networking

[tribal sequoia]

good times

[delicate tartan]

hey guys

so I have an issue with my wifi which is when I use my pc and I think it’s when I download like a game or something but I like shut down my pc and around 15 mins later the wifi stops working and then the dsl light flashes and then in another 15 mins it fixes

[opal pagoda]

Someone forgor to run wr mem

[silent flax]

WTF is TPLink doing

i mean for port it is good, but what is that look

[topaz patrol]

Fancy metal RJ45

[next tapir]

I like the look

[topaz patrol]

Is anybody here using gaiia? What's the pricing like and how is their support?

[silent flax]

https://www.techpowerup.com/323942/tp-link-sets-a-new-standard-in-gaming-connectivity-with-revolutionary-archer-be19000-tri-band-wi-fi-7-gaming-router

[next tapir]

Not sure how much I like the price, but seems pretty good otherwise no?

[topaz patrol]

The annoying thing is the antenna things are probably half empty and could've looked normal

[nimble sable]

prettys sure that's a TIE fighter no?

[nimble sable]

OMG YES! a fiber port! amazing tplink, bring fiber ports to regular folks i love it

[silent flax]

$600 router. Regular folks 😄

[nimble sable]

well, u know what i mean..."home use"

i think we all should move to fiber. my hot take

like 2.5GbE is great, but after no one should be doing 10GBASE-T

[ripe hatch]

Who needs an SFP+ on a home router

Like I’d rather have another RJ 45

[silent flax]

i do think those two parts are shared, so you either use SFP+ or RJ45 10Gbe

• 1× 10 Gbps SFP+/RJ45 Combo WAN/LAN
• 1× 10 Gbps WAN/LAN
• 4× 2.5 Gbps LAN

so yeah, it is either SFP+ or RJ45

[nimble sable]

10GbE fiber switch is much cheaper than 10GbE RJ45 switch (CRS305 is $150. There's no other 10GbE switch that comes close). and one that can convert/has both is more expensive still . So if I'm converting my network to 10Gb the cheapest thing to do would be SFP+ ports all around. for computers, you're going to have to get a card for 10Gb anyways, at which point sfp+ cards on ebay are among the cheapest options there as well. The only extra expense there is going to be wifi which will need RJ45 cable but you can just use the 1Gbit port on the crs305 for that. Depending on other details (what you have, what you're trying to achieve). An "all SFP+ 10GbE" network is cheaper than "all RJ45 10GbE" or "mixed SFP+/RJ45 10GbE" networks...i know it is for me, like BY FAR

[solar dagger]

hello can anyone help me setup nextcloud

i want to run it on a different port as port 80 is being used to host a webpage

[ripe hatch]

Unless you are only using DAC cables the price isn’t super different. Also ngl it’s really dumb for them to use a 10gig port as the WAN

Should’ve made a 2.5gb the WAN

If you have 10gig wan ur ass needs a business router

Or at least like a UniFi udm

Also are Cisco APs any good? Need basically a Cisco version of a UniFi WiFi 6 LR

Gonna order two managed Cisco Catalyst switches soon and need to get APs

ATP I may just get 4 UniFi APs and a cloud controller

[opal pagoda]

Sfp+ ont

[opal pagoda]

Yes they are good but also expensive,
For smaller deployments you can enable embeded wlc

We use 9120i for offices and 9120e for warehouse and production

[ripe hatch]

The problem is, they don’t have a lot of catalyst line APs they are all Meraki

I am not buying that expensive ass Meraki stuff

I was going to go CBS but apparently those are all about to be EOL

[opal pagoda]

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9120ax-series-access-points/datasheet-c78-742115.html

[ripe hatch]

So are the catalyst 1000s

[opal pagoda]

Just get these

I believe you don't need any additional licenses except if you want to use dna

[ripe hatch]

Actually, Cisco told me that you don’t have to pay licenses and fees on catalyst unless you have more than 10 Cisco devices

Are those APs supposed to be $1000?

[opal pagoda]

Could be public price but we get something stupid like 60-80% discount trough integrator

[ripe hatch]

Yeah, when I called Cisco sales direct, they said they’re at the end of their fiscal year right now and we’re gonna give me some 40 to 50% off of the switches I wanted

They gave me a rough quote of about 1300 each for 48 port POE switches

[opal pagoda]

Idk why they inflate public prices so muct

[ripe hatch]

Believe they were the catalyst 1300 one

[opal pagoda]

Cant comment on those switches as we use 9200

[ripe hatch]

We’ve been getting away with unmanaged switches for the last decade, so it’s probably gonna be fine

[opal pagoda]

With 9200 switches you are forced to buy 3year dna license

[opal pagoda]

If it is business environment please do isolation

[ripe hatch]

Our workflow requires us to have a robust VPN so I honestly don’t even need remote management. I can just do local management.

[nimble sable]

does it? that was my question earlier abouut the real difference between consumer vs business/DIY. I know we all sort of accept there is a big difference but the reality is, my ISP provided router is SUPPOSEDLY capable of 8Gbps, because it is literally advertised for it. so, obviously a DIY router is better but better how?

Also a lot of XGSPON ONTs have a 10GBASE-T port

[nimble sable]

you WHAT? is the DNA at least free?

[opal pagoda]

vpn is not a excuse to not have vlans and isolated subnets with controlled and monitored vlan to vlan traffic
couple of basic vlans a office should have
managment
admin
office
security/building infrastructure
wifi
printers
iot

[opal pagoda]

haha great joke

[nimble sable]

swear to god even after 2 years i find DNA very confusing

[opal pagoda]

yea we have dna and i rarely use it

[ripe hatch]

Well yeah. DNA iirc is for remote management. You don’t need a subscription for local management on Catalyst.

Granted Cisco’s software stack is confusing as hell

[opal pagoda]

no it isnt for managment

its some autmation/visibility bs

[nimble sable]

wait so, do you need the on-prem dna license for local mgmt?

[opal pagoda]

no

[ripe hatch]

I don’t think so. Unless it’s Meraki

[nimble sable]

so what iss the on prem dna for?

and why is "dna subscription" a seperate line?

[opal pagoda]

switch works normaly after dna license expires you just dont get dna features

[ripe hatch]

And that’s why Meraki is evil lmao

[opal pagoda]

yea meraki is bs

[ripe hatch]

Meraki fan vs Catalyst enjoyer

[opal pagoda]

few months ago a remote office meraki license expired bc someone forgot to extend it

[nimble sable]

so on a c9300, i see two things here. a DNA on-prem license, which seems to be free for 3 years and compulsory. then a "DNA subscription" which is optional and not fre, whats the difference?

[opal pagoda]

whole office was down for couple of hours untill we got it all sorted out

bc evil meraki doesent pass packets if license is expired

[ripe hatch]

lol I wanted to go Aruba but the IT firm we contract for support gets pissy if you don’t use Cisco.

[nimble sable]

thats hilarious

[opal pagoda]

i dont even know, i dont deal with licensing bullshit

[ripe hatch]

I’m learning business networking because they wanted to charge 35k to install 2 switches and a handful of APs

[nimble sable]

aww dang. i was hoping someone would know

[ripe hatch]

I ain’t paying that lmao

[nimble sable]

good grief

[ripe hatch]

I’m capable of replacing a few switches and figuring out how to set them up

[opal pagoda]

what switches do you currently have installed

[ripe hatch]

They also said they need to “redo our cabling” because it sucks (it does) but like it’s all 5e/6a and works. Only thing is we have to have 2 switches in separate rooms with it

[ripe hatch]

Two unmanaged 24 port Cisco Whatevers

[opal pagoda]

prolly epic 2960

[ripe hatch]

I wanna put 48 port POE ones since we’re also switching to VoIP phones that can run on PoE

[nimble sable]

funny u say that, i had the opposite problem with my ISP. they put 5e cables and refused to redo for 10Gbit

[ripe hatch]

Just aggregate 4 of them lmfao

[nimble sable]

how difficult was that to do btw?

[ripe hatch]

See this is a blue collar factory maintainance company. We can run some damn cables ourself.

[opal pagoda]

meanwhile we have all cat7a s/ftp

[opal pagoda]

my boss and senior dealt with it

[opal pagoda]

do you test them?

[ripe hatch]

Like we’re switching to GFiber and the installer called me because where they have to dig is where our dumpsters are and I was like “just tell them when you need to move it and they’ll do it lol we have forklifts”

[ripe hatch]

For what?

[opal pagoda]

for documentation reasons

[ripe hatch]

Wdym test them?

[opal pagoda]

we (our contractors) test them all with fluke cable tester and certify them

and otdr for fiber network

[ripe hatch]

I mean I can do that if I wanted to lol. They sell those at Lowe’s

All I need is Gigabit anyway

[opal pagoda]

not those blinky blinky testers

i can show you what test looks like i just need to find latest pdf

[ripe hatch]

No I know the nicer ones that certify for 10gig, 1gig etc

[ripe hatch]

No I know what you’re talking about I’ve seen the LTT video

[nimble sable]

oh i need to get one of the nicer ones that certify for 10gig, any suggestions?

[opal pagoda]

you get this for each connection

and we pay installers based on how long cable is (fixed install cost per meter, material is ours)

[low pond]

Something similar happened here too lol

Insane pricing and totally overspecced, old equipment even, all at their factory prices made no sense

[silent flax]

uhm, they got 10G RJ45/SFP+ as WAN, 10G RJ45 as LAN, 4x2.5G RJ45 as LAN

[ripe hatch]

I know I’d rather have an extra 10gb LAN port and a 2.5gb WAN

No matter what one of ur 10gig ports is damned to pull WAN duty on ur AT&T gigabit fiber

[silent flax]

i suspect that is down to what the chipset offers. Like those china switches, where ther Realtek switch chips simply offer only so much, and the choice betwen 4x2.5+2x10, 5x2.5+1x10 and 8x2.5+1x10 is simply down to how you split the same networking bandwidth of those chips

so most likely the chip in that router most likely has 3x 10 gig networking, and they decided to make it into 2x10G + 4x2.5G

like this switch

the difference between 4+2 and 8+1 switch is if they take the 10G link to RTL8224-CG and wire it out directly instead of running it into a chip and thus split 10G into 4x2.5G

i bet it is same on that TPlink router - it has 3x 10G link and they split one of them into 4x2.5G

[tribal sequoia]

Wr mem was not why it did that lol

These switches literally do that sometimes you can look it up icx
7150

I don't mind administrating them but that stupid shit definitely made me dislike them a bit more

[opal pagoda]

hmm tpm could have gone nuts

[clear igloo]

It depends on your compliance requirements

Technically it's required after for certain features but I don't have my decoder ring with me to tell you what thos are exactly, and as of today it's not enforced, you'll get syslog warnings that you're out of compliance and that's about it. I think full netflow and things might be tied to it but again, if you're not audited then it's just a syslog warning 🙂

[tribal sequoia]

Could definitely be firmware

They are about to replace all the switches though. So it isn't worth

[nimble sable]

But what does the DNA subscription do that's different from on prem DNA ?

[north vector]

yo i got a question for yall rq if i could pick on of yalls brains

[topaz patrol]

https://dontasktoask.com

[north vector]

ok

so basically im trying to trouble shoot my friends obs. tldr the bitrate is fluctuating too much causing the stream to lag while dropping frames. originally 6000 kbs which was jumping up too 11k kbs. we moved it to be around 8500kbs. but was now jumping between 11k and down to 6k. we changed the bit rate, video encoder, streaming quality, the fps value, downscale filter, video rendering, and probably every other setting under the sun but still having the same issue. i believe it to be more of a networking problem. im not sure if it was going to help, but we where going to port forward, and reinstalled the network adapter for their pc. We also isolated it towards the bandwith due to the test stream being done while no other network interfierance with other systems on the network. I was wondering if there was anything NETWORK side that i should attempt to do in order to stabilize the bitrate.

[dense trellis]

Paragraphs?

[next tapir]

#1027757333117415424 my friend

[north vector]

ty

[ripe hatch]

@opal pagoda ever seen this thing before? If this thing works it might be enough to make any IT installation tech cry? https://linovision.com/products/8-port-industrial-poe-eoc-hybrid-epoe-switch-with-poe-over-coax-technology

It basically is 8 cheap MOCA adapters crammed into one box. It’s designed to use an POE camera using BNC cabling in what seems to be a plug and play solution.

