@DustinB3403 said in VyOS - Best practices and questions:

I think BGP has to do intricately with the OP, just because I wasn't aware of BGP as the technology used, doesn't mean it wasn't what I was trying to figure out.

It's literally the last question in the OP, what do you do if you lose the physical interface for fail over. Answer: Use BGP.

uh - no. That assumes the ISP is what failed, not the NIC that failed on the firewall. Those are two different things.

@JaredBusch said in Unifi - Migrate AP between controllers:

@DustinB3403 said in Unifi - Migrate AP between controllers:

@JaredBusch Yeah my question is odd, just was trying to determine what would be a reason for installing a new controller.

It is an odd line of thinking, I know.

I want to install a new controller, you just install the same version as existing, make a backup, restore backup, change DNS. done.

I have done it more than one time over the years.

This assumes you have a DNS server on your network that you control. If you have no local DNS server, this is a non issue, the AP will find the controller based on broadcast.

@Dashrender said in Shadow Protect SPX vs Veeam:

@BRRABill said in Shadow Protect SPX vs Veeam:

@JaredBusch said in Shadow Protect SPX vs Veeam:

I cannot believe I just read the last few posts.

You should start a thread on SW called "I Can't Even" and post it there.

You are just not helpful. 😞

Come on now, it's Monday.

Laugh a little.

I'm just popping in here. Looks ultra simple and just about all figured out. Glad I could help. 😛

@DustinB3403 said in Wireless Projectors -WPA/WPA2 and Radius Enabled:

@Dashrender said in Wireless Projectors -WPA/WPA2 and Radius Enabled:

If it's PC based, OK I see what you mean, but if it's user based, I would think (but more than willing to be wrong) that you just enter your domain creds and you're good. no?

This is correct, for non-domain joined laptops I can still connect to the corporate network by providing a username and password, and then I'd be on the corporate WLAN. Which is what I was hoping I could do with a projector (if one had such capability).

Why wouldn't it? I suppose it's possible - Look for WPA/WPA2 Enterprise support. The Enterprise piece means RADIUS.

@DustinB3403 said in Thinstation by Donald A Cupp Jr:

Exactly, thin client you'd pxeboot into your environment and go from there. You don't even need a hard drive.

That's diskless booting. A different topic. A pxebooted machine is very often still a fat client.

@Dashrender said in Wireless Card Spottiness - Lenovo T440:

@scottalanmiller said in Wireless Card Spottiness - Lenovo T440:

Dominica's Lenovo crashed hard tonight. That thing with Win 10 crashed like once a month. Asus with Ubuntu, never.

Where you still using the WiFi card that came with it? It was totally worth the $65 investment in a third party card for my Yoga. After that - all problems just gone!

And I upgraded to AC, it came with N.

Yes, still using the Lenovo hardware.

Hopefully, ultimately it won't matter and you'll simply be able to reinstall XS on a new USB stick and find your SR and recreate your VMs.

@DustinB3403 Personally I prefer robocopy. Hell of a lot faster, and you can make sure it will copy exactly how you want....

Robocopy <Source> <Destination> /copyall /xo /w:0 /r:0 /log:Logfile.txt

Tail the log file (Wintail is handy for this) as having it log to the console slows down copy's.

@Dashrender said in Ubiquiti Security Gateway - Is there a software version:

@stacksofplates said in Ubiquiti Security Gateway - Is there a software version:

@Dashrender said in Ubiquiti Security Gateway - Is there a software version:

@stacksofplates said in Ubiquiti Security Gateway - Is there a software version:

@Dashrender said in Ubiquiti Security Gateway - Is there a software version:

@stacksofplates said in Ubiquiti Security Gateway - Is there a software version:

@JaredBusch Right. That's why I always assumed the USG was really limited. That is all I could find for network settings.

@Dashrender Ah ok. That makes sense

it was limited only via the GUI. If you created a JSON file on the controller in the correct location, you could do darn near anything a EdgeRouter can.

The GUI is finally catching up with the features.

Ah ok. Ya that's mostly how I use mine anyway. Like I said, I've never used one so I'm running on assumptions.

I'm pretty sure you can actually fully control the APs through the CLI and JSON files. I think you can use the CLI to tell it where to get the JSON file (a none Unifi controller), but damn. .talk about pain.

