If you need WhatsApp Voice Calling to work behind a firewall you will need to open the following ports.
TCP: 4244,5222,5223,5228,5242
TCP/UDP: 59234, 50318
UDP: 45395,3478:3484
Also allow access to *.whatsapp.com & *.whatsapp.net
Posts of this blog may be useful for IT Staff
If you need WhatsApp Voice Calling to work behind a firewall you will need to open the following ports.
TCP: 4244,5222,5223,5228,5242
TCP/UDP: 59234, 50318
UDP: 45395,3478:3484
Also allow access to *.whatsapp.com & *.whatsapp.net
To configure your Aironet 3602i from scratch, we will wipe any existing settings and build the Bridge-Group Virtual Interface (BVI) architecture.
In this scenario:
VLAN 1 (Native): Management (AP gets its IP here).
VLAN 10: User Traffic (SSID: Private_Net).
Hidden SSID: We will use the guest-mode command (or rather, the absence of it) to hide the SSID.
Enter configuration mode and define the encryption for the user VLAN.
enable
configure terminal
# Enable password encryption and basic security
service password-encryption
hostname AP-3602
# Define the SSID
dot11 ssid Private_Net
vlan 10
authentication open
authentication key-management wpa version 2
wpa-psk ascii 0 YourSecretKey123
# Do NOT enter 'guest-mode' here; this keeps the SSID hidden
We must split the physical Ethernet port into sub-interfaces that match the switch's trunk tags.
# Management / Native VLAN
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
# User Data VLAN
interface GigabitEthernet0.10
encapsulation dot1Q 10
bridge-group 10
exit
You must apply the configuration to both the 2.4GHz (Radio0) and 5GHz (Radio1) radios for full coverage.
# --- 2.4GHz Radio Configuration ---
interface Dot11Radio0
encryption vlan 10 mode ciphers aes-ccm
ssid Private_Net
no shutdown
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
interface Dot11Radio0.10
encapsulation dot1Q 10
bridge-group 10
# --- 5GHz Radio Configuration ---
interface Dot11Radio1
encryption vlan 10 mode ciphers aes-ccm
ssid Private_Net
no shutdown
interface Dot11Radio1.1
encapsulation dot1Q 1 native
bridge-group 1
interface Dot11Radio1.10
encapsulation dot1Q 10
bridge-group 10
exit
This is where you assign the static identity to the AP. The IP lives on BVI1, which links to Bridge-group 1.
interface BVI1
ip address 192.168.1.50 255.255.255.0
no shutdown
exit
# Set gateway so you can manage it from other subnets
ip default-gateway 192.168.1.1
Verify that the SSIDs are active and save your work.
# Check that the SSID is up (it should not show 'G' for Guest/Broadcast)
show dot11 bssid
# Save the config
write memory
Switch Side: Ensure your switchport is configured as:
switchport mode trunk
switchport trunk native vlan 1
Hidden SSID Note: Since the SSID is hidden, you will need to manually type "Private_Net" into your devices to connect the first time.
WPA Settings: Ensure you used encryption vlan 10 mode ciphers aes-ccm on the physical radio interfaces, or the WPA2 handshake will fail.
SWITCH_IGNORE_STARTUP_CFG=1 command in the switch: prompt to bypass the configuration, allowing you to reconfigure the password without losing existing settings. switch: prompt.flash_init and press Enter.SWITCH_IGNORE_STARTUP_CFG=1 and press Enter.boot and press Enter.enable to enter privileged EXEC mode.copy flash:config.text system:running-config.conf t) and set a new password: username [name] privilege 15 secret [new_password].no switch: SWITCH_IGNORE_STARTUP_CFG=1 or conf t, system ignore startupconfig.write memory. ALTER RESOURCE GOVERNOR RECONFIGURE;
CREATE RESOURCE POOL pMAX_CPU_65
WITH (MAX_CPU_PERCENT = 65);
GO
CREATE WORKLOAD GROUP gMAX_CPU_65
USING pMAX_CPU_65;
GO
CREATE FUNCTION dbo.ClassifierFunction() RETURNS sysname
WITH SCHEMABINDING
AS
BEGIN
DECLARE @workload_group_name AS sysname;
IF (SUSER_NAME() = 'Permanent')
SET @workload_group_name = 'gMAX_CPU_65';
ELSE
SET @workload_group_name = 'default';
RETURN @workload_group_name;
END;
GO
Folder Redirection allows administrators to
redirect folder paths to a new location, either locally or on a network
share. Using Group Policy, you can configure these locations under Windows Settings in the Group Policy Management Console (GPMC). The path is <Group Policy Object Name>\User Configuration\Policies\Windows Settings\Folder Redirection.
To learn more about Folder Redirection, see Folder Redirection, Offline Files, and Roaming User Profiles overview.
You can use the GPMC to redirect the following folders:
AppData/Roaming
Contacts
Desktop
Documents
Downloads
Favorites
Links
Music
Pictures
Saved Games
Searches
Start Menu
Videos
You can configure Folder Redirection to either redirect all users' folders to a single location or assign different locations based on users' security group memberships. The following table summarizes the types of folder redirection.
You can choose between the following settings:
Basic—Redirect everyone's folder to the same location. This setting enables you to redirect everyone's folder to the same location and is applied to all users included in the Group Policy Object. For this setting, you have the following options in specifying a target folder location:
\\server\share\User Account Name\Folder Name. Each user has a unique path for their redirected folder.Redirect to the following location. This option uses an explicit path for the redirection location. If an explicit path is used, it can cause multiple users to share the same path for the redirected folder. Consider using environment variables in the path to create a unique path for each user.
