#networking | Linus Tech Tips | Page 153

thick minnow Mar 22, 2019, 10:37 PM

#

I don't think that's what I need.

waxen scroll Mar 22, 2019, 10:38 PM

#

you're right

#

one second

rocky badge Mar 22, 2019, 10:38 PM

#

woah woah that's too hard

#

/s

clear igloo Mar 22, 2019, 10:38 PM

#

I bet it's going to be a router and a cloud connection 😛

waxen scroll Mar 22, 2019, 10:39 PM

#

📎 SNAGHTML16c577cf.png

clear igloo Mar 22, 2019, 10:39 PM

#

XD Yup, so simple now 😛

waxen scroll Mar 22, 2019, 10:39 PM

#

this is a real one i put out there in some office

#

dont ask

clear igloo Mar 22, 2019, 10:39 PM

#

Home office? 😛

waxen scroll Mar 22, 2019, 10:39 PM

#

its EXACTLY what pol needs

#

yes

#

a home office

#

not mine

thick minnow Mar 22, 2019, 10:40 PM

#

I'm done with my diagram for today, I've been working on the stupid thing for like 3+ hours straight.

clear igloo Mar 22, 2019, 10:40 PM

#

Seriously though, @thick minnow , you're definitely close with this now :)
Just need to add the hosts and AP and you're good

waxen scroll Mar 22, 2019, 10:41 PM

#

turn in my diagram, you'll be IT god to your prof

thick minnow Mar 22, 2019, 10:41 PM

#

I have to work on my Programming 1 Homework now. Cya layer guys, thanks for the help! 😃

clear igloo Mar 22, 2019, 10:41 PM

#

Later

waxen scroll Mar 22, 2019, 10:42 PM

#

i cant answer why its that way

#

but trust me, it was the only way

#

its an anal security team basically

clear igloo Mar 22, 2019, 10:42 PM

#

I don't know why it be but it do, mhmmm

waxen scroll Mar 22, 2019, 10:44 PM

#

📎 unknown.png

#

i drew this too

#

relevant to xeon's interests

#

fucking pol, turn this other one in too

#

you've got a damn datacenter now for your small biz

#

xD

#

@rocky badge this is how the NSA works

#

this is how you shut server people up when they blame your network

rocky badge Mar 22, 2019, 10:48 PM

#

lol

waxen scroll Mar 22, 2019, 10:48 PM

#

@clear igloo most company too cheap

#

bonus points if someone can tell me whats happening in the diagram

#

i... i cant watch... when linus does network changes

little schooner Mar 23, 2019, 3:30 AM

#

I think I understand why networking was so easy for me to learn. I had problems with my own home network that I wanted to solve but it required some knowledge of all the layers and why things are configured as they are. I could quickly apply it to real world at home right after school, which is pretty awesome.

.... now if only Trig math were the same. it's so hard to work with theory and not having a need to use any of the trig math in daily life

fresh copper Mar 23, 2019, 3:50 AM

#

I often feel the opposite. I learn the theory really well but it’s hard to wrap my head around concrete examples

covert ibex Mar 23, 2019, 4:10 AM

#

@little schooner
I didn't find trig hard, but I use 3d quadratics at work daily.
Networks on the other hand, I love. They calm me down. (When they're configured right)...

little schooner Mar 23, 2019, 4:23 AM

#

@covert ibex I feel like I am doing terrible in it. I have a 78%

#

But on the bright side, the sections we are covering now have easy identifiable patterns that help me find the correct answer. I just need to do well enough to get the passing grade for the credit and then NO MORE MATH :D

#

When would it be appropriate to use DHCP server role on windows server vs. letting a router/firewall handle DHCP? Is it when high availability is needed?

covert ibex Mar 23, 2019, 4:30 AM

#

Think it's more to do with if you want to authenticate DHCP with AD, as most routers don't accommodate that

#

And kerebos. Right?...

little schooner Mar 23, 2019, 4:57 AM

#

oh.

#

I guess so.

proper veldt Mar 23, 2019, 7:56 AM

#

It turns out that I was paying too much for my tv/internet bundle, so I decided instead of lowering the monthly cost to upgrade to gigabit fiber for the same price I was already paying. I was wondering if typical devices such as amazon echo dot, ps4, ps3, and smart tv''s will be able to improve (coming from 350 Mb/s down - 24 Mb/s up

covert ibex Mar 23, 2019, 9:20 AM

#

So, pi-hole up and running, what else can I set up with these two extra rpi's.

median ore Mar 23, 2019, 9:50 AM

#

@little schooner practicing also make me learn better

sturdy mirage Mar 23, 2019, 11:01 AM

#

maybe some docker containers @covert ibex :/

waxen scroll Mar 23, 2019, 11:21 AM

#

Dat xeon

#

It's for centralized management

#

It's too annoying to mess with DHCP on multiple devices

#

You can build redundancy in, but if your local site is offline anyway, DHCP on local device doesn't matter

#

Believe it or not, DHCP is almost never managed by network people at large companies

#

It's managed by the people who run the dns servers, usually AD team

#

Most of the time it's Windows server DHCP. Some of the time it's dhcpd on a Linux box

#

There's no "authentication with DHCP" that I know of anyway

clear igloo Mar 23, 2019, 11:28 AM

#

There is only DHCP trusted ports

waxen scroll Mar 23, 2019, 11:29 AM

#

It's either 802.1x or nothing. Usually people don't authenticate lan, but they use certs tied to your AD account for wlan so there's no keys to manage

#

I'll walk back what I said, there are NAC appliances to profile devices if you don't use 802.1x, but I hate those things

waxen scroll Mar 23, 2019, 1:01 PM

#

@covert ibex Hassio + home assistant

waxen scroll Mar 23, 2019, 2:21 PM

#

@clear igloo you dont like diagram #2?

clear igloo Mar 23, 2019, 2:21 PM

#

Needs more VxLAN and Segment Routing

waxen scroll Mar 23, 2019, 2:22 PM

#

thats not the point of it tho

clear igloo Mar 23, 2019, 2:23 PM

#

The point is always to make it more complex

waxen scroll Mar 23, 2019, 2:23 PM

#

the point is to tap the links

clear igloo Mar 23, 2019, 2:24 PM

#

Ah, that one

#

Yah, needs more taps 😃

waxen scroll Mar 23, 2019, 2:26 PM

#

teaching the LTT community how its done

#

it could be a video

clear igloo Mar 23, 2019, 2:27 PM

#

Linus would just drop all the taps

waxen scroll Mar 23, 2019, 2:27 PM

#

have you used these systems before?

clear igloo Mar 23, 2019, 2:29 PM

#

No dedicated taps, no

waxen scroll Mar 23, 2019, 2:29 PM

#

why do you think the taps have vlan ID's next to them?

clear igloo Mar 23, 2019, 2:29 PM

#

To tag the streams

waxen scroll Mar 23, 2019, 2:29 PM

#

see, you iz smart

#

you see it when you download the packetz

#

helps blame the IPS

clear igloo Mar 23, 2019, 2:30 PM

#

Haha

waxen scroll Mar 23, 2019, 2:30 PM

#

IPS is not managed by me, i will blame it all day long

clear igloo Mar 23, 2019, 2:30 PM

#

Yah, I don't get to do that in the lab 😦

waxen scroll Mar 23, 2019, 2:31 PM

#

shits expensive, i dont have it in my lab either... i do have the capture appliance but no taps and i can only span switches i run fiber to... only two spans at a time

#

RSPAN is difficult with some of the situations i need to test

clear igloo Mar 23, 2019, 2:33 PM

#

Yah, RSPAN can be a pain

waxen scroll Mar 23, 2019, 2:33 PM

#

if i think a VPC is fucking up, i dont want to send an RSPAN through that vpc

#

😄

clear igloo Mar 23, 2019, 2:34 PM

#

Exactly, I prefer SPAN direct to Spirent if at all possible from the problem device

waxen scroll Mar 23, 2019, 2:35 PM

#

maybe xeon can turn in my diagram

#

extra credit

#

pol got scared of it 😦

#

even though its a perfect office network with datacenter

#

xD

clear igloo Mar 23, 2019, 2:36 PM

#

😛

waxen scroll Mar 23, 2019, 2:36 PM

#

why the dual port channels?