I didn't realize you could use the config files for the APs. I've only used the busybox shell for joining the controller. Makes sense that it would use them though.

I think that's how most if not all of it works. using the GUI, you update the JSON files, they are then downloaded to the devices, tada.

That is also my understanding but not something I've ever checked or tested

Well I found something else which might work too...

http://www.hellermanntyton.us/ProductDetail.aspx?p=156-00306

Which while not preventing theft, could be used...

@Dashrender said in Sparc - Pizza Box:

yeah... that whole thing from this morning should be in this thread.

That is why I told them a long time ago that they have to lock a damned thread prior to forking. that way no new posts can go in it until they are done.

Unfortunately I have to get the offsite completed (and at 4.5TB) and about half way through I still have a ways to go....

I might have to make separate backup jobs to run against these VM's while the initial upload is going.

Kind of sucks.... but it has to happen....

Allright I got the machine live! 
So what I did was really plain and simple...

Create a backup and recovery media with Veeam endpoint backup.
Restore the backup onto my xen server (with driver injection). 
Boot the machine in safe mode.
Disable hyper-v services (even though they are disabled in hyper-v...)
Reboot
Done

I still can't believe it took me so long to figure this one out. I was deleting/editing registry entries related to drivers that I didn't need etc...

@DustinB3403 said in Port - Dealing with the Not My Job attitudes in the workplace:

@Dashrender said in Port - Dealing with the Not My Job attitudes in the workplace:

That's a major problem, if you are not the one managing the contract, the limitations put on the M

Or the MSP may actually be worthless and not want to take on the responsibility. Egg on the face.

Regardless of my issues at current, the scenario is fictitious. Would you expect that the MSP work to fix the issue with any vendors involved, or that they say "not us". Even if the client is billed in the end, the communication chain should then clarify who is taking what onto their plate.

We don't have the scope, so we can't have expectation.

OK, finally got that solved using this, and guess what the results are....

Failed the test.

Yay..... now lets see what Microsoft has to say about the results...

Is this purely a failed certificate issue? I mean that would make sense, but I've not done a lot with Exchange (and O365) besides dick-around with the settings as this organization has some major config issues.

@DustinB3403 said in Remote office - Basic Wireless Needs:

@JaredBusch said in Remote office - Basic Wireless Needs:

@DustinB3403 said in Remote office - Basic Wireless Needs:

@JaredBusch any serious reason why when the remote site is connected by a point to point vpn?

Same LAN, just different segment.

Run it on your XS then. I read that the first time that you had no virtualization in order to spin up a controller on an Ubuntu instance.

Ah, sorry, just wanted to make sure I wasn't missing something. Yeah I can run it locally.

Yes, you can run it locally. I do. I manage my two sites over the VPN. I could just as easily pay $5/month to vultr and setup a VPS for it and have it on the internet.

Once you get it running, you'll need/want to setup a DNS record for unifi pointing to that controller. This will allow Unifi devices to find your controller at layer 3.

@JaredBusch said in Ripping the bandaid off of the Sunk Cost Fallacy Issue:

@Dashrender I have been using this lately for small office main copier and / or workgroup copier in larger offices.

HP Laserjet Pro M477fdn All-in-One Color Printer, (CF378A)

$380 on Amazon.

Those look nice. I've had decent luck with HP OfficeJet Pro 8600 series, and now the Epson EcoTanks. The EcoTank refills are just amazingly inexpensive compared to anything else around except the other printer models you have to mod to add the tanks to.

@scottalanmiller said in Fedora Block Device Full How - Extend Partition:

@travisdh1 said in Fedora Block Device Full How - Extend Partition:

@scottalanmiller said in Fedora Block Device Full How - Extend Partition:

I'm late to the party. But the root is HUGE for Linux. We normally use 12GB. 20GB is the largest I would use. Why are you extending that? What's the goal in having the root be so large?

Whoever first set it up (it wasn't @DustinB3403), just dropped everything onto the root partition. Against every best practice ever written/known for Unix/Linux.

Still, that doesn't create a need for expanding the root in most cases.

If I would have known this before helping to fix a broken system... hindsight sadly.