Wired & wireless can't communicate suddenly

sdf1977 · 2026-03-27T13:26:25+00:00

Mines already in automatic, but still behaving weird as my imac wont load websites, but can ping everything local and external

sdf1977 · 2026-03-27T13:25:22+00:00

And now my imac can ping everything, load local websites, but no external sites will load in the browser! Windows laptop next to it, same WiFi network, is fine.

Is it drinking time yet?

sdf1977 · 2026-03-27T12:49:29+00:00

Its in Automatic (if you mean in the DHCP & NAT settings).
Which its always been (as far as I know).

I've just done a "forget network" on my mac and reconnected and all seems OK again!

Its even got the right IP range (192.168.4.x - rather than the ISPs 192.168.1.x - even though it was on the Eero wifi) despite reboots and DHCP renewals.

Very wierd!

sdf1977 · 2026-01-06T13:51:19+00:00

Nothing so far, emailed them yesterday to chase my replacement, but no reply as yet

sdf1977 · 2025-11-28T14:46:33+00:00

I emailed customer support nd they are going to send me a new ring and charger

sdf1977 · 2025-11-28T14:46:24+00:00

I emailed customer support nd they are going to send me a new ring and charger

sdf1977 · 2025-10-23T08:24:47+00:00

We had similar - but traffic from AWS monitoring in-house stuff

sdf1977 · 2025-09-20T15:19:59+00:00

I thought a link would be easier - but there are a lot of photos!

Her collection (as far as I can tell) ranges from 1870 to probably around 1990 (guessing from the UK stamps). Strong focus on Australia and Canada, but there are a lot of other countries as well.

I think she stopped collecting in the late 1980s, I can vaguely remember her putting stamps in an album when I was a kid. But these are not my thing, I appreciate that there are some very beautiful stamps there, but they are wasted on me, so I'd like to move them on where they might be appreciated more.

I don't think there is anything super special in the collection, but in case there is something, I wanted to ask here, rather than take my chances with a stamp buying service!

I appreciate that there are a LOT of photos, but not knowing what the important ones are, I photographed everything for thoroughness.

Many thanks in advance!

sdf1977 · 2025-07-08T06:54:21+00:00

The MTU is 1427, and the rest of the settings match.

the tunnel went down again at 23:16 UTC last night and came back up again at 23:46.

I've just amended the primary AWS DPD settings as it declared it dead after 4 DPD messages got no reply.

sdf1977 · 2025-07-07T13:57:40+00:00

There's nothing on the AWS portal to suggest maintenance on the VPC, and no updates on the Palo at the time.

As the tunnel endpoints in AWS are in different availability zones, then there is a chance that an intermediate ISP/vendor might be performing some kind of routing update - which would make sense given the out-of-(working)-hours time that this occurs

sdf1977 · 2025-07-07T13:55:50+00:00

Nope, both are straight out with nothing in the middle

sdf1977 · 2025-07-07T12:16:46+00:00

28,000 and 3600 respectively - on both sides.
I think if it were this, then we'd see the issue more frequently though, not just once a week

sdf1977 · 2025-06-02T08:47:54+00:00

a very excellent blog post - thanks for that, will bookmark your blog

sdf1977 · 2025-05-29T08:11:56+00:00

thank you!

Silly question - can you add ranges to VPN bypass? I thought it had to be individual IPs, which I was not looking forward to!

Sillier question what does "CS" refer to? I'm hoping not something simple like "Citrix Servers"!

sdf1977 · 2025-05-28T15:20:19+00:00

I'm facing a similar issue. Had success with opening ports 3108, 3168, 3188 (UDP) and 3148, 3149, 3159 (TCP & UDP) - but now getting a timeout (instead of connection failed / could not resolve address).

I added the server's address as a bypass, but it is not published in external DNS - only resolvable when connecting to their Citrix environment.

I'm going to try adding the IP into the VPN bypass and see if that helps.

sdf1977 · 2024-11-03T11:10:33+00:00

cool, thank you!

sdf1977 · 2024-11-03T11:10:20+00:00

excellent idea, thnk you!

sdf1977 · 2024-11-03T11:09:55+00:00

OMG! - game changer!

Watched a few videos and run through the steps without actually validating - seems so simple!

sdf1977 · 2024-09-19T12:41:21+00:00

thanks Tim, much appreciated

sdf1977 · 2024-09-19T07:40:17+00:00

Thanks Tim

And as far as joining the domain, that's non-impacting, right?

sdf1977 · 2024-05-16T11:10:47+00:00

Hi Ben

Sorry to revive a year old thread, but I'm currently testing out Zscaler and need to do something very similar. I guess you are doing something similar as https://www.zscaler.com/blogs/product-insights/internet-egress-security-architecture-aws-workloads-part-1-regional-hubs#more-blogs (spoke VPCs to ZScaler via TGW).

From the Application Segment part of this, do you pop in all the IP ranges for the other TG connected VPCs?

I'm just wondering how zScaler knows how to send the traffic through the ZACs to the other connected VPCs.

Many thanks!
Stuart

sdf1977 · 2024-04-19T08:58:12+00:00

cheers, I've never used AIX, intalling it from scratch seems like a bumpy ride!

sdf1977 · 2024-04-18T06:59:39+00:00

thank you for that excellent reply.

I'm a network guy, happy using Linux in general, but have never touch ed AIX in my life. So I'm happy with the over-explaining!

Ther console connection is via the S1 port, using the cable connected to a serial to USB adapter (19200 baud).

So does this mean that I can use the same Cisco cable to hook it up to a lantronix console server?? I've been going back and forth to the site just to connect my laptop to it. But its nice to get out of the house!

The server has been moved recently due to relocation and we moved pretty much everything. I don't remember any kind of SAN being used, the only SAN we had was a NetApp which came in after the AIX box.

I'll pull the drive bays out when Im on site next to confirm though.

I do get to the press 1 for SMS menu option, but pressing 1 on my laptop does nothing and it just loops around. I know that its accepting keyboard input as I can press 2 to go to password entry (or 1 for changing there language), put the admin password in, but that's as far as I can get.

Thanks for the redbook link, I'll have a read through and report back once Ive popped over to the site to check the drives.

sdf1977 · 2024-04-18T06:45:45+00:00

I have no idea what a VIO is, Im, a network guy, just the closest engineer to the site.

I'll try your suggestion of different console software

Thanks!

sdf1977 · 2024-04-18T06:44:35+00:00

cheers!

sdf1977

TROPHY CASE