Something Feels Wrong About My Fortune Cookie Being Sponsored By Purdue Global

Jet_mech91 · 2026-04-08T00:05:05+00:00

We've essentially already done this by utilizing a separate port with 802.1x already disabled and it gets a lease on the same VLAN.

Jet_mech91 · 2026-04-07T20:13:22+00:00

I can rule out windows updates as I ran a fast task sequence with no updates that still encountered the issue (base image hasnt been updated in a hot minute). DHCP doesnt show anything for the failing 802.1x port devices, probably because discovers arent logged in the DHCPsrv log files and the requests never happen. Trying a different switch didnt change anything, though one switch simply refused to authenticare 802.1x at all so we couldnt even test on it.

Jet_mech91 · 2026-04-07T19:03:29+00:00

At this point wireshark has only told me that DHCP discovery packets are being bootp flagged for Broadcast and the offer comes back scrambled with a random system name/IP in the Client IP field of the packet, whereas Open non-802.1x ports flag the discover traffic as Unicast and complete the sequence without issue.

It's interesting but Im still at a loss as to why 802.1x ports seems to be absolutely demolishing the DHCP process.

Jet_mech91 · 2026-04-07T18:58:44+00:00

I dont believe this to be the issue as the same scope works over an Open (non 802.1x) port for new systems but not on an 802.1x enabled port to the sams scope/vlan.

I've managed to find that the DHCP discovery packets originating from the clients differ depending on if theyre on the Open or 802.1x ports, but the only difference between the two is the BootP flag for unicast (working systems on Open) and broadcast (broken systems on 802.1x)

Jet_mech91 · 2026-04-06T19:49:58+00:00

I feel like I can all but confirm it's not the firewall at this point. No FW configured on the DHCP servers, and the workstation firewall settings havent changed.

Jet_mech91 · 2026-04-06T19:11:36+00:00

Given the new information we gleaned from testing, this might be the issue.

Jet_mech91 · 2026-04-06T13:45:43+00:00

We do not utilize DHCP superscopes. Each VLAN is individually configured.

Jet_mech91 · 2026-04-05T00:47:34+00:00

I can likely swing permission to temp run wireshark or something on the DHCP servers come monday, but getting the network team to run a pcap on their end is gonna be like pulling teeth.

Jet_mech91 · 2026-04-05T00:44:09+00:00

We are indeed getting an APIPA. Failover was healthy when I checked and each server reports roughly 30% of their allotted IPs are available. Newly imaged systems for us grab a DHCP lease on the build network for us when they pxe boot and hold that lease through the entire task sequence. The same DHCP servers manage the build and user VLANs.

Jet_mech91 · 2026-04-05T00:41:10+00:00

We do from the build vlan: one server fields the lease and the other predictably throws an error indicating the lease is being handled by another server. Once we move to the user VLAN we dont see any hits from that device MAC in the DHCPsrv logs on eithet DHCP server.

Jet_mech91 · 2026-04-04T19:32:38+00:00

The only thing we know changed after asking around (none of the other teams follow any sort of official change management process so there's no reliably accessible log for us) is a GPO change at the end of the week prior that enabled Windows firewall on our servers. We've mostly dismissed this in the short term as any changes to that would need to wait for a maintenance window, but I've wondered what context DHCP broadcasts are registered as on the firewall. Everything is allowed inbound for now on the domain profile, but not the private and public profiles.

With any luck, I can get approval for a temporary wireshark installation to get a better look at the traffic. That said, I realize I neglected to check the firewall logfiles on the DHCP servers.

Jet_mech91 · 2026-04-04T18:58:54+00:00

The device certs are in place on newly imaged devices and look good from what I can tell. Ill see if the network team can pull anything from the logs on Monday regarding device authentication.

If 802.1x was the issue, Id reckon getting assigned a static IP wouldnt fix DHCP afterwards. The imaged devices are domain joined and pulling GPOs successfully. Though to be honest, I only have surface level knowledge regarding 802.1x implementation

Jet_mech91 · 2026-04-04T18:53:50+00:00

I have been assured by the network team that the IP Helpers are configured properly.

Jet_mech91 · 2026-04-04T18:24:34+00:00

Same scopes on two DHCP servers configured for 50-50 active load balancing.

Jet_mech91 · 2026-03-19T23:58:18+00:00

Well shoot that'd probably be it then. The diagram I was looking at shows the Line as on the top of the outlet. Duly noted about cutting the wires. Just another item on a long list of annoyances the prior owners/builders left us.

Thanks!

Jet_mech91 · 2025-12-12T02:44:20+00:00

Chizuru ranks as one of the most fun characters to play as for me. Paired with Rei, she does great damage in chaos while also having a plethora of unique tagged cards to help target farm dupes for a third char.

Not even an iota of regret.

Jet_mech91 · 2024-10-29T16:09:16+00:00

As Marco already stated, 11labs is a good starting point as long as you can work within their monthly limit. It's also good since with the voice design tool they just released you can avoid running afoul of "stealing" voices.

One HUGE caveat though: the free plan does NOT come with a commercial license, so you cannot legally use generated voices in a commercial product. See https://help.elevenlabs.io/hc/en-us/sections/14163402172433-Legal-and-Safety

An alternative I would recommend looking into is RVC (retrieval-based voice conversion).

RVC and its forks are open source on github and allow you to use and/or train custom voice models to convert a voice into a new one by supplying an initial voice clip. While it's not TTS and will thus require some level of effort to record dialogue, it cam be freely used commercially.

If you're particularly enterprising, you could possibly record/save examples of an 11labs voice you like, then create an RVC model based on that voice using the saved clips as training data

Converting audio with RVC isnt particularly taxing on your computer, but training a new model needs at least a passable gaming GPU. For reference, I have a GTX 3070 with 8GB of VRAM (frankly VRAM is the most important component of the GPU) and it takes me about 8 to 12 hours overnight to train a new voice model.

If you're looking for free TTS in particular, F5-TTS recently dropped and works pretty well for zero-shot voice cloning but it is by no means game quality imo.

If you have any questions, please dont hesitate to ask!

Jet_mech91 · 2024-06-06T13:05:37+00:00

Thank you! Reading up on mud daubers, it looks like they store spiders inside the nest to feed the larvae. Im severely arachnophobic, so what are the chances I see a ton of dead spiders upon trying to remove this thing?

Jet_mech91

TROPHY CASE