[feral quarry]

i HATE networking

also my ISP :3

[ripe hatch]

Who is ur ISP?

[feral quarry]

Internet Service Provider

[ripe hatch]

…

I know what an ISP is

Who is ur ISP?

My house is on a local fiber company

[feral quarry]

small company

same

but they fucked for month for public IP

[ripe hatch]

And the businesses I manage computers for use spectrum at one location and Comcast (bouta be GFiber) at another

[ripe hatch]

Huh?

Public IP?

[feral quarry]

yes?

[ripe hatch]

Were you expecting a static ip?

[feral quarry]

no

i had static but i wanted public

[ripe hatch]

Oh… why?

[feral quarry]

cause i have homelab

and i want host some things

[ripe hatch]

Oh ok

[feral quarry]

like NAS website and some game servers

[ripe hatch]

Sounds like it’s P2P time lol

[feral quarry]

why

its working so

i dont need to

also i have good ping

[ripe hatch]

Oh I thought it was a privacy ckncern

[feral quarry]

no

i wanted it to be public

[ripe hatch]

Although truth be told ISPs don’t really change ur public IP a lot

[feral quarry]

depends

if so i can fix it

i know how

[ripe hatch]

They usually kinda leave it the same unless something weird happens like you get a new router

lol at one of our businesses inside the building there’s a multi mode fiber plugged into a box that just says “AT&T” on it. We don’t have AT&T anything

Ngl I kinda wanna unplug it

[feral quarry]

lol

weirdddd

now i have to config DNS :3

[young slate]

Guys

My poweline adapter is very slow

[pale ridge]

It happens. Is it newly slow or always slow?

[young slate]

Alway

S

[pale ridge]

Powerline adapter kind of need pretty prefect conditions to work well. Probably best to just google something in that order. They need to be circuit to work even close to spec

[young slate]

Ok

But is there any drivers for it or something

[pale ridge]

How far are the points away?

Is there any other solution you could be using?

What was the reason behind using that Powerline Adaptor?

Wifi. run a cable some copper, Repeated wifi? Fibre?

[young slate]

I not allowed to have a ethernet cable to my room

I have fibre

[pale ridge]

Parents? landlord?

[young slate]

Parents

[pale ridge]

You have fibre in the room in question?

[young slate]

No

[pale ridge]

Wait but they will let you have a powerline adaptor?

[young slate]

Yes

[pale ridge]

Do you get wifi there?

is that not suitable?

what are you solving for right now?

[young slate]

I dont have wifi card in my pc

[pale ridge]

I feel that would have been a much easier solution

[young slate]

But then it will be slow

[pale ridge]

What would be slow?

[young slate]

Wifi

[pale ridge]

Wifi is pretty advanced these days. Depending on how far you are from the Access Point and what Protocol you are using, speed can be pretty impressive

802.11AX is pretty impressive

[young slate]

Yep

But i dont have that

And i use powerline

[pale ridge]

What do you have?

[young slate]

Powerline

[pale ridge]

Well I think you are playing the hand you have mate!

[young slate]

?

[pale ridge]

You have the solution you have

[young slate]

Yep

But my internet plan is 500 mbps and i get 220

[pale ridge]

That is still pretty good? what is the issue

Do you get 550 at the router?

[young slate]

Yep

500*

[pale ridge]

what do you need 500Mbps for?

[young slate]

Gaming

[pale ridge]

Again what are you solving for?

Nope you do not need bandwidth for gaming you would need low latency for online gaming.

[young slate]

Yea

[pale ridge]

Do your games run fine?

[young slate]

Thats the problem

[pale ridge]

What is the problem?

You need to be clear my friend

[young slate]

Thats the problem

[opal pagoda]

Yikes, is coax that cheap compared to cat 6

[opal pagoda]

You didn't have either, you had cgnat

[feral quarry]

interesting

[ripe hatch]

No it just makes it so you don’t have to run new cables

[silent flax]

most of the time MOCA is used when you already have coax in the walls

[thick minnow]

I have a ISP router which sucks, so I got Mi Router 4A and its connected in bridge mode using PPoE(I belive its called that) and I want to flash 4A router with openwrt so I can connect mullvad VPN to router but how do I keep it in bridge after flashing?

[clear igloo]

Oh! The sub is for Catalyst Center integration

[clear igloo]

@nimble sable

[pale ridge]

Have you heard of Arista?

[tribal sequoia]

yeah big company makes good shit

[slender thorn]

Could I use a TP-Link RE505X range extender to connect my trueNAS server to my network? I use it for plex and currently cannot run wired Ethernet to the room I'm gonna have it in.

Sorry for the spam, the image I was trying to upload was crap

[silent flax]

technically any networking connection is enough, not sure if TrueNAS itself supports WiFi; if not, you can always just grab something which will act as a WiFi client and then give out networking via ethernet port near to TrueNAS

[young slate]

Yo i got that but i returned it because i couldnt change the channel

[slender thorn]

The one I posted has three ports on it so u figured it ought to work reasonably well

Gonna pick one up after work and see if it works for me, worst case I just return it

[slender thorn]

I ended up picking up the re705x for 20 bucks extra, crossing my fingers that I can put it in a good spot

[slender thorn]

I wonder if I can change channels on the re705x, only cost about 20 bucks more

[wheat dome]

The higher download speed, the faster you will download the enemy players location?

[fierce kiln]

When it comes to gaming, you can play on the order of dial up speeds, latency and jitter are the killers

[ornate jungle]

As someone with way too many hours playing CoD4:MW1, can confirm. Once the game is downloaded, it'll run "fine" on a piddly 128kbps connection so long as the latency is under 150ms.

[empty flower]

https://www.snbforums.com/threads/critical-vulnerability-in-openssh-uncovered-affects-almost-all-linux-systems.90824/

[thick minnow]

Mullvad or ProtonVPN?

[analog ice]

Vypr

[trim ledge]

So I have two computers, my main one and a Dell Optiplex used as a Minecraft server, I'm trying to get the Optiplex to show up on the network so I can manage it without switching inputs

how i do that

[steel dragon]

What OS are you running?

[opal pagoda]

Either ssh or remote desktop solution. Vnc works on all os, rdp for windows

[trim ledge]

Windows 11

[ivory umbra]

I think this was an unnecessary response. Not helpful in anyway.

[steel dragon]

personally I'd just set up rdp and call it a day

[keen urchin]

That's literally how I learn...

[opal pagoda]

How about this arrangement
You start doing stuff, when you come across a obstacle ask here and someone will help you get over that obstacle
It isn't a homelab if you don't know how to operate it and make changes

[keen urchin]

Exactly

[tribal sequoia]

mannnn

fortinet helped my coworker setup this mc-lag for this client and all the switches are dual homed back to those

and they didn't enable split brain aware

[toxic creek]

Hello people, I just reconfigured my whole home internet setup.

I earlier had the router/model combo from my ISP, but I also had 2 routers lying around which I bought in advance but never used.

Recently I got some motivation and decided to get to work. I enabled "Bridge mode" or "Model only mode" on my ISP router and disable WiFi. After doing so, I hooked up one of the two routers I had to it, and fortunately my other router (same model) has a WiFi repeater mode so I enabled that and put it in the middle so that it recieves maximum bandwidth and also can boost signal all over my house. Which due to my luck I nailed it as the whole house now has good coverage despite having a lot of concrete walls. Though I might need to put another one on the second floor as the signals there are only okay. I needed a repeater because for some reason my room even though it's very open (lots of glass windows) it still somehow suppresses a lot of signal, which causes the upper floor to not get any in some areas.

I know wiring a cable would'be been better, and to be honest I was looking for a PoE switch and a PoE router so I can run a Cat6 cable through from my room to the first floor, and hook the other router as an AP. But although I know wireless is not as stable, I tested it for a month now and it is fairly stable. So the Cat6 cable is eating dust in the storage and I did not purchase the router or the switch.

Some might say disabling the ISP router/modem combo's routing is stupid but hear me out, first of all, that ISP model is quite locked down and to do basic tasks such as just changing the DNS servers, it takes me like half an hour because all the settings are HIDDEN. Second of all, as the 2 routers which I have are the same brand and support MESH, I don't have to worry about losing signal when I go out of my room to anywhere else in the house, it just changes automatically.

Oh I missed this, along with that I have a switch attached to the router so I can hook my FileCloud, Kemp(Load Balancer) and Plex running server to it, and also other computers which need to be connected via ethernet. As my router only has 4 LAN ports, one is vacant, other one is used by the switch, one will be used for the CCTV unit, and one will be left in case I want to implement my PoE stuff idea.

With the setup aside, let me tell you I am a beginner at this stuff, so if there are ANY mistakes please feel free to correct me.

And I typed all this so that if there are any tips, please feel free to tell me because I want to improve my setup all the time lol.

Cheers!

[thorn delta]

I'm looking forward to trying this made in Canada , 20 year old, 100 Mbps, infrared, point to point bridge

Untested, so hopefully it actually works

Planning to make a youtube video about it to start off a series on old wireless broadband equipment

[late void]

depends

[hasty tinsel]

Hey, I’m looking at upgrading from Asus to Unifi, and am trying to decide on APs. I use unifi at work, but we seem to have some connectivity issues with the U6-LRs, the AC Pro seems to just work, or if I should go for broke and get the U7s? I’ve got an old house with several concrete walls, but I’m looking at wiring everything anyways to get out of the mesh nightmare that I’m having with Asus now.

[opal pagoda]

you could use tp link omada instead of unify

[cerulean pulsar]

anyone with experience sharing your ssh key with a devcontainer? I'm running ansible inside a dev container on my Mac but i'm having the hardest time getting it to connect to other nodes because of the ssh key. I tried adding this line to the devcontainer.json file to create a bind mount to my .ssh dir in my local machine

        "type=bind,source=${localEnv:HOME}/.ssh,target=/root/.ssh,readonly"
    ],```
obv it fails since it's read only and the ssh connection needs to add the identity of the devcontainer to the authorized hosts file. Should I just allow the container to write to it? Or is there a better way to do this?

[void summit]

Does it matter what cat type of Ethernet you use on your router can I simply just go up to cat8?

[clear igloo]

why? Cat6a is the max you need. Cat7 is hogwash and Cat8 is for data center applications only
Sure you can use it but whatever you're getting from Amazon and whatnot isn't up to spec and could just lead you down a rabbit hole of troubleshooting just to realize it's a crappy cable advertised as "cat8"

[agile pendant]

JUST GOT FULL CAT5E BABBYYYY

that was a little difficult lol

https://tenor.com/view/linus-linustechtips-stretch-face-gif-14667307610009262438

[void summit]

So cat 6 in general is what i should need for gaming?

[peak cloak]

yes it'll work just fine

it's rated to over 1 gig

[uneven socket]

my ethernet and internet in general is running pretty bad. given that I have spectrum should be the first red flag, but I'm connected via ethernet thru an extender. is there any way I can try to make the connection atleast stable? in games my ping is unstable, on speedtest.net my speeds are unstable. its been noticable for the past year or so.

[analog ice]

I had a really bad issue with buffer bloat when I had spectrum

mainly cause their routers/modems are dogshit

[uneven socket]

yueah we still have their modem they gave us but we have a netgear mesh system as well as a RAX48 that we'll use when we switch to fiber in a few months

[ivory umbra]

It's a home server because it's setup at home. It's a huge cost to undertake and experiment with in the hopes that people will give me the right advice or even articulate it correctly. If you don't want to help with the question that was asked, that's fine. You can keep scrolling. I don't understand the need to comment when the question was specific, your needless response is not what I asked for nor what I need. It simply doesn't work for me. And if nobody responds, that's fine, I'll ask again Tomo. But it seems youre missing the key component of why people ask for help, because they are out of their depth. The type of help I'm requesting is specific. For someone to actually take the reigns and build it according to my requirements.

