networking

[thick minnow]

but also in most of europe wouldn’t it also be hard to run new cables in the walls

[opal pagoda]

same countries that make houses out of wood, cardboard and drywall

[thick minnow]

man i never said i like it here ok

[opal pagoda]

you realise our walls arent hollow

[thick minnow]

that’s what i mean lol

[opal pagoda]

to run new cables in walls you need this install tool

and this

[thick minnow]

ay man i don’t like it here lol

[rocky tendon]

is cable better than fiber?

[pseudo blade]

Lucidchart is great, draw.io is free and still pretty good.

[cold forge]

ended up using draw.io, a coworker recommended it

diagramming it hard :/

one thing I've never gotten good at

[pseudo blade]

You get the hang of it eventually.

[cold forge]

you say that, but I never have, lol

[pseudo blade]

I find setting a convention for how you model stuff in your diagrams makes it easier.

I draw hypervisors as a server with a container, and virtual machines are servers in the container. I limit detail so anything will fit readably on an A3 sheet unless I have to do otherwise. Don't draw stuff in with any detail if it'll change, just model some aggregate "other" for the segment.

No time to put every chromecast in, I have a life to live

[rocky tendon]

the 76 is really bad right?

[pseudo blade]

No

That's your latency when uploading at 200mbps

Expect degradation when maxing out your connection one way or the other.

[rocky tendon]

the 143 a few months ago was like 260 and the 76 was like 240 im not sure what happened

[pseudo blade]

There are ways to optimise it but tbh those numbers are comparatively acceptable

[cold forge]

yeah, there's definitely a skill to good diagramming

is there a way I can select multiple objects and say "they all connect to this other object"?

[pseudo blade]

Yes, that's grouping.

Not at a PC right now but it's a thing in draw.io/diagrams.net because it's called that now

there's also a container object you can put things in and move the container as one

[rocky tendon]

so if this is really good then why does my internet suck so much

[pseudo blade]

Probably other factors like the remote host/network instability that isn't captured in screenshot of a speedtest.

[rocky tendon]

okay, thanks!

[pseudo blade]

Peering perhaps.

[thick minnow]

try https://speed.cloudflare.com

[clear igloo]

I hope that's not AT&T fiber

[rocky tendon]

it is....

[thick minnow]

it will give more info

[clear igloo]

wired or over wifi?

[rocky tendon]

wifi

[clear igloo]

I'm too lazy to scroll up, lol

Ah, WiFi latency is going to be worse but unless you're in a heavy wifi environment I would still expect it to not be near that
I think I get about 40ms over wifi up and down under load on AT&T fiber myself

[thick minnow]

what dns are you using, probably not going to make it all that much better but sometimes 1.1.1.1 will give better peering

[clear igloo]

DNS is for host resolution, not ping time

[pseudo blade]

DNS does not change peering

[rocky tendon]

how do i check that

[clear igloo]

You'd need to change ISPs to change peering

or build your own ISP and peering network, lol

[thick minnow]

sry ur right

[pseudo blade]

Or a VPN to AWS and use theirs

[thick minnow]

i mean something else but i forgot the name

[pseudo blade]

Works in a pinch as long as your peering to AWS is OK

And it usually is, if you can tolerate the increased latency that will result in versus your ISP having good peering.

[rocky tendon]

so the jitter says 96.1 thats bad right?

[pseudo blade]

It's pretty poor.

[rocky tendon]

because i used to have like 1

what are packets

[pseudo blade]

Individual small pieces of data sent over a network.

[peak cloak]

DNS may just change initial lookup time

Can possibly lead to websites loading quicker

[thick minnow]

well i can explain what i meant, sometimes if you have a slow dns you won’t get the closest edge server

[peak cloak]

No?

That's achieved with anycast, independent of DNS

[thick minnow]

ok thx sorry

i’m off today ig

[pseudo blade]

Actually DNS choice can impact which host you end up talking to.

[thick minnow]

that’s what i thought

[peak cloak]

I guess it depends on the configuration

Some use anycast, others DNS based

[pseudo blade]

But it depends on what your DNS provider is doing and what a given service does for loadbalancing/caching.

[thick minnow]

ok

[pseudo blade]

It's not really that big of a deal though.

I'd worry mostly about response time of your DNS server.

[thick minnow]

i’ve noticed it more if there are a lot of localized servers

[pseudo blade]

I don't think google/cloudflare dns have caused me trouble ever

[thick minnow]

they do a pretty good job

[pseudo blade]

versus my ISP DNS implementing annoying government website blocks

[thick minnow]

i’m going to go learn anycast

[cold forge]

it's pretty neat. I implemented it for DNS in my homelab

[thick minnow]

what dns server do you host?

i like unbound

[cold forge]

I was using pihole + windows DNS, might switch it up though

[pseudo blade]

Eh, Windows DNS

I assume you have a domain then

Because if you do using other DNS sucks and if you don't Windows DNS is a bit of an odd choice

I just use Mikrotik's DNS server on my hEX. It's not great but but it's good enough for my current needs considering it's just me and a few devices.

It's very basic

[cold forge]

How's this?

[pseudo blade]

It's alright, though I'd ask why your switch and router are floating out there

[cold forge]

I mean, I could put a box around them I guess? lol

[pseudo blade]

If you have a container labelled "home" and they're in your home, I'd put them in there

[cold forge]

I just edited an existing template

[thick minnow]

jez

[cold forge]

nah. This is all in my home, I just have the home and infrastructure network seperated

there's actually a TON of vlans, but they aren't all represented here

[thick minnow]

i wana see a good graph of ur network

[cold forge]

here, this seems already sanitized:
https://pastebin.com/kLKbRpET

[thick minnow]

interesting

[cold forge]

the image I pasted is kind of the best I have atm. I'm not the best at diagramming

[pseudo blade]

Yeah your diagram doesn't model that very well if that and your yaml are supposed to be the same thing

[cold forge]

Not really - the diagram is more the physical layout of how things interconnect, vs. the logical

[thick minnow]

i’ll make one for my network

[cold forge]

I.E the firewall connects to the core switch connects to the switch on the infrastructure network

[pseudo blade]

I'd reduce your infrastructure section to a single icon if it's not going to have real detail

No point having it big if it says little

[cold forge]

yeah, fair enough.

I need an intern, they can do all this for me 😂

[thick minnow]

no redundancy :< so sad

[thick minnow]

how much u paying lmao

[cold forge]

hard to go real network redundancy in a homelab, sadly

[peak cloak]

Plus budget

[cold forge]

experience lol

[thick minnow]

ay man u should see mine

[pseudo blade]

CSR>CRS, diagrams look better if you stick to one type of line rather than switching from right angles to straight lines

[cold forge]

idk anything about that

[thick minnow]

lol

[peak cloak]

@rocky badge applied to be a network tech

[thick minnow]

deal

[cold forge]

it's my one real weak point, I have no diagrams in my documentation. I've asked for training and stuff but there just isn't enough time

[pseudo blade]

I use right angles for cabling and straight dashed lines for wireless.

[cold forge]

Oh yeah, you are actually close enough to take me up on that 😂

[thick minnow]

yes

[cold forge]

well if we can convince @short relic we are coold, we'd have a party! Lol

[pseudo blade]

lol I'd make you a nice one but I'd charge you for it

[thick minnow]

i’m actually way closer than u think bc idk where our isp has 2g available

[cold forge]

if I had budget, I'd pay for it 😛

[short relic]

What

[pseudo blade]

Armchair diagramming remains free

[cold forge]

you live close to us too lol

[cold forge]

Thanks! I appreciate it :)

I actually paid a friend a modest amount to create a logo for my homelab

[short relic]

I live in your mom's basement

[cold forge]

My mom has a basement?! News to me 😂

[thick minnow]

gorian when do i start lol

[cold forge]

umm... now? lol

[thick minnow]

ok so ima need root to all ur servers rn

[cold forge]

step one: befriend @pseudo blade and learn everything about diagramming that you can, but don't let them in on our super secret plan

[cold forge]

oh, right. The password is.... 1234

[thick minnow]

bet

[pseudo blade]

That's amazing, I've got the same combination on my luggage!

Well not quite I have 12345 but oh well

[short relic]

Been too long since I've watched that

[cold forge]

I'm just happy people get my reference

[rocky badge]

Nice, where?

[peak cloak]

At my school

[rocky badge]

nice

[waxen scroll]

What year are you?

[peak cloak]

Freshman

[waxen scroll]

Post the job requirements

[peak cloak]

nothing advanced, it's a student job

Job Description
Individual will assist network and voice engineers providing troubleshooting, installation, upgrade, and repair services on university owned data, voice, and WiFi networks. Work will primarily include Wifi and Ethernet cable testing, troubleshooting, repair, and network hardware replacement services. Individual is eventually expected to work independently with campus faculty, staff, and residential students to resolve network connectivity issues as they occur.

Qualifications
Knowledge of electrical, networking and/or cabling is required. Job related experience is preferred.

