Reputation
2,468
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
6 20
Impact
~133k people reached

Sep
9
comment Juniper with multiple DHCP pool connected to Cisco switch
@Mark, Were you able to get it going?
Sep
4
comment Juniper with multiple DHCP pool connected to Cisco switch
If you mean that the trunk between the switch and the SRX is passing vlan7, yes you need to add vlans 5 and 6 to the trunk on both sides.
Sep
4
comment Turn on file auditing on network share in server 2008 r2
You can avoid crawling through the records by creating an event-based task and launching a powershell script that looks for the specific case you're trying to identify. The script can fire off an email to alert you or perform some other function. Poor man's SIEM. Let me know if you would like an example script to read the security log.
Jan
2
comment Securing LAN by restricting New Users
mac address security is weak as users can unplug a desktop from a port, spoof its mac and connect to the network. It is also an administrative nightmare when machines get moved and replaced. NAC/ACS with certificate-based authentication is the way to go.
Dec
19
comment Several border firewalls in the same network
Why not just use a firewall cluster and BGP/routers to handle the dual Internet connections?
Dec
5
comment Windows Server 2008 R2 Software Deployment on Active Directory - Schema Issue
Did you run forestprep and domainprep before adding the 2008 R2 DC?
Dec
1
comment IIS 7: launch unique site instance per host name
It sounds like you're suggesting that IIS create a copy of an entire website in memory on the fly upon first access. Depending on the size of the site, this seems unreasonable at it could take several minutes to copy the data. Can you clarify?
Nov
28
comment DNS Issue - Windows 2003 environment
@Hanny if you are concerned about this happening in the future, you could look into using dot1x authentication on your access switches. This way, you could prevent a rogue AP or DSL router in this case from being active on the network if it is plugged into the wrong port.
Nov
26
comment DNS Issue - Windows 2003 environment
The rogue DHCP server is most likely a wireless router that someone has brought in and placed on your network...
Nov
16
comment Windows 7 : access denied to ONE server from ONE computer
Since you capitalized one, I'm assuming that this client is able to access other 2003 server shares without issue and also that other clients are able to access this share. Is that correct?
Nov
6
comment roaming profiles + directory backup for a backup solution
You could always just use a logoff script to copy up whatever other folders you need to the roaming profile location or other server location
Nov
6
comment roaming profiles + directory backup for a backup solution
oh so this is more for mobile users to be able to function away from the network while maintaining your ability to restore their profiles if needed?
Oct
3
comment Exchange 2003 and 2010 coexistence - when is there downtime?
Source server was about 4 years old - dual xeon dell box. 1Gb between them. I actually modified the config file at about the 15 hour mark and bumped it from 2 to 15 which seemed to help because it was only about a third of the way through when I made that change. To note, I was moving public folders at the same time.
Aug
16
comment Simple VLAN Trunking between 2 switches
It's gotta be something silly - this should work. On other cisco switches, you must create the vlan on each switch or use VTP. Have vlans 2, 3, 10 and 180 been created on both switches? I know they're being passed by the trunk ports but they need to exist on the switches themselves also.
Aug
16
comment Simple VLAN Trunking between 2 switches
In building 1, what are ports 2-5 on teh SG300 connected to physically? If you unplug the cable that's going into GE2 on the SG300 and plug it into your laptop, do you get an IP?
Aug
8
comment 1 Year DHCP Lease
@HopelessN00b I just don't see how it invites or encourages this behavior when you can do the same thing regardless of the lease time. Its like saying you left your door unlocked so I can TP your house. The attack has nothing to do with the problem. If he's trying to convince his boss why a 1 year lease is stupid, this is not a compelling argument.
Aug
7
comment 1 Year DHCP Lease
I really don't see how this deranged idea is relevant. Even if lease time was one week or even one day, the same student could easily consume all the IPs in the scope using such a method to create downtime. The resolution would be the same in both cases - blow away the bad leases. A longer lease time really has no bearing on this.
Aug
2
comment cisco 2504 wireless controller and android devices
How are you authenticating against radius? Are you using certificates?
Jul
30
comment How do I dynamically obtain IP addresses for VLAN interfaces?
Alternatively, you could simply use a helper address in the router to forward DHCP broadcasts to the server instead of actually placing it in each subnet.
Jul
28
comment ESXi server under DoS attack, can I use SSH to determine where from?
I don't know the specifics but the vm-support utility can diagnose various performance issues so it may provide insight into the network traffic.