ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Where do I start with replacing the whole MS AD stack

    Scheduled Pinned Locked Moved Water Closet
    microsoftactive directoryaddhcpdns
    104 Posts 8 Posters 10.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DustinB3403D
      DustinB3403 @scottalanmiller
      last edited by

      @scottalanmiller said in Where do I start with replacing the whole MS AD stack:

      @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

      Walah, reservations active.

      voilà 😉

      Tomato tomatto

      JaredBuschJ black3dynamiteB 2 Replies Last reply Reply Quote 0
      • JaredBuschJ
        JaredBusch @DustinB3403
        last edited by

        @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

        Tomato tomatto

        Chaning the pronunciation does not change the spelling.

        1 Reply Last reply Reply Quote 1
        • black3dynamiteB
          black3dynamite @DustinB3403
          last edited by

          @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

          @scottalanmiller said in Where do I start with replacing the whole MS AD stack:

          @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

          Walah, reservations active.

          voilà 😉

          Tomato tomatto

          Youtube Video

          1 Reply Last reply Reply Quote 0
          • DonahueD
            Donahue
            last edited by

            I just want to confirm, the general idea is that the DHCP server is static, and EVERYTHING else is just a reservation?

            DustinB3403D JaredBuschJ 2 Replies Last reply Reply Quote 0
            • DustinB3403D
              DustinB3403 @Donahue
              last edited by

              @Donahue said in Where do I start with replacing the whole MS AD stack:

              I just want to confirm, the general idea is that the DHCP server is static, and EVERYTHING else is just a reservation?

              Why statically assign at all? You're in a tight spot because you've already statically assigned a lot of devices.

              Instead, just create reservations and let DHCP handle it from there.

              DonahueD 1 Reply Last reply Reply Quote 1
              • DonahueD
                Donahue @DustinB3403
                last edited by

                @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

                @Donahue said in Where do I start with replacing the whole MS AD stack:

                I just want to confirm, the general idea is that the DHCP server is static, and EVERYTHING else is just a reservation?

                Why statically assign at all? You're in a tight spot because you've already statically assigned a lot of devices.

                Instead, just create reservations and let DHCP handle it from there.

                I dont want to be static anymore, I want to use reservations. are you saying yes to my question above?

                DustinB3403D 1 Reply Last reply Reply Quote 0
                • JaredBuschJ
                  JaredBusch @Donahue
                  last edited by JaredBusch

                  @Donahue said in Where do I start with replacing the whole MS AD stack:

                  I just want to confirm, the general idea is that the DHCP server is static, and EVERYTHING else is just a reservation?

                  Not everything.
                  You AD server is not. That is just begging for trouble in the super rare case that the DHCP is not available when it boots.
                  Your hypervisor should not be either. Then your router. Those things are about it.

                  Then you make reservations for the things that need a fixed IP like application servers, storage devices, and printers.

                  Finally you make a reservation for things you simply want in a certain place like switches and such.

                  Then just let DHCP go wild for the rest. Because there is seriously no reason that you need to care about desktops and desk phones, etc.

                  1 Reply Last reply Reply Quote 2
                  • DustinB3403D
                    DustinB3403 @Donahue
                    last edited by

                    @Donahue yes, don't assign IP addresses manually on your systems.

                    Use DHCP Reservations instead.

                    JaredBuschJ 1 Reply Last reply Reply Quote 0
                    • JaredBuschJ
                      JaredBusch @DustinB3403
                      last edited by

                      @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

                      @Donahue yes, don't assign IP addresses manually on your systems.

                      Use DHCP Reservations instead.

                      That's what he said. I have no idea WTF you are going on about.

                      DustinB3403D 1 Reply Last reply Reply Quote 0
                      • DustinB3403D
                        DustinB3403 @JaredBusch
                        last edited by

                        @JaredBusch said in Where do I start with replacing the whole MS AD stack:

                        @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

                        @Donahue yes, don't assign IP addresses manually on your systems.

                        Use DHCP Reservations instead.

                        That's what he said. I have no idea WTF you are going on about.

                        He's going in circles and not understanding what is being said. Hence it gets explained in a different manner.

                        DonahueD JaredBuschJ 2 Replies Last reply Reply Quote 0
                        • DonahueD
                          Donahue @DustinB3403
                          last edited by

                          @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

                          @JaredBusch said in Where do I start with replacing the whole MS AD stack:

                          @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

                          @Donahue yes, don't assign IP addresses manually on your systems.

                          Use DHCP Reservations instead.

                          That's what he said. I have no idea WTF you are going on about.

                          He's going in circles and not understanding what is being said. Hence it gets explained in a different manner.

                          I understood @JaredBusch, I dont think you understood me.

                          1 Reply Last reply Reply Quote 0
                          • JaredBuschJ
                            JaredBusch @DustinB3403
                            last edited by

                            @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

                            @JaredBusch said in Where do I start with replacing the whole MS AD stack:

                            @DustinB3403 said in Where do I start with replacing the whole MS AD stack:

                            @Donahue yes, don't assign IP addresses manually on your systems.

                            Use DHCP Reservations instead.

                            That's what he said. I have no idea WTF you are going on about.