[waxen scroll]

Oh. Not complex

[cold forge]

Good start though! My first tech job was helpdesk at the college I was at

[peak cloak]

I already worked in IT as an Intern

I kinda still do work on and off for them, mainly web dev

but like my degree isn't even IT, it's mech engineering that I'm working on

[proven hound]

anyone have any experience with packet tracer?

[lone sun]

It traces packets?

[opal pagoda]

yes, among other things

[pseudo blade]

Unless you're trying to run a poll here just ask your real question.

[waxen scroll]

That's why I was asking. My place pays big money for IT interns but they don't do freshman

We also have them work, none of that get coffee stuff

[peak cloak]

Oh yeah, my internship in HS was pretty great. Got to actually do stuff

[bitter girder]

How do I redirect based on port, like example.com:1 -> 1.2.3.4:10 but example.com:2 -> 3.4.5.6:80

[peak cloak]

you would need to setup a reverse proxy

[bitter girder]

Is this not possible with SRV records?

[peak cloak]

nope

not redirecting

srv records exist only as a guide. Whether an application looks them up is up to them

minecraft java for example does

but like http(s)? no, you need to put in the port

same with like ssh

would need to know about your specific problem for a proper solution

[bitter girder]

So I want to confirm something, when you're in a web browser and you type in example.com, does it try to resolve for example.com:80?

[rocky badge]

@peak cloak I wanna get an AV job at my uni

They aren't hiring for any though :(

[peak cloak]

http default port is 80

https is 443

when you type http://example.com it will go to port 80

anything else needs custom

[peak cloak]

ik there is a production club here that does all the events and some people get paid for doing the AV things

[rocky badge]

I don't really wanna run it

I wanna configure/install it lol

[peak cloak]

I mean they do that too

someone has to set it up

[rocky badge]

ah

because ours has a get paid to run it but I don't want to do that

I am already way more qualified than any of the students already doing it lol

They were showing the students today on how to setup for karaoke in the student center and I walked in the room (was doing other stuff), and one guy asked "how do I turn on the TV manually" and then another asked "how do I plug in a HDMI device"

[peak cloak]

lol

[rocky badge]

I already know one of the ITS AV people and he knows me lol @peak cloak

The university is moving to QSYS

Because Crestron lead times are 1+ years

Most new buildings are just having several central Q SYS processors

They have an AV VLAN now for each building instead of each classroom being isolated

[peak cloak]

I see on the event centers they have creston controls

[rocky badge]

Most new AV podium racks now are:
AMX NMX encoders and decoders
QSYS touch panel
NEC displays
Panasonic or NEC projectors
a PTZ cam

and surprisingly they have a UPS on each podium that runs for like 30 minutes

This is a computing classroom lol

[rocky badge]

Yeah the big stuff is always Crestron

its planned well in advance the lead times are ok

[cold forge]

@drowsy fossil @opal pagoda fixed it! Seemed to be a combination of issues - the 10GbE NIC in my desktop seemed to be malfunctioning and I needed to enable L3 Hardware offloading on both of my Mikrotiks. I could have swore I had done that before

[rocky badge]

I love the dorm wifi so much

[cold forge]

(sorry for ping, just thought people might be curious i fixed it - thank you for the help!)

used your advice to help troubleshoot the issues - configured the desktop to connect directly to the router, bypassing the mikrotiks. Trying to configure the NIC for vlan revealed it was bad, then replaced it and got expected speeds, but still had issues when connected to mikrotiks

[unkempt sedge]

holy shi.t bro

[cold forge]

Was being throttled to 1Gb/s though :(

[unkempt sedge]

I get 2 mb per second 😭

with ethernet 😭

[cold forge]

Oof

You’re probably young. When you get to be my age I’m sure you have better options :)

[shy spade]

nice

[cold forge]

Thanks!

I'm happy I got it working

[cold forge]

anyone here work with Extreme switches?

[opal pagoda]

Great that you got it solved

[cold forge]

Yeah! I appreciate the help! Just took me a bit to find the time to implement your suggestion :)

[desert atlas]

anyoen can help me combine my two networks together?

not sure how difficult it is 😦

[faint bronze]

Yes that is probably possible and could be easy. If you share more details someone could help.

[desert atlas]

hmmm so i have NBN and a main modem downstairs, and i got my own nighthawk router upstairs, i have the nighthawk connected to the main modem through an ethernet cable

i current have 2 networks aviable in our household

but i wish teh nighthawk (upstairs) router acteded as an extender mainly, i jsut got a NAS and wanted to sorta existing in all netowrks not jsut nighthawk (the upstair router its plugged into)

it woudl also eb way better ot jstu haev 1 active network in the house

[pseudo blade]

Sounds like you're not using hardware switching or are using CPU routing

Mikrotik switches have limited throughput to the CPU

The CPUs also tend to suck

[waxen scroll]

https://abcnews.go.com/amp/US/mobile-breached-hackers-37-million-customers-impacted/story?id=96557559

Again???

[clear igloo]

yeesh

[waxen scroll]

i use google fi. same thing. no sensitive data needed

[peak cloak]

why would they need ssn

Seems stupid

[clear igloo]

credit check

especially on postpaid plans where you lease phones

[waxen scroll]

I dont lease phones, I just buy in full

I dunno what Fi does for lease

[peak cloak]

Ah makes sense I guess

Yeah I don't like the idea of leasing phone

[rocky badge]

@hollow marlin @clear igloo https://i.ryois.me/tKjdQOm2RI.png So i guess those sites don't have redundancy

[clear igloo]

lol, what's redundancy 😛

[clear igloo]

redundant supervisors, power supplies, uplinks, chassis, etc. is nothing but a scam to steal money from companies!!!!!
/s

[rocky badge]

Ubiquiti be like "we have power supply redundancy!"

*only via our proprietary DC power solution that can't cold boot a device

if the internal PSU dies, you better hope and pray that the device doesn't shutdown because you won't be booting it again

[clear igloo]

yup, lol

[thick minnow]

is it just be or does everyone have a urge to talk to every fiber tech you see

[cold forge]

Yeah, if you scroll up, i think i mentioned that, there was an issue with both my NIC, and hardware offloading. Could have swore i had enabled it previously, but idk.

[pseudo blade]

Are you using RouterOS v6? It has idiosyncrasies around it which are solved in v7 by leveraging hardware acceleration automatically

You can mostly just do things the normal way and it just accelerates it rather than being a completely different menu

[cold forge]

I was on 7.1 i think, went through and upgraded everything to 7.7 as part of fixing this

Part of what helped was finding the “details” option , because Google was not helpful in telling me how to even verify that hardware offloading was enabled

Ended up having to enable it via CLI, despite having tried to enable it previously. So idk

/interfaces/switch switch1 l3-hw-offloading=yes or something did the trick

Seems weird to me that it wasn’t already enabled

[pseudo blade]

Last I checked I didn't even need to do that but I didn't start with your config

[cold forge]

yeah, that's what I thought, so I'm not sure why I did

maybe something that got added between 7.1 and 7.7? I looks like they keep adding more HW Offloading support with each version

[pseudo blade]

It's all quite new

[cold forge]

I'm actually really impressed by MikroTik, just maybe not the best documentation and support yet

particularly for homelabbers who can't afford to pay for support

[pseudo blade]

NGL I'd still apprecicate a slightly less shit CPU in their CRS line

Like the 2/4 core ARM ones used in their newer home stuff

[cold forge]

yeah, for sure. I'm running the CRS310 for my core router and the CSR305 for a switch in my office

[pseudo blade]

They're pretty good for what you pay.

And once you consider L3 capabilities they start getting insane if you're OK with a few quirks

L3 switches worth using are generally not cheap

[cold forge]

Yup!

and once you get into 10Gb/s, everything is much more expensive

[thick minnow]

that cisco catalyst will make your wallet cry

[glass anvil]

I'm currently speccing out a network core overhaul. WE are deploying several WAPs and VOIP phones with PoE. Do my patch panels need to specify a compatbility or compliance with POE?

[tall zodiac]

patch pannels a generally passive so just check that they work with the right type of cable

[glass anvil]

These are going to be CAT6/A cables.

[tall zodiac]

then you would need CAT6/a compatible patch pannels

[glass anvil]

Yes but my concern is the PoE gradually wearing the panel. Is that really a concern that has been observed in practice?

[thick minnow]

i don’t see why there would be any issues, i guess it’s possible a really old patch panel could burn out due to the amount of power.

but unlikely

[glass anvil]

These are all brand new patches from Tripp-Lite/Eaton. The .5U 24-port panels.

[thick minnow]

should be just fine, i’ve never heard of patch panels wearing out is it a common thing?

[pseudo blade]

No, PoE is intended to be safe for existing ethernet cabling and equipment, unless it was made so shoddily the pairs are near shorted I guess

It's all low voltage and reasonably safe though I consider short detection to be a must anyways

[glass anvil]

Okay. These are going to be shielded and grounded panels anyway. Just wanted to be sure I was not picking a potentially inadeqate piece of equipment.

