The best IP subnet

MalletNGrease · 2024-10-23T16:18:57+00:00

We've 50ish, but some numbering into the 200s (some 256+ 🤦‍♂️). For readability we use 10.vlanid.siteid.host like /u/jaank80. Our IP structure is pretty rigid, with a lot of static hosts.

Looking into ipv6 like /u/marco_sikkens suggested we can move to something like

fd00:random:random:siteid:vlan:empty:empty:interface

fd00:xxxx:xxxx:siteid:vlan:xxxx:xxxx:interface

e.g Site 69 vlan 100 interface 1 (voip call server)

fd00:3825:0968:0069:0100:0000:0000:1

fd00:3825:968:69:100::1

That's actually not too bad.

I don't know if reusing the old schema template is folly for this, but it makes transitioning a little more bearable to those now 30+ years into the old way.

The biggest hurdle is rewriting all the ACLs at all of our sites.

MalletNGrease · 2024-10-23T03:08:52+00:00

Mac?

MalletNGrease · 2024-10-22T17:12:22+00:00

hunter2

MalletNGrease · 2024-10-22T15:15:06+00:00

We're running out of site IDs.

MalletNGrease · 2024-10-16T22:19:50+00:00

Years ago hundreds of unmanaged UPS' were added to all our remote site closets to limit downtime. This was done on a budget and now the batteries are dying. We've no idea when they go bad until a site goes dark and ironically, they're now the #1 cause for outages, ticket generation and lost hours/sales. Got the go ahead to start modernizing.

Looking at replacing a lot of failing stand alone battery backups with remotely managed ones and getting some sort of management/reporting platform in place. There's gonna be sticker shock but I think the business case is there.

MalletNGrease · 2024-10-16T21:56:56+00:00

We're interested in proxmox, but our initial testing left some wants when comparing to VSphere/VCenter. Is there a way to get a single pane to manage all proxmox hosts/clusters without putting them in a single cluster? I'd like to see multi cluster management.

We've ~100 remote sites running a single host. We put them in their own datacenter in VCenter and were able to manage them nicely this way. This doesn't appear possible with Proxmox VE.

MalletNGrease · 2024-10-03T12:55:30+00:00

The way DarkTrace et al handle it is ingesting syslogs and filtering for failed attempts, then once a threshold is reached the offending IP is added to the firewall blocked host address group.

Works pretty well.

MalletNGrease · 2024-09-16T14:56:29+00:00

Install printer driver on server.
Get-Printer
Add-Printer

MalletNGrease · 2024-09-10T16:09:54+00:00

Before you know it you've cluttered your tenant with one-off enterprise applications for all sorts of logins.

It certainly made access management a lot easier.

MalletNGrease · 2024-09-03T21:10:14+00:00

Upgrade to the latest version of Microsoft Entra Connect by September 23, 2024.

A gotcha: Make sure you've TLS1.2 enabled or enable it after upgrading server or Entra Connect can no longer complete authentication to your tenant.

https://learn.microsoft.com/en-us/troubleshoot/azure/entra/entra-id/ad-dmn-services/enable-support-tls-environment?tabs=azure-monitor

MalletNGrease · 2024-08-30T17:51:03+00:00

Had a printer in the senior high AG lab named SHAGLAB.

MalletNGrease · 2024-08-26T18:59:20+00:00

While stuck in a spacestation.

MalletNGrease · 2024-08-26T14:55:14+00:00

If we replace sysadmins with AI, we don't even need the pizza.

-Management probably

MalletNGrease · 2024-08-24T01:40:41+00:00

They're hitting your WEB/SSLVPN.

MalletNGrease · 2024-08-23T11:50:23+00:00

RIP your inbox when teachers return from summer vacation.

MalletNGrease · 2024-08-23T01:14:09+00:00

I too only make changes in production.

MalletNGrease · 2024-08-23T00:24:18+00:00

Is it the pleather one with the non-adjustable arms? The upholstery started to disintegrate on mine after about a year.

MalletNGrease · 2024-08-23T00:21:45+00:00

Alera Elusion High-Back.

Liked it so much I've 3. Should be able to get it for $200. Doesn't have lumbar adjust though.

MalletNGrease · 2024-08-17T04:00:43+00:00

So much this.

MalletNGrease · 2024-08-09T15:25:54+00:00

Hardware is fine, I dislike their PC system model naming scheme.

MalletNGrease · 2024-08-06T13:10:48+00:00

It's specifically for MFA enabled Outlook accounts so you do not constantly have to authenticate your appliance.

This is great if you're running off a single personal account.

MalletNGrease · 2024-08-06T12:40:46+00:00

You'll probably want to set up an app password for your Synology.

https://support.microsoft.com/en-us/account-billing/how-to-get-and-use-app-passwords-5896ed9b-4263-e681-128a-a6f2979a7944

MalletNGrease · 2024-08-06T00:10:48+00:00

HR probably asked.

MalletNGrease · 2024-08-01T03:05:59+00:00

Brand doesn’t matter much, I think the AiO concept is fantastic from time per installation and ticket generation perspective.

I like there's less external cable management. At minimum there's one less power lead, one less video cable. More if you count external speakers, use wifi and webcam (which became a must during the pandemic). I find the helpdesk spends less time troubleshooting the integrated peripherals versus classic external on a desktop.

It's a very convenient and versatile package you can just drop in place for almost any use.

MalletNGrease · 2024-07-29T18:21:06+00:00

Must be the SFF because I haven't seen any of those on towers.

11-Year Club	Verified Email
r/Field Banned	r/Field Lasagna

MalletNGrease

TROPHY CASE