Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Wibla
Feb 16, 2011

Jeoh posted:

the poo poo that pisses me off is coming from inside the thread

:emptyquote:

Adbot
ADBOT LOVES YOU

Internet Explorer
Jun 1, 2005





it hits extra special when you've got a blue star

Wibla
Feb 16, 2011

Internet Explorer posted:

it hits extra special when you've got a blue star

I've been wondering why you have a blue star instead of an IE icon :sun:

The Iron Rose
May 12, 2012

:minnie: Cat Army :minnie:
I’m going to side with the accountant here and say that it’s really not your job to worry about spanning tree or portfast. Honestly unless you’re seriously committed to the mission, throw your hands up and make them call in a professional for this and in the future.


It’s an objectively terrible technical decision, and that’s OK because the organization is getting what it is paying for. Let the free market of bad ideas do its work.

Bargearse
Nov 27, 2006

🛑 Don't get your pen🖊️, son, you won't be 👌 needing that 😌. My 🥡 order's 💁 simple😉, a shitload 💩 of dim sims 🌯🀄. And I want a bucket 🪣 of soya sauce☕😋.
If you’re having trouble with IT at a non-profit, that’s what MSPs are for, and there are MSPs out there that specialise in non-profits and community organisations. I work for one.

dragonshardz
May 2, 2017


PremiumSupport posted:

Consider it, because we do.

The only managed switches we have are the two I disabled STP on. The rest are unmanaged. The only reason they're managed is because the unmanaged ones were out of stock and I needed replacements ASAP.

I am an Accountant, I'm only a computer toucher for my org because I made the mistake of letting it be known that I am good with computers. I have no formal training, and I'm not looking to make a career out of it.

How do you think I've gotten as far as I have?

this just gets more and more horrifying as you answer questions

The Iron Rose posted:

I’m going to side with the accountant here and say that it’s really not your job to worry about spanning tree or portfast. Honestly unless you’re seriously committed to the mission, throw your hands up and make them call in a professional for this and in the future.


It’s an objectively terrible technical decision, and that’s OK because the organization is getting what it is paying for. Let the free market of bad ideas do its work.

i'm on the side of being horrified at the rickety-ratchet poo poo they're being coerced into maintaining.

i have a horrifying vision of the ISP modem running into two consumer-grade switches, one of which hosts the wLAN cables. the other daisychains into ever more unmanaged switches, save the two most recent additions.

like the thing i would do right off the bat is use the two managed switches for the central infrastructure - one living in the main building and the other in the satellite building. use a couple vLANs to separately connect the APs wired workstations.

PremiumSupport
Aug 17, 2015

dragonshardz posted:

this just gets more and more horrifying as you answer questions

i'm on the side of being horrified at the rickety-ratchet poo poo they're being coerced into maintaining.

i have a horrifying vision of the ISP modem running into two consumer-grade switches, one of which hosts the wLAN cables. the other daisychains into ever more unmanaged switches, save the two most recent additions.

like the thing i would do right off the bat is use the two managed switches for the central infrastructure - one living in the main building and the other in the satellite building. use a couple vLANs to separately connect the APs wired workstations.

We have the ISP modem connected to a low-end commercial grade router/firewall that allows for network segregation. From there it branches out into either 24-port (wifi side) or 48 port (main side) unmanaged switches which serve the main building and link to the new unnecessarily managed switches in the satellite building. When I started the wifi side was indeed all consumer grade switching gear and routers being used as access points. We now have real access points and commercial switches at least.

I am not by any means a networking expert and when I inherited this one it was all unmanaged switches. I have to admit that I am curious as to what the business advantage of of tearing it all out and resetting it up with VLANs is, aside from being best practice. It seems like it's only making things more complicated than they are currently for no real gain.


Bargearse posted:

If you’re having trouble with IT at a non-profit, that’s what MSPs are for, and there are MSPs out there that specialise in non-profits and community organisations. I work for one.

We do have a MSP we can call, but everything is working at the moment and the bosses believe in "if it ain't broke, don't mess with it" as a general policy, even more so when it comes to spending money. Is it perfect and up to industry standards? Hell no. Does it work? Yes. I don't consider that to be an unreasonable state of being for the situation.

Methylethylaldehyde
Oct 23, 2004

BAKA BAKA

PremiumSupport posted:

We do have a MSP we can call, but everything is working at the moment and the bosses believe in "if it ain't broke, don't mess with it" as a general policy, even more so when it comes to spending money. Is it perfect and up to industry standards? Hell no. Does it work? Yes. I don't consider that to be an unreasonable state of being for the situation.

