu.com/ubuntu if you are in Germany):

[...]
[ubuntu]
;; Ubuntu archive
backends = http://de.archive.ubuntu.com/ubuntu
min_refresh_delay = 15m
[...]

Then we restart apt-proxy:

/etc/init.d/apt-proxy restart

apt-proxy listens on port 9999, so we can pass our local apt-proxy "mirror" as an argument to the vmbuilder script.

Now take a look at

vmbuilder kvm ubuntu --help

to learn about the available options.

To create our first VM, vm1, we go to the VM directory...

cd ~/vm1/

... and run vmbuilder, e.g. as follows:

vmbuilder kvm ubuntu --suite=intrepid --flavour=virtual --arch=amd64 --mirror=http://192.168.0.100:9999/ubuntu -o --libvirt=qemu:///system --tmpfs=- --ip=192.168.0.101 --part=vmbuilder.partition --templates=mytemplates --user=administrator --name=Administrator --pass=howtoforge --addpkg=vim-nox --addpkg=unattended-upgrades --addpkg=acpid --firstboot=boot.sh --mem=256 --hostname=vm1

Most of the options are self-explanatory. --part specifies the file with the partitioning details, relative to our working directory (that's why we had to go to our VM directory before running vmbuilder), --templates specifies the directory that holds the template file (again relative to our working directory), and --firstboot specifies the firstboot script. --libvirt=qemu:///system tells KVM to add this VM to the list of available virtual machines. --addpkg allows you to specify Ubuntu packages that you want to have installed during the VM creation (see above why you shouldn't add openssh-server to that list and use the firstboot script instead).

In the --mirror line I have specified my local apt-proxy mirror (http://192.168.0.100:9999/ubuntu) - I have used my publically accessible IP address instead of localhost or 127.0.0.1 because this mirror will be used in the VM's /etc/apt/sources.list file as well, and of course, the VM won't be able to connect to 127.0.0.1 on the host. Of course, you can as well specify an official Ubuntu repository in --mirror, e.g. http://de.archive.ubuntu.com/ubuntu. If you leave out --mirror, then the default Ubuntu repository (http://archive.ubuntu.com/ubuntu) will be used.

The build process can take a few minutes.

Afterwards, you can find an XML configuration file for the VM in /etc/libvirt/qemu/ (=> /etc/libvirt/qemu/vm1.xml):

ls -l /etc/libvirt/qemu/

root@server1:~/vm1# ls -l /etc/libvirt/qemu/
total 8
drwxr-xr-x 3 root root 4096 2008-12-10 15:26 networks
-rw------- 1 root root 963 2008-12-10 16:25 vm1.xml
root@server1:~/vm1#

The disk images are located in the ubuntu-kvm/ subdirectory of our VM directory:

ls -l ~/vm1/ubuntu-kvm/

root@server1:~/vm1# ls -l ~/vm1/ubuntu-kvm/
total 402804
-rw-r--r-- 1 root root 240963584 2008-12-10 16:37 disk0.qcow2
-rw-r--r-- 1 root root 171094016 2008-12-10 16:37 disk1.qcow2
root@server1:~/vm1#

4 Creating A Second VM

If you want to create a second VM (vm2), here's a short summary of the commands:

mkdir -p ~/vm2/mytemplates/libvirt
cp /etc/vmbuilder/libvirt/* ~/vm2/mytemplates/libvirt/

vi ~/vm2/mytemplates/libvirt/libvirtxml.tmpl

vi ~/vm2/vmbuilder.partition

vi ~/vm2/boot.sh

cd ~/vm2/
vmbuilder kvm ubuntu --suite=intrepid --flavour=virtual --arch=amd64 --mirror=http://192.168.0.100:9999/ubuntu -o --libvirt=qemu:///system --tmpfs=- --ip=192.168.0.102 --part=vmbuilder.partition --templates=mytemplates --user=administrator --name=Administrator --pass=howtoforge --addpkg=vim-nox --addpkg=unattended-upgrades --addpkg=acpid --firstboot=boot.sh --mem=256 --hostname=vm2

(Please note that you don't have to create a new directory for the VM (~/vm2) if you pass the --dest=DESTDIR argument to the vmbuilder command - it allows you to create a VM in a directory where you've already created another VM. In that case you don't have to create new vmbuilder.partition and boot.sh files and don't have to modify the template, but can simply use the existing files:

cd ~/vm1/
vmbuilder kvm ubuntu --suite=intrepid --flavour=virtual --arch=amd64 --mirror=http://192.168.0.100:9999/ubuntu -o --libvirt=qemu:///system --tmpfs=- --ip=192.168.0.102 --part=vmbuilder.partition --templates=mytemplates --user=administrator --name=Administrator --pass=howtoforge --addpkg=vim-nox --addpkg=unattended-upgrades --addpkg=acpid --firstboot=boot.sh --mem=256 --hostname=vm2 --destdir=vm2-kvm

)

5 Managing A VM

VMs can be managed through virsh, the "virtual shell". To connect to the virtual shell, run

virsh --connect qemu:///system

This is how the virtual shell looks:

root@server1:~/vm1/ubuntu-kvm# virsh --connect qemu:///system
Connecting to uri: qemu:///system
Welcome to virsh, the virtualization interactive terminal.

Type: 'help' for help with commands
'quit' to quit

virsh #

You can now type in commands on the virtual shell to manage your VMs. Run

help

to get a list of available commands:

virsh # help
Commands:

help print help
attach-device attach device from an XML file
attach-disk attach disk device
attach-interface attach network interface
autostart autostart a domain
capabilities capabilities
connect (re)connect to hypervisor
console connect to the guest console
create create a domain from an XML file
start start a (previously defined) inactive domain
destroy destroy a domain
detach-device detach device from an XML file
detach-disk detach disk device
detach-interface detach network interface
define define (but don't start) a domain from an XML file
domid convert a domain name or UUID to domain id
domuuid convert a domain name or id to domain UUID
dominfo domain information
domname convert a domain id or UUID to domain name
domstate domain state
domblkstat get device block stats for a domain
domifstat get network interface stats for a domain
dumpxml domain information in XML
freecell NUMA free memory
hostname print the hypervisor hostname
list list domains
migrate migrate domain to another host
net-autostart autostart a network
net-create create a network from an XML file
net-define define (but don't start) a network from an XML file
net-destroy destroy a network
net-dumpxml network information in XML
net-list list networks
net-name convert a network UUID to network name
net-start start a (previously defined) inactive network
net-undefine undefine an inactive network
net-uuid convert a network name to network UUID
nodeinfo node information
pool-autostart autostart a pool
pool-build build a pool
pool-create create a pool from an XML file
pool-create-as create a pool from a set of args
pool-define define (but don't start) a pool from an XML file
pool-define-as define a pool from a set of args
pool-destroy destroy a pool
pool-delete delete a pool
pool-dumpxml pool information in XML
pool-info storage pool information
pool-list list pools
pool-name convert a pool UUID to pool name
pool-refresh refresh a pool
pool-start start a (previously defined) inactive pool
pool-undefine undefine an inactive pool
pool-uuid convert a pool name to pool UUID
quit quit this interactive terminal
reboot reboot a domain
restore restore a domain from a saved state in a file
resume resume a domain
save save a domain state to a file
schedinfo show/set scheduler parameters
dump dump the core of a domain to a file for analysis
shutdown gracefully shutdown a domain
setmem change memory allocation
setmaxmem change maximum memory limit
setvcpus change number of virtual CPUs
suspend suspend a domain
ttyconsole tty console
undefine undefine an inactive domain
uri print the hypervisor canonical URI
vol-create create a vol from an XML file
vol-create-as create a volume from a set of args
vol-delete delete a vol
vol-dumpxml vol information in XML
vol-info storage vol information
vol-list list vols
vol-path convert a vol UUID to vol path
vol-name convert a vol UUID to vol name
vol-key convert a vol UUID to vol key
vcpuinfo domain vcpu information
vcpupin control domain vcpu affinity
version show version
vncdisplay vnc display

virsh #

list

shows all running VMs;

list --all

shows all VMs, running and inactive:

virsh # list --all
Id Name State
----------------------------------
- vm1 shut off

virsh #

Before you start a new VM for the first time, you must define it from its xml file (located in the /etc/libvirt/qemu/ directory):

define /etc/libvirt/qemu/vm1.xml

Please note that whenever you modify the VM's xml file in /etc/libvirt/qemu/, you must run the define command again!