[thick minnow]

Does anybody know how to turn on Wi-Fi on IBM thinkpad T41

[glass anvil]

That should go in Tech Support

[tall zodiac]

just a question, why are you still using a laptop form around 2004

[thick minnow]

Windows xp

For cars

[tall zodiac]

ah

would reccomend to NOT connect that laptop to the internet

[distant wedge]

I'm an ex fiber tech, AMA

[thick minnow]

how much do i have to bribe you to ride along

[distant wedge]

It's a very boring ride believe me. I didn't do any engineering stuff, it was more just customer installs

no CO access

[thick minnow]

still interested

[distant wedge]

Well I mean is there anything in specific you want to know

[thick minnow]

gimme a sec

where you allowed to do sfp direct to a customers hardware

(no isp ont box)

[distant wedge]

Yeah, I did them on Sagemcom F@ST 5566's

If you mean direct to hardware though, no

Ideally we only ever touch the hardware we provide. Whatever the customer does after that is up to them. I've set up Sagemcom F@st 5566's with the removable SFP, and after I left, I'd have a tech roll sometimes the next day to the same address only to find out the customer broke the splice removing the SFP

[thick minnow]

i hear that’s why they don’t do it

and dirt

[distant wedge]

Well, everyone's got their own things they want to do, it's not up to me to decide, I just install the hardware

[thick minnow]

fair

[distant wedge]

A lot of the devices I've installed now have integrated ONT's so there's no removable transceiver anymore. People I've dealt with were like "wtf"

[peak cloak]

The reason for no direct sfp I think is that there is more than internet that goes over the wires

[peak cloak]

I hate the integrated, just give me a separate ont

[peak cloak]

You have tv, voice, etc..

[distant wedge]

You can literally just tag the VLAN and get TV, voice is a lil diff and I don't think anyone's actually found a workaround for it

At least that's what people do

I've seen them tag VLAN 25/26 and get internet/TV working, voice is a different beast

[peak cloak]

Yeah, but there is no official support because the ISP doesn't want to deal with it

[distant wedge]

Well yeah, everything at that point is YMMV

The people who do it know what they're doing

[thick minnow]

well yeah i understand it but i feel like if that’s what you are asking for you probably understand somewhat

[peak cloak]

Well then they also need to train support on it, etc

I'm happy with what Verizon does, you get an ONT, fiber in, Ethernet, voice, tv out

Router gets ip via DHCP, easy

[distant wedge]

The reason they provide integrated ONT nowadays is because they don't want to have to train techs on older ONT's. When I encountered an ONT that wasn't working, my van didn't have batteries or any replacable ONT's. I was instructed to remove the splice, inspect wavelength, re-splice with SC/APC and install the hub

Oh. We didn't do DHCP

PPPoE baybee

[thick minnow]

i think my isp will pull sfp for me if i ask they just won’t help with issues because of it

[peak cloak]

Well it's cost, 1 device is cheaper than 2

The really annoying part is when bridge mode is really horribly implemented

[thick minnow]

it also makes sense at scale if they have less devices to manage the better right

[peak cloak]

Problem is the best place to put a router is not the easiest to run fiber to

Verizon was early to the fiber game, so they installed the ONTs on the exterior and used existing coax to connect to the router via moca

[thick minnow]

i think that’s a trade of, my isp runs fiber to something like a serves room and then cat6a(they are offering shielded options soon i think) to where they want a router

[peak cloak]

I had a server rack so they just put a desktop ONT

[thick minnow]

i think i’m going to ask if i can get that, i really like how my isp is they are regional so they will just let you talk to the engineers if you have questions that normal customer service can’t solve

[peak cloak]

What they did was put a wall plate on one of the beams, so the fiber is split

So if I break the fiber going to rack which is like 6 ft of cable total, I can just get a new one and not have to call to resplice

[thick minnow]

they should make a hardware store for networking, and they rent out splicers and testing equipment

[peak cloak]

Basically this but with one fiber port

[thick minnow]

o ok

[peak cloak]

Just ask

[pseudo blade]

It's cost optimisation.

You're able to use a less dense layout for the fiber optic circuitry, cooling the result is easier...

I'm sure being one less thing to lose is also desirable for support reasons

[cold forge]

Is anyone familiar with extreme switches / extremexos?

my switch seems to be configured correctly, and the vlans configured correctly,, but I can't access any of the services - telnet, ssh, http - outside the subnet it's on. But it's pingable outside that subnet, which seems a bit weird to me

since packets not being routed correctly or dropping vlan tags would prevent ping as well

[cold forge]

as far as I'm aware - no

[pseudo blade]

VLANs are not a consumer feature. Either flash OpenWRT to something, change your planned network architecture to not require them or adjust your expectations and look at say, Mikrotik

[rocky tendon]

is there a perfered dns i should be on?

my internet is really random and until i get the ethernet set up im trying to find little things to help it

like yesterday it said i was connected to atlanta and right now im on north chicago

gaming?

oh

[peak cloak]

DNS won't affect latency

[rocky tendon]

found out, thanks!

[rocky tendon]

how do i change my computer onto the wifi extender and not the main wifi

[cold forge]

Honestly, just don’t use wifi extenders

[rocky tendon]

i kind of have too im alll the way across the house the extender is in my living room

[cold forge]

If you can, I’d suggest something more sophisticated. Ubiquiti for example

Multiple APs, one SSID

[rocky tendon]

too many words i dont understand lol

oh no im just looking for something temperary until i get my ethernet set up

[cold forge]

Ubiquiti is a brand. Wireless Access Point, often abbreviated to WAP or just AP, is the device emitting the wifi that you connect to. SSID, Service Set Identifier, is just a single wifi network

Basically, extenders suck because then I have multiple networks (SSIDs) to choose from. Good solutions will present a single SSID and transparently handle your device connection to different WAPs

[rocky tendon]

do you know how do get it on the extender and not the main

because i think im on the main and my computer cant reach that far

[rocky tendon]

do you know this?

[cold forge]

I don’t know

[rocky tendon]

okay

thanks for the help, Much appreciated !

[ornate jungle]

In general, WiFi extenders / boosters utilize bandwidth to operate, and add another hop to the connection, creating an additional point of failure. They're fine if you have no other options, but not recommended.
https://www.duckware.com/wifi#:~:text=6%2C or 11.-,Mesh / Extenders,-%3A These devices

That 70+ page Duckware article covers most things one would ever want to know about WiFi's nuances.

[rocky tendon]

so it shows how to change form 5 to 2.4

[cold forge]

This looks really interesting, thank you :)

Anyone have input on the new ubiquiti waps?

There’s the u6 lite, long-range, professional, etc

There each boat higher throughout up to 4,800 Mb/s… but they all only have a 1Gb/s NIC

[waxen saddle]

Yea I don't know why they are boasting such a fast speed when the most reliable uplink to the rest of the network is stuck at 1gb.

It's not like folks run servers wirelessly.

[cold forge]

yeah, it's weird

[sinful ice]

for all my ethernet wall panels should i run them to a switch or a patch panel thing. i dont where to even start with the patch panel or how it works

[cold forge]

You don’t need a patch panel, a switch would be fine

You can aliases redo it later

[pseudo blade]

Makes sense to me, once you factor in distance and noise it'll just get you closer to using the full gigabit uplink.

Offer a pro/non-lite version with a 2.5gbps uplink and you have yourself a product line

[peak cloak]

Best practice is patch panel

Leave some slack as well

It's also easier to punch down vs crimp connectors

[last stag]

Hello! Relative new to buying used but looking to buy an extra Google wifi mesh, is this decent deal: https://www.ebay.com/itm/224312248321?hash=item343a0d4801:g:3tcAAOSwMolgEPsI

Thanks

[last stag]

its used

[meager ginkgo]

I wouldn't put a google made router in my house even for free lol

AC 1200 is also a pretty low spec

[last stag]

lol, too late have 2 already

[last stag]

How about this: https://www.ebay.com/p/2305822392?iid=115675627375

[meager ginkgo]

That's better.. but I'd save up to get a different system if you have other AC1200 nodes

[last stag]

that might be complicated as I have 2 google mesh alreaedy

😦

[meager ginkgo]

It's not gonna help much extending your low-bandwidth mesh with higher end mesh

(if you mix and match them)

[last stag]

hmmm

So you reccomend getting the lower specced one?

[meager ginkgo]

I recommend neither lol

[last stag]

😢

[meager ginkgo]

If you want to have better mesh you're gonna need to upgrade the system

[last stag]

prob wont do that anytime soon

[meager ginkgo]

Something with wifi 6 would be significantly better

[last stag]

Need to get decent wifi everywhere in the house

[meager ginkgo]

I'd personally wait until wifi 6e/7 mesh systems come down in price and then upgrade

WiFi 6e/7 systems have a new 6ghz band which will enable higher speed/bandwidth meshing

[sinful ice]

i am only getting 100Mbps through the keystones in my wall. i dont know what im doing wrong, all connections have been checked and they are all right.

