vagrant heath
Yeah I know.
#networking
edgy wadi
Are you going for a generic CCNA or are you doing like R/S?
I'm in the middle of studying for CCNA R/S is why I ask, and my brain hurts from it so bad
little schooner
@edgy wadi I got my ccna with the help of netacad
It basically has everything you need to pass
Passed Ccent and ccna with it
edgy wadi
Really?
I've been self-studying for it
And holy crap keeping motivation through that on your own is difficult to a degree I've never known
lol
little schooner
Yeah I never had a problem studying for it. Looked forward to every week
I loved it it requires teacher though
I had a great professor
edgy wadi
Yeah, that's the thing. Thankfully, work has the equipment here for me to have labs created whatever way I need
edgy wadi
What's the cost on it?
little schooner
It's not sold to student, you need to go to school that is part of.cisco net academy program
So more than $1000
edgy wadi
I mean, work covers the cost of the exams
little schooner
Discount was like 67%
little schooner
I did yeah
Some other students didnt continue to do all four parts of the program
I did all 4
edgy wadi
It's definitely going to put you in a good spot though
That cert is so highly desired by IT companies
edgy wadi
Where are you from?
little schooner
Massachusetts
edgy wadi
Hmm
I know we have a center in RHI
I know it's a bit of a move
But it starts at like 22-23 an hour
And that posting is live now
little schooner
Hmm
edgy wadi
Plus full benefits and 401K
little schooner
That's good
edgy wadi
health, vision, dental, short-term/long-term disability
little schooner
Yep all good stuff
edgy wadi
And I think the 401K is like a 6% match
So it's not a bad gig
Plus RHI has the most varied advancement opportunities
little schooner
Good to know I'll keep it in mind. I am still in school going for bachelors degree
Looking for a company to pay for my masters lol
edgy wadi
Uhh
I know we have a Tuition Reimbursement program
But I don't know the specifics behind it
little schooner
I had an engineering friend who they paid an MBA program
In full in exchange for
Working for company 3 years after graduation
It was nice for him
little schooner
Yeah it's not too common I suppose
I stopped at ccna because
Ccnp is more for when the company requires you to get it
Ccna is just enough to get in the door
That's how I see it anyway
little schooner
I guess
But $
I was the only one who got ccna in the class
But few semesters back one student got ccent
The others weren't so passionate about it
They claimed they would do it during summer amd never did
I've learned so.much from it though and my home network has improved so much
That it makes me so happy to understand and have real net security
And not rely on broken consumer stuff
edgy wadi
Yeah. Even if you don't use it in a professional environment, the retooling you can do to a home network to improve efficiency is π
little schooner
That's probably the biggest reason why I can remember it too. I'm basically reinforcing the concepts
edgy wadi
^
little schooner
I love that
It's like a game too
Hehe
My study sessions consisted of not taking notes, but reading the lecture after class online (because there were presentation and the full content book stuff)
Then take the chapter exam afterwards
edgy wadi
Ah I see
little schooner
Basically getting 90s+
All the time
And then doing the packet tracer stuff
Have you ever used it?
It should be free to use if you make a Cisco account
edgy wadi
Honestly? I'm still in a tier 1 capacity here, so I'm still doing the basic call-center work
And it is, I just rarely have time to dive into it
Thankfully, the other half is going to be starting work now that she has her masters, so I'll have more time to studyu
little schooner
It will help your ccna study dramatically
edgy wadi
lol
little schooner
That's good yeah
it says free and for self-paced course, which means it will let you explore the program to use it for other purposes
like connecting virtual switches and routers and configuring them via terminal
good practice.
edgy wadi
I mean, connecting and getting a basic network up and going isn't my issue. It's remembering things like how to configure multiple VLANs on a layer 3 switch
edgy wadi
...I might have to look into that then
little schooner
asa
trust me, you'll fall in love with it
at least for ccna study.
for ccnp, you need real hardware
some stuff I did was configure portchannel, vlans, access lists, dhcp, ipv6, gre tunnels
port-security
edgy wadi
IPv6 is actually really simple thankfully
little schooner
802.1q
edgy wadi
Once you learn the numbering convention of it
little schooner
yeah its super easy
little schooner
the :: is a real life saver
2008:db1:ACAD:2::5/64
for example
CAFE:2::1/64 too
edgy wadi
Yeah. To be honest, that threw me off at first until I learned that it was just simplification of the block of IPs available
edgy wadi
It took a while to understand how routing worked with it
Yeah, it's almost like simplified IPv4, just longer
little schooner
it discovers its default gateway through RS messages
from the RA message
thats neat
clients getting gateway info locally getting it from nearby router
much easier to get a machine up and running
My professor said to us not to spend too much time on subnetting for ipv4
since basically the other content is more likely to appear on the exam
than that
he only did a 30 min activity
and that was it
little schooner
ip sla was one of the last concepts they wanted me to learn
its akin to a constant ping to a server of some sorts out somewhere else
uptime monitoring i guess
thick minnow
So i'm wiring up my room for ethernet (i already have cat6 going upstairs and a 1Gb router) i just need a switch because i will have my pc, ps4 and probably my laptop too. Any good recommendations ?
