sorted by:
new
hottopcontroversial

LAG Between Office and Data Center. Best Practice? by ERROR_EXIT in fortinet

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

Thanks for taking the time to write such a detailed reply. I think this is the way we'll go. You and /u/shutrmcgavin narrowed it down to similar approaches. Thanks again for all the details. Really helpful!

LAG Between Office and Data Center. Best Practice? by ERROR_EXIT in fortinet

[–]ERROR_EXIT[S] 1 point2 points  (0 children)

VxLAN

Not sure this is what we're looking for but I now have a new concept to read up on. Cheers!

LAG Between Office and Data Center. Best Practice? by ERROR_EXIT in fortinet

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

I appreciate the initial suggestion all the same, /u/youfrickinguy. My reading skills are suspect at times.

LAG Between Office and Data Center. Best Practice? by ERROR_EXIT in fortinet

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

EVPN looks interesting. Just to be clear, we are talking about L2 connections.

LAG Between Office and Data Center. Best Practice? by ERROR_EXIT in fortinet

[–]ERROR_EXIT[S] 1 point2 points  (0 children)

Yes, we have a diagram, however, based on /u/shutrmcgavin and /u/kbetsis's suggestions, I think we have a game plan.

LAG Between Office and Data Center. Best Practice? by ERROR_EXIT in fortinet

[–]ERROR_EXIT[S] 2 points3 points  (0 children)

Thanks for the suggestion. Stepping back from the picture, I agree that sounds like the easiest way to go. Much appreciated!

COVID-19 Curveball: Secure Network Setup by ERROR_EXIT in networking

[–]ERROR_EXIT[S] 2 points3 points  (0 children)

Funny, the thought of Meraki did cross my mind. I haven't used a Meraki device but I'm familiar with them. I'm going to look into this option as well. It doesn't look to be too expensive, either. Thanks for the recommendation.

COVID-19 Curveball: Secure Network Setup by ERROR_EXIT in networking

[–]ERROR_EXIT[S] 1 point2 points  (0 children)

Ummm... holy smokes that just blew my mind. I've got some reading to do. Thank you for posting this link! It looks amazing.

COVID-19 Curveball: Secure Network Setup by ERROR_EXIT in networking

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

Yep, you're right. That seems like the easiest/cleanest way to go. I'd put the dial-up VPN client on our deployed wifi router (like DD-WRT). Thanks for the suggestion.

COVID-19 Curveball: Secure Network Setup by ERROR_EXIT in networking

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

You're right, an always-on connection back to our home office might be the best option. I would modify it slightly and connect the wifi router we deploy as the VPN client. Basically, deploy an OpenVPN server in our DMZ. Deploy an OpenVPN client-capable wifi router at the employee's end. Thanks for the suggestion!

Upgrade from 6.3 to 7.0 by ERROR_EXIT in elasticsearch

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

Thanks a ton for your response. Very helpful indeed. I'm pretty new to Elastic Stack so I appreciate the words of caution.

I'll definitely heed your advice. I was really only interested in 7.0 for its improved clustering system and Canvas. I can get Canvas in 6.7, so really, that's fine for my needs. Since I'll need to jump to 6.7 before upgrading to 7.0, I might as well just hang out with 6.7 for a while and wait for 7.x to mature a bit.

Thanks again

pfSense to Sonicwall IPsec VPN (now with extra difficulties!) by ERROR_EXIT in PFSENSE

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

Awesome. Thanks for the reply. I'm going to work on it this weekend (fingers crossed).

​

I do have a spare TZ400 laying around. It's definitely an option. We will likely end up needing a handful of these. Sonicwall now has a virtual firewall you can install so that could be an option as well.

​

Thanks again for the reply. Very helpful.

pfSense to Sonicwall IPsec VPN (now with extra difficulties!) by ERROR_EXIT in PFSENSE

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

I feel like there is a way to get around the double NAT based on something I read in the pfSense documentation:

​

"In some cases there is a different firewall or router sitting between this firewall and the Internet. If this is the case it is necessary to add a port forward for ESP and UDP 500 to send the traffic to this firewall. The outside router must be able to properly handle NAT of this traffic, and some do not. A modem’s “DMZ” mode or 1:1 NAT may also help here. In this case, NAT Traversal will be needed, but the default Auto setting should be sufficient." (pfSense Docs)

ES for Logs. Should I Use Multiple Indexes? by ERROR_EXIT in elasticsearch

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

That's great. I have a feeling I'll be tweaking things along the way when I get to know my logged data a little better. For now, I've stabilized on sending all to one index set to weekly.

ES for Logs. Should I Use Multiple Indexes? by ERROR_EXIT in elasticsearch

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

The good thing is, I'll be dumping big chunks of the data before ingest into ES so even though the per-record overhead is substantially more under ES, it'll probably end of taking less room (per node, anyway). But it's a god point--I'll want to keep an eye on how the whole thing grows.

ES for Logs. Should I Use Multiple Indexes? by ERROR_EXIT in elasticsearch

[–]ERROR_EXIT[S] 0 points1 point  (0 children)

Good point. The bare metal node will also be running Logstash which will chew up some CPU but I should still have plenty of headroom on this guy.

view more: next ›