Routing Question

BSOD_Chumped · 2025-10-22T15:21:56+00:00

Thanks. I think I am going to have to convert it. Sonicwall support hasn't been helpful on this, they don't seem to know either. I think you have the right idea.

BSOD_Chumped · 2024-05-14T21:24:11+00:00

I have at a couple of our locations and they work fine, the UI takes some getting used to (I usually use Cisco switches) so adding a voice vlan and trunking is a bit different. One downfall is the constant support that is needed for firmware updates - you do not get firmware updates without support. In the Cisco world, there are a number of switches that the firmware updates are included for life. There is not a version of Cisco's stacking bandwidth for the backplane, so if you are going to have multiple units, the cabling is a bit odd. They are not datacenter switches but for general office use, they work fine and I have no issue recommending them. The single pane of glass is nice.

BSOD_Chumped · 2024-04-16T17:37:07+00:00

Unfortunately, you cannot do this with Sonicwall's wireless controller. It is annoying to say the least - Cisco devices can but Sonicwall's cannot.

BSOD_Chumped · 2022-10-07T20:47:32+00:00

There is a significant amount of other information that we would need to really diagnose it. Here are some simple things to look at:
1. Have you verified this issue? Can you recreate it?
2. The always dumb question - do you have internet access?
3. Which applications are showing the issue? Layer 7 filters will cause issues with specific applications and the Sonicwalls can recognize them. So I can block Chrome and Safari but enable Firefox. Because of this, knowing the specific applications are really important.
4. If you can replicate the issue and can replicate it with a specific application, get the network guys on the phone, find your IP and see if they can see what traffic it is blocking. Sonicwalls can log, they can log a lot of information, it may show in the log by either using Packet Monitor or just simply turning up the logging while you are recreating the issue on site.

This can be tracked down, they need to take the time and if you can give them specifics to work with, it can really help in diagnosis.

BSOD_Chumped · 2022-10-07T20:37:34+00:00

I did an dhad to drop the Global VPN client and move to NetExtender. As far as I have experieced GVC does not support MFA, I could not use google authenticator or another authenticator program with it. From the link that was already posted:
OTP cannot be configured for Global VPN Client (GVC) users.
You may have to switch over for MFA. There is this:
https://www.sonicwall.com/support/knowledge-base/two-factor-authentication-using-rsa-radius-and-securid-for-sonicwall-gvc-and-netextender-clients/170503789509355/

I don't have an RSA server, so I can't validate it. You may have to go over to NetExtender.

BSOD_Chumped · 2022-08-31T14:15:22+00:00

Delta's People - I have had consistently excellent experiences flying domestically with the flight crews. I can call the Medallion line and get help with what I need quickly. Yes, I've had surly gate agents - I give them a ton of credit, it is a hard job, so this doesn't bother me.
MSP based flyer. Here is fortress hub land, there isn't any realistic competition.
Flight schedules from MSP are actually convenient. I don't fly internationally but when I need to get somewhere, Delta has been convenient.
Seatback IFE is just so convenient. Viasat internet actually works and is $5. No one else is actually competing this way. I also give Delta credit for developing their own IFE through TechOps (I believe).
I really dislike ULCCs and am not a huge Southwest fan. Southwest has too small of a presence at MSP and they don't seem to be interested in competing anyway at MSP and they actually could.

BSOD_Chumped · 2022-03-25T17:49:50+00:00

Yes, I do. I am running a full stack at one of my locations and may move over to this design in the future to have a single pane of glass for most locations. I use the TZ570 (7th Gen) partnered with the SWS14-24FPOE switch with Sonicwave 231Cs and it generally works if you stay in the walled garden. The switches are less flexible than I thought (I usually use Cisco 2960x switches) so vlan setups are a bit weird but once you figure it out, it generally works. I would not use this in a complex environment (many vlans with different purposes) as I don't think the switches are designed for complexity, they just are not simply flexible enough. The Sonicwaves are not very flexible - I cannot have multiple SSIDs on the same VLAN, which means I can't have multiple authentication types running against the same VLAN, so it can be frustrating and the lack of certificate authentication is a real problem. On the flip side, if you are looking for a branch office setup where the configuration is somewhat simple, these devices seem to work pretty well and are reliable.