[meager ginkgo]

do you have a tester?

and is your gear gigabit?

[sinful ice]

i've been using my laptop as a "tester" and yes it is

[meager ginkgo]

what laptop

some laptops only have 10/100 ports

[sinful ice]

gf75 thin. its rated for Gb

[robust bone]

hello

my nest wifi point is performing poorly compared to my other google wifi points... all of them are plugged into the wall, but the nest wifi point is performing worse for some reason, any idea why/has anyone else had this issue?

[meager ginkgo]

have you went into the network adapter settings?

[meager ginkgo]

What's the construction of your home? Wood, concrete..?

Also what wifi point in specific

[sinful ice]

i have

[robust bone]

nest wifi point is performing worse than google wifi point

im right next to it

[robust bone]

mostly wood, basement is concrete iirc

[meager ginkgo]

Is the nest wifi in the basement by chance?

[robust bone]

these three are the google wifi points

[robust bone]

in my room

[peak cloak]

get yourself an ethernet test, they are like 10 bucks

[robust bone]

google wifi is in the basement

[peak cloak]

check if all the pairs are correct

[robust bone]

meanwhile this is the nest wifi point

[meager ginkgo]

have you tried moving the nest wifi point closer?

you may need to rearrange the wifi points

mesh can be very random haha

[robust bone]

to the basement one?

[meager ginkgo]

My recommendation would be just to move them around

all of them if possible

if you have multiple floors try to stack them on each floor if that makes sense

so like the main floor is on top of the basement wifi location

[robust bone]

do you think the main one should be nest and the mesh points should be google wifi?

[meager ginkgo]

Probably yeah. Nest Wifi is newer iirc

[robust bone]

alr

ill see when i can do that

thx

[meager ginkgo]

👍

let us know how it works out

[charred ibex]

if i have a mac and a pc and plenty of ethernet cables and a switch how do i go about remote displaying into the pc from the mac? can you do it without signicant lag?

[peak cloak]

remote desktop?

[charred ibex]

i just upgraded to windows 11 so im gonna try the built in one

hopefully that works with the windows remote desktop app on macos.

[peak cloak]

yes, windows remote desktop imo is the best

[pseudo blade]

Make a network containing the computers obviously, if you have 11 Pro you can use Remote Desktop else use Anydesk/VNC

[charred ibex]

hopefully theres little latency so i can game on it

[charred ibex]

idk how to do that 😅

[pseudo blade]

No that will end poorly, but if you must look at Parsec or Steam remote play

[peak cloak]

latency is not bad

[pseudo blade]

Latency is bad

[peak cloak]

not terrible..

[pseudo blade]

It directly impacts inputs when game streaming

[peak cloak]

maybe not an fps , but warthunder was playable

[charred ibex]

is that also hardwired?

[peak cloak]

it's over network, so it can be either, ethernet provides best results

but stream remote play works the best for games

[charred ibex]

why is there any latency on the windows one?

[peak cloak]

since with rdp there's some issues with how the curser works

[charred ibex]

whats the bottleneck?

[pseudo blade]

Playing games over RDP won't happen lol

Unless you want solitaire

[charred ibex]

why tho?

[peak cloak]

since warthunder needs a mouse delta, not a mouse position

stream remote play however does keep your computer unlocked

and will display to moniter, unlike rdp

[pseudo blade]

RDP doesn't allow hardware acceleration for games properly unless you're using on desktop Windows

[peak cloak]

I've done it...

[charred ibex]

wha?

why is it

shouldnt it just send the display?

[pseudo blade]

Because RDP doesn't use your display, it makes its own

[charred ibex]

ohhh right "headless"?

[peak cloak]

yes

[charred ibex]

and simulating a monitor breaks things?

[peak cloak]

steam remote play does use your display

and captures it

[charred ibex]

what if u dont have a display plugged in

[pseudo blade]

Won't work unless one display is connected or a dummy plug makes the OS think it is

[charred ibex]

cant i create a dummy one using a program or somethin?

[peak cloak]

no physical

gpu has to "outputting" something

[rocky badge]

I use Parsec

Parsec has a virtual display adapter that it can create a dummy display if none's plugged in

[pseudo blade]

Parsec is the best I've tried

[charred ibex]

separate but related question: how does the meta quest pro make multiple fake screens then?

[peak cloak]

never tried parsec

[pseudo blade]

Oh does it, and all the GPU acceleration works right?

[peak cloak]

thought it was paid

[rocky badge]

but Windows doesn't render a mouse if there's none present, so the workaround is either:
Keep a mouse plugged in or install a linked Wacom driver on their help desk

[rocky badge]

There's a free version

[peak cloak]

wdym

[pseudo blade]

It's free unless you use their servers right?

[rocky badge]

Parsec?

[charred ibex]

like u see those demos where someone has a laptop (1 screen) and on the headset they have a 3 monitor display?

[pseudo blade]

Parsec.

[peak cloak]

that's different

[pseudo blade]

Ah, they've went business

[pseudo blade]

Virtual display drivers

[rocky badge]

"Virtual monitors" isn't the virtual display adapter but multiple displays

[charred ibex]

even if its hardwired???

[peak cloak]

hardwire doesn't mean anything

it's still network (IP) based

[charred ibex]

yeah but my local network right?

[pseudo blade]

Why do you keep asking about hardwired as if it affects what software you use

[peak cloak]

I think they are confusing hardwire and local

[charred ibex]

yeahhh that

[charred ibex]

so what parsec does that windows remote desktop doesnt is it creates a properly working headless display?

which means u can run games w/ non-crap lag

[rocky badge]

Yes

[charred ibex]

but u have to pay for parsec monthly even if you have physically connected ur computers?

[rocky badge]

no

there's a free version

[pseudo blade]

Parsec has a free solution

If you don't care about multi-monitor

That said virtual monitors is on the paid tier as per that chart

[charred ibex]

i wonder how much data resolution wise u can push

because i have a 4k monitor and im plannin on getting a 2k ultrawide.

[rocky badge]

Multiple virtual monitors or a virtual monitor with a physical monitor

the basic, 1 virtual monitor for headless is free

[pseudo blade]

I assume it's to use a tablet as a second monitor or something

[rocky badge]

50Mbps is the listed max but you can go into the config file and edit it there's no limit

but it's a direct p2p connection when possible

so it can max your bandwidth if you want

[charred ibex]

hm

so its now a hardware limitation on the speeds of the ethernet ports + cables + switch

thanks for yalls help btw

ok i got it kinda working

cant see my mouse on it for some reason.

[charred ibex]

you have to have a mouse plugged into the pc for windows to show a curser...

[peak cloak]

that was mentioned

[charred ibex]

ahhh right

[waxen scroll]

Let's talk is a scam. Tell us the price

Let's talk means "lets figure out your revenue and change our price based on that"

[charred ibex]

isnt that how all business transactions work

[waxen scroll]

@rocky badge @clear igloo @hollow marlin god I hope I dont have to work at a company that calls war rooms root canals

About 10 years ago I had an employer accuse me of sabotage. I did a server upgrade that didn't go to plan and arrived to the office the following day to have my access stripped and was forced to attend root canals (Meetings where they dig hard and deep)

[clear igloo]

lol, wtf

[waxen scroll]

https://www.reddit.com/r/sysadmin/comments/10h4clv/employer_has_accused_me_of_planning_to_sabotage/

[cold forge]

So, I have an extreme switch that I have configured, and I can ping it from all vlans, but I can only connect to SSH/Telnet/HTTP from the same subnet, which seems odd to me

usually when I encounter an issue like that, it's a misconfigured routing issue and the system doesn't know how to route the replying packets - but in that situation, it affects IMCP packets (ping) as well

[waxen scroll]

my dood its been 5+ years since I did extreme. usually modern switches separate management from the rest of the system

in nexus they have a VRF called management

it needs its own default route

betting your switch is the same

https://extremeportal.force.com/ExtrArticleDetail?n=000006795

configure vlan mgmt ipaddress 192.0.2.100/24
configure iproute add default 192.0.2.1 vr vr-mgmt

see? the vr part

[cold forge]

Yeah, extreme seems to be the same way, I'm just unsure how it's supposed to be configured? I have VLAN 10 set aside for network management, and I made a new VRF named "NetMgmt" that I tagged for vlan10, and then added it's IP to, and I can connect to it over ssh/telnet/http for devices on the same subnet/vlan

but not devices on a different vlan

you can't assign ports to the default Mgmt VRF, and you can't change the VLAN tag on the default "Mgmt" vrf away from 4095, which is why I'm a bit confused

I want the IP of the switch to be on VLAN 10, not on 4095

[waxen scroll]

you're using a random port on the switch to manage it and not the dedicated management interface?

