Jump to content

Tinribs

Members
 View Profile  See their activity

  • Posts

    118

  • Joined

  • Last visited

 Content Type 

Everything posted by Tinribs

  1. Tinribs
    Hi All We've had our (admittedly ancient) MERU MC4200 die on us and be replaced under warranty by a reconditioned box. It was running 6.1-2-29 firmware. When we recovered the box for some reason the license file didn't make it across. No idea why as it worked fine the last time the box died - Fortinet support assisted and we had WiFi back within a day of the box arriving. This time, despite us even having the same engineer as last time, because the license file is nowhere to be found the box is running in demo mode and will only recognise two APs. The Fortinet engineer has told us we need to upgrade to at least version 7 as by then licensing was included in the firmware and our problem will be solved. He gave me a link to 6.1-4-2 as we needed to upgrade to that before we could go to 7 - he then told me I could get version 7 from their website but this is, from what I can tell, no longer the case. Basically I am hoping that someone here can point me in the direction of version 7.0.13. Without it we will never get our APs up and running again unless we replace the entire system. This is actually in planning now but the cost means it cannot be done for a while. TIA Mark P.
  2. Tinribs
    Hi All We have a MERU wifi network. Our controller died and Fortinet have given us a new one. In order to get it working we have to downgrade the firmware so it will work on our APs The procedure to downgrade is simple on paper. Boot into linux recovery. Connect to an FTP server with the file on it and the box does the rest. I've managed to get connected and authenticated to my own FTP server. Next step is to navigate to the file and do an mget. Problem is any command I give be it ls, dir or Mget causes the connection to time out. I'm connected via the network using cable. My PC and the MERU are on the same subnet and can talk to each other pingwise plus I've connected and authenticated. All the relevant firewall app and port rules that I am aware of are in place. I'm hoping this is straightforward - how can I stop the connection timing out when I run a basic command? TIA
  3. Tinribs
    Thanks Davit2005, To add to an already annoying situation our entire wifi network is down as the controller (MERU) died a while back and Fortinet are struggling to locate a replacement. I have considered that might also be a blocker for this but am hoping not. My knowledge of routing is verging on the negative. Our firewall is managed by our ISP on the cloud via Netsweeper. Do you think there is something they could arrange to assist with this? I did consider setting up a new VLAN just for this one box - no idea how to do it and cannot find a beginner's guide on how this could be done. It is just one IP address after all - shouldn't take a genius, just someone who knows what they are doing - which, unfortunately, is not me.
  4. Tinribs
    OK - my last post on this got absolutely no response so I'm trying from a different direction. Our WiFi network allows guests to connect to the internet using our infrastructure but with no access to any other parts of the school network. I have been asked to setup a sandbox machine for the A Level ICT class that has internet access but cannot access the rest of the network. My thought was to assign the computer one of the IPs in the range for the guest wifi. I've done this and added the relevant netmask and gateway etc. When the computer is turned on (it's a linux box btw) it is unable to see the internet. I am also unable to ping it from the switch it is connected to but I can see its mac address on the port that it is using. The switch can ping the relevant gateway but it can also not ping the linux box despite the box being turned on and despite the fact that it can see its MAC address. I am assuming that this is a routing issue and that I need to add a route from the linux box to the gateway on the switch it is connected to - either that or the VLAN that is used by the guest wifi network is not routed or configured on the directly connected switch. If I do a sh ip on the switch all the vlans bar the management vlan show as disabled under IP Config. I have no idea what that means. I can also see that there is no routing configured on any switch except for the core switches. Can anyone assist?
  5. Tinribs
    That is awesome! Saved me heaps of time and frustration working around the mental block I have for any kind of scripting. So cool and thanks for the hints about the installation. Invaluable. Many thanks
  6. Tinribs
    Thanks for this - maybe I should have mentioned that I am not very experienced in any form of coding and particularly when dealing with extracting data into variables. For example - our student home drives are all on the same server in a share called studenthomes$ inside this share are folders labelled for each intake year (ie Intake2014 for all students who are of the age when they would have started in 2014). Inside each of these is a folder named as the students' logon ID that is their home drive. I need to scan each intake folder, get the username from the home drive folder name then assign the relevant permissions to that folder using the username I've got earlier. I know I probably need a course in basic PS stuff but I am not nor ever will be able to think like a coder. I don't mind dabbling when inspired.... Seeing as it appears that every single student who was moved to a different OU is affected then I probably don't have the time to play around with this and get it working myself Much appreciate the reply and I can see the section of the script that does what I need. I just can't get my head around the string bit....
