Home / user-212789

user3297416's questions

Martin Hope
user3297416
Asked: 2017-10-20 04:00:11 +0800 CST
  • 0

Given is the following network setup:

┌192.168.1.10    Windows Server (WAN)
│
└192.168.1.100   Router         (WAN)
  192.168.0.1    Router         (LAN)
  │
  └192.168.0.x   Windows Client (LAN)

WAN area: 192.168.1.x.

LAN area: 192.168.0.x.

Those areas are separated by the router.

As you can see the Client is located in the LAN area, and connected to the WAN area through a router. The Server is located at the WAN area. What I want to do is enable the Client (which is running Windows 7) to do authentication via Kerberos with the Server (Windows Server 2003).

Many websites telling me I need to enable TCP und UDP port 88 in the router firewall to use Kerberos. Of course, this only makes sense if the server is behind a firewall. But in this case the client(s) is (are) behind a firewall.

I tried to use the lmhosts-file on the client to specify the IP addresses of my Windows Server, but it doesn't work. I am able to do the windows logon on my client using the domain user and password. But when I want to access a network share, for example, I get an error message and I am prompted to do the authentication again.

My question: What configuration do I need to authenticate to the Windows Domain correctly and use the network share without having to re-authenticate?

active-directory
Martin Hope
user3297416
Asked: 2016-09-16 05:11:15 +0800 CST
  • 1

Currently I have some switches in our network, which use (besides the Fast Ethernet ports) also optical fiber with two SC-Duplex-Connectors (one in and one out). Now I want to replace these old devices by a newer model, but unfortunately modern switches mainly use the SFP interface for optical fiber, which is not directly compatible with our SC-Duplex connectors.

What combination of devices and modules/adapters would be the most sustainable solution to this problem? I mean, if a buy a modern SFP Switch, what would I need to do to connect my SC-Duplex-Connectors?

optical-media sfp
Martin Hope
user3297416
Asked: 2014-03-15 03:27:33 +0800 CST
  • 33

Recently I wondered why my router shows a constant downstream of 5 MBit/s, while I am downloading almost no data. I discovered the "packet logging" function of my router, with which I was able to log all the traffic in the wireshark format. And I recognized that 80% of the downstream traffic was not for my IP address, so it just gets discarded (probably). When tapping the "internet interface" of my router, I could see the downstream packets of IP-adresses that is not mine: Mail addresses from other people, DNS query responses from other people, http-responses from other people...

My question: The fact that I can see other people's downstream, is this normal or is it a misconfiguration on the side of the ISP?

I doubt that it's normal, because this causes a lot of unnecessary traffic, which is bad for me, bad for the ISP and also a data privacy issue for everyone.

wireshark