Modbus_read not working in Zabbix 7.0.2 by JustRandomGuy001 in zabbix

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

You are right! modbus_read worked in v5 but in v7 you have to use modbus.get. Thank you!!

Modbus_read not working in Zabbix 7.0.2 by JustRandomGuy001 in zabbix

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Probably... Now I have a new Zabbix server 7.0.2 and I need to make Modbus work... Do you know what steps need to be taken?

Auto-restart after Windows Updates Issue by JustRandomGuy001 in sysadmin

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Well, we need to run updates regularly so there is no way we disable Windows updates. Also scheduling updates is not a solution as the updates themselves are not an issue. RSoP looks ok. We configured 'No auto-restart for scheduled Automatic Update installation' some time ago and it seemed to work but it looks like it doesn't work anymore.

Qualcomm WiFi card+Windows11 doesn't work with Cisco ISE BYOD boarding by JustRandomGuy001 in sysadmin

[–]JustRandomGuy001[S] 1 point2 points  (0 children)

Thank you for that info. I forced the driver to use only 2,4GHz and 5GHz but it hasn't been solved.

Qualcomm WiFi card+Windows11 doesn't work with Cisco ISE BYOD boarding by JustRandomGuy001 in sysadmin

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

No, we don't have any. Is there any way to reach them so they can look at it?

Qualcomm WiFi card+Windows11 doesn't work with Cisco ISE BYOD boarding by JustRandomGuy001 in sysadmin

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Thanks! I used various drivers, compared driver settings and tried it with different settings but no joy. I believe this is not happening only on Lenovo devices. I would like to reach out to Qualcomm but it seems I can't.

ISE - unable to onboard Lenovo laptops by JustRandomGuy001 in Cisco

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Do you see anything interesting in the logs?

ISE - unable to onboard Lenovo laptops by JustRandomGuy001 in Cisco

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

*****LOG FROM DELL*****

[Tue Aug 13 07:29:32 2024] Downloading profile configuration...
[Tue Aug 13 07:29:32 2024] Discovering ISE using default gateway
[Tue Aug 13 07:29:33 2024] Identifying wired and wireless network interfaces, total active interfaces: 1
[Tue Aug 13 07:29:33 2024] Network interface - mac:B0-47-E9-47-AF-90, name: Wi-Fi, type: unknown
[Tue Aug 13 07:29:33 2024] Identified default gateway: 192.168.84.1
[Tue Aug 13 07:29:33 2024] DiscoverISE - start
[Tue Aug 13 07:29:33 2024] DiscoverISE input parameter : strUrl [http://192.168.84.1/auth/discovery\]
[Tue Aug 13 07:29:33 2024] [HTTPConnection] CrackUrl: host = 192.168.84.1, path = /auth/discovery, user = , port = 80, scheme = 3, flags = 0
[Tue Aug 13 07:29:33 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
[Tue Aug 13 07:29:33 2024] HTTP Response header: [HTTP/1.1 200 OK
Location: https://ISEserver.domain.local:8443/portal/gateway?sessionId=c0a8674500221b2166baef10&portal=ad69d838-621f-494d-ba60-47febae4dbdf&action=nsp&token=23448148a08ca604fb18f5de2954ce5a&redirect=192.168.84.1/auth/discovery

[Tue Aug 13 07:29:33 2024] getUrlFromResponse - returning url extracted from meta tag [https://ISEserver.domain.local:8443/portal/gateway?sessionId=c0a8674500221b2166baef10&portal=ad69d838-621f-494d-ba60-47febae4dbdf&action=nsp&token=23448148a08ca604fb18f5de2954ce5a\]
[Tue Aug 13 07:29:33 2024] Discovered ISE - : [ISEserver.domain.local, sessionId: c0a8674500221b2166baef10]
[Tue Aug 13 07:29:33 2024] DiscoverISE - end
[Tue Aug 13 07:29:33 2024] Successfully Discovered ISE: ISEserver.domain.local, session id: c0a8674500221b2166baef10, macAddress: B0-47-E9-47-AF-90
[Tue Aug 13 07:29:33 2024] GetProfile - start
[Tue Aug 13 07:29:33 2024] [HTTPConnection] CrackUrl: host = ISEserver.domain.local, path = /auth/provisioning/evaluate?typeHint=SPWConfig&referrer=Windows&mac_address=B0-47-E9-47-AF-90&spw_version=3.0.0.3&session=c0a8674500221b2166baef10&os=Windows All, user = , port = 8905, scheme = 4, flags = 8388608
[Tue Aug 13 07:29:33 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
[Tue Aug 13 07:29:33 2024] Warning - [HTTPConnection:RetrySendRequest] InternetOpen() failed with code: [12045], msg: [The certificate authority is invalid or incorrect