  7. Tinribs
    Hey all WE've had some new software installed to sync accounts from SIMS to AD. As part of the installation the people also made sure all the student accounts are in the correct intake years (OUs). This meant that some home drives had to be copied to new locations so GPO could map them correctly. Unfortunately this didn't go too well. It looks very much like most of the moved home drive folders were copied without adding/retaining the permissions for the individual students so that they don't actually map. I've run accessenum on one of the folders and I can see that there are many folders missing these permissions. I am looking for (and failing to find) a script or any programmatic way to ensure the permissions are correct for each folder. If there's a free app that can do it I'll go there. I've been looking at using Get-ADuser to do this but I have no idea how to even start this. Help??
  8. Tinribs
    Hi Our A Level ICT teacher has setup a Linux sandbox environment. We need to set things up so that Linux box can access the internet via our existing infrastructure but that cannot see or be seen by (at all) the rest of the school network. The computer should only be able to access the internet but it should still go out through our cloud hosted NetSweeper firewall. It will be connected wired to an Aruba switch. We have VLANs setup on the switches and we even have an internet only VLAN that is setup for our guest WiFi users. Our Wifi is down at the moment (another story). I tried connecting the computer using the Guest Only VLAN but it doesn't get connected (to the internet). I'm a bit of a noob when it comes to this so I'm guessing now but is this down to the IP address/setup on the Linux box (ie do we just need to assign it a static IP on the guest VLAN)? Failing that would I need to look at ACLs on the Aruba switch? I would have no idea how to go about that. Would the DNS settings on the Linux box still need to see the school network's DNS servers? I'm guessing this is pretty straightforward but it's a new area for me - ish. I have configured switches and set ports to VLANs etc so I have a basic idea of the HP CLI commands - just never got into ACLs TIA Mark P.
  9. Tinribs
    Thanks Norphy I've proposed getting a couple of these to the BM. They can always sit unused as a fallback in the event something similar happens again. We are getting a completely new Wifi system at some point in the future so the MERU dinosaur will go along with all his little MERU compy WAPS. I suspect MARAKI will be the choice (or Ruckus) but that's above my paygrade. I don't suppose you know what kind of coverage this device gives? Would be good to know how many we would need to get to provide skeleton coverage in key locations.
  10. Tinribs
    All wired stuff works fine. We just can't connect twenty laptops in a classroom to cables.... Not enough points, desks not situated to allow safe cable trailing across the floor etc.
  11. Tinribs
    Thanks for all the replies. We have/had an ancient MERU MC4200 that has turned into a Norwegian Blue. We do have warranty on it and a replacement is being sought by Fortinet but this could take a while as they are a very old piece of kit. All our WAPs are MERU and will only work through the MERU controller. We can't even access them directly or find out what IP they have with the controller down (afaik). I do know the VLAN they are on and the range of IPs that they should have and haven't actually considered trying to get them on a different VLAN to allow connectivity. There are 68 though so it may not be worth it. WE are starting a project to upgrade the entire wifi setup which is why we need a cheap temp solution rather than forking out for a new setup immediately. This is, at the moment, just a request from one department to allow 6th formers to use their school networks... Norphy - that WAP does look to be a possibility and I don't think the school would have an issue paying for a couple of those as a fallback. I assume config is pretty simple?
  12. Tinribs
    HI All We're patiently waiting for a replacement WiFi controller to get the school up and wireless again. Several people have asked about enabling hot-spots on the school desktops so student laptops (which are actually school devices) can get to the net using teachers' mobiles. I said no to that straightaway for obvious reasons. The next proposal was to install a wireless hub in the classroom and connect to the school network via the hub. That has got me stuck. Most cheap home hubs are their own DHCP servers so that when any school device connects they will be given an IP from the hub and not the school's DHCP setup. Is there a way to get IP addresses from our school's DHCP server to devices that are connected to a wifi hub and therefore allow school laptops to talk to our domain etc as if they were connected to a network point in the room? Is this do-able with NAT or some other clever way of translating IPs? Never even thought of doing this before so no idea where to start.