Redirect to the local user profile location. This option moves the location of the folder to the local user profile under the Users folder.
Advanced—Specify locations for various user groups. This setting enables you to specify redirection behavior for the folder based on the security group memberships for the GPO.
Not configured. This option is the default setting. This setting specifies that policy-based folder redirection was removed for that GPO. All folders are redirected to the local user profile location or remain where they're based on the redirection options selected. No changes are made to the current folder location.
To configure Folder Redirection using Group Policy, you must meet the following prerequisites:
An Active Directory Domain Services (AD DS) domain, with client computers joined to the domain. There are no forest or domain functional-level requirements or schema requirements.
Permission in AD DS to create and link Group Policy Objects (GPOs) in the domain or organizational unit (OU) where the users are located.
Client computers running Windows or Windows Server.
A computer with the Group Policy Management Console installed.
To configure Folder Redirection using Group Policy, follow these steps:
Select the Start button, type Group Policy Management, open Group Policy Management from the best match list.
In the console tree, expand the domain or organizational unit (OU) where you want to create or edit the GPO.
Perform one of the following actions:
OR
In the Group Policy Management Editor policy navigation tree, expand User Configuration > Policies > Windows Settings > Folder Redirection.
Right-click the folder you want to redirect, and then select Properties.
On the Target tab, select the option that you want to use for the redirection target.
Select the target location for the folder redirection, as described in Types of Folder Redirection.
If necessary, enter the path for the target location. The path
can be a local folder or a network share. The path must be in the form \\server\share\FolderName.
Select OK to save the settings.
Repeat the steps for each folder that you want to redirect.
To force the GPO to be applied, run the 'gpupdate /force' command on the client computers or wait for the next Group Policy refresh interval.
In the Settings tab in the Properties box for a folder, you can enable the following settings.
Grant the user exclusive rights. This setting is enabled by default and is a recommended setting. This setting specifies that the administrator and other users don't have permissions to access this folder.
Move the contents of <FolderName> to the new location. This setting moves all the data the user has in the local folder to the shared folder on the network.
Caution
Moving all data can take a large amount of time, depending on the speed of the connection and volume of data. The time to move all data could be significant if both locations are remote. You might also notice a delay when pinning and unpinning files in remote locations, as the file needs to sync between the cache and the file share.
Policy Removal. The following table summarizes the behavior of redirected folders and their contents when the GPO no longer applies, based on your selections for policy removal. The following policy removal options are available in the Settings tab, under Policy Removal.
| Policy removal option | Selected setting | Result |
|---|---|---|
| Redirect the folder back to the user profile location when policy is removed1 | Enabled | - The folder returns to its user profile location. - The contents are copied, not moved, back to the user profile location. - The contents aren't deleted from the redirected location. - The user continues to have access to the contents, but only on the local computer. |
| Leave the folder in the new location when policy is removed | Enabled | - The folder remains at its redirected location. - The contents remain at the redirected location. - The user continues to have access to the contents at the redirected folder. |
1 Moving all data back to the user profile can take a large amount of time, depending on the speed of the connection and volume of data. The time to move all data could be significant if both locations are remote. You might also notice a delay when pinning and unpinning files in remote locations, as the file needs to sync between the cache and the file share.
You can also use the GPMC to configure the following Folder Redirection policy settings:
Use localized subfolder names when redirecting Start and My Documents. This policy is located in the following paths: Computer Configuration\Policies\Administrative Templates\System\Folder Redirection, or User Configuration\Policies\Administrative Templates\System\Folder Redirection.
Do not automatically make redirected folders available offline. This policy is located in the following path: User Configuration\Policies\Administrative Templates\System\Folder Redirection.
You can use Group Policy to specify another location (in other words, "redirect" the location) for folders within user profiles. You can redirect folders either to one location for everyone or to different locations based on the security group membership of users. You can also configure other settings for the redirected folder. The settings that you can configure include:
https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/folder-redirection-using-group-policy
--------------------------
ISSUE:
VERDE
offers built-in document redirection functionality in the virtual
desktop (guest), by default the Windows "Document" folder will
automatically be redirected to the virtual desktop D: drive. Some
customers may need to redirect the Windows “Documents” to a shared network drive. The
information below gives Windows administrators information on how to
proceed.
SOLUTION:
1. Set the NTFS permissions
Create the folder in the desired location (i.e. X:\usershare)
From the new folder properties, disable inheritance of permissions from the parent and remove all inherited permissions by clicking the appropriate button.
One entry will already be in the DACL: Local Administrators.
These permissions enable users to create their redirected folder in the root folder, but restrict the ability to browse the contents of other folders. Best practice dictates that you should allow the redirected folder locations to create themselves as users log on.
2. Create the share and add share permissions
Share the root folder created earlier as \\SERVER\usershare (or if you want to hide it, \\SERVER\usershare$\)
Adjust the share permissions as follows:
3. Configure the Group Policy Object (GPO)
Once the user logs in (for example:juser) then the following folders (in bold) will be created on the shared drive c:\usershare\juser\Documents and “Documents” that used to redirect to \\host\Shares\Documents (default) will be redirected to \\SERVER\usershare\<user>\Documents.
https://support.ncomputing.com/portal/en/kb/articles/folder-redirection-changing-the-windows-documents-to-a-network-drive
-----------------------
If you need WhatsApp Voice Calling to work behind a firewall you will need to open the following ports. TCP: 4244,5222,5223,5228,5242 TC...