networking

[rocky badge]

the 100F

[hardy python]

Classes A,B, and C are reserved private IPS. They can configured for WAN or LAN use.

[modest mirage]

holy! it's $11k here, excluding VAT!

[rocky badge]

Entry levels are 6.5Gbps max, 70F, 80F and all of their variants

[rocky badge]

oof

https://www.avfirewalls.com/FortiGate-100F.asp

[modest mirage]

VAT is 25%, so yeah, not happening 😂

unless I find a used one for cheap haha

[rocky badge]

Probably not an F series

E series has shitty VPN performance

F is the newest and current

[modest mirage]

ahh okay, but an E is probably sufficient for my home network?

[rocky badge]

Yeah

[modest mirage]

also tbf I only have a gigabit connection in/out from my home

[rocky badge]

friend has a 60E on a gig/gig fios connection

[modest mirage]

so probably don't really need 10G equipment for anything but the stuff on my internal network

[rocky badge]

if you're not doing 10G inter VLAN you don't need 10G router

[modest mirage]

I'm going to do 10G internally soon™️

[rocky badge]

10G in just one VLAN or between VLANs

[modest mirage]

just need another 10G networking card, and a 10G switch

between VLANs probably

[rocky badge]

if you're doing 10G on one VLAN and all of the clients are in that same VLAN you don't need a 10G router

but if you're doing 10G between VLANs and the clients need to route between VLANs you need a 10G router

or a switch with layer 3 and can handle 10G

[modest mirage]

since I have kinda committed to the UniFi ecosystem, I was considering XG-16 or something (I can't recall the model name of that 10G switch)

[echo roost]

only the 192.168/16 is private not the entire 192/8

[hardy python]

Correct

[echo roost]

😐

[hardy python]

I misinterpreted my statement

[pseudo blade]

If you don't need IPS between local subnets you could use an L3 switch and save money

[echo roost]

all good

[modest mirage]

well presumably I'm going to have servers and VMs on separate VLAN to clients, and I want my clients to be able to transfer files to and from the NAS over 10Gb

[echo roost]

Nice.. thats gonna be a beefy NAS.

[hardy python]

Yessir!

[rocky badge]

yeah 10G router or L3 switch

UniFi doesn't have any really good L3 switches right now

[modest mirage]

UDMP is 10G already 😮

[rocky badge]

but the UDMP can do 10G routing

[modest mirage]

that's why I got it - though I'm quite beginner at networking stuff

[rocky badge]

Ubiquiti has UniFi layer 3 switches but they don't have any support for ACLs

So while it can route between VLANs there's no ACL between it

Meaning any L3 VLAN can access any other L3 VLAN

[pseudo blade]

So they're good for L2 and propping up wobbly table legs?

[rocky badge]

Yeah

Like, its in the CLI

but not implemented in the GUI/controller

[echo roost]

i can highly recommend Netbox for keeping track of everything. If you go over a dozen devices or so it can get tricky to remember what you connected into what.

[rocky badge]

and any CLI changes get wiped when the switch provisions from controller

[pseudo blade]

Compelling

[modest mirage]

ugh, my projects are piling up 😂 I got to get a grip and finish one project at a time, not constantly find new ones

but man is networking ever expensive, and when you also start adding NAS etc to the equation - bye bye wallet!

[echo roost]

and hat price shoots up when you want to go above 1G

[modest mirage]

yeah, 1G stuff is relatively affordable, depending on what you need - at least there are a ton more options, and a ton more stuff floating on the second hand market

someone I talked to had 40 and 100G equipment at home 😂

[rocky badge]

current state of everything ™️

[echo roost]

Very nice

I recommend netbox to you also.

as that's a wondeful amount of devices

[rocky badge]

I've been meaning to setup shit but i haven't

[echo roost]

Yeah, i'm perpetually 70% through documenting my stuff.

[rocky badge]

only a couple days ago did I setup redundant dns

[modest mirage]

looks like a nice setup, I have an R610 and R710, have considered swapping them out for my 5900X build when the 7000-series starts shipping

just the mobo, memory, and cpu though

[rocky badge]

lol

[modest mirage]

got the idea of turning my Define 7 XL into a rack mounted PC case 😂

[modest mirage]

it's like extremely difficult to find rack mountable cases support ATX mobos in Norway

[rocky badge]

All of the network runs in the house terminate to a separate patch panel

[modest mirage]

yeah, I will do that as well when I get my own place

right now I'm just renting, but all of the network ports still terminate in the same room

I got no patch panel or anything though, I don't even have a rack

[rocky badge]

[modest mirage]

this is my disaster of a setup atm 😂

[hardy python]

Looks pretty pogg, ngl!

[modest mirage]

sure, it's okay for a homelab, but I would really prefer to have a small rack to fit this hardware into

and I would love to fit a GPU for hardware acceleration into my R710

[hardy python]

yeah, having the rack will save a lot of space lol!

[modest mirage]

racks that support a full size server like these aren't cheap, especially not the size I need (iirc roughly 60cm tall max)

[rocky badge]

i got a 42u lol

https://www.amazon.com/StarTech-com-Post-Open-Frame-Server/dp/B00HVKOPBW/

[modest mirage]

yeah, can't fit that in here, if I could I would probably look for one for free

looked at that one, or well, the 12U version of it, but it's $400 here

I do have a shed, and that shed is behind my landlords garage, where the fiber comes up, so I could potentially just wire up my servers there, in a 42U rack

better cooling too, no noise in here ever from the servers either

then just run a fiber cable up to my apartment

just unsure if the climate is suitable there, especially during winter... but with the servers and other stuff running 24/7, it should probably not be too bad, but I do fear condensation a little bit

[cedar sapphire]

Why do you run cyberchef 24/7? You need to decode data that often?

[rocky badge]

its only using like 5MB of RAM 🤣

i can spare 5MB of RAM to keep cyberchef running

and yeah I use it for ctf and shit

[cedar sapphire]

ahh nice

which CTF categories do you focus on most?

[rocky badge]

web, forensics, crypto, reversing, etc

whatever the event has

[cedar sapphire]

Nice. That is the type of stuff I do for work

[rocky badge]

nice

[modest mirage]

what exactly is CTF? iirc I've heard the term before, but can't really seem to remember what it is for (I mean I know the acronym I guess)

[rocky badge]

capture the flag

cybersecurity competitions

[echo roost]

Oh god, my worst nightmare

[modest mirage]

ahh, I see, not into cybersecurity, but it does sound interesting

[rocky badge]

You find "flags"/strings hidden somewhere or in something

[cedar sapphire]

legal ways to practice and learn how to break into systems and perform digital forensics

[rocky badge]

^

[cedar sapphire]

very useful for people as they learn hands on cybersecurity

[modest mirage]

for work I'm just a customer support / software tester (Q&A I guess) 😂 I used to be a system engineer though, but cba with it as work for now

[cedar sapphire]

@rocky badge have you ever performed any memory forensics (analysis of RAM samples)?

[rocky badge]

nope 😂 haven't tried those

[modest mirage]

ahh, I see, might look into that in the future, so I can do some basic pen testing on my own stuff

[rocky badge]

i like CTF but i like a lot of network security more than programming/reverse engineering

[cedar sapphire]

yea, I am pretty lucky in that I get to jump around all the areas with really interesting real world data

[modest mirage]

I think I would like to work with networking related stuff, but I do like programming (not so much reverse engineering), because then I can solve inconveniences in my life etc

[cedar sapphire]

Our clients are all heavily targeted by nation states hostile to western interests... so we get to see cutting edge malware and toolkits targeting our clients, and we have host + network visibility to perform as thorough forensics as we want. Also, lots of reversing of exploits and malware samples.

[modest mirage]

so far I like my job though, pretty chill, just ezpz stuff, aside from the internal routines and ways of doing things 😂

[cedar sapphire]

It is never boring 🙂

[modest mirage]

like some customer complaining their site didn't work when accessing from Google - broken SSL cert (well, was missing www)

[rocky badge]

i've never really went through any courses or have anybody teaching me this shit lol

[modest mirage]

that does sound pretty exciting, but also stressful to work with ngl!