  13. Tinribs
    Hi All Our ICT department has been given some level 3 hp switches. They have been wiped clean so are basically factory set. The ICT teacher will be using them as teaching tools for A level computing so their actual config is not my issue (I think). What I have been asked to do is to connect the switches to our LAN but only allow any computers on those switches to have internet access - they are not to be able to communicate to the rest of the school network in any way. He has only asked for one port to be configured. I assume this can be done with a VLAN but at the moment we do not have any VLANS setup in such a way. I am hoping there is a simple way to do this. I have some basic command knowledge of Aruba/HP switches (all the switches at school are Aruba/HP) but not currently enough to do this without assistance... IS it possible?? TIA
  14. Tinribs
    Afternoon all Our MC42000 died yesterday after I rebooted it. It now gives lots of not loaded retrying errors and hangs or gives stack crashes if we logon. I do have a backup of the OS and the config but I can't logon to the recovery OS to start the restore. I assume there are some default passwords for the logon but I can't find them anywhere. It may be that a recovery cannot be done as I have a gut feeling the hard drive has died. The original reason behind all this was the need to update this year's guest wifi accounts with the new dates for each week. Problem is once I got to the relevant section on the WebGUI everytime I chose one of the accounts to edit I was asked for a password to go further and the normal admin logon wasn't working. Our standard logon account for the GUI has full level 15 superuser access so it was a tad puzzling. I then noticed that the system time was way off (about 16 hours fast). With that in mind I rebooted the box and then it all went pear. We can now only access via console and the OS appears to be screwed.... Any help would be good as the school currently has no wifi TIA
  15. Tinribs
    Hi Our RDS server has died. We have problems getting agreement numbers for licenses as the relevant staff are unavailable. As a workaround I have installed RDG on one of our other servers. It all works fine internally but could not connect externally. Turns out to be a firewall issue. I had to point the clients at the external IP address for that server. Before I did that the connection would fail with resource unavailable errors. Once I change the IP the connection is now failing because the certificate isn't trusted. I think this is because the initial cert was created when the RDG was using the FQDN of the server name. When I try to connect using the external IP this obviously doesn't match the name on the cert and it gets angry. I tried recreating the cert on the RDG using the IP address without the FQDN and also with the FQDN. None of the them work. Wondering how I get this sorted? I am assuming that as I am seeing this error rather than the first error that I am actually connecting to the server now, and if I get this sorted we'll have a working backup method of connecting, at least for the short term, until the missing info is retrievable. TIA MArk P.
  16. Tinribs
    Is the same as on all the others that I can ping. I have scheduled a reboot job for over the weekend and will check again on Monday....
  17. Tinribs
    indeed - will schedule a reboot job for overnight and see what happens
  18. Tinribs
    Should be - they've been working fine for ages and were all built by the same person over two years ago
  19. Tinribs
    No but I think that's because we only have one IP that is allowed to manage the switches. I can't telnet to any of the switches from another switch.
  20. Tinribs
    I get that it doesn't make any sense Nothing has changed config-wise on any of the switches and they all have the same mask setup...
  21. Tinribs
    Yup - for example the switch we can't ping ends in 115. The two switches the either side are 114 and 116 and the servers can ping those. All our switches have their own separate IPs
  22. Tinribs
    Hi HP/Aruba switches. We have about 30. All are on the same VLAN as the servers. We have a set server as the IP manager for the switches. I was trying to change a port's VLAN today but was unable to connect to the switch I needed. Also unable to ping it. Can ping and connect to all the other switches in the same cabinet/comms room from the same server. Can ping the same switch from all the other switches I can connect to from that server. Can ping every switch (including the one that I can't from the server) from my workstation which is on a different VLAN. Cannot ping this one switch from any server on the same vlan as the switches. Haven't yet tried to connect to the switch directly via a cable but I'm hoping that works or we're a tad screwed. Any ideas as to why this might be happening? I am not a network expert in anyway. In theory all the switches have exactly the same config as far as management and VLANs are concerned. I wait expectantly TIA
  23. Tinribs
