networking

[thick minnow]

i also bought a new switch that actually managed lol

[peak cloak]

personally for any sites I just proxy through cloudflare

[opal pagoda]

yup

[peak cloak]

it's free and does ddos protection

[thick minnow]

i have

and cloudflare ssl

[opal pagoda]

and you dont even need static ip to do it

[thick minnow]

i have a static ip from my isp

[opal pagoda]

what edge device do you have?
as for managed switch, if you want to fully leverage managed switched and create vlans you need a firewall/router that supports vlans

[thick minnow]

Ubiqiti Cloud Gateway Ultra

i have 2 vlans

one for internet and one for multicast IPTV

[opal pagoda]

ah ok this device does have firewall features

[thick minnow]

yes

[opal pagoda]

definitly turn on ips/ids

[thick minnow]

is SLAAC better than DHCPv6?

[late viper]

generally slaac uses to deliver the ipv6 address to the end host.

dhcpv6 is usually used to deliver the dynamic prefix, the dhcpv6 client receives the prefix and delegates it using slaac.

[rugged cargo]

Anyone know what's the cheapest dual lan port device to run ddwrt on, for 1 gb per second speeds after my modem and before my router?

[low pond]

Some don't officialy support dhcpv6 like android
If it's a end user wifi network slaac is the more common standard

[peak linden]

Is there a way to turn off the wifi on my modem/router combo unit from my isp, cox communications?

[peak linden]

Figured it out

[topaz patrol]

Look in the manual and the settings, or ask Cox :)

[peak linden]

I wanted to uncrowd the wifi signals as i dont like their wifi and got my own asus router. Since they were next to each other, didnt want interference.

Might add better antennas to my asus router later then charge other people in my apartment complex a small fee for internet :)
If i cover an area big enough, i might be able to do it.

[thick minnow]

Well wouldn't my router have a basic firewall

I don't plan on like deploying a http/ https server, I was just testing it

[topaz patrol]

FTP? In 2025?

As for printing, Mobility Print is free

[thick minnow]

Router got it built in

So ain't running a separate machine

[topaz patrol]

But why

[thick minnow]

I duno I wanted cheap storage

Had a SSD lying around

Got a sata to usb adapter

[topaz patrol]

At minimum use SFTP or FTPS

[thick minnow]

And connected it to the route

[topaz patrol]

Regular FTP is a bad idea

[thick minnow]

I don't think I'll have the option to do that

Wait lemmi check

[topaz patrol]

Then don’t do it.

FTP transmits your credentials in plaintext lol

[thick minnow]

Ohhh

Damn 💀

Okay good to know stuff

[topaz patrol]

You’d be better off remoting into your LAN with a VPN when you need to access those files remotely

And disable FTP via internet

[thick minnow]

Okay imma do that rq

[topaz patrol]

I’m pretty sure TP-Link supports openvpn and l2tp

[thick minnow]

Yess

.

[topaz patrol]

Yeah

Mobility Print solves this

[fickle lily]

do i need to create route on both PLDT ONT and Mikrotik haplite to be able to access the server ? or just the haplite ?

[peak cloak]

ONT I think

this is very ugly network design in general

[fickle lily]

damn . welp i guess imma go with 100mbps speed cap lmao

[topaz patrol]

Why oh why

[fickle lily]

yea. i can connect everythin in the haplite but it is only 100Mbps speed since it is not gigabit port

i have 200Mbps lmao

[peak cloak]

get a hex it's pretty cheap

[fickle lily]

yea thats the next thing i will get and extra server pc haha

its just borrowed equipment haha. for testing Hotspot

[trail venture]

So I am trying to troubleshoot a local network bottleneck. I have my laptop set to backup to my desktop over a mapped network drive. Both computers are connected to the same 2.5GBE switch with Cat8 and both computers have a 2.5gbe nic. The problem I am having is despite both the source and destination of the backup being on m.2 drives I am not seeing transfer speeds go much over 1.5gigabit. I am unsure if the bottleneck is server side or client side but I suspect something to do with thread counts or something dumb. Any idea where to start troubleshooting this Optimally I want my backups to properly saturate the link

both the laptop and fileserver are running windows 10 pro

[topaz patrol]

I blame Windows

[thick minnow]

what is a certificiate .

im trying to start a VPN on my router specifically openVPN

it tells me to generate a certificate

should i follow a tutorial or somehting

to setup openvpn properly

or it is strightforward

as in clicking Enable this VPN

it downloaded some configuration file

[ionic grove]

Make sure you've got your own satellite network set up just in case the cellular networks go down for some reason

[gilded escarp]

@smoky estuary it arrived today

[smoky estuary]

Nice, I'll be able to help you set it up in about an hour or two if you need any.

[gilded escarp]

sure i can wait

[smoky estuary]

You okay with calling through direct messages so I can walk you through the process?
That way it'd be easier to use features like screenshares

[slate berry]

Louis Rossman released a 13 hour guide on how to create a self managed, self hosted homelab and home network;
https://youtu.be/Gj6HqWCdk3s
https://wiki.futo.org/index.php/Introduction_to_a_Self_Managed_Life:_a_13_hour_%26_28_minute_presentation_by_FUTO_software
https://www.youtube.com/watch?v=Et5PPMYuOc8&t=0s
https://www.youtube.com/watch?v=3fW9TV1WQi8&t=0s

[sage robin]

do you need a static ip from your internet provider to do nas?

[topaz patrol]

No

[silent flax]

run iperf3 in server mode on one side, client mode on other side, that way you can rule out networking as bottleneck. If networking is ruled out, then it could be storage speeds on either side (2.5 gigabit networking and it's 250MB/s+ speeds are useless when your hard drive maxes out at 160MB/s), or it could be CPU on either side being a bottleneck (some protocols like SMB require some CPU performance at higher speeds)

[ocean jetty]

is it correct to assume that a wireless router that has 5ghz on 802.11ax, would be able to provide to devices that have 5ghz capability on 802.11ac and 802.11a?

[topaz patrol]

What fucking ancient device do you have that insists on 802.11a

[ocean jetty]

just curious, because if I do happen upon a device that supports 802.11a, if my router does that, I could have very fast networking on it (relative to its age)

[random siren]

nothing uses 802.11a anymore, the current "old spec" for most iot devices is 802.11n which most accesspoints will still do.

[topaz patrol]

802.11a is 5ghz only

[random siren]

oh ye. but still, nothing uses that anymore

[fallow wing]

hey chat
I know I asked that question a while ago already but I'd like to get fresh opinions
for a cluster of gaming servers, what would be best :

• x2 2TB U.2 drives RAID-1
• x3 1TB M.2 drives RAID-5

[amber urchin]

I would be leaning toward the raid 1 as it is likely lower overhead and latency, tho the 3 drives would offer higher write performance and higher read performance for larger files.

Ultimately, depends on how it's done too.

[opal pagoda]

As answered before use enterprise ssd (u.2) for higher iops

[fallow wing]

I did think of the IOPS part but I figured that with more M.2s, it'd match that requirement

[opal pagoda]

But you will also introduce processing for raid 5 which isnt insignificant

[fallow wing]

hm true

and M.2s do slow down if load is sustained

I think I'll "risk it" with a single 2TB (maybe 4TB) drive

and get a second one later on

[analog sonnet]

Can cat6 do 10gbe or is 6a needed?

I’m not going crazy far, maybe 50ft at most

[fallow wing]

@opal pagoda

Good enough ?

[ocean jetty]

my point is the other way around, will 802.11a enabled 5ghz devices be able use 5ghz on access points that also have 5ghz but perhaps under 802.11ac? are they backwards compatible like that or is it common practice to keep support for 802.11a?

so for example an 802.11a/b/g/n device, which would otherwise only do 2.4ghz, can it do 5ghz with an 802.11ac access point?

[thick minnow]

OPEN VPN IS SO COOL SHIT

[opal pagoda]

yep

[fallow wing]

But it's "archaic" compared to wireguard

[fallow wing]

Nice

[opal pagoda]

any other sus smart parameters?

[fallow wing]

As far as I'm aware, none that I can see

[opal pagoda]

this is just diskinfo estimating based on consumer ssds

[clear igloo]

6 can do 10g up to 55m

[sage robin]

https://www.bhphotovideo.com/c/product/1609071-REG

Guys, is this a good motherboard for home server ?

[opal pagoda]

Use any motherboard thats has features you want, it doesn't have to be green

[sage robin]

Well I heard not all motherboard support ECC though

And not all CPU support ECC

Are those two statements true?

[cold forge]

AMD

[fallow wing]

what the problem wiht AMD ?

[fallow wing]

yes

[cold forge]

It's not Intel, obviously 😛

[fallow wing]

I only ever seen ECC capability tied to CPU

[fallow wing]

...and ?

[cold forge]

and Intel is the best

[fallow wing]

no

(depends)

[sage robin]

So any motherboard support ECC?

[paper valve]

No, both must support ecc

[sage robin]

Ok. So yeah, finding the right combo for mobo and CPU is a challenge

[topaz patrol]

@sage robin why do you want ECC?

[sage robin]

NAS

[opal pagoda]

Ecc isnt mandatory

[sage robin]

But is it infinitely better to have it ?

[waxen saddle]

Not to gatekeep or anything- if it’s for a home NAS, you could probably get away with non-ECC. If you need 24/7 uptime, ECC would probably be the way to go. From past experience, ECC will increase overall cost.

[topaz patrol]

No

Not at all

[waxen saddle]

I’ve never bothered with ECC for anything home-even when I was hosting public 24/7 servers.
Business server where the only acceptable downtime was for regular maintenance and wouldn’t impact anything? Oh yea, ECC here, ECC there. ECC everywhere for that service.

[sage robin]

Ok. So it’s a nice to have for beginners.

Yeah cause as I was researching DDR5 ECC, it was getting more and more confusing

I have a AM4 ProArt +5800x, I can just repurpose that and install truenas

[pseudo blade]

Interesting theory.
Hope you find your way out from that rock you've been under for 8 years :)

[waxen saddle]

It has been a while since I looked into it, but either ddr5 has the absolute minimum implementation for ECC or has only a small subset of ECC such that it doesn’t really qualify and there’s still a market for ECC-labeled sticks.
Don’t quote me though. Very dubious, but that’s the general conclusion I came to.

[topaz patrol]

On die ecc

ECC Lite™️

[high bronze]

it's better to have ecc if you run anything 24/7. You WILL get bit flips and they may or may not cause issues, but certainly good to heave, especially if you're dealing with anything important. The price premium isn't that big, it's around 20 bucks per stick here.

[waxen saddle]

Plus the mobo and CPU to support it I think.

[high bronze]

most AMD cpus do (chips with "G" at the end used to be the exception though) , and I think all asus boards as well, would need to look at the specs to know though

And regarding the type of ecc, the on die ecc on ddr5 chips is basically just protecting data on the chip itself because the data density made it necessary. ECC UDIMMs also protect data being transferred

and finally, there there is also a difference between UDIMMs and the RDIMMs in servers, the latter report errors corrected back to the mainboard

[opal pagoda]

Even then clustering and having HA is even better

[opal pagoda]

G pro cpus are exception to a exception

[high bronze]

yeah, I think it's cool for a home setup as well but pretty steep for a lot of people to get 3+ servers

[waxen saddle]

Yep. Had to work within my limits though, ECC was cheaper than cluster/HA.

[opal pagoda]

Yup especially for storage

[thick minnow]

Any advice on portable hotspot devices when it comes to speed for them?

