Mga IT jan ng SMB (small medium business) company pasok!

[melsentillas]

Hi, been following this thread quite a while after finding it and was really useful.

Nasa IT position din ako (sapilitan lols).

Was a Junior Supervisor of our office, QA Lead, and IT System/Network Admin as well (Haha, kainis lang at daming position) sa isang known Gaming Developer and Publisher globally na merong branch office dito sa PH mainly serving as the main hub for it's Customer Support Service (English Versions of the products).

Currently eto ang setup ng office:
1. 40x Computers
a. 38x running on Win 7 Pro
b. 1x Linux CentOS 6.5
c. 1x Win Server 2008 R2

2. Wala kaming naka setup na Active Directory, Win Server only serves as our dedicated File Server, FTP Server, and where our Biometrics connected.

3. Linux CentOS serves as our Gateway Server running (DHCP Server, Firewall, at IPSec setup). Btw, it is running as a Basic Server (No GUI).
a. Di ko alam anong firewall gamit at ano pagkaka setup dahil colleague ko from SG ang nag setup nito, if merong problem naka remote access lang kami dun.
b. Meron tong 3x NICs pero di to naka run ng dual wan at the same time. Other NIC only serve for the back up WAN

4. ISPs na gamit namin eto:
a. Telstra (PACNET before) - 10 Mbps DIA (10 up / 10 down) running on a fiber optic cable.
- Public IP. Naka rekta kami ng subscription, then ang local loop provider namin ay si Radius Network. Kumbaga direct Tier 1 subscriber kami. Dito rin bumibili sila PLDT iGate, Radius, Globe, and other local known enterprise ISP. Medyo mahal nga lang hahaha pero depends on contract period like if 1 year lang, it may go as up to 1,800 USD per month, on our part, it is contracted to 3 years and was able to get it down to 1,300 USD per month. Pero sulit naman especially sa nature ng business namin na naka rely sa internet and shouldn't have any downtime. Wala kami na-eexperience na downtime except for major issues like cable cut due to quakes or storms.

b. PLDT DSL - 10 Mbps. Only serves as our backup and sometimes eto ang connection na ginagamit namin for our office wifi hotspot

c. Globe DSL - 10 Mbps. Similar to PLDT, back up lang din at sometimes, pang wifi connection.

5. Mainly, meron kaming internal web tools na ginagamit.
a. CRM, Game, and Customer Database - naka whitelist lang Public IP namin dahil Akamai ang may hawak ng Data Center namin naka base sa US.

b. Mantis - Tracking tool namin running internally at nasa HQ ang server. Para maka konek lahat ng branch office dito from US, CA, SG, TW, PH, JP, atbp, naka IPSec configured ang gateway server naming mga branch office to the server in our HQ. Mabilis ang connection para ka lang din naka LAN access kahit running on DSL backup.

6. Lahat ng End Users PC - Naka standard user lang. Ako lang naka admin pass. Pero yun lang naka OEM license lang din instead of volume license. Before kasi, buo binibili ang mga PC (Cloned) from local distributors. Pero nung mag-assume ako, told them to opted na kami na lang mag-assemble much cheaper. Grabe presyuhan nitong mga local distributors eh kahit yung malalaking company.

============================================================================================

Currently, nag setup na ko ng Linux CentOS 7 (Medyo baguhan pa ko sa Linux). Replacement dun sa Win Server namin. Pero naka GUI pa rin para sa biometrics namin. Configured na rin ang Samba Server to replace the File Server na nasa Win Server namin. And looking forward for any other application na pwede ko i-run sa Linux Server na to na mag benefit ang branch namin.

Eto ang balak ko idagdag dun, server for internal site (Intranet). Purpose ay parang syang Sharepoint or forum type. Any suggestions na pwede ko gamitin? Yung madali lang i-setup.

Concept ay:
1. Can be accessed by employees using an account
2. Paglalagyan namin to ng mga internal SOP, FAQ, Updates, Announcements, Etc for real time sharing.

ok sir setup ng network nyu, pwede pahingi pa ko dagdag idea about sa gateway server nyu? btw, try mu un liferay portal para sa intranet nyu, opensource sya customize based on portlets running in java environment..

 

[cyber012001]

hi guys pwede magtanong sa mga masters po dyan na gumagamit ng pydio ver 6.0.
San po ako mag uumpisa para ma-access ang pydio server na ginawa ko thru internet? at the same time sa mga android at IOS. any idea po sa mga gumamit gamit ng pydio?.. TIA

 

[gentiles]

hi pa help po gumawa po ako ng email server using the tut ni sir ninetailfox, ito ang link "http://www.symbianize.com/showthread.php?t=1184779&highlight=email+server" succesful ung pgsetup ko problema ayaw mg send other email server like yahoo and gmail and received email ayaw din any idea or tut po para gumana itong email server ko slmt po sa pgreply

 

[lecor69]

yes sir, maganda ang pfsense for firewall and blocking. kahit 1 box na cpu with low end specs tapos ung lan card mo is Intel. and libre lang naman.
and sa file server pwede din naman ung alternative na FreeNAS. bukod sa libre madami ka din pwede gawing sa configuration like windows share, linux and apple share backup

ung pfsense ko pala running 2.1.2 in vmware esxi 1 year na naka UP wala naman ako naging problem.