[broken hearth]

Are these 12am to 11:59pm data usage statistics? Router is TP Link Archer A3

[opal pagoda]

you were asking for homelab and not for home server
homelab implies experimentation, learning the craft, and changes to the whole lab enviroment
home server on the other hand is a simple endevour, you can take any computer install proxmox on it if you want to run vm-s or just linux and run services in a docker containers
if you want a simple to use home server look at running debian + casaos.
from network side you don't need managed switches and just make a dhcp entry in your router that gives home server static ip on the lan side and if you want higher speeds upgrade a switch to 2.5g or even 10g

[wheat dome]

Mullvad VPN

imagine needing an email to creata an account

Also elite to be able to pay by cash

[thick minnow]

I ended up buying it ;)

[dense shale]

I remember watching a video a while back where jake talked about easily reprogrammable sfp+ modules and I found the video and he mentioned flexoptix. Does anyone here have any experience with them?

[opal pagoda]

fs.com also has transciever programmers

[late moth]

Would a QSFP+ dual port 40Gbps nic on my PC and nas work with link aggregation?

QSFP+ switches add quite a bit of cost, even when renewed, so I'm trying to stay away from them

https://www.newegg.com/p/3B8-006Z-00002

[dense shale]

they are certainly cheaper

[obtuse cypress]

No

[wanton sail]

Has anyone worked with Cloudron on a home server before?

[nimble shadow]

So I installed proxmox on my server and I got it all setup and I’m at the point where it shows my login and ip address so I try to go to login to web ui on main pc to access the proxmox server but it’s not showing up

When I type the ip into my browser

[thick minnow]

me here with 50mb of wifi for £30 a month (bt)

[peak cloak]

What does your network look like?

Single router? Something more complex?

[fervent brook]

I got a Fluke TS19 for 3 dollars. Did I pay too much?

[sweet coyote]

Hello! I'm shooting a blank bullet in case someone has an idea. At home I got my ISP router in the garage (where the fiber arrives) and it covers the garage and kitchen, the rest of the house is covered with a Wifi 5 repeater. I got two separated networks (2.4 and 5 GHz). All my devices (phones, laptops and one desktop) connect to Wi-Fi on both network without any problem... aside one of my phone, a Samsung Galaxy S9 (I got another S9 and no issues!!) It recently stopped connecting to the 5Ghz network of the repeater. All my other devices can connect without any issues. The S9 in question says "couldn't authenticate connection". I reseted the repeater to factory defaults and it worked at first, but the phone started not connecting to the 5GHz network again. On the 2.4GHz network of the repeater, all is fine. Connecting to the router's 5GHz network when in garage/kitchen works, but I'm mostly not using my S9 in that area.

Could it be a broken Wi-Fi chip in my phone?
If I move to the router side... (doing it right now...)

It's now connected to the 5GHz network of the router...

It's the only device with which it happens... I didn't try to reset the phone because it would be a pain to reinstall all the app. I wish there was a way to backup all the apps and THEIR DATA before resetting.

(edited my first message to add some details)
Thanks for your help !!

[young slate]

What is that app

[sweet coyote]

my ISP router's admin interface (192 168 1 1)

[young slate]

No, the app

[sweet coyote]

What app? There's no app

I don't understand your question.

[young slate]

So what is that software

[sweet coyote]

Read above, please don't waste my time

[fervent brook]

A website just told me there was a problem connecting to their website...and I should check my connection...

Is that the networking equivilent to:
"knock knock"
"nobody's home!"

[frigid merlin]

Have you tried Settings => System => Reset Options => Reset Wifi, mobile & Bluetooth? You will lose your stored networks, mobile settings and paired bluetooth, but sometime the Google sync and the store wifi kinda corrupts itself and stays like this. It sounds like the phone isn't able to do any form of key-swap after initial auth with that specific router. And this sound like it stored "something" for that specific MAC as an AP somewhere.

I think with the non-stock Android on the Samsungs this is Settings => General Management => Reset => Reset network settings.

[sweet coyote]

I didn't yet, I was sad about losing all my stored WiFi networks because I have many many... of course, right now the phone is connected to the right network but I know that if I disconnect and try to reconnect it won't

[frigid merlin]

I feel you.

But honestly, if you want to debug that, I'd guess you don't have a lot of other choices...

[sweet coyote]

So weird; right now it's working. Usually if I disable Wifi and renable it, it stops working again. But now it keeps working

But I know sometimes later it won't work...

[frigid merlin]

Do you use the Google sync for Wifi?

[sweet coyote]

I don't think so? Let me check

Google says "Sync saved Wi-Fi networks to your Google Account

You can no longer sync Wi-Fi networks to your Google Account with Google Fi."

I guess I don't then !

let me reboot my phone... honestly when it starting disfunctionning I thought it was because I dropped my phone (no broken glass but it was a solid drop)

[frigid merlin]

Uh, I forgot about Google Fi...

That was a completely different database...

[sweet coyote]

So weird, now it's working! But I have no clue why

it's been going on for 2 weeks

[frigid merlin]

But it is a stock Samsung OS you're using, correct?

So you would have the full Google experience with that?

Account sync and all?

[sweet coyote]

Yes, that S9 is stock

yes I have almost the full Google experience, I used adb to disable some Samsung&Google stuff but that was last year

and my home network has been the same since 2022

[frigid merlin]

I'm pretty sure, you're either caught in some weird shenanigan associated with the SSID or the MAC of the repeater or some weird shit going on with that specific phone and the cloud sync.

One rather blunt way to force a full reauth - but I'm pretty sure you won't like this at all - would be to change the passphrase of the network. That would definitely clear the password from the sync.

But I guess in your case that would be an even more nuclear option.

[broken hearth]

TP Link routers allow traffic monitoring in web only, any other router allows to check it in Android app? D-Link, Linksys, etc?

[sweet coyote]

I think I'll try resetting my phone's settings first

too many devices know the password! thanks for your help Teddy

[late void]

is a 9mbps local connection normal between a pc connected via ethernet and a phone connected via wifi 5

[wheat dome]

Bet! Everybody knows Mullvad VPN is #1 for Security/Privacy.

[knotty plover]

There's very little information about your situation

[fallow flax]

Hi this probably some super basic stuff not sure if I should be asking here but I’m setting up sky box for tv and we use a WiFi extender to reach the room with the tv in it should I wps to our router or to the extender?

For reference the tv is not in the same room sky box and the extender is in between the sky box and the tv

[thick minnow]

Yeah I agree

[stuck coral]

i had my wireless antenna break so i decided to switch to a cable connection to my router and my ping droped from 60 to 4 on local servers and my download speeds went from 100mbps to 650mbps and my uploads went up from 60mbps to 115mbps.

so i just want to ask if this is just normal jump from wireless to cable connection?

[autumn bay]

What would be a better choice for home use a unifi cloud gateway ultra or the dream router?

[opal pagoda]

i would rather get a gl.inet router or any router that can be flashed with openwrt

[autumn bay]

I already have some ubiquiti stuff already just need a better router

[opal pagoda]

what are your needs in tearms of bandwidth and features

[autumn bay]

I have 500mbps internet so if it could do that it would be great.

Other than that just be simple to use and have more features than my crappy ISP one

oh and a way to change the DNS

[opal pagoda]

for 500mbps any will do but i have heard of performance issues with all the features turned on

especially if you use vpn on the router itself

[autumn bay]

I see I guess ill go with the cheaper ubiquiti one

[vagrant bay]

Yup, pretty normal. Enjoy the new speeds

[silent flax]

first mini PC i seen with these ( https://store.minisforum.com/products/minisforum-uh125-pro )

[sweet coyote]

Here we go again this morning, network goes with an ! exclamation mark and I can't connect back

Manually connecting to 2.4GHz network works instantly

[silent flax]

am i understanding correctly that mellanox cards require out-of-kernel drivers ?

(or are there in-kernel drivers mlx4_en which supports ConnectX-3, and then there are out-of-kernel drivers, which in current releases for "current" OS do not support ConnectX-3 anymore?)

[gusty storm]

I dunno about the other distros but Debian based stuff should work out of the box

[silent flax]

i guess i will take the risk then, seems like mellanox/nvidia drivers do not support 3 anymore for newer OS, but in-kernel drivers probably do

[gusty storm]

Also for the MFT (https://network.nvidia.com/products/adapter-software/firmware-tools/), I had to install an LTS package on both Linux and Windows. It wasn't able to detect my X-3 Pros on the latest versions

[silent flax]

i got windows boxes (both UEFI and MBR), so i can do whatever is needed there before i put it in a Linux computer

[gusty storm]

I reckon you'll be fine anyways 😝

[silent flax]

anyway, i first need to get the package with my new mini pc which will be my router

[rapid relic]

Hello I want to connect to the network on my computer with a dongle you can help me?

[ivory umbra]

Apologies. Then I def used the wrong term. I am would like to setup a home server but have specific needs. Sever tech is far out of my comfort zone so even basic terminology is a question mark. In essence, I was looking for recommendations for someone who could turn my desktop gaming PC and convert it into a rack mounted server. 1. Because I work from home and the space I use is super hot since there are no windows and the GPU turns it into a hot box. So ideally would like to run one or two mini PC's instead while putting the heavy duty machinery locally in a different room and utilizing it's hardware via the lan/ cloud.
2. I've been looking to setup a NAS for quite some time now and figured I could go with a rack mount since they will both take up less space and possibly future proof things a little for upgrades down the road.

3. I can probably set both up fine, I may have issues with the VM setup, but also, with NAS I heard there are often hacking attempts. I would need help making it secure, again way out of my comfort zone.

Hence want to pay someone to do this. For me instead. I have just started working for myself and it's a tight budget so I can't afford to make even a $200 mistake while experimenting. Living in Canada has become painfully difficult so much so that my first and second jobs barely keep the lights on.

[wheat dome]

Why does Switches have fans anyways, what will happen if you remove the fans?

[clear igloo]

They will shutdown due to overheating

[clear igloo]

Either shutdown after a period (or immediately depending on how many you remove), refuse to post completely, or overheat
ASICs get hot and they need to be cooled. Like running your CPU with a small heatsink and no fans

[wheat dome]

Roger Roger!

[waxen scroll]

nope

I had an N9k blow its CPU cooler

ops plugged it in, no fans, didnt tell me about that and it tried to boot and physically blew the CPU block

the chassis had a dent in it

[clear igloo]

rip, lol

I know the Cat9K and 3K series will shutdown or not finish post

[waxen scroll]

RMA approved

[opal pagoda]

n9k is easily the loudest thing in our dc

[vagrant bay]

You'll have better luck finding somebody to help you on the Homelab Discord server.

[opal pagoda]

what is your budget and could you list the current hardware you own that you are willing to use for a home server
i would advise against rack mounting it all if you are on a budget as rack cases are really expensive and normal atx cases are good enough(old school case preffered as it has much more hdd mounting points)
as for secure nas access easiest way is to use tailscale on both nas and device you will use to access it. if you have external service like home assistant a cloudflare tunnel can be used to enable external access to it.

[silent flax]

and if one goes for actual server hardware, they are usually very noisy. For most people a repurposed older desktop system is all they need. Like NAS ? Just use your old parts and put it in a case with enough hard drive bays - like Fractal Define series, if one can find them on used market. Define R2-R5 had 8 bays; R6 & 7 have 6 bays out of the box, upgradable to 11 if you buy the extra trays. 7 XL has 14 or 16 ? can't remember.

[opal pagoda]

Exactly, i wouldn't rack mount a home server
If you would want a rack just get one and rack shelf's and put nas and other hardware except switches on there
I belive sff pcs fit quite nicely on those shelfs

[edgy chasm]

Has anyone else heard about doing VLANS on the router level not on the switch, Because thats news to me.

[opal pagoda]

Yes, you can even do "router on a stick"

Usually you would want to use a firewall for vlan to vlan communication

[tribal sequoia]

Firewalls are beefy enough to be the central router now. HA makes it so you have backup for your routing core without even needing HSRP/VRRP

VXLAN is L2 over L3 as well. Not sure if that's something you might mean

[peak cloak]

wdym, vlans need to be setup on the router aswell

[tribal sequoia]

Yeah but you're just talking about svi's

[opal pagoda]

We use all firewalls except some vrf-s configured on nexus

[thorny osprey]

if my modem can supply over 500 mbps internet on my pc thru a broadband connection then my router should also supply over 500 mbps internet through 5GHz Wifi right?