#

VRFs.

#

anal sec team

#

one VRF needs to leave the building but not allowed to talk to primary vrf

clear igloo Mar 23, 2019, 2:37 PM

#

Why not just sub-interface and do per-vrf? Just because they scared?

waxen scroll Mar 23, 2019, 2:37 PM

#

i think there was a limitation somewhere and i just dont remember

#

it was a while ago

clear igloo Mar 23, 2019, 2:38 PM

#

Ah, makes sense then

waxen scroll Mar 23, 2019, 2:38 PM

#

ASAs are tricky bastards

#

oh i remember

#

no limitation, it was a bandwidth concern

#

for local<->local communication

#

there was a few things the two vrfs did share

clear igloo Mar 23, 2019, 2:39 PM

#

Just need more links, duh

#

Yah, bandwidth can be a definite concern

waxen scroll Mar 23, 2019, 2:40 PM

#

we didnt want a single gig link to basically loop traffic around

#

i hated this design more than you probably do

#

so many failure points

#

complex for NOC to troubleshoot

#

the company made the decision they wanted ASAs + firepower to filter all traffic between VRFs and etc

#

they also got hit hard by the clock issue

#

ordered a ton of ASAs, they were all affected

#

the second you put a VRF in, 90% of NOC people = RIP

clear igloo Mar 23, 2019, 2:44 PM

#

Ooo, I remember that one

waxen scroll Mar 23, 2019, 2:45 PM

#

o_o

#

@little schooner firepower can kiss my ass

clear igloo Mar 23, 2019, 3:01 PM

#

@waxen scroll Firepower couldn't manage to kiss it's own ass 😛

daring plover Mar 23, 2019, 3:21 PM

#

Can anyone tell me where to find the default webpage html file for apache2

clear igloo Mar 23, 2019, 3:31 PM

#

/var/www

daring plover Mar 23, 2019, 3:34 PM

#

Found it already by but thx anyways

#

Now onto the next annoying thing

#

SElinux enforcing

waxen scroll Mar 23, 2019, 3:34 PM

#

selinux disable

daring plover Mar 23, 2019, 3:34 PM

#

It must be on

#

So somehow i gotta allow 2 more indexes

#

But i cannot figure out how

thick minnow Mar 23, 2019, 5:19 PM

#

Changed the IP addressing scheme for the local subnet to be using a class C Address.

📎 unknown.png

#

Does it look ok so far?

clear igloo Mar 23, 2019, 5:24 PM

#

@thick minnow Yup, looks perfect

waxen scroll Mar 23, 2019, 5:26 PM

#

where did 1.1 go

thick minnow Mar 23, 2019, 6:01 PM

#

📎 unknown.png

#

Should it be /24 instead of /30?

#

Does the diagram make sense?

waxen scroll Mar 23, 2019, 6:06 PM

#

the way you have it in the diagram wont work

#

@clear igloo fix your lies

clear igloo Mar 23, 2019, 6:06 PM

#

lol, what lies?

waxen scroll Mar 23, 2019, 6:06 PM

#

you said that would work

clear igloo Mar 23, 2019, 6:07 PM

#

I said the bottom part would work, I saw nothing for the top part

waxen scroll Mar 23, 2019, 6:07 PM

#

ouch

#

as a man, you should take responsibility

clear igloo Mar 23, 2019, 6:08 PM

#

I did, I take responsibility for what I saw 😛

thick minnow Mar 23, 2019, 6:34 PM

#

So I use /24 then for the ISP and the Firewall Public IP?

#

Yes?

#

@clear igloo @waxen scroll Thoughts?

clear igloo Mar 23, 2019, 6:49 PM

#

ISP and Firewall Public are fine as /30

#

Firewall private to router needs a /30 too

thick minnow Mar 23, 2019, 6:52 PM

#

So the private Firewall IP needs to end in /30?

#

Can the router private IP stay /24 or does it need to be /30?

clear igloo Mar 23, 2019, 6:54 PM

#

The router needs two IP addresses on different subnets. One facing the switch and the other facing the firewall

thick minnow Mar 23, 2019, 6:57 PM

#

Well the wired network is using a Class C/24 subnet, does that mean that I can't use /24 from the private router IP to the private Firewall IP?

clear igloo Mar 23, 2019, 6:58 PM

#

You could use a /8 between Router <---> Firewall inside if you wanted but you need a different subnet that doesn't overlap with the router interface going to the wired network

thick minnow Mar 23, 2019, 6:59 PM

#

So what do I need to change then exactly?

#

Sorry if I'm dumb about this.

clear igloo Mar 23, 2019, 7:00 PM

#

You need to change Firewall Private IP to 192.168.0.1/30, ADD a Router IP (facing the firewall) of 192.168.0.2/30, change the Router IP (facing the wired network) to 192.168.1.1/24

thick minnow Mar 23, 2019, 7:01 PM

#

Seems simple enough, I'll do that and send another screenshot so you can confirm that it correct.

clear igloo Mar 23, 2019, 7:01 PM

#

The only thing to remember, you're going to need to correct the default gateway IP on the AP to end in 1.1 from 1.2

thick minnow Mar 23, 2019, 7:02 PM

#

It does have 1.2

#

Oh I see.

#

lmao

#

So the router will have two IP's one private and one public? The private one will be 192.168.1.1/24 and the public one be 192.168.1.2/30?

clear igloo Mar 23, 2019, 7:04 PM

#

almost, the public one that faces the firewall will be 192.168.0.2/30

thick minnow Mar 23, 2019, 7:05 PM

#

But should I label it as "Public IP" for the router? Is that correct?

clear igloo Mar 23, 2019, 7:06 PM

#

No, it would still be private

thick minnow Mar 23, 2019, 7:06 PM

#

So the router will have two IP's that are private?

clear igloo Mar 23, 2019, 7:06 PM

#

Yes

thick minnow Mar 23, 2019, 7:07 PM

#

That's confusing to me, how would I label that correctly?

clear igloo Mar 23, 2019, 7:07 PM

#

Firewall link is what I would call it

thick minnow Mar 23, 2019, 7:12 PM

#

Does this make sense/work?

📎 unknown.png

clear igloo Mar 23, 2019, 7:14 PM

#

Firewall link (Private IP) is wrong

thick minnow Mar 23, 2019, 7:15 PM

#

So is the private Firewall IP itself is wrong?,or is the the Firewall Link IP wrong?

clear igloo Mar 23, 2019, 7:15 PM

#

Just the private firewall ip/subnet is wrong, firewall link is right

thick minnow Mar 23, 2019, 7:16 PM

#

I just hope my professor will be able to understand it.