[rocky badge]

it's all been frantically googling when at the actual CTF competition

[modest mirage]

same, I've picked up quite literally everything I know as I go 😂 be it what little I know about networking, or troubleshooting hardware or software, programming etc

same even with English ngl, I guess I did learn some basic stuff in school, but man was I ever bad at English when I was in school

[rocky badge]

my laptop ends up like this at ctf

[modest mirage]

looks like my PC and laptop regardless of what I do 😂

Oo, nice, sound my old router

[thick minnow]

hi yall does anyone know what an ipv4/6 dns relay is? its a setting on my arris gateway

[peak cloak]

Like no one uses classes anymore

[echo roost]

errm.

[echo roost]

What's your option? Is it just enable or disable?

[thick minnow]

yep, if its enabled the dns options are greyed out tho

[echo roost]

Ok, so its probably DNS relay vs Proxy.. This description i stoel from the web probably words it better than i can.
DNS relay is similar to DNS proxy. The difference is whether they search for DNS entries saved in the local domain name resolution table, including the static domain name resolution table and the local domain name cache after receiving DNS query messages from DNS clients.

The DNS proxy searches for DNS entries saved in the local domain name cache after receiving DNS query messages from DNS clients. If requested DNS entries are not saved in the cache, DNS query messages are forwarded to the DNS server.

The DNS relay does not search for DNS entries saved in the local domain name cache after receiving DNS query messages from DNS clients. It forwards the messages directly to the DNS server for resolution. On one hand, it can save the cost for the cache on the DNS relay. On the other hand, it guarantees the real-time requirements for that the DNS client obtain resolution results. (If the domain names and IP addresses on the DNS server changes and the cache on the DNS proxy is not updated in time, the resolution result obtained by the DNS Client is incorrect.)

[hardy python]

Well, it is part of the structure. and you scrolled up so far lol

[peak cloak]

I've never seen someone actually at work say class a, b, or c

/24, /16, etc. etc

Didn't iana or whatever the numbers authority is deprecate classful networking

[hollow marlin]

Classful died shortly after subnetting was implemented

AKA, 20+ years ago

[rocky badge]

variable length

[rocky badge]

Wasn't it also partially replaced so public ips could be assigned in blocks lesser than /24

[sudden kayak]

i mean, it's not super common anymore. i have some older networking textbooks from the early 2000s that made a big deal about knowing classes and cidr and converting between them

hasn't come up in the last 5 years for me in any serious way

[hollow marlin]

VLSM was far before they were worried about the "public" side at the time. When they finally realized how fast the internet was expanding, they needed a method to stop wasting IP space. At this time, IP blocks were being handed out via email at request.

[rocky badge]

ah

[hollow marlin]

Still in modern text books/classes. Its there more of a history when discussing subnetting, ex. start with classful networks, demonstrate the scaling/issues, introduce subnetting of those networks and hence introducing classless. It made sense from a academic standpoint, but should not be used anymore honestly. Too many people, even professionals in this field, that still use the term

[hollow marlin]

I don't recall the guys name, but the guy that was handling the assignment at the IETF still has the holy grail of notebooks which is a scratchpad of names and IP blocks that was used to keep track of who had what network

[rocky badge]

lmao

[hardy python]

I am used to it because of learning it for exams

I know it isn't a common practice to say, but in my mind it is a tool to approximate what IP is what.

To summarize I absorb knowledge of what I have learned prior to taking exams.

[modest mirage]

lol, I remember learning about classes being relevant when I did IT in high school like 8 years ago

not saying you're wrong, I'm bashing my course in case that was unclear

[hardy python]

lol

[modest mirage]

I never really understood the point of the network classes anyway tbf, maybe it made more sense like ~20 years ago?

[hollow marlin]

Yeah, thats why I mentioned above it's still being taught. They just don't emphasize enough that classful is no longer used and many people continue to think it is

[modest mirage]

yeah, pretty dumb ngl, but then again IT in high school is really basic (even a dedicated course like the one I did), so I guess if I did uni or something primarily around networking, they'd emphasis it more(?)

[hollow marlin]

You know the "you'll never need more that 64KB memory" meme? Yeah the IETF was the OG.

Remember, IPv4 was in development in the 70s and was primarily for universities and research (until the gov. stepped into to fund it for their use as well). They never though they would ever need more networks

Classes made sense then with their hardware and protocols. But as they expanded, they quickly realized how wrong they were

[hardy python]

Right, Now since IPv6 is rolling around, it is using hexadecimal notation instead of the traditional decimal used.

[hollow marlin]

Thats why IPv6 was overengineered to be so large and never classful. But because engineers are careless, IPv6 has its own soft limit.

[hardy python]

Yeah!

[rocky badge]

I want IPv6 services 😡

[hollow marlin]

IPv6 using hex is just for readability. Bit notation is still the underlying concept of both v4/v6. Its all about the bit values

[hardy python]

MTA Certs or even CompTIA cert courses go over classes. The courses go through certain lessons where those lessons are obsolete to learn.

[hollow marlin]

Present's Fios region finally got v6, I am still waiting on my region to get it as well

[rocky badge]

I'm on my local ISP :(

the parent company/ISP is rolling out dual-stack though

[hardy python]

Are you all living in the United States?

[rocky badge]

I am

[modest mirage]

lmao what a mess! being self taught has its perks I guess

[hardy python]

Well, I did teach myself more or less what I know, but having to take those exams, I wanted to make sure I would pass.

[rocky badge]

i've yet to take any comptia stuff lol

mainly because i don't want to pay for it

[hardy python]

I am an underachiever with excelling qualities.

[rocky badge]

i should setup bgp /s

[hardy python]

I want to take the A+, Network + and more, but I feel like I'll fail and waste money taking it.

[hollow marlin]

CompTIA at this point is ignored by most employers

[hollow marlin]

BGP ❤️

[modest mirage]

yeah definitely, haven't been particularly invested in networking, but was planning to do some CLI and setup my home network more along the lines of a commercial network - though it never happened, aside from getting a UDMP and ditching the ISP provided equipment lol

[hardy python]

LMAO!

So far, I have configured a basic FTP Server and VPN so I can access my home network wherever I want to and access my own files. 12TB of storage vs OneDrive lol. My VPN uses LDAP/IKEv2 protocols with SSL.

And I have a website configured but never finished it.

[peak cloak]

Get on dn42

[rocky badge]

lol

[peak cloak]

I was thinking setting up ospf

Esp when I will have site-site vpn

Just so I don't need to setup a bunch of statics

[hardy python]

Lmao!

[rocky badge]

lol

[peak cloak]

Zt = zerotier?

[rocky badge]

yeah

[peak cloak]

Yeah prob gonna use it for site to site

[rocky badge]

ZT can get through NAT easily

[hardy python]

Hm, What application are you using to manage your network?

[peak cloak]

Watch as I don't even have nat in dorm

New ones may tho

[hardy python]

@rocky badge

[rocky badge]

this is my router's gui lol

[modest mirage]

ah tbf, I have a storage server 5x4TB HDDs iirc, and I run a Nginx server for reverse proxy to host multiple web apps etc if need be, can't remember if I have any online right now lmao 😂 I also have a pihole vm I almost never use

[thick minnow]

thxx but i dont quite understand it, so is the relay good?

[modest mirage]

what it sounded like to me is a relay will get DNS records from a DNS server, without relay it gets them from a cache instead, assuming it's present in the cache - if not present in the cache, it asks the DNS server instead

if you're not really looking to learn this, but just have a functional network, I'm not sure you'll notice that much of a difference - although I'd turn on relay

in case it was unclear though, I'm on very thin ice answering this, don't assume my information is accurate

[echo roost]

Relay won't use a local look up for names on your domain (which i suspect you don't have anyway). i would leave off (but for most peoples needs it really makes no difference) but it will make no difference. If its something you would like tune you can benchmark your DNS and find the quickest servers for yourself using a tool like https://www.grc.com/dns/benchmark.htm

[glacial linden]

I use Tailscale and ZeroTier to create VLANs to host a minecraft server privately... Recently both of them went on relays instead of direct connections, assuming my ISP did something in the backend that's preventing direct connections.

Can a P2P enabled VPN solve this problem?

