Davit2005

Do you use decryption to the Internet?? Jus that I had an issue at a previous place where we had decryption setup but one app that used SSL did not seem to work and so we had to put a exclusion to the destination URL from memory. Apart from that or proxy/filter issues I cannot see why been a domain machine would matter???

Active Directory intergrated (I think it is called??) is better solution if running on premise. You would need to change the DNS servers in the relevant DHCP scope. Anything manually set will need manual intervention. Yep I suppose an extra VM NIC with jus the IP address and subnet mask but no DNS or gateway set would work as @CHiLL mentions but would want to be careful not to dual home the DC. And you still want to adjust clients in the long term. This is partly why I suggest reservations in DHCP rather than setting clients statically. You have benefit of the client always been at the same address and flexibility to change any of it's IP settings without going to the device most of the time. Of course any DCs, DNS or gateways, etc. should always have static IP addresses. But things like printers are better on a reservation in my opinion.

Yep you still have an issue if a service is using the DNS you will prob need to find out what server is using the 2012 for DNS then adjust it's DNS settings. Any device with DHCP providing the DNS servers should be easy but any static you will have to modify the client manually.

All the best to your recovery Andrew. Similar boat myself. I worked like a maniac when I started in IT mainly to forget about issues I was going through at home. By my second job in an IT career I was already doing advanced work, completed both an MCP and CCNA off my own back as well as a 5 week intensive course learning the basics in the period of 4-5 years. Hell my first job in IT I'd taken a 5k a year pay drop compared to my previous career to basically run round jus replacing parts other engineers had diagnosed faulty (then soon promoted to junior field engineer doing the troubleshooting myself) My second job was in a secondary school which was a wake up call. Stayed there a year, worked many 7am to 7pm days before moving on to actually technically run a network in a pre-prep. No thanks for the hard work put in which was above and beyond my role. But I was not complaining I got involved with as much as possible and absorbed like a sponge and moved onto a job earning 10k a year more than I started the career at 5 years before hand. After suffering a near fatal heart episode after countless tests and told on many occasions nothing was wrong I'm now at a stage where I do my best but there is a limit and I'm not afraid to speak up rather than bottle things away. I'm on Anti-depressants for anxiety, but thankfully the heart issue has 95% been cured and I'm not under any medication for my heart apart from the odd Blood Pressure monitor due to white coat syndrome. I've done a marathon, suffered and still suffer from Covid related issues since the heart op. Everyone is different, life would be boring if we weren't :-) Above all Wishing you all the best for the future

Use the same IP addresses on new domain controllers. I usually do this by building new DCs with a temp IP address, make sure everything looks ok by running DCDIAG etc. Then give the old DCs a different temp address and the new DCs the original IP addresses. There should be no need to keep the same name unless you have other services running on the DCs. Once happy with the new DCSs and the FSMO roles have been transfered over then remove DC services from the old DCs by un promoting them.

Network Awareness service (NLASVC). If it cannot talk to a MS server it thinks the device has no internet. It is the one icon that replaces the red cross, yellow exclamation mark and working internet symbols. About as useful for troubleshooting as a chocolate fireguard in front of a fire. Plenty of ways around.

802.1x? And if so has the device got the cert??

2 DCs on different hardware and a backup of both AD and SIMs. RAID these days for performance does it matter with SSDs? In the old days you used to have the database files on RAID 5 and the logs on mirrored RAID because the logs needed faster access. Yep you can get all fancy with HA/cluster solutions but as an org need to decide the required SLA and uptime.

Yep not true stacking but prob not a problem if using as a core. Still supports LAG over 2 different physical chassis from what they say. https://community.juniper.net/discussion/compare-mc-lag-and-virtual-chassis#:~:text=Reply%20Reply%20Privately-,MC%2DLAG%20is%20generally%20positioned%20as%20a%20'core'%20technology,as%20one%20by%20sharing%20information. MC-LAG only supports 2 devices apparently. It might be a cheap option for a core, that probably what it was aimed at. L3 redundancy still handled by VRRP, not a bad thing and been in use for years but it has some caveats. Any word about dynamic routing support yet, OSPF, BGP, etc? Yep some orgs might not need (because I know what replies I am likely to get )

It's like pronouncing WWW rather than World Wide Web , lol

All a bit fishy to me. In my opinion wash your hands of it, get things in writing and forget about it with one less system to worry about.

If you can get educational discount you could look at a new MAC mini M2.

Sometimes you even have to phone them up or log a case to be able to download software. Happened when I needed to download firmware for some Aruba CX switches. I can't fault the Aruba/HPE tech in most cases but their support and website leave a lot to be desired. I won't touch a 2nd hand HP server for home lab use, Dell do a much better job in my experience on the server side of things.

It's potentially a fair bit of work depending on what you want to test. I ran a full domain at home for a few years with domain controllers(domain services, DNS and DHCP), certificate services, MDT/WDS for OS deployment, Azure sync tool for Office 365. As long as you are aware of what the PowerShell scripts are doing and not jus some random script found on the Internet what are you expecting in terms of conflict or issues? It is pretty simple to setup a test domain and you have a few options if you go ahead i.e. put it all behind it's own router or firewall zone, you can use vlans on switches to keep it separate.

Yep if Radius giving out vlans then prob no need to set at switch level. Been 6-7 years since I played with this too, lol. Although we do use NAC auth BYOD ports they are only MAC based at the moment but the networks are seperated from our prod networks.

What switches do you use? It is prob a matter of re-enabling AAA on the required ports if the rest of the config is there then setting the unauth/auth vlan.

802.1x is still the most secure option for wired and wireless. MAC addresses can be cloned PSK is too easily shared on WiFi MPSK is better for WiFi if 802.1x is not an option but if you are still relying on the MAC address you are in the same boat regarding MAC randomization and cloning.

We run 4 HP 8200zl's soon to be replaced and have in excess of 300 vlans, intervlan routing, internal OSPF, 4 MSTP instances in a mesh topology. And we don't have any issues with Intervlan routing performance. We do run a few 5400r's but none of these do intervlan routing at the moment. I'm surprised you are struggling with 6 vlans. I would check out firmware too. Some firmware is known to show 100% utilization on ports falsely. Do you have any ACLs on the switches?

We need to improve public transport, but there is no joined up thinking. The need for cars will continue. Unfortunately we all can't live within walking or easy cycling distance from work. Currently it would take me in excess of 2 hours each way on public transport a journey of 25 miles as the crow flies and drivable in 30 mins at road speeds. I only have a car for work and 10 years out of 36 years of having a driving license I have not had a car because I either walked, cycled up to 7 miles each way or used public transport (or hired a car when going away). A previous place I worked it was 7 miles but it was quicker to walk than rely on public transport, go figure. Motorists (even busses) drive too close to cyclists and pedestrians that have to use the road in some cases because there are no pavements.

Yes should not block any pedestrians, wheelchairs or pushchairs but NEVER?? Car could also need to drive across pavement to get to a parking bay i.e. where there is a dropped curb

Surely cars should not be driving on the pavements except to park or access a driveway/parking bay (and not using it to jump queues). But yes even in those cases Cars should be looking out for the most vulnerable in anycase.

Got told off in the 1980's by a police officer for riding on the pavement. It was on a pavement connecting 2 roads that had been blocked off, lol. Shared pavements or not shared pavements cyclists need to respect the more vulnerable users. It does not help when the issue is ignorance by one or the other but still should edge on the safer option. Using a bell is prob better than shouting. As for cyclists running red lights, they are not helping at all. I've been on my push bike and have told some I've seen doing it.

Friend received a text message about a parking penalty over the weekend. I've not seen one before. https://www.gov.uk/government/news/dvsa-issues-warning-about-parking-fine-scam-text-messages Deleted, blocked and told friend to ignore the texts.

Above all don't worry too much. A good interviewer will normally pick up on whether you have capacity/attitude/ability to do the job or not. Be confident (not telling them how it should be done, what they should do or anything like that ) and professional :-)

Get teachers on board with what ever software you use. 1. It will help spread knowledge between them and reduce issues 2. When a student cannot access something they need to access for the lesson because of a block put on by another teacher, the teacher can most likely sort it out themselves rather than coming to IT Support.