#

Should I have called it External IP?

clear igloo Mar 23, 2019, 7:17 PM

#

Nah

thick minnow Mar 23, 2019, 7:17 PM

#

What should I call it then?

#

Just IP?

clear igloo Mar 23, 2019, 7:18 PM

#

Inside IP or Private IP would work

thick minnow Mar 23, 2019, 7:19 PM

#

Should I also label the router's private IP as "Internal IP"?

#

Or just private?

#

I wan't my label's to make sense you know?

clear igloo Mar 23, 2019, 7:20 PM

#

If it were me I would just call it To Firewall

thick minnow Mar 23, 2019, 7:32 PM

#

???

#

It's the routers private IP for the /24 subnet?

clear igloo Mar 23, 2019, 7:32 PM

#

Oh, the IP facing the wired network?

thick minnow Mar 23, 2019, 7:33 PM

#

Yes

clear igloo Mar 23, 2019, 7:33 PM

#

Then Internal IP makes sense

thick minnow Mar 23, 2019, 7:33 PM

#

ok

#

Updated IP's

📎 unknown.png

#

Thoughts?

clear igloo Mar 23, 2019, 7:34 PM

#

That works

unreal wedge Mar 23, 2019, 7:34 PM

#

So double NAT then.

thick minnow Mar 23, 2019, 7:34 PM

#

Ok, I think I can figure out the rest.

unreal wedge Mar 23, 2019, 7:35 PM

#

Also, you're not allowed to use 1.0.0.0/8 LUL

thick minnow Mar 23, 2019, 7:35 PM

#

I'm not?

clear igloo Mar 23, 2019, 7:35 PM

#

In a homework assignment you're allowed to use whatever you want

waxen scroll Mar 23, 2019, 7:35 PM

#

yeah dooley COME AT ME

unreal wedge Mar 23, 2019, 7:36 PM

#

🚔 BUCKLE UP @waxen scroll

thick minnow Mar 23, 2019, 7:36 PM

#

True, the homework instructions did not specify what IP or subnet's I should be using.

waxen scroll Mar 23, 2019, 7:36 PM

#

ciscos ASA examples tell you to use 1.1.1.1 for ASA peer links

unreal wedge Mar 23, 2019, 7:36 PM

#

🏃 💨 🚓 💨 💨

clear igloo Mar 23, 2019, 7:36 PM

#

The internet police are here, run @waxen scroll

#

😛

unreal wedge Mar 23, 2019, 7:37 PM

#

@waxen scroll Cisco's squatting on Cloudflare then.

waxen scroll Mar 23, 2019, 7:37 PM

#

cisco was there first

thick minnow Mar 23, 2019, 7:40 PM

#

So do I need to change anything or is what I have ok? Look, honestly if it makes sense and it would work in a theoretical network than that is good enough for me.

I just want to finish this stupid project assignment and submit it.

clear igloo Mar 23, 2019, 7:41 PM

#

Yah, it works 😃

thick minnow Mar 23, 2019, 7:41 PM

#

K done, I’ll handle the addressing for for rest of the components and and then I’ll write up a report and send it in.

#

Thanks for the help guys.

clear igloo Mar 23, 2019, 7:42 PM

#

Let us know how many A+ marks you get 😛

thick minnow Mar 23, 2019, 7:43 PM

#

I doubt I’ll get an A+, hopefully a B+ or B- though.

#

The real challenge will be explaining my network logic in the report.

#

lol

#

At this point I just want to submit it and get it over with.

waxen scroll Mar 23, 2019, 7:53 PM

#

if you submitted my diagram it would have been A+

#

Alpha Plus

#

alpha AF

thick minnow Mar 23, 2019, 9:10 PM

#

The one with Government connected networks and crap?

#

lol

#

No, it would probably have a reverse effect, my professor would probably get salty and have ME teach the rest of class.

#

lmao

waxen scroll Mar 23, 2019, 9:23 PM

#

https://www.reddit.com/r/ThatPeelingFeeling/comments/b4m7dg/some_more_datacenter_peeling_we_missed_originally/

r/ThatPeelingFeeling - Some more datacenter peeling we missed orig...

53 votes and 0 comments so far on Reddit

covert ibex Mar 23, 2019, 9:23 PM

#

@waxen scroll
And the bonuses of running a hassio are....

thick minnow Mar 23, 2019, 10:35 PM

#

Does my completed diagram make sense? @waxen scroll

📎 unknown.png

little schooner Mar 23, 2019, 10:56 PM

#

@thick minnow looks great

thick minnow Mar 23, 2019, 10:56 PM

#

Ok good, working on my Project Desc now.

fresh copper Mar 23, 2019, 11:28 PM

#

@thick minnow That diagram looks good to me

thick minnow Mar 24, 2019, 12:02 AM

#

Thank you.

#

I'll review it one final time tomorrow before I submit it.

hardy kestrel Mar 24, 2019, 7:33 AM

#

Hi, I'm trying to find a good but cheap Router or Access Point. Just to replace the ISP provided Fiber/Router/Access Point because it's vulnerable to get hacked.

hexed vault Mar 24, 2019, 9:16 AM

#

@hardy kestrel What's the budget and what exactly do you need?

hardy kestrel Mar 24, 2019, 10:35 AM

#

Under $100 (Good brand)

#

An Access Point

#

Our Router/Fiber Modem...thing/Access Point is vulnerable to get hacked (by using it's name and decode the SSID or something)

sturdy mirage Mar 24, 2019, 11:48 AM

#

Ubiquiti edgerouter x

pseudo blade Mar 24, 2019, 12:32 PM

#

@hardy kestrel https://mikrotik.com/product/hap_ac2 look good?

MikroTik

MikroTik is a Latvian company which was founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for Internet connectivity in most of the countries around the world.

#

There's also this - Same chipset and price, but blends in and actually mounts on a wall or roof.

#

https://mikrotik.com/product/cap_ac

MikroTik

MikroTik is a Latvian company which was founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for Internet connectivity in most of the countries around the world.

amber owl Mar 24, 2019, 12:40 PM

#

hi guys! looking for server advice. is this the right channel or is there a better one?

pseudo blade Mar 24, 2019, 12:41 PM

#

Generally it'd go in #public-chat or #tech-support, depending on the nature of the question.