(if I use a VPN that has a server in the same country that is)

[peak cloak]

uhh what

tailscale and zt don't create vlans

tailscale and zt are p2p except if they can't

your ISP may have done something with NAT

[glacial linden]

oh... I assumed since it's a virtual subnet it's called a vlan

[glacial linden]

yup they keep doing that randomly every year, I hate it

[peak cloak]

that's technically a VPN

[glacial linden]

Since a P2P VPN will connect through a proper server, friends should have a direct connection through it to my server

[peak cloak]

you know what p2p means? Peer to peer, meaning they connect directly to your server

[glacial linden]

should've said p2p supported *

[peak cloak]

nothing in the middle

[glacial linden]

This is a random MS paint representation of what I was thinking 😂

[peak cloak]

so you want not p2p

[glacial linden]

oh well... if these direct p2p solutions can't connect directly now, what are my options

[peak cloak]

that basically what it's doing rn with relays

what is the issue

[glacial linden]

The default relay servers are extremely slow and laggy

Zerotier gives me 500ms+ ping with a relay... Tailscale gives 100ms+ and very slow speeds

= unplayable game, people just connecting and disconnecting over and over

[rocky badge]

wireguard probably works

PC A, peers B & C
PC B, peers A &C
PC C, peers A & B

but this is essentially what ZeroTier is doing its just automatic

[glacial linden]

Since Tailscale uses wireguard and can't get a direct connection no matter what I try (out of nowhere after being perfectly fine since 5 months), will using wireguard let these things connect directly?

[rocky badge]

@peak cloak Somehow ZT at school is getting direct connections

there's probably a bigger issue than zerotier or tailscale here ¯_(ツ)_/¯

something's preventing them from traversing NAT and requiring them to go through public relay servers

[glacial linden]

My ISP messing around with their NAT is one I'd assume

[pseudo blade]

If there's a CGNAT I'd just use a Wireguard server in EC2/the like and port-forward it from the instance. Use whitelisting for MC rather than needing everyone to install a VPN client

[rocky badge]

^ that's what I do for web services without exposing HTTPS directly to the web

[glacial linden]

yup but that'll have a cost... I already have a 2nd server build that has enough resources and everything for this. All I need to figure out is networking

[pseudo blade]

Sure does have a cost... about $3.50/month?

[rocky badge]

My EC2 is $3/mo lol

reserved instances

[pseudo blade]

It's either that or deal with what you have

[glacial linden]

yeah thought so... :/

[glacial linden]

Nice, I'll try this if I can

[pseudo blade]

I use Lightsail though with the increase in free tier BW I could probably do a t3/4 variant cheaper

[glacial linden]

I've never used these cloud services so I have no idea

will try

[glacial linden]

any guide / info about what all you're using for that? Lightsail?

[pseudo blade]

Lightsail is an AWS product that bundles everything in including data, in exchange for giving you a watered down API and frontend

It's EC2 for noobs basically, but the bundled data is cheaper than their EC2 rate

That was Lightsail yes

[glacial linden]

alright awesome, will try setting it up today, thanks 😄

[peak cloak]

oracle cloud free vps

I used the DO $200 credits with the most basic VPS, lasted a long time, and I just canceled it because I didn't use it anymore

[waxen scroll]

#humblebrag

[glacial linden]

oh thanks I'll check that too... im a college student with absolutely no source of income right now and I can't be asking parents for every little thing anymore so I'll see what I can do

[barren roost]

has any1 used the asus mesh system?

the XP4, XT8, AND ET8

[terse pecan]

Hey, working on setting up a cool homelab for college and was wondering if anyone had a recomendation for a cheap router that can handle a site to site VPN. Ubiquiti is just too expensive for my use case and my netgear router doesnt have the features

[severe zealot]

Internet works completely fine until i open a game with any amount of internet requirements. I have 500~ megabytes of download speed and its only MY pc that disconnects while a game is open.
This is not game-specific. if it was, this problem would've been solved long ago.
Video is an example of scrap mechanic and chrome.
this issue has plagued me for so long and my friend told me to get help here
i feel like i've tried everything in my knowledge to fix this but literally nothing changes.
I know its router-specific, because this issue doest happen at my dad's house.
(and yes i have tried the blatantly obvious router restart numerous times)
If you want some more evidence just ask

[terse pecan]

are you connecting over wifi? and/or how old is your router/ap/cabling

from a quick search, microsoft answers mentioned a similar problem where the power was the main issue

if the router is old enough, or the power adapter for it is old/breaking the power throughput of the connection to your device may be breaking it. Is this the only gaming PC in your house? simple troubleshooting could be if others with similar internet demands are facing the same problem

[severe zealot]

1. wifi, we got the router and cables a month ago
2. this problem persisted even before we got a new router a month ago
3. i have a good computer
4. yes there are 2 more, but nothing changes even if they're using internet or off completely

[terse pecan]

Hmmm then it may be the network card on the pc itself. I would try hardwire (if you can) or a new Wi-Fi adapter

Even on high end devices fault components like mother board Wi-Fi could be the root cause of it doesn’t have line of site or interference

[severe zealot]

ok

but here's the funny thing!

it works completely as usual when im at my dad's house

so it cant be a hardware issue

right?

[terse pecan]

Well it depends distance from the router. Material through walls etc… if your Wi-Fi is faulty it could still get a good connection at your dads because the router is close but at your other house distance/blockage may break it. Have you tried moving the device around maybe closer to the device? Beyond that I’m not sure it’s definitely a weird issue. If you can I would try a hardwire connection for testing to see if it works better that can narrow the problem

[severe zealot]

that wouldnt cause a pc-wide disconnect when games are open, right? i can still browse the web at very good speed, the same as my dad's house

[terse pecan]

Well if running a game that uses p2p it definitely could break the internet for your device. As it takes a lot of bandwidth. If your network card is faulty or breaking, it could cause this issue. Another good test would be to open task manager, advanced settings, and Wi-Fi. Watch to see if you are getting packet drop and/or your network throughput is maxed out. Another trouble shooting step would be to see if your device is being limited in router settings, sometimes a bad config could limit a devices network connectivity hence bad response times when running a game.

[severe zealot]

i dont use p2p

this is all of my games that use any amount of internet here

ive made multiple "fixes" to my configs and nothing has changed

[terse pecan]

Huh interesting. Many games which connect to server can utilize p2p without the end user knowing it buut odds are that is not the issue just a possibility. I’d start with Troubleshooting with both wired and wireless next to an AP or the router. If the speed are better than the network card is to blame. If they stay the same the router is more of the problem. From there I would load wireshsark and monitor network traffic. If you are noticing packet loss and other errors. Your router/ap is to blame. You may just have awful luck and upgraded from a bad router to broken one

[severe zealot]

more like broken router to broken router

ive used wireshark and its near 100% packet loss

then immediately after the game closes its around 0%

i understand if this is confusing, two other people have tried to help and were stumped completely.

[terse pecan]

Wow, that’s actually a really fascinating issue and so sorry it is affecting you. No worries I know wanna figure this out for my sanity. With your experiences with wireshark there is a good chance your games is using up all of the network bandwidth which adds to the original thought of fault/bad connection to your network

[severe zealot]

500mbs

[terse pecan]

While not a fix, a possible issue could be network saturation from multiple wireless networks. In most urban environments like apartments, several people in close contact broadcasting their own network can break and saturate Wi-Fi making it impossible to use. Does your dad live in an area with lest SSID broadcast?

[severe zealot]

ok

i live in an apartment complex, my dad lives in a neighborhood

so that seems very likely actually

we do also get call drops sometimes too

[terse pecan]

I would look up how to change channels for Wi-Fi networks. By changing to a less used it could make things better. And it looks like network saturations along with cellular dead zones may just be creating a cluster of network problems

[severe zealot]

alright ill try

[terse pecan]

Are you on a 5ghz or 2.4? Depending on the age of the pc it could be connecting on 2.4 which has a the largest radius and is the most saturated along with more devices creating noise on the network. If you can I would make sure your device is on 5ghz and as close to the router as possible

[severe zealot]

ok um

how do i get my router's IP?

[terse pecan]

Haha alright on your pc run ipconfig /all

[severe zealot]

kk

[terse pecan]

You will see your network address and hopefully the gateway

Odds are it is 192.168.1.1 192.168.0.1 or if it’s dance 10.0.0.1

[severe zealot]

hold up

IPv4 Address. . . . . . . . . . . : 10.0.0.77(Preferred)

[terse pecan]

Haha yup so it is 10.0.0.1

[severe zealot]

AHA

darn i need login details

[terse pecan]

Gateways are always the first up of the network which is why you can only use from 2-254

Oh easy to look up

[severe zealot]

how?

[terse pecan]

Just search up your router manufacture/ model and search default login

Usually username “admin” password “admin” but could be different

[severe zealot]

it is different

should i search around my house for the manual?