[ornate jungle]

That depends on the wide variety of factors that govern WiFi connectivity. https://www.wiisfi.com/

[shadow sundial]

i have very basic knowledge about hardware.... but for the life od my i cant remebr how the Lan PCIe expantion cards work.... my MB has a 2.5gb LAN connection. cna i just slap an 10GB LAn expantion card in the PCIe or do i need MB specific ones

[ornate jungle]

So long as there are drivers available for your OS, most PCIe network cards are plug and play.

[shadow sundial]

ok thast what i figured. thanks!!!

[shadow sundial]

watched about 10 videos that LTT put out about NAS and Media servers.... still not sure the route i want to go with. i have family in other states. would they be able to acces my server without compromising thier security? i know Linus said that you could be open to something if you open it to the network. that being said im leaning towards a Synology DiskStation DS923+ with a one 16 tb drive to begin with then add more.

[ornate jungle]

External parties accessing a NAS at your location wouldn't compromise their security anymore than accessing WEBSITE_ABC already does. So long as they don't click random things, know not to open suspicious files or put their private information into fake web pages, and haven't outright disabled Windows Defender (or whatever MacOS uses these days) AND you're not hosting malware on your NAS, they'll be fine.

[shadow sundial]

ok i figured as much my efl ahha but having a outside voice help Quell my worries

[ornate jungle]

Synology NAS running 2x 6TB and 2x 18TB drives is what I use. It's sitting behind Cloudflare for extra security.

[shadow sundial]

how is cloudflare? easy to use. i havent looked into it

[opal pagoda]

i would reccomend getting atleast 2 drives as then you can use raid 1 to protect against hdd failoure

[shadow sundial]

thats a vaild point that i overlooked thank you!

[opal pagoda]

if you want a external access i would reccomend tailscale, i belive synology has addon for it
it creates a config free vpn between devices in your tailnet

[shadow sundial]

tailscale.... didnt Level1techs do a video on that

[silent flax]

there are few options:

• if you have a public IP, then you give them VPN access to your network
• you can also make the NAS public, but that is a small security risk (that is how QNAP NASes got attacked more than once)
• depending on what you want to share, you might also use something like Plex or Jellyfin to give them read only access to your video library

it all comes down to what type of access you want to give them and how much of a security risk you open up with it

[shadow sundial]

i thought about Plex and jellyfin because... well some of my family are not tehc savy. that would be a good interface for them to use without getting into things i suppose

[ornate jungle]

Tailscale is another good one - I don't use it because I legitimately host a couple websites on my NAS, but it's a great option if you want to easily create a VPN between the NAS and a few devices.

[shadow sundial]

really they only need Read only. i should be the only one able to Add or remove files form the Library

[opal pagoda]

i use both tailscale and cloudflare tunnels on my home server

[ornate jungle]

I'm 100% going to recommend this too. If you're going with Synology, they definitely favor you setting up 2x drives with one of their Synology Hybrid RAID options for redundancy and speed.

[shadow sundial]

yep i remeber most of the videos Linus or someone make a similar comment haha just slipped my mind

2 8tb drives should be more thenenough for the begigining

[ornate jungle]

Yeep. My first 2x 6TB drives back in 2018 were bought for $109 CAD each, and then just last holiday season I snagged 2x 18TB drives for $299 CAD each.

[opal pagoda]

https://shucks.top/

[silent flax]

my WD Red 6TB

[shadow sundial]

yeha i budgeted about $750 total for the whole server. not counting like a Plex or Jellyfin server

[ornate jungle]

IMMEDIATELY BOOKMARKS -- I always manually perused /r/DataHoarder for deals. This is better.

Although, it looks like it only does US stores so... I still have to do a bit of manual sleuthing. 😦

[opal pagoda]

that site+ pcpartpicker

[silent flax]

i only shucked two 16TB Seagates for two Exos X16 16TB's

[shadow sundial]

uggg i only need 2 bays haha but i know ill get the two bay and 5 months down the road be ike..... should have got the 4 bay

[opal pagoda]

reason i dont like "prebuilt" nas-es
limited number of hdd's
limited network expansion options
cpu is often trash tier

[shadow sundial]

well i did come up with a regular pc build to use as a server? think you could take a look and see if it ok

[opal pagoda]

sure

[shadow sundial]

ok let me figure out how to share the pc part spicker link

[ornate jungle]

If buying Synology for general purpose usage get whatever their current 4-bay model is at least. Yes it's more money upfront, but it usually is also slightly more performant than the 2-bay equivalent, and can be upgraded with more drives, NVMe caching, and additional memory when you need it.

Otherwise if you want to tinker / have time for it, building your own NAS allows for more flexibility.

[silent flax]

or get the ugreen box

[shadow sundial]

honest i really like that Asutor NAS Linus did a video on. the NVMe one that hade space for 12 sticks

[opal pagoda]

meanwhile you can get a used sff hp or dell
upgrade ram
add in 10g network card

when the time comes for a upgrade add in the following
lsi card in it mode, -e variant
jbod

[silent flax]

i meant Ugreen has their new NAS boxes which come with N100 (more than enough for NAS) + two NVMe drive slots (three if you replace the system one too if i remember correctly) + upgradable RAM + 4-6x SATA

[shadow sundial]

oh? i like UGREEN products.....might look into that. any testing doen on it yet that you know of

[silent flax]

lot. Their system is meh, but it is an x86 system, so you can install OMV, FreeNAS, TrueNAS or whatever you want on it

https://www.techpowerup.com/review/ugreen-nasync-dxp4800-plus/ for example

[shadow sundial]

but they are the same price as Synology boxes

[opal pagoda]

issue with n100 is very limited pcie lanes

[silent flax]

but this only makes sense when you want a small x86 NAS with hotswap bays. If you don't mind doing it manually and possibly powering it off for hardware swaps, a custom HW is always better for price

[silent flax]

sure, and have you seen what you get in those synology boxes as CPU/RAM ?

[shadow sundial]

thats vaild

[silent flax]

$400 NAS is still often 1GB RAM tops with a dual or quadcore 1-1.5GHz ARM CPU

in better case it is a 2016-2017 Celeron from the Atom lineup

like DS423+ has J4125 https://www.intel.com/content/www/us/en/products/sku/197305/intel-celeron-processor-j4125-4m-cache-up-to-2-70-ghz/specifications.html with 2GB RAM

DS423 has Realtek RTD1619B, quadcore ARM with 2GB RAM https://www.synology.com/en-global/products/DS423

and that is a $370 NAS

[opal pagoda]

meanwhile asustor larps about their cpu 😆

[silent flax]

well, as i said, it comes down to small form factor with NAS chasis vs custom built. Personally would always custom build, as hotswap is not that worth it for me

[silent flax]

and N100 destroys N5105

[opal pagoda]

ik

n100 is skylake 4 core performance level

[shadow sundial]

why is there not a share list button on pc parts picker.

[opal pagoda]

um

it is right there

[shadow sundial]

omg i was looking in saved lists.....wow

oh cant post links

https://pcpartpicker.com/list/Bjjb34

[silent flax]

imo:

• custom build if you are after most bang for buck, at cost of size/hotswap features
• Ugreen if you want a NAS style system, but still want some performance/upgradability
• Synology if you want their OS, at cost of either performance (cheaper NAS) or price (better performing NAS)
• QNAP if you want surprise ransomware prompts /s

[shadow sundial]

ahhhh slow mode

i already own the 2070 super. so thats no price in it

[opal pagoda]

netapp if you have dolla dolla

[silent flax]

unless you already own that GPU, consider replacing the Ryzen 5 4500 with something like 5600G, then you can drop the GPU

also RM850e is insane overkill for NAS, and 4000D is not a good case for NAS

also X540-T2 - unless you got that from china for cheap, those COOK with their heatsink, so you need direct airflow at them

[opal pagoda]

speed of ram doesent really matter for nas
w11 license???

[shadow sundial]

intergrated graphics would be enough? if so i can throw the 2070 super into my stream/gmaing rig

[silent flax]

but you need a IGP CPU for that, thus why i said Ryzen 5600G

[shadow sundial]

yes i understood that

[silent flax]

If you can find a Define R2-R5, or Define 6/7, that would be a good idea. Define 6/7 only come with 6 hard drive cages out of the box tho, so you need to buy another 5 for price of around 10 euros per pair

and then you can also drop your PSU to some 550W unit and save a buck there too

also unless you own the NH-L9a, for same price you can get a tower cooler from Thermalright

[shadow sundial]

eh for the price id rather stick with 850 ....might not need it now but its there

again its more about a good fan. i know the NH is reliable. for the price its fine

[silent flax]

https://pcpartpicker.com/list/pD4GQP

left it with a GPU to show price difference

dropped the Windows 11, case and replacwed the cooler

[shadow sundial]

for the case i just throw that corsair in cause its about the same price as this one that has 10 drive bays just couldnt find it on pc parts picker

ALAMENGDA BD-1 Airflow

[silent flax]

you don't use Windows 11 for NAS

[silent flax]

https://pcpartpicker.com/product/L8xbt6/fractal-design-define-7-atx-mid-tower-case-fd-c-def7a-01

[shadow sundial]

i didnt even see that haha i didnt know it added windows. i have a key for windows 10 to use for it

[opal pagoda]

no need, just use freenas

[silent flax]

you get 6 drive bays with that, and you then buy 3 pairs of these if you want to go up to 11 drives https://www.fractal-design.com/products/accessories/mounting/hdd-kit-type-b-2-pack/black/

[shadow sundial]

https://www.newegg.com/p/2AM-0319-00080?item=9SIBFGVJH18878&source=region&nm_mc=knc-googlemkp-pc&cm_mmc=knc-googlemkp-pc-_-pla-almd-pc-_-cases+(computer+cases+-+atx+form)-_-9SIBFGVJH18878&utm_source=google&utm_medium=paid+shopping&utm_campaign=knc-googlemkp-pc-_-pla-almd-pc-_-cases+(computer+cases+-+atx+form)-_-9SIBFGVJH18878&id0=Google&id1=20819686275&id2=157845907322&id3=&id4=&id5=pla-2306917941822&id6=&id7=9007141&id8=&id9=g&id10=c&id11=&id12=Cj0KCQjw1qO0BhDwARIsANfnkv-zzldNFRF7iB9-j7eskWTfYRjFV_wE7PtEat2RdsD8_R0mbKtE-v8aArqiEALw_wcB&id13=&id14=Y&id15=&id16=683125099329&id17=&id18=&id19=&id20=&id21=pla&id22=622847041&id23=online&id24=9SIBFGVJH18878&id25=US&id26=2306917941822&id27=Y&id28=&id29=&id30=16112306240910040174&id31=en&id32=&id33=&id34=&gclsrc=aw.ds&gad_source=1&gclid=Cj0KCQjw1qO0BhDwARIsANfnkv-zzldNFRF7iB9-j7eskWTfYRjFV_wE7PtEat2RdsD8_R0mbKtE-v8aArqiEALw_wcB

this si the case i found

[silent flax]

Define 7 with it ssems 10 drives

[shadow sundial]

ohhh pretty!

nnince cable work

[silent flax]

not mine, but similar to what i have

https://forums.unraid.net/topic/97612-fractal-design-define-7-build/

[opal pagoda]

you will need a lsi card in it mode if you want more than 6 hdds

[silent flax]

similar as in number of drives, i got 8 i think

[silent flax]

depends on performance required

[opal pagoda]

true, i have seen those cheapo 12+ port hba-s with single pcie lane interface

[silent flax]

or 😛

this is PCI-E 3.0 x2 if i remember correctly, for 8 drives

[shadow sundial]

omg i have not seen a NVMe card for that....

[opal pagoda]

at that point just use lsi card

[silent flax]

if you got an open ended slot to put the x8 LSI card into

my NAS (except there were few changes since, the 4x NVMe card us gibem the 1050 got replaced by 960 etc. Also the person who designed that IBM/LSI card to have the SFF8087 connectors at front needs to be put in jail

like what kind of monster designs this

[silent flax]

also depending on how much performance you need, you might want to consider grabbing an older 6-9th gen Intel with IGPU instead, as the i5's of that generation can be very cheap, and depending on how much CPU performance you need, it might be super cheap

[shadow sundial]

i was looking at the i5-9600K. thast abotu $150 or so

[silent flax]

for CPU + RAM + MOBO combo or just the CPU ?