Sir ask ko lang about pfsense, need po ba na dalawa yung lan? 1 for ISP and 1 for LAN?

 

[Virtus]

Sir ask ko lang about pfsense, need po ba na dalawa yung lan? 1 for ISP and 1 for LAN?

yes boss.. Need ng 2 Lan 1 for Internet and 1 for LAN
pagkainstall mo ng pfsense
assign ka lang kung em0 is yung WAN and em1 is ung LAN mo

 

[justasking]

Tanong lang..

May alam ba kau na bandwidth monitoring tools sa linux. Kahit free lang, aside from iftop and iptraf. Kailangan ko kasi i-monitor ung bandwidth usage per client.

And then pwede din paturo kung paano mag kill ng connection, example is kapag kumakain ng bandwidth si user1, gusto ko i-kill ung connection niya para ma stop ung ni-loload na site or ung downloads niya incase na meron.

 

[lecor69]

yes boss.. Need ng 2 Lan 1 for Internet and 1 for LAN
pagkainstall mo ng pfsense
assign ka lang kung em0 is yung WAN and em1 is ung LAN mo

Sir thanks sa pag confirmed
what if sa laptop ko sya iinstall just for test lang po
pano yung set up nun?

 

[gincasty]

use usb-to- LAN, but you may need a lot of configuring: try this:

https://www.reddit.com/r/PFSENSE/comments/29xz92/pfsense_on_a_laptop/

 

[meyri rows]

tanong ko lang po sa nakakaalam or naka incounter na
pano ba iconnect ung mac para makapag print sa printer na nakaconnect sa windows7
hindi kc makapag print ung mac..
wala kc akong mac dito kaya di ko ma try thanks...

 

[rjeksdi]

Hello, medyo baguhan lang po ako sa Networking, but I'm a mid-level Web Developer. Tanong ko lang po kung ano ang advantage ng Static sa Dynamic addresses? And ano ang mas magandang gamiting IP sa company for internet stabilization? Thank you!

 

[Virtus]

Sir thanks sa pag confirmed
what if sa laptop ko sya iinstall just for test lang po
pano yung set up nun?

pwede mo sya itry sa VMware / Virtual box basta 2 Lan Card ang install mo tapos assign ka lang which is LAN and WAN
Kung ung laptop mo ang gawin mo Pfsense Box, 1 Lan card lang kase ung Laptop bili ka nalang ng USB to Lan Card (Hindi ko pa sya nasubukan)
pero try mo na din boss..

 

[Halloween_]

- - - Updated - - -

Gaano kalayo yun Subdivision A & B? May line of sight bayan?

Posible gamitin dyan point to point antenna https://www.ubnt.com/products/

1 kilometer (1,030 meters) ang distansiya, maraming dadaanang puno at mga bahay if ever walang line of sight ano ang other option. Ano po ang kakailanganin kong bilihin (antenna brand, specs, features etc..).

 

[kiahnevar]

ok ang thread na ito patambay mga sir wala ako alam masyado sa networking pero programmer po ako.

 

[dudong]

Mga sir, may balak kasi kaming mag upgrade ng network, okay lang ba if aabot ng 253 users ang isang network, di ba magiging congested ang network, or we need to make another set of network ? or virtual network na lang ? ano pong mas maganda ?

 

[sein]

Ok tong thread na to sir!

IT rin po ako sa isang SMB, my first job. Kaya malaking tulong tong thread na to pra sa ktulad kong bago plang sa totoong mundo ng IT.

Baba basa muna ko dto sir. Salamat!

 

[yap25]

Patambay ako sa thread na to ..

IT assistant ako sa isang construction company dito sa qatar at sobrang nangangapa ako since wala akong experience sa pinas na IT company.. Pero nagkaroon ako ng Computer shop sa cavite.. small network lang... hehehe

Anyway.. Up for this!

 

[twyxted]

Hello, medyo baguhan lang po ako sa Networking, but I'm a mid-level Web Developer. Tanong ko lang po kung ano ang advantage ng Static sa Dynamic addresses? And ano ang mas magandang gamiting IP sa company for internet stabilization? Thank you!

Not sure lang kung you're referring sa WAN or LAN ha. Pero internet stabilization kamo so I assume WAN (ISP) yan.

Static IP address Advantages

Address does not change - good for web servers, email servers and other Internet servers.
Use DNS to map domain name to IP address, and use domain name to address the static IP address. Similar can be achieved with Dynamic DNS for dynamic IP address, but it's not as clean as the static IP address.