[terse pecan]

What model do you have? Xfinity is starting to phase out there router control

[severe zealot]

Intel(R) Wireless-AC 9560 160MHz

i think

[terse pecan]

Haha no that’s the network chip

Router manufactures are like

Comcast, netgear, tp-link, asus,pfsense, and ubiquiti

[severe zealot]

hsd1.wa.comcast.net

is that it?

[terse pecan]

Ahh so it is a comcast router

[severe zealot]

guess so

[terse pecan]

Should be username admin password password

[severe zealot]

it worked!

[terse pecan]

If not then someone has already logged in and configured it to change the password

Perfect

[severe zealot]

oh wait its making me do a new password

[terse pecan]

Yeaaah definitely make that lore secure

[severe zealot]

should i just make it admin admin?

[terse pecan]

Preferable make it an actual password for security it can be whatever you want as long as you remember it

[severe zealot]

ok

ill make it one of my mom's passwords

IM IN

[terse pecan]

Haha perfect. You are already doing better than the Dutch government. They forgot to change the default password so anyone who new something about networking could login to their hardware. Anyways. You are gonna look to change the channel for Wi-Fi

[severe zealot]

in advanced, right?

[terse pecan]

I can’t remember off the top of my head but maybe??? Comcast routers are starting to get locked down so if you can’t find what you want you will want to log into the xfinity xfi web console through the xfinity website and sign in under the account holders name and password and mess with settings there

Ahh under connection,Wi-Fi

[severe zealot]

im there

[terse pecan]

Perfect next to 2.4ghz and 5ghz edit and make sure they are set to automatic. If you want to set it manually (recommended) you will want to download a Wi-Fi spectrum analyzer on your phone and see what networks are congested choose the Channel with the least use and set that as the channel for your Wi-Fi

That should put your Wi-Fi on a channel that is not as cluttered hopefully fixing part of your problem

[severe zealot]

um

im lost

i cant change any of the setting

mac?

you there?

@terse pecan

[severe zealot]

@terse pecan

[severe zealot]

i got it working thanks @terse pecan

[peak cloak]

did that fix the issue?

[severe zealot]

Yes, HOWEVER

most of my games end up making my router set its channel back to the shitty one, WHICH IS INFURIATING TO NO END

Like, i FINALLY got this issue figured out, but YET ANOTHER HURDLE

[peak cloak]

games do not have the ability to change the channel

[severe zealot]

I know that

Im just angry

I dont know whats causing it, but my router decides to switch back when i try to play certain games.

Granted, i can play the main games i wanted, but still

Oh alright then xfinity

Now its straight up setting it back immediately

[peak cloak]

considering you weren't able to ping at all when a game was running, I feel it's a much deeper issue than just changing channels

[severe zealot]

Ya think??

[peak cloak]

yes

[severe zealot]

Well, everything works completely fine when it wasnt setting itself back to channel 44

All games would work and the issue didnt happen

Until it switched back and the issue happened mid-session

[peak cloak]

if I had to bet, it's something with driver

[severe zealot]

I really don't think so

[peak cloak]

but yeah idk, why I hate wifi

[severe zealot]

It never does this at my dad's house

Works perfectly fine

[peak cloak]

different possbile conditions

hard to troubleshoot stuff like this

[severe zealot]

Yup

So apparently there is no way to stop the router from switching its channel

From my searching

UGHHHHHH xfinity why

[lean path]

https://media.discordapp.net/attachments/443298157938475022/1008917828163870750/unknown.png 😳

[little schooner]

chuck their router and put something like an edgerouter instead and buy an access point

[clear igloo]

and should I be impressed?

[vestal sundial]

Also channel rule ^^

[clear igloo]

lol, yup

[severe zealot]

im tryna fix this without buying new shit

[crude drift]

:/

😦

[lean path]

I'll share 🤝

[crude drift]

the normal conncetion speed in Türkiye

[clear igloo]

🤷‍♂️

[crude drift]

what

I'm not crying, internet speed went to my eyes

[clear igloo]

lol

[crude drift]

where are you from

[clear igloo]

USA

[austere acorn]

i plugged an ethernet into my ipod nano now it overclocks to 15gb of vram

[sudden kayak]

what model router

it should say on the back

it will be something like XB3, XB6, XB7, XB8 or similar

[rocky badge]

@peak cloak ms downloads are so slow

its a joke

[sudden kayak]

99% of the time it will auto select an appropriate channel and it should work fine

[rocky badge]

👍

[sudden kayak]

not sure if you're even supposed to be able to configure the channel but regardless, that is probably not the problem

[subtle estuary]

At least your ping is better (:

[thick minnow]

mans coming in here to flex on his internet

[subtle estuary]

What does 50mi mean it cant be the same 50ms ? because 50ms is pretty bad for such a good connection speed wise. I have 500mbps up and down and 1ms here in Sweden.

[rocky badge]

50 miles

2ms ping

[subtle estuary]

I have never noticed that speed test shows the distance from the server. Is that a new future or is just in the USA.

[rocky badge]

it's always been in there

[peak cloak]

it's approximate too

since your location will never be known exactly

@rocky badge I'm getting all sorts of new ads on insta now because of v6 geoip

ads of some ISP in Virginia

[rocky badge]

oof

[peak cloak]

it's not bad, it's just the ISP ad that was huh, interesting

[lean path]

used to compare your speed to every other test as well, so itd say "better than X% of the US" for example

[peak cloak]

everything else is fine

[lean path]

gotta

[rocky badge]

@peak cloak I installed a Windows Server VM on my server 🥴

[peak cloak]

for what?

[rocky badge]

rdp access

so i can have a desktop env to rdp into to do shit

[peak cloak]

I guess, why not just vpn in

[rocky badge]

if i take my desktop to uni i won't have another windows desktop

[peak cloak]

yeah but vpn into network to do stuff

need l2 access?

[rocky badge]

sometimes its easier

yeah

especially with big files and shit lol

[peak cloak]

currently experimenting with nvr software

installing https://frigate.video/

[rocky badge]

nice

[peak cloak]

shinobi and zoneminder kinda suck

[rocky badge]

i wouldn't mind milestone

[peak cloak]

shinobi is so weird, you have to go to like /super to do like superuser things like changing setttings

[rocky badge]

but $$

https://www.milestonesys.com/

[peak cloak]

I wanted to try out synology surveillance station

but budget

[peak cloak]

I see there is a free version

[rocky badge]

Yeah

[peak cloak]

but idk, frigate seems nice with a simple webui

[echo roost]

That looks interesting. Does it use GPU resource for identification?

[rocky badge]

server's SSD...not bad

considering 9 other VMs are also running on it rn

[peak cloak]

nope

[peak cloak]

CPU and edgetpu like a google coral

if it works well I'll get a coral

[echo roost]

Can it? I have a VM server with a couple of 3080's in that i would rather load up than the cpu

[peak cloak]

https://docs.frigate.video/configuration/detectors#cpu-detectors-not-recommended

Note: There is no support for Nvidia GPUs to perform object detection with tensorflow. It can be used for ffmpeg decoding, but not object detection

[echo roost]

thanks for the quick response. Sorry i should have gone and looked myself but appreciate it. Still interesting.

[rocky badge]

@peak cloak https://i.ryois.me/8iRVWY3778

TOTP Login requirement for Windows

[peak cloak]

this is for RDP?

[rocky badge]

Jumpcloud

yeah

[peak cloak]

using RDP gateway?

or whatever jumpcloud is?

[rocky badge]

no

straight up normal RDP

@peak cloak

gigabit is killing the cpu

[tawdry haven]

btw just telling you if you share this make sure you block your ip if you don't have a vpn on

[rocky badge]

idc

[tawdry haven]

nice

[peak cloak]

isn't that bad practice

no encryption

[rocky badge]

its not exposed to web

[peak cloak]

oh

I thought it was for some reason

[rocky badge]

@peak cloak

[peak cloak]

what is that to access phone

or is a phone vm?