[opal pagoda]

my minimalistic nas haha
very cheap, very low power

[silent flax]

hope it is a combo price

[silent flax]

had a zotac like that

CI320 to be specific https://www.zotac.com/us/product/mini_pcs/ci320-nano

[opal pagoda]

exact model as me

[silent flax]

if you bought it used in Slovakia, it might be mine LOL

[opal pagoda]

no, it defo wasnt yours.
mine had braun shaver ad running on it when i first booted it up

[silent flax]

152 euros in jan 2015, serial number G145000003384 😄

sadly every N2930 system i owned was not good for my ears, i could hear coil whine from every N2930 system, but that is my ears

got one of these sitting in a box as well, sadly one screw was bad from the start, so i had to break that corner of the bottom cover away https://www.jetwaycomputer.com/JBC311U93.html

dual gigabit, N2930, up to 8GB RAM, 1x mSATA, 1x mPCIe, 1x SATA connector (found a power adapter on aliexpress this year)

[opal pagoda]

Huh mine is perfect, no noise at all

[shadow sundial]

How to buy one of the zotacs there isn’t a purchase thing in the website

[ornate jungle]

Last I checked, Zotac doesn't sell directly to the public. You'd have to check computer resellers, like Newegg or Canada Computers.

[silent flax]

also CI320 is nearly a decade old product

current equivalent would be https://www.zotac.com/us/product/mini_pcs/zbox-ci337-nano-barebone

[opal pagoda]

300 $

[silent flax]

but then you could might as well get the minisforum i got

[opal pagoda]

or one of those 1l tiny mini micros

[silent flax]

https://store.minisforum.com/products/minisforum-un100d?variant=44988920660213

[shadow sundial]

can i use that fo rth server and just add external drives?

[silent flax]

i personally wouldn't, i still think a normal PC is a better solution for most people

but on other side you could use something like https://www.amazon.com/Yottamaster-Aluminum-External-Enclosure-Support/dp/B07WS99GCR to have your hard drives 🤷‍♂️

[shadow sundial]

Thts neat.

[silent flax]

didn't mean that specific model (seems like people complain in reviews), but more like the generic product category

[shadow sundial]

Honest the more I look at the Asustor Flashstor 6 the more I feel thts the best thing for me…. Now to find relatively cheaper and NVMe cards

[clear igloo]

netapp for dollas but pure if you have dolla dolla dollas 😄

[orchid minnow]

Don't know if this is the right place, but I got an issue with the range of my WiFi, and the WiFi extenders need a network cable to the modem and refuse to work if it's not directly into it.

So the question is: are there any good range extenders that can simply take the WiFi signal and boost it, so that I could just run a few of those instead?

I wish I could just run cable but sadly that's not really possible

[clear igloo]

Every WiFi repeater will cut bandwidth in half, just FYI

[clear igloo]

MoCA or powerline might be alternatives but powerline can be hit or miss depending on the wiring quality in the home among other things

[orchid minnow]

I know, but we have gigabit wifi is 380mbs as is, that's via the WiFi point that's as far as I can get it, it's just very unreliable

[clear igloo]

Any chance you can look at mesh units instead?

[orchid minnow]

I had a powerline but this is the dirtiest line in the house so it was craptastic

[clear igloo]

ah yah, that's the biggest drawback of powerline 😦

[orchid minnow]

Idk we got a wifi6 modem from our provider so I think so

[clear igloo]

Mesh would be better than a repeater because of the usage of a dedicated backhaul wireless link

[orchid minnow]

I just want something capable of expanding the networks reach without needing cable connection on all the points

[clear igloo]

Yah, mesh would be better but might be more expensive but I would look at your options
Repeaters take the signal and just broadcast it again but the issue is they can only broadcast the signal at the quality they get so further away means they're just broadcasting crappy signal

The other issue I've seen with repeaters is they sometimes make their own wireless network name so roaming between networks doesn't exist

[orchid minnow]

I see, and with a mesh setup? What's the range I can get between points?

[clear igloo]

Mesh basically has a dedicated backhaul signal so it doesn't repeat anything and uses the same network name everywhere so you get roaming

I would say it depends on the units but usually they do 5GHz backhaul for speed and you're going to get maybe 30 to 50 feet between nodes depending on the interference (walls) between them

[orchid minnow]

Is there a good example of a kit (also idk what feet are) that would work for a 15 meter distance having 6 walls in-between being able to put one after 3 walls for the other to be in the room?

[clear igloo]

Yah, that should do well

[orchid minnow]

Or diagnoly just 2 walls but at the full 15m

[clear igloo]

Are they brick walls or?

plaster/wood

tp-link deco or netgear mesh systems might be a good place to start looking
Edit: Linksys Velop is another one

[orchid minnow]

One is near a window with a wood isolated wall and plastic panaling the other is wood, with the 6 walls most are brick but single layer 1 is wood

[clear igloo]

yah, I would get a three node mesh system then but that should be fine

[orchid minnow]

Do they need a network cable on a base station or?

[clear igloo]

Just base station to router and then only power for the rest

So you could plug in the main base unit and disable WiFi on the ISP box but then give the same name/password on the mesh system so nobody will know 🙂

[orchid minnow]

I'd need to do that when everyone is out then... Hmm, i'll look into it, would be nice to get some WiFi outside as well tho

[clear igloo]

Yah, you could also just plug in the unit and setup everything and then toggle wifi off on the ISP box later too, they'll have a small wifi blip but nothing for more than a minute or two in most cases while things reconnect

The nice part of mesh is you can buy extra nodes later too to expand the system

[orchid minnow]

No it's more that I live with my parents who don't use anything but ISP stuff, and from what I've seen the ISP router can't have WiFi disabled on it unless you log into it

[clear igloo]

Ah, yah would need to login then if you wanted to turn it off

[orchid minnow]

It be better if I could get a new router with more ethernet slots as well as it being compatible with the mesh WiFi system to begin with

[clear igloo]

look into network switches then, plug one port into the router and then you can have many more ports

5 or 8 port gigabit switches shouldn't be more than 30 or 40 euro worst case

[orchid minnow]

If that's possible, as the router has limited speed on the ethernet ports despite our fiber being gigabit or gigabyte I don't remember

[orchid minnow]

We already have a switch in

And it is an 8 port

[clear igloo]

bit, speed is always bits for networking 🙂

Ah yah the mesh units each have network ports on them too and you could add switches off them too

[orchid minnow]

Yea I mix up my terms in translation at times

[clear igloo]

No worries, yah I understand how it can be confusing, especially when browsers and some clients always show bytes

[orchid minnow]

That be nice then my pc could be wired up

[clear igloo]

Yah, Linksys and TP-Link units I've used for others before and they work great and have 3 or 4 ports on them too

[orchid minnow]

Well I'll do some searching and see if I can find a kit that uses the router as base station, and see if I can then get full speed out of all the ports rather then just from 2 of them

That should make it a lot easier

[clear igloo]

Yah, best of luck and feel free to ping or post here when you find something if you want opinions 🙂

[orchid minnow]

I will, tnx for the help

[lean glade]

Hey chat, just joined the server to get recommendations or a link for a place to compare simple PoE network switches for routing power/data out to some security cameras and how to make a home install look tidy

[opal pagoda]

how many cameras are we talking about?
would you have space for a small network rack?

[lean glade]

only 3 cameras in the back of the property that I have already routed the CAT6 from those locations into the rear doorway with ~8ft of spare length

this is also the kitchen area

The mechanical closet is where I would consider something more substantial, but I am already patched to the mechanicals closet through the ethernet face plate nearby(really its og phone lines I repurposed, but it works for network)

The main NVR head of the system will likely live at the front of the house/under the TV/Entertainment center and just handle the 1 security camera near the door

looks like the cameras I have will draw <12W so I would need a min of 36W output

[opal pagoda]

that is standard 802.3af poe

[lean glade]

Are there any typical brands to avoid/brands that are solid buys?

[opal pagoda]

do you plan on installing some ap-s in the future that will also be poe powered

[opal pagoda]

tp-link, netgear are solid consumer options

[lean glade]

I don't currently see a strong need for additional networking equipment, save for maybe 1 range extender to broadcast into the back yard as that usually is pretty slow (but also I am in a city where signal and cell data is fine for anything like that)

What has also been suggested to me was a small Ubiquiti, I am unfamiliar with them in the consumer space at all

Would that be overkill for my needs? Are they a trusted brand in your eyes?

[opal pagoda]

you dont need ubiquity or any managed switch
they mainly operate in prosumer space and some small businesses
something like this would fit your needs fine https://www.amazon.com/TP-Link-Compliant-Shielded-Optimization-TL-SG1005P/dp/B076HZFY3F

[lean glade]

Perfect, that's what I needed to hear. I am technically a small business, but like 4-person, working out of my home small. We tinker with networking but mainly are focused on PLC controllers and hardware level IO rather than the IT management level of VLANs

[lean glade]

Thanks for the quick help!

[opal pagoda]

no problem

[pseudo blade]

Want to know what I'd do? Dahua's NVR's often ship with a bank of PoE ports, I'd do the lot in one box. The result is Ethernet with none of the effort of managing a switch.

Not only Dahua do that of course

It's a somewhat common config for small business security installs, security companies here love them

Here's an example of one, with 8 ports in this example: https://ubwh.com.au/Dahua/Dahua-Cameras-and-NVRs/DHI-NVR4108HS-8P-4KS2

[grand reef]

Hey I am considering trying NordVPN. How much does it impact/truly help with latency and your overall browsing experience. I’m new to using a VPN as the default connection through my personal Merlin flashed router.

[analog ice]

latency difference is almost always negligible at best

[worn holly]

I know this is going to sound like an odd question, but is it possible to set up a site to site link in unifi OS and keep both sites on the same subnet? (pls @ me i dont always see messages)

[opal pagoda]

simple answer is no
why would you want them on same subnet anyway

[worn holly]

just makes life easier for me, TLDR i want to link my parents LAN and my apartments LAN together so i can leave all my servers at their house and everything at my apartment just sees it as if its still all in the same place

[peak cloak]

That's possible with two subnets

[opal pagoda]

you can do that with multiple subnets too
example
10.10.0.0/16 - your parents house
10.20.0.0/16 - your apartment
and routers provide a route across those 2 subnets

[worn holly]

see this is where I think i messed it up the first time, I could create the link, but devices on one subnet could not see the other

[peak cloak]

You need to add a static route

Basically so the router on one end knows where to go to reach the other subnet

And vice versa

It's really cool how it all works together

[worn holly]

sounds like it, the hope is that my parents will be getting 1gig symmetrical fiber in a few months, so ill be able to leave all my server stuff at their house (where i dont pay for electricity hehehehehe) and link back to it over site to site VPN so anything I have in my apartment still plays nice

[ornate jungle]

This highly depends on where your existing high latency is coming from. Despite their marketing, VPN's do not magically fix connectivity issues, improve latency, or make your browsing private. They can help accomplish these things in some cases, but aren't a magic solution.

[worn holly]

I'd also like to jump in on this and say that NordVPN has gotten a bit too commercial in recent years, and while they may cost a bit more, there are honestly better options out there

[pale ridge]

Probably not with UniFi OS and you really do not want to stretch layer2 domains over any kind of distance it is a terrible practise. There are protocols and methods in place to “stretch” layer2 semi safely but it is really only needed for legacy apps which have no other choice for DR. OTV, EVPN come to mind but the carried between sites becomes very important.

[fervent brook]

I'm looking for some kind of adapter set to let me use an cat5 cable for continuity testing. Like rj45 to test lead adapter

I probably could just buy extra leads and a unterminated cat5 run

[topaz patrol]

You mean one of these?

[fervent brook]

That looks like rj11, but yeah, that would be one half.

