https://michealgarner.co.uk/https://michealgarner.co.uk/about/https://michealgarner.co.uk/blog/https://michealgarner.co.uk/blog/a-day-in-the-life-of-a-packet-on-a-50g-fortigate-part-1-ingress-np7-and-the-fast/https://michealgarner.co.uk/blog/a-day-in-the-life-of-a-packet-on-a-50g-fortigate-part-2-stateful-inspection-sess/https://michealgarner.co.uk/blog/a-day-in-the-life-of-a-packet-on-a-50g-fortigate-part-3-routing-policy-routes-an/https://michealgarner.co.uk/blog/a-day-in-the-life-of-a-packet-on-a-50g-fortigate-part-4-firewall-policy-nat-and-/https://michealgarner.co.uk/blog/a-day-in-the-life-of-a-packet-on-a-50g-fortigate-part-5-egress-npu-offload-and-t/https://michealgarner.co.uk/blog/adding-vendor-route-table-parsers-to-route-compare-and-why-the-work-lives-on-a-b/https://michealgarner.co.uk/blog/ai-part-1-why-i-gave-claude-write-access-to-my-site/https://michealgarner.co.uk/blog/ai-part-2-the-minimum-viable-mcp-server/https://michealgarner.co.uk/blog/ai-part-3-designing-tools-for-an-llm/https://michealgarner.co.uk/blog/ai-part-4-safety-rails/https://michealgarner.co.uk/blog/ai-part-5-prompt-driven-authoring-in-practice/https://michealgarner.co.uk/blog/ai-part-6-connector-quirks-and-what-id-do-differently/https://michealgarner.co.uk/blog/arista-vmware-sd-wan-deep-dive-part-1-components-gateways-and-the-three-planes/https://michealgarner.co.uk/blog/arista-vmware-sd-wan-deep-dive-part-2-routing-overlay-underlay-bgp-and-the-gatew/https://michealgarner.co.uk/blog/arista-vmware-sd-wan-deep-dive-part-3-the-data-plane-vcmp-dmpo-and-per-flow-stee/https://michealgarner.co.uk/blog/arista-vmware-sd-wan-deep-dive-part-4-topology-walkthroughs-mpls-only-meets-inte/https://michealgarner.co.uk/blog/arista-vmware-sd-wan-deep-dive-part-5-best-practice-failure-modes-and-a-design-c/https://michealgarner.co.uk/blog/bgp-route-dampening-part-1-the-flapping-problem-exponential-decay-and-cisco-conf/https://michealgarner.co.uk/blog/bgp-route-dampening-part-2-rfc-7454-bfd-and-where-dampening-still-belongs/https://michealgarner.co.uk/blog/building-a-fortimanager-lab-on-proxmox-part-1-lab-goals-compute-sizing-and-proxm/https://michealgarner.co.uk/blog/building-a-fortimanager-lab-on-proxmox-part-2-obtaining-the-image-qcow2-conversi/https://michealgarner.co.uk/blog/building-a-fortimanager-lab-on-proxmox-part-3-proxmox-networking-linux-bridges-v/https://michealgarner.co.uk/blog/building-a-fortimanager-lab-on-proxmox-part-4-a-lab-edge-fortigate-vm-in-front-o/https://michealgarner.co.uk/blog/building-a-fortimanager-lab-on-proxmox-part-5-registering-managed-fortigates-ado/https://michealgarner.co.uk/blog/building-a-polished-cli-tool-with-click-and-rich-packaging-network-automation-fo/https://michealgarner.co.uk/blog/comparing-route-tables-between-two-sources-a-small-python-tool-for-audits-and-mi/https://michealgarner.co.uk/blog/configuring-radius-admin-auth-on-fortigate-sd-wan-rbac-and-three-user-profiles-p/https://michealgarner.co.uk/blog/designing-an-arista-sd-wan-spoke-with-enhanced-ha-dual-dia-and-ospf/https://michealgarner.co.uk/blog/diffing-fortigate-configs-the-way-an-admin-reads-them-fgt-config-diff/https://michealgarner.co.uk/blog/finding-the-hop-thats-eating-your-packets-pmtud-sweeper/https://michealgarner.co.uk/blog/fortinet-sd-wan-jinja-orchestrator-part-1-the-two-template-engines/https://michealgarner.co.uk/blog/fortinet-sd-wan-jinja-orchestrator-part-2-anatomy-and-patterns/https://michealgarner.co.uk/blog/fortinet-sd-wan-jinja-orchestrator-part-3-psk-to-cert-with-fmg-as-ca/https://michealgarner.co.uk/blog/fortios-766-sd-wan-vrf1-transport-and-loopback-design/https://michealgarner.co.uk/blog/generating-a-constant-stream-of-web-traffic-with-python/https://michealgarner.co.uk/blog/how-i-use-claude-to-help-run-this-blog-and-why-you-should-try-it/https://michealgarner.co.uk/blog/iptables-to-nftables-migrating-production-firewalls-without-downtime/https://michealgarner.co.uk/blog/linux-networking-from-the-ground-up-network-namespaces-veth-pairs-and-building-a/https://michealgarner.co.uk/blog/mp-bgp-and-vrfs-on-fortigate-sd-wan/https://michealgarner.co.uk/blog/napalm-vs-netmiko-vendor-agnostic-config-vs-raw-cli-and-when-you-want-both/https://michealgarner.co.uk/blog/netmiko-in-practice-from-a-show-command-script-to-a-repeatable-audit-tool/https://michealgarner.co.uk/blog/network-emulation-with-netem-simulating-latency-loss-jitter-and-bandwidth-constr/https://michealgarner.co.uk/blog/nornir-for-network-engineers-running-automation-across-an-inventory-at-scale/https://michealgarner.co.uk/blog/nse4-exam-syllabus-study-roadmap-part-1-of-10/https://michealgarner.co.uk/blog/nse4-part-2-initial-configuration-the-security-fabric/https://michealgarner.co.uk/blog/nse4-part-3-firewall-policies-nat/https://michealgarner.co.uk/blog/nse4-part-4-authentication-fsso-certificates/https://michealgarner.co.uk/blog/nse4-part-5-logging-monitoring-diagnostics/https://michealgarner.co.uk/blog/nse4-part-6-security-profiles-web-app-control-av-ips-dos/https://michealgarner.co.uk/blog/nse4-part-7-ssl-vpn/https://michealgarner.co.uk/blog/nse4-part-8-ipsec-vpn/https://michealgarner.co.uk/blog/nse4-part-9-routing-sd-wan/https://michealgarner.co.uk/blog/nse4-part-10-high-availability/https://michealgarner.co.uk/blog/nse5-exam-syllabus-study-roadmap-part-1-of-10/https://michealgarner.co.uk/blog/nse5-part-2-initial-configuration-and-system-settings/https://michealgarner.co.uk/blog/nse5-part-3-high-availability/https://michealgarner.co.uk/blog/nse5-part-4-administrative-domains-adoms/https://michealgarner.co.uk/blog/nse5-part-5-device-registration-and-provisioning/https://michealgarner.co.uk/blog/nse5-part-6-device-level-configuration-and-templates/https://michealgarner.co.uk/blog/nse5-part-7-policy-and-objects/https://michealgarner.co.uk/blog/nse5-part-8-workflow-workspace-mode-and-revision-control/https://michealgarner.co.uk/blog/nse5-part-9-diagnostics-and-troubleshooting/https://michealgarner.co.uk/blog/nse5-part-10-advanced-features-and-integrations/https://michealgarner.co.uk/blog/parsing-show-command-output-textfsm-genie-and-ttp-for-structured-data/https://michealgarner.co.uk/blog/radius-vs-tacacs-on-fortigate-sd-wan-choosing-the-right-aaa-backend-part-1-of-2/https://michealgarner.co.uk/blog/resilient-dns-at-home-building-an-ha-pi-hole-pair-on-raspberry-pi/https://michealgarner.co.uk/blog/route-leaking-between-vrfs-on-cisco-ios-from-bgp-first-principles-to-advanced-ma/https://michealgarner.co.uk/blog/route-leaking-between-vrfs-on-fortigate-why-its-trickier-than-you-think/https://michealgarner