little schooner
I have dlink and netgear switches, they are good to use for that scenario
edgy wadi
Honestly? With a 1gig router, any simple hub will work so long as the devices aren't talking to each other
But to further him, Netgear switches are cheap and effective
little schooner
if you expect to have more than 4 devices, get an 8 port switch
thick minnow
They will also be running at the same time so idk about leverage and all
little schooner
or just cheap out and go 4 port
edgy wadi
I mean, with a hub, you're not really having to leverage much local network traffic, even with all 3 going simultaneously
So long as the hub can support gigabit traffic, you should be fine
thick minnow
Yea the hub is gigabit
little schooner
most netgear switches support full line-rate speeds for each port simulataneously
no worry about overloading it
thick minnow
Nice
edgy wadi
Oh yeah, they did do that
I usually work with mid-range business Cisco switches, so I forget some consumer bridges have that too
little schooner
the only bottleneck will be when your 1gbps link is saturated by more than one device from your switch. Say you have two devices wanting 1gbps download speed
it will have to share bandwidth with those two devices for your internet only
but very unlikely
even ps4 doesnt go that fast
and wifi either
thick minnow
The thing is that i only have 100Megabytes download at best
little schooner
that should be enough
edgy wadi
I mean
Yeah
With that being the case, local network bottlenecking is going to be the least of your concerns
thick minnow
Thanks for the advices
little schooner
np
edgy wadi
^
little schooner
though for some reason my teacher insisted on buying a cisco asa 5506, which only has 100 meg ports, when we are using 3560G switches in the class
i dont understand why he doesn't upgrade the ASA because its truly the clear bottleneck
the single biggest fix to improve class download times would just be to replace that ASA with any common gigabit router
the school didn't want to pay for new equipment
its a struggle
literally, even consumer router is faster than that asa
anything
thick minnow
Meanwhile at school we have dual 10GB fiber
little schooner
ikr
I was a helper for his room
i upgraded the switches for him to the 3560G
but we couldn't get them for a router
also, we have a long wire going up to the ceiling
it looks ghetto
rocky badge
@thick minnow Needs moar
little schooner
fiber is what I would like
i can't say I have much knowledge or experience with it though
besides lecture from netacad
thick minnow
Dual 10GB dedicated fiberline and 10gigabit wifi routers almost everywhere
little schooner
They got $$$
rocky badge
There's an AP in every room, 100Gb in the core, and 10 gigabit and one gigabit lines
edgy wadi
That sounds more like 10Gig wifi APs using MIMO
rocky badge
They also have a /24 of IPv4
little schooner
thats super nice
edgy wadi
Anytime you have that many routers/APs, it requires careful signal balancing
thick minnow
Actually its mesh and with cisco routers
rocky badge
Roaming and controllers
little schooner
cisco aps require a license for each right??
edgy wadi
If you're using MIMO on the other hand, it naturally flows between APs
little schooner
that cost......
edgy wadi
They can?
rocky badge
We have wave 2 4x4 MU-MIMO
edgy wadi
It depends on how you work it out, and who you get it through
...I haven't even had a chance to dive into MU-MIMO yet
little schooner
yeah like you assign license to ap to work with a controller
rocky badge
thick minnow
can i connect a switch connected to a switch connected to a switch without loss of performance?
rocky badge
yes
little schooner
@thick minnow There is some loss, since its extra hops
edgy wadi
But you're gonna wanna break up the broadcast domain in there somewhere tbh
little schooner
but otherwise it should be the same
thick minnow
ok
rocky badge
There's on of these at every school https://www.contentkeeper.com/sites/default/files/DS - CK SM5 Appliance.pdf
edgy wadi
Yeah, it's a minimal loss
So long as you're not in a high-performance environment with a lot of traffic, it'll be fine
little schooner
its basically a 100 foot cable, another 50 foot, and one more 50 foot cable
3 hops
rocky badge
The AP controller is 24k oof
edgy wadi
lol that's about right
rocky badge
Extreme networks C5215
but UniFi for schools is a bad idea
Nothing above 10 Gigabit? BOO
little schooner
you might be right in some cases
some schools might not need all that speed though
little schooner
this is the same school that once blocked all vpn access
with deep packet inspection
little schooner
its like they had signatures of the protocols or something
to identify it even if you change port
rocky badge
Distru switches https://linusdrop.tips/4mZoKcG.png
The network knows who you are at all times
little schooner
big brother
rocky badge
it integrates with AD
thick minnow
rocky badge
it detects who signed in
little schooner
that is very nice
rocky badge
and who the device was loaned to
little schooner
that integration comes at great cost
rocky badge
yup
thick minnow
my school does that too
little schooner
The cybersecurity classroom does not have a backup plan for the labs that were constructed for the students to complete
to top it off, its running on raid 0
thick minnow
i know what they're internet situation is, and it's pretty good. But it ends up being slow cause of that integration shit
little schooner
very generous bandwidth allocation for staff
I tried download the windows iso from a lab computer for students
and the interesting thing i found about it was that it was downloading at a speed of 20 MB/s
and then after 2 minutes it drops
why does it do that?
rocky badge
If you're uploading to OneDrive you get what ever they can push to you 
thick minnow
zenith ridge
Soon my ISP is going to work in my street, because they have to at least double network speeds by 2020 π still wont be gigabit tho
zenith ridge
200/20
they also offer double that, so fastest connection by 2020 in Belgium would be 800/80
arctic walrus
here in capital you can get youself a 1GBit link π
lean pollen
Could get 1000/1000 if I (or my dad) switched provider, would have costed 155β¬ per month tho
Currently have 120/15 that is 55β¬ per month
inner hound
hba arrived
rocky badge
o.0 @inner hound
inner hound
wat
rocky badge
noice
terse geyser
Is this usually the way that network drives enforce security? Through the computer's credentials? Or how do network drives usually authenticate?