[cold forge]

Yes? Curious what the normal use-case is here. Do you just create a physically separate network to connect management interfaces too?

and i wouldn't say "random port" as I'd rather just have the IP available to anything that has access to that VLAN

rather than port-based security

[waxen scroll]

In regular circumstances yes but you dont have to. You can manage it using other ports with another vlan. That switch just needs an IP in that vlan. Cisco calls that an SVI. IDK what extreme calls it

[cold forge]

the port that is physically tagged for that VLAN is the 1Gb SFP uplink to the core switch

I apologize, I'm still a little confused. I posted a crappy diagram of my network earlier, if that helps at all:
#networking message

[peak cloak]

Could there be some remote management setting?

Where it blocks anything outside of the subnet

[cold forge]

You can see where the extreme switch falls into my network topography, and uplinks to the MikroTik CRS310

[cold forge]

this is what I've been trying to figure out

[waxen scroll]

What's the port configuration look like for the extreme side of the mikro link?

[cold forge]

My plan is that I have VLAN 10 set aside for all the management ports of network devices and then use the firewall to limit access.

[cold forge]

ah, give me a sec

[waxen scroll]

maybe its better if you just pastebin the whole extreme config

or however, idk if pastebin is deleted because of bad mods

[cold forge]

maybe - I'll have to walk downstairs and poke it, I don't think it's accessible atm

before I do - I'm still a bit confused

it's my understanding that normally usable vlan tags are 0-4094

[waxen scroll]

it varies between vendors. 0 is not a thing, probably starts at 1

[cold forge]

but iirc, the MGMT vrf for the extreme is vlan 4095, and you can't change it, and you can't normally assign it... so what is the intended method of managing switches like this? Just have a terminal server or something?

[cold forge]

ah, right, I meant 1, sorry

[waxen scroll]

the intended method is to plug the dedicated management interface into a management network

[cold forge]

I mean, I guess I could just setup an access port on one physical port, then plug it into the management port? Lol

[waxen scroll]

you can, sure

[cold forge]

it's a homelab, so I don't exactly have a lot of extra switches laying around to create an entirely seperate network just to manage 4 or 5 switches, lol

[jolly galleon]

Hey, sorry for "disturbing" the thread so far, but can some off you maybe help me with my portforwarding problems?

[waxen scroll]

my best guess is that since 4095 is not accepted as an allowed vlan, they carved out 4095 to be used locally in memory so that its not conflicting with the rest of the switch

[cold forge]

yeah, that's what I basically thought too, just wasn't sure how they intended it to be used

Welp, there’s a finger in my second picture, so i can’t upload because “explicit”

Talking in these servers is exhausting. I shouldn’t be spending my time fighting a dumb bot that abounds with false positives

[waxen scroll]

yeah, im not a fan

they need mods who are actually active in the community and quit the BS with the bots and slow mode

I dont know why one of the least active channels needs slow mode when other more active channels dont

[cold forge]

Seriously. Makes me feel like i just need to avoid discord and pick up drinking for a while

[waxen scroll]

I almost miss how wild west IRC was

[cold forge]

I just wanted to share a picture of the management’s ports on my switch. But because there’s fingers in it, that have - you know - skin colors, it’s flagged

And no human will ever see it, to manually unflag it, and they won’t be affected because they are exempt, so fuck us i guess

[waxen scroll]

I keep telling @clear igloo to pressure them to ban the mods from this chat and make him the mod

[rocky badge]

oh hi we have that same switch lol

[waxen scroll]

fine. YOU help him fix it

[cold forge]

[rocky badge]

idk about your problem though

[clear igloo]

I don't wanna mod

[cold forge]

@waxen scroll i do appreciate the help!

[waxen scroll]

I used extreme extensively over 5 years ago but 0 use since. Most of my skills are gone

[rocky badge]

@clear igloo I wonder how much ITS would murder me if I put Parsec on a machine to remote into it outside of the university network

[clear igloo]

Do it!

[waxen scroll]

@rocky badge if you even got past our FW we'd fire you

[cold forge]

I triggered a security investigation because i asked for the FreeRDP website to be unblocked

[rocky badge]

ngl we just want a server in ITS's data center

and statics on our machines

[waxen scroll]

we do a block all approach and all 80/443 is forced into a proxy

[rocky badge]

We are tired of chasing after dynamic ips

[waxen scroll]

[waxen scroll]

ok so heres the secret

take the initiative. dont ask. tell.

open a ticket for static IPs

if the push back from their end even happens oh well

otherwise they'll just do it

this is how you can get extra perks / access in any company

too many people just dont ask... or they ask their coworkers or boss "can we?" and get IDK and dont do anything about it

[rocky badge]

bruh all of the ways to submit a static IP/reservation form are not working lol

[waxen scroll]

is it service now?

[rocky badge]

topdesk

[waxen scroll]

idk anything about that one

what do you mean not working

[rocky badge]

ugh I hate systems that use a generic error to cover all lmao

so it might either be deleted or no perms to submit the form

[waxen scroll]

What you do is email the help desk and put in there need static IPs "please forward to network team" and give as much detail as possible.

[rocky badge]

also for fw exemption

[waxen scroll]

they'll be happy to get rid of your ticket as soon as possible and give it to the network team

[waxen scroll]

I can tell all of their IPs must be public lol

[rocky badge]

They are

[waxen scroll]

my work we have to fill out all this crap about NAT and all that

[rocky badge]

The PC I am using rn

[waxen scroll]

man, it must suck to manage the firewalls in a uni network

[cold forge]

Man, I wish MikroTik had more "traditional" switch options

they have an 8-port SFP+ switch, and then for slightly less than double the cost, it jumps up to a 24-port SFP+ switch
https://mikrotik.com/product/crs326_24s_2q_rm

but it's still $600, which I shouldn't spend atm

oooh, although the provider I normally buy from is selling it for $100 off the MSRP

[waxen scroll]

sus

[cold forge]

Nah. I've bought 3 other MikroTik products from them and they work great

https://www.streakwave.com/mikrotik-crs326-24s-2q-rm-cloud-router-switch-2x40gb-24x10gb

[opal pagoda]

not bad not bad

[cold forge]

my current top-of-rack 10GbE is this:
https://www.servethehome.com/turbocharge-the-quanta-lb6m-with-brocade-turboiron/

[rocky badge]

It's a Cisco firewall idfk what one though lol

I think its ASA

[opal pagoda]

how much did you pay for it?

[waxen scroll]

I dont have a home lab xD

[cold forge]

I don't remember now, it was years ago, lol

[opal pagoda]

i remember that few years ago ebay was floded with them

[cold forge]

but the person I bought it from had already flashed it with brocade firmware, so that was neat

[waxen scroll]

oh my god. I hope not

[opal pagoda]

i hate that some switches lock ports
like bruh they are already there

[waxen scroll]

ASAs are so bad its a meme

[cold forge]

but I like the idea of homogenizing my network

[rocky badge]

"We looked for firewall vendors and found Cisco to be the superior product"

[cold forge]

right now, I have some mikrotik, some netgear, some hp, some extreme, this quanta/brocade hybrid, possibly a few other things

[waxen scroll]

tell them someone in enterprise called them incompetent

[cold forge]

having just Ubiquiti for wireless and MikroTik for everything else but the firewall would be nice

[rocky badge]

I did tell you about the time a firewall was causing latency spikes right

The quick solution was to take the building off of the firewall lol

[waxen scroll]

no, but I believe it. probably because the internal ethernet lanes got overloaded

[rocky badge]

Well no, the first solution was to reboot the firewall 💀

Then over the weekend they said fuck it and took the building off the firewall

[opal pagoda]

as every first solution is

[waxen scroll]

they have ~4 ethernet lanes in circuitry which it uses to pass data to other modules like firepower

if that gets loaded then its uh oh

[rocky badge]

This is why I want static IPs or something bc we have like 4 IPs in this project and its a pain when they change lol

[waxen scroll]

why cant you use dynamic DNS

[rocky badge]

We could, but we don't have a domain for that

[waxen scroll]

with ipv6 dynamic DNS is practically required

[rocky badge]

So its either a ticket to ITS for dynamic DNS or static IP

[opal pagoda]

just use some free domain service like freenom

[rocky badge]

I'd rather not for this project

[waxen scroll]

are you sureeeeee its not dynamic? the AD hostname of the machine should auto update with no action from you

[opal pagoda]

understandable

[rocky badge]

It's not AD joined

[waxen scroll]

lul

[rocky badge]

And yes its dynamic

lol

It's always in this same /23

but it changes around in the /23

[thick minnow]

how do you get 1000+ mbs bc i saw a company advertising 50 mbs so idek how to get 1000 mbs

[waxen scroll]

whats the lease time

[rocky badge]

3 days

[cold forge]

what do you mean?

[waxen scroll]

and it changes while still connected?