[silent flax]

https://www.youtube.com/watch?v=plJGZQ35Q6I

[sonic notch]

Are there any tracert-type tools that give accurate geolocation data? A few of the tools I've used are incredibly inaccurate.

[sonic notch]

I'm specifically looking for something that I can run on my local network, not a datacenter

[opal pagoda]

everything is highly dependant on isp reporting data accuratly

if cgnat is in place then you cant locate anything apart from country /state level (depends on number of customers)

[sonic notch]

Rip, is there nobody with a database of those ISP URLs?

[thick prism]

maxmind geoip works pretty well I think

it's never "accurate" tho

[silent flax]

also not free most of the time, well not when you do more than few lookups

[thick prism]

true

[sonic notch]

I'm cool with paid tools as long as they're useful, guess nothing's out there though ;(

(and as long as they're affordable)

[dense grove]

My homelab is currently setup in a weird way. This is what the network looks like:

Internet -> Wifi Router A -> Wifi Router B -> My servers

I want to be able to access my servers, locally, from Wifi Router A. Is there a way to do that?

[opal pagoda]

assuming wifi router b is doing nating you will need to set up port forwarding on it and then access the server through ip of wifi router b and configured port number

[dense grove]

How would I check if my router is using NATing?

Quick google search answered my question

[opal pagoda]

what ip address space are you using for router a and b

[dense grove]

Locally?

192.168.1.X for Router A and 10.100.1.X for router B

When I type "whatismyip", it returns the same IP on both routers

[dense grove]

IPv4 on both

[opal pagoda]

either configure port forwarding on router b or turn off NAT on router b and set static route on router a

[dense grove]

How would port forwarding work in this scenario? Do I need to make modifications to Router A's configuration?

[opal pagoda]

no modification needed on router A configuration, as far as it is concerned router B is the server

[dense grove]

Router A is not the server, the server is connected to Router B

Server is connected to Router B, Router B is connected to Router A, Router A is connected to the Internet

[opal pagoda]

just do it, nat is a cursed thing

[dense grove]

Do what? Port forwarding?

Would port forwarding cause people to be able to access the local network using the public IP?

[opal pagoda]

nope

[opal pagoda]

well if you also configure it on router A then yes

[dense grove]

So if I port forward, do I have to port forward each server individually? Or can I setup a rule that does that automatically (ie making all devices connected to Network B accessible from Network A? I want the connection to do the following:

Device connected to Network A -> Router A -> Router B -> Device connected to router B

And the other way around also.

[opal pagoda]

you need to set static routes in that case

[dense grove]

On router A or B? Or both?

[opal pagoda]

both

not sure if your consumer router has this option

[dense grove]

Alright I'll check this out

Thanks

[woven condor]

Anyone here have decent experience with both MikroTik and Ubiquiti switches?

[opal pagoda]

https://dontasktoask.com/

[woven condor]

If only I got answers when I just randomly ask questions....

But I'll give it a shot. I have a MikroTik switch running SwOS and a new Ubiquiti switch. MT is upstream and UI is downstream. UI will be IP'd in my networks VLAN 13 and the devices connecting to it will be spread across VLANs 20, 30, 40, etc. How do I set up both switches for this hybrid trunk set up? The best I can do is have my VLAN page show "strict" VLAN Mode, "only untagged" VLAN Receive, and 13 for Default VLAN ID on the port. All VLANs are checked in the VLANs tab. In the unifi controller, the Native VLAN for this uplink is 1 (which I don't use) and I use that field to assign which VLAN each port should be in. Unfortunately, traffic isn't flowing correctly.

[opal pagoda]

what was configured before instalation of new switch?
what do you mean by " UI will be IP'd in my networks VLAN 13"? is vlan 13 your managment vlan?
where do you terminate vlans ?(l3 switch, firewall, router)

[woven condor]

The MikroTik switch and upstream pfSense firewall were configured before adding this new UI switch. All was working fine there.
The VLAN 13 thing is that I want my UI switch to be in VLAN 13 itself and get an IP in the range provided by my firewall for that VLAN. I think this might also answer your question about where the VLANs are terminated - pfSense firewall upstream of my MT switch

[molten geyser]

Should I be worried about hosting game servers on from my personal home network?

I have two computers.

One hosts some games and stuff.

The other has my personal data on.

If I started telling the general public about my game servers should I be worried about anything, configure my network in particular way, or take any steps to protect myself and my data?

I have ufw installed, I'm on arch linux and update monthly. Do I need an antivirus or just watch what I install? 😅

Or am I good to just start going for it?

[silent flax]

1. you obviously open the ports which are needed for the game to run
2. there is always chance for security holes in the game server (as it is with any server). It's your choice if you separate the game server into a separate network (thus even if someone gains privileges on that server through a hole, they can't see the rest of the network) using DMZ or putting the rest of your network behind another router/firewall...

But yeah, if your router has that, putting these public services on DMZ is your best option.

[finite thunder]

Ok so I’m brand new to homelabing and I just bought an r620 but it doesn’t have the NDC installed, I know it isn’t expensive and I’m going to get one anyways but do I really need it? I see some ports on the back of it, can I just use those for now?

Sorry in advance if that’s a stupid question

[pseudo blade]

If you're not using the ports you don't need the card

This is true for any peripheral or interface :P

[finite thunder]

True

Like could I still host it as a NAS or whatever with just that singular ethernet port on the back?

[pseudo blade]

Is that the port generally used for iDRAC?

[finite thunder]

I'm probably just dumb but I checked for the io online and couldn't find any info on it

Again I'm completely green at this so I couldnt even tell you

i could send a picture?

[pseudo blade]

The ethernet port on the left of an r620 is for iDRAC

[finite thunder]

ok then yeah that one

[pseudo blade]

-Remote management

[finite thunder]

so could I still use it just to connect to my network and everything like any other ethernet port?

[pseudo blade]

I don't think so

[finite thunder]

Ok thank you so much

[wheat solstice]

Hey folks, got a weird one. I upgraded to a Qotom C3758R based router running OPNsense, but, the link between the router and my WAN is running at 100baseTX when it should be running at 1gbit. I thought perhaps it was the cables, so as a test, I tried a different, premade cat7 cable running between the router and the modem. Same problem, still 100baseTX.

So the usual setup is: Qotom (WAN) -> Patch cable -> Patch panel -> off through the walls -> into the modem
The current setup is: Qotom (WAN) -> Modem

Both get me 100mbit on the link speed, both pass a cable test with all strands connected correctly.

Any ideas?

[fallow wing]

I upgraded to a Qotom C3758R based router running OPNsense

MY MAN

[fallow wing]

did you get the rack case version ?

[wheat solstice]

Yea, I have a rack in the garage which it lives in

[fallow wing]

I got the passive version then asked them to send me the rack case when they started selling it

[wheat solstice]

Bought it since >1G internet is soon to become available in my area, so aiming for 10G

but...right now I can't even get 1G, womp womp.

[fallow wing]

I have multigig rn but my ISP doesn't provide ONT modules unfortunately (it's baked into their router and only has 2.5G RJ45 on the LAN interfaces)

how I wished I had SFP+ out of the router for full bandwidth...

[wheat solstice]

that's the dream 🤣 not sure how fast we'll get here, there's an ISP already offering 1.6G, and another ISP that put a leaflet through saying they are laying here soon that should be even faster

[fallow wing]

I really have to find out a way to get SFP+ from my fiber but unless they give me their new router or an ONT module, I'm stuck with 2.5G on my personal network

[wheat solstice]

Just do what I'm doing, ISP router provides WAN not LAN, then your network isn't bottlenecked

My home server hooks up via SFP+ at 10G

[fallow wing]

I'm not the one who pays for internet at home so I can't change the plan

though I can ask my ISP if they can send me the other router and keep the plan

[wheat solstice]

you don't need to for LAN speed though, if both devices are plugged into a 10G switch, they are gonna do 10G when communicating with each other

[fallow wing]

no no

the ISP router

the ONT is baked in, only has SFP+ WAN, RJ45 2.5G LAN

so it's my bottleneck

otherwise router, server, switch, all is SFP+

[wheat solstice]

Oh I see, so the ISP provides >2.5G internet, but there's no way of getting it out again? that's weird

[fallow wing]

hell my server has a Cx4-lr, I could do SFP28

not that I need to but it's funny to mention

[wheat solstice]

haha nice

[fallow wing]

yeah we get 3-4Gbps at home but router has one 2.5G port and some GbE ports

[wheat solstice]

oof

but yea been stuck at 100mbit for days now

dunno why it hates me, but it does 🤣

[fallow wing]

oh yeah
that's weird

have you tried to force 1gbit instead of leaving it to autonegociation ?

[wheat solstice]

I did yea, but then I noticed the tooltip on that setting:

Here you can explicitly set speed and duplex mode for this interface. WARNING: You MUST leave this set to autoselect (automatically negotiate speed) unless the port this interface connects to has its speed and duplex forced.

So it sounds like it wouldn't work, since the modem will autoselect anyway

[fallow wing]

yeah but have you tried nonetheless ?

[wheat solstice]

I have yea, it didn't work

[fallow wing]

weird

[wheat solstice]

interface just stayed down

[fallow wing]

did you put the modem in bridge mode ?

[wheat solstice]

yep, this was all working before at 1G before I swapped the router out

[wheat solstice]

oO, changed the WAN interface on the router and it has come up at gigabit, I think I may have a DoA port on the router, if 1 of the pins were malfunctioning, that'd explain it

[fallow wing]

oh damn
possible
well I hope it's just a dumb issue like that and won't hinder you too much

[wheat solstice]

yea on the bright side I don't even need those RJ45 ports long term 🤣

[ancient cliff]

heya everyone! i'm new on here but watching ltt since 2018. i'm a novice to networking and all that stuff, so i'd just like some advice from y'all.
i live in france and i recently got 2gbps fiber installed from my isp. the thing is, their router sucks (like wifi 5 and 3 gigabit ports) and i really want to replace it. my issue is that the fiber port is SC and i can't seem to find any routers that natively support it, only SFP ones.
i saw some SC to ethernet adapters on the internet, but they had 2 ports (rx / tx) and i only have one cable, and some SC to SFP ones but i don't really know which type / brand to buy (i heard that SFP stuff is sometimes proprietary and there isn't like one standard).

also, can you just do that? like directly plug in fiber to another router? or do isps have some mechanisms that just don't allow the use of other routers

nevermind, you have to use a specific sfp gpon module that clones some serial number from the original router. why do companies do this???

i'll probably just put my original router in bridge mode and plug another one in it. sorry for the text blocks :)

[topaz patrol]

Huh? It’s not to intentionally make you life difficult or anything, it’s just how PONs work…

[turbid ridge]

This is the closest channel I could find but can I ask about home labs or server racks here?

[opal pagoda]

you could request a standalone ont

here they will give you sfp ont if you request one

[rugged cargo]

How do I make it so my whole home network is on my nord vpn dedicated ip

[peak cloak]

seems stupid

but it's possible

add a vpn interface on router, route all traffic through it

[rugged cargo]

Why would it be stupid?

[topaz patrol]

Why do you want to do it

That’s the real question

[ornate jungle]

Attempting to access many services from an IP address known to be used for VPN purposes may not work, and more importantly, you'll be limiting your connection to the VPN speed. Why do you want to route your entire connection through a VPN? What purpose do you think this serves?

[rugged cargo]

I mean isn't the point of the dedicated ip the fact that it's not a know vpn ip address?

[rugged cargo]

Privacy?

[ornate jungle]

That's not how VPNs work.