#

That said, we deal with servers too.

sturdy mirage Mar 24, 2019, 12:45 PM

#

i might be able to answer you riddles too

amber owl Mar 24, 2019, 12:49 PM

#

i wanted to hear your opinion on intel vs amd in the server space. my company is looking at purchasing new servers which have to support a bunch of virtual machines. we are looking at an offer of two hp proliant dl360 gen 9 servers with two intel xeon scalable 8core cpus at a price point of about 6 or 7k€. i had a look at the amd version of the server and the price for the base model was 1.6k with 32G ram and 24 cores whereas the price of the intel base model with 12C and 32G ram was already 3.2k€. the other features where more or less the same as far as i could see. this looks to good to be true tbh and i wanted to ask if someone has experience with epyc servers and how they compare to intel

#

btw i m talkingn about the HPE ProLiant DL360 Gen10 5118 vs the HPE ProLiant DL325 Gen10 7401P both single processor units. the offer we received was 2x8C

pseudo blade Mar 24, 2019, 12:52 PM

#

Ah. You said Gen 9 originally.

amber owl Mar 24, 2019, 12:52 PM

#

yeah the offer we got was a gen9

#

i was comparing the servers on hpes webstore

sturdy mirage Mar 24, 2019, 12:53 PM

#

gen 9 is already selling on ebay for cheap

amber owl Mar 24, 2019, 12:54 PM

#

ok good call looks like they offered us an older variant to save cost on our side

#

the offer we got was far from the base model btw

sturdy mirage Mar 24, 2019, 12:54 PM

#

these days, smaller companies like gigabyte are making such crazy things for appealing prices, especially with amd ...

amber owl Mar 24, 2019, 12:55 PM

#

i wanted to compare the price of the intel and the amd variant. i suppose the extras on both will cost roughly the same

#

(we are kind of sponsored by hp. dunno if they would give us the servers for free but worth a try. thanks for the tip though)

pseudo blade Mar 24, 2019, 12:57 PM

#

What kind of work are the VMs doing?

amber owl Mar 24, 2019, 12:59 PM

#

they have to handle the infrastructure of the building. no big number crunching intended. we have a windows server for our cctv system, one for our ad connect. a few linux machines for domain controllers, internal gitlab, dhcp server, dns server and so on. we are also intending to introduce a smb share for our members later on. i was thinking of expanding the servers with a fiberchannel enclosure when that time comes

pseudo blade Mar 24, 2019, 1:01 PM

#

What's the limitations on your current hypervisors, if present?

#

Is CPU presently a concern?

sturdy mirage Mar 24, 2019, 1:01 PM

#

so maybe have a dual socket version for redundancy ?

pseudo blade Mar 24, 2019, 1:01 PM

#

I don't think using a modern AMD processor would negatively impact your workload, based on your descriptions.

amber owl Mar 24, 2019, 1:02 PM

#

we are using esxi. by the time we buy the servers we will most probably buy the enterprise version. we are currently running on free

pseudo blade Mar 24, 2019, 1:02 PM

#

Dual sockets don't offer redundancy in this scenario.

amber owl Mar 24, 2019, 1:03 PM

#

the test system we are currently using is an old gen7 and it doesent break a sweat. however the system is not yet under any considerable load

pseudo blade Mar 24, 2019, 1:03 PM

#

How many cameras, approx. users?

amber owl Mar 24, 2019, 1:06 PM

#

cameras: about 25-50 (not my department)
users: depends. we think about transfering our identity store from auth0 to ad because of serveral sso reasons. at that time we would have to look at improving our hosting method for that service too but that lies in the future. and i have someone on hand who is experienced with that kind of stuff

#

locally about 25-300 depends on the day. the ad is also used for wpa-e and 802.1X auth

#

the cisco ise is btw also a vm on there

sturdy mirage Mar 24, 2019, 1:07 PM

#

tbh i've no experience with esxi on epyc, i'm not aware of any flaws or other driver issues with these processors :/

pseudo blade Mar 24, 2019, 1:08 PM

#

Assuming all other elements are identical bar price and processor, I can't see a reason not to go for the AMD system. Just make sure you've got enough IO for your cameras and users.

amber owl Mar 24, 2019, 1:09 PM

#

i want to connect the servers with at least 20G to our network which is probably more than enough ^^

pseudo blade Mar 24, 2019, 1:10 PM

#

Is your plan to split the work between the two servers or for redundancy?

sturdy mirage Mar 24, 2019, 1:10 PM

#

that's what i wanted to ask :/

amber owl Mar 24, 2019, 1:10 PM

#

yes it is

pseudo blade Mar 24, 2019, 1:10 PM

#

Sorry, which?

amber owl Mar 24, 2019, 1:11 PM

#

yep i'm splitting the workload on two servers

#

and each one gets 20G

pseudo blade Mar 24, 2019, 1:11 PM

#

Because if the savings allow for an additional server for failover that might be wise, based on how much stuff's going on.

sturdy mirage Mar 24, 2019, 1:12 PM

#

if this for a whole building, you cant imagine everyone being forced to stop what they were doing ...

amber owl Mar 24, 2019, 1:12 PM

#

yeah i want at least two identical servers. if the savings allow for a third that would be nice but i srsly doubt that

pseudo blade Mar 24, 2019, 1:13 PM

#

Absolutely. Imagine that one of the servers goes up in flames a month after deployment.

#

e.g If an app on one relied on a DB on the other, you've lost the capabilities of both.

amber owl Mar 24, 2019, 1:13 PM

#

the initial offer had two servers in it and i would never go for just one

#

that would be srsly irresponsible

pseudo blade Mar 24, 2019, 1:14 PM

#

I'm suggesting that you plan around failure and maintain capacity to tolerate it.

#

It sounds like these servers will basically run your business.

amber owl Mar 24, 2019, 1:15 PM

#

definitely. as said i would love tripple redundancy but i doubt i would get the budget for that. we have however a 1G connection to the nearest hosting center which i will try to use as emergency solution

pseudo blade Mar 24, 2019, 1:16 PM

#

Oh - And budget in backups and backup testing if they aren't in there already.

amber owl Mar 24, 2019, 1:17 PM

#

yep they basicly do. our employees use onedrive (dont ask) which would work without the servers but as soon as we migrate the dhcp onto there we are basically screwed if things go south

#

i will. any suggestions on good backup services?

pseudo blade Mar 24, 2019, 1:17 PM

#

Nah. You can run a DHCP server for a network of that size on basically anything.

#

good backup services How much data?

amber owl Mar 24, 2019, 1:20 PM

#

yeah but the wifi auth is dependent on the cisco ise wich runs on the servers and the active directory which also runs on the servers

#

we would have to reactivate the internal dhcp of the cisco appliances and revert back to a preshared key environment and deactivate 802.1X auth

#

also as soon as we integrate cisco dna fabric i dont want to think about what we would have to do to get networking back without the servers

pseudo blade Mar 24, 2019, 1:22 PM

#

Not desirable, but that's why you plan around ensuring that it shouldn't ever be necessary.

amber owl Mar 24, 2019, 1:23 PM

#

yep

pseudo blade Mar 24, 2019, 1:23 PM

#

So how much data did you need to back up?

amber owl Mar 24, 2019, 1:24 PM

#

how much data: at the moment about 500GB but that will increase drastically as soon as we offer cloud access for our members

pseudo blade Mar 24, 2019, 1:24 PM

#

How much are you planning for?

amber owl Mar 24, 2019, 1:25 PM

#

10-15GB for each member wich would mean 3TB at the moment. I dont know how much we would be talking about when we actually launch that service. 50TB maybe

pseudo blade Mar 24, 2019, 1:25 PM

#

Reckon much of it would be duplicated between different users?

#

We'll assume not and that 3TB would be the amount you'd need to save.

#

Thinking about your users, would much of it change after uploading?

#

If you backed up daily would more than 100GB change for all users?

amber owl Mar 24, 2019, 1:27 PM

#

probably

#

i dont think so

#

i really doubt that someone would be able to change more then 100GB of cad files in one day

#

that would be srsly impressive

#

also we are partnered with autodesk which means much of our cad files lie in the autodesk clould anyway

sturdy mirage Mar 24, 2019, 1:30 PM

#

but does your entire pool of users change more than 100gb /day ?

pseudo blade Mar 24, 2019, 1:30 PM

#

^

#

How far back do you need backups to go?

