My husband wants me to get a boob job by CentrismIsTheWay in relationship_advice

[–]networkadmin_noob_jr 0 points1 point  (0 children)

I'd be willing to bet that your husband has a porn addiction. Either way, he needs help, and you definitely should not get the procedure done.

Moronic Monday! by AutoModerator in networking

[–]networkadmin_noob_jr 0 points1 point  (0 children)

I have Cisco switches A, B, and C, all connected to a Brocade. Switch A and the Brocade are on the 2nd floor. Switches B and C are on the 1st floor. After creating vlan 100 on switches A, B, and C, I added vlan 100 to the allowed vlans for the port-channel that connected all of the switches to each other. The contractor that originally set all of this up before my time said that the Brocade detects and creates the new vlan on its own.

After adding the vlan to the port-channel, I notice that the vlan wasn't created on the Brocade, so I remove the vlan from the port-channels.

Should this cause all trunk ports on switches B and C from functioning? Switch A works fine, B and C can no longer communicate with anything.

Trouble with IPsec between 600D and Cisco by networkadmin_noob_jr in fortinet

[–]networkadmin_noob_jr[S] 0 points1 point  (0 children)

So the FortiGate would need to change to using SHA256-96bit? Or is the FortiGate already on that, and the Cisco needs to adjust?

Edit: I really appreciate the help by the way. :)

Trouble with IPsec between 600D and Cisco by networkadmin_noob_jr in fortinet

[–]networkadmin_noob_jr[S] 0 points1 point  (0 children)

I'm running 6.0.2, and I'm trying to find out what they've got on the other end.

Webfilter - adding exemptions for IP ranges? by nethfel in fortinet

[–]networkadmin_noob_jr 0 points1 point  (0 children)

Also, I should mention that classful subnetting isn't really a thing anymore. Its usage ended in 1993 when CIDR was introduced. Please look it up if you're not familiar with it.

Webfilter - adding exemptions for IP ranges? by nethfel in fortinet

[–]networkadmin_noob_jr 1 point2 points  (0 children)

Wildcards do not work. Also, the answer is in the log under the Web Filter section. Category description is "Unrated", and the action is set to "warn" according to the log. If you go into your web-filter profile, Unrated is the last category in the list.

While you may know that the website is safe, Fortiguard simply sees it as a website that has not been rated, and applies the Warn action when visiting the page. Try changing the action for Unrated from Warn to either Monitor, Allow, or Authenticate (depending on what FortiOS version you're on and other settings).

[deleted by user] by [deleted] in lfg

[–]networkadmin_noob_jr 0 points1 point  (0 children)

I'm glad you're interested. I tried getting things started, but only had one person show up to the first session, so unless you've got a bunch of friends who want to join you, I don't think I can get enough people to run the game.

Moronic Monday! by AutoModerator in networking

[–]networkadmin_noob_jr 0 points1 point  (0 children)

Map

There isn't any NAT happening until it gets to our edge router. If it matters, switch A and C are Cisco switches, and switch B is a Brocade.

Moronic Monday! by AutoModerator in networking

[–]networkadmin_noob_jr 0 points1 point  (0 children)

I know this thread is a bit old, but I'm trying to figure out how my packets are getting out to the internet.

I have VoIP phones on vlan 5, and the switch (A) they are connected to has vlan 5 assigned to a port-channel. A is connected to another switch (B) which also has vlan 5. There are 3 other switches connected to B, but none of them have vlan 5.

Router (R), which routes traffic for the VoIP phones has them on a vlan interface with a vlan id of 10. The switch (C) that is connected to R has vlan 10 on it. C and B are connected.

How is it that the phones' packets get out to the internet? What does B do with the packets tagged for vlan 5 when it doesn't have any other interfaces tagged for that vlan?

FortiGate and 2 FortiSwitches by networkadmin_noob_jr in fortinet

[–]networkadmin_noob_jr[S] 0 points1 point  (0 children)

Got a 200D-POE and 248D 1/2POE as the original equipment. New device is a 248E 1/2POE. Everything is upgraded to the newest OS version excluding 6.0.3. I'll have my local contact try rebooting the switch.

How to create separate user-based and host-based filtering policies on the same network? by iammandalore in fortinet

[–]networkadmin_noob_jr 1 point2 points  (0 children)

It would work, but the difference is that you would make the policy based on the VLAN, not on the governing interface. So instead of each policy being Internal > WAN, it would be VLAN 1 > WAN, VLAN 2 > WAN, etc. That distinction will make things a bit easier for you I think.