rocky badge
by the user
ebon wasp
Depends which setup you have
rocky badge
terse geyser
So this network drive is on my University network... So theoretically, if I log into the user mvision on another campus computer, I'd be able to access the drive...?
ebon wasp
if you have the corresponding password, yes
rocky badge
if that's your home drive then you should be able to....
terse geyser
Oh my
π€π€π€π€ accessing my university's entire video storage from my on campus housing
Then again, I have access to that media anyways lol
It'd just be cool to access it outside of work in the administration buildings
lmfaoo look at this @zenith ridge @thick minnow
zenith ridge
π₯
ebon wasp
Hmm apparantly my network is busy, only reaching 280 instead of the supplied 400mbps
hallow nimbus
π
subtle glen
lmfaoo look at this @terse geyser
subtle glen
:/
subtle glen
LOL
hallow nimbus
π
rocky badge
subtle glen
btw, where did LZDanger go?
rocky badge
He left 
subtle glen
why
rocky badge
Β―_(γ)_/Β―
subtle glen
he got angry cause so many people were using PFSense
terse geyser
Lmao a peg DHCP
hallow nimbus
Yes
rocky badge
it's IEFT april fools jokes
subtle glen
wish my connection was an april fools joke but nah
terse geyser
it probably is
subtle glen
UUUU
hallow nimbus
π
subtle glen
20/10 for blue
terse geyser
911 up 809 down π€·
subtle glen
it's not yours tho 
terse geyser
u right
hallow nimbus
200/20 π
subtle glen
go away
high anchor
@subtle glen Is it an out of season april fools joke ?
subtle glen
it is a 365 days april fools joke
terse geyser
student bandwidth is capped at 100 / 100 feels bad
terse geyser
Well my uni leases lines
terse geyser
I was like "why reveal your external IP" but then I see its a VM
or
wait
Minecraft server
You have a VM Minecraft server?
hmm
rocky badge
yes
rocky badge
yes
terse geyser
gotta goooo
elfin socket
Which should I try to set up first? PFsense or pihole?
been wavering on and off of what networking project to do.
rocky badge
PfSense
elfin socket
I should just be able to buy OTS hardware and load pfsense onto it, right?
rocky badge
OTS?
elfin socket
any recommendations for a dual nic mini pc that can fit on a small bookshelf?
or a hardware guide?
Feel like ive had this convo before, lol
elfin socket
thinking about it, which channel? gen 1 gen 2?
rocky badge
gen1
elfin socket
yeah check it later. thanks. just really tired and just wanted to browse hardware.
terse geyser
Can someone explain to me what it means when someone says "Layer 2" or "Layer 3"?
To my understanding, it's hardware connections vs software connections?
edgy wadi
So, layer 1 is all physical connections
Power, Ethernet, so on and so forth
Layer 2 is basically dumb switching
IE a hub or basic ethernet splitter
Layer 3 is where you get into subnet routing and packet management
Usually, layer 3 can commonly be a router, or even a managed switch
technically speaking, it can do as far as layer 7, but you very rarely ever hear anything beyond 3
Unless you work with or for an ISP, which regularly handles the layer 4 aspect of networking
hopefully that answers your questions @terse geyser
chrome hound
fresh copper
What kind of ISP do you have that does layer 4 besides maybe blocking mail servers? I guess CGNAT maybe but that's not especially common. The problem with working on layer 4 is that it only works on specific layer 3 protocols, usually TCP and UDP but there are a lot more such as gre, IPIP, ICMP6, etc that most ISPs don't block or otherwise inhibit. I guess some ISPs might do some sort of traffic analysis and I know that there are firewalls in rare situations such as in China but again, I can't say these are common.
elfin socket
@rocky badge You got a pihole running, right? does it block the popups from mediafire and onlinevideoconverter.com ?
daring plover
Just nailed my exam networking
I crashed cisco packet tracer 3 or 4 times but whatever
@chrome hound Usually layer 5 and 6 are ignored as you could simply say they don't exist
rocky badge
@elfin socket yea
elfin socket
I want to start blocking potential phishing sites, just want to confirm pihole does that too. especially agressive popups for people who dont install popup blockers.
remote kernel
Guys, should I buy a UBNT security gateway pro or a Dell poweredge 610 and use pfsense?
hallow nimbus
I am currently using a dell poweredge 860 as a pfsense server π
subtle glen
name of this fiber plug?
exotic relic
stable warren
anyone familiar with Cisco voip phones? Back in the days (2009 or something) i used to have a widget or something that allowed me to click on a number on my desktop and forward it to my deskphone
inner hound
softphone
daring plover
Its funny how about half of us denied to do anything with cisco packet tracer on our networking exam xD
I used it but i did manage to crash it a couple of times xD
It is just so broken, everything can break at random, literally everything xD
I have even seen cables disappear while pinging xD
little schooner
@daring plover which version of PT are you using and on what OS?
thick minnow
How would I block all traffic from a certain mac address on my PC?