Now you can start the VM:

start vm1

After a few moments, you should be able to connect to the VM with an SSH client such as PuTTY; log in with the default username and password. After the first login you will be prompted to change the password.

list

should now show the VM as running:

virsh # list
Id Name State
----------------------------------
1 vm1 running

virsh #

To stop a VM, run

shutdown vm1

To immediately stop it (i.e., pull the power plug), run

destroy vm1

Suspend a VM:

suspend vm1

Resume a VM:

resume vm1

These are the most important commands.

Type

quit

to leave the virtual shell.

6 Creating An LVM-Based VM

LVM-based VMs have some advantages over image-based VMs. They are not as heavy on hard disk IO, and they are easier to back up (using LVM snapshots).

To use LVM-based VMs, you need a volume group that has some free space that is not allocated to any logical volume. In this example, I use the volume group /dev/vg01 with a size of approx. 454GB...

vgdisplay

root@server1:~# vgdisplay
--- Volume group ---
VG Name vg01
System ID
Format lvm2
Metadata Areas 1
Metadata Sequence No 2
VG Access read/write
VG Status resizable
MAX LV 0
Cur LV 1
Open LV 1
Max PV 0
Cur PV 1
Act PV 1
VG Size 454.67 GB
PE Size 4.00 MB
Total PE 116396
Alloc PE / Size 75000 / 292.97 GB
Free PE / Size 41396 / 161.70 GB
VG UUID q3xIiX-LDlm-IbMu-2PK2-WVoc-zHb8-8ibb32

root@server1:~#

... that contains the logical volume /dev/vg01/root with a size of approx. 292GB - the rest is not allocated and can be used for VMs:

lvdisplay

root@server1:~# lvdisplay
--- Logical volume ---
LV Name /dev/vg01/root
VG Name vg01
LV UUID f9W43z-RC1i-9JE8-CvOS-Qa89-0STq-q1M71e
LV Write Access read/write
LV Status available
# open 1
LV Size 292.97 GB
Current LE 75000
Segments 1
Allocation inherit
Read ahead sectors auto
- currently set to 256
Block device 254:0

root@server1:~#

I will now create the virtual machine vm5 as an LVM-based VM. We can use the vmbuilder command again. vmbuilder knows the --raw option which allows to write the VM to a block device (e.g. /dev/vg01/vm5) - I've tried this, and it gave back no errors, however, I was not able to boot the VM (start vm5 didn't show any errors either, but I've never been able to access the VM). Therefore, I will create vm5 as an image-based VM first and then convert it into an LVM-based VM.

mkdir -p ~/vm5/mytemplates/libvirt
cp /etc/vmbuilder/libvirt/* ~/vm5/mytemplates/libvirt/

vi ~/vm5/mytemplates/libvirt/libvirtxml.tmpl

Make sure that you create all partitions in just one image file, so don't use --- in the vmbuilder.partition file:

vi ~/vm5/vmbuilder.partition

root 8000
swap 2000
/var 10000

vi ~/vm5/boot.sh

cd ~/vm5/
vmbuilder kvm ubuntu --suite=intrepid --flavour=virtual --arch=amd64 --mirror=http://192.168.0.100:9999/ubuntu -o --libvirt=qemu:///system --tmpfs=- --ip=192.168.0.105 --part=vmbuilder.partition --templates=mytemplates --user=administrator --name=Administrator --pass=howtoforge --addpkg=vim-nox --addpkg=unattended-upgrades --addpkg=acpid --firstboot=boot.sh --mem=256 --hostname=vm5

As you see from the vmbuilder.partition file, the VM will use a max. of 20GB, so we create a logical volume called /dev/vg01/vm5 with a size of 20GB now:

lvcreate -L20G -n vm5 vg01

Don't create a file system in the new logical volume!

We will use the qemu-img command to convert the image to an LVM-based VM. The qemu-img command is part of the qemu package which we must install now:

apt-get install qemu

Then we go to the VM's ubuntu-kvm/ directory...

cd ~/vm5/ubuntu-kvm/

... and convert the image as follows:

qemu-img convert disk0.qcow2 -O raw /dev/vg01/vm5

Afterwards you can delete the disk image:

rm -f disk0.qcow2

Now we must open the VM's xml configuration file /etc/libvirt/qemu/vm5.xml...

vi /etc/libvirt/qemu/vm5.xml

... and change the following section...

[...]
   
     
     
   
[...]

... so that it looks as follows:

[...]
   
     
     
   
[...]

That's it! You can now use virsh to manage the VM.

7 Links

KVM (Ubuntu Community Documentation): https://help.ubuntu.com/community/KVM
vmbuilder: https://help.ubuntu.com/community/JeOSVMBuilder
JeOS and vmbuilder: http://doc.ubuntu.com/ubuntu/serverguide/C/jeos-and-vmbuilder.html
Ubuntu: http://www.ubuntu.com/

NAT Gateway, Iptables, Port Forwarding, DNS And DHCP Setup on Ubuntu

2009-09-08T01:04:00.000-07:00

So you are too poor to afford another expensive router and want to do things yourself. You have found the right tutorial! This tutorial will show you how to set up an Ubuntu 8.10 router with NAT, port fowarding, a DNS server and a DHCP server.

Why Ubuntu you ask?

Not only is Ubuntu a great operating system, it's also very flexible and powerful enough to allow you to get up and running in no time! Note: Please restart your computer after every step. This will ensure everything is working correctly.

Some of the basic things we are going to need are...

DHCP -- dhcp3-server
DNS -- bind9
iptables -- included /w ubuntu

First things first

Your going to need 2 network cards. Take your first network card, and plug your WAN connection into it. You should know what network card this is, eth0 eth1 ect... If you don't know what it is, trial and error my friend.

Let's just say that your WAN card is going to be eth0 (if it's eth1, just do everything the same but ajust your config accordingly). We want to locate the file /etc/network/interfaces. Do a VI on the file such as

sudo vi /etc/network/interfaces

You should see in the file (if you have nothing setup yet):

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback

We are going to add this to the file. As a side note, if you don't know how to use VI use nano or learn VI.

auto eth0
iface eth0 inet dhcp

The auto eth0 code tells eth0 to start on boot, similar to running

sudo ifconfig eth0 up

The code iface eth0 inet dhcp tells the eth0 interface to look for a DHCP server and get its info from there. This is important if your hooked up to a cable modem, as you will want to get a public IP from your ISP.

The next step to take is to configure your network card eth1. This will be your "LAN" card.

If you remember, our /etc/network/interfaces configuration looked like

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet dhcp

We are going to VI into the interfaces file again and add a few more lines:

sudo vi /etc/network/interfaces

Add these lines to the bottom of the file.

auto eth1
iface eth1 inet static
       address         172.17.207.121
       netmask         255.255.255.0
       broadcast       172.17.207.255
       network         172.17.207.0

This just gives you a static IP address for your server on your LAN card.

Your file should now look like this.

