spc-rocket

Hi, Try using the microsoft driver for the autoloader i.e. change the driver to Unknown Medium Changer in device manager. Also make sure that you are using the symantec drive for the tape drive. On the SCSI properties of the scsi card that is connected to the autoloader make sure that enable scsi wide negotiation or similar (sorry can't remember the exact option). This will help a lot and i'm assuming that that the scsi card is only connected and serving the autoloader i.e. you are not using the same scsi card for your raid setup. Make sure that RAID setup uis turned off on the adaptec scsi card if it supports it. For more info check this --> http://www.edugeek.net/forums/hardware/19182-performance-dell-pv-124t.html Its for BE 11d but it should be relevant for your situation. HTH, Ash.

This is where sometimes the respect for HP is lost in my opinion. Ash.

- Silly question but have you enabled activesync for a particular user(s)? - also use the same url for activesync as you do for owa. make sure that in the Exchnage management console you have the internal and external URLs correctly defined in the following locations: Server Configuration | Client Access | Exchange ActiveSync's properties. On the isa server use the wizard to publish exchange activesync and make sure that your ISA server 2006 is at SP1 level to fully support SAN certificates. For more info check out this link --> Publishing Exchange 2007 OWA, Exchange ActiveSync and RPC/HTTP using the 2006 ISA Firewall (Part 1) and review all parts (6 in total) HTH, Ash.

I think its worth mentioning that there some servcies such as exchange 2007 requires the use SAN (Subject Alternative Names) certs to pulish servcies such as Outlook anywhere and Exchange Active sync. Wild card certs don't work Exchange activesync (EAS) because some mobile devices don't support them. So please whoever is researching this make sure that SAN certs are inlcuded as i'm sure these will more handy for many services certainly in exchange publishing scenarios. Ash.

Some of the inner workings of HP switches actually used cisco technology and is licensed by HP from cisco. So the credit goes to Cisco for reliability and not HP but it does help if there are competators to cisco to make their prices cheaper. Ash.

If you want to make backup faster to external disks then consider using eSATA rather than USB. This will make a hell of different in backup times. Ash.

I agree with this that the tape is getting full and therefore your backups will need to be spread over two tapes. I kinda anticipated this with our setup so we just set aside two tapes for a full backup even when it was not needed. Its your drive can take LTO4 tapes then these will give you more capacity but it depends on the drive and what media type it can take. Ash.

Are you sure that it is 800gb on backup tapes or is this with compression. If they are LTO3 tapes then it will be 400Gb native and 800Gb compressed. However 800Gb is assuming a 2:1 compression which i don't think you will get as some files will already be compressed. 550Gb should fit on one tape but it depends on the data backed up. We have 2 tapes for the full backups and 1 tape for each week day (Mon-Thur) for differential backup. Have you checked what kind of compression ration you are getting. You can do this by going into media and then clicking on a particular tape that has been used to backup data. At the bottom it will show you all kinds of info i.e. soft errors, how data is backed up, is it overwriteable, appendable etc. Ash.

Can you not create an ACL to allow the udp port. I suspect you will need to forward the protocol as well. I can't advise on how to do this as i don't know what is supported on 3com or the correct syntax. Try this manual -> http://support.3com.com/infodeli/tools/switches/7750/sw7750configgdv3.1.5.pdf page 78. Forward broadcast will not be available for the particular vlan but it will be as a global configuration. Have you tried that. Ash.

Hiya, You need to find out which udp ports is used for wake on lan and allow this protocol. This is how we got it running on our layer 3 infrastructure based on cisco switches. We used mc-wol for the wake up program and i think it uses UDP 65535, some uses UDP 9 or 7 and AMD magic packet uses 2304 HTH, Ash.

I think the 4Gb of bandwidth would be enought for a lot of applications and you are going to have to do serious hammering to saturate the bandwidth. Personally i think if you have 4 x1Gb ports on the san team two of the ports to the switch, use one for management and one for connecting to the main network for direct CIFS/NAS access. Looking at the diagram that has been posted it seems that you are not seggregating your main network i.e. where your users are from the SAN. It is advisable to keep the san filer and the connection (iscsi) on a seperate network to the main network. I.e. have a specific switch to handle the traffic from the SAN filer to the servers and other switches that connect to various cabinets throughtout the establishment. I would advise that people do a bit of traffic analysis i.e. how much traffic is actually used before purchasing extra NICs etc. Teaming more ports does use CPU on the file and also on the server end as well even if you have TOE card so make sure that people are aware of this. I would advise the use of jumbo frames on the connections from the server to the san filer but not on the connections from your server(s) to the main network. Jumbo frames can make a hell of difference depending what traffic it is and how much data is flowing around. It also helps to reduce the CPU cycles as well. Regarding the LACP configuration as other have pointed out make sure that both ends i.e. the SAN filer and also the switch are properly configured to handle or at least advertise that its capable of joining an LACP bundle/trunk. On cisco you would use the following command on each of the interfaces: channel-group mode active i.e. channel-group 1 mode active The first interface you will configure on the switch will create a virtual interface i.e. po1 and this will inhert the setting from the physical port. Not sure what HP is doing as cisco keeps the vlan info etc. Also trunk in cisco terminology means completely different - a link that carries multiple vlan traffic. Ash.

