name=Flipdesk |os=PFsense 2.4.3 |dns=router.tardis.ed.ac.uk / flipdesk.tardis.ed.ac.uk |ipv4=Primary: 10.6.0.1 |ipv6=none |hardware=VM on [[hyperchicken]] with 2 CPUs and 1GB RAM |other=Setup by . Looks like ESXi is passing through hardware accelerated crypto to the host, so AES-CBC,AES-XTS,AES-GCM & AES-ICM are all turned on. Not sure if we'd be using those though. |services=Primary router, DNS resolver (forwards to [[rose]]), NTP server pointed at ntp.inf, DHCP server etc etc

The VM has two NICs, vmx0 is connected to the 'Trunk Ports' port group (a VLAN trunk into the switch), vmx1 is connected to the 'EDLAN Ports' port group, which is connected untagged to the EdLAN uplink.

There are these VLANs in Tardis at the moment:

• Internal: 10.6.0.0/23 on VLAN 6 - DHCPed, general internal network for new things, replaces Projects
• TardisLAN: 193.62.81.0/26 on VLAN 3 - old primary network using our public IP space
• Colo: 193.62.81.145/28 on VLAN 7 - colocation network, has some DHCP pool allocated
• CompSoc: 193.62.81.129/28 on VLAN 5 - CompSoc network (why isn't this in Colo?)

LDAP doesn't seem to want to work, it can bind and pull down OUs on the config page, but the tests fail. Probably something to do with the following:

May 24 19:12:36 jellybaby slapd[2266]: conn=x op=1 SRCH base="ou=People,dc=tardis,dc=ed,dc=ac,dc=uk" scope=2 deref=1 filter="(|(ou=*)(cn=users))"
May 24 19:12:36 jellybaby slapd[x]: <= bdb_equality_candidates: (cn) not indexed
May 24 19:12:36 jellybaby slapd[x]: conn=x op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
May 24 19:12:36 jellybaby slapd[x]: conn=x op=2 UNBIND

It is configured to send notifications to sysmans@ via chloe.