#

And how fast do you need everything to be recovered?

amber owl Mar 24, 2019, 1:32 PM

#

probably not. if we observe a severe increase in traffic after lauching the service we will adjust but at the moment we are not looking at anything serverly demanding

#

what are the best practices in your experience?

pseudo blade Mar 24, 2019, 1:33 PM

#

It's really dependent on the company's needs and the value of your data.

#

It's possible you'd need to discuss that with others in your company to come to a decision.

sturdy mirage Mar 24, 2019, 1:34 PM

#

in france, legal stuff must be kept 5years, but production data can be erased every week and replaced with newer data but if you are treating patented tech, thi shoud last as long as the patent is available ...

amber owl Mar 24, 2019, 1:35 PM

#

as rapid as our internal data changes i think two to three months should be enough. if the user data takes a few hours to recover it wouldnt be a big deal, the company data should be back in two to three hours max

sturdy mirage Mar 24, 2019, 1:35 PM

#

as meagus said, it maybe a wise decision to ask your boss for that kind of stuff

amber owl Mar 24, 2019, 1:35 PM

#

i definitely will

pseudo blade Mar 24, 2019, 1:36 PM

#

Moving 3TB of data from the internet on a gigabit connection would take nearly 7 hours.

#

And that's assuming you have the connection basically to yourself.

amber owl Mar 24, 2019, 1:38 PM

#

the user data would be cohosted in a data center so if our servers cannot handle something or their data is not the newest version the other ones take over. at least in theory. as said we have more current problems

pseudo blade Mar 24, 2019, 1:38 PM

#

So you have planned failover to that DC.

amber owl Mar 24, 2019, 1:39 PM

#

so thats something i want the servers to be ready for but not something i will plan every detail of yet

#

yes i have. not yet but by the time we switch to it as primary id source

#

btw i have to go in a few mins

pseudo blade Mar 24, 2019, 1:40 PM

#

I would encourage getting your disaster recovery stuff planned while you get your capacity planning sorted.

#

They kinda fit into each other and there's nothing like leaving DR until it's too late.

amber owl Mar 24, 2019, 1:42 PM

#

yep i know. look like it would be a good idea to make a roadmap for the next few months to also get the data hosting sorted to be able to fit that into our recovery plan

pseudo blade Mar 24, 2019, 1:42 PM

#

I also have to leave, but please keep that in mind.

amber owl Mar 24, 2019, 1:43 PM

#

i will. backup strategy is one of my biggest points at the moment anyway

#

by and thx for the help

little schooner Mar 24, 2019, 4:51 PM

#

backup strategy is so costly wish it was more affordable

#

I can't just spend double the money on exact systems

crimson trench Mar 24, 2019, 5:40 PM

#

I want my servers to have an 10.0.0.1 IP, but still want to be able to access them via my normal network, is tis possible? 😃

fresh copper Mar 24, 2019, 5:42 PM

#

Probably though I am slightly confused by what you mean. It would be doable with some static routes

crimson trench Mar 24, 2019, 5:43 PM

#

Well I have a server, but I would like to ave server IP's to be in the /8 subnet, not the /24 one of the default network

fresh copper Mar 24, 2019, 5:45 PM

#

Yea, that's possible. Just need to add an interface route to that /8 on your router and then an interface route to the /24 on the server. Not all routers support interface routes if they are consumer ones so you might have to also assign the server an ip from the /24 and then static route the /8 to it.

crimson trench Mar 24, 2019, 5:46 PM

#

How should I do that? lol

#

Like, I currently run proxmox

#

and on proxmox I have a container

#

which I'd like to have in the /8

#

but when I set a static ip (10.0.0.1) then I don't have internet access

fresh copper Mar 24, 2019, 5:48 PM

#

It's kind of hard to describe how to do it because it's different depending on the exact setup. Is there any reason why you want them in that other subnet rather than the existing one

crimson trench Mar 24, 2019, 5:49 PM

#

I think it's cleaner to me, to have servers with a different subnet and IP-range, so normal devices are 192.168.x.x, and servers are then 10.0.0.x

#

Now I solve this by setting up static IP's for the servers (the MAIN servers) with 192.168.x.2xx and the CT's with 192.168.x.1xx

#

But that's kinda meh

fresh copper Mar 24, 2019, 5:56 PM

#

It is possible but requires a bit of routing. I can't exactly explain what to do because most consumer routers are very different and may not even be able to do this. You basically just have to add an interface route on the router for the /8 and an interface route for the /24 on the server. On Linux it is easy to do sudo ip route add 192.168.0.0/24 dev eth0 or whatever the prefix and interface are

little schooner Mar 24, 2019, 9:13 PM

#

Does anyone know what could cause File Explorer to hang if it's unable to reach a file server's mapped drive? Is it normal behavior to wait like 15-20 seconds (when fileserver is down) before file explorer begins to be usable again?

waxen scroll Mar 24, 2019, 9:32 PM

#

if you're actively trying to hit the down mapped drive, ive seen it happen

little schooner Mar 24, 2019, 10:28 PM

#

@waxen scroll is there no clear cause to why it happens in real environment and not the VM one? in the VM environment, it immediately returns control to me saying the share is unavailable

#

I can't believe I still haven't solved this issue yet it's been more than a year and a half

waxen scroll Mar 24, 2019, 10:30 PM

#

dunno. wireshark it. i assume its TCP connection delay doing it. so why is the VM giving up in seconds when it should be waiting like 30

#

believe its 3 TCP failures before it gives up

#

maybe the VM is getting some kind of signal

#

like nothing exists on this port, or this IP

little schooner Mar 24, 2019, 10:36 PM

#

I'll have to do that because the VM does the behavior I want

covert ibex Mar 25, 2019, 12:18 AM

#

@thick minnow
Double check the second router has DHCP and DNS blank.
Other option is to set the PS4 as a DMZ on the modem/router if it has the ability to.

unreal wedge Mar 25, 2019, 12:46 AM

#

https://github.com/jankais3r/DNoiSe

GitHub

jankais3r/DNoiSe

DNS noise generator that looks at your network activity and blends in. Requires pi-hole. - jankais3r/DNoiSe

little schooner Mar 25, 2019, 1:28 AM

#

@unreal wedge hey that's pretty cool

waxen scroll Mar 25, 2019, 1:28 AM

#

well hes 1 for 2

#

lol

unreal wedge Mar 25, 2019, 1:30 AM

#

@waxen scroll you need to lookup Comcast.

#

Fucking US ISPs are legally allowed to sell your data.

little schooner Mar 25, 2019, 1:31 AM

#

@thick minnow did you try reboot both devices after making the changes?

#

make sure they have latest firmware

unreal wedge Mar 25, 2019, 1:31 AM

#

Also, try evading the filter again.

