Davit2005

I went for Hue for the option of a Hub which used wired connectivity rather than multiple WiFI devices. I also have Hive as I prefer the Hub and the Plugs have been rock solid compared to the TP links that I tried 3 of. I use a Harmony Hub which controls my AV Amp, TV, Apple TV and BlueRay player. Alexa controls it all, I say I'm up and it switches on lights in Lounge and Kitchen and turns the TV onto a specific channel. When I leave home it switches off all the lights and AV equipment and turns on the internal CCTV cameras. I say watch DVD or Movies and it switches on the AV Amp, Blueray, turns down the lights and turns on the TV to correct input.

Just bought one of these for home as at the moment I am using a NUC which is a bit too powerful just for this task. I cannot fathom why there is not an option in the GUI to set a static MAC address, after all this is providing a service so in theory should have a static IP. Athough should not really need one as with STUN running and no need for NAT/Port forwarding rules on your firewall/router the Video Protect App on a mobile device can be used for most things. Further more the appliance does not seem to use its MAC address as a unique identifier for retrieving an DHCP reservation. i.e the setting a DHCP/BOOTP reservation against the MAC address this fails to work. When you look at the lease, served by the same DHCP server providing the reservation the identifier is a long series of numbers, not a normal MAC address. The underlying OS seems to be a Unifi version of Linux and I cannot find any config files in the cli to modify to have a static IP.

Spanning tree would be my first thought too. Have you got multiple connections between the edge switches and the 5412. Check the logs of each switch, as you lose connectivity you may need to do this via console to the core. This is typical behavior of spanning tree, broadcast storms can build up. Also make sure you have enabled at least MSTP on the core switch and the edge switches.

Thanks @Rob_D I'll have to remember that one.

With Citrix you will still need to consider MS licensing on top, as other have said it is very complex and not cheap but is the best in my opinion. So my choice would be A or C.

It should show the source, this may include exchange servers via webmail/outlook if you are using on site exchange server. It will not show the application but it should help you find the source machine where attempts are being made.

If you have multiple DCs you can have a look at sysinternals account lockout status tool, forget the actual name off me head. This will indicate what DC the account is getting locked out on, if you then go onto the DC indicated and check the security logs for the user this should help locate where the attempts of login are coming from.

This is more or less like I did this a few years back for a DIY ruckus deployment . Management untagged on the port for the access point, all other vlans/ssids tagged. HP MSM I've seen setup in the same way with management untagged and the vlans for the SSIDs tagged.

Whilst the switch indicates the possibility of Guest vlan it does not appear to have any routing capabilities as @rich_tech mentioned. I've not had any experience with a Unifi USG range but it may be a cheap option, if you are using your BT Home Hub as wireless solution it could limit your options as if you put the BT Hub into Modem only mode and use a seperate router you will lose the wireless features. A Wireless DrayTek or similar that can do vlan routing on (router on a stick) that you could swap with your BT hub may be another route.

My advice would be to encrypt the Veeam backup where possible. This should be able to be done within Veeam itself, even the free version used to be able to do this. Jus keep the decrypt key some where safe. To be honest, I'd still try and keep a backup within reach of site and have the cloud as belt and braces as if you need to do a simple restore you'd probably need to download the whole backup which will probably cost a bit depending what cloud storage you go for.

3 to 4 either between white toasted or untoasted bread with ketchup. Is it lunch time yet

Just to confirm, Is the laptop/IP camera you are testing getting an IP address on the wireless management vlan?

At home I set up a seperate vlan for guests etc. Does the link below look like you may have done this? https://help.ubnt.com/hc/en-us/articles/115000166827-UniFi-Guest-Network-Guest-Portal-and-Hotspot-System

Are the vlans tagged on the network ports of the APs similar to the existing APs

If the IPv6 needs external connectivity then there will be a heap of work. But if it is just internal it should be matter of using IPV6 address on the connected hosts on the same vlan. If the traffic does not need to leave the vlan then you can just configure some internal IPv6 addresses, there are specific ranges you can use that are only for internal use.

So you have had no involvement till now and all of a sudden someone is needing IPv6 setup on your network for a purchased product. OMG

What switches are you using with the APs? To be honest you should not have to tweak much with these, Try plugging an AP directly into the switch and see if it still gets packet drops.

I am talking about the core version with no GUI. I've just found that manageability is easier if it is joined to the domain and the only experience I had with Hyper-V was when the DC went down on the Hyper-V Server core host back on 2012 and the host had been joined to the domain. But having no GUI HyperVisor is definately the wy to go. It stops someone installing some sort of crud software on the host :-).

Been a hectic week for us, what with departmental moves, power issues and a few switches fainling in the heat no rest for us. Went for 10k run made up of Intervals this morning and it was hard work, I was like tap even after a shower.

Slimed down version of Hyper-V is a pain to setup to manage compared to ESXi or Citrix XenServer and I would not consider using the core version unless I had a physical DC. Install the GUI but do not allow anyone to install any software on the host any roles/features not needed.

I used DirSync or later on Azure Connect at a last employment.

The laptop is trying to authenticate as the device. If these are organisation owned staff laptops should they be treated as BYOD? Smoothwall support may be your best option to be honest, something does not seem right with the settings.

In answer to your questions yes you could just remove the gateway from the core switch and then present it either tagged or untagged to an interface on the Draytek that you would set up with the VOIP gateway. As for administrating the phone system I guess would need to be done through the gateway some how but maybe a question for them, maybe that is why they want it seperate.

I've even had the debate with BT who moved my home phone over to Cloud Voice system saying I needed to use their Hub for the VOIP phone to work. Of course it didn't :-) . Admitedly I did set an IP reservation for the phone and let the traffic flow freely to the Internet but only for SIP/VOIP related traffic from my over protective firewalls :-) . It still has it's gateway on the core switch I have at home and gets its DHCP settings from my Windows server.

Why has it been suggested to move the gateway of the voice vlan to the DrayTek. Normally you need to set specific settings for phones on DHCP servers i.e.tftp servers etc. Personally I'd leave the VOIP gateway on the core and use your windows DHCP which will have much better managebility/options than a DrayTek will. Seems like going backwards and I have never experienced/administered such a setup.