Tinribs
-
Posts
118 -
Joined
-
Last visited
About Tinribs
-
Hi All We've had our (admittedly ancient) MERU MC4200 die on us and be replaced under warranty by a reconditioned box. It was running 6.1-2-29 firmware. When we recovered the box for some reason the license file didn't make it across. No idea why as it worked fine the last time the box died - Fortinet support assisted and we had WiFi back within a day of the box arriving. This time, despite us even having the same engineer as last time, because the license file is nowhere to be found the box is running in demo mode and will only recognise two APs. The Fortinet engineer has told us we need to upgrade to at least version 7 as by then licensing was included in the firmware and our problem will be solved. He gave me a link to 6.1-4-2 as we needed to upgrade to that before we could go to 7 - he then told me I could get version 7 from their website but this is, from what I can tell, no longer the case. Basically I am hoping that someone here can point me in the direction of version 7.0.13. Without it we will never get our APs up and running again unless we replace the entire system. This is actually in planning now but the cost means it cannot be done for a while. TIA Mark P.
-
Hi All We have a MERU wifi network. Our controller died and Fortinet have given us a new one. In order to get it working we have to downgrade the firmware so it will work on our APs The procedure to downgrade is simple on paper. Boot into linux recovery. Connect to an FTP server with the file on it and the box does the rest. I've managed to get connected and authenticated to my own FTP server. Next step is to navigate to the file and do an mget. Problem is any command I give be it ls, dir or Mget causes the connection to time out. I'm connected via the network using cable. My PC and the MERU are on the same subnet and can talk to each other pingwise plus I've connected and authenticated. All the relevant firewall app and port rules that I am aware of are in place. I'm hoping this is straightforward - how can I stop the connection timing out when I run a basic command? TIA
-
Thanks Davit2005, To add to an already annoying situation our entire wifi network is down as the controller (MERU) died a while back and Fortinet are struggling to locate a replacement. I have considered that might also be a blocker for this but am hoping not. My knowledge of routing is verging on the negative. Our firewall is managed by our ISP on the cloud via Netsweeper. Do you think there is something they could arrange to assist with this? I did consider setting up a new VLAN just for this one box - no idea how to do it and cannot find a beginner's guide on how this could be done. It is just one IP address after all - shouldn't take a genius, just someone who knows what they are doing - which, unfortunately, is not me.
-
OK - my last post on this got absolutely no response so I'm trying from a different direction. Our WiFi network allows guests to connect to the internet using our infrastructure but with no access to any other parts of the school network. I have been asked to setup a sandbox machine for the A Level ICT class that has internet access but cannot access the rest of the network. My thought was to assign the computer one of the IPs in the range for the guest wifi. I've done this and added the relevant netmask and gateway etc. When the computer is turned on (it's a linux box btw) it is unable to see the internet. I am also unable to ping it from the switch it is connected to but I can see its mac address on the port that it is using. The switch can ping the relevant gateway but it can also not ping the linux box despite the box being turned on and despite the fact that it can see its MAC address. I am assuming that this is a routing issue and that I need to add a route from the linux box to the gateway on the switch it is connected to - either that or the VLAN that is used by the guest wifi network is not routed or configured on the directly connected switch. If I do a sh ip on the switch all the vlans bar the management vlan show as disabled under IP Config. I have no idea what that means. I can also see that there is no routing configured on any switch except for the core switches. Can anyone assist?
-
That is awesome! Saved me heaps of time and frustration working around the mental block I have for any kind of scripting. So cool and thanks for the hints about the installation. Invaluable. Many thanks
-
Thanks for this - maybe I should have mentioned that I am not very experienced in any form of coding and particularly when dealing with extracting data into variables. For example - our student home drives are all on the same server in a share called studenthomes$ inside this share are folders labelled for each intake year (ie Intake2014 for all students who are of the age when they would have started in 2014). Inside each of these is a folder named as the students' logon ID that is their home drive. I need to scan each intake folder, get the username from the home drive folder name then assign the relevant permissions to that folder using the username I've got earlier. I know I probably need a course in basic PS stuff but I am not nor ever will be able to think like a coder. I don't mind dabbling when inspired.... Seeing as it appears that every single student who was moved to a different OU is affected then I probably don't have the time to play around with this and get it working myself Much appreciate the reply and I can see the section of the script that does what I need. I just can't get my head around the string bit....
-
Hey all WE've had some new software installed to sync accounts from SIMS to AD. As part of the installation the people also made sure all the student accounts are in the correct intake years (OUs). This meant that some home drives had to be copied to new locations so GPO could map them correctly. Unfortunately this didn't go too well. It looks very much like most of the moved home drive folders were copied without adding/retaining the permissions for the individual students so that they don't actually map. I've run accessenum on one of the folders and I can see that there are many folders missing these permissions. I am looking for (and failing to find) a script or any programmatic way to ensure the permissions are correct for each folder. If there's a free app that can do it I'll go there. I've been looking at using Get-ADuser to do this but I have no idea how to even start this. Help??