[rocky badge]

oh, no if it stays on its fine

[cold forge]

simply put - you pay for service from an ISP that is offering 1000Mb/s+

[rocky badge]

but if the machine is off it'll get a new IP

[thick minnow]

on avg how much do you pay for 1000mbs

[cold forge]

that super depends on a ton of factors. Myself, I was paying around $70-80/month for 1Gb/s symmetrical fiber, but I upgrade to 2Gb/s

but it depends on things like what competition is available in your area to incentivize companies to offer better speeds, what percentage of people are paying for it to share the cost, what infrastructure in already in place that an ISP can take advantage of to lower the cost, what companies are in the area using high-bandwidth plans from ISP to me it worthwhile for them to invest in the infrastructure, etc.

[waxen scroll]

@rocky badge I recommend a new school

you dont want to learn IT stuff there

[rocky badge]

lol

[cold forge]

no ISP will find it worthwhile to run 10Gb/s capable fiber to server a community of 3 farm houses that want to pay $30/month

[thick minnow]

i think i used to have fast internet but they replaced an internet tower with a water tower

or something

[cold forge]

on the other hand, if you have a large tech company that wants to pay a few thousand or more a month, with a one-time $20,000 cost to run the cables, and they can make some extra money back selling extra bandwidth off to the local community, you'll have better luck

2Gb/s is a bit spendy here. 5Gb/s is available, but currently hundreds of dollars a month. And the fact is - most people don't have the infrastructure to handle anything over 1Gb/s

[thick minnow]

i just dont want 20mbs man lol

[cold forge]

your wireless devices certainly can't do anything with it. The closest you get as a consumer is some routers that have a 10Gb/s port on them, but there's not really any consumer switches running at 10Gb/s, so the best a non-technical consumer can do is some super-expensive "gamer" router with a 10Gb/s uplink and 1 10Gb/s port and hope they bought a desktop PC with a 10Gb/s port on it

all fairly rare in the consumer market still

the other option is to do what I did and get a bunch of commercial/enterprise gear and cobble together your own 10Gb/s network, but it's much more expensive and/or complicated

[thick minnow]

put that in non-internet knowledge

pls

[cold forge]

MikroTik is relatively cheap by comparison to other options, but very much more complicated

[cold forge]

TL;DR:
it's really expensive to get over 1Gb/s and there's not a lot of hardware you can buy as a consumer that supports those speeds

[thick minnow]

is 500mbs good

for gaming

[cold forge]

tbh, anything over 10Mb/s is generally fine for gaming

the majority of the time, gaming is latency bound, not bandwidth bound

[thick minnow]

one of my friends had 400 ping on rocket league on a good day lmao

[cold forge]

Yeah, that's latency, not bandwidth

and latency is not so simple as buying a "better" plan from your ISP, unfortunately

[opal pagoda]

They totaly can put antennas up on water towers btw

[cold forge]

okay - got my extreme switch, did a unconfigure switch all and starting from scratch

now, as far as adding the management port to VLAN 10 - what is the best way to do that?

[peak cloak]

The whole physical connect management port to access port?

Untag vlan 10 on that access port?

[cold forge]

well, I just want to be able to access telnet/ssh/http for switch management from that VLAN

https://extremeportal.force.com/ExtrArticleDetail?n=000006795

Switch management is not restricted to the MGMT VLAN, the switch can be managed by any VLAN
does this mean that any vlan should be able to access the IP assigned to the Mgmt port, or that any IP assigned to the switch on any vlan should be able to access management functions? It's not entirely clear

what I tried already was creating a new VR named "NetMgmt", tagging it with VLAN 10, giving it the proper IP, and then telnetting to it from a different VLAN (i.e. VLAN 20). The IP was pingable, but I could only telnet to it from the same subnet/vlan and not from a different one

should I instead give the IP to the the management port tag VLAN 10 on the uplink port, and then it should work?

[cold forge]

Nope. tried that - added uplink port, enabled it, added IP to the mgmt port, and couldn't talk to it at all

give IP to the vlan, and I can ping it, can't telnet outside of vlan

but the switch can ping IPs outside of it's own vlan/subnet, which tells me it's probably routing correctly and just doesn't want to let things connect via telnet

is there a default access profile when none is specified perhaps?

[cold forge]

WTF

when I add an IP address to the vlan on the switch of the vlan my laptop is on (VLAN 20), I can telnet to the IP of the management vlan on the switch (VLAN 10)

but if I remove the IP for VLAN 20, I can't telnet to it's IP?

[waxen scroll]

Yeah

Don't remove the ip of vlan 20

The switch can't route to vlan 10 because there's no ip in vlan 20

[cold forge]

but it shouldn't be routing in the first place

the MikroTik is doing the routing, and if I do a traceroute, it's routing properly

so, a packet should go from my laptop, to the mikrotik CSR310, then the mikrotik routes it to the IP on VLAN 10 on the switch

having to have an IP for every tagged vlan on every tagged switch is unrealistic and unmaintainable

[waxen scroll]

Then your mikrotik is missing static routes

[cold forge]

it's not - that's what I'm saying

I can ping the IP on VLAN 10 on the switch fine. If the routing wasn't working, it wouldn't ping

and if I do a traceroute, it's correct

[pseudo blade]

I'm going to guess that your Extreme switch's default gateway is not set or doesn't know how to reach vlan 20 via the vlan 10 interface

[cold forge]

here's what I see when I do a traceroute from my desktop:

1. Mikrotik VLAN 20 interface (default gateway for VLAN 20)
2. Extreme Switch VLAN 10 interface

what I would expect to see if the extreme switch was routing internally:

1. Mikrotik VLAN 20 interface (default gateway for VLAN 20)
2. Extreme Switch VLAN 20 interface
3. Extreme Switch VLAN 10 interface

I guess what's weird to me is this:

if routing just is incorrect, I'd expect ping wouldn't work.
if routing worked but VLANs were not tagged directly, I'd expect that tcpdump would see the traffic being routed to it, but then drop or mistag the reply packets, resulting in a failed ping

[hollow marlin]

You would not see multiple hops on the device performing the routing because it's destined for itself

You're first example of the 2 hops is correct

[cold forge]

I'm not seeing either of those scenarios. What I'm seeing is, the switch can both be pinged and ping across multiple vlans just fine, but not be connected to unless there's a configured IP on the second VLAN

I know that no one runs /23 on all their subnets just so the first 100 IPs can be configured on switch interfaces

so, there's a different issue here. If the only explanation was "the switch is routing from VLAN 20 to VLAN 10" then the expected behaviour is that i can't ping VLAN 10 on the switch when I unconfigure the IP on VLAN 20 - but I can

I just can't telnet

[hollow marlin]

What do you mean exactly by this? What IPs are you assigning to the VLAN interfaces?

[cold forge]

I mean, if you had a network with 100 switches, and each switch trunked 100 vlans - you wouldn't expect to use 1000 IPs just to give each switch 100 IPs - 1 for each vlan

[hollow marlin]

Yeah there would be no need in such a case

[cold forge]

right, that's my point. So it's clearly not "expected" behaviour

[hollow marlin]

It's hard to say whats going on without configs.

[cold forge]

so, the problem is, if we go from "extreme does x by default, that's your issue" to "describe your entire network so we can evaluate it to see what the issue is", that's a lot of work. Then people want the configs from the firewall, the core switch, etc. Everything in between. And then I have to spend 3 hours explaining what I've already tried, or why the first 500 things in the config aren't relevant because I've already tried all 10 variants each of config options A, B, and C, and it's a whole thing. Not to mention I need to make sure I got through each config and sanitize it

[robust bone]

didnt have to do it

apparently the wire was faulty, so i just replaced the wire and im getting the full speed

[hollow marlin]

With network engineering being my career, configs are always a must when tshooting or its a guess that just wastes time by going down unrelated rabbit holes. The configs do not have to be the entire config, just the pertinent statements. I've spent hours back and forth with large enterprises trying to fix an issue that I was able to fixed in a minute of receiving the config.

If its VLANs and routing, just the VLAN, interfaces involved and L3 statements are all that is needed. It could be something as simple as overlapped subnet on the L3 interfaces or a mismatch on ingress/egress tags. But no one can say for certain without basic configs

[cold forge]

Fair enough. I just get tired of spending hours on someone nitpicking something completely unrelated to the issue or something.

[near oxide]

How to fix Youtube buffers all the time on 300mbps on all of my devices. My ISP is not even trying to help me it always sya that to restart my wifi router but it does not work.

[inland leaf]

What’s the issue with the B550-F motherboard. Got it brand new the Ethernet drivers don’t work. After installing the drivers it just uninstalls itself after a shutdown. Been seeing this error a lot happening to other people but there’s so permanent fix.

[clear igloo]

That's really odd, is it just the B550-F line that has this issue?

I've got an X570-E and had no issues like that

[inland leaf]

I don’t know. I upgraded from the b450f and had 0 issues with it. But ever since I got the b550f it’s been a terrible experience

[clear igloo]

What NIC type (Intel/Realtek) does the board have?