#

banHammer

waxen scroll Mar 25, 2019, 1:32 AM

#

let me ask you this then. what are you accomplishing? at the end of the day you're getting served ads, it can either be completely irrelevant or it can be somewhat relevant. if you are trying to hide your activity, putting noise in it does no good, they still have the log

little schooner Mar 25, 2019, 1:32 AM

#

wait what

unreal wedge Mar 25, 2019, 1:32 AM

#

@waxen scroll that's what you think

waxen scroll Mar 25, 2019, 1:32 AM

#

its just a waste of bandwidth and resources

unreal wedge Mar 25, 2019, 1:32 AM

#

that's cute

waxen scroll Mar 25, 2019, 1:33 AM

#

that wasnt a filter evasion, i type it that way

#

not my fault the filter doesnt account for it

unreal wedge Mar 25, 2019, 1:33 AM

#

It's filter evasion.

waxen scroll Mar 25, 2019, 1:33 AM

#

its not.

little schooner Mar 25, 2019, 1:33 AM

#

@thick minnow I'm not sure if firewall rules are blocking certain outgoing ports too

unreal wedge Mar 25, 2019, 1:33 AM

#

Lemme grab momo.

little schooner Mar 25, 2019, 1:33 AM

#

I know some combo routers do that

#

even in bridge mode which is weird

#

I'm not sure what it could be since setting up PPPoE correctly would just make it work like it was

#

still one NAT

#

I suggest plugging eth cable into modem with a laptop

#

to see if you can discover and login to it

#

right. Might be some bridge mode trickery or something

#

what router did you get?

#

oh okay. yeah that wouldn't be blocking outgoing ports

#

hmm hmmm....

#

ps4 doesn't have static IP and info right?

#

can the ps4 at least ping an ip

#

like 8.8.8.8

#

make sure the details are correct. maybe try another dns server too, like 1.1.1.1

covert ibex Mar 25, 2019, 2:32 AM

#

@unreal wedge
Typeerror: "List indices must be integers, not str"

unreal wedge Mar 25, 2019, 2:36 AM

#

@covert ibex what

#

You're probably running under the wrong version of Python.

covert ibex Mar 25, 2019, 2:39 AM

#

Dies apparently at the first "for a in parsed_all_queries"
Put in an issue on the page.
Might as well talk with the dev.

unreal wedge Mar 25, 2019, 3:17 AM

#

cryShrug

waxen scroll Mar 25, 2019, 12:48 PM

#

is dooley the dev?

covert ibex Mar 25, 2019, 12:57 PM

#

Don't think so.
Sorted it out with the dev.

waxen scroll Mar 25, 2019, 6:12 PM

#

Dang Dev Dooley

thick minnow Mar 25, 2019, 9:40 PM

#

You talking mad shit for someone within Dooley Distance.

#

kek.

#

Pogey

#

So in networking lab today, I had to group up with a few people and we had to Telnet into and see the running configuration of an older Cisco Layer 3 switch.

#

In the lab room there were four switches that were connected together, and the task was to basically have the switches to be able to communicate with each other.

#

Mind you we also had to setup a VLAN and route it so it could to communicate to the other switches that had their own VLAN’s.

#

We didn’t get to finish lab project entirely yet today, however next week hopefully the class as a whole will finish it.

waxen scroll Mar 25, 2019, 10:17 PM

#

wat

#

you got this bro

#

thats a 2min job

#

i hated group labs

#

lol

#

when my part was done i cant just leave

#

everyone else got to finish

clear igloo Mar 25, 2019, 10:25 PM

#

@waxen scroll You're supposed to help the others finish 😛

waxen scroll Mar 25, 2019, 10:25 PM

#

nope

#

thats why groups were formed

#

my group finishes in like 5min, the rest have to finish theirs

#

does no good if they arent left to figure it out

#

part of working IT is to learn how to think

clear igloo Mar 25, 2019, 10:26 PM

#

Agreed. You gotta stress them brain cells sometimes 😃

waxen scroll Mar 25, 2019, 10:27 PM

#

you pay me $100k cause i can go to google and get the answer in seconds, but others get paid $40k cause it takes them all day to google

clear igloo Mar 25, 2019, 10:27 PM

#

They also pay you because you sound confident when you say it

waxen scroll Mar 25, 2019, 10:28 PM

#

i know a guy, and it still pisses me off today, who can google a topic for 10min and then talk in person like hes known for years

#

you'd think he'd been deploying that config for years

clear igloo Mar 25, 2019, 10:29 PM

#

Yah, I've met a couple people like that. They absorb everything so quickly

waxen scroll Mar 25, 2019, 10:30 PM

#

and when i start getting stumped, you know its fucked

#

even with google

#

thanks lurick and TAC

clear igloo Mar 25, 2019, 10:30 PM

#

XD

little schooner Mar 25, 2019, 10:34 PM

#

I haven't really worked in the field for $ yet, just interned or volunteered, so I don't know what to expect.

waxen scroll Mar 25, 2019, 10:47 PM

#

It's a mixed bag

#

I highly suggest global company

#

Over 30,000 users

#

I'm not about small medium business

#

Eek

waxen scroll Mar 25, 2019, 11:07 PM

#

linusPerfect

#

at a small biz you'll be the network admin alright

#

90% AD

#

😄

#

@clear igloo thots?

waxen scroll Mar 26, 2019, 12:18 AM

#

@little schooner theres many tiers of network person at a large company

#

strive to be #1 ok? 😍

#

Network Tech 1 > Network Tech 2 > Network Tech 3 > Network Implementer 1 > Network Implementer 2 > Network Implementer 3 > Network Engineer 1 > Network Engineer 2 > Network Engineer 3 > Network Architect

#

2's can be senior but 3's are senior

#

for me i went Tech2>Tech3>Eng1>Eng2 in 5 years

#

working on architect

#

i do get to make some architect decisions but not everything

#

then within those ranks you have silos

#

For engineering: 10 people do route/switch for remote sites, 5 people do route/switch for datacenter, 10 people do wifi, 2-3 people do load balancers, 20 people do IT security of some sort

#

sometimes its even further siloed in the silo

#

of the 10 for remote site, 3 do WAN only and 7 do LAN only

#

your first reaction is "thats LAME, i want to touch everything and get experience!"

#

hold on there tiger, no you dont

#

its a disaster when you work for a company just small enough where the team is large but you wear all network hats

#

complete nightmare

#

its better to fall into a silo you enjoy and can focus on than it is to do it 30% of the time and have a bunch of crap to admin and fix that you dont care for

#

i prefer big picture stuff... WAN, datacenter, whatever

#

i hate small picture, like the LAN at a small local site

covert ibex Mar 26, 2019, 12:37 AM

#

@waxen scroll
I'd say I'm tech 1, but there isn't anybody else here that knows what a switch is, so your call. :P

waxen scroll Mar 26, 2019, 12:38 AM

#

so those are mostly pay bands

#

the title is network tech

#

im just calling out they usually do 3 pay bands

covert ibex Mar 26, 2019, 12:38 AM

#

Ok... 75k aud..
Or would you rather USD for comparison?

waxen scroll Mar 26, 2019, 12:39 AM

#

75 is likely a NT3

#

nm its a 2

#

i did the conversion

#

lol

covert ibex Mar 26, 2019, 12:40 AM

#

Well, there you go.
Shame I'm qualified as a fitter and turner. :P

waxen scroll Mar 26, 2019, 12:40 AM

#

network tech is above help desk but they do the break/fix from escalated tickets

covert ibex Mar 26, 2019, 12:41 AM

#

I've never had to deal with that side of things.