[rocky badge]

JumpCloud

oh

quicktime player

Quicktime player can do a recording of the iphone over usb

[peak cloak]

oh interesting

[rocky badge]

so its just the preview window but i'm not actually recording

[peak cloak]

yeah with android I can use the adb interface to control it

[rocky badge]

it can do any ios or apple tv

apple tv over the network

macos can receive iphone screen over the network but not quicktime player

the airplay receiver on the mac goes full screen

ooh

[waxen scroll]

https://www.techpowerup.com/297837/asus-announces-the-ma-25-coax-to-ethernet-moca-adapter-with-support-for-2-5-gbps-ethernet?amp

Hawt

[lean path]

[gentle peak]

Hey all new on here, was wondering if anyone here is a networking guru I am having some issues with my homelab networking with pfsense and proxmox

[rocky badge]

@waxen scroll @peak cloak lol

have to register wired & wireless devices with resnet

[waxen scroll]

wowwwww

[sudden kayak]

i think my school had the same thing (don't remember if it was resnet or another similar provider, or something homegrown) but i think there was a way around it where you could get an alternative login for things like game consoles or chromecasts that couldn't easily be registered or joined

or maybe it was the reverse - a captive portal login but you could also register devices by MAC

i just remember there was some way around the really annoying bit

[rocky badge]

@waxen scroll LMAO LTT router

"If we get 100 Gig internet, we might need a switch with routing capabilities"

Just buy a fucking purpose built router and not a pfSense x86 box

[waxen scroll]

ugh

[modest mirage]

would love to help, but not a networking guru

[rocky badge]

omg lmao @waxen scroll

all of the interfaces lmao

They put int he new router and didn't even care about the other VLANs LMAO

oh godddd they switched to OPNsense

[gentle peak]

Thank you, for a quick rundown I have a PFSense running as a VM in a cluster of 3 proxmox servers, PVE, PVE2 and PVE3 where the pfsense is on, and this is all divided by HP2920 L3 switch, now my main issue is on my proxmox PVE2 I have 3 VLANS 172 (172.21.10.0/24) 173 (172.21.20.0/24) 174 (172.30.0.0/16) and they are all tagged for all ports on the switch at the moment just for diagnoses purposes, now for the actual issue, on the containers on the PVE2 the vlans are setup as en0.172 etc instead of tagging them on the network interface per container for easier setup via Ansible but the issue is for whatever reason they cannot ping 172.21.10.1 which is the PFsense (respective subnets per VLAN dont work either) but they can all talk to each other in their respective vlan/subnet even between PVE2 and PVE3 on another container, when doing an arp I do not get a hardware add for 172.21.10.1 (the gateway)

[rocky badge]

@waxen scroll LMG's networking is making me cringe\

[sudden kayak]

yeah pfsense is great but not at that level wtf

at some point i was like "they're doing this for the content they're not actually idiots"

I'm starting to second guess that

[rocky badge]

ngl I would put different departments/office spaces/buildings on their own vlan

not one big /16

[hollow marlin]

Thats nothing in terms of number of interfaces!

Also please don't tell me there is a FP video of them trying to do 100gbps on Pfsense....

[rocky badge]

yeah, i was saying the lack of vlans lol

not yet

[hollow marlin]

Where were the those screenshots from?

[rocky badge]

LTT got a new pfSense router

the yt vid isn't up yet but the fp vid is

it's got 25 & 10 gig sfps

it also has like a 20C 100 something TDP Xeon-D and 32GB of ram lol

they just need to get a real router

They were using pfSense so they could do a vpn but?????

they couldn't get performance they wanted from openvpn

Apparently they are now using zerotier

[hollow marlin]

I would assume they are not just using this for routing and this is also their firewall right?

[rocky badge]

yes

but like....cisco has anyconnect, fortigate has ssl vpn/forticlient, palo alto has globalprotect, etc...

[hollow marlin]

So not only do they need REAL hardware to route, they need a firewall that can perform at 100G if that is their goal

[rocky badge]

Yes

they currently have 10G

They were going to upgrade to 20 or 25G but linus shot it down because it was expensive

but they got the new router for "future"

[hollow marlin]

My point is 100G routing is $$, 100G stateful firewall is $$$$$$

[rocky badge]

Yeah

[hollow marlin]

lol

[rocky badge]

rip lol

[clear igloo]

Even more $$$ for 400G NGFW >.>

[rocky badge]

i don't get why they didn't do MTP/MPO for fiber

and ran individual fiber for each station

even though its legit in the same room

[clear igloo]

That would involve planning

[clear igloo]

You see the Fortinet 2.4Tbps firewall?

[rocky badge]

i don't get their obsession with SFP+ to RJ45

an actual DAC is cheaper than a SFP+ to RJ45

[rocky badge]

in a 4U too

[clear igloo]

Yah, 55Gbps of TLSv1.3 decryption

[clear igloo]

2 houses please 😄

[hollow marlin]

Damn...

[rocky badge]

800g ipsec, 70g app control ips av logging and sandboxing

@clear igloo @hollow marlin

this is how linus and crew treat their incoming fiber lol

[clear igloo]

🤢

[rocky badge]

i can't imagine the broadcast traffic

on a /16

[clear igloo]

Well you can't do VLANs cuz they the devil!

[rocky badge]

thing is...they do VLANs

but still have a huge /16 as their main network

[dry bronze]

/16 is weird but 100 devices on a /24 is the same broadcast traffic as 100 on a /16

[rocky badge]

they are using a ton of the /16 though

all networking, servers, workstations, etc

[dry bronze]

Yea that's pretty weird. A bunch of /24s would make more sense

[hollow marlin]

Looks like Juniper's only competitor is the SRX5800, and the 5600 being slightly worse. But they are not 4 RU chassis' lol

[rocky badge]

bruh

yeah 4U is impressive

[rocky badge]

Yeah

imagine if creator warehouse & LAB are on the /16

[clear igloo]

probably

[rocky badge]

all of that broadcast going over a p2p link

@clear igloo OH BRUH

This VM can see all VM traffic LMAO

10.0.10.10 is the VM

[hollow marlin]

Looks like LTT just uploaded the video on YT 🍿 Lets see how this goes

[rocky badge]

its seeing SNMP between 10.0.10.8 and 10.0.10.6

[clear igloo]

yup

it's going poorly so far 😄

[rocky badge]

i swear the vSwitch isn't in promiscuous mode

[clear igloo]

lol, you hope

[rocky badge]

bruh it was

i don't remember that

[clear igloo]

😄

[rocky badge]

huh

lmfao

[clear igloo]

who has 10.10.10.10?

[rocky badge]

ur mom

[clear igloo]

[rocky badge]

lol

fortiview mad

[waxen scroll]

linus is the reason so many people come in here like durrrrr pfsense for business!

[clear igloo]

pfsense on ancient hardware drawing 200w of power idle!!!

[rocky badge]

💀 200W

[waxen scroll]

200? no. 500-1000

[rocky badge]

my router draws 10W max

[waxen scroll]

gotta have a sweet GPU

[clear igloo]

mine draws like 50w >.>

[rocky badge]

left column bc the right column is fortiwifi

[clear igloo]

ah

[waxen scroll]

mine

[rocky badge]

i don't understand why are they are using pfsense

they are legit not using anything pfsense offers

i wonder how much that fw was

😂 😂 😂 😂

oh, get pricing

@waxen scroll @hollow marlin The router also has a 800W PSU

EIGHT HUNDRED WATT psu for a router

that probably can't hit 25g

[waxen scroll]

He's also buying new high end hardware more than normal

[rocky badge]

That's a $2k CPU

[waxen scroll]

A business would spec a router and use it 5 years

[rocky badge]

they'd probably never consider fortinet/cisco/etc because LiCeNsInG

[clear igloo]

too complex they said

[rocky badge]

💀

[clear igloo]

They used to have a Cisco 2821 router WAY back in the day

[rocky badge]

yeah

back when they contracted a network admin

[clear igloo]

Did they just say they have over 100 static DHCP reservations in their router......

[rocky badge]

yeah

[dry bronze]

I feel like enterprise gear would have a way better ui than pfsense

[rocky badge]

They used to have Windows Server DHCP but moved to pfSense doing DHCP

[clear igloo]

what ui? 😛

[dry bronze]

I doubt they'd be in cli/api

[clear igloo]

Most enterprise gear is CLI unless you go controller based stuff

[dry bronze]

Also quit calling me out. I'll use cli eventually

[clear igloo]

which adds much more cost

[dry bronze]

Pan panorama ♥️

[clear igloo]

spooky cli 😛

GUI and API stuff is nice though

[dry bronze]

Mainly just visualizing the ruleset and knowing where I'm making the new one

Nsx you have to use use the API just to apply a management cert

[waxen scroll]

Palo GUI is not sexy

Yet costs $$$$$$$

[dry bronze]

Not really used anything other than ancient ASAs. But I have no complaints

[clear igloo]

ASDM or CSM?

