Posts made by krisleslie

@dashrender i will brother. I can say the performance i pray will get better after all the changes.

@dashrender last night i dropped all leases lol.

@dashrender not on here. But in the non profit world we get a yearly allotment especially for Azure. I have used Azure only to spin up a vm or two but mainly just to test how feasible it was.

At one point I wanted site 4 to be a point to back up to, but I keep seeing how people strongly suggest azure for that.

I guess to stay focused, once I can clear the office, Ill start making the changes to the scope.

Site 2 is roughly a 45 min drive. Site 4 is almost 4 hours. So im strongly considering never to put equipment there. In fact I want to take their systems and swap them for Chromebooks. The staff there 80% of their work is done online.

Site 1 which is the headquarters is where I am at. Our site is huge for us but tiny when I compare it to my enterprise offices Ive worked at. We have two virtual hosts on XenServer at this site with about 20 guest vms. We have 6 switches all ubiquiti except 3. We have a security system with ubiquiti with roughly 25 or 30 cameras. 5 uniquiti WAPs. We have voip, hosted with NTG, last i checked about 30 phones. About 50 staff not including contractors and other partners. Then we have students anywhere from 10-75 at a time.

The explosion of ip devices came when people started brining byod devices, so im seeing tablets, phones watches and God knows what else.

Then we have Site 2 is a ROBO. Literally same equipment except only one ubiquiti switch, no nvr or cameras. 2 WAPs. Slower internet but its only 10 staff or less and up to 15 students.

Site 3 is done by another company so no involvement for me

Site 4 is also being managed by another company. 5 staff. No students or up to 5. Tiny office little work being done.

Site 3 will never vpn into us ever.

Site 4 in theory will.

@dashrender at one point they were connected and had to be disconnected. The assistant never gave a reason to why. In hindsight prolly due to improper setup.

Problem I have is he took it upon himself to make a lot of the decisions vs consulting me. I had bigger fish to fry but its all coming back to haunt me. Very suck at this point.

Now that I see how this was improperly done I will more than likely have to go to our second site and do the same thing there as well

I disabled the guest wifi to reduce the suck until the issue is resolved. I’ll reenable it soon and put it on its on network.

The biggest issue i have is i normally have a well defined sheet that i structure for the entire network. Its not as good as ive seen some folks on here or spiceworks but it was easy enough to read and have a sense of knowing everything had a place.

The way my associate setup this network, hell i cant even make heads or tails of it. Truth be told he cant either its just wrote down in a notepad in scribble last time we discussed this.

Ok so this makes a lot more sense. Heads up guys im not the network specialist so its really outside of my thought processes. Thats a weak point of mine and I am studying to get the network +.

With that said, so I can make sure I understand is first the router was incorrectly setup on that one interface. To fix that, I will need to remove the other gateways and ultimately have just 10.10.0.1/21 instead of 10.10.2.1/22. If i were to remove it during business hours, some wireless devices eventually didnt have a gateway and thus no connection to the internet. But removing them will cleanse that problem after clean up the Windows Server DHCP service.

So to fix the DHCP server, we need to remove each scope and super-scope and recreate only one scope as 10.10.0.0/21 which negates whatever way this was setup originally. The static ips we had assigned should still work and I just need to make sure we are excluding them from the scope.

Lastly reboot and pray and possibly with adult bevarages.

Ok guys I'm utterly confused. So when I go back to the Edge Router, add the 10.10.3.1 and 10.10.4.1 to the interface for my lan, now the clients that were not able to get online are online again, no biggie. I'm still trying to wrap my head around how this is supposed to be properly set up.

I am under the impression, all subnets should only be set up on the windows server directly, not on the router.

@dbeato I agree, but I'd like to cut down on the "why is my wifi not working" so I can redo it properly

@JaredBusch so when I look at this config, basically the wireless was going to require the USG for a dhcp server, but since we don't have one, and even though it has 192.168.1.1/24 for the network, I'm on my phone and I'm getting a 10.x.x.x ip so I think that should be fine. Wierd but fine. I'm disabling the DHCP server on the WLAN side for the Controller. Doesn't make sense to have it!

@JaredBusch & @dbeato I think a trip to the local brewery will be in order soon. The Office WLAN should use the dhcp server of the Windows box. At this point I don't see the point of the Guest LAN since apparently, people are logging into the main one ;( now that I can see the logs!

Gonna nuke the guest and re-do this one later.

@scottalanmiller said in UBNT EdgeRouter LAN Config Issue:

It's easier to type on this! In SW I had to kinda go back/forth.

What is your network scope in reality because this just hurts.

I think you main netwokr is 10.10.0.0/22 (I think that was his intention, but during the revamp, I think he intended one of our remote sites to be the .0 and .1 and to vpn link them together, of course, that only worked wonkily and it was scrapped).

And your wireless seems to be 10.10.4.0/24 (doesn't appear to be correct looks like we have to WLANs, the main lan should be using our 10.x.x.x and the guest lan not sure yet, investigating)

Is this right? (all this what I'm seeing is up for debate )

What LAN IP should all of your systems have for their gateway? 10.10.2.1 is the router, 10.10.2.251 is the ad/dns/dhcp

Scott I like this community forum app better than spiceworks in some ways it's faster and easier especially with the photos!

Ok Jared just popped into the Ubiquiti Controller so here is what we have.

@jaredbusch this is just one of those times in life I wish I never let someone fiddle with the networking. All I can say is im thankful it “worked” somewhat but I do see that my concerns weren’t fake, they were real.

Now I’ve found after reviewing the port forwarding that RDP was open guys im not a network guru, but i know RDP shouldnt be open on the internet. Now I have more fires to put out.

@scottalanmiller is it too late for a flamming dr pepper?