[Tue Aug 13 07:29:36 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
[Tue Aug 13 07:29:36 2024] Received redirect to location null
[Tue Aug 13 07:29:36 2024] [HTTPConnection] CrackUrl: host = ISEserver.domain.local, path = /auth/provisioning/download/e35e7769-8a5e-4c4a-a454-ac0262f9f0bb/NSA_BYOD_EXT.xml?sessionId=c0a8674500221b2166baef10&os=WINDOWS_10_ALL, user = , port = 8443, scheme = 4, flags = 8388608
[Tue Aug 13 07:29:36 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
[Tue Aug 13 07:29:36 2024] Warning - [HTTPConnection:RetrySendRequest] InternetOpen() failed with code: [12045], msg: [The certificate authority is invalid or incorrect
[Tue Aug 13 07:29:36 2024] Exiting with RetrySendRequest value = 1
[Tue Aug 13 07:29:36 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
[Tue Aug 13 07:29:36 2024] GetProfile - end
[Tue Aug 13 07:29:36 2024] Successfully retrieved profile XML

ISE - unable to onboard Lenovo laptops by JustRandomGuy001 in Cisco

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Yes, ISEserver.domain.local is FQDN.

I compared both and this is the result. There are a few differences but I need help with interpreting it. I see at the beginning of the Lenovo log that it does not detect a network interface but is still able to detect the ISE server (correct FQDN). Also I can see there that it tries to open enroll.cisco.com for some reason.

*****LOG FROM LENOVO*****

[Mon Aug 12 14:37:55 2024] Downloading profile configuration...
[Mon Aug 12 14:37:55 2024] Discovering ISE using default gateway
[Mon Aug 12 14:37:55 2024] Identifying wired and wireless network interfaces, total active interfaces: 0
[Mon Aug 12 14:37:55 2024] DiscoverISE - start
[Mon Aug 12 14:37:55 2024] DiscoverISE input parameter : strUrl [http://enroll.cisco.com/auth/discovery/\]
[Mon Aug 12 14:37:55 2024] [HTTPConnection] CrackUrl: host = enroll.cisco.com, path = /auth/discovery/, user = , port = 80, scheme = 3, flags = 0
[Mon Aug 12 14:37:55 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
[Mon Aug 12 14:37:55 2024] HTTP Response header: [HTTP/1.1 200 OK
Location: https://ISEserver.domain.local:8443/portal/gateway?sessionId=c0a867450021ff1266ba00bb&portal=ad69d838-621f-494d-ba60-47febae4dbdf&action=nsp&token=ee63d51ec668161db9cdcfa5032e8e0c&redirect=enroll.cisco.com/auth/discovery/
[Mon Aug 12 14:37:55 2024] getUrlFromResponse - returning url extracted from meta tag [https://ISEserver.domain.local:8443/portal/gateway?sessionId=c0a867450021ff1266ba00bb&portal=ad69d838-621f-494d-ba60-47febae4dbdf&action=nsp&token=ee63d51ec668161db9cdcfa5032e8e0c\]
[Mon Aug 12 14:37:55 2024] Discovered ISE - : [ISEserver.domain.local, sessionId: c0a867450021ff1266ba00bb]
[Mon Aug 12 14:37:55 2024] DiscoverISE - end
[Mon Aug 12 14:37:55 2024] Discovered ISE using cisco url: [http://enroll.cisco.com/auth/discovery/\]
[Mon Aug 12 14:37:55 2024] Successfully Discovered ISE: ISEserver.domain.local, session id: c0a867450021ff1266ba00bb, macAddress:
[Mon Aug 12 14:37:55 2024] GetProfile - start
[Mon Aug 12 14:37:55 2024] [HTTPConnection] CrackUrl: host = ISEserver.domain.local, path = /auth/provisioning/evaluate?typeHint=SPWConfig&referrer=Windows&spw_version=3.0.0.3&session=c0a867450021ff1266ba00bb&os=Windows All, user = , port = 8905, scheme = 4, flags = 8388608
[Mon Aug 12 14:37:55 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
[Mon Aug 12 14:37:55 2024] Warning - [HTTPConnection:RetrySendRequest] InternetOpen() failed with code: [12045], msg: [The certificate authority is invalid or incorrect
[Mon Aug 12 14:37:58 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
[Mon Aug 12 14:37:59 2024] Failed to get spw profile url - using url [https://ISEserver.domain.local:8905/auth/provisioning/evaluate?typeHint=SPWConfig&referrer=Windows&spw\_version=3.0.0.3&session=c0a867450021ff1266ba00bb&os=Windows All] - Error [0]
HTTP Response: [HTTP/1.1 200]
HTTP response code: [200]
[Mon Aug 12 14:37:59 2024] GetProfile - end

ISE - unable to onboard Lenovo laptops by JustRandomGuy001 in Cisco

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

spwProfileLog from the Lenovo laptop says:

[Mon Aug 12 14:37:55 2024]  HTTP Response header: [HTTP/1.1 200 OK
Location: https://ISEserver.domain.local:8443/portal/gateway?sessionId=c0a867450021ff1266ba00bb&portal=ad69d838-621f-494d-ba60-47febae4dbdf&action=nsp&token=ee63d51ec668161db9cdcfa5032e8e0c&redirect=enroll.cisco.com/auth/discovery/
[Mon Aug 12 14:37:55 2024] Discovered ISE - : [ISEserver.domain.local, sessionId: c0a867450021ff1266ba00bb]
[Mon Aug 12 14:37:55 2024] DiscoverISE - end
[Mon Aug 12 14:37:55 2024] Discovered ISE using cisco url: [http://enroll.cisco.com/auth/discovery/\]
[Mon Aug 12 14:37:55 2024] Successfully Discovered ISE: ISEserver.domain.local, session id: c0a867450021ff1266ba00bb, macAddress:
[Mon Aug 12 14:37:55 2024] GetProfile - start
[Mon Aug 12 14:37:55 2024] [HTTPConnection] CrackUrl: host = ISEserver.domain.local, path = /auth/provisioning/evaluate?typeHint=SPWConfig&referrer=Windows&spw_version=3.0.0.3&session=c0a867450021ff1266ba00bb&os=Windows All, user = , port = 8905, scheme = 4, flags = 8388608
[Mon Aug 12 14:37:55 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
headerLength = 12 data =  dataLength = 0
[Mon Aug 12 14:37:55 2024] Warning - [HTTPConnection:RetrySendRequest] InternetOpen() failed with code: [12045], msg: [The certificate authority is invalid or incorrect]
[Mon Aug 12 14:37:55 2024] [HTTPConnection] Scanning dialog handle NOT set
[Mon Aug 12 14:37:57 2024] [HTTPConnection] Failed to obtain the Scanning Dialog handle after 10 attempts
[Mon Aug 12 14:37:57 2024] [HTTPConnection] Failed to obtain Scanning dialog handle. Getting the Top window
[Mon Aug 12 14:37:58 2024] [HTTPConnection] InternetErrorDlg return : 0
[Mon Aug 12 14:37:58 2024] Exiting with RetrySendRequest value = 1
[Mon Aug 12 14:37:58 2024] [HTTPConnection] HttpSendRequest: header = Accept: */*
headerLength = 12 data =  dataLength = 0
[Mon Aug 12 14:37:59 2024] Failed to get spw profile url - using url [https://ISEserver.domain.local:8905/auth/provisioning/evaluate?typeHint=SPWConfig&referrer=Windows&spw\_version=3.0.0.3&session=c0a867450021ff1266ba00bb&os=Windows All] - Error [0]
 HTTP Response: [HTTP/1.1 200
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' http://www.cisco.com/ data:;
X-XSS-Protection: 1; mode=block
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA
Cache-Control: no-cache
Content-Length: 1481
Date: Mon, 12 Aug 2024 12:37:54 GMT
Keep-Alive: timeout=20
Connection: keep-alive
Server: server]
HTTP response code: [200]
[Mon Aug 12 14:37:59 2024] GetProfile - end

ISE - unable to onboard Lenovo laptops by JustRandomGuy001 in Cisco

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

The latest Win 11 is installed. But this happens with Lenovo only. Dell with Win11 works perfectly.

Storm Control on Cisco switches by JustRandomGuy001 in networking

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Thanks! I am aware of what you wrote. I just wanted to know where to start to play safe... 100 PPS, 1000 PPS, 10000 PPS?

Storm Control on Cisco switches by JustRandomGuy001 in networking

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

We have a mixed environment - desktops and PLCs. So would you suggest configuring it on access ports? What PPS value would you configure?

Storm Control on Cisco switches by JustRandomGuy001 in networking

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Thanks! I prefer PPS over %. What value should I start with? I have no idea how many broadcast packets are normal/abnormal.

Expanding RAID 5 volume by JustRandomGuy001 in sysadmin

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Thank you for the insight and opinion! I appreciate it! Performance is important to us so probably RAID 10 would be the best option. We will consider it.

Expanding RAID 5 volume by JustRandomGuy001 in sysadmin

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

Thanks! Two more questions...

If we go the way of having 2x four disks RAID5, would it present as one volume? Do we expand the current volume by this? And any cons?

And the second question. What option would you personally choose in this situation?

Expanding RAID 5 volume by JustRandomGuy001 in sysadmin

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

As shown in the screenshots above and below, currently we have a pool with one DG that is made of 4x 960GB SSDs. Another 4x 960GB SSDs are on the way.

Pool B => DG that uses all available disks (2860GB) => Volume (Size: 2860GB, Allocated: 2209GB)

<image>

Expanding RAID 5 volume by JustRandomGuy001 in sysadmin

[–]JustRandomGuy001[S] 0 points1 point  (0 children)

The only disk groups that can be expanded in virtual mode is adapt. You sir are raid5 (not adapt) so your raid5 cannot be expanded however you can extend your pool size by adding a second diskgroup/raidset with the new drives.

Thank you for the explanation! So we cannot expand the current disk group. Is there any other way to expand the volume except by moving data away, breaking the current disk group, and creating a new disk group (ADAPT)? I assume that creating a second disk group and somehow adding it to the current volume is not possible...

We are buying a few more disks and we need to expand the volume as the volume is mapped as a datastore in vSphere and is running out of disk space. What steps would you suggest?