[inland leaf]

It sometimes doesn’t boot up properly, says can’t detect valid boot drive, sometimes freezes in the bootup screen 3 times in a row etc

[inland leaf]

Intel

I know my hardware is working because they worked before I upgraded

[clear igloo]

Hmmm, you could try getting Intel drivers from Intel themselves and bypassing Asus
As for the others, I assume this is all on the latest BIOS?

[inland leaf]

I haven’t updated the bios yet. And I’ve tried to install them from intel too

[opal pagoda]

does ethernet work without you manually installing drivers?

[clear igloo]

I'd at least give the latest BIOS a shot to see if that helps with the other issues but the NIC issue is still perplexing

I'd hate to say do an RMA with Asus x.x

[opal pagoda]

to me it looks like windows problem

[inland leaf]

No, when I plug in the Ethernet it’s not even recognising it. For the past few days I had to keep uninstalling the drivers , installing them again and restarting my pc. And then eventually I’d get lucky and it would work. But then the next day it would uninstall itself then I have to restart the process. But yesterday it hasn’t been working at all

[inland leaf]

Nah gonna refund it back to Amazon then buy a different board

[clear igloo]

Yah, that's what I would do at this point, something is definitely screwed up

[inland leaf]

Really, I’m on the latest version of windows

[opal pagoda]

try doing a clean install

[clear igloo]

I would do a reinstall repair before a clean install just to see if that helps

[inland leaf]

I was thinking that too

[inland leaf]

How do I do the repair

[clear igloo]

Pull down the ISO and mount it and "reinstall" but keep apps and files

Mount it within Windows itself, not on a USB

[inland leaf]

Like rn I just tried to restart my pc , it’s stuck on the booting screen so I gotta force shutdown my pc

[clear igloo]

Yah, a clean install might be good then especially if it's relatively new and not fully setup

[inland leaf]

Alright so I should do a clean install & update bios to see if that works?

If not refund it back to Amazon and get a new board preferably msi

[opal pagoda]

yup

[inland leaf]

Which one do I do first you tbink

[clear igloo]

BIOS first

[inland leaf]

Okay

I’d love to but it keeps sending me to the bios when I try boot up, sigh this board is creating too many issues

[inland leaf]

Even after updating bios and clean install of windows, @clear igloo

[clear igloo]

time to get new board then 😦

[inland leaf]

Great

[thick minnow]

Can anyone ask me what should i disable or enable to increase speed internet ?

[clear igloo]

Apply money to ISP wallet is about the only real answer
If you're on DSL, move closer to the DSLAM

[waxen scroll]

prove us wrong with a packet capture on the switch port from VLAN 10 to the mikro that your routing/firewall is working

if the telnet traffic arrives and the switch does not respond, yet everything else in vlan 10 works then its probably a stupid policy or something

code bugs are also possible

i've had crazy bugs on extreme before where it would ban communication in the ASIC between two very specific hosts, one on the switch and one miles away

@clear igloo I cant tell you how many support calls I sat on while they open up management to an ASIC and type these bizarre looking commands

[clear igloo]

Those are the scary commands usually, lol

[waxen scroll]

its basically jibberish

hardly readable

[mental loom]

Networking question here,
I have a switch with 6 ports that go into my router. Located in my attic

One of the lines from the port go to my workdesk that connects into my PC.
I now have another device at my workdesk that I'd like to connect to my ethernet however I no longer have any ports spare on the switch upstairs

Can I just purchase another switch and connect it to the line going to my workdesk instead of my pc.
And then just purchase two ethernet cables to link up to the switch at my workdesk to then connect the devices at my workdesk (my pc and the other device)?

[clear igloo]

Yes

[clear igloo]

Tagging so you see above, but yes

[viral gulch]

Anyone successfully using IPv6 inside VMware Fusion Player VMs on macOS?

I didn't really have high hopes for this working in NAT mode, but even when trying a bridged connection it doesn't seem to work. The guest can assign a prefix from the right range so at least some of the ICMPv6 packets must be getting through. And I can ping the gateway via link-local, but I think that's all I can do. Basically all other IPv6 traffic just fails 😦

I've tried Wireshark on the host and if I try something like a ping out to a v6 address I can at least see the packets leaving from the VMs IPv6 address, but I get no replies. v4 traffic works completely fine.

The host has fully functional v6 and there's no issues there.

This has to be something to do with how VMware sets up the bridge in macOS. That's all I can think, but I can't work it out. It's also just Fusion Player so I basically have no options to configure anything in VMware itself. A puzzling one.

[reef phoenix]

hey guys, Im having a small issue with truenass
so... I set it up just fine, but my HDD is not getting listed in the web interface, but it does get listed in the shell when I writegeom disk list
Does anyone know how I can let it display?

[cold forge]

Already did, just need to get a tftp server. Working with switches is annoying, lol

[waxen scroll]

I would have port mirrored

[cold forge]

Misplaced the network adapter for my surface, i don’t think i have anything to connect to a mirrored port atm :(

[raw galleon]

Hey all, is ASUS ZenWiFi XT9 worth it? Thinking about future-proof 6E router.

[pseudo blade]

This is why I can't buy a laptop that doesn't have built in ethernet

Can't imagine having to fish out a dongle I can break or lose every time I want to connect to a wired network

[peak cloak]

Ethernet and USB A

[pseudo blade]

At least two USB A's is my current target and it makes good laptops a pain to find

[cold forge]

Okay - didn't find my surface mobile dock, but found my SteamDeckDock (that's just fun to say!) and it has an ethernet port on it that I can use from the laptop

@waxen scroll so you think the next best step is to mirror a port on the switch to the uplink I'm trying to telnet to, and do a packet capture on that port from the laptop, is that right?

[cold forge]

yeah, definitely the one real downside to this laptop

[cold forge]

yeah, I do like that - my surface has 2 USB-As, 1 USB-c, and then the proprietary surface port

[rocky badge]

I have like 3 USB c to Ethernet in my bag

[cold forge]

it's a good idea

if only there were some decent USB-C to 10GbE - my friend says he bought one and it sucked

[opal pagoda]

coolest ethernet port ever

[pseudo blade]

I reckon that would break in about 5 minutes

[opal pagoda]

probally but atleast this design exists that is much simpler and semi low profile

[pseudo blade]

It's definitely cool but I question if it's practical

Yeah the low profile flip open ones are pretty common now

[opal pagoda]

could be a lifesaver in ultrabook if you use it once a month

[pseudo blade]

I'd trust that a bit more than the tiny one, which you can actually see bend in the above gif

If I was using ethernet ports once a month I probably wouldn't care if I had to use a dongle

That said I bought a replacement SD card reader for my laptop when the original broke and have used the replacement once in the 4-ish years since

The crazy-slim laptop trend does nothing for me, I'd rather a larger battery and decent ports

[peak cloak]

Yes

I don't get it, it also seems easier to break

[little schooner]

I trust that it will break sooner

[rocky badge]

ngl I've been ok with a dongle lol

[median spire]

I got gigabit internet when I try and play a YouTube video it constantly buffers unless it's aging at like 480p and chome pages and downloads take forever to load or don't at all. while all my games and other shit work fine. when I turn on my VPN it cripples my speeds to around 100mbps but somehow all the chrome stuff is fixed and I can watch 4k video no problem.

I've looked everywhere for a fix so if anyone has any ideas that would be great

[cold forge]

Ugh. I’m super annoyed. I fixed my issue and idk what it was

and it looks like I went and configured my quanta then forgot to save the config before I powered it off an mounted it

[leaden shale]

a

Can anyone tell me what even half of this is for?

I want to get into networking so I want to understand what exactly some of these things do and why you would need them for a business.

I see drive bays, but idk what the other ones without drives are for

[fresh shoal]

The ones with drive bays are actually just your run of the mill 2 Unit x86 servers

The reason why the drive bays are facing outside is for hard drive hotswapping, the part where you'll most likely be interacting with physically the most.

Servers can have more than one network wire attached between it and a Network Switch.

They can either be your standard RJ45/8c8p connector, SFP or QSFP. Using copper or Fibre

[faint bronze]

I see 6 AMD64 servers on the bottom of the right rack. Those are possibly a Dell r610. (One u rack server. In the middle there are two Toshiba 4500-CAS. (Two theory's 1. POS related, 2. Old legacy stuff.). Then two AMD64 probably HP servers. Then a mystery bot I don't see enough info on them another AMD64 box. Then a power switch maybe for a portion of the rack. Then a shelf with some thing on it that has networking. Then mystery box and two patch panels then 4 Cisco routers of which the middle two could be in auto fail over. Then a version box either for fiber or cellular. Then cable routing and two patch panels then more cable routing.

The left rack has orange cable which might be fiber. there are also two servers and the rest looks to be power and routing/switching.

[fresh shoal]

Just a side note. I love how you said AMD64. Honestly that's a better way to say it. But people still keep using x86_64 and x64 x.x

Microsoft uses the term x64 for user facing apps, x86_64 for administration tools, amd64 on the developer side.

