colly72

We migrated from an on-site Exchange 2010 setup to an Exchange 2016 server. Had no problems with the migration, it's just a case of installing the new server then migrating across, as ITGURU says. You also get the option to install Office Online Server, which is a like an on-premise Office 265 editing/preview function. We had problems getting this to work, until CU3 was released but it's all working well now.

I've got one of these sat on my desk. Very quiet and a good switch (especially for free!)

Storage Spaces Direct is the killer feature for me - time to try it out!

Their Twitter feed says they will be back soon!!

Hi all, I've setup a new RODC in our DMZ and am now trying to authenticate from a Moodle server, using the RODC/ldap but I can't get it to work. I've added the correct subnet to the site in Sites & Services, but the Moodle server in the DMZ doesn't seem to be in the DMZ site, after I've rebooted it, so I'm thinking it's still trying to authenticate via the DCs on the internal LAN. The RODC seems to be working properly and I've created rules in the firewall to allow for the ad traffic to get through. Has anyone got this type of setup working? Thanks in advance, Michael

OK, so I've gone and tagged each physical port with each VLAN and then changed the VLAN in Hyper-V Manager, for each server. Now, the servers are getting the correct IP address from the DHCP scopes for each VLAN, so everything seems to be working so far.

I've got 2 Hyper-V hosts (replicated), set up with converged fabric networking (each using 8 NICs teamed together) and configured for the different types of traffic (Live Migration, CSV and Management). I'm now getting confused about how to VLAN the physical NICs and the virtual NICs for each VM. Should I just create trunk ports for each physical NIC, to allow each VLAN I need, then choose the VLAN I want for each VM in the Hyper-V settings?

OK, so my thinking on ACLs was a bit skewed. I now realise that inbound means at the source VLAN interface level, so in other words the acl needs to be applied to the curriculum vlan interface (i.e. filters the frames coming IN to that interface from the Curriculum network) and NOT the destination VLAN. So obvious when you know how!!!

Ok, to wrap this up, I applied the changes to the registry, to disable SSL3.0 and RC4, then rebooted the mail server. All is now working as expected.

Hi all, I've got a HP 5500 HI switch, that I've successfully created multiple VLANS on. I have a curriculum VLAN, with a subnet of 172.16.28.0/22 and an accounts VLAN which is 192.168.10.0/24. I've created the VLAN interfaces for each one (172.16.28.1 for curriculum and 192.168.10.1 for accounts) and devices that are untagged on each VLAN are getting correct IP addresses from the DHCP server and are able to ping other VLANs and devices. I now want to create an ACL that will prevent devices on the Curriculum VLAN from connecting to the Accounts VLAN. I've created an advanced ACL, which denies access from the source subnet to the desination subnet, then applied to the accounts VLAN interface as an inbound packet filter but I'm still able to ping the accounts vlan interface and any devices on the accounts VLAN. I've attached the current config below, which shows the Accounts VLAN (10) and the Curriculum VLAN (30). Could anyone shed some light on what I'm doing wrong? Thanks in advance. # version 5.20.99, Release 5501P20 # sysname HP # dhcp relay server-group 1 ip 10.1.0.149 # irf mac-address persistent timer irf auto-update enable undo irf link-delay # domain default enable system # telnet server enable # password-recovery enable # acl number 2000 rule 0 deny source 172.16.28.0 0.0.3.255 # acl number 3001 rule 10 deny ip source 172.16.28.0 0.0.3.255 destination 192.168.10.0 0.0.0.255 rule 5 deny icmp source source 172.16.28.0 0.0.3.255 destination 192.168.10.0 0.0.0.255 # vlan 1 # vlan 10 description Accounts # vlan 20 description Servers # vlan 30 description Curriculum # vlan 40 description Printers # vlan 60 description IT Admin # domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$1Q8Fu74tA+WUcpcTGeKWn2/UizAb4H3k7Q== authorization-attribute level 3 service-type telnet service-type web # cwmp undo cwmp enable # interface NULL0 # interface Vlan-interface1 ip address 10.1.3.67 255.255.0.0 # interface Vlan-interface10 ip address 192.168.10.1 255.255.255.0 dhcp select relay dhcp relay server-select 1 packet-filter 3001 inbound # interface Vlan-interface20 ip address 192.168.20.1 255.255.255.0 dhcp select relay dhcp relay server-select 1 # interface Vlan-interface30 ip address 172.16.28.1 255.255.252.0 dhcp select relay dhcp relay server-select 1 # interface Vlan-interface40 ip address 192.168.40.1 255.255.255.0 dhcp select relay dhcp relay server-select 1 # interface Vlan-interface60 ip address 192.168.60.1 255.255.255.0 dhcp select relay dhcp relay server-select 1 # interface GigabitEthernet1/0/1 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 30 40 60 # interface GigabitEthernet1/0/2 port link-mode bridge # interface GigabitEthernet1/0/3 port link-mode bridge port access vlan 10 # interface GigabitEthernet1/0/4 port link-mode bridge # interface GigabitEthernet1/0/5 port link-mode bridge # interface GigabitEthernet1/0/6 port link-mode bridge # interface GigabitEthernet1/0/7 port link-mode bridge # interface GigabitEthernet1/0/8 port link-mode bridge # interface GigabitEthernet1/0/9 port link-mode bridge # interface GigabitEthernet1/0/10 port link-mode bridge # interface GigabitEthernet1/0/11 port link-mode bridge # interface GigabitEthernet1/0/12 port link-mode bridge # interface GigabitEthernet1/0/13 port link-mode bridge # interface GigabitEthernet1/0/14 port link-mode bridge # interface GigabitEthernet1/0/15 port link-mode bridge # interface GigabitEthernet1/0/16 port link-mode bridge # interface GigabitEthernet1/0/17 port link-mode bridge # interface GigabitEthernet1/0/18 port link-mode bridge # interface GigabitEthernet1/0/19 port link-mode bridge # interface GigabitEthernet1/0/20 port link-mode bridge # interface GigabitEthernet1/0/21 port link-mode bridge # interface GigabitEthernet1/0/22 port link-mode bridge # interface GigabitEthernet1/0/23 port link-mode bridge # interface GigabitEthernet1/0/24 port link-mode bridge port access vlan 30 # interface GigabitEthernet1/0/25 port link-mode bridge # interface GigabitEthernet1/0/26 port link-mode bridge # interface GigabitEthernet1/0/27 port link-mode bridge # interface GigabitEthernet1/0/28 port link-mode bridge # interface M-GigabitEthernet0/0/0 # interface Ten-GigabitEthernet1/0/29 port link-mode bridge # interface Ten-GigabitEthernet1/0/30 port link-mode bridge # ip route-static 0.0.0.0 0.0.0.0 10.1.10.2 # dhcp enable # ssh server enable # load xml-configuration # load tr069-configuration # user-interface aux 0 user-interface vty 0 15 # return