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet dhcp
auto eth1
iface eth1 inet static
       address         172.17.207.121
       netmask         255.255.255.0
       broadcast       172.17.207.255
       network         172.17.207.0

Now, before we forget, let's edit your /etc/hosts file.

sudo vi /etc/hosts

Make the file look like mine, though if you call your server userve or myserver you can change it.

Also note the asus.local domain name, it's a good idea to use your own such as mydomain.local but you can use what I have for learning purposes.

Now that we have our interfaces configured, we are going to install and set up a dhcp server. To install the dhcp server run the command

sudo apt-get install dhcp3-server

Let's edit the dhcpd.conf file. Start by running the command

sudo vi /etc/dhcp3/dhcpd.conf

Now if there is anything in that file, REMOVE IT.

Copy and paste this into your file, then write and quit.

ddns-update-style none;
option domain-name "whatever.local"; //change this to something you want.local such as mydomain.local
option domain-name-servers 172.17.207.121, 24.92.226.41; //you also might want to change that second dns server to your ISP's local DNS server
option routers 172.17.207.121;
default-lease-time 42300;
max-lease-time 84600;
authoritative;
log-facility local7;
subnet 172.17.0.0 netmask 255.255.255.0 {
       range 172.17.207.1 172.17.207.100; //you can expand the range just by changing .100 to .254 or somthing like that
}

Now run the command

sudo /etc/init.d/dhcp3-server start

This will start your DHCP server and we can label this part DONE.

Moving on to... DNS

Bind is the DNS package that we will be using. To install this, we just simply run

sudo apt-get install bind9

This will download and install our bind server.

Start by running the command

vi /etc/bind/named.conf

Then remove everything in the file and look for my comments, usually indicated by //.

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
// prime the server with knowledge of the root servers
zone "." {
       type hint;
       file "/etc/bind/db.root";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "asus.local" { //change asus.local to whatever you named your domain such as mydomain.local
type master;
file "/etc/bind/zones/asus.local.db"; //this file or foler does not exist so we will need to make it
};
zone "207.17.172.in-addr.arpa" {
type master;
file "/etc/bind/zones/rev.207.17.172.in-addr.arpa";//this file does not exist so we will also need to make it
};
zone "localhost" {
       type master;
       file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
       type master;
       file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
       type master;
       file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
       type master;
       file "/etc/bind/db.255";
};
include "/etc/bind/named.conf.local";

Before we can make the two files asus.local.db and rev.207.17.172.in-addr.arpa, we need to edit another file. So

sudo vi /etc/bind/named.conf.options

Remove everything in the file and use this...

options {
       directory "/var/cache/bind";
       // If there is a firewall between you and nameservers you want
       // to talk to, you may need to fix the firewall to allow multiple
       // ports to talk.  See http://www.kb.cert.org/vuls/id/800113
       // If your ISP provided one or more IP addresses for stable
       // nameservers, you probably want to use them as forwarders.
       // Uncomment the following block, and insert the addresses replacing
       // the all-0's placeholder.
        forwarders {
         24.92.226.41; //very important, change this to your LOCAL ISP's DNS server(s)
     24.92.224.40;
        };
       auth-nxdomain no;    # conform to RFC1035
       listen-on-v6 { any; };
};

Pay attention to the comments, they tell you to CHANGE our forwarders address(es) to your LOCAL ISP's DNS.

Next, cd over to your bind directory:

cd /etc/bind/
sudo mkdir zones
cd zones
sudo vi asus.local.db

(Or use your domain name such as mydomain.local.db.)

Once you are in the asus.local.db file or mydomain.local.db file (whatever you called it), copy and paste this, make the appropriate changes to your domain name.

$ORIGIN .
$TTL 4000 ;
asus.local.     IN SOA  server.asus.local. admin.asus.local. (
2007031001      ; serial
28800           ; refresh
3600            ; retry
604800          ; expire
38400           ; min
)
               NS      server.asus.local.
$ORIGIN asus.local.
               IN      A       172.17.207.121
www             IN      A       172.17.207.121 //an example
server          IN      A       172.17.207.121 //an example
macpro          IN      A       172.17.207.4   //an example

If you do an nslookup macpro, you will get 172.17.207.4 back as an answer, so change the domain names and IP's according to your settings.

Next, we are going to vi the rev.207.17.172.in-addr.arpa file that does not exist yet. But it will once we save it. So assuming you're still in the zones folder:

vi rev.207.17.172.in-addr.arpa

Copy and paste what I have here, making the appropriate changes.

$ORIGIN .
$TTL 28800      ; 8 hours
207.17.172.IN-ADDR.ARPA IN SOA server.asus.local. admin.asus.local. (
                               2008110601 ; serial
                               28800      ; refresh (8 hours)
                               7200       ; retry (2 hours)
                               604800     ; expire (1 week)
                               86400      ; minimum (1 day)
                               )
                       NS      server.asus.local.
$ORIGIN 207.17.172.IN-ADDR.ARPA.
4                     PTR    macpro.asus.local.

So now if you did a reverse lookup on 172.17.207.4, you would get macpro.asus.local.

Now run the command to start named:

sudo /etc/init.d/named start

If it does not start, check the logs in /var/logs.

Last but not least, IPTABLES

First thing is first, we need to edit sysctl.conf in the folder /etc/, so:

sudo vi /etc/sysctl.conf

Uncomment line 28. That means removing the # in front of it. The line should be net.ipv4.ip_forward=1

Next, let's vi over to rc.local:

sudo vi /etc/rc.local

Add these two lines to the bottom of the file:

/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables --table nat -A POSTROUTING -o eth0 -j MASQUERADE

This will set up your gateway using iptables. You can use iptables to make this more secure than this basic setup.

To forward ports, you can add something like this to the end of the rc.local file.

/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d jgibbs.dyndns.org --dport 3389 -j DNAT --to 172.17.207.4:3389

The long line above will port forward all incoming traffic on port 3389 to the IP 172.17.207.4, so I can remote desktop into my Windows box from outside my network.

You can do this with any ports you wish.

RESTART!

Also, report any problems and I will fix this tutorial with updates. Thanks

Installing Apache2 With PHP5 And MySQL Support On Ubuntu 9.04 (LAMP)

2009-09-08T00:57:00.001-07:00

LAMP is short for Linux, Apache, MySQL, PHP. This tutorial shows how you can install an Apache2 webserver on an Ubuntu 9.04 server with PHP5 support (mod_php) and MySQL support.

I do not issue any guarantee that this will work for you!

1 Preliminary Note

In this tutorial I use the hostname server1.example.com with the IP address 192.168.0.100. These settings might differ for you, so you have to replace them where appropriate.

I'm running all the steps in this tutorial with root privileges, so make sure you're logged in as root:

sudo su

2 Installing MySQL 5.0

First we install MySQL 5.0 like this:

aptitude install mysql-server mysql-client

You will be asked to provide a password for the MySQL root user - this password is valid for the user root@localhost as well as root@server1.example.com, so we don't have to specify a MySQL root password manually later on:

New password for the MySQL "root" user: <-- yourrootsqlpassword
Repeat password for the MySQL "root" user: <-- yourrootsqlpassword

3 Installing Apache2

Apache2 is available as an Ubuntu package, therefore we can install it like this:

aptitude install apache2

Now direct your browser to http://192.168.0.100, and you should see the Apache2 placeholder page (It works!):

Apache's default document root is /var/www on Ubuntu, and the configuration file is /etc/apache2/apache2.conf. Additional configurations are stored in subdirectories of the /etc/apache2 directory such as /etc/apache2/mods-enabled (for Apache modules), /etc/apache2/sites-enabled (for virtual hosts), and /etc/apache2/conf.d.