.co.uk/blog/rya-src-part-1-gmdss-sea-areas-and-why-the-src-exists/https://michealgarner.co.uk/blog/rya-src-part-2-vhf-channels-frequencies-and-propagation/https://michealgarner.co.uk/blog/rya-src-part-3-the-vhf-set-controls-antennas-and-power/https://michealgarner.co.uk/blog/rya-src-part-4-dsc-and-mmsi-how-the-radio-calls-other-radios/https://michealgarner.co.uk/blog/rya-src-part-5-distress-dsc-alerts-mayday-and-mayday-relay/https://michealgarner.co.uk/blog/rya-src-part-6-urgency-safety-and-routine-voice-procedure/https://michealgarner.co.uk/blog/rya-src-part-7-epirbs-sarts-and-navtex/https://michealgarner.co.uk/blog/rya-src-part-8-protecting-distress-frequencies-false-alerts-testing-and-guard-ba/https://michealgarner.co.uk/blog/rya-src-part-9-regulations-licences-watchkeeping-and-who-makes-the-rules/https://michealgarner.co.uk/blog/rya-src-part-10-how-to-pass-the-src-exam-structure-timing-and-day-of/https://michealgarner.co.uk/blog/rya-src-part-11-practice-exam-50-questions-paper-a-and-paper-b/https://michealgarner.co.uk/blog/sdwan-resilience-part-1-design-and-assumptions/https://michealgarner.co.uk/blog/sdwan-resilience-part-2-bgp-on-loopback/https://michealgarner.co.uk/blog/sdwan-resilience-part-3-dc-to-dce-routing-static-ospf-and-bgp/https://michealgarner.co.uk/blog/sdwan-resilience-part-4-bfd-and-convergence-tuning/https://michealgarner.co.uk/blog/sdwan-resilience-part-5-performance-slas-and-service-steering/https://michealgarner.co.uk/blog/sdwan-resilience-part-6-building-it-right-full-dci-and-dual-active-advpn/https://michealgarner.co.uk/blog/spectre-meltdown-checker-auditing-cpu-vulnerability-mitigations-on-linux/https://michealgarner.co.uk/blog/ssh-hardening-beyond-the-basics-certificate-authorities-bastion-patterns-and-ses/https://michealgarner.co.uk/blog/tcpdump-deep-dive-bpf-filters-capture-rotation-and-cross-mapping-to-fortigates-d/https://michealgarner.co.uk/blog/the-ultimate-fortios-cli-reference-for-the-nse-4-exam-part-1-system-health-routi/https://michealgarner.co.uk/blog/the-ultimate-fortios-cli-reference-for-the-nse-4-exam-part-2-session-table-packe/https://michealgarner.co.uk/blog/the-ultimate-fortios-cli-reference-for-the-nse-4-exam-part-3-vpn-ha/https://michealgarner.co.uk/blog/velocloud-sd-wan-and-partner-gateways-part-1-mpls-only-site-architecture/https://michealgarner.co.uk/blog/velocloud-sd-wan-and-partner-gateways-part-2-onboarding-an-mpls-only-edge/https://michealgarner.co.uk/blog/velocloud-sd-wan-and-partner-gateways-part-3-taming-the-default-route-at-the-nni/https://michealgarner.co.uk/blog/who-sent-that-rst-forensic-classification-of-tcp-resets-with-rst-forensics/https://michealgarner.co.uk/contact/https://michealgarner.co.uk/contact/error/https://michealgarner.co.uk/contact/success/https://michealgarner.co.uk/cv/https://michealgarner.co.uk/guides/https://michealgarner.co.uk/guides/ai/https://michealgarner.co.uk/guides/cisco/https://michealgarner.co.uk/guides/fortinet/https://michealgarner.co.uk/guides/fortinet/nse4/https://michealgarner.co.uk/guides/fortinet/nse5/https://michealgarner.co.uk/guides/fortinet/troubleshooting/https://michealgarner.co.uk/guides/linux/https://michealgarner.co.uk/guides/personal/https://michealgarner.co.uk/guides/python/https://michealgarner.co.uk/guides/velocloud/