@wirestyle22 said in Certifications! Are they still worth pursuing?:

@scottalanmiller said in Certifications! Are they still worth pursuing?:

@irj said in Certifications! Are they still worth pursuing?:

@scottalanmiller said in Certifications! Are they still worth pursuing?:

@wirestyle22 said in Certifications! Are they still worth pursuing?:

The knowledge is beneficial but the piece of paper is irrelevant. I use certification books as education paths and then have @scottalanmiller and @JaredBusch yell at me until i understand. It's worked well for me. As a side note, Cisco can over-complicate a lot of simple concepts so watch out for that.

I think Cisco is a bad path for general education. Their material is super Cisco specific and engineered way more to promote the use of their products than they should be. You could say something similar about Windows certs, but operating systems have to be like that in a way that networking does not and Microsoft is certainly better about keeping knowledge and concepts more general. Cisco certs are for Cisco jobs.

Great business model for Cisco, though. Without CCNA, Cisco would lose a huge market share IMO.

Yes, they all learned that model from Novell. If only Novell had learned it.

It amazes me how much I hear Novell referenced. People are still upset it failed.

Not many, it was pretty crappy. Stable, but archaic, even at its peak. But they did a lot to give us much of Suse, so that's good.

@krisleslie said in Purchase options for a small non profit 25 staff:

Everything got installed successfully 🙂

Awesome

@krisleslie said in Configuring QoS on a Edge Switch 48 Lite:

See for me I don't understand when and where to apply QoS. As one minute your told it's useless the other it's useful. Like what's missing is the context behind the usage. I agree with Jared in that if your enabling it, by that alone it doesn't mean something magical is happening, something specific is.

It's EXTREMELY USEFUL in VERY LIMITED CIRCUMSTANCES.

It's like a shotgun isn't useful at the grocery store, but in the limited case of hunting, it's useful.

Couple corrections to the solution posted above after more testing this evening.

@emad-r yes, yes we can complain.

It's why NN is so damn important! (even though it's dead now. . .)

@g-i-jones That's interesting that we don't have the same issue then. Glad you got it resolved.

Yup, basically just automating Postfix configs.

@obsolesce said in Risks to Geo Blocking:

@scottalanmiller said in Risks to Geo Blocking:

So for the first time in YEARS, we just did some geo blocking today. How is this timing possible?

Oh yeah? Which? Why?

Only access for one tech, so trying to limit as much as possible. But it didn't work, (probably nothing to do with the geo blocking) so I don't know if they ended up keeping it or not.

@fateknollogee said in SaltStack setup for /etc/hosts:

I remember this has been discussed on the forums sometime back when...

I'd like to have a master host file & push this out to Linux & Windows servers & desktops.

Anyone have a good how to guide?

One more thing, you'll want to use file.managed in a State file.

That way, you keep a master copy on Git and only need to edit that. Saltstack will take care of the rest and make sure all minions have that updated file.

Otherwise, with salt-cp, you have to manually SSH to the salt-master server and run the command. I'd rather just update the file in VSCode, then be done with it...

In your State file, you can do Linux and Windows using an If statement, having it do it one way for each OS.

I use grains, os_family, etc.

We set up our Intel RMM and Dell iDRAC Enterprise KVM/IP setups on the internal LAN with a static IP address. Self-issued SSL is fine for this.

Older RMM/iDRAC units may need a legacy Win7 VM with IE9 around for those moments when they need to be managed (we keep one turned off but around for this exact reason). This is especially true with the certificate structure changes that have come through recently. Modern browsers refuse to connect to legacy web management consoles.

Rules are set up on the edge to allow both inbound and outbound packets for their services to our office IP address. VPN is another method to gain access if the edge supports it.

Username and password are set up with both settings being custom with info kept in KeePass here. Make sure to change the Dell default setting! Intel gets set up in the BIOS before it allows site authentication and access.

Cost wise Dell is $300 to $450 here in Canada to license while the Intel RMM module is sub $150.

A blog post on what we do: http://blog.mpecsinc.ca/2017/06/disaster-preparedness-kvmip-usb-flash.html

We don't do SuperMicro.