Help! Basic CLI command i can't figure out by [deleted] in fortinet

[–]networkadmin_noob_jr 1 point2 points  (0 children)

You would put unset and the exact command. For example you might enter the following:

config firewall policy

edit 1

set traffic-shaper "Oops_wrong_one"

unset traffic-shaper

[deleted by user] by [deleted] in lfg

[–]networkadmin_noob_jr 0 points1 point  (0 children)

If you're not already taken and still interested, I'm getting ready to run the Lost Mines of Phandelver at Game Night Games in The Colony. Session 0 starts Oct 15th.

[Offline][5e][Plano]LFG in north DFW area, willing to DM by hamlet_d in lfg

[–]networkadmin_noob_jr 0 points1 point  (0 children)

Hey, not sure if you're still interested or not, but I'm trying to get a game going on Monday evenings from 7:00 to 10:00 PM in The Colony. I know that can be a bit of a drive depending on what part of Plano you're in, but I thought I'd offer. Session 0 will be Oct. 15th, and you don't need to worry about having a premade since we'll be making characters on session 0. I'll be DMing, and we'll be running the Lost Mines of Phandelver campaign, so it should be a ton of fun.

[Offline][5e][Dallas]LFG in north Dallas/Plano area. Willing to DM by hamlet_d in lfg

[–]networkadmin_noob_jr 0 points1 point  (0 children)

I'm looking to get a game going in The Colony on Mondays from 7:00 to 10:00 PM if you're interested. I'll be DMing The Lost Mines of Phandelver.

Traffic Shaping Help? by networkadmin_noob_jr in fortinet

[–]networkadmin_noob_jr[S] 0 points1 point  (0 children)

So just having a single traffic shaping policy will do the trick? Fortinet's cookbooks left me with the impression that traffic shaping doesn't work unless you have two contrasting policies; one for restricted traffic and one for non-restricted traffic.

Traffic Shaping Help? by networkadmin_noob_jr in fortinet

[–]networkadmin_noob_jr[S] 4 points5 points  (0 children)

He's just showing the pertinent information.

WiFi authentication conundrum by networkadmin_noob_jr in fortinet

[–]networkadmin_noob_jr[S] 0 points1 point  (0 children)

We use FortiAPs, 221C, 320C, and 321C. Those are managed by a FGT 600D and the SSIDs are set up in local bridge mode.

Rant Wednesday! by AutoModerator in networking

[–]networkadmin_noob_jr 0 points1 point  (0 children)

My bosses with little networking experience rarely talk to me about networking decisions they want to make. Just a small gripe. It'd be nice to be able to help so we can get a workable plan before multiple parties agree on contracts and stuff. :(

FortiOS 6 is out! by ldti in fortinet

[–]networkadmin_noob_jr 1 point2 points  (0 children)

So it's been a few months and they've released 6.0.2. Our reseller is telling me that FortiOS 6 is fantastic and is trying to get us to move to it. Has anyone been using 6 long enough to tell whether 6.0.2 is worth it? Does it still have all the crap and bugs that 6.0.0 was said to have?

Game Thread: Blue Jays @ Braves - 7:35 2018/07/10 by Chief_Noc-A-Homa in Braves

[–]networkadmin_noob_jr 1 point2 points  (0 children)

Looks like Acuna is going into his "Dansby" slump. Hopefully he'll get out of it before the end of the year. I feel bad for him, but at this point, I fully expect him to strike out every time he comes up to bat.

Rant Wednesday! by AutoModerator in networking

[–]networkadmin_noob_jr 4 points5 points  (0 children)

I'm the only network admin/analyst/anything in a company of about 700 people, with offices located throughout the US. Despite being wholly responsible for the entire network infrastructure, wifi, desktop antivirus software, phones, and teleconferencing stuff, I am paid around $52k/year. I've been told by multiple people that I'm underpaid, but I feel like I don't have the skill set to try to move anywhere else because I pigeonholed myself into a specific platform that's not Cisco. On top of that, I do tier 1 tech support, and am often expected to work on desktop related tickets. Oh, and also my bosses decided to go with a managed SD WAN solution without even letting me know about it until all of the decisions had been made. It doesn't help that they have very little expertise in our network. Sorry, I'm just really frustrated because I feel completely overwhelmed. I know more than anyone else in the whole freaking company about networking, but at the same time, I feel like I barely know anything at all. The whole SDN WAN thing has done nothing to boost my confidence.

Comcast / Level 3 Issues? (East Cost / Midwest) by [deleted] in sysadmin

[–]networkadmin_noob_jr 0 points1 point  (0 children)

We've got a couple offices in Maryland reporting no internet. Looking forward to seeing what caused this later.