4 Installing PHP5

We can install PHP5 and the Apache PHP5 module as follows:

aptitude install php5 libapache2-mod-php5

We must restart Apache afterwards:

/etc/init.d/apache2 restart

5 Testing PHP5 / Getting Details About Your PHP5 Installation

The document root of the default web site is /var/www. We will now create a small PHP file (info.php) in that directory and call it in a browser. The file will display lots of useful details about our PHP installation, such as the installed PHP version.

vi /var/www/info.php

phpinfo();
?>

Now we call that file in a browser (e.g. http://192.168.0.100/info.php):

As you see, PHP5 is working, and it's working through the Apache 2.0 Handler, as shown in the Server API line. If you scroll further down, you will see all modules that are already enabled in PHP5. MySQL is not listed there which means we don't have MySQL support in PHP5 yet.

6 Getting MySQL Support In PHP5

To get MySQL support in PHP, we can install the php5-mysql package. It's a good idea to install some other PHP5 modules as well as you might need them for your applications. You can search for available PHP5 modules like this:

aptitude search php5

Pick the ones you need and install them like this:

aptitude install php5-mysql php5-curl php5-gd php5-idn php-pear php5-imagick php5-imap php5-mcrypt php5-memcache php5-mhash php5-ming php5-ps php5-pspell php5-recode php5-snmp php5-sqlite php5-tidy php5-xmlrpc php5-xsl php5-json

Now restart Apache2:

/etc/init.d/apache2 restart

Now reload http://192.168.0.100/info.php in your browser and scroll down to the modules section again. You should now find lots of new modules there, including the MySQL module:

7 phpMyAdmin

phpMyAdmin is a web interface through which you can manage your MySQL databases. It's a good idea to install it:

aptitude install phpmyadmin

You will see the following questions:

Web server to reconfigure automatically: <-- apache2
Configure database for phpmyadmin with dbconfig-common? <-- No

Afterwards, you can access phpMyAdmin under http://192.168.0.100/phpmyadmin/:

8 Links

Cara Mengubah Template Blog

2009-09-07T03:31:00.001-07:00

Template yang sudah menempel di blogmu bisa diubah. Blogger telah menyiapkan beberapa template yang bisa kalian gunakan.

Berikut langkah-langkahnya:

Dari Dashboard (control panel), klik layout
Kemudian klik link Pick New Template
Maka akan ditampilkan beberapa template yang bisa kalian pilih.
Pilih template yang menurutmu menarik seperti di bawah ini.
Jika sudah, klik SAVE TEMPLATE.
Apabila proses penyimpanan template berhasil, maka akan tampil konfirmasi seperti gambar di bawah ini (dalam versi Indonesia).
Klik link View Blog.
Dan akan tampil di blog anda, template yang sudah kalian pilih.

Cara membuat Posting baru

2009-09-07T03:30:00.000-07:00

Berikut langkah-langkah membuat posting baru

SIGN IN ke blogmu
Setelah tampil halaman Dashboard(control panel)
Klik Posts
Setelah itu anda akan masuk ke halaman posting, dan tulislah Posting yang akan kalian tampilkan
Kalo sudah semua, klik MEMPUBLIKASIKAN POSTING (PUBLISH POST)
Klik View Blog or Lihat Blog.

Atau Anda juga bisa langsung mengklik link Entri Baru yang ada di Navbar blog Anda.

Masuk ke Blog

2009-09-07T03:24:00.000-07:00

Berikut langkah-langkah untuk Login ke Dashboard (Control Panel)

Masuk di www.blogger.com
Lalu masukkan user name (email) dan password-Mu yang ada di sebelah kanan atas
Klik SIGN IN. Catatan: bila ada muncul kotak dialog setelah anda mengklik SIGN IN, klik NOT NOW(agar blog anda aman dari tangan-tangan jahil)
Di halaman Dashboard (control panel) terdapat link untuk ENTRI BARU(posting baru), Edit Entri, Pengaturan, Tata Letak, Lihat blog dll.

Selamat menikmati hidangannya!

Cara membuat Blog

2009-09-07T03:22:00.000-07:00

Berikut langkah-langkah mendaftarnya.

Pada address bar Mozilla Firefox ketik www.blogspot.com.
Klik link “CREATE YOUR BLOG NOW”.
Masukkan data-data yang diminta (harus diisi semua dengan benar). Catatan: sebelum membuat blogmu, buat dulu email-Mu. Saya yakin kalian sudah tau dan saya anggap kalian sudah membuatnya.
Kalo sudah diisi semua, klik “CONTINUE”.
Setelah muncul halaman “NAME YOUR BLOG”, isi semua yang diminta dan klik CONTINUE
Setelah itu akan muncul halaman “CHOOSE A TEMPLATE” dan silahkan memilih template yang kalian sukai. Klik seperti gambar berikut:
Dan klik CONTINUE
Setelah itu akan muncul gambar yang tertulis “YOUR BLOG HAS BEEN CREATED! Dan setelah itu klik START BLOGGING

taraaaaaaaa blog ente dah jadi.....

Useful commands for the Linux command line

2009-09-07T02:30:00.000-07:00

This short guide shows some important commands for your daily work on the Linux command line.

arch

Outputs the processor architecture.

$ arch

i686

cat

Outputs the contents of a file.

$ cat lorem.txt

Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

cd

Change the working directory.

$ cd /bin

chgrp

Change group ownership of files.

$ chgrp games moo.txt

chmod

Change access permissions of files.

$ chmod +x helloworld

chown

Change file owner and group.

# chown root lorem.txt

cksum

Print CRC checksum and byte counts of each file.

$ cksum lorem.txt moo.txt

3570240675 453 lorem.txt
4294967295 0 moo.txt

cp

Copies a file.

$ cp lorem.txt copy_of_lorem.txt

date

Outputs the current date and time.

$ date

Sat Mar 3 12:07:09 GMT 2007

df

Reports the amount of disk space used and available on filesystems.

$ df

Filesystem 1K-blocks Used Available Use% Mounted on

/dev/simfs 39845888 218048 39627840 1% /

dir

List directory contents.

$ dir

copy_of_lorem.txt lorem.txt moo.txt www

du

Estimate file space usage.

$ du -h /bin

7.8M /bin

echo

Display a line of text.

$ echo foobar

foobar

exit

Cause the shell to exit.

$ exit

fgrep

Print lines matching a pattern in a file.

$ fgrep "irure dolor" lorem.txt

commodo consequat. Duis aute irure dolor in reprehenderit in voluptate

find

Search for files in a directory hierarchy.

$ find hello*

hello_world
hello_world.c

free

Display amount of free and used memory in the system.

$ free

total used free shared buffers cached
Mem: 8299892 8287708 12184 0 2641772 1731236
Low: 3581300 3572764 8536
High: 4718592 4714944 3648
-/+ buffers/cache: 3914700 4385192
Swap: 8193140 2335664 5857476

grep

Print lines matching a pattern.

$ grep -i apple fruitlist.txt

apple

groups

Outputs the user groups of which your account belongs to.

$ groups

games users

head

Output the first part of files.

$ head -2 lorem.txt

Outputs the machines hostname on the network.

$ hostname

anapnea.net

id

Outputs user id, group id, and groups of your account.

$ id

uid=1478(smallfoot) gid=100(users) groups=35(games),100(users)

kill

End a process.

$ kill -9 18298

-bash: kill: (18298) - Operation not permitted

killall

Kill processes by name.

$ killall irssi

irssi(18298): Operation not permitted
irssi(13372): Operation not permitted
irssi(22048): Operation not permitted
irssi: no process killed

last

Show listing of last logged in users.

