Room 1 Port 1 should be untagged and part of VLAN10 Room 1 Port 8 should be tagged for VLAN 10 Room 2 Port 1 should be taged for VLAN 10 Room 2 Port 2 should be untagged and part of VLAN10 Depending on the make and model of smart switch, it probably has something called PVID that can be set on each port. That controls what to do with incoming "raw" packets. So Room 1 Port 1 and Room 2 Port 2 need to have PVID 10. (As well as being "part of VLAN 10" somewhere else in the smart switch configuration screens)

Whoo..That's freescale CPU. Does that hard drive mount fit the XTM5? Because we have yet to find a hard drive holder for the XTM5.

Wondering what kind of work is this for. You'd better keep a good backup.  ::)

do your self a favor get an access point

Could Nagle on the client or server be creating an artificial 100ms delay? Even then, you'd think it would be a common issue.

Hi! I have changed the SSD about 10 days ago… I didn't touch the optical drive (since it's quite improbable it is that nor the NIC card (since those things are kinda costly)... Last time it took a close to two weeks before it became unstable again IIRC so I should know soon enough if the SSD was truly to blame... Thank you and have a nice day! Nick

well steve said on security now his firewall is pfsense so I assume its free of major problems at least in defualt config

I've been using pfSense for few years now and I have no idea what you're talking about. Perhaps if you posted your question in one of the many Support forums, such as the General Questions forum, perhaps someone could help you.  This forum is for general discussion of topics not necessarily related to pfSense.

There are a bunch of implementation, OS-reliability and security issues to be thought through. If the BIOS just goes looking for attached "memory disks" and maps them into the 64-bit physical address space seen by the CPU(s) then BIOS memcheck diags, BIOS functions that zero all of memory and the like have to be VERY careful to still understand what is built-in-local-run-time memory and what is some poor sods "memory disk" with a file-system that they care very much about. Similarly if the "memory disks" are mapped into physical address space by some OS loader code (or done already by the BIOS) - the OS has to be VERY careful with its physical address space management, not to accidentally zero some pages that are somebody's file system storage.

@rsumook: i called thru landline our domain name registrar… Honestly, why would you want to run your own name server? You had to call your registrar (through landline!) to get these informations? Really? You could have looked them up easily yourself. If you don't know how to do that you don't want to run your own public DNS server. Really not. ;; QUESTION SECTION: ;example.com. IN ANY ;; ANSWER SECTION: example.com. 86399 IN A 93.184.216.34 example.com. 86399 IN NS a.iana-servers.net. example.com. 86399 IN NS b.iana-servers.net. example.com. 3599 IN SOA sns.dns.icann.org. noc.dns.icann.org. 2016110744 7200 3600 1209600 3600 example.com. 59 IN TXT "v=spf1 -all" example.com. 59 IN TXT "$Id: example.com 4415 2015-08-24 20:12:23Z davids $" example.com. 86399 IN AAAA 2606:2800:220:1:248:1893:25c8:1946 There's everything in for example.com You could and should have done the same for your domain (not through landline, though)…

We're aware of it, but I don't know that any of us have looked at its contents. It's another Packt Publishing special, so I have no confidence in its quality given their usual output.

Just an update after all parties are back from holiday leave… I finally managed to talk to NOC which was kind of interesting. Their first approach was: what do you know, why do you bother? Now we're talking. Installed is one Catalyst 4500 chassis for the building which means that private VLAN mode will work. They got quite excited like: "Your idea is reasonable. We never did that before but we'll try first thing tomorrow. Let's test this together then?" The biggest problem was getting to the right party. We were engaged by facility mgmt which doesn't want the institute's admin to be involved beforehand. ??? NOC provides and manages the backbone where we hang off but we weren't allowed (by FM) to talk to them. After FM couldn't answer our questions we were redirected to NOC again. And the local (institute's) admin still doesn't even know what gear he gets and is supposed to monitor... Thanks Derelict for pointing me to PVLAN mode! That really made the difference and I highly appreciate your input.

@korax: As for posting some logs can you be more specific which ones No audio is commonly a NAT issue.  Are you saying that you have this issue on internal to internal AND internal to external calls. OK.  Please post a screen shot of your NAT rules, the firewall rules on the interface that has Elastix on it and the rules for the WAN. Can you also describe how the networks are configured and what network(s) your phones are on? That may help with working out what is going on for pfSense. BTW Is there a reason you are using Elastix 2.5?  Its quite old and 3CX has moved in and replaced Asterisk with their own system for version 5.0.  If you want a supported system maybe FreePBX distro would be a better choice?