[rugged cargo]

So what's the point of them than?

[ornate jungle]

Not how that works. IP addresses are still "assigned" to a given provider. All a "private" VPN IP does it guarantees you're not sharing that IP with other users - it won't prevent Netflix from flagging the IP as being "owned" by a VPN provider, and thus blocking it anyway.

[topaz patrol]

You are just shifting who can see (limited) traffic info from your ISP (highly regulated, onshore industry) to the VPN provider (often shady businesses)

[ornate jungle]

Tom Scott's video is probably the best one I've seen on "debunking" claims made by VPN providers.
https://www.youtube.com/watch?v=WVDQEoe6ZWY

[rugged cargo]

I watched that last night

[mystic latch]

Sure, but the ISP has concrete info on you and, at least in the US, monetizes the shit out of you and your traffic.

[ancient cliff]

they only do that for their enterprise / business clients, not regular home fiber iirc

[opal pagoda]

Did you request one and got told no?

Say "current speeds that i pay for is above ont port speed, please give me a ont with suitable port speeds"

[low pond]

Honesty ISP's do nothing on this part lol. It's all the services.

[pseudo blade]

Especially nowadays with TLS everywhere, DoH becoming increasingly prevalent
I know some of the US ISPs tried to monetise redirecting invalid domains to a search engine at one point

[low pond]

I remember that happening on a old Indian dsl connection lol

the wrong domain would bring it to the ISP's page and say "the website you were trying to access is invalid" or whatever, then they'll give their search bars and it's like a tiny monetized page

but yeah not anymore, long gone

[ancient cliff]

just did

"it's impossible", "the ont is integrated to the router"

you just can't negociate with these people, they'll do anything to keep you in their "ecosystem"

[low pond]

this is with Orange or?

[opal pagoda]

then this is false advertising
advertising 2gb while only being able to deliver 1g

can you tell me the model of ISP router?

[waxen scroll]

I seriously do my banking and trading over public wifi. VPNs are dumb unless you're doing non-https things

or, you know, pirating

as long as you arent accepting bad CAs and https warnings that shouldnt be there, you're good.

[opal pagoda]

vpn's just shift point of trust from ISP and that specific network operator to VPN operators and their ISP
so it is just a simple who do you trust more question

[waxen scroll]

the worst the network operator can really do is see URLs and we don't really control login sessions with URLs anymore, or they can put a proxy in thats going to trigger cert warnings and if you accept, then they can read your data

Back in the day you could sometimes get away with coping a friends URL with the whole ?SESSIONID=wefp8uif23p9trgt9p8342 after it and be in their account

[ancient cliff]

it's the SFR BOX 8

it has gigabit ports and wifi 6 so theoretically it can do 2gbps through wifi (spoiler: it doesn't)

[ancient cliff]

sfr

the thing is that i get about 1-1.1 gbps with ethernet so there definitely is a bottleneck

[opal pagoda]

if you use 2 wired ports does it do it then?

most likely it is internal gigabit switch but maybe not

they are bullshiting you,
they clearly have a better router with 10g port avalible

[silent flax]

so i guess i should be glad my crappy ISP with their crappy routrer has a 2.5 gigabit port (one, but hey, better than nothing) for their 1 or 1.2 gigabit cable internet 😄

[ancient cliff]

i already have it set up like that

it's internal gigabit

[ancient cliff]

the 8x is only for their business / enterprise clients in my city

they promise up to 8gbps

[ancient cliff]

they only 2gbps for residential addresses and 8gbps for businesses

i'd guess that in a bigger city like paris it's different but here this is how it's done

[ancient cliff]

so, with their logic, if there no 8gbps fiber, then you no have good router

[opal pagoda]

same arhitecture either way
dedicated fiber to the optical splitter box somewhere in you neighborhood (or in building if in city)
that fiber goes to regional node where big olt is located

diffrence is probably that they plug it into XGPON compared to GPON

[topaz patrol]

Do they put the OLTs in the CO/exchange where you are?

Most OLTs are offsite from the CO/exchange here

[opal pagoda]

same place they put dslams in

[topaz patrol]

Let me see if I have a picture of a FAN

[patent geyser]

Hello. Is there someone from US here, who's also knows about geo targetting, location tapping, etc??

[ornate jungle]

There are many people from a variety of countries here. Ask your question, then patiently await a response from someone who might know the answer or can point you in the right direction.

[sleek patio]

Any recommendations for a 16 port unmanaged switch? Used for a live production, permanent install.

[ornate jungle]

Most "dumb" switches from reputable manufacturers (Netgear, TP-Link, etc.) will work, but... do you already have existing network gear? And is this going into a rack? Or just being thrown in a bag?

[sleek patio]

Rack mounted preferably

[sleek patio]

And Yea that’s what we have been looking at, net gear and Tplink, I was just was wondering if there was any others I didn’t know about

[ornate jungle]

https://www.amazon.ca/TL-SG1016-1000Mbps-16-Port-Rackmountable-Capacity/dp/B002HAJQGA
https://www.amazon.ca/TRENDnet-TEG-S17D-Switching-Enclosure-Protection/dp/B09WGYKFSQ

[ornate jungle]

If you needed PoE or were bought into an ecosystem already, I'd suggest sticking to the ecosystem and/or looking at PoE options from Ubiquiti, otherwise any reputable brand is usually fine.

[sleek patio]

Well I haven’t really delved into the managed side of networking yet, but we have 3 IP cameras and an IP joystick running off PoE on their own network, if I’m correct you can toggle PoE on and off on individual ports on a managed switch?

[ornate jungle]

Only if the Managed switch supports PoE. (Managed != PoE support. Gotta buy hardware with the features you need from the get-go, or upgrade later - whatever makes the most sense for your needs / budget.)

[sleek patio]

I think I have found a good one and it isn’t rack mounted but I think we can manage with a rack shelf

USW LITE 16 POE 16-Port Gigabit PoE+ Compliant Managed Switch https://a.co/d/5xmRbyP

[ornate jungle]

Ubiquiti is love; is life. ❤️ (Unless someone needs "enterprise" level features from a company with live technical support (like say, Cisco TAC), Ubiquiti is what I recommend for price / features.)

[ornate jungle]

Ensure that switch meets your power budget too. (It outputs up to 45w total - if your IP cameras + joystick need more, gotta pick a switch with more PoE capacity, though I can't see you needing more.)

[sleek patio]

Yep it meets the power budget and has 30w per port which is what we have now with a little 4 port Tp-link PoE switch

[ornate jungle]

Only other thing to watch out for is Layer 2 vs Layer 3 switches. If you don't need the switch to handle any routing itself, Layer 2 switches are absolutely fine. (You only need Layer 3 if you know you need Layer 3. 😄 )
https://www.reddit.com/r/UNIFI/comments/x5rmxt/practically_speaking_how_does_a_layer_3_switch/

[topaz patrol]

Lots of those are barely Layer 3

[ornate jungle]

Oh I know. There's a reason "real" layer 3 hardware is $$$$$$$$$$$$$$$$$$$. While I don't work on them, we have "big boy / girl" Cisco Firewalls + Edge + Catalyst series gear in the work server room, with Meraki MX / MS / MR (slowly being replaced with CW series APs) hardware in each office location.

[topaz patrol]

Can’t do static routes on most of them

[opal pagoda]

why unmanaged?

[pseudo blade]

I'm a big fan of "managed everywhere" if I can get it

Heck with Mikrotik stuff I'll usually try to pay the extra to get L3 with RouterOS even if my tasks don't require it right now (doesn't hurt that SwOS sucks)

And while my customers do have reasons to buy Cisco/whatever I very much do not

[clear igloo]

Sounds like you need some data center gear 😛

all the noises!!

[pseudo blade]

Nobody's paying me to manage their datacenter right now :P

I'll re-evaluate on eggs once I have a chicken

[thick mirage]

Soo I’m behind a triple nat currently. It’s just started causing issues. The main router is the landlords which I can’t login to. Then that’s plugged into mine which is running in a static gateway. Then I have my server in my room on a gli.net travel router wirelessly connecting to my other router. Because I can’t enable DMZ on the landlords router what’s the proper way to fix my network?

[clear igloo]

lol, yah if you don't need it don't get it, especially for home

[clear igloo]

VPS

[pseudo blade]

Well my home's a bit nonstandard but not to the point of needing anything remotely like that

[clear igloo]

Yah, buy what you need plus a little if you can justify it in the future but otherwise don't
keep it simple at home

[pseudo blade]

IPv6+IPv4 tunnel to a VPS

[thick mirage]

I’m running proxmox with Cloudflare tunnels currently which is working ok. Where I’m running into problems is Proxmox Backup Server

[pseudo blade]

Doesn't really change the answer

[thick mirage]

Ok

A VPS

[pseudo blade]

Or if you can: Use IPv6

[thick mirage]

I guess it’s time to REALLY study networking

[pseudo blade]

There might be other options but I don't know enough about your goals to recommend one

And... well you should do that study anyways

[pseudo blade]

Home and small single-customer rural networks off 4G

[thick mirage]

Eventually moving Soo I have access to the main gateway for these issues

[pseudo blade]

The point of using a VPS for that is that you have a device that can directly relay traffic over a tunnel for you from a public IP

[thick mirage]

The landlord is running from a node to a lan to cable connection downstairs, and upstairs cable to lan to the router

And he won’t fix it

Lmfao

[thick mirage]

Oh that makes sense now

[pseudo blade]

IPv6 if available simply means that all of your devices have public IP addresses

The question becomes what any intermediary firewalls are doing

"incoming: drop all non-established" on a device you can't change config on = give up and use a tunnel

[thick mirage]

I just wish there was a data plan not behind a nat to run my server

[pseudo blade]

It'd save you the latency and bandwidth costs of having to relay it to/from a VPS

But oh well. For the stuff that works over the cloudflare tunnels keep doing that and only run what you can't over something like what I'm describing

I assume you're using the free CF tunnels so despite them working in nearly exactly the same way, you simply don't have to pay the costs of it for that traffic

[thick mirage]

I have 50gb of data I don’t use

lol

It would beat my 20 up 20 down lol

[opal pagoda]

*unless absolute fuckery of NAT66 is enabled

[clear igloo]

Spectrum says hai 😄

Modem reboot? New IPv6 prefix for you!

[opal pagoda]

the good ol randomise and pray it isnt overlaping other customer

[finite glacier]

I have an issue wity EHTHERNET, when i take a ookla speedtest on my phone i get 60mbps download and 30 something upload, but when im on my pc with ehternet cable i get almost 15 download and 5 uplaod... and bvefore i used to get 60mbps download in steam nbot i get 20... in valorant it says in taks manager its using 15mbps and in the update menu it says 1.5 mbps and drops to 870 KB may someone please help...

[thick mirage]

I’ll give my Mac a run with qemu and see what it does first

The real answer get my own internet

But only one carrier will run lines in

Bell ain’t available but Roger’s is 😂

[honest plover]

Would getting a tp link work for better speeds? Not sure how it all works but I can't stand this shit wifi anymore 😂

My mate said to get this & a category 8 ethernet cable

[pseudo blade]

Using that device with anything better than a cat5e cables will grant no benefit

That said, that device sucks

Is your goal to run a cable to it from the router?

Or to connect to a PC from it and use it as a bridge?

In the former case: buy a better access point instead of this

[honest plover]

Haven't got a clue what the goal is, but my wifi speeds are awful & my mate said he's using a similar thing with a different provider and gets 300mb/s

[honest plover]

He said that link connects to the wifi through an app and u just connect an ethernet cable from that to the pc

[pseudo blade]

...A bridge.

