Reputation
1,613
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
7 14
Newest
 Yearling
Impact
~140k people reached

  • 0 posts edited
  • 0 helpful flags
  • 69 votes cast
Jul
27
comment Domain Based Port Forwarding with VLAN routing
@Cyppher - Yes, you'd have to have a rule to specify the traffic that should be directed back to the Juniper for that. The Juniper device will basically be routing all of this traffic to the reverse proxy, and the proxy will decide what traffic gets routed back to the Juniper directly.
Jul
23
comment SonicWall and Windows CA
@NathanC I know you mentioned you validated the CRL with certutil, but as an added check, can you copy the HTTP url listed and actually browse to it to make sure the .crl file gets downloaded? It might just be the log formatting, but it looks like the Sonicwall doesn't see an actual .crl file in the url.
Jul
22
comment Domain Based Port Forwarding with VLAN routing
@Cyppher - If you are unable to use any additional external IP addresses, and are unable to use different ports, then you are in the situation of needing a reverse proxy. Like TheCleaner says, either more external IPs or different ports would be simpler (can be done in the Juniper firewall), but you're right that a reverse proxy would be necessary if those options are not possible.
Jul
10
comment Linked Servers in SQL Server
What is the difference between running a query in a new editor window and running the T-SQL command? Isn't that the same thing, or do you mean management studio for the former, and some other client for the latter?
Jul
9
comment SonicWall and Windows CA
Are you using a root certificate or an intermediate to create the Sonicwall cert? If you're using an intermediate, can/did you try and import both the intermediate and the root cert to the Sonicwall?
Feb
22
comment HAProxy check port 443
I haven't been able to find it mentioned in the docs, but there were a few forum posts where the HAProxy creator mentioned it (for example, serverphorums.com/read.php?10,38918). There was a more recent one as well, but I can't find it again now. The port 80 check may work because it ignores the ssl-hello-chk, but I'm not sure. Does it pass the check if you remove one of the two options?
Jan
25
comment Site to site VPN between Cisco VPN Router and Sonicwall NAT issues
I believe your problem is because both sides are in the same 10.0.0.0/24 subnet. The devices wouldn't know to route to the other side. Is it possible to renumber the IPs on one side? If not, could you use multiple /30 IP subnets just for the devices as the local and remote subnets, and then have static routes to get to the other side via the /30s?
Jan
25
comment Haproxy SSL offloading
No problem, I'm glad it was an easy one. I added my comment as an answer if you want to mark it to close this out.
Jan
24
comment Haproxy SSL offloading
Is it possible these requests you see are just multiple HTTP requests to load the page? I believe the roundrobin balance will have each separate request go to a different backend server. If you wanted a user to only interact with a single backend server at a time, I think you'd need to look into persistence. As another possibility, could you be seeing the backend server checks in the logs?
Dec
9
comment Haproxy Server Statistics page reads server DOWN
You should post up your HAProxy config then. You probably just need to remove the server from the config.
Dec
5
comment Haproxy Server Statistics page reads server DOWN
Is this a server that is actually down, and you want to remove it from the HAProxy config file, or is this a server that is functioning correctly, but HAProxy believes is down?
Sep
24
comment Routing between subnets on different vlans connected by a router/firewall
What else do you have configured on the Vyatta so far? Also, can you post example net settings for a sample host on both sides (ip addr, netmask, gateway)?
Jun
29
comment How to interconnect 2 switches (Cisco/Dell) with trunks
@Disco - Yes, you can configure both of those links the same way, and then you'll get some redundancy, too. However, it's very important that spanning-tree (STP) be running on those switches (should be by default), otherwise you would create a loop. Some form of show spanning-tree on each switch will probably give you more details.
Jun
29
comment How to interconnect 2 switches (Cisco/Dell) with trunks
@Disco - You need switchport trunk native vlan 10 on the port. By default, the native VLAN is 1 on the Cisco switch. Otherwise, you would want to specify the native VLAN as 1 on the Dell as well for that to work as is (10 and 20 would then be allowed). The important piece of info to know is that when you set up a trunk link, it runs several VLANs over that same link between the switches.
Jun
27
comment Where do Outlook folders go when moved?
@balexandre - It's definitely in there somewhere, unless you deleted it from Deleted Items (in which case you'll definitely need to do a restore). If you're having trouble seeing it, you could try searching the entire mailbox for an e-mail you know should be in that folder to confirm that it's still there.
Jun
22
comment Maximizing TCP connections on HAProxy load balancer
Where are you getting a 64K limit from? Is that a limit for one of your app servers?
Jun
20
comment Etherchannel between Cisco 3750 and Dell 5424 and Dell 5324
I can't say anything about those particular pairings, but I have several lag connections between HP Procurve 3500's and Dell 5448/5548/3548 switches without any issues.
Jun
12
comment Layer 3 switch routing
@Yoshiwaan - Have you tried running a traceroute to be sure of where it drops off? I would do this from both a client, and from the PowerConnect using a source of VLAN 2 and/or 4.
Jun
5
comment SCCM cannot connect to SQL
Can you connect using the exact same SQL server settings in management studio? When you say your account is a sysadmin, you mean your SQL login on that server has the sysadmin SQL role, right?
May
26
comment Are there solutions that can combine gigabit ethernet, 10gig ethernet, and fiber channel in a single device?
I picked this answer mainly because it was the right idea and came in first. Chopper3 and Shane Madden definitely had the right answers, too. I wanted to wait a while to be sure we were done, and of course management ended up going with just iSCSI after seeing the prices and complications.