Posts made by Markferron

I have a fresh installation of Ubuntu 16.04 and I'm having issues setting up multiple static IPs. The first interface 'ens3' I was able to setup without any issues. On the rest of the interfaces, ens4-ens9, I keep getting an error message when trying to restart the networking service after setting the interface to static.

itdept@IT-DHCP:~$ sudo /etc/init.d/networking restart
[sudo] password for itdept:
[....] Restarting networking (via systemctl): networking.serviceJob for networking.service failed because the control process exited with error code. See "systemctl status networking.service" and "journalctl -xe" for details.
 failed!

Here's what my /etc/network/interfaces file looks like...

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
# DMZ
auto ens3
iface ens3 inet static
        address 10.0.0.36
        netmask 255.255.224.0
        gateway 10.0.1.1
        dns-nameserver 10.0.0.21 10.0.0.22
# ADMIN_LAN
auto ens4
iface ens4 inet static
        address 10.0.33.110
        netmask 255.255.224.0
        gateway 10.0.32.2
        dns-nameserers 10.0.0.21 10.0.0.22

I have ens5-ens9 still set to dhcp till I figure out what's going on.

The interesting thing is that the static IP will work just fine after I reboot. I can ping 10.0.33.110 from my laptop just fine, but restarting the service will always fail. I feel like this is going to be an issue later on and would like to fix it, even if it's technically working.

@kelly I'll have to keep that in mind if they can't figure it out quickly, thanks.

@jaredbusch Haha. That's nothing. We're working with an accreditation organization that named themselves Southern Association of Colleges and Schools Commission on Colleges, or in other words SACSCOC. You know someone was trying for that.

@travisdh1 I know right?

I'm trying to troubleshoot connectivity issues with a few .gov websites that we can't access on campus for some reason. I've working with the support staff of those sites but they keep saying that it's something on my end. At this point, a week in, I'm sure it's not anything on my end or anything that I can do, so I'm trying to funnel them with as much information as possible. Also to cover myself... Here's the list of sites that we currently cannot connect to:
https://fsadownload.ed.gov
https://faaaccess.ed.gov
https://fsawebenroll.ed.gov
https://ifap.ed.gov
Initially I thought it was something on our firewall but after some troubleshooting (whitelisting URLs, whitelisting LAN devices), and even taking the whole network down to plug my laptop into the ISPs uplink, I discovered it's not. I did find out that if I changed my static IP from what we have the firewall set to another reserved IP we own the sites work just fine. Shouldn't this indicate there is some sort of firewall or blacklist that our static IP is on? I have run several tracert commands to the websites from multiple devices on our network here's an example of one:

I'm out of ideas of what to pass on to these guys. Any suggestions?
BTW @dafyre was a great help already.

@dafyre said in Suggestions for Unifi bridge:

@markferron said in Suggestions for Unifi bridge:

@dafyre I think this might do.

I was just wondering if the unit itself was made to handle being outdoors.

Ohhhhh gotcha.

@dafyre I think this might do.

@jaredbusch I know right? Crazy cheap. Almost seems too good to be true.

@jaredbusch Sounds like a plan!

I'm looking to replace three old wireless bridges we have on campus and also installing a new one. Site A is a distance of around 200ft and will only have around 8-10 students using the network.. Site B is a distance of 150ft and will have around 15 students on the network. However, this site will need to beam to another site (Site C). Site C will add around 10 students. Site D is 520ft away and has staff members so they will need a solid connection for the VOIP phones installed already.

I'm thinking of going with UniFi as I'm trying to push for UniFi access points around campus already.

Site A and B- NBE-5AC-Gen2
Cheap at only around $100 a piece and at 450+Mbps will be overkill, but I'm okay with that.

Site C- NS-5ACL
Cheap and the signal only needs to go across a small street.

Site D- airFiber5X+AF-5G23-S45
According to Ubiquiti this combination is ideal for 500Mbps connections, and is big step up from the HP MSM466 we have installed.

Let me know if you need any information from me. I've never installed bridges before so I'm just going off of what Ubiquiti is suggesting. Also, I'm not 100% set on UniFi equipment so if there's a better option feel free to suggest something completely different.

Just a random note if you're picking out cameras, don't forget about the lens. I was going to go with UniFi cameras for one job, but I noticed at the time the lenses wouldn't fit the need. I'm not sure if they've added variety to their lineup.

Just watched a squirrel get murked by a hawk outside my window...

You looked at running PA in a VM? It's a lot cheaper.

No I haven't! But I will now. Thanks.

In SUNY schools in NY they legally weren't (may still be in effect) allowed to limit what the students use the internet for. Being paid for by tax dollars and all. . .

Tiny, private school

Meraki isn't business grade, it's a joke. But the cost is nearly that of real security gear, like the Palo Alto. If Meraki is "good enough", you don't need Meraki at all.

You know, after thinking about this, I'm starting to think that Palo Alto might even be overkill for what we need. Our network isn't complicated. We use client VPN and will need the ability to have a site-to-site VPN, content filtering, and maybe layer 7 filtering. Although you could easily make the argument that someone could just buy a VPN for less then a Netflix subscription so it almost makes filtering pointless.

@black3dynamite said in UniFi Home Lab vs Campus:

There are several case studies on UBNT websites their hardware being used.
https://www.ubnt.com/casestudies/

Thanks for that. Completely forgot to include case studies. Probably one of the most important things to include.

If you are making a proposal you never talk about sunk cost, that's not part of your decision process in any way.

If you are doing a post mortem to show how bad a decision was in the past so that you can learn from the mistakes, then yes sunk cost is the primary concern.

Okay, thanks. I'll keep that in mind.

@scottalanmiller said in UniFi Home Lab vs Campus:

@markferron said in UniFi Home Lab vs Campus:

@scottalanmiller I just had a conversation with a vendor this morning ...

Why would you ever have that conversation with a vendor? They are the enemy that you should be watching out for.

Of course they are going to give you bad advice, their JOB is to screw you!

Yeah I got the vibe they're a Cisco Gold Partner.

@scottalanmiller I just had a conversation with a vendor this morning that basically scoffed at my decision to look at UniFi and told me that Ubiquity was not enterprise grade hardware. He said it was "big box store" level of equipment. This was also after a 30 second pause where I'm pretty sure he was googling UniFi. Felt pretty insulting.
I wish I could of gone back 3 years ago and helped make the decision. The problem is now that it's around $10,200 for 3 more years on the Meraki and about $21,100 for the Palo Alto and that initial number LOOKS really high.
Random question, and sorry to get off topic, since you deal a lot with the financial side of IT do you think I should include the costs we've already paid (sunk costs?) of the MX in my proposal?

@dustinb3403 Awesome, thank you very much. Our current security gateway, Meraki MX400, was going to be changed out but the costs of license renewal is far cheaper than purchasing the Palo Alto I was looking at , bummer.