Morning all

Do you guys sync your switches to an NTP server?

@JukEboX Yes, of course. We use NTP for all the network devices using UTC everywhere so that all the logs are synchronized.

Me too. You want all your logging info to have the same time

NTP off our own GPS based timing sources. All devices and servers use these sources.

Getting your own NTP appliances is pretty cheap to actually do. Ppl

Darn this NTP authentication-key

Anyone here have any experience with VPN on a Draytek Vigor? I'm trying to understand what setting the From first subnet to remote network, you have to option to NAT actually does, specifically which address it might NAT behind...

@jimbobmcgee Are there overlapping networks at the two sites? If not, then simply do not turn NAT on.

@RonMaupin - we have a requirement for it, since we deal with a ton of clients, and they all seem to want to come in on 192.168.100/24. I've got a poor net tech on the other end of an email chain, and I can't seem to find the right words to translate what I'd do on a Cisco to what he needs to do on a Draytek. All I've got is the Draytek demo site (eu.draytek.com:12862) and a user guide and nothing is helping!

@jimbobmcgee Tell them to buy a real router :)

Those home routers have such a limited ability to configure where and when to NAT.

@RonMaupin : Tell me about it! I can't believe how many seem to conflate "encryption domain" and "NAT" and bundle them into the same one-page settings screen...

The KB article is laughable in how much it doesn't tell you (draytek.com/support/knowledge-base/5452)

The user guide is just as useful: "If the remote network only allows you to dial in with single IP, please choose NAT, otherwise choose Route."