$ last -n 3

alice pts/6 192.0.34.166 Fri May 18 16:17 still logged in
bob pts/2 64.233.183.103 Fri May 18 16:17 still logged in
clare pts/6 72.5.124.61 Fri May 18 15:54 - 15:55 (00:01)

ldd

Print shared library dependencies.

$ ldd /bin/bash

libncurses.so.5 => /lib/libncurses.so.5 (0x40023000)
libdl.so.2 => /lib/libdl.so.2 (0x40065000)
libc.so.6 => /lib/libc.so.6 (0x40069000)
/lib/ld-linux.so.2 (0x40000000)

ln

Make links between files.

$ ln -s data.txt symlink.txt

logname

Print user's login name.

$ logname

smallfoot

ls

List directory contents.

$ ls

copy_of_lorem.txt lorem.txt moo.txt www

man

Opens the manual page for a software or function.

$ man bash

md5sum

Outputs the MD5 hash sum of a file.

$ md5sum lorem.txt

56da9e37259af34345895883e6fd1a27 lorem.txt

mkdir

Makes a directory.

$ mkdir foobar

mv

Moves a file.

$ mv lorem.txt ipsum.txt

nl

Number lines of files.

$ nl lorem.txt

1 Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod
2 tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim
3 veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea
4 commodo consequat. Duis aute irure dolor in reprehenderit in voluptate
5 velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint
6 occaecat cupidatat non proident, sunt in culpa qui officia deserunt
7 mollit anim id est laborum.

nm

List symbols from object files.

$ nm hello_world

080494a0 D _DYNAMIC
0804956c D _GLOBAL_OFFSET_TABLE_
08048474 R _IO_stdin_used
w _Jv_RegisterClasses
08049490 d __CTOR_END__
0804948c d __CTOR_LIST__
08049498 d __DTOR_END__
...

od

Dump files in octal and other formats.

$ od -t x /bin/sh

2376640 00098020 000054d4 00000000 00000000
2376660 00000020 00000000 000000c7 00000008
2376700 00000003 080e6500 0009d4f4 00004ae8
...

pidof

Find the process ID of a running program.

$ pidof fetchmail

22392

ping

Pings a host.

$ ping -c 2 127.0.0.1

PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.048 ms
64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.052 ms

--- 127.0.0.1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.048/0.050/0.052/0.002 ms

ps

Outputs running processes.

$ ps

PID TTY TIME CMD
21542 pts/12 00:00:00 bash
27706 pts/12 00:00:00 ps

pstree

Display a tree of processes.

$ pstree

pwd

Outputs the name of current working directory.

$ pwd

/home/smallfoot

rm

Removes a file or directory.

$ rm lorem.txt

rmdir

Removes a directory.

$ rmdir foobar

sed

Stream editor for filtering and transforming text.

$ echo "My cat's name is Bob" | sed -e 's/Bob/Mittens/g'

My cat's name is Mittens

sha1sum

Outputs the SHA1 hash sum of a file.

$ sha1sum lorem.txt

c942ddebd142ec8bacac9213d48096e74bab4957 lorem.txt

shutdown

Bring the system down in a secure way. All logged-in users are notified that the system is going down.

$ shutdown now

size

List section sizes and total size.

$ size /bin/bash

text data bss dec hex filename
621233 22712 19176 663121 a1e51 /bin/bash

stat

Outputs file status.

$ stat lorem.txt

File: `lorem.txt'
Size: 453 Blocks: 8 IO Block: 4096 regular file
Device: 77h/119d Inode: 27312217 Links: 1
Access: (0644/-rw-r--r--) Uid: ( 1478/smallfoot) Gid: ( 100/ users)
Access: 2007-03-03 12:24:39.000000000 +0000
Modify: 2007-03-03 12:24:39.000000000 +0000
Change: 2007-03-03 12:24:39.000000000 +0000

strings

Print the strings of printable characters in files.

$ strings hello_world

/lib/ld-linux.so.2
_Jv_RegisterClasses
__gmon_start__
libc.so.6
puts
_IO_stdin_used
__libc_start_main
GLIBC_2.0
PTRh%
[^_]
Hello World!

tail

Output the last part of files.

$ tail -2 lorem.txt

occaecat cupidatat non proident, sunt in culpa qui officia deserunt
mollit anim id est laborum.

talk

Talk to another user.

$ talk bob Lookout for the dopefish!

touch

Change a file's access and modification timestamps. If file does not exist, create it.

$ touch lorem.txt

tty

Outputs the name of the current terminal.

$ tty

/dev/pts/16

uname

Outputs operating system, hostname, kernel version, date and timp, and processor.

$ uname -a

Linux anapnea.net 2.6.9 #1 SMP Wed Jul 19 16:24:18 MSD 2006 i686 Intel(R) Xeon(TM) CPU 2.80GHz GenuineIntel GNU/Linux

uptime

Outputs the system uptime.

$ uptime

14:50:26 up 7 days, 17:52, 18 users, load average: 0.08, 0.02, 0.01

users

Print the user names of users currently logged in to the current host.

$ users

alice bob charlie eve

vdir

List directory contents.

$ vdir

total 8
-rw-r--r-- 1 smallfoot users 453 Mar 3 12:32 copy_of_lorem.txt
-rw-r--r-- 1 smallfoot users 453 Mar 3 12:24 lorem.txt
-rw-r--r-- 1 smallfoot users 0 Mar 3 12:32 moo.txt
lrwxr-xr-x 1 root root 18 Feb 27 19:33 www -> /var/www/smallfoot

w

Show who is logged on and what they are doing.

$ w

12:14:30 up 5 days, 15:16, 19 users, load average: 0.00, 0.00, 0.00
USER TTY LOGIN@ IDLE JCPU PCPU WHAT
charlie pts/0 Fri21 3:26m 2.52s 2.52s irssi
alice pts/2 Wed17 30:21m 0.00s 0.00s -bash
emma pts/4 11:37 36:57 0.00s 0.00s -bash
frank pts/5 11:48 11:03 0.00s 0.00s -bash
smallfoo pts/12 12:01 0.00s 0.04s 0.01s w

wall

Send a message to everybody's terminal.

$ wall next week we change the server for a new one

wc

Counts lines in a file.

$ wc -l lorem.txt

7 lorem.txt

whatis

Search the whatis database for complete words.

$ whatis bash

bash (1) - GNU Bourne-Again SHell
bash [builtins] (1) - bash built-in commands, see bash(1)

who

Outputs who is currently logged into the system.

$ who

charlie pts/0 Mar 2 21:37 (xtreme-11-65.acme.com)
alice pts/2 Feb 28 17:48 (147.21.16.3)
emma pts/4 Mar 3 11:37 (32.84-48-181.uac.com)
frank pts/5 Mar 3 11:48 (port-212-202-233-2.foobar.org)
smallfoot pts/12 Mar 3 12:01 (c-12776f4.cust.example.net)

whereis

Locate the binary, source, and manual page files for a command.

$ whereis bash

bash: /bin/bash /etc/bash /usr/share/man/man1/bash.1.gz

whoami

Outputs your username / the name of your account.

$ whoami

smallfoot

Managing OpenVZ With HyperVM On CentOS 5.2

2009-09-06T22:38:00.000-07:00

This guide explains how you can run virtual machines with Sun VirtualBox 3.0 (released on June 30, 2009) on a headless Ubuntu 9.04 server. Normally you use the VirtualBox GUI to manage your virtual machines, but a server does not have a desktop environment. Fortunately, VirtualBox comes with a tool called VBoxHeadless that allows you to connect to the virtual machines over a remote desktop connection, so there's no need for the VirtualBox GUI.

I do not issue any guarantee that this will work for you!

1 Preliminary Note

I have tested this on an Ubuntu 9.04 server (host system) with the IP address 192.168.0.100 where I'm logged in as a normal user (user name administrator in this example) instead of as root.

