MarsRed

Hi all, Not necessarily a wireless question, but certainly related... Just curious how folks are segmenting their networks and what that segmentation is used for? And what mechanism you are using for access/vlan assignments, particularly on wireless? wireless vs wired faculty vs students vs guests personal vs school-owned QoS/bandwidth throttling ACLs/network security - what are you protecting? Looking forward to hearing what people are doing! Thanks!

What are people using to live stream video within school? Ideally users could tune into a website from their laptops to view a live broadcast. Any ideas or recommendations? I'd rather not use a homegrown Quicktime/Darwin streaming solution; rather, something that is more robust (i.e. multiple streams, AD authentication, etc). Thanks in advance for your input!

Yup, we have MAK keys.

We buy desktops that come with Windows 7 licenses. But these are OEM licenses. We image our machines using scripted installs in KBox using Volume License media and our volume license key. When we do this, we are using up a volume license activation as opposed to the OEM activation that we purchased with the desktop. What do other people do to get around this? How are you taking advantage of OEM licenses with your imaging workflow and a variety of hardware being imaged? Thanks in advance!

Hi all, We want to renew the Root Certificate associated with our Enterprise Certificate Authority for us with our RADIUS server. Is there any implication to doing this? Will this affect any other clients that may be using certification services? Thanks!

Re: Avahi not broadcasting continuously, I haven't found a clear explanation for it, but did find a solution based on my realization that restarting Avahi fixed the non-broadcasting issue. I have a cron job that restarts avahi-daemon every minute (simply "restart avahi-daemon"). This seems to keep things going. Was that all you were having trouble with? Or was there another part to it?

Everything is working perfectly now! Not sure what was going on before, but thanks for your input.

I've configured cups to listen on all interfaces, but I'll try out tcpdump too to see what's going on. The iPad's gateway is the gateway for that wireless vlan (on which one of the machine's interfaces exists). Though I'm starting to think that my issue may have to do with how the printer is configured in cups. I'll try some things out and report back... Thanks!

That's what I was thinking. But the print server is on the same vlan since it's that same machine that's on all of the vlans via the virtual interfaces. Maybe that's part of the problem? Thanks for all of your help.

I'm using the machine to route mDNS between vlans, but it doesn't use traditional IP routing. The Avahi software just "reflects" mDNS traffic among the different interfaces/vlans without any routes required. Now that I understand that the behavior I was experiencing is normal without routing enabled, I'm okay with it. But I wonder if this has anything to do with another issue I was having? I am also using Avahi to advertise cups print queues via mDNS (emulating Apple's AirPrint) so that iPads can print to non-AirPrint printers. The queues function normally when I print a test page from the cups web interface and the queues are successfully advertised by Avahi to the iPads, but printing is unsuccessful from the iPads. The iPads and printers are on separate vlans. Would this have anything to do with my interfaces issue?

Okay, I just did this and can no longer contact the machine. I'll have to wait until I'm back in the office to look at the machine in person. Now I don't really want to use this machine as a router, so does enabling IP forwarding have any implications?

Doesn't look like it. Should I?

Here's the interfaces file: # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). # The loopback network interface auto lo iface lo inet loopback # The primary network interface auto eth0.1 iface eth0.1 inet static address 10.1.9.1 netmask 255.255.0.0 network 10.1.0.0 broadcast 10.1.255.255 gateway 10.1.0.1 vlan_raw_device eth0 auto eth0.2 iface eth0.2 inet static address 10.2.9.1 netmask 255.255.0.0 gateway 10.2.0.1 vlan_raw_device eth0 auto eth0.3 iface eth0.3 inet static address 10.3.9.1 netmask 255.255.0.0 gateway 10.3.0.1 vlan_raw_device eth0 auto eth0.4 iface eth0.4 inet static address 10.4.9.1 netmask 255.255.0.0 gateway 10.4.0.1 vlan_raw_device eth0 NIC is Broadcom Corporation NetXtreme BCM5755 Gigabit Ethernet PCI Express. I think your question about which vlan I'm pinging from might lead to an answer! I was only trying to ping from one vlan which can get to all other vlans. But now I realize (and just confirmed) that, when I'm on a given vlan, I am able to ping the interface of the machine that is on that vlan. i.e. from vlan1 I can ping the interface on vlan1, on vlan2 on I can ping the interface on vlan2, etc. Why might this be the case?

Yes, I do.

Hi there, I have an Ubuntu Server 12.04 machine with one physical NIC connected to a trunk port on a Cisco switch. I've installed the vlan package and configured /etc/network/interfaces to use 5 virtual interfaces with static IPs with vlan tagging, each on a different vlan. The problem I've run into is that only one of the virtual interfaces seems to be "active" at a time, meaning only one of the IP addresses can be pinged. Sometimes, with a restart, which interface this works on will change. I had read that I should only configure the gateway on one of the interfaces, so I did, but that's not even the interface that always works! Any ideas? Thanks.