[dry bronze]

Asdm

The one thing I did like about it was grouping rules by interface

[hollow marlin]

@rocky badge I almost threw up when he didn't bother shutting down the old box and just pulled power

[rocky badge]

yeah

all just to plug it into a kill-a-watt

[hollow marlin]

Junos is based on FreeBSD as well and I can say that it DOES NOT handle sudden power loss at all

[peak cloak]

@rocky badge frigate is pretty cool

Just cpu detection is slow

and can't use gpu for acceleration

[rocky badge]

oof

[peak cloak]

needs a google coral

which is $60 officially, you I can't find it anywhere at that price

[rocky badge]

@peak cloak Apparently Windows includes drivers for vmxnet3 now

it worked right out of the box

[hard cedar]

hi, i was wondering what the best router i can get from walmart or best buy for a 2 bedroom apartment with 300mbps speeds for like 30-50$, im fine buying from like amazon or something and even ebay as long as it will deliver to CONUS by aug 24. The person its for is cheap as hell so they would much rather spend 30 than 50 but its fine if its 50 for a big upgrade. Pls ping for answers or if you need more info, thank you for helping!

[rocky badge]

@peak cloak @hollow marlin

lolll

[peak cloak]

https://tenor.com/view/homer-simpson-homer-disappears-bush-hiding-gif-3377649

we have admin rights at work

[rocky badge]

lol

Do you sign in as admin

[peak cloak]

no

[rocky badge]

ok thats better

[peak cloak]

it's regular AD

[rocky badge]

is your user a member of Administrators group locally on the computer

[peak cloak]

it's local yeah

[rocky badge]

oh

that's what i meant lol

[peak cloak]

oh

yeah it's a good ole admin account

[rocky badge]

my uni uses a program called "MakeMeAdmin"

[peak cloak]

interesting

[rocky badge]

https://github.com/pseymour/MakeMeAdmin/wiki/How-It-Works

[peak cloak]

honestly, I may use that on my PC

[rocky badge]

That way your account isn't always admin

[peak cloak]

@rocky badge I assume it's bad to l3 adopt unifi APs over internet?

[rocky badge]

i mean you can

8080/inform is encrypted

[peak cloak]

ah ok

[rocky badge]

I did it for a while

then i just deployed a unifi controller at every site

[peak cloak]

cuz we do that at work

[rocky badge]

yeah it makes sense if you're a msp or something

and you need unifi but don't want to use a unifi os router or have on site

[peak cloak]

@rocky badge have you messed with domain GPO?

[rocky badge]

GPO in AD? yeah

[peak cloak]

I need to figure out how to make all the computers be in the same timezone

never used AD GPO before

I should prob lab it

[rocky badge]

i think it'll have to be a registry GPO

[rocky badge]

i got rid of ad at home

[peak cloak]

I had it for a very short time when I had no clue what I was doing

[rocky badge]

i got rid of it bc i literally only own 1 windows device

and never really used it

[waxen scroll]

Lmaoooo

@clear igloo maybe extreme can sponsor them

[hollow marlin]

@clear igloo @waxen scroll I submitted feedback on a terribly written Juniper KB article a few month back and their documentation/KB team even reached out to schedule a call to discuss it. They butchered my diagram with one of their own, but other than that, much of my config example and descriptions are word for word.

Kinda neat seeing my wording in official vendor docs

[echo roost]

Nice one, i for one appreciate a clear diagram.

[hollow marlin]

They butchered it with a diagram done literally in paint, but a diagram is better than nothing. Especially in that KB topic

[echo roost]

I often end up searching one of my old wikis and find the equivalent of a finger painting, still helps.

[hollow marlin]

I mostly shocked that not only did they take my feedback, the even scheduled a call for additional input

[rocky badge]

@peak cloak

I think I packed enough ethernet cables

[echo roost]

Never, you will need either longer, or somehow shorter

couplers?

[peak cloak]

what's the silver box?

[peak cloak]

I was about to contribute to the vyos docs, but I never got around to it and forgot everything

all I remember it was with BGP and v6

[hollow marlin]

Was it with link-local peering we looked at a while back?

[peak cloak]

yeah I think so

[rocky badge]

thunderbolt 4 dock

[peak cloak]

it wasn't properly documented, had to dig though bug reports

and was broken

[peak cloak]

ah, I don't I ever used thunderbolt

[rocky badge]

@peak cloak

yes because the gold plated means better fiber performance

[peak cloak]

anything for the pristine audio quality

[rocky badge]

electrical boxes? what are those

[peak cloak]

not in the budget

[rocky badge]

lmao

so true though

[crude dirge]

So I’m a bit of a audiophile and I’m in some audiophile discord servers and 2 people swore that gold plated fibre optic cables sounded better because the gold I shit you not “makes the light go faster”

[unborn sluice]

for years, humans thought nothing can go faster the C (the speed of light)
but it seems gold plating helps

[onyx tulip]

Ok, I'm watching the latest router install video and getting slightly triggered.. anyone from ltt around know if you all use a dcim/ipam? If not, I can't recommend netbox enough

[peak cloak]

the video has all sorts of wrong...

scroll up to see more about it

and knowing them, probably not

[onyx tulip]

Idk about wrong.. maybe just not ideal. They're not a big shop

[peak cloak]

ehhh, they kinda are

bigger than the company I work at

and we have actual dual redundant firewall routers

not some jank pfsense

[onyx tulip]

hey I loved pf back when it was mostly free, if fit in an empty price/performance slot nobody else did. But these days they think way too highly of themselves and the stability has gone to the gutter so yeah.

[peak cloak]

pfsense has a place, but not at this level

[onyx tulip]

Id probably want to try vyos for them if licensing is an issue, but its been a few years since I've used it. You can't get better than arista imo but oh man $$$

[peak cloak]

nah at this point you want dedicated hardware

I like vyos, but it isn't fit here either

assuming they could even figure out cli

[onyx tulip]

Why is it a bad fit?

[rocky badge]

lmao

[onyx tulip]

Ah you said hardware. Yeah maybe, vpp/dpdk and all that has come a long way though.. id at least want to try it out to see if it could hang. Should be able to in theory but iI haven't seen much outside vmware really implement it well

[peak cloak]

you would want hardware built to specs, hardware acceleration, etc. Not just trying to push more CPU power, wasting money and time

[sly lark]

So my router/modem (it’s both) supports WPA and WPA2 only

No other ones
Can I use a network extender or something to turn it from WPA/WPA2 to WEP or WEP/WPA (if WEP/WPA is a thing) or no?

@ me answer

[tidal frost]

I think so. Is the goal here connecting an older device?

Ive got an old tp link extender i use when i need to connect a Nintendo ds or ps vita to my network since they cant see my main connection

[sly lark]

Yes

[sly lark]

OMG YES, YOU DO UNDERSTAND

[sly lark]

Does it work with turning wpa to wep?

Or wpa2 to wep?

[tidal frost]

Just plug it in and try

[sly lark]

I don’t have one or know what model yours is?

[tidal frost]

I dont know how it works exactly, just know that it does. Gimme a sec and ill link you to what ive got

[sly lark]

Thx

Amazon America

[tidal frost]

TP-Link AC750 WiFi Extender (RE220), Covers Up to 1200 Sq.ft and 20 Devices, Up to 750Mbps Dual Band WiFi Range Extender, WiFi Booster to Extend Range of WiFi Internet Connection https://a.co/d/cBWw2Tw

Pretty sure this is the one i use. Its in a box somewhere rn but im 99% sure this is it

[sly lark]

Do you still use it?

[tidal frost]

When i need to yea

[sly lark]

In a box where?

[tidal frost]

Remembers my config most of the time, easy to setup when it doesn't.

[tidal frost]

Uhhh the storage room downstairs i think. Its a shared space and its wayyy to late to go down there making noise rn

[sly lark]

Ahhh gotcha

I’ll take your word for it and call tplink tomorrow

[sly lark]

I was looking for something in the $10 to $15 range

$20 at most

Depending on specs

[tidal frost]

The RE105 is 20 bucks. Cant vouch for it tho. The re220 i showed you is only listed at 22 right now, which is less then i paid

May pull mine back out, see if it helps the speeds on my xbox in the bedroom. Or i could just re run that Ethernet cable.....had to undo it bc i needed the cable run for more important stuff

Honestly need to just get a smart managed switch for my living room but ehhhh thats alot of work. My server and main pc dont like being on the same connection with a basic unmanaged switch

[sly lark]

OG XBOX?