It's aaaaaaa

[burnt dagger]

is there a good way to use an old phone as a webcam. the ones iv found offten have a in up ads/porches

[peak cloak]

https://forums.zoneminder.com/viewtopic.php?t=30605

Maybe try something from this list, scroll down a bit for updates

[faint bronze]

I choose to cite AMD' s documentation where it is called AMD64. Booth AMD64 and x86_64 are valid to my understanding. I don't know where the x64 comes from.

[thick minnow]

Intel originally used x64 to mean their failed Itanium CPU architecture. Then I guess later on they just sort of did a "what we MEANT is THIS is x64". You can understand their reluctance to say their chips run AMD64 instruction sets and software

[leaden shale]

Thank you guys, that helps me a lot

[unreal valley]

Of all the different SFP+ modules, what's the difference between them? Is there somewhere where I can find the best one for me?

[clear igloo]

I think the four routers are ISR4451s, mostly running NIMS for POTS lines
I see a couple Catalyst 3850 switches on the left, above them might be some Juniper switches or something or maybe a L1 switch
Below is a 3650 or 2960-X
The rest I can't make out

[clear igloo]

There are tons of differences, start with what fiber you're planning to use

Here is a good starting guide:
https://community.fs.com/blog/how-many-types-of-sfp-transceivers-do-you-know.html

https://community.fs.com/blog/sfp-vs-sfp-vs-sf-p28-vs-qsfp-vs-qsf-p28-what-are-the-differences.html
and this

[unreal valley]

Thx. I was trying to go from router to switch. I knew there were a lot of different module types. I saw some stuff from fs(.)com that would work with my MicroTik router

[clear igloo]

Anything 100g or below and short distance you can use multimode
however most of the industry is moving to singlemode everywhere but if it's just a 10g patch or something, multimode is fine

[unreal valley]

https://www.fs.com/products/84681.html

[unreal valley]

So this module would be multi?

[clear igloo]

Yes and MPO cable

but that's also QSFP not SFP+

[unreal valley]

Thx

[rocky badge]

@clear igloo @peak cloak

I heard u need cable

[charred ibex]

i have a switch in my room to connect my mac and pc (for wired game streaming) and its also connected to my router for ethernet. how do i share files between them?

i dont see my mac on the network thing in file explorer and vice versa on my mac

[waxen scroll]

@clear igloo oh no, they still havent hired a network consultant. https://www.youtube.com/watch?v=TzntUW34bv8

[rocky badge]

They have a fiber patch panel but didn’t use it

[cold forge]

TL;DW?

[knotty plover]

Hey! Any way to do what Speedify does in linux with my Custom VPS server?

1- It can combine multiple connections, boost upload and download speed by using all connections
2- you can set some connections as backup, or the rest as you see
3- set speed limit for specific connection in bonding
4- Redundancy! That's an option to prevent any packet loss by adding more connections and sometimes reduces ping as well

Since dedicated servers in this app are so expensive ($130 per month) I'm looking to do it in linux by myself, I'm noob BTW

For now I'm forced to buy and use it, but if I can, I wanna save my money

You can even have different transport mode for each connection

and it works in windows too lol, but servers on the other side surely modified with Linux to do this

It's not so well known because it's expensive so nobody cares about this app

at least dedicated servers are way expensive

[peak cloak]

You can prob find something similar on GitHub

[cold forge]

OpenMPTCP?

[clear igloo]

lol, they never will

[knotty plover]

I tried a lot, but couldn't find!

[knotty plover]

Yes, but not available in my country 😭

[cold forge]

Weird, why not?

[knotty plover]

I live in a full restricted country

Iran

[cold forge]

:(

[knotty plover]

if there's a software to do that, maybe I can do it with raspberry pi

I mean, if I could just put my own VPS in Speedify and use it that way

I think that's how they make money, with selling servers

[viral haven]

Guys ihave a priblem where

I wonder when can i enjoy low ping gaming it seems like my only way of playing with friends by connecting by lan

[peak cloak]

the ping protocol (ICMP) is not great for measuring latency

it gets throttled, you shouldn't base your reports off of it

[unreal valley]

Do MicroTik routers that support sfp+ ports need to have specific modules?

[pseudo blade]

They aren't picky but you might find this helpful https://wiki.mikrotik.com/wiki/MikroTik_wired_interface_compatibility

They don't lock anything down to vendors or anything but not all interfaces are created equal for what they'll tolerate

[viral haven]

Tell that to my gaming experience

[cold forge]

I'm running a variety of modules. Also, DACs

[sacred ocean]

I'm trying to use a different WAN ip for one of my VMs (running multiple game servers) by using wireguard, with the server running on digital ocean. However, I'm stuck on trying to port forward from the client to the wireguard server. The server is running as a docker container, using the linuxserver image. Is this possible?

I can successfully access the internet from the local VM, but I can't ping to it.

[peak cloak]

yes I've done it before

although a slightly different method, but still possible

wdym port forward from client to WG server?

[sacred ocean]

access a service running on the client from the WG server's IP

[peak cloak]

ah, so portforward from Cloud Server to local server

[sacred ocean]

yes, but other way around

[peak cloak]

?

[sacred ocean]

wait no, I read that wrong

yeah

[peak cloak]

yeah so that will be a DNAT rule you have to add

[sacred ocean]

On the WG server or client?

[peak cloak]

cloud server

it has to know what to do with packets, and where to forward them

[sacred ocean]

I assume I can do that with iptables?

[peak cloak]

yes

but don't ask me the syntax, idk it it's hell

that's why I used vyos for mine

iptables -t nat -A PREROUTING -p tcp -d 10.10.20.99 --dport 80 -j DNAT --to-destination 10.10.14.2

so -d will the public IP of VPS

the dport is what you are port forwarding

destination is the wireguard IP of local server

make sure you can ping the wg IP of local server from cloud server and vice-versa

NATing is an ugly solution, but it's realistically the cheapest, since the better solution requires 2 public IPs

[sacred ocean]

I think digitalocean allows free ipv6 addresses

[peak cloak]

yeah, but you can get millions of v6 address at home already

assuming ISP supports it

[sacred ocean]

the problem I'm mostly trying to solve is that my failover connection is cgnat

but I'll try the NAT solution first

[peak cloak]

make sure you also masquarade all outgoing packets

and enabled ip forwarding

this may help https://github.com/mochman/Bypass_CGNAT

[sacred ocean]

oh, perfect!

I'll look into that, thanks

I asume to follow this, I will need to stop using the container?

[pseudo blade]

If you want to do a normal port-forward you'll need the host kernel involved anyways, you'd only use a container if you wanted to use a proxy instead.

[sacred ocean]

alright, I'll move it over then

[earnest orchid]

can i use a x8 nic in a x16 slot with x4 bandwidth

[tall zodiac]

yes

[opal pagoda]

cheapest fiber cleaver

[fiery roost]

That's a whole mess...

[rocky badge]

@clear igloo @peak cloak rip brightsign player

[pseudo blade]

That huawei is the worst neighbor

[clear igloo]

dead?

[rocky badge]

FS probably corrupt

[clear igloo]

damn

[shy spade]

ddosing school rn

[unreal valley]

I just wanted to double check... Would this SFP+ module work with MicroTik routers?

https://www.fs.com/products/11552.html

[pseudo blade]

It claims to be MSA compliant, so it should.

• if the interface type and line rate is correct for the router interface as per what I linked earlier

If you have further questions, perhaps ask the vendor for confirmation?

[unreal valley]

Cool. Thx for your help

[cold forge]

How horrible! It would be a shame if someone happened to increase their WAP radio to 1500watts…

[pseudo blade]

It'd be a real shame, considering how much effort they'd have to go through to mod a 1.5kW amplifier into one

[thick minnow]

you know what would be horrible is if you tried to use a microwave transformer and a tv antenna to spoof location on pokémon go and 2 black suvs show up

[cold forge]

and yet, if they had their ham radio license, it would be technically legal 😛

[thick minnow]

yeah…

allegedly

[waxen scroll]

not reachable over the internet

[fiery roost]

Since all those wifi routers are only in a small building it's kind of bad

[rocky badge]

Yeah its inbound fw block

[cold forge]

why? Just be the one shouting the loudest 😛

[astral monolith]

Anyone know simple ways to network usb devices so I could connect my studio gear to my PC in the other room? Working on cable managing since I moved

[thick minnow]

what exactly are you trying to run?

also probably the wrong channel

[astral monolith]

usb c

im just trying to extend my device usb to the other room, but i need to be able to use it. I can't find a female usb c to cat6 extension, so i'm wondering if there is a different method

[cold forge]

Yes - I have one or two from work

[astral monolith]

who makes them/

?

[cold forge]

trying to find it via google, don't remember

FYI, idk how much they cost or how obtainable they are, only that they exist 😛

[astral monolith]

aight, i might have to figure out another way