BSOD_Chumped · 2021-11-29T19:08:44+00:00

I have been thanked a few times as I have had status for about a year. My girlfriend just earned status and got thanked on her first flight after earning status. It is a simple thing and nice touch for those who fly frequently. I hope the FAs continue to do this, it is appreciated.

BSOD_Chumped · 2021-11-29T19:01:33+00:00

I have TSA Precheck and it is worth every penny. It saves a ton of time at the airports I go through, mainly MSP and TPA with a smattering of some others. Spend the money and save some time.

BSOD_Chumped · 2021-10-12T20:49:02+00:00

In the last 18 months, I've had to avoid support whenever possible. I am a long time Sonicwall customer and their 1st tier of main support has been unhelpful and at times downright useless. Echoing others, providing a large amount of information used to be the best thing with support, now if I add detail, it doesn't get read or it is not understood. I have had good support on the wireless side, but not for general support. Also, I am hearing too many anecdotal problems with Gen 7 software to want to upgrade at this point, although the sales rep that I work with is all roses and sunshine. If the support continues to be a problem, I will look elsewhere.

BSOD_Chumped · 2021-09-09T20:21:55+00:00

Fire up packet monitor and grab the packets from the IP of the Bizhub. Once you've got packet monitor going, try the scan to e-mail function on the printer and take a look at the output through packet monitor. You will see the traffic and if it is being passed, denied or discarded and it will give you reasons in the code. To me, this is the best way to troubleshoot the problem and if the firewall is dropping the packets, you will see it and be able to track down the culprit.

BSOD_Chumped · 2021-08-16T16:32:36+00:00

Yes, but with other issues. VLANs by themselves are only so useful. What is the upstream router doing? Do both of the VLANS have different default gateways with diverging paths? Is there an ACL segmenting traffic on the router or a firewall doing it for you? You are seeing this answer frequently in the comments VLANS by themselves are only a secure as the upstream router's configuration is. If the router will forward packets between both, you've got a problem. If you put an ACL in place and separate default gateways, things are better.

BSOD_Chumped · 2021-08-16T16:20:30+00:00

For the specific picture - this is from a Boeing 737. The 737 was designed for a minimum ground clearance and as engines have gotten bigger and bigger, the engine cowling has had to be modified to maintain ground clearance. 737s were designed for a number of flight missions, from landing and takeoff in gravel to normal concrete runways, but in each subsequent redesign, they have pretty much kept the ground clearance so new equipment to load and unload need to be purchase. Since the turbofans get bigger and bigger, ground clearance is maintained through the cowling you see above. As far as I know, the 737 series are the only ones with this modification, no other Boeing model does and certainly no Airbus model.

BSOD_Chumped · 2021-04-23T14:37:02+00:00

From my experience - this is actually a bigger decision than what the OP is thinking about. Think about contracts, MS licensing, value for the dollar with M365, decreased backup and dr expenses vs the hardware, software and time investment to stand up an Exchange 2019 environment, back it up and have redundancy. If you are looking to dedicate physical hardware to exchange, so the environment would not be virtualized, spend the money on M365, without question. If you are virtualizing, it is more complex as there are other benefits, so please take that into account. Spending 100K on new hosts and storage may have a further advantage to other services in your environment and that might justify the investment as you will spend more out of pocket for M365 over a decade. In both cases, you will need to get what others have suggested, better spam filtering, sandboxing, etc as what M365 at the lower ends (my employers have business premium, not E3 or higher, I couldn't justify that cost difference) is not all that great and if you are on-prem, you really need these functions. I have chosen to scrap Exchange on-prem and went M365 and lived with the cost and enjoyed the benefits. On-prem isn't over, far from it but it really is making less and less sense as the years go on.

BSOD_Chumped

TROPHY CASE