It rapidly turns from "if it ain't broke, don't mess with it" into "it was working fine until you touched it, and now it'll cost HOW MUCH to fix? No! Fix it with what you have! What do we even pay you for?" At which point in time, "well, it works and I'm not gonna gently caress with it until it doesn't" becomes a learned response to basically anything wrong.

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady

Methylethylaldehyde posted:

"What do we even pay you for?".
Being able to honestly reply with "accounting poo poo" is almost worth making things progressively worse until a disaster prompts this question TBH.

Bargearse
Nov 27, 2006

🛑 Don't get your pen🖊️, son, you won't be 👌 needing that 😌. My 🥡 order's 💁 simple😉, a shitload 💩 of dim sims 🌯🀄. And I want a bucket 🪣 of soya sauce☕😋.
That’s where they angrily point at “other duties as directed”.

Breetai
Nov 6, 2005

🥄Mah spoon is too big!🍌
Do I use STP? Yeah:

poo poo
That
Pisses network engineers off

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"
Ime that network can go down for days and the people working there are mostly going to be missing YouTubes. If a nonprofit does good work then great, I got a chance to meet severely underserved and disabled people in a way that changed my life while consulting for them. On the other hand if you haven’t told a nonprofit what they’re paying you to do is idiotic, then done it anyways to prove to them how stupid and irresponsible they are you haven’t lived.

The Fool
Oct 16, 2003


i am a moron posted:

. On the other hand if you haven’t told a nonprofit what they’re paying you to do is idiotic, then done it anyways to prove to them how stupid and irresponsible they are you haven’t lived.

It's especially fun when said non-profit has a bunch of grant money burning a hole in their pockets.

i am a moron
Nov 12, 2020

"I think if there’s one thing we can all agree on it’s that Penn State and Michigan both suck and are garbage and it’s hilarious Michigan fans are freaking out thinking this is their natty window when they can’t even beat a B12 team in the playoffs lmao"

The Fool posted:

It's especially fun when said non-profit has a bunch of grant money burning a hole in their pockets.

Linda in accounting used it to buy 500 iPads so we don’t have to buy laptops anymore yay!

The Fool
Oct 16, 2003


my personal experience was "this board member got us a grant and bought $30k worth of servers and networking gear, but we don't have any money to pay someone to build it"

Thanks Ants
May 21, 2004

#essereFerrari


Schools getting iPads by dividing the grant fund by the individual cost of each iPad and buying that quantity, leaving nothing for the Wi-Fi infrastructure or device management.

dragonshardz
May 2, 2017


PremiumSupport posted:

We have the ISP modem connected to a low-end commercial grade router/firewall that allows for network segregation. From there it branches out into either 24-port (wifi side) or 48 port (main side) unmanaged switches which serve the main building and link to the new unnecessarily managed switches in the satellite building. When I started the wifi side was indeed all consumer grade switching gear and routers being used as access points. We now have real access points and commercial switches at least.

I am not by any means a networking expert and when I inherited this one it was all unmanaged switches. I have to admit that I am curious as to what the business advantage of of tearing it all out and resetting it up with VLANs is, aside from being best practice. It seems like it's only making things more complicated than they are currently for no real gain.

We do have a MSP we can call, but everything is working at the moment and the bosses believe in "if it ain't broke, don't mess with it" as a general policy, even more so when it comes to spending money. Is it perfect and up to industry standards? Hell no. Does it work? Yes. I don't consider that to be an unreasonable state of being for the situation.

Christ on a bike.

The advantage of VLANs is access control and not having to have a redundant, independent network for one kind of device. It means you get to have software control over what ports connect to which resource instead of having to walk about and change cables.

E: Here's a "why is VLANs cool?" primer: https://www.thewindowsclub.com/what-is-vlan-why-do-we-use-vlans

wolrah
May 8, 2006
what?

PremiumSupport posted:

Consider it, because we do.

The only managed switches we have are the two I disabled STP on. The rest are unmanaged. The only reason they're managed is because the unmanaged ones were out of stock and I needed replacements ASAP.
I 100% guarantee that if you post the model of switches we'll find they do in fact support VLANs. VLANs are one of the main features people even want managed switches for in the first place.

The Iron Rose posted:

I’m going to side with the accountant here and say that it’s really not your job to worry about spanning tree or portfast. Honestly unless you’re seriously committed to the mission, throw your hands up and make them call in a professional for this and in the future.
It wasn't their job to start with, but at this point they've already taken on the problem and then spent more time defending maintaining their mistake than it would have taken to solve it the right way now they they know better.

There's a big gap between "I'm an accountant who knows a thing or two about computers and I did a thing that Google told me would solve my problem, it did, and I didn't know why it was bad until now" and "STP does not have a place in my organization". The latter position deservedly gets poo poo on because it's bad.

