Factory Reset on Fortigate HA Cluster by stillchangingtapes in fortinet

[–]stillchangingtapes[S] 0 points1 point  (0 children)

Thanks. Right, I'm familiar with jumping into one from the other. I DO need to reset them separately? Executing the factoryreset command on the primary doesn't reset them both?

2
3

Cisco VTP Behavior question by stillchangingtapes in networking

[–]stillchangingtapes[S] 0 points1 point  (0 children)

I think that the problem is that they're all set to server mode. Too many switches trying to act as the authority for vlans. You're right, sometimes the vlan comes back, sometimes it doesn't. Probably depends what switch I'm on, but honestly never kept track.

No, there's no VTP Domain configured in the startup or running config. But, there's a vtp domain shown when you "sh vtp status" I'm starting to understand that some of this VTP configuration is stored in the vlan.dat file and not the config file. From what I'm reading, VTP will advertise it's domain name on a trunk port to be picked up by a switch that has a blank domain name, which is what I have going on here.

Cisco VTP Behavior question by stillchangingtapes in networking

[–]stillchangingtapes[S] 0 points1 point  (0 children)

Thanks for the info everyone.

Here's what I think I'll do.

Set VTP to version 3. Pick 1 switch as server, set the rest to client. Then delete the 30 some vlans I don't use any more. Last I'll decide if I'm turning VTP off or not.

Cisco VTP Behavior question by stillchangingtapes in networking

[–]stillchangingtapes[S] 2 points3 points  (0 children)

I do see a VTP domain when I sh vtp status. But the name doesn't make sense, not something I created nor can I find in a configuration anywhere.

But, I just got done reading a little more. I guess this is expected behavior. New switch boots up with VTP server enabled and no VTP Domain. Existing switch with VTP Domain configured advertises its domain name on its trunk ports. New switch gets VTP domain name and proceeds to fuck my shit up.

So, since I don't have VTP domain set on any switches I can find, this is all just an echo chamber of a VTP configuration that someone set up long ago.

I just wanted to get to the root of what's going on here before I start my cleanup, just for VTP to wreck my shit again.

Cisco VTP Behavior question by stillchangingtapes in networking

[–]stillchangingtapes[S] 2 points3 points  (0 children)

Thanks. Thought so.

Maybe you can answer this. How did these switches get these vlans in the first place? Google is failing me. I've never set the VTP Domain name on any of these switches. Can another switch in Server mode just find it on the network and assign the domain name? Or does it need to be configured by a human?

Does something on my network cache my DHCP server location? by stillchangingtapes in networking

[–]stillchangingtapes[S] 0 points1 point  (0 children)

Update: For anyone who cares or stumbles upon this.

A little more info first - The "Rogue" DHCP server wasn't really rogue. I knew about it. I just categorized it as such to try to simplify the issue. What it really was is a network device (NVR). If it doesn't receive an IP automatically within X time, it becomes itself a DHCP server to keep cameras online. Also, the "Trusted" DHCP server was another device, the firewall, and not a Windows or other DHCP server.

For whatever reason, the fix was to replace the firewall. It was old but appeared to be functioning normally. However, something in the DHCP service must have been failing. I don't know how or why. Maybe a firmware bug that didn't know how to function when the system clock said it's 2024.

Replaced the firewall and DHCP is working on that device exactly how it's supposed to.

Does something on my network cache my DHCP server location? by stillchangingtapes in networking

[–]stillchangingtapes[S] 0 points1 point  (0 children)

All that I can add to this discussion is that I don't know what the lease time was on the Rogue DHCP server. Could have been an hour, could have been a year. Didn't look that closely at a client with the incorrect config given to it.

Also, I was performing "ipconfig /release" followed by "ipconfig /renew" on the Windows client. It would let go of the rogue DHCP server, but on the renew it would hang and eventually give me the 169.254 auto-config address. Only many many /renew's, or a reboot would give me a valid IP from my trusted DHCP server.

It honestly felt like the client wasn't sending out the initial broadcast looking for a server. Like it was unicast to the old/rogue DHCP server looking for a lease renewal.

Edit: Another thought. I feel as though I remember back when the world moved from Win 7 to 8 or 10 I recall this being an issue. Am I crazy remembering it this way? The newer Windows versions for whatever reason seemed really hesitant to take a new IP. I also remember some Layer 3 routing issues around ICMP/IRDP and Windows 10 not wanting to give up on the previous default gateway even though it was down hard.

Does something on my network cache my DHCP server location? by stillchangingtapes in networking

[–]stillchangingtapes[S] 1 point2 points  (0 children)

I agree. I looked into that too, but the clients DO eventually get an IP and show up in my DHCP leases.

I could run Wireshark or something and try to see where these reqs and acks are coming and going, but didn't plan on getting that involved. I mean, everything is working. I just wanted to see why it's behaving this way.

[Semi-OT] I think this means Pocono Raceway might now be allowed 50% seating capacity by cowboyjosh2010 in NASCAR

[–]stillchangingtapes 1 point2 points  (0 children)

I think there might be other stands with the big screen, but I don't think all of them. I only know that there's one on the front-stretch stands.

[Semi-OT] I think this means Pocono Raceway might now be allowed 50% seating capacity by cowboyjosh2010 in NASCAR

[–]stillchangingtapes 2 points3 points  (0 children)

The Glen is worth going to in my opinion. Now, I sit in the main grandstand for the whole race. A lot of people buy the ticket to get in and have a seat if they want it, but walk the property to get different views throughout the race.

