boog's questions

I have a copy of the local db from our old shoretel voip system... which is no longer in service. I've been tasked with trying to locate information pertaining to calls to and from specific numbers over the past year or so.

Wondering if anybody is familiar with the schema of this database and which tables I might be able to query to find call info. I had done some investigation and read that there should be a "calls" table, but there is not. None of the tables are named in such a way that it sounds like the correct table for call transactions.

Any info is helpful, thank you

Say I would like to only allow domain admins write permissions to a folder, and disallow everyone else.

If I set write permissions for domain admins, but then read-only for 'authenticated users', which takes precedence?

Does the domain admins write permission trump the authenticated users read-only permission? Or will the domain admins be unable to write because domain admins are included in authenticated users?

Thank you

Alright, so I'm adding an IRF member to our switch stack. They are 5130's, JG937A.

Only problem is the IRF cables are BURIED in the rack channel (I mean buried buried), and there's no way for me to look at the switches and tell which 10GBX interfaces are connected to which, thus I can't tell how the switches are stacked (daisy chain, ring, mesh etc).

So, wondering if I can do this by viewing the mac addresses of the interfaces, and seeing where they match up.

Question- is there a way to see the mac address of the CONNECTED SWITCH INTERFACE (on the other end of the cable)

For instance, I can view the mac of an interface by using

show current-configuration interface Ten-Gigabitethernet 4/0/49

I would then want to view the mac address of whatever interface is connected to 4/0/49 (probably 5/0/50).

Any other way to confirm this? To figure out how my switches are stacked, and which interfaces currently connect to which?

Are there any disadvantages these days to using a layer 3 switch instead of a dedicated router as your gateway?

We used to have a traditional setup with a cisco router as our edge device, but since switched to an SDWAN setup. They want us to use our (pretty old) HP 5130's (JG937A's) stacked L3 switches as our new gateway device, forwarding traffic over to the SDWAN routers they provided.

We are an enterprise with about 200 end stations, and 2 buildings on our campus. All of this traffic between the two buildings would be going out this one interface on the 5130.

Anybody see an actual problem with this? Looking at CPU utilization on the 5130's themselves, they're around 50%.

Is there anything wrong with this? I would think an actual enterprise grade router would be the best option, but does it actually matter?

We're deploying Office365 to our site and there are some security concerns that would like to be addressed.

For example, we would like to lock down onedrive so that most users cannot use it, whereas a few users might be given the permission to use it.

I thought that this would be handled with conditional access policies. However, when I navigate through the o365 admin, security & compliance center and try to setup a policy to block OneDrive, it does not come up as an option when looking at "cloud apps" from which I can choose to block/allow access.

Am I looking in the wrong spot? Is OneDrive not considered a "cloud app"?

Other things we would like to do include limit those who can receive their email on their mobile devices... this too I thought could be accomplished with a conditional access policy, but I see nothing for exchange in the options.

I would appreciate if somebody might be able to steer me in the correct direction here. Thank you

We have a new site in tampa (we're based in buffalo NY) and everything works well except for the DNS name resolution. Everything goes over the IPSEC VPN back to our site for services like AD and DNS.

I had a look at the dns config, and I believe this to be the problem. There really isnt a wan zone configured, everything goes out the vpn zone. but yet, the dns is configured for WAN (I didn't set this up btw).

So obviously if the wan zone isnt used, we can't use it for dns. Those IPs are for the ISPs dns servers, but they can't be pinged from the sonicwall, so it's obviously part of the issue.

My first thought is to reconfigure using the top radio button to specify dns servers manually, but I really don't want to mess anything up here, and fear that maybe there's just a rule missing instead. This config was basically copied from our other site in FL, but obviously something needs to be reconfigured.

This sonicwall is in an office building where our edge leads to other building network topology, so that might add to the complication. This is the reason all traffic comes over our vpn.

I mostly am looking for some guidance so I don't break it and make the site inaccessible. Thank you ahead of time.

EDIT- here is the DHCP configuration. Interface x0 is the local LAN network. w0:V5 is the vpn connection back to our office in NY. The hosts on the network (BonitaDell) can browse the internet, but cannot be accessed from out Buffalo Office by hostname, only by IP. In the second screenshot, the IPs configured there are correct for our DNS servers in NY- those are the correct DNS servers clients on the FL LAN should be using. Any ideas?