Potato Salad
Oct 23, 2014
Probation
Can't post for 7 hours!

PremiumSupport posted:

We have the ISP modem connected to a low-end commercial grade router/firewall that allows for network segregation. From there it branches out into either 24-port (wifi side) or 48 port (main side) unmanaged switches which serve the main building and link to the new unnecessarily managed switches in the satellite building. When I started the wifi side was indeed all consumer grade switching gear and routers being used as access points. We now have real access points and commercial switches at least.

I am not by any means a networking expert and when I inherited this one it was all unmanaged switches. I have to admit that I am curious as to what the business advantage of of tearing it all out and resetting it up with VLANs is, aside from being best practice. It seems like it's only making things more complicated than they are currently for no real gain.

We do have a MSP we can call, but everything is working at the moment and the bosses believe in "if it ain't broke, don't mess with it" as a general policy, even more so when it comes to spending money. Is it perfect and up to industry standards? Hell no. Does it work? Yes. I don't consider that to be an unreasonable state of being for the situation.

when I read stuff like this and see businesses that refuse to invest in even the most baseline levels of hygiene, I end up with an intrusive thought about finding and cryptolockering that company

Potato Salad
Oct 23, 2014
Probation
Can't post for 7 hours!
STP exists to prevent people from making simple mistakes that break everything. Period.

It is applicable at every level of IT operation, including most of the gear that hyperscalers operate. If you're getting paid less than $300,000 a year, you have no business turning it off.

Dandywalken
Feb 11, 2014

Breetai posted:

Do I use STP? Yeah:

poo poo
That
Pisses network engineers off

:eyepop:

Proteus Jones
Feb 28, 2013



Potato Salad posted:

If you're getting paid less than $300,000 a year, you have no business turning it off.

Even then you really have no business turning it off, but I'll at least acknowledge you *might* have a good reason and listen.

Hughmoris
Apr 21, 2007
Let's go to the abyss!

Potato Salad posted:

STP exists to prevent people from making simple mistakes that break everything. Period.

It is applicable at every level of IT operation, including most of the gear that hyperscalers operate. If you're getting paid less than $300,000 a year, you have no business turning it off.

Are there network nerds out there making $300k? I might have made a mistake going into data...

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady

Bargearse posted:

That’s where they angrily point at “other duties as directed”.
Contrary to popular (management) belief, that actually has legal limitations to it. Knowing just enough to explain how you can ruin everything by not knowing any more is a great way to remind people of those limitations. Bonus points if you can fit in the words "risk of death", but I don't think STP can do that unless it goes very wrong.

PremiumSupport
Aug 17, 2015
Just as a reminder to everyone, this is the post that started the conversation a few pages back:

Unexpected Raw Anime posted:

gently caress spanning tree and gently caress even harder everyone who turns it on without bothering to configure root bridge priorities


as an aside, you should never be using STP in an environment where you dont have intentional redundant paths. It causes more problems than it fixes.

Our network is simple, old fashioned, unmanaged, and I have again today been directed by my boss not to gently caress with it when I brought up the idea of investigating a transition to VLAN usage. :shrug:

Edit:

Potato Salad posted:

when I read stuff like this and see businesses that refuse to invest in even the most baseline levels of hygiene, I end up with an intrusive thought about finding and cryptolockering that company

We'd just restore from offline backup and get on with things. Not worth the effort.

Edit2:

i am a moron posted:

Ime that network can go down for days and the people working there are mostly going to be missing YouTubes.

Pretty much this.

PremiumSupport fucked around with this message at 20:24 on Nov 3, 2022

dragonshardz
May 2, 2017


tbh your username is misleading as gently caress

ain't poo poo about this support premium

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady

PremiumSupport posted:

We'd just restore from offline backup and get on with things. Not worth the effort.
Good cryptolockers wait a quarter or so before popping the ransom message. That way your offline backups are also hosed.

PremiumSupport
Aug 17, 2015

dragonshardz posted:

tbh your username is misleading as gently caress

ain't poo poo about this support premium

That's the joke.

It originated out of an instance of someone paying for premium support and getting a helpdesk peon reading from a script.

Methylethylaldehyde
Oct 23, 2004

BAKA BAKA

Thanks Ants posted:

Schools getting iPads by dividing the grant fund by the individual cost of each iPad and buying that quantity, leaving nothing for the Wi-Fi infrastructure or device management.

Half the time that level of stupid is driven directly by the Grant wording. If the grant specifically says it's to be used for the purchase of iPads, there isn't much wiggle room to be saying 'yes, but in order for those ipads to work, we need wifi and jamf or else all our staff will quit in protest'. The grant says 'for ipads' not 'for ipads, accessories, and related management and infrastructure updates needed to accommodate them'. Sometimes you can negotiate it with the grant provider, especially if it's a private grant or endowment, but oftentimes it's passthrough funding from the state or the feds, and nobody is ever going to tell you to do anything but what the actual grant says.