[honest plover]

Ok

[pseudo blade]

Based on the model numbers this has 2x2 for 5 or 2.4ghz, so for it to achieve speeds remotely like 300mbps the signal already has to be great

[peak cloak]

you can't make shit wifi good

if it's already shit

[pseudo blade]

Yep, Pretty much sums it up

[peak cloak]

all you are basically changing is instead of connecting using computer's radio, you use a seperate device to do it

[honest plover]

So basically stuck with shit wifi

hooray

[pseudo blade]

Needs more thought

For example, if you buy much higher-end mesh products with dedicated backhaul radios you could put on in an optimal location about halfway between the router and your device

They tend to be pricier when sold with the correct hardware though and generally won't beat just using a cable

Could then ensure your desktop has a decent WiFi radio like an ax210 and nice antennas you can put somewhere away from the case

[honest plover]

Wanted to do something that didn't involve messing with the current router, as I'm at my gfs parents at the moment till we move out so haven't got much to work with

[thick mirage]

What’s the difference between ipv4 and ipv6 for proxmox

[honest plover]

But some games are just unplayable, like bo6.

[thick mirage]

IPv6 I have disabled

[honest plover]

Occasionally works but still lags, sometimes worse than other which is majority of the time

[pseudo blade]

Smaller number vs bigger number

Protocol change

that's about it ¯_(ツ)_/¯

Oh well at least until you want to do network administration

[thick mirage]

My current opinion is the server isn’t broken with ipv4 don’t fix what ain’t broken

[pseudo blade]

Wasn't the question you asked but ok

Have fun

[thick mirage]

But the other thing I also think is the tls no verify seems to be the only way the Cloudflare tunnel will work

[honest plover]

By mesh do you mean router? Not sure if I'm picking up what you're putting down

But can't really tamper with router or anything so if that's the only option then I'm stuck with 3mbps 😂

[thick mirage]

I’m wondering if the network config is what it’s screwing me with this.

[peak cloak]

no

you can conenct a mesh system to an existing router

[rocky badge]

@clear igloo
I am debating a replacement server for my Supermicro TrueNAS...
There's a R740xd with 2x Gold 6132, 64GB of RAM, no drive caddies - $650 free ship
There's another R740xd with 2x Gold 6140, NO RAM, drive caddies - $750 free ship
Buying all of the drive caddies I need will cost $114, will also need to buy rails
Both have X710 dual 10G SFP+ NICs
I can pull the 128GB of RAM I have from my current TrueNAS but if I ever wanted to use that server again I'd need to buy more RAM.

[clear igloo]

Depends on what you want to host on it

[rocky badge]

TrueNAS storage lol

[clear igloo]

Then the 6132 server

[rocky badge]

and just spend $100 more for drive caddies as well?

[clear igloo]

OH! I thought neither came with caddies

In that case go with the one with caddies

Shift the RAM over and buy more if needed later

[rocky badge]

yeah

hmm ok

[clear igloo]

Plus you get 8 more cores between the two CPUs

[rocky badge]

yeah

$914.29 😭

[clear igloo]

rip wallet

[rocky badge]

just so I can shut the damn supermicro server up

by not using it here lol

[clear igloo]

True, yah IPMI on dell server ftw to shut fans up

[rocky badge]

modern dell is just quiet

[clear igloo]

Question, could you, in theory, pull the PSUs out of the supermicro and use a stock ATX PSU?

True, that's a 2U server right?

[rocky badge]

and its not like even the supermicro is too old

yeah

even my r6415 dell 1u is quiet

[clear igloo]

yah, they are pretty quiet

[rocky badge]

https://www.supermicro.com/en/products/system/2u/6028/sys-6028u-tr4t_.cfm

dual Xeon E5 2650 v4

[clear igloo]

ah, crap

Can't swap those PSUs out for ATX in that 😦

[rocky badge]

yeah

[opal pagoda]

You could probably 3d print them

[rocky badge]

hm

[clear igloo]

I found that the supermicro PSUs were the loudest thing in my server closet when I had a supermicro chassis
I ripped them out and slapped in an ATX PSU and the noise difference was astonishing

[rocky badge]

bc the thinking is move this supermicro to my parents house

replace either my aging r620 or dl360p g8 there with the supermicro

[clear igloo]

If you can get 3d print for free, definitely save the money and go for the one with RAM

[rocky badge]

probably the hp bc I hate it

and swap the hp's v2 xeons in my r620 with "v0"

[opal pagoda]

https://www.thingiverse.com/thing:4190302

[rocky badge]

I also don't wanna downgrade to R730

bc those are loud as shit too

https://www.ebay.com/itm/286309207602

chance???

oh nvm that's a sff r740

@clear igloo

aw fuck that's not drive caddies that's blanks 😦

[clear igloo]

3d print

[rocky badge]

ughghghgh

[clear igloo]

Ask someone at college to print, lol

[rocky badge]

I mean I haveeee a 3d printer

[honest plover]

Which one of these should I get? This ones £45 didn't really wanna spend that much. Also does it matter ehoxh category 5 ethernet cable I get,m also assuming I need 2x of it as one has to go from the router snd other has to go into my pc from the other one

[ornate jungle]

Assuming you can easily return them if your home's electrical wiring impedes their ability to deliver a reliably fast enough connection, these are fine.

[honest plover]

I'd have no issue in returning them, the house is about 100 years old so not sure. Can't hurt to try I guess

[ornate jungle]

Age of home has little to do with PowerLine AV working / not working. I've had crazy success running PowerLine AV adapters between 2 different circuits on 2 different sub-panels in a home, yet had many adapters that won't surpass ~8mbps when on the same circuit despite the home being built in the last 15 years. Really boils down to "what in the heckin heck" the Electricians were doing, and other loads on the same circuits.

[lean pebble]

hey guys someone familiar with opnsense, I just back to it after 3 years and I'm facing some isues with setting my vlans again.
I used pfsense before.
My vlan can ping the gateway but cannot surf the web / ping google.com., I tested with firewall and without firewall and got the same result.
I would be very happy if someone here would be able help me fix it.

[honest plover]

Sounds like a lot of shit to rely on lol. Hopefully it works for me as I'm tired of not being able to have fun for a couple hours

[honest plover]

Is there a cheaper one I can get that would do the same thing btw? Don't wanna overspend if I don't need to

[peak cloak]

it depends alot on noise within the electrical network among many other factors, things such as a high load appliance even can have an effect. Here's an overview on how it works, most of it is wayyyy over my head https://www.scribd.com/document/451459333/IEEE-1901-HD-PLC-technical-over-view-A-EN-pdf

[gloomy cypress]

i need a solution, or a shotgun. either will end my suffering /s

this is the status of my fans and such in the ilo web interface for my proliant dl360 g7. i've done every troubleshooting step in the book, reseated everything, etc. nothing is working at all. i can't get any display output, and the fans are stuck at max speed.

[topaz patrol]

Third party fans?

[gloomy cypress]

official

intresting

might have just fixed it

i removed the raid card and the status went from other to ok

nevermind

they're reading ok now, but they're all still 0% speed. as are temps 0c

[topaz patrol]

Do you have any non OEM anything installed

[gloomy cypress]

i have a dell backplane currently

but it didn't work fully before without it

lemme check if that's it

(knowing hp's hatred of 3rd party printer cartridges i wouldn't be suprised)

tf

now my ilo is just not showing up anywhere

[topaz patrol]

That’s it

[topaz patrol]

This is standard for servers

[sleek patio]

I changed over to looking for managed switches not long after that.

I honestly just do not know how to use managed switches. But a few YouTube tutorials should suffice.

[opal pagoda]

basic config that is basically equivilant to unmanaged switch is just put all the ports in access mode (untagged) and same vlan

[honest plover]

I know I've asked already but didn't get a response. Is there any specific one I should get, as mentioned Ive seen afew at 20-30 and the one in that pic is 45, dont know what the difference is & what I actually need. Dont want to spend on what I dont need

[autumn ether]

Do I understand correctly that Crowdsec basically replaces UFW functionality?

Eg I'm setting up a new VPS:
I do the usual

• create a new user,
• disable root ssh,
• start ufw (allow 80/443/22)

But then I want to install crowdsec and the firewall and nginx bouncers.

Do I understand correctly that the firewall bouncer replaces UFW in blocking requests to disallowed ports etc etc?

[glossy star]

Hey everyone, banging my head against the wall on this one. I recently switched to a udmpro from the isp router and everything has been working great EXCEPT my ESXi hypervisor now gets ABISMAL download rates (image is openspeedtest going from my pc to ESXi). This started happening when I switched to the udmpro so naturally i assumed it was that, i've tried a completely different network and it appears that something else has happened because the issue now follows my hypervisor.

I've confirmed

• full duplex in both directions
• they are on the same VLAN
• I've swapped cables with a known good cable
• I've networked esxi with a pc on an unmanaged switch and get the same result

The pictured result is similar on all devices trying to communicate with the hypervisor on the same network (wired and wireless)

What else can I do? I only have the one server so it's going to be a big pain to wipe and reinstall (i'd like to avoid that at all costs).

From my troubleshooting, I think its gotta be some kind of setting on the esxi host that got messed up during the move.

[autumn ether]

Could it maybe be something mtu/jumbo-frame related?... tho then it would be both directions, right. I saw you networked the esxi with another PC and have the same issue, so it's clearly esxi related.

[obtuse hawk]

any tips for mATX rack case? at this moment my rack is configured with max depth of 36 centimeters (~14.1 inches), i need it to have 4 hdd bays at front.

[jaunty lake]

anybody here rn?

need some help with an Ethernet connection

[topaz patrol]

https://dontasktoask.com

[jaunty lake]

I hardwired my pc with an Ethernet cable running in the attic directly to my router and now that I have it connected to my pc it say it’s connected but there no internet connection

[mystic latch]

Crowdsec is better to use in conjunction with ufw. It helps filter out known bad traffic to your open ports. As well as a bit of a WAF if you have the right modules & logs feeding into it.

[ornate jungle]

Does your PC get an internet connection when wired to the router using a different cable? Even if you have to move your PC beside the router temporarily, this is important to test, as it will tell you if the ethernet cable run through your attic is bad.

[sleek cobalt]

Anyone know what port this is? I tried using it for Ethernet, but it didn't work, and I have zero knowledge of this stuff 😭

("this stuff" = ports and cables, etc.)

[ornate jungle]

That's an RJ-45 jack, commonly used for ethernet connections.

However, whether or not it works depends entirely on how it's wired up, and what's on the other end.

[sleek cobalt]

Hmmm, yeah it didn't work, so now I guess I have to chase down the other end somehow 🤔

[obtuse hawk]

That termination does look pretty ass

[autumn ether]

so it's more of a replacement for fail2ban rather than ufw?

[ocean jetty]

anyone ever heard of mac vendor 16ce19? have an unknown device connected to my network here and trying to figure out if it should be connected or not, I cannot find this vendor anywhere

[twin pier]

If you can't find the vendor anywhere,there's a good chance its a phone, since iOS and Android do randomized macs

probably hard to find out more info beyond that

[ocean jetty]

thing is

I've mapped out every device currently connected on the network and that one is conveniently extra

and since it also is currently connected to the network it can't be something from my router history

I also didn't know there was a way to randomise the vendor portion of the mac add, I thought that was forbidden

[twin pier]

I believe the entire Mac is randomized because I also have tried looking up vendors just to realize it's my mom's phone or something

[mental rose]

I downgraded my opnsense install from development and community and now I'm locked out

I'm positive that I'm typing in the same password that worked previously

[mystic latch]

Yea, they sit in a similar niche.