2 Installing VirtualBox

To install VirtualBox 3.0 on our Ubuntu 9.04 server, we open /etc/apt/sources.list...

sudo vi /etc/apt/sources.list

... and add the following line to it:

[...]
deb http://download.virtualbox.org/virtualbox/debian jaunty non-free

Then we download Sun's public key...

wget -q http://download.virtualbox.org/virtualbox/debian/sun_vbox.asc -O- | sudo apt-key add -

... and update our package database:

sudo aptitude update

Afterwards, we install VirtualBox 3.0 as follows:

sudo aptitude install linux-headers-$(uname -r) build-essential virtualbox-3.0 dkms

(The dkms package ensures that the VirtualBox host kernel modules are properly updated if the Linux kernel version changes.)

Creating group 'vboxusers'
Users of VirtualBox must be members of that group. Host network interfaces will be assigned to that group. <-- Ok

Should the vboxdrv kernel module be compiled now? <-- Yes

Now we must add the user that will run VirtualBox (administrator in this example) to the vboxusers group:

sudo adduser administrator vboxusers

VirtualBox is now installed and ready to be used.

3 Using VirtualBox On The Command Line

3.1 Creating A VM

To create a VM on the command line, we can use the VBoxManage command. See

VBoxManage --help

for a list of available switches and (highly recommended!) take a look at http://www.virtualbox.org/manual/UserManual.html#vboxmanage.

I will now create an Ubuntu 9.04 Server VM with 256MB memory and a 10GB hard drive from the Ubuntu 9.04 Server iso image (which I have stored in /home/ubuntu-9.04-server-i386.iso):

VBoxManage createvm -name "Ubuntu 9.04 Server" -register
VBoxManage modifyvm "Ubuntu 9.04 Server" -memory "256MB" -acpi on -boot1 dvd -nic1 nat
VBoxManage createvdi -filename "Ubuntu_9_04_Server.vdi" -size 10000 -register
VBoxManage modifyvm "Ubuntu 9.04 Server" -hda "Ubuntu_9_04_Server.vdi"
VBoxManage registerimage dvd /home/ubuntu-9.04-server-i386.iso
VBoxManage modifyvm "Ubuntu 9.04 Server" -dvd /home/ubuntu-9.04-server-i386.iso

3.2 Importing An Existing VM

Let's assume you have a VM called examplevm that you want to reuse on this host. On the old host, you should have a directory Machines/examplevm in the VirtualBox directory; Machines/examplevm should contain the examplevm.xml file. Copy the examplevm directory (including the examplevm.xml file) to your new Machines directory (if your user name is administrator, this is /home/administrator/.VirtualBox/Machines - the result should be /home/administrator/.VirtualBox/Machines/examplevm/examplevm.xml).

In addition to that copy the examplevm.vdi file from the old VDI directory to the new one (e.g. /home/administrator/.VirtualBox/VDI/examplevm.vdi).

Afterwards, you must register the imported VM:

VBoxManage registervm Machines/examplevm/examplevm.xml

3.3 Starting A VM With VBoxHeadless

Regardless of if you create a new VM or import and old one, you can start it with the command:

VBoxHeadless -startvm "Ubuntu 9.04 Server"

(Replace Ubuntu 9.04 Server with the name of your VM.)

VBoxHeadless will start the VM and a VRDP (VirtualBox Remote Desktop Protocol) server which allows you to see the VM's output remotely on another machine.

To learn more about VBoxHeadless, take a look at

VBoxHeadless --help

and at http://www.virtualbox.org/manual/UserManual.html#id2515738.

Links

VirtualBox: http://www.virtualbox.org/
Ubuntu: http://www.ubuntu.com/

Installing Apache2 With PHP5 And MySQL Support On CentOS 5.3 (LAMP)

2009-09-06T22:31:00.000-07:00

LAMP is short for Linux, Apache, MySQL, PHP. This tutorial shows how you can install an Apache2 webserver on a CentOS 5.3 server with PHP5 support (mod_php) and MySQL support.

I do not issue any guarantee that this will work for you!

1 Preliminary Note

In this tutorial I use the hostname server1.example.com with the IP address 192.168.0.100. These settings might differ for you, so you have to replace them where appropriate.

2 Installing MySQL 5.0

To install MySQL, we do this:

yum install mysql mysql-server

Then we create the system startup links for MySQL (so that MySQL starts automatically whenever the system boots) and start the MySQL server:

chkconfig --levels 235 mysqld on
/etc/init.d/mysqld start

Run

mysqladmin -u root password yourrootsqlpassword
mysqladmin -h server1.example.com -u root password yourrootsqlpassword to set a password for the user root (otherwise anybody can access your MySQL database!).

3 Installing Apache2

Apache2 is available as a CentOS package, therefore we can install it like this:

yum install httpd

Now configure your system to start Apache at boot time...

chkconfig --levels 235 httpd on

... and start Apache:

/etc/init.d/httpd start

Now direct your browser to http://192.168.0.100, and you should see the Apache2 placeholder page:

Apache's default document root is /var/www/html on CentOS, and the configuration file is /etc/httpd/conf/httpd.conf. Additional configurations are stored in the /etc/httpd/conf.d/ directory.

4 Installing PHP5

We can install PHP5 and the Apache PHP5 module as follows:

yum install php

We must restart Apache afterwards:

/etc/init.d/httpd start

5 Testing PHP5 / Getting Details About Your PHP5 Installation

The document root of the default web site is /var/www/html. We will now create a small PHP file (info.php) in that directory and call it in a browser. The file will display lots of useful details about our PHP installation, such as the installed PHP version.

vi /var/www/html/info.php

phpinfo();
?>

Now we call that file in a browser (e.g. http://192.168.0.100/info.php):

6 Getting MySQL Support In PHP5

To get MySQL support in PHP, we can install the php-mysql package. It's a good idea to install some other PHP5 modules as well as you might need them for your applications. You can search for available PHP5 modules like this:

yum search php

Pick the ones you need and install them like this:

yum install php-mysql php-gd php-imap php-ldap php-odbc php-pear php-xml php-xmlrpc

Now restart Apache2:

/etc/init.d/httpd restart

Now reload http://192.168.0.100/info.php in your browser and scroll down to the modules section again. You should now find lots of new modules there, including the MySQL module:

7 phpMyAdmin

phpMyAdmin is a web interface through which you can manage your MySQL databases.

First we enable the RPMforge repository on our CentOS system as phpMyAdmin is not available in the official CentOS 5.3 repositories:

On x86_64 systems:

wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm
rpm -Uvh rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm

On i386 systems:

wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
rpm -Uvh rpmforge-release-0.3.6-1.el5.rf.i386.rpm

phpMyAdmin can now be installed as follows:

yum install phpmyadmin

Now we configure phpMyAdmin. We change the Apache configuration so that phpMyAdmin allows connections not just from localhost (by commenting out the stanza):

vi /etc/httpd/conf.d/phpmyadmin.conf

#
#  Web application to manage MySQL
#

#
#  Order Deny,Allow
#  Deny from all
#  Allow from 127.0.0.1
#

Alias /phpmyadmin /usr/share/phpmyadmin
Alias /phpMyAdmin /usr/share/phpmyadmin
Alias /mysqladmin /usr/share/phpmyadmin

Next we change the authentication in phpMyAdmin from cookie to http:

vi /usr/share/phpmyadmin/config.inc.php

[...]
/* Authentication type */
$cfg['Servers'][$i]['auth_type'] = 'http';
[...]