clear igloo
You wouldn't, MAC addresses are link local so unless it's directly connected to your PC you can only block by IP
fresh copper
It could be another device on the same L2 network though
I canβt imagine what situation that would come up though, blocking by IP is more likely
Maybe he can provide some more info as to the specific situation
clear igloo
Yah, true
thick minnow
if its a Wi-Fi thing i know some routers let you block certain devices thorough an app like net gear genie
errant plaza
anyone got an idea how i can get my dell poweredge r410 server quieter
fresh copper
Adjust fan curve, replace fans with quieter aftermarket fans, clean out dust, put less load. Itβs not like youβre ever going to make it that quiet though
fresh copper
Put it in a colo
Thatβs what I did with my jet engine Xserve
If you sublease from someone else itβs not too bad. I only pay $30/mo
Thatβs probably not what he wants though
elfin socket
https://www.reddit.com/r/Ubiquiti/comments/510s8x/servethehomes_review_of_the_edgeswitch_es16xg/
Hmmm
remote kernel
@errant plaza how loud are we talking? I'm considering a r910
thick minnow
@clear igloo sorry to bother, i have been redirected to you, i've gotten a fun assignment: i've been handed a cisco ASA 5506-x & i need to get it fully configured and working. mind thee guiding me π
[a new one, i just did the unboxing. first day in ccna1 oh boy =p ]
subtle glen
today i found 2 technicians wiring up this thing in a manhole with fiber cables and i asked them when will they hook up my house as well. They said probably in a month. Getting closer to 1 gbps π
clear igloo
Who dares summon my power?!?!
@thick minnow What do you need configured exactly? π
thick minnow
blob asked me to go to you, i had 1 course of ccna1
and i've been handed a cisco asa 5506-x
" configure it, gl"
1 class
clear igloo
lol, well then I guess the question is, what do you need to do or want to do?
thick minnow
soho enviroment, the first device after a modem that doesn't exist yet
basic config, as if i'd be setting it up in that enviroment
clear igloo
https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/5506X/5506x-quick-start.html
https://www.cisco.com/c/dam/global/en_au/solutions/small-business/pdfs/Cisco-ASA-Easy-Setup-Guide-updated.pdf
https://www.networkstraining.com/cisco-asa-5506-x-configuration-tutorial-guide/
That should get you started
thick minnow
i got the box handed like it came in, out of the box experience, i've been told it had a gui somewhere, but i've connected it to my pc & i cannot seem to find it
clear igloo
Most of what you want to do will be found with "5506-X SOMETHING config guide" but those should get you started π
thick minnow
i got a single utp cable inside
lemme rummage for another one
It's also a challenge they give to all students, if I get it working perfectly by Monday I can keep it
The laptop is on loan from school
It has to survive 2 steps: 1. It gon get connected to a modem and a single client
Client has to access Google.com
- Lector will try to break into the client (fresh windows install) and the router from the point of the monitor
If it survives both I can keep it
clear igloo
Nice
thick minnow
but first i gotta get there
and apparently ir's been 5 years since a student got to keep it
clear igloo
Lol, I can help with that π
I could have that up and running in about 30 minutes >.>
thick minnow
see, it's why blob referred me to you
cuz that's 300 euro hardware
[i need to find a second god damn utp cable though, and i don't see one not in use]
clear igloo
Yah, they aren't cheap
thick minnow
so, good sir, would thee help me on my quest to get 300 euro hardware [im moving out of parental home soon and that might be nice to use to start my own home network with]
is one utp cable eneugh?
clear igloo
Yah, start with those guides, see where they get you and DM me
one UTP cable should be all you need to get started
Management port to PC iirc
rocky badge
@thick minnow most of the time the switch is virtual
But if the ASA doesn't have enough ports yeah you want a physical switch
clear igloo
It's for Firepower, you need a third cable to use that, it forwards traffic through the firepower interface for management of that module
subtle glen
if you config the router properly and they can't break into it you keep it?
and also @hallow nimbus if you come here i'll limit your connection to 20/10
subtle glen
bet?
subtle glen
yeah i know right
they steal bandwith
i need your help to break into the fiber network and get some extra fiber lines
subtle glen
there are a lot of copper lines cabinets already open tho
manholes aren't too hard to open
hallow nimbus
Grabs anglegrinder
subtle glen
a supreme crowbar is enough
subtle glen
π€ true
hallow nimbus
π
Going to sleep
π
π΄
subtle glen
ill dream fiber
hallow nimbus
Yes
thick minnow
i feel enlightened
hallow nimbus
Goes there and steals it all
elfin socket
Spoopy.
Probably one of those racks cost more than any of the haunted houses I visit on halloween time.
clear igloo
Depends on the loadout but yah, things can get expensive fast
subtle glen
why is there no light? xD
hallow nimbus
This dick didnt walk far enough for the light sensor to trigger
or he stood still for too long and it turned off
clear igloo
Or there is no light sensor and they use switches π
spring prism
Computers don't need light, techs do. Most likely saves a bit of money to leave the lights off, and makes for a more ambient picture to leave them off
spring prism
If I could power my computer off a solar panel, I totally would
subtle glen
computers are scared of darkness too
in a server room i expect to find Ubiquiti network managed Lights and switches that actually exist for real
hallow nimbus
Oh
finite island
nice
subtle glen
@ancient vigil it is unacceptable. You cannot have just a regular switch in a server room
those are the basics
finite island
hhhh
fresh copper
Got my first (of three) RIPE ATLAS probes. With this very tiny Ethernet cable it fits perfectly
little schooner
@fresh copper so tiny wow
fresh copper
Lol
fresh copper
That was one of my first attempts so itβs not the best. It works for now but I will change it in the future
meager hazel
2018-11-11 16:04:46 Daemon Management cms 1 User Reset Hardware Button restore default configuration from the LAN side .
2018-11-11 16:04:44 Daemon Management cms 1 Reboot by Restore Key is Pressed.
2018-11-11 14:03:10 User Management web 1 Change the user name or password by .
2018-11-11 14:02:44 User Management web 1 User vodafone login from 192.168.1.4 successfully.
Classic consumer grade isp hard ware just complete rubbish
fresh copper
I asked for one, then I forgot that I asked for one so I asked again, then I realized that I had asked twice so I sent them and email saying that I only needed one and I got three confirmation emails. I'll keep one at home, send one to my colo and I'm not suer what I will do with the last one, maybe give it to my parents who are on a different provider.
clear igloo
Nice π
thick minnow
@fresh copper try stripping more than you think you need, get the order then trim so the sheath is 1/2 way into the 8p8c, you'll get a much more reliable cable that way π
fresh copper
Thatβs what I do now. A lot of those cables were some of the first ones I made so they are not as good. Itβs just my test environment so itβs not a huge issue if they fail some day
thick minnow
Ya, I've got a bad habit of making one time use cables
Pretty sure there's a 25m or so cable hiding somewhere in the house
subtle glen
heh
subtle glen
You mean the black part?
clear igloo
Yup, that's been about my experience too π
I had one set of 10x 1' that was juuuuuust right
thick minnow
I probably just buy the shitty ones, lol
subtle depot
half valley
the screenshot of your current storage
inner hound
β€
hallow nimbus
π
little schooner
That's all fine and dandy, but what's your backup strategy for all that data?
@ancient vigil
inner hound
probably local redundancy if i had to guess
little schooner
@inner hound that would mean another 45 TiB of storage in a different server
Costly costly
jolly grotto
@thick minnow or just do what i get
and get the cheaty cat 5 ones 
they look liek them
inner hound
thats whats in the pic
thick minnow
come to think of it i found a "patch panel" a while ago that was legit just 8p8c passthroughs 
that's why i said it @inner hound π
thick minnow
568B is literally the only one anyone cares about, lol
fresh copper
I only use B. Itβs been forever since I have seen an A cable. If you wire one of each by accident you get a crossover cable and basically everything these days is auto-uplink so it does not really matter
little schooner
i almost started making A variants
but stopped myself and started to make B all the time
fresh copper
Got to control that 3D modeling software over ssh. Itβs the only way
unreal wedge
@subtle glen your CAT5 is fine. @jolly grotto I use those endings all the time. They're superior in every way and ensure a perfect termination 99% of the time, unless you get lazy and force two wires out the same hole. Then you're... fucked. 
fresh copper
I dislike passthrough termination. It looks messy in my opinion. I guess it does not matter when itβs actually plugged in but I will always know itβs there
thick minnow
I remember having to make crossovers for connecting the modem to the hub and the hub to my pc
subtle glen
Too young to understand
zenith ridge
ubnt edgerouter and load balance, can you do all configs without touching console?
like setting an ip to 1 wan only, when default would be load balanced for other devices
meager hazel
yeh it is
inner hound
oh ok
zenith ridge
@inner hound I'm sorry, I also think of ubuntu every time I see it, yet I use it π
zenith ridge
To build further on my previous question.
I'm looking into geting a edgerouter pro (rack mount)
If I'm able to put certain clients on the network on a fixed wan, where default load balance would be used. This would be good enough for me.
If I'm unable to do so, I would like pfsense, I had this before in a VM, worked perfect. But I'm still looking for a good alternative to edgerouter pro for arnoud 350β¬
inner hound
i mean, if you have a spare server you could put pfsense on it and it would be cheaper and possibly more powerful
thats all i can help with on that cause i dunno anything about ubiquity
gritty owl
@zenith ridge Hmm, looking at my edgerouter 4, if using GUI only I can only set load balance but there's no special options to have one IP to go to one WAN
zenith ridge
@gritty owl ah to bad, so I guess I'll be looking into buying a 1u server somewhere
@gritty owl can you create a load balance/fail over for each vlan? or is it like unify 1 setting for your whole setup?
gritty owl
Ah, to do that you'd have to edit the config file manually and that's beyond what I know
using the GUI, there's no load balance settings per VLAN sadly.
zenith ridge
Yea, same story here, thats why I'm asking, pfsense was able to do some more tweaking inside the UI
Just so expensive/hard to find a good yet not to power hungry/loud old server for pfsense π
zenith ridge
Been looking into 1u supermicro
gritty owl
Yeah, I can't imagine how loud those 1U units are. haha
Pfsense is probably what you'd want...maybe look at the netgate stuff (Though that's more than 350 )
gritty owl
haha, one day...