Lol, im stupid, if it was rj11 it would have 6c max

[topaz patrol]

It's rj45, and I'm sure you can get female versions

https://www.fluke.com/en-us/product/accessories/test-leads/rj45-clip-set

[fervent brook]

The other side would use that 1/4" banana ish plug my multimeter uses

Or just use the clips and clip to the lead i already have

How much does a fluke brand rj45 breakout adapter cost?

55 usd?

I might have paid too much...

[topaz patrol]

https://tenor.com/view/google-exists-google-search-it-geekboy-geekboy-cz-gif-25933207

[fervent brook]

I wasn't really asking for the price...i know it's too much for me. Im too poor to afford fluke brand flukes

Damn...

Lol

[topaz patrol]

Yeah very expensive lmao

[fervent brook]

https://m.media-amazon.com/images/I/61B+cLI4rqL._AC_SL1500_.jpg

Perfect

[opal pagoda]

That is 6p6c not for Ethernet

Just sacrifice one patch cable and solder on crocodile clips

[fervent brook]

Im not using it for Ethernet anyway, so 6p6c should be fine

Most phone line uses 2c anyway

[dry raptor]

Anyone got suggestions for a unmanged (or managed though the easier the better for me) switch of great quality but for cheaps (50 euroish)? Like I can find used on Facebook or just one or two that is is known to be great value? I have fiber so I can do 1000/1000 external but would like faster internally if possible

[fervent brook]

Never buy a manged switch

[dry raptor]

I can find this one https://www.servethehome.com/trendnet-teg-s350-5-port-2-5gbe-switch-review/2/ for 600 DKK 80 EURO quite pricey but 2.5 gig

[fervent brook]

Does whatever random European country you're in have second-hand stores?

[dry raptor]

I am in Denmark we do have second hand stores but its quite the crap shoot and I do not believe I have ever seen a selection of higher end tech there

[fervent brook]

Oh, you want 2+gbps

[dry raptor]

I would prefer it but at least 1 gig but 2+ would be nice

[fervent brook]

Since i have no idea of the prices or selection in your region, that makes it very hard to recommend anything

[dry raptor]

Something that's generally cheap and good would probably also be cheap and good here

[fervent brook]

I don't see a Amazon region for dk... Closest i see is nederlands

[dry raptor]

Its western europe so the selection is mostly similiar to any other western country

we usually use amazon.de the german one

[fervent brook]

I don't see any for less than 50

[dry raptor]

The useage is a media server for the home
A webserver
my personal computer
a WIFI access point at some point for my room
and a free port for misc

more then 50 is okay gotta be realistic whatever you can recommend thats good b ut on the budget side

Anything that can rival the one i found for 80 euro forexample

For same or cheaper

[silent flax]

buy from aliexpress. seriously

unless you are in a hury, 4x2.5 + 2x10 switches are often sub-30 euros, 5x2.5 + 1x10 are 30-40 euros, 8x2.5+1x10 are sometimes sub-50 euros

like https://www.aliexpress.com/item/1005006866459336.html right now for example

[pseudo blade]

Most of the cheap unmanaged switches are basically just reference designs in a cheap case, unless you go so cheap they put 100mbps chips+connectors in you're pretty much in the same situation with nearly any unmanaged switch. You can get like three gigabit D-Links or whatever in your budget and for home use if you're only using one you probably won't care about anything I care about in a switch anyways and they'll do great for you.

If I got asked the same question at work I'd say this because unmanaged switches with no STP suck: Ubiquiti USW-Flex Mini / Mikrotik RB260GS, both managed and competent for peanuts, the former even has PoE you won't use.
For 2.5G, either pay more, Look at ServeTheHome's Aliexpress switch roundups

[silent flax]

they are all the same hardware inside - a pair of Realtek chips, one has 2x10Gbe + 4x2.5Gbe, and the other is used to split one 10Gbe to 4x2.5Gbe if more RJ45 2.5Gbe ports are needed

they are all this design

[pseudo blade]

I think I saw a single-chip design a few days back

[silent flax]

4+2 has no RTL8224-CG, 5+1 i don't know, 8+1 is that design above

[pseudo blade]

But that is indeed common in the Chinese ones

[silent flax]

i mean at sub-50 euros for 8x2.5 RJ45 + 1x10 SFP, there is nothing to complain about. Sure, unmanaged, but meh, whatever, for home use managed is not really needed

and aliexpress is kinda OK lately with delivery times too

[pseudo blade]

You're not getting anything like that at retail for 50EUR nor does that architecture matter whatsoever for performance

[silent flax]

ordered Jun 23, half of order arrived 4th July, last item today on 8th July

and buying same from Amazon will get you same item, just for twice the price 😄

[pseudo blade]

That said you can get 4-port 2.5 gigabit ones cheaper again

They only have to do that if you want more ports

[silent flax]

4x2.5 + 2x10 from china is sub-30 euros

[pseudo blade]

Yes

[opal pagoda]

why?

[fervent brook]

it's been manged

[opal pagoda]

what if i am the manager

[fervent brook]

you mean the manger?>

[opal pagoda]

yes i am a rack for fodder, or a structure or feeder used to hold food for animals

[dry raptor]

Ordered the one you linked

Welp I do hope they speak english in customer support

I accidently ordered US and not EU

adapter that is

[silent flax]

worst case scenario you order a 12V barrel jack power adapter from somewhere local

[frank haven]

Hey hey hey I've been having issues with the current wifi system in my house so went to my isp and got a router/ap (eero 6e) hoping to have improved range and speed (pay for 660/660 up/down) only to have it perform very similarly to the old zyxel box with spotty connection often drops of the network in certain areas. The 6e does have some network analytics and like holy shit is the noise floor bad it's worse on 5ghz and 6ghz I was wondering if switching to a udm pro and two U6 pro APs would help solve this issue

(I'm bout to start my shift now so I'll be back in a few hours)

[shadow sundial]

looking to upgrade my ISP moden/router equipment. just not geting the speed i expect to . any suggestions

[worn holly]

Sorry for the slow reply, silly me was missing a step originally when I did it the first time, forgot to set up routing tables so devices could see both subnets

still new to networking lol

[peak cloak]

setup BGP so it's all automatic...

while having to troubleshoot why it's not working

[opal pagoda]

did you make it work?

[thorn delta]

Dear god, they've arrived.

20+ year old, 100 mbps infrared PTP link

[frigid merlin]

Infrared?!? That is some strange way for creating a high-speed link. Love it!

And I totally love the DB25-port reading "Alarms".

[cosmic dragon]

Well hello there, first time asking in here but I guessed this is probably the place for it.
I will be moving in to a new apartment next month. At my old place I managed to ethernet everything. But that will not be possible for my new place.
I checked the circuit and the room where the internet comes in shares the same breaker as the other 2 rooms where I want to setup PCs.
So I am researching what solution I can go with.
Moca is sadly not a option.
Reading through Powerline posts I am not impressed.
So I am contemplating if just upgrading everything to Wifi 6E would be a better option than investing in Powerline.
But finding real Data seems difficult. I just want some raw data to look over. Ping and Datarate of both and Reliability Issues.
Or maybe some user experiences from anyone that used these.

[zenith iron]

A networking question!

Say we have 2 switches and 10 VLANs. We want to send 5 VLANs via sw1 and 5 other VLANs via sw2. However in case one switch fails we want its VLANs to fall back via the other one.
How should it be set up? 🙂

[tribal sequoia]

??

i can't see why'd you'd do that

are both switches in your infrastructure and all vlans owned by you?

what you want is an mc-lag configuration with both switches as core routers housing your vlans with HSRP/VRRP enabled between the pair, whether that's via vpc for nexus or vlt for dell or mc-lag for fortinet... etc

without at least some device knowing all the vlans, i'm not sure how to accomplish what you'd want in that scenario?

perhaps placing the vlans under seprate vrf's

[zenith iron]

It's a theoretical scenario, was asked this q on an interview. We're working with layer 2 switches here, no VRFs. Let's say we have layer 3 devices above and below switches

[tribal sequoia]

ah i see

i honestly don't know

if this question requires information outside of the text being assumed i don't know

if it doesn't i definitely don't know and i guess i need to study L2 more lol

[zenith iron]

Haha let's see if anyone else has ideas! 🙂

[tribal sequoia]

just for my sanity, neither of these switches has all 10 vlans on it until one fails

and this is purely L2 vlan table information

[zenith iron]

Obviously, each sw would have to have all 10 configured for the fallback event, a question of how to balance them

[tribal sequoia]

ok, i was trippin, thinking the impossible was occuring

it would just be 2 separate spanning tree instances

with 5 vlans in each

identified roots for each set differently so that either one or the other takes over

this matters so little these days for most deployments i think in L3 almost always lol

[zenith iron]

yeah, now it's a standard to just route over spine and leaf everywhere, often with ACI on top 🙂

[tribal sequoia]

your core switches can just be connected to both things at the same time sharing all information and failing over seamlessly

firewalls are powerful enough these days (in most deployments) that you don't even need to offload your routing to your big core switches

[opal pagoda]

Could you provide a network diagram?

[tribal sequoia]

apparently it was just a hypothetical question for like an interview

[zenith iron]

yup, this ^ 🙂

[thick minnow]

Hello

[zenith iron]

EHLO

[clear igloo]

TCP with packet loss

[hearty oyster]

hi.. got myself a Zimacube.. about to fill it with 6 x 14tb hdd.. and 2x (or 4x) 2tb n.2 .. not sure what config the drives to.. want some online networking (pdf files mostly) but the main bulk is either backup or 2nd copy .. (have a collection of external drives 8tb to 1tb and internal 8tb-2x2tb)

[shadow sundial]

so im building a media server for me and my family. ( they are in multple states ) i also want to add my games to it so they can play them when thye want. is that different then adding movies anything specail i will need

[peak cloak]

wdym by that? Like cloud gaming type of thing?

[shadow sundial]

not really. kind of like a steam library that anyone in the server can access

beacually the same as the Media library. but they can download the gema fiels form the server and play them locally

[peak cloak]

That may work for old games, but nothing for new games with DRM

I just use steam family share

[shadow sundial]

yeha thats not good enough for what i need to do. also what do you mena DRM i bought the game i can what what i want with it

[peak cloak]

yeah no

it won't let you

[shadow sundial]

what do you mena wont let me

[opal pagoda]

anti piracy mesure

[shadow sundial]

this isnt priacy. i own the files.

[clear igloo]

Doesn't matter, DRM is in place to prevent you from sharing your one copy to everyone

[shadow sundial]

That’s ridiculous

[drowsy fossil]

also no, legally speaking you were granted a license to use the files

[spark torrent]

I have a modem which goes to my router. From that main router I have an Ethernet cable going to my PC. I can play games and everything just fine no lag at all and get the full speeds I pay for.

For the rest of the house I have a mesh system. It goes modem to router of course and then from router to main mesh access point and then from the 2 Ethernet ports on the main mesh access point I have the 2 other mesh access points Ethernet backhauled. BUT on the upstairs mesh access point which would be from main router to main mesh AP then to this up stairs mesh AP it goes from Ethernet to an Xbox which then will get random lag spikes and I don’t know why.

Does that sound like the mesh system and access points are just not strong enough and getting a better mesh system with more power would fix it or is it probably something else?

My main router is a TP-Link Archer BE550 Wi-Fi 7 and the mesh system is a TP-Link Deco XE75 Pro Wi-Fi 6E

And if we do think it’s an issue with the mesh system I’d be upgrading to TP-Links new Wi-Fi 7 Mesh System the Deco BE95

[spark torrent]

Please ping me when you reply thx!

[vagrant bay]

Possible solutions are some type of file share (SMB/NFS/Etc.), you can also try FTP/SFTP, or just a simple webserver that shows the directory index (Although the files would need to be zipped).

[spark torrent]

I run my mesh system in AP mode and main router in router so I figured it made more sense to let the router do DHCP stuff but do you think maybe that could be the issue and I should let the mesh APs do DHCP?

[crude scroll]

hey guys, I am trying to host 2 websites on a linux vm, at the moment both websites are available from inside the vm, but outside the vm i can only access the first of the 2 websites on the host machine, and even then only when using the ip address of the vm. what should i check first? The router i am using for the LAN is running openwrt, so dns and dhcp is being handled by dnsmasq

[vagrant bay]

On what ports are those websites hosted ?

