Environment Details: Unifi WLC – 10.12.92.252 Domain Controller – 10.12.92.252 Install the NPS Role on the Domain Controller (or another server) and register it within Active Directory. You should also install and setup AD CS for PEAP authentication. First, lets look at the Active Directory setup, I have created 3 Read more…
This is a follow on from a previous guide where I showed how to setup Kerberos and NTLM Proxy Authentication on the FortiGate. This guide aims to build on that and setup firewall rules to push a transparent Web Filter Profile to users that do not configure the proxy on Read more…
This guide assumes you have a functioning Active Directory domain already setup. First lets have a look at the environment: FortiGate – 10.12.92.254DC01 – 10.12.92.252 Domain name: avidpontoon.co.uk Domain Controller Configuration The initial configuration we will complete on the Domain Controller. We need to setup a service account for the Read more…
Now we have tested that live motion works and that now all aspects of the network have been tested, we can begin the migration from Standard vSwitches to Distributed vSwitches. This allows central management of cluster networking. We will begin by creating the new Distributed vSwitches we need. Creating Distributed Read more…
In the last section, we configured FSSO and setup the Groups on the FortiGate to interface with the FSSO Groups. Now, we will Setup the web proxy and policies for the proxy too. First, we need to enable the Explicit Proxy within the FortiGate. To do this, select ‘Feature Visibility’ Read more…
FSSO is a mechanism that allows a FortiGate to know who is logged into a domain joined computer, and transparently assign the device policies based on that users attributes (like group membership). This is fully transparent to users as the processing is done between the Domain Controller and the FortiGate. Read more…
Now we have provisioned and setup the first VM on the cluster, we can test to see if vMotion is working. A high level overview of vMotion is that it allows the live migration of VM’s between physical hosts within the cluster. This happens with zero downtime. The most we Read more…
Now the cluster has been configured and we have storage attached using iSCSI. Lets create a VM. Upload ISO to Cluster Datastore In vCenter, move over to the Datastore tab on the left hand side: You should see the Datastore we configured in the last part. In my case its Read more…
Now, the cluster is partially setup. As there is no space to hold any VM’s the vSphere Cluster Service VMs cannot be provisioned. We will complete the configuration on the first host in this guide. Creating a new vSwitch for iSCSI To begin, under the cluster, click on the first Read more…
Now we have the networking setup on the hosts, we can configure the cluster within vCenter. On the main vCenter dashboard, right click on the Datacenter we created previously: Click on ‘New Cluster…’. The new cluster Wizard should appear: On the Basics page, we need to give the cluster a Read more…