zenith ridge
indeed
gritty owl
Yeah, that sounds about right
zenith ridge
just bit to expensive
gritty owl
I got a USG Pro-4 originally but i lucked out and got a defective model and so just grabbed the edgerouter 4 instead (just launched at the time)
I still need to get the rackmount bracket for it. haha
gritty owl
that's really reasonable
zenith ridge
yea indeed
just needs some more ports maybe, but I see 4x pcie slots free
something like this
I know 10Gb is to much, but I'll prob get 2-5Gb out of it, and thats still more then enough for what I need
and it's fancy, i like fancy
little schooner
Get 10Gb only if your storage media can read and write at that speed
Otherwise nothing wrong with a cheap gigabit one
And you have to factor in driver support
zenith ridge
@little schooner My VMs can read over 4Gbit from the same server storage, so 1Gbit is a bottleneck. All my pcs/laptops have only SSD, only my server also has HDD for mass storage
And still anything faster then 1Gbit, it's just fancy π
little schooner
@zenith ridge so that means you have like many hard drives in the server? I recently got 10gb adapter just for one workstation and single server for quick vms over network and file transfer
zenith ridge
@little schooner about 8drives, 2x1TB ssd in the server
zenith ridge
UPS arrived, now lets hope it actually works
hallow nimbus
π
zenith ridge
Got this one, if it works, its a cheap option
New was about 940β¬ vs this one for 260β¬
hallow nimbus
Yikes
zenith ridge
My server, I spend already over 4k on, was shut down twice in past few weeks because of short power outages, so it's worth it, even if it was 940β¬
Better to save it then break them because i'm to cheap to get a UPS
chrome hound
I pick those up for about 670 worth every penny
I am still working to fully populate them, but I am taking a 6 month cycle approach so I will be cycling 16, so over time it will fill up, but will give me a solid rotation
hallow nimbus
Thats one big battery
hallow nimbus
oh Lolz
chrome hound
see the black panels? those are the head units, with 2 shelves per
each chain has 5 sleds each sled has 8 units
hallow nimbus
Damn
hallow nimbus
DAMN SON
subtle glen
like i said, get a goddamn generator at this point xD
hallow nimbus
π
subtle glen
and i'd like to thank my parents for not letting me put the security camera :D. What happened today? Super strong glue into the keyhole. spent hours with the drill to try to break the pins to spin the handle
also the one that has the garage near me really wants me to put the security camera so that i can record what happens to him just in case. So @chrome hound i need your opinion about some fiber equipment π
chrome hound
well since you have to power the camera, I am not sure fiber going to be a good way to go, a lot of camera are POE so you going to be running copper for power, so might as well take advantage of a POE device and run a cat 6
subtle glen
at the end i was planning of using the 2 pro curve switches as media converter with a BiDi LC fiber to SFP connector
and run the LC fiber cable in between
The problem is that i cannot run ethernet cables into power conduits. It would be easier but i can't
chrome hound
so short power with a long data run?
subtle glen
i think the distance is about 60/100 meters? and also there is that problem of the tight conduit. i don't know if the LC connector will fit or if i have to terminate it by myself. Maybe i should buy a short LC cable to see if it fits before buying the 100 mt one
lean pollen
Make sure you know the rules about security cameras in your country
subtle glen
i've asked a cop today and it says it is fine
zenith ridge
@ancient vigil Where do you live?
because here in belgium, they even want to shut down some places because there isn't enough power for the winter
and where i live, it's first in rank to go poof every day for a few hours
subtle depot
Jup... Netherlands power grid is pretty darn reliable. The only outages I remember are because either someone trippped a breaker or because lightning literally struck our house.
lean pollen
Last power outage was like 2 years ago here but that was like 10 min and was a planned one because mantinence
Wasn't it Belgium that had a lot of the power plants shut down for maintenance this winter?
Or was it another
zenith ridge
yea
well
they shut down a long time ago
and still arn't back up
so now they will shut down parts of belgium in case there isn't enough power
that means we have no way to heat up the house
if that does happen
zenith ridge
We had that happen once, except the bypass, just shut everyone off, connected generator, and when done put off the generator and connected us again
also solar panels dont work when on the generator
meager hazel
Sounds fun
hallow nimbus
Power outage whats what?
left copper
I think its when you get 3 feet of snow and your light flickers a little bit.
lean pollen
1 meter of snow isnt that much
weary kestrel
subtle glen
@zenith ridge you were right. Today i found 2 other technicians that were installing another fiber cabinet like 30 meters away from my building and i also asked them when it would be ready to use. I told them that i live in a building where they already put the fiber box and they said that they won't pull a cable for everyone, but a single one for anyone who wants to have the fiber line. I just had to make the request. So considering that they installed that in august, and in september it was probably ready, i wasted all this time thinking they still had to pull the cable
subtle glen
maybe. Maybe it was not available cause the cabined needed to be hooked up first
or it was, we'll never know
subtle glen
are you free tomorrow?
hallow nimbus
And let it be a fiber line because i want that 1 ms π
subtle glen
is this enough?
subtle glen
i mean the number of fiber strands
subtle glen
or since a laboratory managed to do 48Tbps over a single strand... why not 48Tbps per each fiber
subtle glen
i would say an hour
hallow nimbus
Oh yea steam servers aint great
subtle glen
we could be the steam servers with that bandwith
hallow nimbus
π
hallow nimbus
π
subtle glen
uuuuu
that's in case a DNS fails. They hook the truck to some cables and you got a momentary DNS server xD
rocky badge
π
hallow nimbus
π
covert turret
is there a way to lower others usage of the internet
im on an ethernet but the phones that are on the wifi are hogging it
covert turret
mts
chrome hound
when cable management has gone bad
zenith ridge
π
chrome hound
and the dead bodies left over
that's where the 7750 SR-12 went that I linked a week or so ago,
zenith ridge
Is that all 10gbit? or faster?
chrome hound
that's a core router, so its pushing 100gbit
zenith ridge
I can live there right, right next to the router
chrome hound
well per port, the back plan is something much higher I don't recall the max it can top out at
Only the the ones on the ends are the 100g core links the other are all 10 I think
that's one of our major cross connects for the SLC area, so all our SP link in at 10 for the most part
with a some 40g here and there
zenith ridge
Is there anything better right now for an ISP then 100Gbit connections?