[mystic latch]

Plug a monitor + KB into the device and reset the root password.

[fleet siren]

I followed the make your own vpn tutorial the ltt posted resently, however my uni blocks vpns themselves before they can connect to the internet and they dont get a chance to start up. Is there anyway to get around that block?

[topaz patrol]

Don't use their network 🙂

[ornate jungle]

What TopLime said. Anything else related to bypassing your University's VPN block would violate #rules 9.

[fleet siren]

Ahh sorry didnt know I was breaking a rule been a while since I checked up on the server

[ornate jungle]

All g. To be fair... I personally don't like when networks block VPN access either (for work reasons), but I'd imagine most do it because someone decided to do bad things using a VPN that one time.

The only legal way around this would be asking the network admins to unblock VPN access, but we all know what their answer will likely be so... up to you.

[fleet siren]

The only argument I would have for that is that the network will quite often block news sites I need and that professors have linked to

[ornate jungle]

Ah yes, the joys of educational bureacracy. If I were in this situation, I would put it on the Professors to ensure they do not require accessing resources that are blocked on the University network.

Yes yes I know it's not That Simple™, but this is more or less like saying "you must fill out this quiz on paper or you fail" only to have school administration say "no printing anything because environment!"

TL;DR: the world is irrationally stupid sometimes.

[fervent brook]

Can we call Wi-Fi 7E "BEE"?

[opal pagoda]

Which vpn did you comfigure?

[latent quarry]

yooo guys what to put in "HOST"
please help

[fervent brook]

corbhub.gov

https://cdn.discordapp.com/attachments/588170196968013845/1339265125496000594/image.png

[twin pier]

you cant have any other records if theres a cname on it. if your nameserver supports choosing "ALIAS" for the type, try changing the CNAME to be that

[waxen scroll]

@rocky badge Our client, a national insurance company, is seeking a Network Engineer to design, manage, and secure network and cloud infrastructure. This role involves maintaining network equipment (Ubiquiti, Aruba, Cisco, Palo Alto), supporting 200+ sites, troubleshooting issues, and ensuring security best practices. You'll also assist with large projects, collaborate with vendors, and provide technical support to IT teams.

what national insurance company is using ubiquiti

"• Wireless experience with Meraki, Aruba Networks, and Ubiquiti solutions."

thats really strange lol

[rocky badge]

Bruh lol

[ornate jungle]

https://support.google.com/a/answer/2716802

[ornate jungle]

https://support.google.com/webmasters/answer/9008080?hl=en

[pseudo blade]

My guess is formerly unregulated SOHO-style branch design, maybe a merger

Or "IT is a cost center" logic

[mental rose]

It looks like the config file went missing during the downgrade

[mental rose]

do they have entry position roles in palo alto?

[silent hemlock]

So after years of pain with the ISP router(random Huawei optical one) I want to switch to one of those TP-Link mesh systems,
I am wondering if I need to buy a separate fiber model(without wireless) and then use that for the wireless mesh or if I can just use the ISP router by just disabling the built-in wifi?

[crude pilot]

probably just a super simple question to answer but if I would get a unmanaged network switch could I just plug for example 7 gaming consoles into it and use the leftover port and connect that one with the router for it to work?

for example a switch like this:https://www.netgear.com/support/product/gs208v2/

[opal pagoda]

yea

[silent flax]

that is literally the intended use case for a switch. One port to whatever provides the connectivity, rest for devices to use that one connection

[ornate herald]

All this for 30mbps down 😒

[zinc stratus]

Hey is anyone here an expert in cybersecurity or know anybody who is? One of my friends says one of my their wifi node devices recently connected to an unknown device. They suspect it's a device planted somewhere in the house by an ex. They have the mac address and ip address of the device but online tools haven't worked, and it seems most network scanning solutions require a business email.

[shy stone]

block it

[ebon linden]

Does anyone have a router suggestion? nothing above $300. I plan to put open wrt or dd-wrt on it if i can.

[shy stone]

or throw it on a DMZ-vlan and sniff the packets

[topaz patrol]

That AP is going to perform horribly

Oh wait no it’s an eero

[ornate herald]

It’s all eero hooked to a crap ATT router, hoping for fiber soon but it’s a copper line to the house (through conduit)… we are giving ATT every chance to make the upgrade as easy as possible but they won’t get it together in my area

Coverage is great though!

[mystic latch]

AT&T's fiber gateway isn't great either lol.

It has an anemic NAT table in my experience with the model I got. The bgw320-500

[twin pier]

I have mine in pass through mode and its fine, except for not being able to pull one /60

iirc you can just pull multiple /64's but unifi cannot be configured to do that and I don't feel like building a new router PC rn

[fallow wing]

aliexpress
check out servethehome's reviews on miniPCs for homelab router use

[wheat solstice]

Maybe pushing the budget a bit but I just bought https://www.aliexpress.com/item/1005006462840386.html (CC3758R version) and put OPNSense on it. There's a non rackmount version of the same hardware iirc, but imo it's only worth spending that much if you want 10G

[pseudo blade]

I assume you also want it to have competent WiFi built in. What kinds of ports are you expecting?

If you do buy a chinese router PC like described above keep in mind that for genuine router use you usually need one WiFi card per band (so 2.4,5,6) as while most cards can connect to all three they can't broadcast to multiple at the same time.

[topaz patrol]

Or just buy a proper AP.

[pseudo blade]

I'm going to recommend you look at the Banana Pi offerings (They also make the OpenWRT One, which is now the official device for OpenWRT you'll see on the project's website. Weird port offering though).

[pseudo blade]

The suggestion is based on their specific request for OpenWRT

And yes I know you can run it on x86 but if you have a separate AP there's not a whole lot of point in that

[topaz patrol]

Only two... strange

And one 1GbE one 2.5GbE with PoE?

Very strange

[pseudo blade]

Yeah it feels like it's about 80% AP with a feature set that might want a more home optimised port offering

I really do wonder why they didn't have their "official device" ship with at least a complement of gigabit ports if not 2.5

Probably some sort of cost optimisation that made sense to someone somewhere

"Buy a switch or use WiFi"

But then I'd have liked two 2.5 gigabit ports or even an SFP+

[pseudo blade]

Weirdest part is that Banana Pi offer reasonable port configs on other products

[fallow wing]

I have a miniPC router on OPNsense, a Zyxel switch with PoE and a Zyxel WAP using that PoE, works fantastic

[opal pagoda]

does anyone know why ups would just turn his load off after short mains dropout
i had to go into control setting of it and turn the load on manually

these are logs that are from this event

[ebon linden]

I see you recommended looking into Banana Pi offerings. I've been looking at Banana Pi BPI-R4. I'm not as savvy as the people here. I do want dual band 2.4/5g(I currently broadcast and use both) and at least 4 ports. BPI-R4 is also Wifi 7 which seems to have meaningful improvements. However, I am not liking the idea of buying from AliExpress since returning the product, if there is a problem, would cost a ton in shipping. This alone is pushing me to retreat and just get a standard router from Asus or something else. Even if the chances of a problem are incredibly low, it doesn't sit well with me buying from someone that I can't easily/cheaply make a return to. Though, I will still be thinking about it.

[fallow wing]

a TP link archer would be a good choice

solid wifi6 coverage, dirt cheap at this point

[ebon linden]

TY I might just do that (currently weighing having wifi 6 6ghz available vs wifi 7 5ghz and wifi 7 on 2.4 for smarthome device) https://www.tp-link.com/ae/compare/?typeId=9&productIds=79792%2C57903

[naive nest]

Is anyone able to help me troubleshoot a connectivity issue I'm experiencing?

[thin hedge]

Go on

[naive nest]

I have two OPNsense routers, one on the 192.168.1.0/24 subnet, and another on the 192.168.5.0/24 subnet. When I ping between then, I can't seem to get any devices on either subnet to communicate. This is depite having configured static routes between them in what I believe to be the correct way.

[thin hedge]

Oof, I’m not literate enough to solve this, but I’m sure someone can help you later. Gl

[naive nest]

Ah, no worries. Thanks anyway.

I'm inclined to believe it's a firewall issue. I just lack enough knowledge to properly modify the firewall rules.

[thin hedge]

Temporary disable the firewall, that’s what I would’ve done….

[naive nest]

I did give that a try, but it seemed to stop my internet connection from working

Now is a good opportunity to try again since I'm the only person using it now

[thin hedge]

Nice

[peak cloak]

can you make a diagram of the topology

[naive nest]

Sure

This is part of an existing diagram I have. Is it of any use?
The LAGG between the second router and the Cisco switch has not yet been configured, so it's just a single link for the time being.

[fallow wing]

LAGGx4 ? not I'm the wild very often, nice to see it lel

[naive nest]

Thought I might as well set one up eventually since I have plenty of spare NICs on the router

I might buy the 10G expansion card for my switch at some point and go that route instead

[peak cloak]

does the .5.x router have NAT enabled

also show your static routes

[naive nest]

Static route configured on .5.x:

Static route configured on .1.x:

I am pretty sure these are completely wrong

And I think NAT is enabled on .5.x

[peak cloak]

technically I don't think the .5.x router even needs a static route

[peak cloak]

yeah this is wrong

that gateway should be whatever the .1.x IP of the caswell router is

and you should disable NAT

[peak cloak]

basically what are you telling the router is where to forward the packets with that destination address .5.x

otherwise it will go upstream, and get dropped eventually because it's a local IP

[naive nest]

Ah, okay

I'll start by disabling NAT on the .5.x router

For some reason, it won't allow me to specify the gateway address of the Caswell router on the .1.x one

[peak cloak]

what address are you trying to put in

[naive nest]

192.168.5.1

[peak cloak]

yeah it won't

that router will have multiple interfaces

you need the IP of the upstream interface

[naive nest]

I also noticed that disabling the NAT on the .5.x router makes any device connected to it lose internet connectivity

[peak cloak]

it will be a .1.x address

[naive nest]

I see

My external static IP is in the list, as it the IPv6 external IP

Is that normal?

[peak cloak]

idk

[pseudo blade]

Sorry, consumer products from retail channels pretty much never offer good support for openwrt

You can shop around and look for devices without broadcom chipsets and pre-existing support but expect frustration unless you're comfortable with modding your devices

[opal pagoda]

If you want to install openwrt on a consumer router why not get one that already has it installed https://www.gl-inet.com/

[stuck grove]

I ordered a dream machine special edition but now i can't wait

worst part of ordering cool stuff is waiting for it to ship

[silent flax]

no, worst part is when it is in some collection center near you, but it still takes 1-2 days for it to arrive

[marble nova]

Those are two non-routing addresses. Chances are that they are set up with NAT, and only allow outbound connections. You'll have to specify rules to allow inbound connections from their respective subnets. Are they both inside the same network or do they have internet between them? If the latter, then you'll need to build a VPN between their respective outside facing ports.

[marble nova]

What are the outside (WAN facing) IP addresses of the two routers?

[fleet field]

Can this be transformed into Ethernet?

[amber urchin]

MOCA

[fleet field]

Is that the same as Ethernet?

[amber urchin]

It bridges between ethernet and cable infrastructure.

[fleet field]

How do I get it to be used as internet?

[ornate jungle]

https://www.reddit.com/r/HomeNetworking/comments/o59trc/how_does_moca_work/

https://www.youtube.com/watch?v=2UUkewknce4

https://www.youtube.com/watch?v=dm_Znyh7uZ0

[ornate jungle]

Technically, "yes", by way of MoCA adapters.