NOT doing specifically what the grant says you needed to do is a REALLY great way to end up getting no grants in the future, or needing like 500% more audit test work for the grants you do receive, because now they know they can't trust you to do what you were contractually obligated to do.


Arquinsiel posted:

Good cryptolockers wait a quarter or so before popping the ransom message. That way your offline backups are also hosed.

I gotta ask, how the hell does that work, if you're also in theory accessing those files during that quarter?

Che Delilas
Nov 23, 2009
FREE TIBET WEED

PremiumSupport posted:

That's the joke.

It originated out of an instance of someone paying for premium support and getting a helpdesk peon reading from a script.

"Premium" refers to the cost, not the quality.

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady

Methylethylaldehyde posted:

I gotta ask, how the hell does that work, if you're also in theory accessing those files during that quarter?
The ways I've been told about, since I've only seen one lovely Locky infection personally, are that they encrypt the backups as they're being written, they prioritise files that aren't used regularly first, or they keep the encryption key in memory prior to the ransom and just decrypt live on the assumption that helpdesks will ignore "my computer is slow" complaints from users.

ConfusedUs
Feb 24, 2004

Bees?
You want fucking bees?
Here you go!
ROLL INITIATIVE!!





My favorites are the ones that install/enable some kind of RDP and someone just logs in and deletes all the backups by hand.

Bargearse
Nov 27, 2006

🛑 Don't get your pen🖊️, son, you won't be 👌 needing that 😌. My 🥡 order's 💁 simple😉, a shitload 💩 of dim sims 🌯🀄. And I want a bucket 🪣 of soya sauce☕😋.

Thanks Ants posted:

Schools getting iPads by dividing the grant fund by the individual cost of each iPad and buying that quantity, leaving nothing for the Wi-Fi infrastructure or device management.

Of course, they do this without involving IT at all and just expect it to work. The best part of this is about a week after they arrive, teachers who rely on ancient classroom resources still built on Flash Player want you to install Flash on all the iPads.

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady

ConfusedUs posted:

My favorites are the ones that install/enable some kind of RDP and someone just logs in and deletes all the backups by hand.
Those only work with online backups. To deal with airgapped backups one way of doing it is the ones that embed themselves in firmware and after the OS is wiped they fire only when a backup solution is attached to a device. Hope you didn't attach your only copy!

codo27
Apr 21, 2008

*mentions project in passing just because I happen to swing by their office with no indication of time frame*

couple days pass

*panicked phone call* we need this done in two weeks! (this involves sourcing and procuring equipment for an unconventional, long range PtMP setup, and then implementing it)

:shepicide:

bull3964
Nov 18, 2000

DO YOU HEAR THAT? THAT'S THE SOUND OF ME PATTING MYSELF ON THE BACK.


Bargearse posted:

teachers who rely on ancient classroom resources still built on Flash Player want you to install Flash on all the iPads.

I mean, that's a larger problem than just iPads.

Wibla
Feb 16, 2011

codo27 posted:

*mentions project in passing just because I happen to swing by their office with no indication of time frame*

couple days pass

*panicked phone call* we need this done in two weeks! (this involves sourcing and procuring equipment for an unconventional, long range PtMP setup, and then implementing it)

:shepicide:

:laffo:

Tough poo poo.

Dick Trauma
Nov 30, 2007

God damn it, you've got to be kind.
Why does this rack only have mounting holes drilled through the front of the post?

Rick
Feb 23, 2004
When I was 17, my father was so stupid, I didn't want to be seen with him in public. When I was 24, I was amazed at how much the old man had learned in just 7 years.
It was a lot easier to put up with all the "I've been having this problem all week but now I submit it to you Friday afternoon" crowd when I wasn't doing anything all day during the week like my job usually entails. I've been busy every day, as if, I had a real job, for the last three weeks and now these people are making me mad.

Bargearse posted:

If you’re having trouble with IT at a non-profit, that’s what MSPs are for, and there are MSPs out there that specialise in non-profits and community organisations. I work for one.

I don't suppose you know of one in southern Arizona? I'm satisfied with the quality of work of the one we use but they're too busy and the wait time on everything has gotten very long.

Rick fucked around with this message at 22:38 on Nov 4, 2022

Adbot
ADBOT LOVES YOU

Rexxed
May 1, 2010

Dis is amazing!
I gotta try dis!

Dick Trauma posted:

Why does this rack only have mounting holes drilled through the front of the post?

Holes as a service.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply