Davit2005

Is vlan 20 just a name for the route? Glad a bit of progress though :-)

Yeah I second this. I used to use the clap technique when had separate audio. I also have a Zoom which can send a tone to the output, so for instance can plug mics into Zoom then plug output of Zoom into the input of the camera then monitor with some headphones etc. The 30min cap on DLSR for Video is def something to consider, also if you do look at a DLSR for video see if you can get one with Clean HDMI output so you don't end up with focus boxes etc on the output from HDMI.

On the smoothwall you mention the static routes back to the subnets routed on the core switch, is this using the IP address on the default vlan of the core switch to each of the vlans routed on the core switch. i.e. 10.x.108.0 /22 via 10.x.104.[iP address of default on core]/22 Not sure of exact command or syntax on the Smoothwall. Have you default route set on the Core?? In theory should not matter about the trunk as I'm assuming you are only using one vlan *the default anyway, that been the case.

It will probably be routing as you say, the firewall will need to know how to get to the other network but always some sort of challenge between different firewalls Also suggest checking out the forums for each device and seeing if anyone has had any experience. The fact that the traffic is hitting the rule should indicate that the routing is there, does traffic hit rule both sides??

Yeah I think they are just uplinked. It is not a unworkable solution for a L3 core if you can afford the downtime for switch re-jiggery and a bit of re-configuration and the switch meets up with performance requirements etc. i.e. buy a 2nd then just reconfigure or have a 2nd sitting in a box ready for swap out and jus restore the config to it. I'm waiting to see a review of it. But the Aruba 5400 series is a good option for core, with multiple PSUs, MGMT modules and multiple links from edge switches for redundancy etc.

The question to ask is what they need the remote access for and work around that, OneDrive and sharepoint would be obvious contenders and give easy possibility of MFA etc.

Last thing I heard on the Aggregation Pro was the L3 was in Beta or Alpha. There is the ES-16-XG that can do L3 though. But I do like the look of it with all those ports and 25Gb uplinks. Also bear in mind that there is no stacking or IP redundancy that I am aware of on Unifi or Ubiquti switches so if you had a failure would prob need user intervention to bring up networking again.

I've jus found myself that if you have 2 links configured but only 2 switches the failover seems better, I'm not sure why but it jus seemed to failover quicker. But having 2 cables even on one link is going to be better as you do not have to worry about one getting disconnected. We usually at work just configure the 1st then just plug the rest in, if switches are the same type/model that doesn't matter. It prob is jus as easy to pre-provision then you can just take the switches to the comms room and plug them in as respective order, no need to power all the switches up on your bench. Of course you could consider powering up that for making sure you have not got a DoA switch. But pre-provisioning would mean that you just have setup once for the whole stack and no need to go back to any switch and configure another VSF port. BTW earlier 2930f only allowed 4 switches in a stack but newer firmware allows up to 8.

2930f use VSF which can use any front ports as long as the speed of the ports is consistent through the stack, I'm not sure on the CX to be honest as have not worked on them. But yes only need 2 DAC cables, 2 would be preferable in case one gets accidently disconnected. I believe the 2930M does not use VSF stacking though.

You can use 2 cables. My advice would be to for 2 switches to use 1 link as you have done. You will only get stack topology with 2 devices you need 3 devices for a ring. I have found configuring both ports on 2 devices as one link better for failover. You should only need to add the second port on subsequent switches from memory. You only need to add domain to the 1st switch and the 2nd switch should be completely at factory default with no configuration. Alternatively you can pre-provision switches which I have found preferable. vsf member type [should be on front of switch] mac-address [should be on bottom of switch] i.e. vsf member 5 type jl253a MAC-address 089734-9b6c79 if you issue a sh vsf on the existing stack switch it should then show correct model i.e. 5 089734-9b6c79 Aruba JL253A 2930F-24G-4SFP+ Switch 128 Provisioned Then you can configure priority, link ports etc before connecting 2nd switch. This is very usefull if you are using 2930f switches of different type. Any switch connected to a existing switch configured for VSF needs to be default factory configuration for the VSF to work. Once connected the switch will update it's firmware and join the stack, it is quite seemless or should be.

I wonder how many people just get on, go round and not workout how to get off it. Could do with some simple directional indicators on the roundabout if they have not got them, whatever they use??

confused.com

Backup is a backup, raid is no backup so whatever storage you use either local or shared it is still going to be treated the same way when it comes to backups though. For instance when it comes to redundancy if you are running Domain on site with DNS and DHCP make sure there is one DC on each host providing DNS and DHCP just to have 2 DCs as a minimum. INMO There is a cost vs need discussion to be had at the end of the day. Appetite/ability of the org/business to invest for shorter downtimes and redundancy.

Yeah 2nd the don't look down it. I normally use a phone camera to see if there is light coming out, one connector is normally rx the other is tx so will only get light at one end out of one in that scenario. We have a cheap fibre tester at work, it gives an idea of the quality of the link but not much more, cannot remember name. Anything we are still unsure of or need better check we use a cabling contractor.

Just wondering how much they are charging for all this? That seems a lot to cram in for 1 year even 2 surely depending on previous experience.

Not really the idea is it, to just fill up tables with random people that do not know each other.

lol, Didn't Top gear have the same idea with the Hammerhead Eagle iThrust ?? Only that you could drive at the same time if you were not overcome by diesel fumes. However defeats the goal of renewable energy a bit and need to carry a generator and diesel around in the boot. But yeah it would get you out of stick but I'm guessing the charge will not last that long.

Suggest raising again with them with the new found info i.e. pinging core switch pinging Smoothwall etc. just to see if this can narrow problem down. Check on the core switch logs for any issues on connectivity between the core and smoothwall.

Have you logged a call with Smoothwall about this at all. As you can ping core switch it looks like issue is not there to me.

Unfortunately not, I do not use the USG or any Unifi for firewall.

Yep correct for NTP, UDP port 123 just to external to allow internal services to connect to external NTP services.

Just allow NTP through the firewall UDP port 123, you could tie this down to specific external NTP services or internal source addresses but I don't normally bother. How you do that on the USG I do not know as I do not have one but it will be the same sort of process for other firewall filters/policies/rules. You can checkout some YouTube vidoes, just do a search for USG.

The ES-16-XG seems still to be an option I think but not sure what their plans are for the ES or ER range as of yet, has anyone? I had 2 of these at home for a while but found one needed the odd reboot even though same firmware versions. But the Aggregation Pro does seem a nice option but think the L3 functionality is still in Alpha, could be wrong on that though and cannot find much on the Internet

I was dubious about the iDRAC license but they offered full refund and it was only for home. I used RACADM and setup a linux box, my hope was something cheap and nasty to get a server booting on a schedule but you can use RADADM to shutdown etc. This was for a Dell T620 running iDRAC 7 and still a project to complete when I get my self motivated. https://www.dell.com/support/home/en-uk/drivers/driversdetails?driverid=2v013

I bought a iDrac 8 Enterprise license off ebay for about £80. I think you can get official ones for like under £200. But never seen the basic interface, Enterprise does give a lot of functionality and prob worth going for. Alternatively you could setup IPMI and that would give you some power/status control remotely.