-
Posts
86 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by MicrosoftTechy
-
LOL, Great job Microsoft
-
@Katy is correct you must ensure all client devices connected to the access layer have their default gateway set to the SVI ( Switch Virtual Interface ) address of the respective VLAN on the core. Once the packets arrive at your core layer you must the have a default route 0.0.0.0/0 on the core pointing to your router that I presume is connected to the internet. As there is no NAT taking place on this link core<--->next router ( internet ) you must ensure you update its routing table with the NLRI ( Network Layer Reachability Information ) back to the segments on the core otherwise, he won't know how to pass the traffic back and the traffic will blackhole. Best option if you core device supports it would connect a point-to-point link between the core and the magical internet router and on the core side apply an IP to the physical interface and do the same on the magical internet box. so core_Gi1/0/1<10.0.0.1/30 ---- 10.0.0.2/30>internet_Gi10/1 and set the following routes up core 0.0.0.0/0 next-hop=10.0.0.2 ( if I don't have the route in my table for the destined traffic ill pass it to the magical router ) Magical Internet Box 0.0.0.0/0 DONT PLAY WITH THIS hehe add the prefixes separately or you will break the internet 192.168.1.0/24 next-hop=10.0.0.1 ( Great I know how to send it back to the core ) 192.168.2.0/24 next-hop=10.0.0.1 ( Great I know how to send it back to the core ) 192.168.3.0/24 next-hop=10.0.0.1 ( Great I know how to send it back to the core ) Example subnets above ( these would be the segments the clients are in on the core ) Hope this helps - - - Updated - - - @Katy is correct you must ensure all client devices connected to the access layer have their default gateway set to the SVI ( Switch Virtual Interface ) address of the respective VLAN on the core. Once the packets arrive at your core layer you must the have a default route 0.0.0.0/0 on the core pointing to your router that I presume is connected to the internet. As there is no NAT taking place on this link core<--->next router ( internet ) you must ensure you update its routing table with the NLRI ( Network Layer Reachability Information ) back to the segments on the core otherwise, he won't know how to pass the traffic back and the traffic will blackhole. Best option if you core device supports it would connect a point-to-point link between the core and the magical internet router and on the core side apply an IP to the physical interface and do the same on the magical internet box. so core_Gi1/0/1<10.0.0.1/30 ---- 10.0.0.2/30>internet_Gi10/1 and set the following routes up core 0.0.0.0/0 next-hop=10.0.0.2 ( if I don't have the route in my table for the destined traffic ill pass it to the magical router ) Magical Internet Box 0.0.0.0/0 DONT PLAY WITH THIS hehe add the prefixes separately or you will break the internet 192.168.1.0/24 next-hop=10.0.0.1 ( Great I know how to send it back to the core ) 192.168.2.0/24 next-hop=10.0.0.1 ( Great I know how to send it back to the core ) 192.168.3.0/24 next-hop=10.0.0.1 ( Great I know how to send it back to the core ) Example subnets above ( these would be the segments the clients are in on the core ) Hope this helps Jack
-
Have I got a Network loop??
MicrosoftTechy replied to maxrebo's topic in Network and Classroom Management
Flashing is good, solid not so much. Edge devices while connected will always send some sort of traffic into the network. You must consider updates, AV patches and so forth. -
If i telnet to the "CORE" i can ping the other addresses on the VLANS but when i try a workstation and point it at the switches IP it wont route.
-
I cannot see how to enable it?
-
WatchGuard alternatives
MicrosoftTechy replied to CAWJames's topic in Internet Related/Filtering/Firewall
Amazing bit of kit. Packed full of everything you could EVER need! 4000 Security Appliances | Check Point -
CheckPoint is really good for application control. Application Control Software Blade | Check Point Software
-
System Center 2012, operating system deployment
MicrosoftTechy replied to ful56_uk's topic in Enterprise Software
By default SCCM dumps the image ( 55gb ) on the drive then applys it / unpacks it im not 100% sure but maybe thats why its failing because really 110gb is being used? Look here: http://systemcenter.no/?p=331 -
im having this issue with sccm 2012 sp1 on XP clients? Windows 7 are fine
-
put it in the bin
-
Hi Guys, Who prefers HP and who prefers Dell? Servers + Desktops Support, Hardware, maintenance etc......
-
HP Computer Workstation Hard Drive Screws Rails Tray Z400 6005 | eBay
-
put the users documents folder inside another folder for the user so instead of \\server\users$\username ( which you then see as My Documents ) do this \\server\users$\username\documents this way it will rename documents inside the username folder? that way you still see all your users folders by their name and you can just drill into documents.
- 12 replies
-
EDIT: Wrong user was not looking properly !!
-
Multiple because you then have the option if needed to only bring 'staff' fileserver down or 'students' not everyone
-
UIU Home
-
Laptop Suggestions for a pupil that will throw it around...
MicrosoftTechy replied to mrb-solutions's topic in Hardware
hahaha -
Safe to allow RDP access from External
MicrosoftTechy replied to SWICT's topic in Windows Server 2008 R2
I would not suggest doing this, maybe Remote Gateway or somthing? or VPN? Only last week i had to deal with a problem where someone was brute forcing a RDP session ( Port mapped 3389 to server ) and managed to get it !!!! Remote Desktop gateway over 443 or VPN is much more secure!! -
Don't worry im not planning on doing it !! im just suprised it's plausible
-
Any one done this or know what steps to take in-order to do this?
-
Possible to have TMG and VPN side by side?
MicrosoftTechy replied to nLinked's topic in Internet Related/Filtering/Firewall
Can you not use Remote Desktop Gateway ? or Windows Server | DirectAccess | Remote Access | VPN
