markwilfan

But 1k is £1 more than you have listed it for lol

It is stand alone. There is a completely free version too but will not allow local or tape storage so azure only. So technically not free

Exactly how we do it. Can't justify a San fast enough.

We use a trusty hp z5406 as our core but with a mix of unifi and hp edge switches. I have to say the unifi easily keep up with the hp switches with the added advantage of single pane of glass for stats & config. 48 port poe can be quite loud. The fans can be swapped out for these https://www.scan.co.uk/products/40mm-noctua-nf-a4x10-flx-low-noise-fan according to this https://community.ubnt.com/t5/UniFi-Routing-Switching/Switch-US-24-250W-Fan-Level-amp-PoE-Settings/td-p/1679256

One of the reasons I am pushing unifi switches in when we need to replace

Rds gateway for us. Intention of setting up a vpn away from our virtual smoothwall just in case

You only need the controller running for stats and guest portal.

That's a very clever business decision. It always annoys me that when we buy something there are always more things included than what we need. Saves everybody money. If you are buying 5 it is likely you are not wanting to use poe injectors.

I have 3 ptp links for cctv but not 2 miles worth

I'd be tempted to do it myself as long as there is line of site. The ubiquiti airfiber stuff looks incredible for the dosh https://www.ubnt.com/airfiber/airfiber5/

Sounds like a plan stan

I've used https://bombich.com carbon copy cloner to clone our mac mini to an ssd a while back. Trial version worked fine

Thanks again for this. It's brill.

@ntoupin just a thought. I've used github to install your script. If I "git pull" if you update it I assume that will wipe out my configs Just noticed a few things whilst messing about. $ldap_users_group = "Admin Staff"; is missing from index.php also at the moment the $ldap_manager_group doesn't do anything as it is given $access = 3 and that is not specified so you get normal user periods. I've just changed line 100 on authenticate to so that our domain admins can create accounts up to 1 year. Thanks again. Been looking for something like this for ages.

Rrrrrrrrrrrrrrrrrewind. I'd mistyped the password for the ldap bind. Thanks so much for your help @ntoupin . Great little script too!

Thanks for that @ntoupin Alas I get php errors on trying to create an account.

Thanks @ntoupin Didn't know how to turn on logging. Eventually got it to spew out some logs and found this error "TLS: peer cert untrusted or revoked (0x42)" A bit of Google-Fu later (other search engines are available) and adding "TLS_REQCERT allow" to the /etc/ldap/ldap.conf file has let me log in. Not tested yet though as got excited I got this far.

Anybody got any further with this? I still can't get past the login page I know ldaps is working and according to phpinfo php-ldap is working As far as I can see my config and authentication files look correct

You could try and replace the hard drive with an ssd. I did that and our flys now. Bit fiddly though. Kept the 2nd drive as a spinning rust drive for caching

Beat me to it lol

This is possible using fsrm. You could monitor or block naughty names. Would need a bit of setting up with lists of words

@caffrey you only need ip helpers to let devices know where other services are if they are on a different subnet. As your clients and servers are on the same subnet you don't need them. Here is my VLAN map

When I get to work I'll post a map of how we got ours configged