Afterwards, you can access phpMyAdmin under http://192.168.0.100/phpmyadmin/:

Authentication, Authorization & Accounting with FreeRadius & MySQL backend & web based Management with Daloradius

2009-09-06T22:26:00.000-07:00

This tutorial explains how to set up a FreeRadius 2.x server for wifi authentication, authorization and accounting in conjunction with mysql & web based management with Daloradius on CentOS 5.x. Production deployment is also possible with minor tweaking. But as usual I do not guarantee anything & take no responsibilities.

(For basic how-to refer to the doc http://www.howtoforge.com/wifi-authentication-accounting-with-freeradius-on-centos5.)

The following steps are involved:

1- Building Centos 5.x binary rpms

2- Installing the binary packages

3- Configuring the FR with mysql

4- Setting up web management with Daloradius

Step 1- Building Centos 5.X packages

Get hold of src.rpms from http://rpmfind.net//linux/RPM/fedora/devel/src/freeradius-2.0.5-1.fc10.src.html.

rpm -Uvh freeradius-2.0.5-1.fc10.src

Note: It is recommended that you carry this building process on a non-production server & move over the final binary rpms over to the produtions server. But it isn't mandatory if you know what you're doing.

cd /usr/src/redhat/RPMS/SPECS

rpmbuild -bb freeradius.spec

Note: You might require some package for these. yum them & rerun the rebuild process. (I got prompted for the following)

beecrypt-devel, sqlite-devel, unixODBC, unixODBC-devel,
python-devel, pam-devel, elfutils-libelf-devel,
elfutils-libelf-devel-static, rpm-devel, elfutils-devel,
elfutils-devel-static, net-snmp-devel, mysql, cyrus-sasl-devel,
mysql-devel, openldap-devel, gdbm-devel, libtool-ltdl-devel,
postgresql, postgresql-devel

After a while (depending on your system specs) you should have rpms built at the following locations (if using x86):

cd /usr/src/redhat/RPMS/i386

Move these to a production server if this is your development workstation.

Step 2- Installing the binary packages

rpm -Uvh freeradius-libs-2.0.5-1.i386.rpm

rpm -Uvh freeradius-2.0.5-1.i386.rpm

rpm -Uvh freeradius-utils-2.0.5-1.i386.rpm

rpm -Uvh freeradius-mysql-2.0.5-1.i386.rpm

After running with the out of the box configuration, validate against a local user.

E.g: run radius in debug mode:

radiusd -X

From another shell run this while the radius -X is running:

radtest abc 123 localhost 1812 testing123

Make sure the user 'abc' with password '123' is set in the /etc/raddb/users file.

Step 3- Configuring the FR with MySQL

First the MySQL bits (creating the db & its admin user). Do the following from your shell.

mysqladmin -u root password 123456

mysql -u root -p

On the MySQL shell type the following:

CREATE DATABASE radiusdb;

GRANT ALL ON radiusdb.* TO radius@localhost IDENTIFIED BY "radpass";

exit;

Now import the file mysql-dalo-and-fr2x.sql schema into the radiusdb from the following zipped file which also contains daloradius.conf file for daloradius which is discussed later in the web management section.

Download sql_schema & daloradius.conf zipped

unzip daloradius.zip

mysql -u root -p radiusdb < /root/mysql-dalo-fr2x.sql

To have a look at the db schema do the following:

mysql -u root -p

use database radiusdb;

show tables;

quit;

Now edit your /etc/raddb/sql.conf.

Reset the user/password/database parameters to reflect the changes (eg. login = radius, password=radpass & radius_db=radiusdb); to turn the NAS management from MySQL, search for the line

readclients = no

and change it to:

readclients = yes

Edit the file /etc/raddb/sites-enabled/default and add a line saying 'sql' to the authorize{} section (which is towards the end of the file). Also add a line saying 'sql' to the accounting{} section to tell FreeRadius to store accounting records in SQL as well. Optionally add 'sql' to the session{} section if you want to do Simultaneous-Use detection. Optionally add 'sql' to the post-auth{} section if you want to log all authentication attempts to SQL.

Here is the authorize section:

authorize {
preprocess
chap
mschap
suffix
eap
sql
pap
}

And the accounting section:

accounting {
detail
sql
}

To insert a test user in the database, go to the MySQL shell and run this:

mysql -u root -p

mysql> use database radiusdb;

mysql> INSERT INTO radcheck (UserName, Attribute, Value) VALUES ('sqltest', 'Password', 'testpwd');

mysql> select * from radcheck where UserName='sqltest';

mysql> exit

Fire up radius in debug mode:

radiusd -X

Go to another shell and run the test:

radtest sqltest testpwd localhost 1812 testing123

At this moment you should see a message containing something like ... Accept-Accept ... which is an indication that your user is getting authenticated just fine.

Congratulations! Your FreeRadius + MySQL setup is working.

4- Setting up web management with Daloradius

The latest stable release is version 0.9-7.

Get hold of the it from http://sourceforge.net/projects/daloradius.

tar -zxvf daloradius-0.9-7.tar.gz

Download the following prerequisite packages:

yum install install httpd -y

yum install php php-mysql php-pear php-gd php-pear-DB -y

cp daloradius-0.9-7/ /var/www -vr

Change ownership:

chown apache:apache /var/www/daloradius-0.9-7 -R

A few tables that are needed by Daloradius, have already been created earlier.

Copy over the already unzippedfile daloradius.conf from the downloaded zipped file.

cp /root/daloradius.conf /var/www/daloradius-0.9-7/library/

Note: This file daloradius.conf has been modified for freeradius 2.x which, as of yet, is not being packaged by daloradius.

Now, simply adjust the MySQL database information in the DaloRadius config file.

vi /var/www/daloradius-0.9-7/library/daloradius.conf

Fill in the database details, few important parameters are listed below:

...........
......................
CONFIG_DB_ENGINE = mysql
CONFIG_DB_HOST = 127.0.0.1
CONFIG_DB_USER = radius
CONFIG_DB_PASS = radpass
CONFIG_DB_NAME = radiusdb
.......................
............

Change ownership & permission:

chown apache.apache /var/ww/daloradius-0.9-7/library/daloradius.conf

chmod 644 /var/www/daloradius-0.9-7/library/daloradius.conf

touch /tmp/daloradius.log

chown apache.apache /tmp/daloradius.log

Set up the apache server.

Edit the /etc/httpd/conf/httpd.conf file and append this to the end of the file (customize to your likings):

Alias /myradius "/var/www/daloradius-0.9-7/"

Options None
order deny,allow
deny from all
allow from 127.0.0.1
allow from

Save and exit.

Restart the httpd server:

/etc/init.d/httpd restart

Fire up Firefox (or any other borowser) and go to the URL http:///myradius.

Log in with the administrator for management:

username: administrator
password: radius

Change this information first for the sake of security (info is located in the operator table).

Take Daloradius for a spin. You should have created an sqltest user earlier. You can also try adding new users and testing the connectivity from within the Daloradius frontend.

Congratulations you are done.

Again developers of FreeRadius, MySQL and Daloradius, do accept my humble appreciation for all your efforts. Open source community, as always you rock, thanx.

(Note: I haven't mentioned anything regarding setting up eap/ttls in this article. For that, just follow the section of setting up certificates and eap.conf from the below mentioned HowtoForge link.)

References:

http://freeradius.org/

http://wiki.freeradius.org/SQL_HOWTO

http://sourceforge.net/projects/daloradius

http://www.howtoforge.com/wifi-authentication-accounting-with-freeradius-on-centos5

http://rpmfind.net//linux/RPM/fedora/devel/src/freeradius-2.0.5-1.fc10.src.html

Perintah Dasar Linux

2009-08-20T01:13:00.000-07:00

Ada beberapa perintah dasar yang tersedia di linux yang dapat dipakai, terutama yang biasa memakai OS DOS, ini dapat dijadikan sedikit referensi dalam mengingat perintah-perintah.