#

The ticket side anyway.

waxen scroll Mar 26, 2019, 12:41 AM

#

grats

#

i hate tickets xD

covert ibex Mar 26, 2019, 12:41 AM

#

I've heard most people do.

waxen scroll Mar 26, 2019, 12:41 AM

#

luckily i havent had to do tickets in a while

#

if you make it to net engineer its no tickets at all unless a major outage

covert ibex Mar 26, 2019, 12:43 AM

#

I was thinking of trying to get a job at a major telecom as a onsite tech..

waxen scroll Mar 26, 2019, 12:45 AM

#

i hear you pretty much have to

#

they make you start at the bottom

#

@thick minnow grade = ?

unreal wedge Mar 26, 2019, 5:03 AM

#

@waxen scroll gonna be a great day when the bot drops that tactical nuke.

thick minnow Mar 26, 2019, 5:49 AM

#

i am a tier 1 and tier 2 tech

thick minnow Mar 26, 2019, 11:42 AM

#

Hey

#

I have a question

#

Im just a teen experimenting with shit

#

And i want to get into WISP (wireless internet service provider)

#

And I was wondering: how do you limit mbps to a client?

zenith ridge Mar 26, 2019, 11:46 AM

#

the question I would have first, how do you get a connection to the internet

thick minnow Mar 26, 2019, 11:47 AM

#

from a ISP?

#

Im not selling internet so it is fine with my isp

#

the objective is to only learn

#

so ye

zenith ridge Mar 26, 2019, 11:49 AM

#

you can't resell a normal ISP connection

thick minnow Mar 26, 2019, 11:49 AM

#

im not selling anything

zenith ridge Mar 26, 2019, 11:49 AM

#

You can't share a normal ISP connection

thick minnow Mar 26, 2019, 11:49 AM

#

wat

#

(im really dumb at this topic so please dont judge me XD)

zenith ridge Mar 26, 2019, 11:51 AM

#

Well if you just want to learn, unifi can actually limit per user bandwith, and most likely will be the cheapest option with a decent amount of features

thick minnow Mar 26, 2019, 11:51 AM

#

oOooO thanks

zenith ridge Mar 26, 2019, 11:52 AM

#

Mikrotik also has some cheap options, and can be more powerfull I think, but I haven't used that one yet, though it looks interesting

thick minnow Mar 26, 2019, 11:52 AM

#

ill go with Ubiquiti since im a bit more used to their interface

#

Also do you know how to create a vlan?

zenith ridge Mar 26, 2019, 11:53 AM

#

https://help.ubnt.com/hc/en-us/articles/204911354-UniFi-How-to-Set-Traffic-Bandwidth-Limits

Ubiquiti Networks Support and Help Center

UniFi - How to Set Traffic Bandwidth Limits

Overview

Readers will learn how to set traffic-shaping parameters in order to manage bandwidth on UniFi networks. Bandwidth management is important to maintaining a functional network while avoidi...

thick minnow Mar 26, 2019, 11:53 AM

#

Thanka

#

*thanks

zenith ridge Mar 26, 2019, 11:53 AM

#

vlans aren't really hard to set up with unifi, just google it, it should speak for itself

thick minnow Mar 26, 2019, 11:54 AM

#

with TrendNet

zenith ridge Mar 26, 2019, 11:54 AM

#

and just play around with it, you can always reset the device if you lock yourself out

thick minnow Mar 26, 2019, 11:54 AM

#

Thanks @zenith ridge :))\

zenith ridge Mar 26, 2019, 11:56 AM

#

No problem 😉

pseudo blade Mar 26, 2019, 12:03 PM

#

Mikrotiks are god-tier for WISP stuff.

thick minnow Mar 26, 2019, 3:50 PM

#

@waxen scroll Grade for what?

waxen scroll Mar 26, 2019, 3:55 PM

#

diagram

thick minnow Mar 26, 2019, 3:57 PM

#

As of now, it has not been graded yet by my professor.

However in class yesterday, quite a few of the other students didn’t even complete or start the project yet.

I was the only one stupid enough to worry about finishing it ahead of time.

#

I’m just glad I am done with it, because now I have to read the next chapter in the course about WANs.

little schooner Mar 26, 2019, 4:36 PM

#

does it make sense to have a ethernet uplink for all these other connections?

#

📎 20190326_123520.jpg

#

they have Sfp to ethernet

waxen scroll Mar 26, 2019, 4:41 PM

#

Why wouldn't you have an uplink?

#

@clear igloo why

little schooner Mar 26, 2019, 5:04 PM

#

@waxen scroll well that single cable can easily be bottlenecked if they were all downloading from a file server or something

#

but I guess this lab has no such thing so it's a non issue that it's just one cable doing the uplink

covert ibex Mar 26, 2019, 8:22 PM

#

Needs... More... Zip ties..

spice ledge Mar 26, 2019, 8:55 PM

#

Patch panel would help a lot as well

covert ibex Mar 26, 2019, 9:08 PM

#

Or colored single cable management.

#

Pick a color, buy a box of them. Good for knowing "reds go to port X, greens to go port y"

📎 JPEG_20190327_080906.jpg

waxen scroll Mar 26, 2019, 9:16 PM

#

you know whats better than that?

#

zip tie labels

#

📎 214YXYYGD4L.png

#

one on each end

little schooner Mar 26, 2019, 9:43 PM

#

this university has a lot of cable organization to do then

#

also it doesn't make sense how they have this switch in the cabinet that anyone can simply unplug

#

the cabinet is unlocked for some reason

#

so defeating the purpose of securing it inside

#

that one uplink cable, if I were to remove it, would take out two labs worth of computers. each lab has about 14 or so PCs, based on the hostname (i guess)

#

rip Mac lab

#

I imagine the other room has a cabinet but I haven't been there. I would say this building is very old because the newer ones have it completely hidden

thick minnow Mar 26, 2019, 11:21 PM

#

If this University can afford 14 Mac computers for a single computer lab, I think they can afford to have the IT guy do some cable management and implement better network redundancy.

#

IMO.

waxen scroll Mar 26, 2019, 11:32 PM

#

nahhh

#

universitys usually blow all their budget on macs then go "oops" later

#

i worked for a university once, network engineering

#

never again

#

the two industries i dont wanna work in again are education, hosting/datacenter

#

at some point ill work for a trading firm and im sure that will get added to the list after a few months

#

😛

waxen scroll Mar 27, 2019, 12:02 AM

#

sounds like xeon wants to work at university

little schooner Mar 27, 2019, 12:06 AM

#

I think I can take a picture of the Mac lab. omg you should the library though. They have dedicated Mac only sections and windows sections

#

like I've never seen so many expensive macs in my life in one place. The all in one units

#

I think it's just this building though because the updated ones have them all tidy and secured. Building is from 1918 I believe

waxen scroll Mar 27, 2019, 12:07 AM

#

dont work at university 😍

little schooner Mar 27, 2019, 12:07 AM

#

heh

#

now if we were talking about college, it was the typical Dell optiplex 780s

#

Only the graphics department got macs

#

uni is different with the $

waxen scroll Mar 27, 2019, 12:08 AM

#

theres no reason to have macs for graphics or video

#

you can make a small argument for audio, but not much

#

stupid that they keep buying them

little schooner Mar 27, 2019, 12:09 AM

#

They used this thunderbolt to fiber dongle for the network connections.

#

probably doing big file editing over network

#

I'm pretty sure it was 10gbps

#

@waxen scroll This was the parts list for the new workstations we're trying to get for a new networking security lab at a college I volunteer at

#

📎 Screenshot_20190326-201203_Adobe_Acrobat.jpg

waxen scroll Mar 27, 2019, 12:13 AM

#

waaaaayyy back in the day all of the apps were mac exclusive. they arent anymore.