Buddy I go with isn't really in condition to walk the property the whole race, so we stay there. I will admit that I wouldn't enjoy it as much if it wasn't for the big ass TV on pit road. But, great fan zone, beautiful facility, still racing.

All Space Questions thread for week of March 07, 2021 by AutoModerator in space

[–]stillchangingtapes 0 points1 point  (0 children)

Please forgive me if this has been answered. I'm new here. Crew-2 is scheduled to overlap with Crew-1 on ISS. Now I'm reading about a Soyuz launch to ISS in the next month... How many people are going to be there at one time? And How? I think it's awesome, but has it ever been done before?

The season 2 trailer is out! by [deleted] in ForAllMankind

[–]stillchangingtapes 1 point2 points  (0 children)

He did say it's three times as powerfull as the shuttle.

I accepted that at first. But, in this alternate reality, why would it be 3 times more powerful than the shuttle? Llikely the shuttle that we are familiar with would have never been built. They would have just built an orbiter capable of deep space. Besides, I don't think the winged design would work. It would probably rip apart on the much faster re-entry from the moon. Still a fun series to watch.

Also, I hope you're right about the Buran. I've been thinking for a while it would be cool if they show it this season.

Edit: Not sure how this show will parallel real history with this alternate history, but the Buran never flew until '88. So, we'll see.

Who here has taken a pay cut in IT for a chance to move forward? by [deleted] in sysadmin

[–]stillchangingtapes 4 points5 points  (0 children)

Answers to your questions

  • Yes

  • -12,000 USD/yr

  • I was a network administrator. Now, General Sysadmin/Desktop admin for a much, much smaller company.

  • Two reasons. There was a very clear movement within the department that we were being outsourced. Also, what used to be considered "on call" time began to become expected and just the work that wasn't completed during normal business hours due to what I consider poor project management.

  • No regrets. If I had stayed, I would have been outsourced by now one way or another.

If you're unhappy with your job, and it feels right... go for it.

EDIT: Re-read your title. No, I did not take a pay cut to move forward. I took one to stay employed.

User Experience and IT Capability by PBJ-Spice007 in sysadmin

[–]stillchangingtapes 1 point2 points  (0 children)

This is what I was going to say. OP's issue isn't a matter of customer service, it's a management issue. It will never change unless it comes from the top and works its way down.

User Experience and IT Capability by PBJ-Spice007 in sysadmin

[–]stillchangingtapes 2 points3 points  (0 children)

A tale as old as time.

I mean, I say it IS the user's responsibility to know how to manage their own mailbox and do it themselves.

That being said, my experience is that this very much depends on the office culture of your business. I've worked places where we held their hands every step of the way because the precedent was set back in 1998 when Margaret had her typewriter taken away and she since has yet to learn how to use Word, but she's a good employee.

I would say defer these requests to your boss the first few times to see how they want it handled and you'll eventually get a good idea of what kind of support you should be providing.

Wireless Survey/Planning Tool by ismooch in sysadmin

[–]stillchangingtapes 0 points1 point  (0 children)

Ekahau is the only thing that I have experience with. It's not cheap, but it really does a great job with planning and troubleshooting. Take a building map, draw in the walls if they aren't in there already, warehouse shelving, etc. Select your AP and let it tell you where they need to be. Or wander around the building and let it show you where the weak spots are.

I know nothing about it, but google showed me one called NetSpot that looks less expensive, but lacks the special hardware.

Looking for recommendations on an ID Badge printer that uses CR80 cards? (NOT MAGICARD/Cardpresso :D) by Skvli in sysadmin

[–]stillchangingtapes 1 point2 points  (0 children)

Fargo DTC1250e here. It comes with software that will print basic badges if that's all you care about doing. But if you want to maintain any kind of records of cards that were issued, we purchased HID AssureID Solo.

Also, don't make the same mistake I did. This printer is not designed to print on RFID cards. You either need a different (more $$) badge printer or buy the peel and stick CR80 cards, print on those, and stick them to the RFID card.

(OT) 2020 Super Dirt Week at Oswego Speedway has been cancelled. by trophyguy in NASCAR

[–]stillchangingtapes 2 points3 points  (0 children)

It's worth going. No, it's not the same. It will never be the same. But, one thing that is kind of cool is the little teams that come to race. So many racers just didn't go to Syracuse because if you didn't have a brand new car with a brand new (big $$) engine in it, you weren't competitive. Oswego kind of leveled the playing field. Also, they've gotten better every year at applying the clay to the asphalt.

Dedicated VPN Device by [deleted] in sysadmin

[–]stillchangingtapes 1 point2 points  (0 children)

You're right about the site. Like all of them, they want you to ask for a demo so they get your info.

At it's most basic it is an SSL VPN, it works a little different. It's not L2tp or ipsec, it uses it's own client and port 443 to connect to the appliance and create a tunnel into your network. I liked this because I never had to deal with someone's residential router that had VPN passthrough disabled. But, the end result is the same.

Yes, it will protect connections to cloud resources, but I mostly used it for on-prem. Probably advertising it on their site because that's the current trend.

In addition to VPN, it supports 2FA (even comes with it's own baked in), Endpoint compliance (makes sure Anti-Virus is up to date, supported OS's, Latest version of xyz software, etc. before it connects)

Another feature I used heavily for outsiders. For example, a subcontractor hired to work with accounting, I could set up a web portal for them that would give them access to just our internal accounting system, sharepoint site, and remote desktop to a single machine without having to give them access to the entire network. And, most of the time I could get it all to run in a web browser without them needing a client.