Format perintah dasar di linux yaitu :

perintah [opsi] [file sumber] [file tujuan]

Melihat daftar file (dir)
#ls —-> melihat daftar file
lokal:tes user$ ls contoh.log tes.txt
Menghapus file (del)
#rm ——> menghapus file / direktori
#rm test.txt : menghapus file test.txt
#rm * : menhapus semua file dalam satu folder
#rm -r tes : menghapus folder tes dan seluruh file/direktori di dalamnya
Mengganti nama file (ren)
#mv ——-> memindah file / direktori
#mv test.txt test.txt.old : mengganti nama file test.txt menjadi test.txt.old
#mv tes backup : mengganti nama folder tes menjadi backup
Menyalin file (copy)
#cp ——–> menyalin file / direktori
#cp test.txt test.txt.old : membuat salinan file test.txt.old dari file test.txt
#cp tes backup : membuat salinan folder backup dari folder tes (jika dalam folder tes ada filenya maka akan gagal)
#cp -r tes backup : membuat salinan folder backup dari folder tes dengan seluruh isinya
Membuat folder (mkdir)
#mkdir ——> membuat folder baru
#mkdir tes : membuat folder tes
Menghapus folder (rmdir)
#rmdir ——> menghapus folder
#rmdir tes : menghapus folder tes (akan gagal jika dalam folder ada filenya, gunakan perintah rm -r tes)
Pindah folder (cd)
#cd ——–> pindah folder
#cd tes : pindah ke folder tes
#cd /home/user/pra : pindah ke folder /home/user/pra
#cd.. : pindah ke folder sebelumnya / atasnya
Mengedit file (edit)
#vi ——–> membuat atau edit file (untuk ubuntu memakai vim)
#vi test.txt : jika file tidak ada maka akan dibuat file test.txt, jika file ada maka file text.txt akan diedit

perintah dalam editor :
i/o : [insert] untuk memulai mode insert
[esc] : keluar dari mode insert
/ : masuk perintah command
/w : tulis ke file
/q : keluar editor
/wq : tulis terus keluar editor
/q! : keluar dan abaikan perubahan

Membuat Server Centos Menjadi Gateway dan Transparent Proxy dengan Squid

2009-08-20T00:37:00.000-07:00

Tahapan yang dilakukan yaitu :

Membuat Centos agar menjadi routerDisini disiapkan router ang bersifat Masquerading, maksudnya yaitu, semua komputer yang ada di ruangan (yang terhubung melalui gateway eth1) akan bisa melakukan koneksi ke luar melalui eth0 dan mengatas namakan eth0. Misalnya komputer di ruangan IPnya adalah 192.168.210.12 melakukan browsing ke server 192.168.220.5 (komputer di LAN lain yang bisa diakses melalui eth0), maka komputer server 192.168.220.5 akan membaca yang akses ke servernya adalah 192.168.200.200 bukannya 192.168.210.12. Atau dengan kata lain masquerading bermaksud membungkus alamat IP asli menjadi alamat IP yang Masquerading.Scrip yang disiapkan yaitu

# Hapus semua seting yang sudah ada.
iptables –flush
iptables –table nat –flush
iptables –delete-chain
iptables –table nat –delete-chain

# Set up IP FORWARDing and Masquerading
iptables –table nat –append POSTROUTING –out-interface eth0 -j MASQUERADE
iptables –append FORWARD –in-interface eth1 -j ACCEPT

# Aktifkan packet forwarding di kernel
echo 1 > /proc/sys/net/ipv4/ip_forward

# routing
route add -net 192.168210.0 netmask 255.255.255.0 gw 192.168.200.1 dev eth1
Setup squid agar support transparent proxyYang dimaksud transparent proxy yaitu secara mudahnya adalah agar browsing di browser tidak usah melakukan seting proxy (tanpa proxy atau default port 80).Di Squid bisa dicek di data berikut :
# TAG: http_port
# Usage: port [options]
# hostname:port [options]
# 1.2.3.4:port [options]
#
# The socket addresses where Squid will listen for HTTP client
# requests. You may specify multiple socket addresses.
# There are three forms: port alone, hostname with port, and
# IP address with port. If you specify a hostname or IP
# address, Squid binds the socket to that specific
# address. This replaces the old ‘tcp_incoming_address’
# option. Most likely, you do not need to bind to a specific
# address, so you can use the port number alone.
#
# The default port number is 3128.
#
# If you are running Squid in accelerator mode, you
# probably want to listen on port 80 also, or instead.
#
# The -a command line option will override the *first* port
# number listed here. That option will NOT override an IP
# address, however.
#
# You may specify multiple socket addresses on multiple lines.
#
# options are:
# transparent Support for transparent proxies
# vhost Accelerator using Host directive
# vport Accelerator with IP virtual host support
# vport= As above, but uses specified port number
# rather than the http_port number.
# defaultsite= Main web site name for accelerators.
# urlgroup= Default urlgroup to mark requests
# with (see also acl urlgroup and
# url_rewrite_program)
# protocol= Protocol to reconstruct accelerated
# requests with. Defaults to http.
# no-connection-auth
# Prevent forwarding of Microsoft
# connection oriented authentication
# (NTLM, Negotiate and Kerberos)

# tproxy Support Linux TPROXY for spoofing
# outgoing connections using the client
# IP address.
#
# If you run Squid on a dual-homed machine with an internal
# and an external interface we recommend you to specify the
# internal address:port in http_port. This way Squid will only be
# visible on the internal address.
#
# Squid normally listens to port 3128
http_port 3128 transparent

Disini kita set proxy aktif di port 3128 dan transparent.
Langkah yang disiapkan yaitu :
1. Lakukan redirect akses yang bertujuan di port 80 ke port 3128 (port proxy)

iptables –table nat –append PREROUTING -i eth1 -p tcp –dport 80 -j REDIRECT –to-port 3128

printah ini bermaksud melakukan aturan dalam iptable agar paket tcp yang tujuannya port 80 diarahkan ke port 3128 (proxy server). Perintah ini bisa di tambahkan dalam scrip di pembuatan gateway diatas.

2. Uji coba proxy
2.1. Ujicoba dengan browser

Dari browser di komputer client dengan isian proxy di kosongkan (tanpa proxy) lakukan browsing ke www.uii.ac.id

2.2. Apabila gagal, coba lakukan pengujian dengan telnet, “telnet 192.168.210.1 80″

telnet 192.168.210.1 80
Trying 192.168.210.1…
Connected to 192.168.210.1.
Escape character is ‘^]’.

kemudian tuliskan alamat website yang akan dibuka, misalnya www.uii.ac.id
get http://www.uii.ac.id

maka berikutnya akan muncul isi text dari www.uii.ac.id

2.3. Apabila 2.2 berhasil membuka alamat website dengan port 80 akan tetapi 2.1 gagal, maka perlu diperhatikan sebagai berikut :
- Alamat gateway komputer client harus ke 192.168.210.1
- Alamat DNS server harus betul dan bisa berfungsi, apabila kosong/ tidak berfungsi maka tidak akan bisa browsing

Memulai menulis

2009-08-20T00:19:00.000-07:00

Semoga tidak ada rasa malas.
Malas itu antara lain;

Malas bekerja
- Karena tidak suka kerjaan
- Karena gaji rendah, dll
Malas belajar
- Karena tidak suka pelajaran, membosankan
- Karena tidak suka guru/dosennya
- Karena sulit, dll
Malas bermain
- Karena temannya nakal
- Karena permainannya membosankan, dll
Malas ….
TAPI JANGAN MALAS KOMEN YAKS...