Hey guys!
They recently finished a building on campus which has single mode fiber running to it. This will be the first building to have single mode running to it, as all the buildings on campus have multimode fiber. That being said, I've never even dealt fiber at all before so, for the past few days I've been reading up on everything I could get my hands on. I think I have a general idea of the equipment I need to finish this project, but if you guys wouldn't mind looking over this I would appreciate this!

Single mode fiber is running from building A to building B (newly constructed). In building A we have an HP J8706A 24p SFP zl Module in a 5412zl chassis. In building B they are purchasing a Meraki MS250-48 (Meraki link). I was going to see if we could get 10G uplink between the buildings but it looks like the HP module only supports up to 1Gb :(. So instead I was going to order some 1GbE SFP LX Fiber Transceivers (ebay link). Which actually brings up a question, do you have to have specific brand transceivers for specific switches? I can just use these HP transcievers on the Meraki, right?
Also, the company who ran the fiber also went ahead and installed the fiber on the patch panel (I want to say they ran 3 pairs) what kind of cable do I need to connect the patch to the transceiver? Some sort of 1m singlemode fiber :/?

Apologies on the long post. Just want to make sure people aren't waiting on me to get everything finished.

Thanks!
M

@jaredbusch Haha. That's nothing. We're working with an accreditation organization that named themselves Southern Association of Colleges and Schools Commission on Colleges, or in other words SACSCOC. You know someone was trying for that.

@Mike-Davis Thanks Mike! I talked to Meraki support yesterday and that's exactly what the tech told me. I was just surprised that it was the basically the only solution.

Just talked to HPE support, unfortunately we don't have a module that supports 10Gb. If only we had 1600 lying around :(.
But at least our chassis supports it!

I'm looking to install around 140 total UniFi APs around our campus (or rather, make the argument for them). Probably around 45 SHDs, and the rest of them would be AC PROs, and a few AC LITEs. I still have around 8 months before the decision is made, and I want to make sure that I know how to administrate/manage them. I was thinking about just ordering myself one AC LITE for my home and installing a self hosted UniFi controller. Other than scale, would this be a comparable setup? I'm worried that the AC LITE and other APs would be somehow managed differently.

We're getting rid of our Meraki MX400 considering the cost is around $9920 for one year of Advanced Security. I'm going towards a UniFi gateway, but I need something that will do content filtering. I've read a few threads in ML and, in general, people in general don't like combining firewalls and UTM devices/applications. Why is that? Also, what would you recommend that I use for content filtering?

I read a few posts comparing Crashplan to Backblaze dated back in 2016 and it seemed that most people were leaning towards Crashplan due to its reliability. Has that opinion changed at all two years later? We currently have a very old installation of Crashplan on campus and I am looking towards upgrading. Personally I'm leaning towards Backblaze for our of our laptops that go off campus, but keeping Crashplan (the most updated version) on our file servers. The main reason is that our bandwidth is not that great and keeping a local backup would be much faster if we needed it. I don't know if this is a waste of money and time with me splitting up different backup services. What do you guys think?

@dafyre Yup you're right, we do have a few open modules with nothing in them. Yeah $1600 for something like this amazon.
You think if I donate something like that to the college I can get it engraved? "Graciously donated by Mark Ferron" -You're welcome.

@xByteSean How would you like for me to be eternally grateful?

@dafyre said in Suggestions for new APs and Firewall:

This is for a school, not an SMB. With out some form of traffic shaping somewhere, their bandwidth would be overrun with torrents.

@Markferron can correct me if I'm wrong, but right now, I think the Meraki APs are where the bandwidth shaping is being done now.

Yup I have rules on the APs and the MX400. They should all be the same as far as bandwidth limits, just in case.

One more question. I'm going to add multi-threading to make it run fast (/MT) and the machine I'm running this command on (which is the destination machine) is a virtual machine. Is there a correlation with number of threads to CPU core count or RAM?

Our domain users are currently synced over to Azure using the Azure AD Connect tool. Our workstations are not synced over to Azure but we were thinking about finally rolling over to Hybrid Azure so that we could have MFA setup as a log in option for specific machines. If we make the switch over to hybrid and start syncing workstations over will that change the way all users log in? The reason I ask is that we have two domains on our O365, let's call them 1.com and 2.com, but only one domain on our local AD server (1.com). When I sync the workstations over I am worried that 2.com will somehow replace 1.com as the log in option for the machines that are on the domain on campus. Is there a way to scale the sync down to a few select users and machines to test?
For any clarification, I've screenshot our current AD Sync settings https://postimg.cc/YjqFP2QY

Appreciate any help and insight!

With the recent hurricane that came through we've been talking about purchasing and installing a 4G LTE adapter for our firewall. We host a few sites on campus for our school that are dependent on a few static IPs we have from our current ISP.

1. Would we have to purchase a block of static IPs from whatever carrier we use?
2. If 1 is a yes all we would have to do is point that new additional IP address to our managed DNS?

Thanks ahead.

@Dashrender said in Printer and UniFi AP:

Does that printer have a bunch of unneeded protocols running on it?

Might. I'll take a look at it again and maybe to a packet capture.

I think I finally figured it out! I made a test SSID and turned off "Multicast and Broadcast Filtering" and all of a sudden I am able to ping it. I'm not sure why this would make such a difference.

@Dashrender said in Printer and UniFi AP:

@Markferron said in Printer and UniFi AP:

Can't believe I forgot this piece of info.
If I ping the printer from my laptop for an extended period of itme it's almost always ends up being a 50% packet loss. So I can access it on WiFi, but for maybe only 15 seconds at a time before it drops out again.

If you have two pings going - one to that printer, and a second to a printer you don't have issues with, do both pings stop replying, or only one?

Only the one to the problem printer stops.

Can't believe I forgot this piece of info.
If I ping the printer from my laptop for an extended period of itme it's almost always ends up being a 50% packet loss. So I can access it on WiFi, but for maybe only 15 seconds at a time before it drops out again.

@scottalanmiller said in Printer and UniFi AP:

You can ping everything else on the VLAN?

Yup. I have other printers and devices already on that network. Everything shows up just fine.

Oh and all of this testing I've been doing is on the same VLAN/subnet of the printer.

I have a Sharp MX-C301W printer connected thought Ethernet that I am having issues connecting to on my UniFi access points. All wired clients (including the UniFi APs) can consistently ping the printer or bring up the web interface without any issues. However, I had an old Meraki AP laying around and I was able to connect to the printer on a similar SSID.
I've checked the cable, no problems, changed to another network jack, no difference. I can connect a device to the jacks and they work flawlessly. So far, I haven't noticed any other issues accessing wired devices from my UniFi APs. My APs are on the latest firmware (UAP-AC-PRO 4.3.21.11325) and my controller is on 5.14.23.

Any suggestions on things to test?
Thanks ahead.

@scottalanmiller said in Blocking spoofed emails O365:

https://support.knowbe4.com/hc/en-us/articles/212679977-Domain-Spoof-Prevention-in-Exchange-2013-2016-Office-365

Actually that might work. If the sender is outside the organization and the sender address includes our domain, just put in junk. I'll test this out tonight and see if it works right. Thanks!