[limpid fable]

When connecting to any website, my requests are going through a server 122.x.x.x. Is there a way to make my requests not go through that server?

[peak cloak]

you want to be able to access both sites through one ip?

there's two ways, run them on diifferent ports or run a reverse proxy

[silent flax]

so i think my ISP router was overheating. Yesterday it would randomly not create new connections for few seconds every few minutes (existing connections would work fine tho). I opened the little metal door to the hole in the wall the router is in - no issues since. So i guess i need to have the router somewhere in open, no idea how will i do that there, but that is an issue to solve some other time

[pseudo blade]

Could be, could be chance. Probably good to keep it at a reasonable temperature anyways.

[twin sphinx]

Infinite Cables delivery today 👀

[quaint siren]

If site is throwing 504 gateway timed out error. Using tracert I can see that second hop fails but continues fine afterwards through ISP stuff and then actual site things.
Second hop failing could mean that ISP is blocking the connection?

[opal pagoda]

highly doubt isp is the proxy

[quaint siren]

Site is accessable through VPN, tried several countries - Sweden, Norway, Finland and baltics doesn't work... so I wonder if it's ISP doing or some regional server is down

[crude scroll]

I am so sorry @vagrant bay @peak cloak , I have been so busy I did not get to reply here

I have the website hosted on port 80, and I think I have already enabled access to the port in firewall and on the router

[crude scroll]

I want to have both websites hosted on the same VM, just having different URLs. Right now neither url that we set in the config file in Apache works, but putting in the vm's IP address works with one website

I guess that means I need to do a reverse proxy then?

On the openwrt router I am using Dnsmasq to handle DNS and DHCP, so far it looks like DHCP is working fine as both vm's and their respective host machines have got IP addresses in the set range

I am just not sure if the DNS is working

[opal pagoda]

Yes

[vagrant bay]

Do a simple ping <hostname>, if it resolves to the VM's IP it's working

[crude scroll]

Nope it didn't work, it says that the domain doesn't exist or something like that. So i guess the problem is somewhere between the vm and the router?

[vagrant bay]

Huh, can you ping the VM's IP's seperatly and confirm at least that works ?

[crude scroll]

yup that works fine

[frigid merlin]

If you have connectivity to the IP, use the file c:\windows\system32\drivers\etc\hosts to map the IP hard to a hostname.

This will allow for a local DNS-resolution of both hostnames

The http-request from the browser to the webserver will include the hostname so the webserver knows which instance to use for the reply.

But your local browser has to be able to resolve the hostname

Put a line in the hosts file reading something like
<IP> <hostpart of URL1> <hostpart of URL2>

then restart your browser (sometimes it needs that)

[crude scroll]

alright, i'll try that. but will that also help other computers on the same LAN network connect to the website?

[vagrant bay]

Alright, at least we know that works. Next is to check your router's DNS config file, can you send SC here of the config.

[crude scroll]

or just for that computer specifically

[vagrant bay]

The thing Teddy mentioned you do is for 1 PC only

[frigid merlin]

No, bit it will check if it works at all.

[crude scroll]

alright, sure i'll try that

[frigid merlin]

At least your webserver will work.

[crude scroll]

alright, after i do the thing teddy asked i will do this

[frigid merlin]

If that works, you fix your DNS.

[crude scroll]

it might take a couple minutes tho

[frigid merlin]

I mean, if your using dnsmasq, a simple
address=/<hostpart of URL1>/IP
address=/<hostpart of URL2>/IP
in the config file should do the trick

Then, if you're on Windows, open a cmd, use the command nslookup to get a nslookup-prompt
On that prompt, do a
server <IP of the DNS server, in this case probably your router>
and then just enter the two hostnames and see if these get resolved.
That has to work on your local lan for the other boxes to resolve the websites.

[crude scroll]

Already have that in my dnsmasq

[frigid merlin]

Did you restart/reload dnsmasq?

[crude scroll]

yup

[frigid merlin]

And no luck?

[crude scroll]

i mean i'll try it again

give me a few minutes, my parents are calling me

[thick minnow]

So I want to upgrade my Wi-Fi and I've been looking at Ubiquiti's U7 Pro and Pro Wall access points. My home has 4 floors and each floor is roughly 1200 square feet. My current network infrastructure uses mostly Cisco switches and routers for the core networking and a separate perimeter firewall using Netgate pfSense. I don't have any PoE switches and I really can't currently afford ubiquity switches (maybe at a later time). Is there a more affordable route that I can integrate with my existing networking topology? I have a 10G aggregator switch so I was hoping to get a cheap 2.5GB switch that I could trunk to my core using a 10G dot1q uplink. Would this work? Does anyone have a better solution?

[topaz patrol]

Do you really need wifi 7 now?

I’d wait a couple months for the price to come down a bit

[thick minnow]

I want to be future proof and the price difference between 6 and 7 are too close to be an issue

[topaz patrol]

I’m assuming you are on ac atm?

[thick minnow]

regardless of the AP I get, the challenge will be the same.

[thick minnow]

yes. I am using TP-Link Deco M5 (x4) and the coverage is abismal.

[topaz patrol]

Are you using the wired backbone?

[thick minnow]

yes

I am most concerned with the core integration than the selection of APs

[topaz patrol]

Wdym waps are just plug and play

Just get a poe switch or injector

[thick minnow]

My current core network can handle a lot but it has two major issues.

1. No PoE
2. No support for 2.5Gbe
   I need the APs to negociate client VLAN assignment. Either using dot1x or something else managed by the AP/Controller pair.

That's why I am interested in Unifi

[topaz patrol]

Have you looked into omada? it can be cheaper

[thick minnow]

From what I can tell, 2 U7 Pro's and 2 U7 Pro Walls would cost me CAD 1010+tx. I am fine with that budget

I mean. I would love a discount if anyone knows how to get one. 😉

[topaz patrol]

Cheap 2.5gb poe switch and set up a controller and you’re done

[thick minnow]

Do you know if it will work with mult-vlan APs?

[topaz patrol]

You will probably have to keep an m5 if you’re only replacing them with 2 waps

[thick minnow]

there are 4 APs in total

two ceiling mounted and two wall

[topaz patrol]

I misread lol

[topaz patrol]

You should be able to do that using the unifi controller

[thick minnow]

The APs don't tunnel their traffic through the controller so I assume that the AP is trunking to the switch no?

Meaning, the AP uplink is using dot1q vlan tagging and the switch needs to be able to forward this or de-encapsulate it and forward.

That is my hope at least

[topaz patrol]

Yeah

[thick minnow]

I can't just put a unmanaged PoE+ switch and call it a day.

[topaz patrol]

https://a.aliexpress.com/_mPQ3BVS

[frigid merlin]

Actually you could, just for transport. If you don't mind that the traffic on the "umanaged PoE+ switch" will look completely shit and all of your security on the port uplink from that switch to your core, you can happily send tagged traffic through an unmanaged switch with no VLAN capability.

In the end, VLANs are just some bits in the ethernet frame...

But it's very very hacky and I do this only if I'm sure that I'll never see that network ever again in my life.

[thick minnow]

how would that work knowing that it would be uplinked to a cisco aggregator?

[frigid merlin]

On the cisco side it would just be a trunk.

[thick minnow]

really? and that would work?

I thought dot1q trunks did negociation

[frigid merlin]

They can, I'm not saying you don't have to configure the cisco to do nasty shit, but it is possible.

[thick minnow]

hmm... I would need to test this to be sure

[frigid merlin]

I have done this in very temporary installs when availability of alternatives was an issue.

And I'm not proud of it.

[thick minnow]

pride went out the window years ago for me

I mean if I had an unlimited budget, I'd get a ubiuquiti switch and call it a day but they are WAY too expensive

[frigid merlin]

It will get very tacky if the port on the cisco would get any traffic that he doesn't know what to do with... so you have to make sure that you're VLAN tags are very properly created on the APs.

[thick minnow]

yeah. Untagged traffic would fall to the switchports native vlan but everything else would need to be tagged correctly

[crude scroll]

i am so sorry @frigid merlin @vagrant bay , i got distracted after my parents called me and only got around to checking everything now

[frigid merlin]

Actually I would configure the port to throw away all untagged traffic and would only allow tagged traffic.

[crude scroll]

good news is that putting the IP in the host worked! I can access the site on the host computer now

[frigid merlin]

That's good, so it's only the DNS that needs to be fixed.

[thick minnow]

hmm. interesting. I thought that the APs communicated with the Controller over untagged traffic only.

[crude scroll]

alright, so should i send a screenshot of my dnsmasq config?

[frigid merlin]

If I remember correctly this can be changed. And I definitely have a setup around where this had to be changed because of REASONS.

[crude scroll]

so this is dnsmasq.conf

im honestly not sure what is here, it wasn't me who set this part up

[frigid merlin]

Comment the lines with the CNAME, these feel redundant.

[crude scroll]

alright

[frigid merlin]

also remove the ptr-record.

or comment it.

[crude scroll]

alright, done that

should i send the dhcp file as well?

/etc/config/dhcp?

[frigid merlin]

It will be pretty expensive, if you want 2,5 Gbit uplinks to the APs and a 10G uplink to the core.

No, not sure what we need that for.

If your dhcp works, just be a happy peach. 🙂

[crude scroll]

alright

because there is an entry in there about dnsmasq, so i was wondering if it was involved

[frigid merlin]

No, just ignore dhcp.

Your dnsmasq just hast to give the right answers when it comes to forward DNS resolution.

[crude scroll]

alright

[frigid merlin]

What I'm using for 2,5Gbit uplink to APs and 10G to core is the DGS-1520-28MP, but you might hate a dlink switch if you're into Ciscos. 😉

[thick minnow]

I don't hate solutions if they work. I was looking at this: https://amzn.to/4eWeRWR

but I want managed

[crude scroll]

so now i just try accessing the sites from other devices connected to the network and see if they work too? @frigid merlin

[frigid merlin]

No, you open a commandline and do the nslookup-thing I wrote above.

[crude scroll]

oh sorry

[frigid merlin]

Your dnsmasq has to give the right answers. 🙂

[crude scroll]

right so that didn't work, so its my dns then

[vagrant bay]

As a sanity check, check what DNS your PC is using (Settings > Network > Ethernet or WiFi > Select the network and then scroll down)

[frigid merlin]

You just need the four lines in your dnsmasq.conf for this. So ensure that you're asking the correct nameserver. And don't have any form of proxy running.

[frigid merlin]

Open a command line and execute this command:

netsh interface ipv4 show dnsservers

This will show you the nameservers that are actually used within your windows-box. Check that you are using the nameserver that you are configuring.

Oh. That what @vagrant bay wrote up there.

[frigid merlin]

I hate that switch just by looking at its picture...

[tribal sequoia]

i like what was said above about an unmanaged switch 😄

if you have to pass through one, tag all your traffic

[thick minnow]

haha. I can't seem to find a reasonably priced (under $400 CAD) managed 4-8 port 2.5G PoE+ switch... it's like they don't exist

[tribal sequoia]

it limits it's usefulness for a user connecting, but if it has to go somewhere else it will at least traverse appropriately

[frigid merlin]

ebay is your friend, just go used market. You can find some decent b-brand switches for not tooo much money there.

[frigid merlin]

Oh, the only non-network-device thing I have ever connected to an unmanaged switch being abused in a way like this was my laptop being configured to fit that situation. There is no way I would ever connect a standard PC or anything to a system like that.

It is really hacky.

[tribal sequoia]

just tag your nic if it supports it

VOILA, PROBLEMO SOLVED

[frigid merlin]

There are not a lot of NICs out there that do proper VLAN tags and you will find out with a scenario like that. Trust me. If you want to learn and practice on wireshark, you will. 🙂

[tribal sequoia]

incredible all things considered that a low level protocol like vlan tagging isn't done properly in a scenario like that

[frigid merlin]

If you look at NICs, just take the Intel I225 to witness the level of jank when it comes to ethernet and networking. So many things are broken in modern NICs...

[tribal sequoia]

heh i have an intel i225, it wouldn't even connect to the switchports on my isp modem

i had to put a switch inbetween for me to connect

[frigid merlin]

That sounds about right.