Static IP address Disadvantages

Expensive than dynamic IP address - ISPs generally charge additional fee for static IP addresses.
Need additional security - Since same IP is assigned to a machine, hackers try brute force attack on the machine over period of time.

For WAN (Meron different types yan) and two commons are:
1. ADSL - Popular sa PH. Both offers Dynamic or Static but still, it is a Private IP.
2. DIA - Direct Internet Access. Expensive. Like kami naka DIA sa PACNET which now Telstra. Public IP (Tier 1).

Yung Static IP DSL ni PLDT or Globe, private IP pa rin kasi yan. Both of them were Tier 2/3 networks. Bumibili sila ng Public IP kay Tier 1 and then dito pumapasok ang IP Address subnetting.

Sample:
Bibili si PLDT kay PACNET ng 1000 Mbps bandwidth. Matic it comes with a Public IP. Hahatiin nila yan at ididistribute ang bandwidth sa subscribers. To make it simple. Isipin mo na ang Metro Manila ay isang malaking Local Area Network ni PLDT or Globe. Meron silang router, dun icoconfig yung public IP and from there, mag coconfig na sila ng paghahati ng network and deployment ng DHCP at Static Relays nila papunta sa mga subscribers.

Kung gusto mo ng stabilization, mag DIA ka. Marami nag ooffer nyan like PLDT iGate, Globe, Radius Telecom, IP-Converge, etc (Tier 2/3 networks). Walang peak hours dyan dahil ikaw lang ang user ng bandwidth compare to ADSL connection.

Kami hindi kumuha sa Tier 2/3 networks eh. Rumekta kami sa Tier 1 which is PACNET (Telstra now). Pero meron pa din kaming Local Loop provider which is Radius Telecom. Sa network nila dumadaan ang connection namin papunta sa office location mula sa cable landing site ng PACNET.

 

[jamaitim]

hi guys pwede magtanong sa mga masters po dyan na gumagamit ng pydio ver 6.0.
San po ako mag uumpisa para ma-access ang pydio server na ginawa ko thru internet? at the same time sa mga android at IOS. any idea po sa mga gumamit gamit ng pydio?.. TIA

Saan mo ginawa yung pydio mo tol?
Local or sa internet?

- - - Updated - - -

Sir thanks sa pag confirmed
what if sa laptop ko sya iinstall just for test lang po
pano yung set up nun?

Gamit ka ng virtualBox pre kung sa laptop mo sya planong iinstall.

- - - Updated - - -

- - - Updated - - -



1 kilometer (1,030 meters) ang distansiya, maraming dadaanang puno at mga bahay if ever walang line of sight ano ang other option. Ano po ang kakailanganin kong bilihin (antenna brand, specs, features etc..).

Pag NLOS tol kailangan mo ng i-wired yan.
Base on experience.

- - - Updated - - -

Mga sir, may balak kasi kaming mag upgrade ng network, okay lang ba if aabot ng 253 users ang isang network, di ba magiging congested ang network, or we need to make another set of network ? or virtual network na lang ? ano pong mas maganda ?

Ok lang umabot ng ganun kadami tol.
Gamit ka nlang ng class B or class A na subnet or subnetting para hindi ka makulangan ng IPs pagdating ng takdang panahon.

 

[emandelacruz18]

Wew, mahaba habang basahan ito. Hehe, hingi sana ako ng tulong kung ano mas ok na firewall setup. Cyberoam kasi gamit namin ngayon at bukod dun issetup pa namin yung VPN from another branch. Super kapaan pa, since inaaral ko pa yung setup.

Different ISP pa naman ang both branch. As of now, DROPBOX system pa din gamit namin hanggang ngayon. Eto lang kasi yung cloud system na naumpisahan nila dati, kaso napupuno na yung limited lang yung storage.

Naisipan ng IT Head ko pa dati na mag-pa LEASED line kaso taga talaga sa presyo (since medyo barat sa budget ang company) kaya hindi na-approve, so pumunta sa option 2 na mag lagay ng SERVER to each branch then icconnect ni Cyberoam via VPN each branch network.

Ang problema, kung pano mag-ssimultaneously sync yung database nung dalawang server? Wew talaga.

Ano kaya pwedeng setup sa clinic namin? Need lang naman, magkita yung records ng Branch1 at Branch2 (diff location & ISP). Need din mag sync automatically since na-uupdate sya day-by-day.

IT staff here ng isang SMB clinic.

Anyway, baka meron nag hhold ng seminar about sa PABX, Server / Cloud system, etc basta about IT industry. Pwede ko kayo ma-contact para mag seminar sa clinic namin to educate the staff (kasama na din kami) hehe. PM lang po.

 

[Towphie Roxs]

senario, kung may bagong biling server anong unang ini install po nnyo?? newbie pow.