Sorry for caps

Would it work with like Wii or Wii U with the Ethernet adapter?

[tidal frost]

Series S. Not that far distance wise, but this apartment is very well soundproofed. So the modem being on the other side of the apartment makes the speed a bit slow in my bedroom

[sly lark]

Oh xbox series s

I see

Don’t you have like a living room or something)

?
Like in the Big Bang theory

[tidal frost]

Yes, which has a windows machine that has gamepass ultimate, plus remote play to the bedroom xbox

[sly lark]

Then you could just use Ethernet splitters or network switch

[tidal frost]

Cant use a basic switch with anything connected to my server.

[sly lark]

Wait wasn’t there this one ds and Wii thing that you plug into your router with usb and you could use for wep?

[sly lark]

Ahhh I see

[tidal frost]

Idk anything about that.

[tidal frost]

There used to be a Ethernet cable running across my apartment to the xbox, but when i moved stuff, i needed both of my long cables for the 2 machines in the living room (since my server doesnt play well with a regular switch i have on hand like i said)

Eventually ill take the $400 or whatever itll cost to properly setup my network and get better switches and off my comcast box and all that. But thats money i aint got rn

[sly lark]

I ain’t rich enough for that

I still live with my parents….

Imma just dm you something rq

[tidal frost]

@sly lark i was close. Ive got the same sku, but mine is re200. I don't really do dms sorry

[sly lark]

Even more expensive

[south crypt]

is anyone in here experienced with advanced networking that would be willing to help me

[peak cloak]

What's the question

Are we talking bgp advanced? Or like vlans advanced?

[south crypt]

so i have 1200 down fiber i own an amplifi alien from ubiquity everything is cat 6 cable but i am getting no more then 400 down through the alien i have verified that xfinity is indeed giving me 1200 down by going directly through the modem with bridged mode off

[meager ginkgo]

It heavily depends on the client device also

Like iPhones / Apple devices are not known for the best WiFi performance

or do you mean wired?

[dull pagoda]

hi im trying to get link aggregation working on a windows 10 boxs with a unifi usw-24-g1 but i cant get it working does annyone have a idea what it could be

[hardy python]

So I am assuming the amplifi is a repeater/extender for your network, if not I will cover contingencies.

1. If you have a repeater and you are wanting to expand your network, you need to place the repeater in areas where Wi-Fi speeds have lost 1/2 of or 2/3. Find your dead zones and place the repeaters semi-close to your router or perhaps other repeaters.

2. If you are using a Wi-Fi device, you need to be so close to the router to pick up the speeds you are wanting. Like with repeaters, they will not send out 1200Mbps, they will send out whatever they can due to frequency location.

3. I am sure this isn't a matter but to give some info CAT6 cables travel up to 55m before performance of 10Gbps decays. CAT6A provides 100m of 10Gbps. Make sure your ethernet controllers support 1Gbps or 1Gbps speeds. Some Ethernet controllers ports do not support certain standards.

Make sure you do a speedtest, speedtest.net, to confirm that you are getting 1200 down.

[hardy python]

So are you wanting Ethernet 4 and Ethernet 5 to be linked?

Just to make sure, do the ethernet connections come from different ISPs or no?

[dull pagoda]

Yea same isp same switch

[hardy python]

Why are you wanting to link them? You won't gain any performance nor speeds.

[dull pagoda]

My nas is also connected to that switch with 10gb so wanted a bit faster transfer speed

[peak cloak]

Dont you need to setup LAG on the switch

[dull pagoda]

When i just set it up in windows only it gives me a max of 1 gb not 2 gb trueputt

[peak cloak]

It doesn't increase bandwidth

A single connection will only get the max of a single link

[hardy python]

If your ethernet controller only supports 1Gbps and your network throughput is 2, you will only get 1Gbps.

To make sure that your ethernet controller is 1 or 2, go to Device Manager, right click on your network adapter, click on properties, and then click on the Advanced Tab. In the Advanced tab, you should see a scrollable list called "Property:". From there, scroll down until you see Speed & Duplex, and make sure it is set to the highest value.

You should get to this point

[peak cloak]

That's not the issue

Both interfaces are gig

[dull pagoda]

i see but there are 2 cables in my pc and 2 adapters

[hardy python]

That doesn't matter.

That isn't how that works

[peak cloak]

It's only 2gig aggregated

So you can have 2 1gb transfers

But not 1 2gig transfer

[hardy python]

Your network begins at the modem and router and from there you have two ethernet cables going to your computer. You will obtain the same speeds regardless of one or two because of the throughput being sent from the ISP directly hitting your modem and router. Typically if you have other hosts, you are cutting network performance down by a fraction depending on network usage.

[peak cloak]

They have a Nas on 10gig

[dull pagoda]

jep and the speed of that doent go above 1 gb

[peak cloak]

Yes and it won't

[dull pagoda]

i should get 2 gb to that

[peak cloak]

.

[hardy python]

Is the NAS on the same network or on a different network?

[dull pagoda]

the nas is connected to the same switch as the pc

[hardy python]

What speeds are you supposed to get from your ISP?

[dull pagoda]

1gb but im not trying to get more speed to the internet im trying to get more speed to my nas

[hardy python]

You will need to get an Ethernet-to-USB-C/3.1 or .2 that supports 10Gbps.

[hollow marlin]

Aggregation will load-balance traffic on a per-flow basis. This hashing means traffic with the same src./dst. MAC/IP will be sent over the same link.

In a LAG consisting of 2 - 1gbps link, a single stream (flow) will max out at 1gbps

[hardy python]

Yessir!

You can bridge from the host computer to your NAS with a ethernet to USB-C or 3.1 or 3.2 Forget which revisions support more than 10Gbps

That would actually work if you can buy an adapter

[dull pagoda]

okey if i understand it correctly than i am not able to get more than 1 gb of internal speed ???

[hollow marlin]

Not from a single stream no

[peak cloak]

Huh, didn't know that even 2 connections it will still be 1gig

[hardy python]

@dull pagoda Does your Network Switch support 10Gbps?

[dull pagoda]

yes

[hardy python]

Buy an Ethernet-to-USB-C or 3.2 adapter or buy a PCI network adapter that supports 10Gbps, and connect it to your network switch.

[hollow marlin]

Depends on the hash. Enterprise vendors allow you to hash not just the MAC/IP but also port values. This is actually crucial to pay attention to as in some situations you would get wildly different utilization. Same goes for ECMP at L3

[peak cloak]

I see

[dull pagoda]

cous this is my setup curently (yes i know paint)

[vivid wind]

do you know how to paint?

[dull pagoda]

no lol

[echo roost]

don't sell yourself short, i have seen worse paint diagrams with more important information.

[vivid wind]

lol

[grizzled forum]

Yo, I recently built my first computer and have been having problems with my hdd not being found by windows but shoing up as fully functional in bios, anybody willing to help me?

[vivid wind]

did you format it?

[grizzled forum]

cant

[vivid wind]

disk partitionar?

[hardy python]

Do you have the Media Creation Tool or the iso?

for Windows

[grizzled forum]

im not positive where i find that?

where can i check?

[hardy python]

What is on your HDD?

[grizzled forum]

as in size?

[hardy python]

Do you have any files in your HDD?

[grizzled forum]

No

[hardy python]

https://www.youtube.com/watch?v=nbGkPYtXtmA
@grizzled forum Watch this video

[vivid wind]

yea how much storage?

[peak cloak]

What sata mode is it in

Raid ? Ahci?

[grizzled forum]

I cant find that but its a Seagate barracuda internal drive

@hardy python Thats the way i set up windows yes

[hardy python]

If you haven't used it before, it should be ahci, I believe.

[grizzled forum]

I was able to make it a vhd but that is not what it is and it basically stores files on my ssd when i do that

@vivid wind it's 3.81tb

[vivid wind]

nice

i got a 4tb yesterday

ima install it lastetr

[toxic chasm]

On a Cisco catalyst switch, is it possible to have multiple VLANs on a single port (without bridging) so that a computer connected to that port can switch networks by changing its static IP?