[tribal sequoia]

lol

i just dealt with an issue at a client their entire network was unstable and went down, i reset statistics on the switch and there was a port outputting about... i dunno 3 million packets per minute?

they looped a poe injector into 2 patch panel ports 😄

was an old ruckus switch stack that didn't have any loop guarding enabled

[flat relic]

Help with Understanding Physical Connections of Firewalls

Heya All,

A bit of background info for ya.
I am planning an IT renovation in my upcoming house move by building my first racked cab outside of work! I plan to research and build networking that would be found in a small, medium and large business's. I'll get to the rest of the rack in a seperate build.
I work as a Network engineer on a large construction site and as so I only get to delve into level 2 switchs which get fibre in, then ethernet out to wall ports, I'd like to expand my knowledge.. hence the info above.

I'm a bit confused on Firewall stuff.
I am planning on running VLAN's and port-forwarding and I believe I need a firewall to resolve the VLAN bit expecially.
I am trying to understand the physical requirements for a firewall, unfortunately, my research has found most info online is about the OS/setup. as such, I have a few questions:

I plan to route a copper cable from my home router to a firewall, which i then believe would connect to the layer 2 switch. Is that the correct topology?

Do I only need one ethernet per connection? Do i need to think about the WLAN and LAN on seperate Ethernet connections to the switch?

Also, what Hardware would you all use as a Firewall?

I'd really appreciate any feedback.

[opal pagoda]

inside of cisco catalyst 2960-x 24 port poe+ with 10g uplink

[tribal sequoia]

"yep that's a switch"

[thick minnow]

2960-x series switches had 10G uplinks?

[opal pagoda]

Aw yep

1g uplink version had 4x sfp ports while 10g has 2 sfp+

[thick minnow]

hmm interesting.

[opal pagoda]

idle power consumption is 34 watts

[thorn delta]

Forgot to mention that I got these silly things running. The latency/speed is almost exactly the same as wired 100M ethernet. I used a multimeter to find the passive PoE pinout and it just so happens that the Cambium 30W 56v PoE injectors that I have a million of at work are perfect

they're super basic, no retransmitting dropped packets or anything if there's a temporary obstruction. If the link drops, it drops the ethernet port

Maybe when I'm out of town on a work trip next week I'll start writing a script for a youtube video. I still need to try the backup 802.11g radios, I got one powered on to test but it would be nice to use my spare Mikrotik routers to setup OSPF failover

[carmine crescent]

Does anyone know of a reverse proxy for windows?

im using emby, and trying to stream while out on a road trip but, want to be safe

[waxen scroll]

@clear igloo warranty void

[clear igloo]

License to void warranty expired, please contact your sales representative to renew.

[waxen scroll]

@opal pagoda I need to check your license compliance. Please add the smart license server configuration

Also whats the IP so the Cisco collector can scan it

[peak cloak]

For a home setup just get a firewall ditch your router

Most of the time unless you are in a big corporate network a firewall will do just fine routing and nating.

I've heard firewalla is descent, something more advanced would be a fortinet. But in reality you probably don't need a dedicated firewall for your home and a unifi router will be good enough, it will have some firewall features as well for vlan isolation if needed

[crude scroll]

this is on the windows pc or the vm?

[crude scroll]

alright i'll check that

[crude scroll]

oh on windows got it

[crude scroll]

so from checking i can't find the dns server on the windows machine, so i guess that means i configured it wrongly

[crude scroll]

how do i check if there is a proxy running or not?

[crude scroll]

This is so weird, now i can't access the LuCi page for the router from any computer other than the VM

[opal pagoda]

fun fact: no warranty void stickers were harmed during removal of cover

[crude scroll]

ok so something is definitely up with this router. I think maybe i can't use dnsmasq with it coz now I can't access the router from the host machine but it works fine in the VM

[crude scroll]

this is so weird, none of my computers can connect to the router now, except for the vm

[vagrant bay]

That is certantly very very weird...

Do other PC's still have internet access ?

[crude scroll]

Nope, only the vm

[pseudo blade]

If you're really more concerned about the "access to my stuff" bit internally, you can choose to use a router (most will have integrated firewalling) instead of a dedicated firewall unless you specifically want to learn about features of enterprise firewalls. You will explicitly require one capable of managing multiple subnetworks, unlike most home routers. Many here wanting modern equipment on a sensible budget like UniFi, alternatives include Mikrotik (which I personally use).

For your VLAN confusion...
Think of VLANs as getting multiple ports, switches etc. for every physical port and switch. The purpose of VLANs is to keep stuff (cameras, devices of different trust levels) away from other stuff, by giving it its own network.
A VLAN is a layer 2 technology, but you'll still be running a layer 3 network (IP, IP addressing) on top of it or it'll be basically useless to you.
So each one will have a different subnet, you'll be bringing out a trunk to your router or firewall so it can see and operate on all desired networks, etc.

...I suggest that you devise what exactly you'll use VLANs for etc. If you want to build a network like a you might find in a large business, you'll want to design it.
"A set of goals" beats "a set of technologies" for designing networks both practical and for training, and helps you guide what exactly will be used and why.

[worthy coral]

That looks really cool actually

But I doubt it’s the product of the next millennium lol

[thorn delta]

Nope, haha. Fastest one they made was 155 Mbps. Modern laser based FSO stuff can do 10 Gbps, but even that's becoming a bit less relevant as cheaper 80ghz licensed microwave systems came around that can tolerate fog/ect and deliver higher uptimes.

The "easier to deploy" aspect of these IR devices becomes less useful with beamforming antennas in modern 60ghz products that can give you a usable link with eyeballing it and making minor adjustments.

[worthy coral]

I love using the microwave systems at my work, super easy to deploy and yeah, you just have to eyeball the line of sight and you get a pretty solid link from far away. It helped us when our fiber link between buildings got split and we needed to get back up and running asap.

[thorn delta]

The newer 60ghz stuff has spoiled us, they go in pretty quick, then we go spend days aligning a "traditional" 80ghz or long 11ghz link haha.

[pseudo blade]

We run homelabs for work, and some of my colleagues (especially ones new to enterprise networking) get tripped up on certain bits and I tell them similar - Design and document how you want your environment to work first, then document how it will work and what technology you'll use, then build that. Iterate from the documentation on any change.

Helps prevent all sorts of misunderstandings even if the network admin is you and only you

[worthy coral]

As a visual learner, documentation is key. I’ll probably forget how everything works without docs haha

[pseudo blade]

-plus you can just hand me the documents when you have problems and I can figure out why your stuff might not work without having to play 20 questions first

[frigid merlin]

I'm not a 100% sure I understand your setup.You need a DNS forwarder (most likely the router) which will be able to resolve names. And you need an instance of dnsmasq which will be able to resolve the two internal DNS records.

The basic idea is:

The router is able to resolve DNS-requests through forwarders on the internet. Usually this is achieved by using /etc/resolv.conf on the route with external DNS-servers and using dnsmasq which will then offer the DNS service to the internal LAN. So the request you send from the internal LAN to the router's dnsmasq which itself will use the nameservers listed in /etc/resolv.conf to find nameservers on the internet and resolve the request and give the resolution back to the requesting client on LAN-side. This would be a very basic setup.

As I understood, you now started the dnsmasq on another system, is this correct?

Then the setup on this system running dnsmaq has to be, that within the /etc/resolv.conf are some nameservers that could resolve requests on the internet (maybe 8.8.8.8 and 8.8.4.4 if you trust Google, or 1.1.1.1 and 9.9.9.9 if you trust somebody else). You then should be able to resolve on the host running dnsmasq both commands (thinking you're running linux):

host www.google.com 127.0.0.1
host <internal hostname that we mapped above> 127.0.0.1

If both work on that host, you have successfully configured dnsmaq on your VM.

You now have to change your dhcp settings to not use whatever DNS you have used before, but to use the IP of the system that is running dnsmasq. And on that host, you should open port 53/udp or just shut down the firewall (which you most likely have done already).

Only use ONE dhcp-server on your LAN.

If your setup is more complicated like this, I guess we should take it to private messages...

[shadow sundial]

2.5gbE with over 900 download but only getting aorudn3 upload. how to fix? internet provider says im getinng up to 35mbps but idk hwo to fix this

[meager ginkgo]

What modem do you have?

[clear igloo]

You're getting 3Mbps upload when you should be getting 35 or?

[gaunt relic]

Hey, i hate to ask this. Ill be real im not sure if this is the right area or not. idk if it would be classified as "basic tech support"

Im running an Filezilla FTP server so me an my friends can easily share files among each other. However they get really bad upload speeds. I have a 2gbps internet connection, so when i transfer a file locally the bottle neck is probably the hard drive the max speed i see is 120Mib/s and thats fine, but when my friends transfer files its maxes out around 3-6Mib/s. They also both have gig connection. I dont expect them to get the same speeds as me, but i would expect it to be prob 20-50 based off the distance they are in the UK, and im in the middle of the USA. When they download a file they get speeds around 20-30 Mib/s. Im just confused on what i can to improve their upload speeds. Im on windows 10 on that PC. I have ports 5000-5100 open for passive and ports 20-21 open

[crude scroll]

So far I only have Dnsmasq running on the router itself.

The assignment stated we're not supposed to use Google DNS to help resolve names, it has to be from the DNS server we are setting up.

But yes, it seems like something somewhere has gone wrong and I've made it more complicated than it needed to be, and now I can't access the router

[shadow sundial]

its the ISP moden/router. and upon further resurch and inspecton. when im streaming and gaming my Ethernet is peaked the hwole time at over 54 mbps. but i still have choppy video games

[meager ginkgo]

What’s the model # of the modem though? You may have an older modem which is preventing you from getting your full upload

[shadow sundial]

its a xfinity modem/router. i just got it 4 months ago. 1 xFi GatewayVoice and Data Modem
TECHNICOLOR CGM4981COM

[clear igloo]

35Mbps is typical for coax ISPs
Most of the bandwidth is reserved for downloads

[meager ginkgo]

yeah I think they meant to say they get 3 upload on the original comment though

[clear igloo]

Ah, yah I asked about that for clarity

[meager ginkgo]

that modem looks pretty new so not sure why their upload is garbage lol

probably something with the coax line

[clear igloo]

I would suspect something is wrong with the copper line

haha, beat me to it 😛

[meager ginkgo]

lol

[shadow sundial]

ok so on further reasurch im get 30-40 upload right now. but when another pc is being used on my network it drops to around 5 upload

[frigid merlin]

Hm, the don't-use-Google-DNS-resolver is kinda a unwelcome curveball, tbh.

[frigid merlin]

To be very clear: dnsmasq will always use the existing infrastructure for dns-resolution, it will not build you a "self sustaining dns resolver". That is possible, but you would use something like ISC bind for that. And it surely would make things a lot more difficult.

So, does the router still work?

[topaz patrol]

Did you post this on Facebook or r/wisp because it seems awfully familiar

Or perhaps my delusions are getting worse

[thorn delta]

Yes, I posted on the WISP group on Facebook

[formal star]

Can anyone answer this for me. I have a Qotom Q20332G9-S10 running OPNsense currently I have a 24 port 1gig POE+ managed switch with 2 1gig aggregation link to the firewall, and 2 1gig aggregation link to my Proxmox VM. I want to take advantage of the 10gig SFP ports and connect my VM directly to my Firewall, and connect a 2.5gig switch in my office space via a 10gig uplink. In my mind, that sould allow both my PC and Laptop with 2.5gig ports to be able to access the NAS on my VM at ~2.5gbps at the same time vs now where I can get ~1gbps for both over the aggregation link. Is this true? Also, Should I run it as a bridge network, or as routed vlans? Currently I use the NAS as a backup, however I would prefer to use it as a true network drive for easy file sharing of video clips. Also, MY Camera system is recorded on a VM and they are connected to the POE switch and will need access to the Proxmox server too, so can i keep the Aggregation link form the switch to the server still.

[silent flax]

Should i ? 😄

Mellanox MCX311A-XCAT CX311A ConnectX-3 EN 10G Ethernet 10GbE SFP+ PCI-E + 1 meter Cable