[amber urchin]

If you own the place and do not need coax, you could also just buy a spool of cat 6, a crimper tool and a pack of ends and learn the correct pinout then make your own cable and pull it to wherever you need the other end. The cat 6 cable fits thru the hole in the wall plate, just undo the nut on the coax that holds it to the wall plate (put the nut back on the coax for later) and stuff it back in the box. Otherwise you could get a keystone plate and keystone RJ45 and a punchdown tool to make an ethernet socket plate.

If you rent or don't want to go thru that; moca, wifi or just run the cable around the floor.

[fleet field]

Ok

[stuck grove]

cable around the floor works great in my experience

that's currently how i get an ethernet connection from my network closet to my office

[quartz citrus]

Completely brand new to doing this. As this would be my first networking build but I got an 18U cabinet.

I'm not too deep into everything, but I do have a LGS124 24 switch. But I'm not really sure what I should get for this.

Id like to run a Plex server and eventually home assistant things, but for the moment I'd like to get the bones right.

UPS? PDU? Any like quick connect things for the screw holes? Any and all tips welcome to take em

[hybrid ether]

My grandparents control the WiFi in my two story house. They live upstairs while my dad and I live downstairs. They got a 5gb connection but keep the router upstairs, this leads to my dad and I having faulty connection. Is there any alternative way to get a WiFi router downstairs besides drilling a hole in the floor and connecting a router with Ethernet from the modem upstairs?

[stuck grove]

depending on the router you can get an access point to work in a mesh with the original router/AP combo unit

if not, you can get two additional APs, put one with the router, and one upstairs

this will cause higher latency for devices connected to the upstairs AP, but it’s better than nothing

[hybrid ether]

Btw I say WiFi router when I mean WiFi signal when referring to connection downstairs

[stuck grove]

as in the box downstairs with fiber connected to it, right?

[hybrid ether]

Also would I have to contact the WiFi company since my grandparents got a modem and router combo if I want to use your suggestion of an AP router unit

[stuck grove]

If it’s a combo unit you can always use your own APs

you’ll basically just ignore the existing wifi network, and make your own with the new APs

since with a combo unit i doubt you’ll be able to find an AP that can mesh with the original box

[hybrid ether]

Got it

The ap for downstairs (since my grandparents are fine with the connection upstairs but my dad and I want a better connection downstairs) would have to connect via Ethernet correct?

[stuck grove]

TP link makes some good options

[hybrid ether]

And would there be any compatibility issues that I need to research?

[stuck grove]

You’d need an ethernet connection to the OG box to at least one of the APs, yeah

[stuck grove]

Not all APs support being used in a mesh network, but most do

[hybrid ether]

Thank you so much for your help

[stuck grove]

usually they’ll advertise somewhere that it can function in a mesh network

[hybrid ether]

Could you explain what mesh network means?

[stuck grove]

basically you have two APs

one downstairs is hard wired, one upstairs isn’t

if a device connected to the upstairs AP wants to connect to the wifi it goes from the upstairs AP, to the downstairs AP, then out to the internet

since APs have bigger antennae than most devices will, and often times have a dedicated link between one another, you’ll see better speeds than without the second AP

[hybrid ether]

This is for if I want to move from upstairs to downstairs frequently?

[hybrid ether]

Also, if I hard wire the AP downstairs, would I be able to connect the AP to a switch?

[stuck grove]

sometimes devices don’t handle switching APs super well, but in your case it sounds like you shouldn’t really have issues with devices getting stuck to the downstairs AP

[stuck grove]

Yes

[hybrid ether]

My father and I don’t really hang out upstairs too often so this shouldn’t be an issue. I just don’t want to get another internet connection into the home if I don’t have to. Plus my grandparents are paying for 5gb and it’s all going to waste

[stuck grove]

some APs will also have pass through ports if you need that, but a simple unmanaged switch will work the same if not better for most people

[hybrid ether]

Perfect, because my problems mostly lies in unstable connections which should be fixed with Ethernet. I am unable to Ethernet downstairs currently because of our distance from the router

[stuck grove]

i have a handful of 5 port unmanaged switches laying around cause they’re beautiful pieces of technology

with a mesh network you can also hardwire a device to that AP (depends on the AP a bit), and get better speeds

to the upstairs AP i mean

so it would be device -ethernet- upstairs AP -wireless link- downstairs AP -ethernet- ISP box

[hybrid ether]

If I took at picture of the router we’re using currently could you help me in finding a good AP?

[stuck grove]

just the model number would be better

there’s a fair bit of personal data on the router label you don’t want to leak to the whole internet

https://a.co/d/hIj9deJ something like this would work well

shouldn’t rely on your router for compatibility

you’d basically set it up like a brand new network

TP link has a pretty easy to use mobile app for setup and management

that would also be an example of something you could use to hardwire upstairs devices to

[hybrid ether]

So would the old router in use rn be obsolete if I get this?

Also are there mesh routers that can be wall mounted?

[stuck grove]

Yes

[stuck grove]

is it a modem and router combo?

[hybrid ether]

Yes

[stuck grove]

Then you’d need to leave that in place

You can use both networks if you want, or completely switch over to the new WIFI network from the new APs

[stuck grove]

(sometimes it’s two separate boxes and you can leave just the modem and ditch the router, that’s what i did)

[hybrid ether]

Could I call the internet company to switch out the combo for just a modem for no cost?

Because if that’s the case then I might just buy a whole home mesh internet system instead

[stuck grove]

depends on the ISP

personally i’d leave the existing hardware in place, then daisy chain off it

[hybrid ether]

Okay, I will do that then

Is there a speed limit to APs? Because I bought one that plugged into an outlet a year or two ago and the internet ran like shit even with Ethernet

[ornate jungle]

You could also try a PowerLine AV kit. It uses existing electrical wiring as a "wired" connection. NOTE: reliability and speed are largely dependent on every home's electrical wiring, so there's no guarantees it'll work, but it's worth a shot.
https://www.amazon.com/TP-Link-Powerline-Extender-TL-WPA8631P-KIT/dp/B08RHZBHTM/

[hybrid ether]

My home was built in the 60s, I don’t think this option will be reliable 😭

[hybrid ether]

I just did a whole house signal scan. My bedroom is in the top right THROUGH THE FLOOR. Just so you guys know I am not crazy

[twin pier]

wait are those circle screw holes? That looks like an AV rack rather than networking/server

I believe they use the same screw but no cage nuts, maybe less weight capacity

[quartz citrus]

Hmmm still possible to use as one though right? As long as I'm not being crazy with it?

[twin pier]

Oh wait they might not be the same screw

if the screws work then it should all be good

I probably wouldn't mount a server in it but its probably not deep enough for that anyeays

[quartz citrus]

It's 25 inches deep? Although I don't expect to running any large rack servers this is more for home networking for now. Eventually I might want to upgrade to a rack server but I don't expect that at least for the next year. So that shouldn't be an issue

[twin pier]

yeah that probably wont fit a server but its fine

see if your switch fits the screw holes , if you have the mounting hardware for it

[quartz citrus]

Yeah once I get home sure. Working at the moment

Still thanks for the help!

[naive nest]

Thanks for the assistance with this. Both routers are on the same network.

[naive nest]

I'm hesitant to share the outside WAN address for the router on the .1.x subnet, since that's my public IP, but the address assignment on the .5.x router is as follows:

Is the use of DHCP potentially an issue here, should I have statically assigned the WAN address outside of the DHCP scope of the other router or created a reservation for it?

[opal pagoda]

Did you make firewall rules to allow inbound on the 2nd router?

Since opnsense is primarily a firewall os

[naive nest]

I haven't figured out how to yet unfortunately

I'll look into it

[peak cloak]

some things may not fit like server rails, but I think you may be ok if you just use the screws

[ivory grotto]

hi! im kinda new to networking, but I'm thinking of doing a ubiquiti setup, i dont have ethernet wiring so i wanna do wifi with a wifi backhaul, does the U6 Mesh support that?

or do I need to an ethernet backhaul with PoE

[quartz citrus]

Thank you! I'm mainly wanting to do at home networking and maybe some lighter server stuff. Like a raspberry pi Plex server for local network streaming and homelabbing shenanigans

[opal pagoda]

are holes on your rack threaded?

as they dont accept cage nuts

[quartz citrus]

Yes, so I'm expecting use a large amount of screws lol

[opal pagoda]

it is not that bad
just 4x per 1u appliance

so far for regular racks my fav is rittal cage nut assemblies, they clip on nicely without too much pain

[quartz citrus]

Lol if only that applied here

[opal pagoda]

in your case you just need a bag of screws

no cage nuts

[hybrid ether]

YIPPEE!! I talked to my grandparents about the problems and we came to the conclusions that we get rid of one of the two WiFi networks (one is for work and one for house. Even though we’re paying for the biggest plan for one of them which is like 2.5-5 GB) and then we get a mesh WiFi system to boost the connection throughout the home! MY WIFI PROBLEMS ARE FIXED!!!

That should work right? I’m not completely crazy and have something wrong with my perspective on networking

[ornate jungle]

Ooooof. I hope they weren't using the 2.4GHz and 5GHz networks for "work" and "home" use, respectively. That's NOT how one should use WiFi when the frequency bands are split. Anywho... I'm glad to hear they're willing to work on improving the WiFi network in their home.

[hybrid ether]

Even worse… we were paying for two separate plans from two different ISPs…

But now we should have 5GHz/6GHz all throughout our massive home now! When we call them up tomorrow and figure it all out at least

AND I will finally be able to plug in my devices with Ethernet because we will have a router downstairs!! ^v^

[stuck grove]

holy...

[tight pecan]

Big upgrade 👍

[high bronze]

has anyone here been able to near link performance with virtio network adapter on opnsense on 10G or 25G? It seems to me virtio on openbsd is just trash and either passthrough or baremetal would be the way to go

[cinder summit]

Guys why sometimes my internet is slower when I plug too many routers

[gray canyon]

What kind of router do you have? I was able to hook two ASUS Routers together with an AiMesh setup between two floors for a pretty good connection in the downstairs of my house. Maybe you have a similar thing possible.

[fervent brook]

I got my HTC Touch Pro to connect to my Wifi, but it says it can't connect to Windows Update
(this is a joke)

[hybrid ether]

I already fixed the problem but I got a combo router directly from ATT

[stuck grove]

i have a deep dislike for routers/APs from ISPs, but if it works it works

[opal pagoda]

it usualy doesent work at acceptable performance levels

let alone be secure while doing it

[hybrid ether]

When buying a router, what WiFi type (7, 6e, 6, etc.) should I go for if my plan is 300mbps?