or is that like the limit while stil 'affordable'
zenith ridge
subtle glen
well, if i ping my router i get 1 ms
i was pinging a pc in the garage while having remote connection open. And the link between the 2 powerlines is not even 100 mbps
@chrome hound i was thinking that if the fiber can't fit the conduit, and it's too complicated to terminate by yourself, i could use an ethernet cable from the house to the power room, then put a media converter and go fiber
chrome hound
@zenith ridge well there is, but for long hull, and I mean we are talking cross country I think 100g is the most stable, 400gb is still a bit out before your core gear is doing it reliably over distance
subtle glen
i see you have access to all this fiber. Hook me up plz
chrome hound
well complicates is a loss term you need the right tools to do it and for a single splice its not cost effective, but if you have a good repor with the guys installing the fiber, they may be willing to splice for you
subtle glen
well, i saw a video where stripping the jacked to a certain lenght is enough. Then you just push the fiber into the connector
zenith ridge
just for fun, how much does that 100Gbit router cost? @chrome hound
chrome hound
that one was like 75k with out 100g cards, the cards are like 20k I think
rocky badge
Are you new to enterprise networking pricing?
subtle glen
rude
chrome hound
well we have about 20k subscribers currently
rocky badge
I mean it's true π
subtle glen
why the xmas hat? xD
rocky badge
Β―_(γ)_/Β―
chrome hound
carrier grade is a step above enterprise π
rocky badge
true xd
chrome hound
I wish we could run Enterprise, but those switches would have a hard time serving out in a hut
subtle glen
how did you do that cable management thing without having to interrupt internet service?
chrome hound
but that router is in a data center so its not exposed to as much particles in the air
we didn't they replaced the router and took down NNI's while the hardware was swapped out
midnight maintance YEA
rocky badge
roaming is amazing
subtle glen
so you did have to shut everything off
chrome hound
no other options when your dealing with core routers that don't have redundant counter parts, but they are now designing with redundancy, but at some point the ISP only has one connection (well some do) so its not possible to keep them up while we replace core gear
the large guys have at least 2 NNIs
rocky badge
Wait, wot, my traffic to local IPs goes out of the network
chrome hound
?
rocky badge
1 10 ms 8 ms 2 ms static-[school IP].[schoolname].tn.ena.net [school IP]
2 4 ms 5 ms 6 ms 172.23.3.65
3 3 ms 3 ms 5 ms [removed]-DC.[removed].local [10.0.0.2]
routing?
chrome hound
I have that problem with my setup, unless I add static routes my public to public IP traffic travels up to SLC
rocky badge
Hmm
chrome hound
its how they have setup isolation so I don't directly touch any other public IP in my physical domain
so unless I have static routes when I run a speed test to my speed test server it goes the core then back π
rocky badge
Lol a hop's hostname has vlan99 in it
fresh copper
This looks cool
subtle glen
ubiquiti plug
zenith ridge
Rather have them spending their time on other things, like more 10Gbit stuff
subtle glen
There are even switches, power bars and lights π
thick minnow
Ya, ubnt are branching out and it's awesome
chrome hound
won't be long now until this guys is in service, the only bad thing is its on the wall side so the rest of the core switches an isle away from it
thick minnow
I just got a job at an isp
fresh copper
No ISPs ever want me. Iβll probably be stuck setting up wifi networks forever and never get to use my bgp skills
thick minnow
my local one you have never heard of
really small
but they put fiber in the whole redneck town
π
also you are more qualified then me as i dont know what bgp is
hallow nimbus
π
thick minnow
ya but i mean the gave me like three interviews
two for the job they were hiring for and told me i didnt get and called my like 30min after the second one and came up with a job for me and hired me
hallow nimbus
π
thick minnow
ya it was cool told me what the job was and handed me a contract
hallow nimbus
With the text sign here or fuck off π
thick minnow
lol not quite
but its a good jon
job
for my first job
12usd an hour and they work bank hours
so every holiday i get off
thick minnow
ya but rn i am only part time
hallow nimbus
So ?
thick minnow
yes it is
and what i am doing is they are trying to branch off to be i.t departments for large companies so i get to be a help desk guy for them
hallow nimbus
Ah nice
thick minnow
and if i get two test done they pay for and pass they will give me 2usd an hour raise
hallow nimbus
π
hallow nimbus
True
thick minnow
it seems like a good job
hallow nimbus
Sounds like it
thick minnow
and i dident ask but they most likely have like health care and a 401k
hallow nimbus
Whats 401K ?
thick minnow
retirement
hallow nimbus
Oh
thick minnow
you put money out of you check and they will match and put it in a fund
so its a good deal if they do
thick minnow
cya
subtle glen
Do employees get a discount about fiber?π
left copper
Just become a developer and companies will basically throw money at you if you're any good.
My internship was 12/hr, my first job was 21.63 an hour and my first raise was at 6 months and got bumped to 24.88/hr.
thick minnow
so before getting hired i pay for fiber 100megs 65usd no data cap
and where i got it this year i got a price lock for as long as i live in this house
little schooner
@left copper sounds like the company really has money to throw around
Awe I'm not a developer
subtle glen
how am i supposed to access the router then? already tried on firefox, on explorer (also enabled SSL 3.0) and on chrome ( i get the ERR_SSL_VERSION_OR_CIPHER_MISMATCH error)
clear igloo
http instead of https?
pure flax
gritty owl
at least it's not wep. haha
plain ocean
I've got an SSID like that at work. Couple old devices on it that won't let me use anything newer. I just use it for my guest network as well, since it's insecure anyway.
rocky badge
WPA2-EAP here
clear igloo
PEAP ftw π
little schooner
I'm having a problem with peap. How do I get apple clients to use 802.1x with certificates?