Hi all, Is it me or the site for last few days have been slightly slower? i.e. when clicking on new posts etc Ash.

Its the same thing as teaming however with LACP both the switch and the remote note i.e. teamed server will load balance depending how much traffic is moving through it. There are some types of teaming i.e. ALB (adaptive load balancing which does the cleaver stuff at the server but the switch just treats it as normal 2 x 1Gb connection i.e. the switch is not doing load balancing or dynamically adjusting the traffic where as with LACP it does this dynamically and also other protocols are supported. Ash.

Hi, What is the client OS that you're running i.e. windows xp (SP1, SP2, SP3 etc). Also make sure that you patch the IAS server with the hotfixes - there are not many for IAS so if you add SP2 for server 2003 then it should all be covered. I've not seen the above behaviour and it does look odd. Not sure about this but have a look at this -> http://searchnetworking.techtarget.com/expert/KnowledgebaseAnswer/0,289625,sid7_gci1093432,00.html It seems to talk about mac authorisation policy which you may not want. Ash.

Agreed, either 2008 or 2x Application server is the way to go. Citrix is also an option but it may be costly, then the other two. Ash.

Hi there, Can I ask - is there deduplication support on the new 7100 series models? This would be really good feature combined with say Symantec NetBackup to reduce the actual storage needed and also less to backup as well. Thanks in advance. Ash.

Ideally you want the transaction logs on a seperate disks to the information stores. The way we have it at our place is: C:\ 40Gb or so D:\ CD-ROM/DVD Rom drive E:\ Transactions logs on local disks (SAS 10K) F:\ Information stores (on the Storage Area Network NetApp Storevault S500) I would advise 8GB RAM for the server as 4Gb for exchange 2007 is considered a mimimum so if you can afford it spec it for 8Gb i.e. 4 x 2G modules. Ash.

Brill!! Ash.

As others have pointed out that self-signed Certs throw an error because the Root cert of the CA that issued the cert is not in the clien't trusted root certficate authorities store. One way to do this would be for all domain managed station to roll out the CA's root cert using GPO as mentioned. For exchange 2007 your cert really needs to be a SAN (Subject alternative Name) cert which allows you to add multiple names rather than usual one common name. This will cater for outlook anywhere, OWA etc. The IPSCA unfortunately don't do SAN certs but they do do wildcard certs. Some wildcard certs are not supported on mobile devices so to sue active sync to sync your calendars etc would be a problem. Best bet is to use on the commercial CAs becasue they have their CA's Root certs in most browsers on all most all PCs. Ash.

Yes this would work and odessey client is very flexible but its not free which is a pain. The normal windows wireless client had worked for us all most all the time. Ash.

Hi, Try to disable the N standard on the advanced properties of the wireless NIC card and make sure that the Power Save mode is turned off. Also set it to CAM (Constant Awake Mode). Change the wireless mode to b and g. Also worth (for testing at least) to turn of throughput enhancements as well Fat channel intorelant. HTH, Ash.

Can i ask in order to qualify for the grant does one need to order two units or can we choose to buy just 1. Ash.

Th way we have approached is to use setup a vlan and use radius server to authenticate users using their normal network logon. This cuts out the hassle of them remember yet another login. In the vlan we have setup a simple (desktop PC) DNS and DHCP server which is allowed to talk to the internal DNS server only. This hands out DNS and DHCP info to the sixthform student's devices. For security the DG is setup to point to out ISA server (a NIC dedicated to the wifi network) so we can create and lock down the vlan traffic. In additon i also created some ACLs on the switch for this particular vlan so it only allows HTTP, HTTPS, DNS to the outside world. The fact that the traffic is going through our proxy server which has our web filtering software installed is that we can create web filtering rules so they can only get to certain sites. The radius server setup we use is the MS IAS 2003 with PEAP authentication. We used our own CA to issue the certificate to the radius server. Students come in with their laptop to be configured on the wifi network, they are not allowed to do this themselves. During the setup we copy the CA's Root certificiate to the student's laptops so our CA is trusted during PEAP process. The students have to sign the form which has their name, serial number of their laptop/device and a signature of the technician who setup the wireless network. It also records the wireless mac address of the device as well. The above works well and it didn't really cost that much as the DHCP/DNS server is a old desktop station that was taken out of classroom due to low spec. Let me know if you want more information. Ash.

Yes this is what i was saying that each vlan will be a subnet and hence a different broadcast domain. I just don't know what the puprose of having multiple subnets in one (same) vlan. Ash.

Not if its all in one vlan. Remember you can multiple subnets on the same vlan. If you vlan it then you need to assign a subnet to each vlan and they you do get multiple broadcast domains. Ash.