    Hi All I need to move a recovery partition on a Windows 2016 VM. The C: drive is getting low on space so I added an extra bit but the second recovery partition is stopping me from extending the volume. I have done some research and it seems pretty straightforward to do this using a combination of Diskpart, BCDEdit and WMIC commands. My problem is in interpreting the output from the BCDEDIT /enum all command. Firstly this is what the disk layout currently looks like: I used Diskpart to give drive letters to the two recovery partitions (R: for the 300mb and S: for the 450mb) I then ran BCDEDIT /enum all and this shows two Boot Loader sections that both refer to the WinRE.wim file: And: Reagentc /info shows that the S: partition is the active recovery partition: For completeness this is the diskpart list of partitions on harddisk 0 And confirmation that the S: drive is the 450mb partition: There is no mention of the R: partition on the output at all. There is a hidden folder on C: that holds a winre.wim file. I can find no files or folders at all on the S: partition even looking for hidden and/or system files. I need to know if this means that the 450mb S: is basically no longer needed and can be deleted and added back to the C: drive. I have noted that the second Boot Loader section is labelled with an identifier that is referred to in the first section and I'm not sure of the significance of that reference. If I do need to have the 450mb partition I can always recreate it at the end of the process after I have extended the C: size. I can't find much about how to interpret this online so any assistance or pointers would be appreciated. Thanks Mark P.
  24. Tinribs
    Hi All. I have to do a daily report thing that includes backup space usage etc. We're running a bit low on free space on our SAN and I want to convince management that it needs looking at so I've decided that I need to show them a graph of data usage that will give a rough estimate of how much time we have left until we run out of space. The daily report is a standard text file in which I manually enter the amount of data backed up and the amount of free space remaining (along with other stuff). All the files are kept in the same folder. I have no coding experience (well - almost none) so I'm cheekily begging for some major assistance. I need to extract the numbers from two specific lines in all the text files and export that to Excel. The two lines are always the same and don't appear anywhere else in the file: Size (TB): 35.07Capacity (TB): 7.66 I'm guessing that if the files are all in the same folder the name of the file isn't important but they're all named for the date the report was created (ie today's is "1st October 2021.txt") I'm guessing this can be done in powershell but my knowledge of this and its associated terminology doesn't go far enough to let me even start. Any help would be appreciated! TIA Mark P.
  25. Tinribs
    OK - update. Can't uninstall the old versions as apparently there are some things they need them for (?) Tried replacing the part of the registry on the machines with the problem with the same part of the registry on those that don't. No idea why but it didn't work. The machines that I manually resolved are fine. Those that I haven't still have two or three different menu options. The working reg entry is: Windows Registry Editor Version 5.00[HKEY_CLASSES_ROOT\Python.File]@="Python File"[HKEY_CLASSES_ROOT\Python.File\DefaultIcon]@="C:\\Python27\\DLLs\\py.ico"[HKEY_CLASSES_ROOT\Python.File\shell][HKEY_CLASSES_ROOT\Python.File\shell\editwithidle]"MUIVerb"="&Edit with IDLE""Subcommands"=""[HKEY_CLASSES_ROOT\Python.File\shell\editwithidle\shell][HKEY_CLASSES_ROOT\Python.File\shell\editwithidle\shell\edit34]"MUIVerb"="Edit with IDLE 3.4.3"[HKEY_CLASSES_ROOT\Python.File\shell\editwithidle\shell\edit34\command]@=""C:\\python34\\python.exe" -m idlelib "%L" %*"[HKEY_CLASSES_ROOT\Python.File\shell\open][HKEY_CLASSES_ROOT\Python.File\shell\open\command]@=""C:\\Python27\\python.exe" "%1" %*"[HKEY_CLASSES_ROOT\Python.File\shellex][HKEY_CLASSES_ROOT\Python.File\shellex\DropHandler]@="{60254CA5-953B-11CF-8C96-00AA00B8708C}" An example of one that isn't correct is Windows Registry Editor Version 5.00[HKEY_CLASSES_ROOT\Python.File]@="Python File"[HKEY_CLASSES_ROOT\Python.File\DefaultIcon]@="C:\\Python27\\DLLs\\py.ico"[HKEY_CLASSES_ROOT\Python.File\shell][HKEY_CLASSES_ROOT\Python.File\shell\Edit with IDLE][HKEY_CLASSES_ROOT\Python.File\shell\Edit with IDLE\command]@=""C:\\Python27\\pythonw.exe" "C:\\Python27\\Lib\\idlelib\\idle.pyw" -e "%1""[HKEY_CLASSES_ROOT\Python.File\shell\editwithidle]"MUIVerb"="&Edit with IDLE""Subcommands"=""[HKEY_CLASSES_ROOT\Python.File\shell\editwithidle\shell][HKEY_CLASSES_ROOT\Python.File\shell\editwithidle\shell\edit37]"MUIVerb"="Edit with IDLE 3.7 (64-bit)"[HKEY_CLASSES_ROOT\Python.File\shell\editwithidle\shell\edit37\command]@=""C:\\Program Files (x86)\\Microsoft Visual Studio\\Shared\\Python37_64\\pythonw.exe" -m idlelib "%L" %*"[HKEY_CLASSES_ROOT\Python.File\shell\editwithidle\shell\edit37-32]"MUIVerb"="Edit with IDLE 3.7 (32-bit)"[HKEY_CLASSES_ROOT\Python.File\shell\editwithidle\shell\edit37-32\command]@=""C:\\Program Files (x86)\\Microsoft Visual Studio\\Shared\\Python37_86\\pythonw.exe" -m idlelib "%L" %*"[HKEY_CLASSES_ROOT\Python.File\shell\open][HKEY_CLASSES_ROOT\Python.File\shell\open\command]@=""C:\\Python27\\python.exe" "%1" %*"[HKEY_CLASSES_ROOT\Python.File\shellex][HKEY_CLASSES_ROOT\Python.File\shellex\DropHandler]@="{60254CA5-953B-11CF-8C96-00AA00B8708C}" My GPO is supposed to replace the latter with the former but it hasn't. Is there another way to do it?
×
×
  • Create New...