I want to be able to;

Manually set the IP to 192.168.44.12 and be on VLAN 44

Manually set the IP to 192.168.20.12 and be on VLAN 20

Manually set the IP to 192.168.63.12 and be on VLAN 63

Just as an example

[peak cloak]

that's not how vlans work

I mean, technically you could have the switch detect the IP of the device and place it on the correct VLAN I guess

but I doubt that's a feature because it's pretty useless

[waxen scroll]

Make a new vlan.. 1337. Physically wire ports from 44,20,63 into the new vlan 1337 port

Put the PC in vlan 1337

@clear igloo and there's your dinner

[pliant leaf]

If anyone can help me with port forwarding that would be much appreciated.
I've been pulling my hair out for over a week and I don't know who I should talk to (ISP, Router Manufacturer, etc.).
I recently got a static IP from my ISP, which they SAID should allow me to port forward.
I've tried 2 different routers (Zyxel from my ISP, and Linksys) and configured them in much the same way.
I have made sure the ports are being listened to using the "NETSTAT -ano" command.
Network port testers say that the connection times out.

It'll make my day if anyone is at least able to figure out what is going wrong.

[rocky badge]

@peak cloak

esports pcs have wan ips

[waxen scroll]

I hope they're firewalled with something other than windows

[south crypt]

the alien is running my dhcp its from Ubiquiti

[south crypt]

no repeater either its a direct connect from my modem the only thing i use the modem from xfinity for is to convert the signal from fiber to LAN

[peak cloak]

Nice

[rocky badge]

yeah

the uni has a fw blocking inbound

[sudden kayak]

Xfinity doesn't have a 1200Mbps fiber plan that I'm aware of - are you sure you don't have regular cable internet? in any case, 400Mbps is pretty normal for wifi

@south crypt

there's probably nothing wrong with how you have it set up, you just might need to lower your expectations. I'm not sure which amplifi model you have but that sounds about right

speaking of Xfinity though... mid split hype

[lethal creek]

When I signed up for Xfinity when I moved last month, they promised me that they’d magically update my coax 1200mbps plan to symmetrical gigabit… I wonder if this is it…

Oh I just read the full paragraph lol that’s definitely what it is

[sudden kayak]

i mean, i don't think they're supposed to be promising that like it's happening next week or something 😬

but yes that's the plan down the line

[lethal creek]

They guy said it was slated for my area in July but it was postponed a month

[sudden kayak]

this is mid split - enables ~200Mbps upload

then in another couple years with docsis 4.0 you'll be able to get actual symmetric gigabit, in theory

that's all public information if you read ISP industry press outlets actually

just nobody seems to know to look there

but yeah the mid split upgrade is happening now with current docsis 3.1 tech

[lethal creek]

Anyways, speaking of Xfinity. Any plex gods around to help me out?

Setup my PMS at the new place. Port is forwarded on my Xfinity router for the device. Plex says it has full access to outside network.. but when I have someone stream remotely, it says it’s an indirect connection and forces them to 720p through Plex Relay. Any other settings I should be changing?

I’ve manually specified the same port

[sudden kayak]

i don't know plex well but is it possible that something has to be configured on their end to make sure it's connecting directly?

[lethal creek]

From my remote user? No, that shouldn’t be the case

After changing nothing, it works

I love windows

I love Xfinity even more

The best

[lethal creek]

Where can I find the most up-to-date info? All I have is the word of the Xfinity rep and an article from two years ago of them starting trials

[clear igloo]

I consume VLANs now?

[sudden kayak]

https://www.fiercetelecom.com/operators/comcast-focuses-mid-split-to-get-to-docsis-4-0-stalls-wireless-infra-plan decent overview

https://www.lightreading.com/cable-tech/docsis-31-has-lots-of-gas-left-in-tank/d/d-id/776094

https://www.lightreading.com/cable-tech/how-comcast-is-paving-road-to-10g/d/d-id/776103

but yeah if a sales rep told you that symmetrical gigabit was coming in the next few months that was a straight up lie

unfortunately sales is ... sales and basically gets a free pass to lie as long as they meet their metrics

my advice is to call back and say that you were told this was happening soon, and you feel like the sales person was dishonest, and you're thinking about cancelling

they'll probably give you a retention discount or at the very least give you a specific timeline for mid split for your area

[waxen scroll]

I fix that by buying fiber DIA

@clear igloo making an SSH scheduler algorithm today

API aint taking over yet folks

[hollow marlin]

@clear igloo @waxen scroll
Email from customer that peers with us as well as Cogent (who we also peer with):
"We are having major connectivity issues with services reached through Cogent and we need this issue addressed and resolved."

Thats it. No dst./src. prefixes or IPs, no basic traceroutes, nothing. Sure, Ill get right on that...

[clear igloo]

Yah, do the needful!

We're having problems and I need you to fix it, kthxbye

[waxen scroll]

I got you fam

I learned from ATT

Hello COSTumer. Please let us know when we can perform intrusive testing

<after testing> Hello dear COSTumer, the circuit cleared before testing. Have a nice day.

Simply "test" the circuit and say it looks good on your end

[pseudo blade]

I wish NBN co in Australia didn't have their heads up their backsides on this. https://www.itnews.com.au/news/nbn-cos-100-40mbps-demise-is-accelerating-584149

[sudden kayak]

oh yeah that's insane I've heard from AU friends that nbn is making all the wrong decisions for cost cutting reasons

[pseudo blade]

They're actively making it worse because upload speed is a "business feature" and they might be able to make a tiny bit more by gating upload speeds behind wildly inflated pricing

NBN's 1000/400 plan for home users as promised something like 10 years ago is now $230/mo WHOLESALE with 142:1 contention

So it goes for ~$400/mo

I doubt prices are coming down to earth on that in the foreseeable future

On the bright side my gigabit router is going to last a very long time

[analog bay]

Meanwhile comcast: how do you like your 700/24?

Hate how gig is 1g/35

[peak cloak]

meanwhile verizon, all symetrical

[analog bay]

I would go Verizon

Or even att

But Comcast has me by the balls because they are the only ones offering decent net

[peak cloak]

it's either verizon or optimum (atlice) here

[pseudo blade]

I'd kill for symmetrical

[analog bay]

^

[pseudo blade]

Perhaps not literally, but try me again after another two years of 50/20 with no real higher speed option

[analog bay]

It'd take a hit on download speed

If it meant that I'd have higher upload

[peak cloak]

optimum is now rolling out fiber and it's symetrical as well

only thing that sucks is the equipment

[analog bay]

My problem is only Comcast offered decent net, att only has like 16/4 and fios isn't offered in my area

[peak cloak]

oh and there is like nothing about ipv6 on optimum

verizon deployed it in my area like a week or 2 ago

[sudden kayak]

that's what we're talking about - improving upload speeds to like 600/100 or 1200/200

and within a few years full duplex with docsis 4

the actual provisioned speeds for those are like 20-25% higher to make sure you get the advertised speed even in the event of degraded performance

[analog bay]

I mean the way I see it it won't happen... Comcast has been pretty stubborn

Though I did hear we were going to see a bump in up speeds like mentioned above

[sudden kayak]

i mean, they wouldn't be investing massive amounts of money in rolling out the network capacity for it if they were just going to decide not to 😆

it already is happening in some places

[errant zealot]

I tried changing my MAC address thru my router gateway. I experienced about 0.70 download speed on my PC and 10 download speed on my phone (Mbps). We usually get 100-400 depending on the device used. I changed my MAC address and restarted + reset my router. This still comes up. It's a netgear nighthawk rax43

[peak cloak]

changing MAC of router?

[errant zealot]

The MAC address yes

[peak cloak]

yeah... that may cause issues

[errant zealot]

Shiiiii I was watching a trusted video on it and that's what they said would change the IP

[peak cloak]

it may

it all depends

how ISP authenticates devices on network

[errant zealot]

Well I have no way to tell, my router won't connect to the internet. I tried setting it up thru my nighthawk app and
✅ all cables connected
❌no internet connection

[peak cloak]

what's in front of router

ISP modem?

[errant zealot]

Yeah, spectrum modem

2020 model i think

Is there any way to get the internet up and running? Our area has also seen some really bad speeds across multiple carriers and ISPs as of recently

this is what my phone gets with verizon

[meager ginkgo]

It could be an outage.. have you checked with spectrum?

[errant zealot]

no outages reported in any cities near me

[meager ginkgo]

hmm. I’m not sure then

[errant zealot]

it was working beforehand -- just very slow and nearly unusable