                            He's going in circles and not understanding what is being said. Hence it gets explained in a different manner.

                            WUT?

                            0_1543626193279_9c16a96d-7686-4ab6-9b1e-a7bc392b46ac-image.png

                            1 Reply Last reply Reply Quote 0
                            • DonahueD
                              Donahue
                              last edited by

                              Apparently Fortigate wont let me create reservations outside of the lease pool. I even tried setting an excluded range, but it simply will not allow me to do it.

                              I can either:

                              • Get a different DHCP server
                              • Abandon using reservations
                              • Open the lease pool to the entire scope and live with the mixed results
                              • Open the lease pool to the entire scope and create 254 dummy reservations to be edited later.

                              My plan was to have 10.0.0.1/22 as my network, with the lease pool of 10.0.1.0 thru 10.0.3.254 and 10.0.0.2 thru 10.0.0.255 reserved for all these devices using reservations.

                              JaredBuschJ Emad RE 3 Replies Last reply Reply Quote 0
                              • JaredBuschJ
                                JaredBusch @Donahue
                                last edited by

                                @Donahue said in Where do I start with replacing the whole MS AD stack:

                                Apparently Fortigate wont let me create reservations outside of the lease pool. I even tried setting an excluded range, but it simply will not allow me to do it.

                                I can either:

                                • Get a different DHCP server
                                • Abandon using reservations
                                • Open the lease pool to the entire scope and live with the mixed results
                                • Open the lease pool to the entire scope and create 254 dummy reservations to be edited later.

                                My plan was to have 10.0.0.1/22 as my network, with the lease pool of 10.0.1.0 thru 10.0.3.254 and 10.0.0.2 thru 10.0.0.255 reserved for all these devices using reservations.

                                • replace fortigate
                                black3dynamiteB 1 Reply Last reply Reply Quote 2
                                • JaredBuschJ
                                  JaredBusch @Donahue
                                  last edited by

                                  @Donahue said in Where do I start with replacing the whole MS AD stack:

                                  Apparently Fortigate wont let me create reservations outside of the lease pool. I even tried setting an excluded range, but it simply will not allow me to do it.

                                  I can either:

                                  • Get a different DHCP server
                                  • Abandon using reservations
                                  • Open the lease pool to the entire scope and live with the mixed results
                                  • Open the lease pool to the entire scope and create 254 dummy reservations to be edited later.

                                  My plan was to have 10.0.0.1/22 as my network, with the lease pool of 10.0.1.0 thru 10.0.3.254 and 10.0.0.2 thru 10.0.0.255 reserved for all these devices using reservations.

                                  Even windows lets you make the full scope and then blackout ranges.

                                  Most Linux systems let you make a reservation anywhere within the subnet of the scope, even outside of the start and stop range also specified.

                                  1 Reply Last reply Reply Quote 0
                                  • black3dynamiteB
                                    black3dynamite @JaredBusch
                                    last edited by black3dynamite

                                    @JaredBusch said in Where do I start with replacing the whole MS AD stack:

                                    @Donahue said in Where do I start with replacing the whole MS AD stack:

                                    Apparently Fortigate wont let me create reservations outside of the lease pool. I even tried setting an excluded range, but it simply will not allow me to do it.

                                    I can either:

                                    • Get a different DHCP server
                                    • Abandon using reservations
                                    • Open the lease pool to the entire scope and live with the mixed results
                                    • Open the lease pool to the entire scope and create 254 dummy reservations to be edited later.

                                    My plan was to have 10.0.0.1/22 as my network, with the lease pool of 10.0.1.0 thru 10.0.3.254 and 10.0.0.2 thru 10.0.0.255 reserved for all these devices using reservations.

                                    • replace fortigate

                                    @Donahue Setup a DHCP/DNS VM and use VyOS, there is a awesome user guide for setting up DHCP and DNS.

                                    1 Reply Last reply Reply Quote 0
                                    • Emad RE
                                      Emad R @JaredBusch
                                      last edited by

                                      @JaredBusch

                                      For me this works and it is simple and not tied to anything but single Linux VM machine:

                                      https://docs.saltstack.com/en/latest/ref/states/all/salt.states.win_lgpo.html

                                      You dont even need to backup the VM, just remeber its IP cause if it fails, recreate a new one and it will receive requests on the same IP, you can make setting to auto accept keys and back it will accept all those clients and you can start controlling them again.

                                      1 Reply Last reply Reply Quote 0
                                      • DonahueD
                                        Donahue
                                        last edited by

                                        thanks for the info guys, I will take a look. I like the idea of using a VM.

                                        1 Reply Last reply Reply Quote 1
                                        • Emad RE
                                          Emad R @Donahue
                                          last edited by

                                          @Donahue said in Where do I start with replacing the whole MS AD stack:

                                          sing reservations.

                                          I think your knowledge of FG is not allowing you to do this, just create a new interface with the desired subnet and leave or tick DHCP option. And they you can do it what you want with it. Create an IPv4 policy to give access to internet to the new interface.

                                          1 Reply Last reply Reply Quote 0
                                          • 1
                                          • 2
                                          • 3
                                          • 4
                                          • 5
                                          • 6
                                          • 5 / 6
                                          • First post
                                            Last post