We use Heart but I'd also look at Krystal.co.uk - really good support from personal experience.

Sophos UTM here. Works well in general and provides a lot of functionality in one box

I think it's version 48 of Chrome and version 43 of Firefox, where the problem starts, as they are blocking any sites using insecure RC4. You can test the SSL cert via https://www.ssllabs.com/ssltest/

I think I've narrowed this down to the new version of Chrome disabling websites that use RC4 ciphers. I think Firefox is also affected too. I'm updating the registry to disable RC4 and SSL3 on the mail server, although this requires a reboot to take effect, so I'll update this thread again, once it's been rebooted.

Hi all, I've got 2 HP 5500 HI switches that I want to be core switches. Ideally, I'd set them up in an IRF stack but as we don't have a 10GB link between them, thats currently not possible. Is there another way that I can still have them both as core switches and if so, how's the best way of setting that up? Or, should I just have one core switch and have the other sat on a shelf as a spare?

It is a SHA-256 cert though, which i believe should be OK?

Don't think so, it's a GoDaddy UCC SAN certificate, although the error details are not very helpful. It just states that the webpage might be temporarily down or moved permanently to a new address.

This problem is definitely a Chrome issue. Managed to install an older (v43) version and OWA works fine. Little to no info on the web about this problem though, which seems strange.

Hi all, We are experiencing a weird problem in Google Chrome, when trying to access Outlook Web App. Since the weekend, we've been unable to access the web app via Chrome and get an ERR_CONNECTION_RESET message when trying to do so. We've rebooted the Exchange (2010) servers, which then solved the problem on IOS devices, but desktop versions of Chrome (Windows and Mac), still can't access it. The issue does not manifest itself on IE, Firefox or Safari. We've also tried reverting back to older versions of Chrome, with no success. I've looked into the SSL cert and made sure that the site bindings are correct too. Has anyone else experienced a similar issue?

Thanks for all the input. I've decided to go down the converged fabric route and team all 8 NICs together then create virtual NICs for live migration, CSV (if we decide to cluster later on), and management.

Hi all, We've just taken delivery of 2 Dell R630 servers, which i'm planning to use to virtualise our ageing physical servers. One server will be our primary host, replicating the vms to the secondary server. I'm trying to get my head round how we should set up the networking side of things. Each of the new servers has 2, 4x1GB NICs, so a total of 8 in each server. What's the best way to go about setting up the networking. Should I have 2 (minimum)for the management, plus another 2 or more for the VMs (both teamed for fault tolerance)? The servers have local storage, so there's no SAN to complicate matters. Do i just need to set up 1 virtual switch? Any help/advice would be greatly appreciated. Thanks.

Yeah, good point, and that's what we may end up doing.

And not only that, but sometimes its also a political, rather than technical decision!

There you go though, SIMS etc matters, so you've kind of contradicted yourself. I agree, some of the data doesn't matter if we have to revert back to an older time, but some does. It's a case, as always, of finding a reasonable balance of risk v reward. Maybe 5 minutes is overkill but if it doesn't have an impact on performance, then why not?

Not sure yet - we've only just ordered the kit, so nothing built yet. Don't know whether to do every 5 minutes or every 30 seconds. I guess it depends on the performance hit? I think our school would realistically cope with 5 minutes worth of data loss in the event of a failure. I'm planning on having a RAID 6 array, albeit with flash backed cache on the controller, so I need to look at how that might affect the performance?