@bnrstnr said in Router / AP / Switch for business:

ES-24-LITE

That's right...

@eddiejennings said in VM firewall for the rest of the VMs? (Xenserver host):

@jaredbusch said in VM firewall for the rest of the VMs? (Xenserver host):

@pete-s said in VM firewall for the rest of the VMs? (Xenserver host):

PS. For the firewall VM I'm thinking Pfsense (freebsd) or Vyos (debian)? Are there others I should consider?

VyOS is a solid solution, less known than pfSense in general, but VyOS is forked from the same original source as Ubiquiti's EdgeOS.

VyOS is working fine for my colo server. +1

Ah so, @EddieJennings not @coliver, but i knew we had conversations about this.

@romo said in Zimbra and Zoho Share Favicon:

0_1534814454288_zoho-zimbra.png Yeah they don't look to similar

Go to Zimbra's documentation site, they reverse the colours apparently.

@iroal said in Guacamole 0.9.14 on CentOS 7:

@jackmartins_ said in Guacamole 0.9.14 on CentOS 7:

@iroal Did you solve this problem? I got the same error

I reinstall using this tutorial.

https://cstan.io/?p=11405&lang=en

Regards.

Those instructions is pretty good. He did leave out information about the default user and password for it.

@jaredbusch said in XenServer / NextCloud / backup build to move away form Dropbox:

@pete-s said in XenServer / NextCloud / backup build to move away form Dropbox:

However to store the VM themselves and boot your system I would very much like to have a small SSD drive for that.

There is no point in putting an SSD in a system for the hypervisor. That is just stupid.

There is no “storing the VM themselves” on the SSD unless you are talking about splitt8ng the storage VM into a boot vDisk and a data vDisk.

But even the, the OS will never use the SSD aside from boot. A file server al,ost never writes to the OS, it is all about the storage vDisk.

You're right. I was thinking putting the xenserver host (about 50GB space) and the guests on SSD and just have archive files and backups on the HDDs. From my experience the VMs will be sluggish running on the WD RED disks as they are much slower (avg seek and transfer rate) than your typical 10K, 15K 2.5" drives. But your right that it won't matter much in this case.

@scottalanmiller Did you ever fix this?

I found this site to be very helpful.
https://negativo17.org/bluray-playback-and-ripping-on-fedora-aacs-bd-bd-j/

There is also a libbluray-bdj package in the main fedora repo. I have no installed it yet. If the next BluRay I watch has a problem, I will maybe try those settings.
0_1534651704370_736ee8f3-0f1a-4899-8ac3-6f5f15e1b172-image.png

@stacksofplates said in Supermicro iKVM/IPMI HTML5 viewer?:

I've used it but only on newer. No idea if it's upgradeable or not. The HTML5 console works pretty well. They misspelled "Macro" in the interface though. It's spelled "Marco".

I only have seen reports of the Firmware been able to be run on X10 only but it is not supported
https://forums.servethehome.com/index.php?threads/supermicro-html5-ikvm-arrived.10320/page-2

https://forums.servethehome.com/index.php?threads/supermicro-html5-ikvm-arrived.10320/

Cavium over Chelsio any day if considering iWARP RDMA. Intel would be a distant second to Cavium.

The RJ45/SFP+ really depends on needs. If there are enough fibre runs to complete the setup then SFP+ would be the direction for top of rack (TOR) and/or aggregation.

For non-RDMA enabled networks we use RJ45 based setups for the NICs (Intel X540/X557 10GbE). For RDMA we use RoCE 10GbE/25GbE/40GbE/50GbE/100GbE via Mellanox NICs and switches which are SFPx based.

Intel 7xx series NICs utilize iWARP and SFPx and may be an option depending on server vendors and switch setup.

Performance wise, depending on network type and whether RDMA is present or not 10GbE should be around the numbers mentioned by @NashBrydges.

In Remote Viewer, click View > Displays > check Monitor 1/2/3 etc, after setting up like below.

0_1534540827938_b92e59c8-fdd5-4adb-a28e-c71738cddbd2-image.png

0_1534540859700_88ad0ed6-883e-4c89-8ba0-b4e039c05268-image.png