Since all I have seen the different WiFi systems change is the “max” speed they are able to go

Unless there are some other things I am missing from the different WiFi systems

https://buyersguide.org/mesh-WiFi-system/t/best?Country=US&m=b&d=m&c=733245879512&p=&oid=kwd-2007752181281&lp=9189792&li=&nw=g&nts=1&gclid=CjwKCAiA2cu9BhBhEiwAft6IxL-1qKkncendyq_7JDj7kxftB9IbXWrGbhXRyrwepEttxy1YSbb5kBoCsW4QAvD_BwE&tdid=10596571&gad_source=1&gbraid=0AAAAAC3M5kyMKG_0utj7ffHqGjWTVjcoB

I am checking this website for mesh routers to buy and all I see the differences are is that the WiFi type that is on the router=more price

[silent flax]

1. your internet speed is not the only thing you use wifi for, if you got some home servers
2. often the speed is shared, so faster means you can have more slower devices connected without loss of speed (again if you communicate locally too)

but in the end, whatever fits your budget, no need to overthink it

[hybrid ether]

Okay, sounds good. We don’t have any home servers as I live with my grandparents and not tech savvy father

[random siren]

there is not much improvement in feeling past wifi 6 imo. biggest improvement that can be felt would probably wiring all accesspoints up with ethernet and disabling 2.4ghz completely, aka running on 5ghz only

[ornate jungle]

This. Don't get me wrong; on paper WiFi 6E and WiFi 7 look great, but they're both relatively new compared to the number of client devices (laptops, phones, tablets, etc.) that many people still use to this day. Personally, I'd save some $ and stick to WiFi 6 for now, upgrading to WiFi 7 in ~3+ years when you know you need it.

[silent flax]

like i have 'WiFi 5", aka 802.11ax AP, but that is still 1750Mbps combined (450 on 2.4GHz, 1300 on 5GHz), which is still more than enough for 99% of stuff even when i have gigabit down

"oh no, i only get 300Mbps on my phone on 5GHz Wifi, what a tragedy" 😄

[ornate jungle]

The number of ISP customers who flip shit because they're "not getting what they pay for hurr durr" is astounding. To be fair, I blame ISPs for not educating their customers on how the internet is supposed to work... but still.

[silent flax]

i mean i pay for 1000/50 and get 900-950/50 via cable... but for WiFi it is obvious that there are way too many variables. And really, do people need more than let's say 100Mbps on a phone ?

(unless they use said phone as Dex desktop, then maybe yes 😄 )

[ornate jungle]

They don't need it, but they think they're being ripped off if the numbers don't go BRRRRR. 🤣 It's always like "so um, does your phone work, though? Yes? So what's the problem then? Your connection is shared among all your devices. Use your brain please."

[hybrid ether]

Does anyone know if https://a.co/d/bcp2h96 works with the Wii U? Or if I should cancel my order

[stuck grove]

i hate that i don’t have full control over it

if it’s in my house i want total control over every aspect of it

[topaz patrol]

Seperate SSID on 2.4Ghz for IoT

I wish I could disable 2.4Ghz completely

Still a few stupid things that insist on in

[random siren]

yes if its needed. though im starting to recommend zigbee devices over wifi smart stuff

[topaz patrol]

Absolutely. Zigbee/Zwave/matter/thread/whatever all the way!

My washing machine doesn’t like 5Ghz :(

[stuck grove]

ubiquiti dream machine and accessories are shipped, now i can't wait

[rocky badge]

@clear igloo “apartment provided internet is shitting itself so the firewall is automatically failing over to T-Mobile….but why is T-Mobile shitting itself???” oh

How the fuck have we used 130GB on backup 5G

[clear igloo]

Speed!!!

You sure someone didn't do a cloud backup? lol

[amber urchin]

I mean, that's like a day of 1080p viewing

[amber urchin]

I am planning on virtualizing my TrueNAS install (proxmox) in the next couple months. I currently have a dual port SFP28 ConnectX-4lx 25gig card. I do not run a switch, I just connect my PC and NAS directly together with a pair of the cards and a DAC. Can/should I pass one port thru to the VM? If I do so, would I still be able to use the other port virtually for other hosts? For the VMs to connect to the NAS, how would I handle that? Simply connect the PC to both ports and have all 3 on the same subnet/iprange and the VMs route thru the PC? Or does the dual port NIC have the ability to connect the two internally somehow? Need additional hardware?

[opal pagoda]

cant you just use a virtual switch in proxmox?

[amber urchin]

Yeah, I suppose I could just virutalize the second interface and pass it thru to all the VMs, though I'm unsure how that would work if I had no cable attached.

I have concern of overhead regarding virtualizing the primary NAS interface for performance reasons. If I can just pass the one port thru then it's full performance no overhead

[opal pagoda]

https://pve.proxmox.com/wiki/Open_vSwitch
read this

[amber urchin]

Do I really need all that? I have a single point to point for my NAS and desktop, I just want Proxmox to be able to have any VM I want to connect to the NAS be able to do so without needing the gigabit port. I was thinking maybe a linux switch on the unused port would be sufficient if it would work that way.

I guess I'd just have to use the bridge and virtual switch because the machine I've been using to play around with proxmox has a connectx-3 card in it and it appears I can only pass the whole card thru.

Well, maybe in the network card options I can enable the multi host technology they speak of in the documentation and then the one card shows up as two that way

[errant inlet]

anyone worked with mxp?

marineExchange is the full name of the program

[thorny otter]

I need help getting my pdp switch controller connected
It's plugged in but none of my inputs are being registered

[opal pagoda]

this is network channel not #1027757333117415424

[thorny otter]

i was told to go here

[tight pecan]

The person who told you that got confused between the nintendo swich and a networking switch.

#1027757333117415424 is the right place

[lone crane]

ama take it here, sooo im going to upgrade my NAS setup as right now i am using wifi for it and its not the best so i have been looking at upgrading it and i found the QNAP QSW-M408S and it looks great with plenty of fun things and 4 SFP+ ports, i have not bought it yet as i do also need to figure out what to get to connect it to my devices and as it is now i just need 10GbE for a NAS and main computer both pretty close so i have been looking at compatible sfp modules and if i should just use something like a Intel XDACBL1M Compatible 10G SFP+ Passive Direct Attach Copper Twinax Cable or if i should get a Cisco SFP-10G-SR and some fiber cabling, and then i do also need 2 SFP pcie cards for the NAS and computer sooo any help will be much appreciated

[tough kelp]

Hey
Been having a lot of trouble with my networking lately, can't play minecraft multiplayer or port forward anything. The settings are right, worked before.
I have an genexis ED504
When I connect my phone to the pc it works perfectly

[merry idol]

If the plan is to connect the NAS to the switch with SPF+ and the PC to the switch with SFP+, then yes you would likely need to get PCIe cards for both the NAS and PC. There are pleny of relatively cheap options on ebay. As far as DAC vs Fiber, I would recommend going with fiber, and probably just go for single mode instead of multi mode. (SFP-10G-LR instead of SFP-10G-SR) It's not much more expensive, and will give you more options for moving the devices later with a cheap cable replacement.

[merry idol]

When you mention you connect your phone to the PC, do you mean with a hotspot as the source of internet for the PC?

[tough kelp]

Yes, hotspot

[gilded escarp]

got my ont fibre modem replaced with 2.5gb one

new internet speed

[merry idol]

Is the router you mentioned an ISP provided router?

[gilded escarp]

aye

[merry idol]

If you are just trying to connect to multiplayer servers online, then you are likely better off just having UPnP enabled and not having any hard set port forward rules setup.
Do you know if you have a public or private IP on the WAN of the router? It's likely private if it starts with 192., 172., 10., or 100.

[tough kelp]

public

turned on UPnP

Did not help

[merry idol]

Depending on what type of network and authentication your ISP has, you may be able to bypass the router as a troubleshooting step to see if the issue is with a setting on the router, or something on the ISP side. Since they are handing off a public IP, you probably don't want to keep it that way for long. How comfortable are you with checking the IP assignment on your computer?

[opal pagoda]

what is the pricing on that switch?
as for network cards just get melanox connectx 3 or 4, they are relatively cheap and work with most things
i would reccomend getting 2 port card as they cost basically the same but you have option to 802.3ad them together and get 20g
cabling depends on distance, for devices <5m i preffer to run DAC cables as they consume minimal power and just work
as for transcievers SR are decent option, LR ones can be too spicy for distances that you will run and will need a attenuator.

Dont get too woried about vendor of dac or transcievers as most things arent vendor locked

[lone crane]

i am in Norway and the QNAP QSW-M408S is 3000nok or about 270USD.

[lone crane]

yeah i was a bit worried about that as i only saw a very small amount of officaly supported things

[opal pagoda]

if you want to be extra carefull get them programmed from fs.com

they dont have bad pricing either

[lone crane]

yup plan was to buy some things from there

i think i might go for fiber from the switch to the desktop but plan on putting the switch on top of the server so i can just use a DAC for that

i do need to find me a dual port SFP+ card that can run on just 4 lanes as my desktop does not have any more lanes then that

[opal pagoda]

what pcie gen is it?

[lone crane]

pcie 4.0, am5

x670e-f

bottom 16 long slot only got 4 lanes

[opal pagoda]

dont be too woried about that
x4 at gen3 speeds can provide 32Gbps of bandwidth

[lone crane]

well the sfp pcie card also needs to be gen 3

[opal pagoda]

gen4 cards are still pricy
connectx 3 and 4 are gen3

[lone crane]

Mellanox ConnectX-3 cards are PCIe 3.0 x8, but as you point out, a x4 connection at 3.0 speeds is still 32gbps. Even though the controller wants 8 lanes, it will auto-negotiate down to 4 and it should still be enough to saturate both 10gig ports.

yeah

found this

[opal pagoda]

theoreticaly sfp+ can do 20Gbps since it can do 10g duplex

[lone crane]

probs not worth grabbing a 25Gb card tho

plan for the switch is to be a long lasting thing

[opal pagoda]

https://www.ebay.com/itm/395239728228

[lone crane]

Shipping to USA, Australia, UK, RU: Ship via USPS First Class Mail. ETA 8 to 15 business days.

[opal pagoda]

also plan on getting a small fan for it since it is designed for servers

[lone crane]

yup

well then i think i will go for that qnap switch and this sfp pcie card

and i will be buying 2 of these

[opal pagoda]

should be good

[lone crane]

could just get a 7-5M long DAC cable but kind doing this to get some experience with fiber

but yeah anything you think i might look more into or enable on the switch or something or does the setup look good?

also thank you for all the help.

[tough kelp]

What do you mean

[amber urchin]

I run the connectx-4lx myself. The HP variety. 640sfp28 Though I only have two devices I want the speed on so I just connect them directly to each other with a copper DAC as they're less than 3m apart. It wasn't really worth it because my hard drives can barely saturate a 10gig connection, but it leaves me room to grow.

[lone crane]

i think my HDDs only do like 8Gb MAX MAX sooo i am very overkill but as it is now i just need to get away from wifi and yes wifi as i just use a combo router thingy in wireless bridge mode and i kinda study fiber stuff so messing around with it at home is always fun.

[amber urchin]

I got a pair of 10gig transeivers with my second 25gig card. My brother in law gave me a fiber 'cable' to use with them so I could connect both the 25gig cards to my 10gig card in another machine (already had a DAC for one of those). There's no difference really. Honestly, just use copper DACs when it's possible as it's usually cheaper and save fiber for when you actually need the distance. Also, ensure you match the transievers for the distance. Using ones intended for KM distances over short distances can burn them out.

[lone crane]

yeah grabbing 2 of these

and yeah a 5M DAC might be the better move but kinda wanna be able to say i am transferring files at the speed of light, but more to do with just being able to use that hardware

fastest way to learn something is actually using it or doing it

[amber urchin]

https://www.ganpatiengineering.com/blog/how-fast-does-electricity-travel-through-copper-wire/#:~:text=The speed of electricity through,or 186%2C000 miles per second.