And when I put custom certs in the phone, it says it's not trusted
Does that mean I need to use a public CA in order to avoid this error?
rocky badge
you need to install your root CA on the phone
little schooner
Yes I did that. The root and the intermediate one
Also, is it possible to use TACACS+ with apple and android?
I dont like how windows NPS does not encrypt usernames
When the request is going in
clear igloo
tacacs is for device admin usually. Never seen it for wireless access
little schooner
@clear igloo hmm so how would one go about getting the username encrypted? Must I use something other than peap?
Like theres a list of so many of them.
clear igloo
PEAP with EAP-MSCHAPv2 for the inner?
clear igloo
It should, at least from what I can tell
little schooner
Hmm I will redo a packet capture to make sure I saw it correctly
clear igloo
EAP by itself, is defined as encapsulating all the identity information, but not encrypted. PEAP and FAST though should form a TLS tunnel first with the server and then use the inner method to send credentials
Unless the server or client can't negotiate an encrypted tunnel algorithm since the PEAP tunnel doesn't have to be encrypted
little schooner
I'm using web gui for my router since it's actually a lot more commands to type than it is to select multiple firewall rules and do an operation to them
Sometimes the commands dont even make any sense the way they written too
I guess that's on a per-brand basis
subtle glen
when your internet can't load a 6.7 KB image on whatsapp, you know you touched the bottom .-.
clear igloo
NX-OS π
subtle glen
4 hours for a 78mb video seems reasonable
clear igloo
ah, yah, they can do that
subtle glen
can i just terminate a CAT 7 cable normally using a rj45 plug and connect the shielding directly to ground with a cable?
clear igloo
why would you ground the cable?
subtle glen
cause it has to go in a conduit with 1 neutral and 1 live cable
rocky badge
cuts BaCk's Ethernet cable that's outside and crimps it to gain access to his network
subtle glen
i dare you
i was planning of installing the media converter in the general power room in a nice transparent box π
thick minnow
it doesn't have to be grounded
subtle glen
what do you mean
lofty musk
I need some networking advice
thick minnow
there's no specific requirement for ethernet to be grounded
subtle glen
well, but if the shielding is used to protect the cables inside from interferences..
where do these interferences go if the cable is not grounded
thick minnow
it goes to ground via the chassis of the device
subtle glen
but if i don't connect it to a device that has grounded ports, i have to ground it in another way
like one of those 8 port unmanaged switches
unreal wedge
All 8-pins go both ways. As long as you use proper cabling, technically the brown pair being the POE pair would be your ground if you decide to think of it that way.
subtle glen
but there would be no point of running a shielded cable in an electrical conduit without grounding the shielding
clear igloo
The shielding is to provide EMI protection
It reflects the radiation away from the cables
subtle glen
"The cable would be grounded thanks to the device's metal flaps inside the ethernet jack". For now my device does't have ground flaps on the port and also i wanted to ground it only on one side to avoid any potential voltage that might create at the end of the cable so i don't also have that ground loop the article talks about. But if you say that the shieling reflects any interferences anyways...
swift lava
Hope this is the right place, but any advice on an ac compatible WiFi card on amazon around 40$?
fresh copper
@swift lava Generally TP has the cheepest. Iβm assuming you are in the US as a lot of people here are (even though LTT is Canadian and actually is only about 15minutes away from me).
(This one from is on sale for $40 and is AC1300 which is not the fastest available but is still ac compatible)[https://www.amazon.com/dp/B016K0896K/ref=cm_sw_r_cp_api_YiB8Bb1NPT600]
(If you donβt want TP link, here the same thing from a different brand)[https://www.amazon.com/dp/B01JUCUMBK/ref=cm_sw_r_cp_api_SkB8BbXSE628D]
If you want AC1900 or faster itβs going to be more expensive.
If you wanted USB itβs going to have to be rather slow because USB itself is rather slow. The fastest, and most expensive, is ac1200 for about $30. (Here is one example but there are many)[https://www.amazon.com/dp/B01IEU7UZ0/ref=cm_sw_r_cp_api_DnB8BbKCCRNKG]
swift lava
Yeah I think you got exactly what I was looking for in a type ac card. Thanks
little schooner
I see some websites started using the WiFi X naming convention now. Amazon has listings for WiFi 5 equipment
For some laptops
fresh copper
I'm happy that they are making it easier for consumers
gritty owl
Yeah, so happy for that. WiFi naming has gotten so strange once they went dual letter. haha
clear igloo
But ay, let me ax you a question π
subtle glen
Why you using wifi π
lean pollen
I am using WiFi because ethernet would be a pain in the ass to put to my computer
And WiFi works fine
thick minnow
Wifi is a perfectly acceptable method to connect a device
little schooner
yes, like for some cameras too
Hikvision's camera has a stable wireless antenna
I dont know about other brands, maybe dahua too is stable with its wifi
but it sticks out and looks gross
inner hound
not all cameras have poe tho
clear igloo
That's still copper
subtle glen
for devices that don't have POE
clear igloo
Ah! I thought you meant for fiber, lol
clear igloo
those dongles are how I converted all my IoT devices to PoE π
Freed up 8 wall bricks
subtle glen
and got some extra Power bars
inner hound
inner hound
according to wikipedia
subtle glen
how, when , tf
lean pollen
what is in the other end? a small panel?
unreal wedge
Fibre PoE via microwave radiation inside the fibre. Most likely very dangerous, but doable.
subtle glen
wtf