sllvr

Hey all, Just started a new position focused around leveling-up an office with two floors. We have about 4-500 clients on a busy day.

Currently there's an EoL ZD1100 running the show and we're considering changing vendors; looking at FortiAPs as they'd integrate well with our on-prem firewall.

What's your experience with the FortiAP lineup? Would you recommend them over Ruckus or Ubnt?

I've used Meraki in the past but it's a little out of our budget at the moment, any recommendations are appreciated!

Thanks!

Between friends no subject is taboo. The fact that we can't have civil discussion with fellow Canadians demonstrates a serious issue related to the lack of openness and understanding traditional to our country.

Why can't we speak peacefully to each other? This isn't a problem in real life in my opinion, it seems more sensationalized on the internet than it really need to be.

I use it at work, I use it at home. Despite the glaring deficiencies it's one of the greatest opensource projects of our time.

Don't hate, appreciate.

Hi there, I'm looking for some advice pertaining to NAT rules for IPSec tunnels. The remote side shares a common local subnet (10.0.10.0/24) and suggested to use 10.200.100.10/29 for our local side as it's not used by them. I understand 1:1 is straightforward but this is what the client gave us.

According to my research this can be achieved using manual Outbound NAT rules, anyone with similar issues or configurations I would appreciate a peek at your rules.

So far i've created an Outbound NAT rule but can't seem to get the Phase 2 tunnels to come up. Do I need a VIP or extra Gateway?

Any input is appreciated.

Diagram:

Remote LAN       Remote WAN      Local WAN              IPSec NAT

I've been tasked with setting up a PXE bare metal, unattended installation system for Ubuntu and CentOS hosts.

I've played a bit with cobbler, where CentOS works great but Ubuntu is unable to find the preseed files.

What other tools are available for bare metal provisioning?