-
Hi Our A Level ICT teacher has setup a Linux sandbox environment. We need to set things up so that Linux box can access the internet via our existing infrastructure but that cannot see or be seen by (at all) the rest of the school network. The computer should only be able to access the internet but it should still go out through our cloud hosted NetSweeper firewall. It will be connected wired to an Aruba switch. We have VLANs setup on the switches and we even have an internet only VLAN that is setup for our guest WiFi users. Our Wifi is down at the moment (another story). I tried connecting the computer using the Guest Only VLAN but it doesn't get connected (to the internet). I'm a bit of a noob when it comes to this so I'm guessing now but is this down to the IP address/setup on the Linux box (ie do we just need to assign it a static IP on the guest VLAN)? Failing that would I need to look at ACLs on the Aruba switch? I would have no idea how to go about that. Would the DNS settings on the Linux box still need to see the school network's DNS servers? I'm guessing this is pretty straightforward but it's a new area for me - ish. I have configured switches and set ports to VLANs etc so I have a basic idea of the HP CLI commands - just never got into ACLs TIA Mark P.
-
WiFi dead at school Need a quick temp workaround
Tinribs replied to Tinribs's topic in Wireless Networks
Thanks Norphy I've proposed getting a couple of these to the BM. They can always sit unused as a fallback in the event something similar happens again. We are getting a completely new Wifi system at some point in the future so the MERU dinosaur will go along with all his little MERU compy WAPS. I suspect MARAKI will be the choice (or Ruckus) but that's above my paygrade. I don't suppose you know what kind of coverage this device gives? Would be good to know how many we would need to get to provide skeleton coverage in key locations. -
WiFi dead at school Need a quick temp workaround
Tinribs replied to Tinribs's topic in Wireless Networks
All wired stuff works fine. We just can't connect twenty laptops in a classroom to cables.... Not enough points, desks not situated to allow safe cable trailing across the floor etc. -
WiFi dead at school Need a quick temp workaround
Tinribs replied to Tinribs's topic in Wireless Networks
Thanks for all the replies. We have/had an ancient MERU MC4200 that has turned into a Norwegian Blue. We do have warranty on it and a replacement is being sought by Fortinet but this could take a while as they are a very old piece of kit. All our WAPs are MERU and will only work through the MERU controller. We can't even access them directly or find out what IP they have with the controller down (afaik). I do know the VLAN they are on and the range of IPs that they should have and haven't actually considered trying to get them on a different VLAN to allow connectivity. There are 68 though so it may not be worth it. WE are starting a project to upgrade the entire wifi setup which is why we need a cheap temp solution rather than forking out for a new setup immediately. This is, at the moment, just a request from one department to allow 6th formers to use their school networks... Norphy - that WAP does look to be a possibility and I don't think the school would have an issue paying for a couple of those as a fallback. I assume config is pretty simple? -
HI All We're patiently waiting for a replacement WiFi controller to get the school up and wireless again. Several people have asked about enabling hot-spots on the school desktops so student laptops (which are actually school devices) can get to the net using teachers' mobiles. I said no to that straightaway for obvious reasons. The next proposal was to install a wireless hub in the classroom and connect to the school network via the hub. That has got me stuck. Most cheap home hubs are their own DHCP servers so that when any school device connects they will be given an IP from the hub and not the school's DHCP setup. Is there a way to get IP addresses from our school's DHCP server to devices that are connected to a wifi hub and therefore allow school laptops to talk to our domain etc as if they were connected to a network point in the room? Is this do-able with NAT or some other clever way of translating IPs? Never even thought of doing this before so no idea where to start.
-
Hi All Our ICT department has been given some level 3 hp switches. They have been wiped clean so are basically factory set. The ICT teacher will be using them as teaching tools for A level computing so their actual config is not my issue (I think). What I have been asked to do is to connect the switches to our LAN but only allow any computers on those switches to have internet access - they are not to be able to communicate to the rest of the school network in any way. He has only asked for one port to be configured. I assume this can be done with a VLAN but at the moment we do not have any VLANS setup in such a way. I am hoping there is a simple way to do this. I have some basic command knowledge of Aruba/HP switches (all the switches at school are Aruba/HP) but not currently enough to do this without assistance... IS it possible?? TIA
-
Afternoon all Our MC42000 died yesterday after I rebooted it. It now gives lots of not loaded retrying errors and hangs or gives stack crashes if we logon. I do have a backup of the OS and the config but I can't logon to the recovery OS to start the restore. I assume there are some default passwords for the logon but I can't find them anywhere. It may be that a recovery cannot be done as I have a gut feeling the hard drive has died. The original reason behind all this was the need to update this year's guest wifi accounts with the new dates for each week. Problem is once I got to the relevant section on the WebGUI everytime I chose one of the accounts to edit I was asked for a password to go further and the normal admin logon wasn't working. Our standard logon account for the GUI has full level 15 superuser access so it was a tad puzzling. I then noticed that the system time was way off (about 16 hours fast). With that in mind I rebooted the box and then it all went pear. We can now only access via console and the OS appears to be screwed.... Any help would be good as the school currently has no wifi TIA
-
Hi Our RDS server has died. We have problems getting agreement numbers for licenses as the relevant staff are unavailable. As a workaround I have installed RDG on one of our other servers. It all works fine internally but could not connect externally. Turns out to be a firewall issue. I had to point the clients at the external IP address for that server. Before I did that the connection would fail with resource unavailable errors. Once I change the IP the connection is now failing because the certificate isn't trusted. I think this is because the initial cert was created when the RDG was using the FQDN of the server name. When I try to connect using the external IP this obviously doesn't match the name on the cert and it gets angry. I tried recreating the cert on the RDG using the IP address without the FQDN and also with the FQDN. None of the them work. Wondering how I get this sorted? I am assuming that as I am seeing this error rather than the first error that I am actually connecting to the server now, and if I get this sorted we'll have a working backup method of connecting, at least for the short term, until the missing info is retrievable. TIA MArk P.