Geoff
-
Posts
13,543 -
Joined
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by Geoff
-
Maxed out my network when imaging to an SSD.
-
Encrypt all the things \o/ -
pfSense filters on Layer 7... https://doc.pfsense.org/index.php/Layer_7 Can you be more specific? What is it your pfSense box is missing?
-
No two ports are in the trunk, 25 and 26. And no, VLAN 1 is only tagged on the trunk port because you don't use the default vlan for anything other than switch access. VLAN 2 is untagged on the access ports and tagged on the trunk. VLAN 3 is my voice so it's tagged everywhere. Access ports with VoIP phones negotiate with the switch to get on the Voice VLAN.
-
Perhaps a picture would help? 1-24 are the 100Mbit ports for edge devices, so PCs (with possibly VoIP Phones). The are untaggged on VLAN 2, with VLAN 3 tagged for voice (negotiated between the switch and a VoIP phone over LLDP). Trk1 is a static port trunk of 25-26 (the 1GigE ports). This is my uplink to my core. (Tagged all VLANS). 27-28 are unused SPF ports. (Tagged all VLANS, but actually disabled in the config).
-
I've just setup a E2610-24-PoE ProCurve switch similar to what you describe today. Here's relevant part of the config: vlan 1 name "DEFAULT_VLAN" no untagged 1-24 tagged 27-28,Trk1 no ip address exit vlan 2 name "Workstations" untagged 1-24 tagged 27-28,Trk1 no ip address exit vlan 3 name "Voice" tagged 1-24,27-28,Trk1 no ip address qos dscp 101110 voice exit vlan 21 name "Management" tagged 27-28,Trk1 no ip address exit This results in 1-24 having untagged Vlan 2 and tagged Vlan 3 (for phones, via LLDP). All vlans are tagged on 27-28 (SPF), 25-26 are Trunked and all Vlans are tagged down this trunk (Trk1).
-
You can simplify your phone configuration to some degree by using a 'voice' vlan. The VoIP phones will query the switch via LLDP/CDP and get on the correct VLANs if you configure this feature.
-
If the switches can do layer 3 routing you can do it there, although I don't like doing that unless I'm pushing layer 3 to my edge switches (which means I'm using OSPF which is probably going off topic). Otherwise you need something else to be the router. This is normally whatever your default gateway is.
-
Web Filtering/Firewall Suggestions
Geoff replied to denwei's topic in Internet Related/Filtering/Firewall
For firewalls I'm just sticking in pfSense boxes. You can buy bespoke pre-installed machines, support and training off the store if you are not comfortable with DIY. https://store.pfsense.org/ I have a websense filter here, I'm not amazingly impressed with it. I would prefer a smoothwall box myself. Smoothwall Secure Web Gateway: Manage Internet Access & Protect users -
PFSense is very easy to use once you've spent a bit of time with the web interface. Let me know if you have any issues, I have two PFSense boxes doing Captive Portal Internet Access w/Voucher Codes for Public Wifi access.
-
True, it would depend if @mcowley wants something that 'just works' or if he wants a learning exercise.
-
It's called tiering. 'Archive Data' has no business being on your most expensive per Gb storage. Hierarchical storage management - Wikipedia, the free encyclopedia
-
Enabling and keeping volume snapshots (Shadow Copy) on an SSD is lunacy. You should move your VSS Snapshot Location off the SSD.
-
No need to defrag a SSD as the seek time to data is the same regardless (no spinning rust involved). SSDs (if they support it, and you should try and get one that does) do tidy themselves up with something called TRIM. Trim (computing) - Wikipedia, the free encyclopedia
-
I have a rough guide.
-
We use HP printers when we absolutely have to, otherwise we are leasing Ricoh photocopiers. We are standardizing on HP non host based laser printers. For the sort of office you are talking about, this'd be a P2055dn. Better would be a P3005dn.
-
[spoilers] First four episodes of Game of Thrones Season 5 leaked
Geoff posted a topic in TV & Movies
HBO paid the Iron price. The first four episodes have leaked. They are screeners with the watermarking scrubbed. They are 480p though. Spoiler Alert: The First Four Episodes Of Game Of Thrones Season 5 Just Leaked | TechCrunch They were expecting a leak, albeit not this bad. The post-production producer mentioned his fears concerning a leak 6 days ago. "Game of Thrones" producer Greg Spence on leaks, HBO and dragons - The Denver Post -
I have the predecessor to this, also check if your UPS can do it (mines wired into the door control too, so it tells me when someone opens the server room door + racks). NetBotz 200 – Data Center Environmental & Humidity Monitoring | APC
-
It's humidity. To dry and you risk a static discharge. To damp and you get condensation forming. Both are terrible for electrical equipment. Ideally you want between 45% and 55% humidity.
-
Air Con is at 21. Enviromental sensor says 21.0. I have expensive Air Con units.
-
If you can get to grub, try booting in single user mode (add 'single' to the end of the boot command line) You have two 1TB physical drives. Each has a swap partition and 4 raid volumes. It looks like your data is actually on an LVM volume on the Software RAID. If you can establish which is the root partition (I'm guessing the 900+GB LVM partition) you can mount and boot SystemRescueCD and change the root password. As far as P2V, you'd need 2 x 1TB virtual disks as that's what you physically have.
-
You've forgotten all about the cash for influence stuff then? 2010 cash for influence scandal - Wikipedia, the free encyclopedia
-
Does SystemRescueCD not understand? SystemRescueCd Do you have access to the bootloader?
-
Also the porn industry has a lot of £££ to throw into lobbying if it chooses... Works for Google after all.
