We have a serial terminal server for remote management of the quantar repeaters at Tampa on 44.98.249.3, but it had locked up apparently, as serial servers are bound to do. (does anyone make a serial server that doesn't suck?) I was going to reset it using the UPS SNMPWEBCARD on .2, but it's locked up on telnet and web as well. There is no way to reset it except to physically remove it and re-insert it in the slot. Apparently we're not the only ones having issues: https://community.spiceworks.com/topic/736104-these-tripplite-snmp-web-cards... So for now it's down, but it's a minor issue. I'd like to get the following setup: * Radius for login management to the NE's * Syslog from the NE's which support it * Some sort of reporting on the health of the wireless gear (cacti?) * Alerting if any thing goes off line * IPv6 DHCP with PD working * management of the client nodes in the proper Vlan (now they just grab another IP in the same subnet) * check everything and enable some ACL filtering on the switch. Right now it's pretty open to the world. * Various cleanup of configs If anyone has input I'd love to hear it (or better yet wants to do it!) 73's -- Bryan Fields, W9CR Florida Simulcast Group, Inc.
I have had pretty good luck with cyber power UPS and power distro products. I've never had one of the web cards locked up on me. Physically removing and reinserting defeats the whole entire purpose of the product lol. As for health and network monitoring solution "The Dude" works nice it's a client server application from Mikrotik. It will be really good on the wireless side and notifications. Also not bad as the low price of free. http://www.mikrotik.com/thedude I'd be willing to take on the installation of this system. Would be the best if we could place it on the 44net space. Ryan, KJ4SHL Sent from my iPad
On Aug 7, 2016, at 5:58 AM, Bryan Fields <bryan@flscg.org> wrote:
We have a serial terminal server for remote management of the quantar repeaters at Tampa on 44.98.249.3, but it had locked up apparently, as serial servers are bound to do. (does anyone make a serial server that doesn't suck?)
I was going to reset it using the UPS SNMPWEBCARD on .2, but it's locked up on telnet and web as well. There is no way to reset it except to physically remove it and re-insert it in the slot.
Apparently we're not the only ones having issues: https://community.spiceworks.com/topic/736104-these-tripplite-snmp-web-cards...
So for now it's down, but it's a minor issue.
I'd like to get the following setup:
* Radius for login management to the NE's * Syslog from the NE's which support it * Some sort of reporting on the health of the wireless gear (cacti?) * Alerting if any thing goes off line * IPv6 DHCP with PD working * management of the client nodes in the proper Vlan (now they just grab another IP in the same subnet) * check everything and enable some ACL filtering on the switch. Right now it's pretty open to the world. * Various cleanup of configs
If anyone has input I'd love to hear it (or better yet wants to do it!)
73's -- Bryan Fields, W9CR Florida Simulcast Group, Inc. _______________________________________________ FSG-public mailing list FSG-public@lists.keekles.org http://lists.keekles.org/cgi-bin/mailman/listinfo/fsg-public
On 8/11/16 9:25 AM, Ryan Owens wrote:
I have had pretty good luck with cyber power UPS and power distro products. I've never had one of the web cards locked up on me. Physically removing and reinserting defeats the whole entire purpose of the product lol.
It's apparently a known problem with both APC and Tripplite management cards.
As for health and network monitoring solution "The Dude" works nice it's a client server application from Mikrotik. It will be really good on the wireless side and notifications. Also not bad as the low price of free.
I've heard he abides and prefers CCR over the Eagles. It needs a windows term server to work, that's going to cost us $$. I was thinking zenoss for alerting and cacti for logging radio level/temp/snmp data. It's easy to install in a docker container as well. I have Rancid setup now and polling the ex4200. I have freeradius running for auth on the Juniper and Mikrotik AP's now. Syslog is going for all the gear too. If people want to unicast me a password of their choosing I'll add it to the freeradius users table. Please keep it unique to HamWAN as it's stored in plain text on the freeradius server. Probably need to setup an NTP server too. I'm just using the pool.ntp.org servers for now. Eventually a DHCP server would be a good idea too. Shit, we're running a service provider here, lol.
I'd be willing to take on the installation of this system. Would be the best if we could place it on the 44net space.
Sure. I'm using 44.98.254.1 for stuff now. I have a spare server I can put in that space if need be. Example config for radius and syslog on a mikrotik device: /system logging action set 3 bsd-syslog=yes name=remote remote=44.98.254.1 remote-port=514 src-address=0.0.0.0 syslog-facility=\ daemon syslog-severity=auto syslog-time-format=bsd-syslog target=remote /system logging add action=remote disabled=no topics=info,warning,critical,firewall,error /radius add accounting-backup=no accounting-port=1813 address=44.98.254.1 authentication-port=1812 called-id="" \ disabled=no domain="" realm="" secret=RADIUS-PW-56 service=login timeout=300ms /user aaa set accounting=yes default-group=read exclude-groups="" interim-update=0s use-radius=yes /system ntp client set enabled=yes primary-ntp=104.232.3.3 secondary-ntp=45.127.113.2 If you're running a client node now, add the above to it and it will start logging and enable remote access to it. -- Bryan Fields, W9CR Florida Simulcast Group, Inc.
participants (2)
-
Bryan Fields -
Ryan Owens