[lone crane]

The speed of electricity through a copper wire is approximately 98-99% of the speed of light

[amber urchin]

in a vacuum. networking is not in a vacuum it is in a glass fiber

[lone crane]

ok fine

but yeah i am mostly doing it as i can just slap it on my CV as something i do

[opal pagoda]

i would reccomend getting a used cisco switch in that case

[twin pier]

yeah fun fact, signal propagation is like half as fast through fiber compared to copper

just copper doesnt work for extremely long distances

[lone crane]

well it does if you have a booster every few hundred meters but uh for fiber thats more like KM instead soooo yeah fiber does have a lot more uses for longer ranges but its just fun to play around with too.

anyways thanks for the help

[twin pier]

yeah and the boosters immediately remove the signal propagation delay advantage of copper i think

[gilded escarp]

how accurate is fast btw

is it more accurate than speed test ookla

[twin pier]

not very

it gives me impossible speeds very often

yeah doing it right now it gave me 1.1 Gbps

that is impossible because all my links are gigabit

[nimble sable]

So, Eeros new wifi7 AP...doesn't have 6ghz (the base version without the pro or Max in the name). Only 2.4 and 5ghz. I get that wifi 7 offers stuff like better channel utilization and MLO but fundamentally, isn't all of that almost pointless without the free space of 6ghz? Especially for residential usage in a crowded location for example. Obviously it's not nothing, even in residential use and a crowded area being able to work around congestion and interference is gonna be great on the 5ghz spectrum but after the massive chunk of it DFS takes up, it is, ultimately only a small amount of space to play around in, doesn't matter how nice the house is if the land is only 20m² there's only so much you can do

[pseudo blade]

Yeah don't buy networking gear without reading the spec sheet and reviews, there's a lot of corners cut everywhere

[nimble sable]

It's actually weirdly difficult to find the same spec sheet on Eeros site imo. Is there but not obvious

And omg yes. Networking gear is somehow really bad for this shit

[pseudo blade]

I wouldn't want to accuse them of doing that on purpose but also if they can't tell me what I'd be buying I definitely wouldn't do so

[nimble sable]

I think it's a few things. I see this on a lot of products. Trying to but Acer Chromebook for example is confusing a.f cuz there's like 9 different models all very different all called "714 spin". But I think corporations are relying on and promoting the idea that the regular person need not know or care. Like how apple just says "retina display" without talking about the actual resolution

[pseudo blade]

TP-link does it a lot

They change specs between "versions" of a model number

[nimble sable]

Btw I still don't know how to get 2 devices on a 4x4 wifi band to double the throughput of a single one.

I have a note here I took years ago to follow back with a member here

Mynameisjuan in ltt about why WiFi speed on 2 devices isn't double

[pseudo blade]

Good luck finding 4x4 capable devices that are not routers/APs

[nimble sable]

No my AP has 5ghz 4x4. I had one that was 6ghz 4x4

So 2 2x2 devices on a 4x4 should man each gets is own 2x2 yes?

[pseudo blade]

Sorry I adjusted my terminology to include APs (Wireless bridges and the like can too on better ones)
Laptops and the like will not offer you 4x4, 2x2 is about as good as it gets

[pseudo blade]

With MU-MIMO hopefully but otherwise no

[nimble sable]

Ya mumimo but I've never gotten it to work, best advice I've heard is that mumimo requires physical separation which obvs I live in a tiny apt

[pseudo blade]

Yeah it's no silver bullet

There's stuff in WiFi 7 to make it better apparently but I can't personally vouch for it

[pseudo blade]

Clearly what you need is ethernet ports on tracks along the roof so you can plug them into your devices and pull them around the house with you :P

Finally - High performance, high reliability portable networking.

[nimble sable]

my favorite one will always be the "multi gig" advertised google router/AP that only has a single 1GbE port

[pseudo blade]

As yes, the fast port to nowhere

The idea on some units is that they might be able to do it over WiFi sometimes, but on most it's clearly just to have a label to put on without inflating the BoM by another $15 to give a second port

...Right now I just want a home internet offering over 50mbps, I'm expecting 2.5gbe to become default for all ports by the time NBN Co. offers higher speeds and plans for it that aren't nonsense

[nimble sable]

it's absolutely WILD to me the imbalance here. Like i live in downtown toronto...and i literally get 8.1-8.3Gbps on speedtest consistently, like my internet speed is TOO FAST FOR SATA. Last summer i drove, not much, like 3-4 hours out of the city to cottage country, so you know maybe 350km away from the city...getting above 10Mbps there was HARD. (I don't really pay any more for my internet than what is average internet price here in canada)

[pseudo blade]

Yeah in Australia NBN Co has yet to offer even fiber customers speeds > 1gbps for any price for consumers

[nimble sable]

dude even INDIA has multigig internet, thats just sad

[pseudo blade]

Yeah it got screwed over for politics and for a few large companies' benefits and was designed to be a monopoly

Even threatened to put special taxes on anyone who tried to compete with it under a previous government

[granite holly]

Okay I need some help designing my network. Im fairly green on networking but do understand the usefulness of vlans but havent done it so its not a priority off rip but want to be able to do it down the road.

Note my edge router doesnt have enough ports to support this setup but I already own it so looking to see what kind of switch I would need to support this network correctly.

I do want to be able to expand this down the road to have a server setup in the network closet for plex and other development projects potentially. Nothing crazy.

Im just not sure what kind of switch and where that switch should go.

[clear igloo]

Modem > Router > Switch > Everything else

[granite holly]

Managed Switch correct? Or can the router handle the vlans?

[clear igloo]

You need VLAN tags on the switch

unless you want a switch per VLAN connected to the edge router

PoE+ as well if you want to power the APs off the switch too

[granite holly]

Thats what I figured but wanted to make sure. Any recommendations on a switch that wont break the bank? I have a UP-AC-Lite and a U6 Pro for AP's

[clear igloo]

If you're already in the unifi ecosystem I'd stick with that for a switch too

[granite holly]

I know but damn they pricey. Just bought a new house so not trying to break the bank on something crazy. Ill shop around and see what fits the budget.

Issue is I wanted more ports for future things but I do like the idea of it being all one eco system.

[clear igloo]

https://store.ui.com/us/en/category/all-switching/products/usw-lite-16-poe

I'd look at that which seems to be the cheaper side of what they have with a decent number of ports

[granite holly]

Think this is a good facebook MP deal? $75

[clear igloo]

Not a good deal, no support/updates anymore (I think)

[granite holly]

Yeah I cant really tell what year it came out. This is the only other pic of it on this listing.

[granite holly]

Okay so if I dont go with Unifi for the switch how big of a pain is it to manage? Weighing my options ATM

[novel hedge]

today i learnt you should not try ssh into a cloned machine from the machine you cloned. it just kinda locks up (tries to connect forever)
itll also not close the shh-add instance even if you ctrl-c. so that will just keep running in the background using quite a bit of cpu tbh. until you terminate it

[minor whale]

Hey guys, My setup is currently in a room with no ethernet wired up through the wall, nor do really any of the jacks work throughout my house. (Because the router is not where its intended to be.) But is there a fast way to get Ethernet into my room without running a cable? Ive heard of powerline, but based on what I've seen, its not very fast..

[lean palm]

good deal if everything works

its a gen 1 switch with the faulty power issue so just make sure you test it

[topaz patrol]

It just won’t show up in the Unifi controller

[twin pier]

huh why not

Its still unifi isn't it

[worthy coral]

When maintenance installs a server rack…

[topaz patrol]

They say if I don’t go unifi

[ornate jungle]

Was released between 2015 and 2017, based on the datasheets I can find.

• https://dl.ui.com/datasheets/unifi/UniFi_PoE_Switch.pdf
• https://dl.ubnt.com/guides/UniFi_Switch/US-16-150W_QSG.pdf

[random siren]

Its good enough, can handle 1Gb/s in most scenarios. Another option would be using MoCA if you have coax wiring in your house.

Those are your only two options other than wifi (please dont for gaming, any other purpose will be fine) or laying ethernet

[pseudo blade]

Yeah Powerline's not very fast
IDK about the dude getting gigabit in most scenarios above because I've never even heard of it being achieved in a real-world environment

[ornate jungle]

Powerline AV varies depending on your household wiring. Sometimes you get close to gigabit speeds. Sometimes you get 20mbps. Sometimes you get a connection that feels like it's possessed. You can't know until you try it, so buy from a retailer with a good return policy if you're going to give it a shot.

[pseudo blade]

20-30mbps is more like what I've heard from people I sold them to+friends, and that can be beaten with an OK wireless setup. +1 on try with a return policy

[topaz patrol]

I've seen someone get 40Mbps between two industrial units before lol

But generaly powerline is pretty horrible

[silent spruce]

Don't even think if you are on southeast asian circuit :D

[exotic flame]

is it possible to connect two G-2425G-A wirelessly to use one as a range extender? i could only find wired connections online

[pseudo blade]

Looks to be designed for use as CPE and nothing more. Maybe but probably not

[nimble sable]

If it helps, I've tried tplink and Netgear and so far I love unifis UX / UI way more

[opal pagoda]

tp link omada is better than unify stuff

[nimble sable]

I'll admit I haven't tried tplink much. Netgear is definitely terrible and I really regret getting a Netgear AP. I do still like unifi better for a few reasons, just a personal thing, but their availability in Canada for multi gig stuff was a little slow. A big one is how I can just host the unifi server whatever on my router

[opal pagoda]

for enterprise/business use i definitly preffer fortigates for firewalling

but at home er605 is really nice

[novel hedge]

What router would people suggest?
Currently have Starlink, but it doesn't allow you to put a VPN directly on the router. So, I need to put it in bypass mode and connect it to another router.
Ideally, I'd get a completely different router/modem, but where my house is, internet speeds are atrocious without Starlink, so yeah. But I want to put a VPN on it because, well, you know.

[silent flax]

you can always just buy a mini PC with N100 and dual gigabit or dual 2.5 gigabit, put router OS of your choice (OpenWRT or pfSense etc) and do it that way

and then solve wifi by using separate AP hardware

[fleet field]

Is exitlag worth it for gaming in Fortnite? I live in NY and my connections sometimes are laggy in game. Especially in tournaments which are on na central servers I get like 60 ping. Would exit lag be worth it and what u think it would bring it down to?

[clear igloo]

It only works if you don't have a crappy ISP with crap routing to the exitlag servers
They can only lower latency between them and the end servers, not anything in between you and them
If you're on WiFi/Powerline that's your main issue

[lunar slate]

my ethernet isn’t being recognised by my motherboard, no light on the back at all. cable is fine as it works in my xbox fine and i’ve installed the driver but i think i did it wrong because it isn’t showing up in device manager

do i need to install the preinstall lan driver too

i just did the most recent one

[fleet field]

I’m on WiFi

[clear igloo]

That's why

[fleet field]

So would it decrease my ping on central servers?

[clear igloo]

No, WiFi is a shared medium, subject to interference and other issues

[fleet field]

How do I get lower ping then?

[clear igloo]

Hardwire with a cable

[fleet field]

I can’t one in my room

[clear igloo]

then you just have to deal with the lag

[fleet field]

Damn

[clear igloo]

Or if you want to gamble with a month of the service you could try that

Or if they have a free trial

[fleet field]

Is it hard to run Ethernet throigh wall?

My pc is basically right above my router

[clear igloo]

Depends, drywall isn't bad but brick is difficult

[fleet field]

It’s drywall

[clear igloo]

The biggest issue would be fireblocking (lots of thick wood) between the floors

[fleet field]

How much would it cost

[clear igloo]

You'd have to check out contractors in the area, likely $200 at least

[fleet field]

Alr

[clear igloo]

I'd take a chance with the $10 first and see if it helps much

on ExitLag and see how it does, might be fine on WiFi if you're not in an apartment or near a bunch of other people