Davit2005

YouTube feed

We have 3 controllers in a cluster, TBH without the controller our APs are useless paperweights once they are set as managed, lol. With over 2500 APs across 3/4 sites and upwards of 20k users (normally) 24/7 it works very well for us.

This is the same with a few different vendors that I have worked with including Ruckus, HP MSM. But our Aruba we'd simply add the controllers as the NAS clients as the APs create a tunnel to the controller. Makes it easy when you have 20 odd wireless subnets/vlans and can utilise a pool of vlans instead of specifying so gives a bit of flexibility.

Welcome

Just posted in a link which may be of use. https://support.goto.com/webinar/help/optimal-firewall-configuration-g2w060025

Port 433 , should that not be 443 ??? https://support.goto.com/webinar/help/optimal-firewall-configuration-g2w060025

You should be able to exclude certain folders. We had to do this a few years ago at a previous employment because staff were using itunes and backing up phones. I cannot remember where the settings are off my head, too long ago.

Have you got logging on the NPS? Do users get IP addresses, are there any logs on DHCP servers etc. Is there any issues with DHCP scopes running out? I'd even go so far as to regularly use a personal device/devices yourself to see if you can experience the issue in a separate location in your office maybe. Hopefully will give you the chance and time to troubleshoot/pinpoint rather than the panic button and restart multiple services to fix :-) Could be an issue with the wireless but just see if you can break it down a bit and rule out possible issues. Get MAC addresses of effected devices etc.

If you are doing vlan routing it is best to keep it on a switch rather than a firewall (or Router on a stick) The possible exceptions are where you'd prefer vlans seperated i.e. Guest networks, BOYD, CCTV etc. I'd personally route/terminate these on a firewall where it is sometimes easier to create rules than deal with switch ACLs but your mileage may differ. You are also going to be limited on the connection speed on firewall for your intervlan routing. So if you have a single 1GB port on the firewall all the clients are going to be using that 1GB including traffic not destined for external.

^ ^ I've done this many times on MDT. Once done just go back into MDT and where you can change things such as the image used for the task etc. You should be able to identify the folder for the task you want to copy in the control folder which you should have in both your deployment and build folders.

A Previous place they had 45 VMs when I started spread over 6 blades as had just recently started down the path of virtualization. Migrated services of about 50 physical to Virtual with updated OS, ended up about 150 over 16 hosts with nearly everything split. Reasonable size FE org. Veeam was always physical with a direct connection to FC SAN for backups. The only servers that had more than one role were DCs that had DNS and DHCP roles altogether. Were running datacenter versions on top of vmware I think, never handled the licensing side of things as much.

Yeah and I wonder how many adverts will be in those, lol.

Don't use vlan 1, separate management to seperate vlan and tagg vlans on uplink ports. Lock down management to specific IPs/ranges. Setup NTP etc. And naming ports is very handy as long as you have keep this updated, lol. But that is the same for all documentation. We normally go to 1 before the latest firmware unless the latest is years old. But just check the release notes.

There are a few on there.

This ^^ Ideally You want reliable DNS servers as forwarders on your DCs. So either Google or CloudFlare or Quad9 or others. I never point DC DNS to firewall, router or anything but external DNS. Personally, I have my firewalls pointed back to my DCs. Not sure why Smoothwall needs this but I have no experience of using them maybe they can advise why but suggest you ask a the techinical question before you consider changing. Maybe that your internet provider restricts DNS queries to specific IPs??

Being getting a few scam/smishing txts lately. o2 and PayPal both about failed payments.

We have radius server behind a firewall so allowed the specific vlan in the case where we had 100 Radius clients and then just added the individual clients to the NPS server. I think I had a powershell script somewhere that I used to import the clients into NPS as had to do 120 in one go once. Cannot for the life of me find it at the mo.

A true site survey and/or using a specific adapter that can also pick up interference etc. We had a bit of software at a previous place and used during a Ruckus deployment that used a specific WiFi dongle in a laptop which gives more info. This was about 10 years ago and cannot remember the name. I don't think it was that expensive, didn't have phone based apps back then I don't think. Also consider that phones could have weaker WiFi chips than a dongle with a decent antenna. But still a good idea to use a phone or similar to get likely signal strength and experience from user perspective. The app we used picked up interference in the area where the AP was covering.

If you have more than 1 host I'd suggest having a 2nd Domain Controller.

Where is the RADIUS server is it on the smoothwall? It should not matter where the DHCP server is as long as the clients can get to it. Last time I did this was on Windows NPS at home and on the unifi you tell it to use the vlan assigned by the radius server. I no longer have the setup at home because it just stopped working, don't know why, spent a bit of time troubleshooting and I couldn't be bothered to set it up again. With Unifi you normally need to tagg for the different vlans for the SSIDs on the port that the AP is plugged into, sorry if you have done this already.

Worth a thought. HomeAssistant has ability to sense when specific WiFi clients (works with Unifi) are connected so that is another option at least for leaving/arriving home routines. Just got to remember when I leave my phone at home or the battery has run out or Wifi is off, Lol.

Sidewalk essentially allows a neighbour's internet connection as a backup for devices such as Alexa speakers and Ring security cameras. https://www.bbc.co.uk/news/technology-55059696 Yeah I was one of these people who got the email. Whilst it's nice to get up, go to bed or leave home and give one command to deal with CCTV, lights, etc. I'm still in 2 minds to junk Personal assistants, buy some cheap tablets and just use Home Assistant (or HASS.IO) instead. Currently have HomeAssistant tied into most of the smart home and setup to get Public Transport and Weather updates.

We have or should I say had both a huge John Lewis and a Debenhams very close on our high street had a Clements as well but that is long gone but the shop has had a mixture of owners not really anything special and currently a cheap goods outlet. I cannot see anyone taking on these big shop spaces in a hurry at the moment. Shame as the town has seen masses of changes in recent years improving the appearance and pedestrian provision. Also to be considered the knock on effect of local nearby high street shops i.e. we have a biggish Apple store next to John Lewis, is that shop going to close as a result. Cannot forget a big hit for those employees as well :-(

There is talk about eGPU support not being there at the moment on the M1 powered devices and there were also reports of some USB 2.0 devices not working such as the Blue Yeti USB mic. I'm still considering a M1 based MAC Mini though, I only do basic Video edits on Premier Pro or more lately Davinci Resolve. I'd like to go Linux but a few of my paid for apps for Music are not available. From what I have seen in reviews the M1 chip is very good anyway for Video editing but the reviews are mixed with Pros and Cons depending on what sort of editing you need to do. 2 external displays for Video editing and other design applications is very popular. I can see the MAC Book Pro be used for Video editing because of its power and practicality against the MAC mini M1 so I can see this being a problem. And on top of that you have limited Windows OS support either for Bootcamp or virtualization because it is an Arm chip.