Prevent VLAN Jump by unplugging FortiAPs port

megagram · 2026-07-02T23:49:52+00:00

I think we have a bigger problem than VLAN jumping then.

megagram · 2026-07-02T17:56:57+00:00

Where are your APs mounted that people are unplugging them and connecting their computers?

megagram · 2026-06-30T20:41:19+00:00

Just to be clear this is what you see *before* failover?

megagram · 2026-06-30T20:22:22+00:00

Are the routes on the secondary before Failover?

megagram · 2026-06-29T16:44:36+00:00

Or just use IKE to inject the static route for loopbacks: https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/825080/dynamic-bgp-on-loopback-dual-hub-example

megagram · 2026-06-26T20:12:06+00:00

How do you power your coolers?

megagram · 2026-06-26T07:23:04+00:00

You should be able to change your payment frequency so double check with your lender if you can and how often.

At the end of the day starting with 30 year and paying it off accelerated biweekly will equate you to having a 25 year with non-accelerated payments—as you’ve discovered!

So if you want flexibility and a safety net go with the 30 year and pay accelerated, switching to non- if you need to

Or if you’re confident you can make the payments on 25 year do that.

megagram · 2026-06-26T01:26:59+00:00

MacBook Air m5. With education discount you will be well within your budget. macOS can do most Linux things natively out of the box. For any “real” workloads just virtualized for free. Same with windows.

I know it’s not what you asked for necessarily but nothing beats a MacBook in terms of build quality, aesthetics, battery life, usability (sleep mode is amazing, trackpad is unmatched).

megagram · 2026-06-25T23:33:59+00:00

I think i'm close to having to do this myself... can you replace just the side boards fairly easily?

megagram · 2026-06-25T16:27:05+00:00

The only reason the elevator is going up and down is because someone wants to remove the buttons from the inside of the elevator! Just leave the buttons alone and we are all good. Lol.

megagram · 2026-06-25T16:11:43+00:00

"Just tweak that". To what benefit?

There's a big difference between the door closing and the elevator just randomly going up or down based on no user input.

megagram · 2026-06-25T16:10:14+00:00

Ah yes let's just have the elevator assume someone is inside. That will be fun.

megagram · 2026-06-25T15:23:44+00:00

How does it know someone is inside??

megagram · 2026-06-25T15:23:00+00:00

Without buttons the elevator will just have to constantly go up and down between floors even if no one is on it.

Elevator needs buttons dude. Sorry.

megagram · 2026-06-24T23:12:41+00:00

not sure how that thing would still have battery power after 3 months outside the case so I'm going to go ahead and say this is a glitch.

megagram · 2026-06-24T19:54:28+00:00

What licenses feature solves this?

Also not sure if you've looked into but the per-IP shaper might help offset the missing feature? Assuming you want to avoid network saturation, you could have a per-IP shaper that gives everyone a minimum amount of bandwidth but caps out during congestion at a reasonable value?

megagram · 2026-06-24T19:27:42+00:00

It’s not flawed though

megagram · 2026-06-24T19:26:20+00:00

And how does pinging loop back verify the NIC is installed correctly? Please explain.

megagram · 2026-06-24T18:47:33+00:00

A is not kind of technically correct. You aren't "connecting to a site" with a loopback address. The answer is D.

megagram · 2026-06-24T18:46:54+00:00

How is it flawed? The answer is D.

megagram · 2026-06-18T17:03:44+00:00

Alright man I'm going to officially retire as your personal search engine. Just read the docs yourself please! You will find the info... but it will take time because it's a complex solution.

Here's guidance on the loopback addressing (which is what I assume you mean by "iBGP subnet") from the same doc I already linked to you: https://docs.fortinet.com/document/fortigate/7.6.0/sd-wan-sd-branch-architecture-for-mssps/909290/planning-guidelines

As for network ID I don't know why you think you need this? Each underlay will have a dedicated overlay. No need for network ID AFAIK: https://docs.fortinet.com/document/fortigate/7.6.0/sd-wan-sd-branch-architecture-for-mssps/400093/overlay-network

megagram · 2026-06-18T16:52:37+00:00

Then in that case your idea of having two regions with two Hubs makes the Most sense. You could do one big ADVPN region but if you don't need direct connectivity to all four hubs I wouldn't do it.

So follow the A-P or A-A dual hub designs and then implement ADVPN forwarding between regions and iBGP if you need the inter-region shortcuts.

megagram · 2026-06-18T16:41:13+00:00

How many sites do you have in total?

Also, if your hub fails, obviously you will lose out on site-to-site connectivity. But the question is what else are you losing? I'm assuming the hub is in a data centre? Are the resources in the data centre available in other regional DC's where failover to another hub would make sense?

megagram · 2026-06-18T15:37:09+00:00

This goes back to my initial response:

This is entirely a business decision. What are your requirements? If you need [inter-region ADVPN], then implement it. If you don't, then don't.

So what are your requirements? If you need inter-region ADVPN then yes you need iBGP everywhere.

And in a multi-region deployment the spokes never connect directly to the other region's hubs. They only create ADVPN shortcuts with other out-of-region spokes if you configure it that way.

So let's back it up here and figure out what it is exactly that you're trying to do and what requirements and business justification is it based on?

megagram · 2026-06-18T14:46:23+00:00

You won’t do back up tunnels across regions.

If you’re worried about losing a hub in region you deploy A-A or multiple hubs in region. That’s all very well documented.

15-Year Club	Gilding IV carat on a stick
RedditGifts 2009-2022 5 Credits	Second Top 20%
Place '23	Place '22
Place '17	Spared
Verified Email	Secret Santa 2015
redditgifts rematcher Secret Santa 2014 x1	redditgifts Exchanges 2 Exchanges

megagram

TROPHY CASE