#

those specs are respectable for lab computers

little schooner Mar 27, 2019, 12:14 AM

#

I'm hoping they approve it

#

we're still waiting for answer

#

it came to be like... $1370

#

There are discounts it will drop more but we aren't aware of those yet

waxen scroll Mar 27, 2019, 12:17 AM

#

you should be aware of them

#

thats what the vendor does before they send the quote

thick minnow Mar 27, 2019, 12:25 AM

#

I used an iMac a few times in my life before. I absolutely hated the Magic Mouse.

#

It was like legitimately a pain to use.

#

My hands would get cramps.

#

Just wait until those iMac systems break down, have fun sending them back to apple for repairs. Lol

little schooner Mar 27, 2019, 1:08 AM

#

@waxen scroll hmm I guess because I used the website configurator, it shows only the regular price for everyone. My professor called Dell and then talked with them about the order (maybe mentioning that our school uses Dell as a vendor for buying computer equipment, etc). That part of the discussion I guess business handles

#

my professor did submit the order to the dept responsible for buying it. But he said he gave up money management because he did not want legal trouble

#

otherwise, the money were using, most of it is grant money he netted for the school

#

I'm just a volunteer there lol

hardy lantern Mar 27, 2019, 8:22 AM

#

When i have fiber going to my router and that has a 1 Gbit connection. Can ethernet push that speed?
(i have the router in a different room and i want to have an ethernet cable going from that room to my room and connect to my pc. Just wondering if that cable will be able to push 1Gbit)

abstract drift Mar 27, 2019, 8:29 AM

#

You mean you have gigabit internet? Yes, gigabit ethernet can handle the full traffic of gigabit internet.

hardy lantern Mar 27, 2019, 8:31 AM

#

Yes

#

yeey thanks a bunch. yeah i meant gigabit

slow belfry Mar 27, 2019, 10:42 AM

#

As long as it's Cate 5E or a higher standard.

#

Don't confuse it with Cat 5, you will only be able to handle 100 mbit/s

hardy lantern Mar 27, 2019, 10:56 AM

#

The electrician who will install it said something about cathegory 6 ethernet cable

little schooner Mar 27, 2019, 1:56 PM

#

@hardy lantern Cat 5E can handle 1gbps. CAT6 handles 10gbps over short distance. CAT6A handles 10gbps over the traditional length limit of ethernet cable.

#

which is about 100meters

tawny seal Mar 27, 2019, 1:56 PM

#

then there is also cat7

hardy lantern Mar 27, 2019, 2:06 PM

#

🤷 ill let my electrician do the job ahha im too stupid for all this

tawny seal Mar 27, 2019, 2:35 PM

#

fiber is just another way of internet its good for incredible long distances

#

but most people just use rj45 ethernet

#

fiber is really only used in data centers and some businesses

#

I use it for my home lab

hallow nimbus Mar 27, 2019, 2:41 PM

#

Breaks in the the street box of his ISP and runs his own fiber line

tawny seal Mar 27, 2019, 2:48 PM

#

lmao

hardy lantern Mar 27, 2019, 3:10 PM

#

Yeah my electrician told me i shouldnt have fiber from my switch to my pc since my pc doesnt have an input for a fiber cable. And that the ethernet cable could push 1gig uup and down already

waxen scroll Mar 27, 2019, 3:49 PM

#

I tip my fedora to you good gentilesir

little schooner Mar 27, 2019, 3:58 PM

#

@hardy lantern I think he also forget to mention that fiber has very low latency compared to ethernet, but for home use, the benefit makes no sense for the extra cost.

hardy lantern Mar 27, 2019, 4:18 PM

#

latency means ping right? (but i already get 1-2ms)

little schooner Mar 27, 2019, 4:30 PM

#

@hardy lantern that low of ping is usually to your local network

#

ping is higher for farther targets

hardy lantern Mar 27, 2019, 4:31 PM

#

wdym?

little schooner Mar 27, 2019, 4:31 PM

#

fiber could make that low of a ping possible over longer distances

#

there is more overhead with ethernet that would increase latency times

#

light travels faster than electrical signals

fresh copper Mar 27, 2019, 4:33 PM

#

Ping is a tool for measuring latency, often built into games for testing latency to servers. Your ping to a close by server is very low, like the 1-2ms you see, but, regardless of what connection you have, it would probably be over 100ms to cross an ocean like America to Europe or the other direction.

little schooner Mar 27, 2019, 4:34 PM

#

one way a war could start would simply be to attack the underwater cables that connect the countries

#

but it would be pretty easy to know who did that

hardy lantern Mar 27, 2019, 4:35 PM

#

hasnt russia been accused multiple times to have their nuclear subs close to those cables?

spice ledge Mar 27, 2019, 4:48 PM

#

Over WI-FI, makes me happy

📎 image0.jpg

little schooner Mar 27, 2019, 5:03 PM

#

@spice ledge for some reason my devices could never transfer that fast

#

what device are you using?

#

perhaps it's because I'm not on the same vlan when I do my speed tests

chrome hound Mar 27, 2019, 5:03 PM

#

idk I run fiber in my house and the cost is not that bad to manage, and I get pretty good ms to speed test servers 50 miles away from me https://www.speedtest.net/result/d/4755b07c-306f-42f3-9f04-f7a3ee9b5853.png

little schooner Mar 27, 2019, 5:04 PM

#

omg yes that's the latency fiber benefits from

spice ledge Mar 27, 2019, 5:04 PM

#

iPhone 6s with a UBNT nano HD AP

little schooner Mar 27, 2019, 5:04 PM

#

yes yes yes

#

oh the Nano HD?

#

ahh mine are the uap ac

spice ledge Mar 27, 2019, 5:04 PM

#

Just a moment

little schooner Mar 27, 2019, 5:04 PM

#

the Nanos are much faster yeah

chrome hound Mar 27, 2019, 5:05 PM

#

I mean sure the 10gb switch was 8g but you don't need a 48 port switch, you can easly get away with a small mikrotik

spice ledge Mar 27, 2019, 5:05 PM

#

https://unifi-nanohd.ui.com/

little schooner Mar 27, 2019, 5:05 PM

#

@chrome hound I agree

chrome hound Mar 27, 2019, 5:05 PM

#

and lets be clear here I got the switch for free so my cost to entry is pretty awesome for 10gb to my desktop

spice ledge Mar 27, 2019, 5:06 PM

#

Ya my gear not 10g but it’s for my house, really don’t need 10g

chrome hound Mar 27, 2019, 5:06 PM

#

I used to say that lol

#

but man I will never go back tosub 10gb internet, I am not coming close to 10gb traffic, but I have to say not having any bottle necks on my side of the traffic is nice and I never have lag issues related to the kids netflix and what not

spice ledge Mar 27, 2019, 5:08 PM

#

Also I was doing a WI-FI test pear to pear in my networ

#

I never have lag issues either but I got the good cox ISP that actually works right

chrome hound Mar 27, 2019, 5:09 PM

#

I am fiber all the way to the peering points

spice ledge Mar 27, 2019, 5:09 PM

#

P.S. internet speed is only 100d 20u

#

but latency is still only “<1ms”

waxen scroll Mar 27, 2019, 6:46 PM

#

If Ethernet is a layer 2 concept, why does Xeon call copper "Ethernet" and fiber "fiber"?

#

🤔

little schooner Mar 27, 2019, 6:47 PM

#

I guess im used to seeing ethernet used a lot with copper xD

#

thats layer 1 difference I am aware

#

I have to admit though its been a while since I've read networking stuff since my certification studies

#

some of the things i cant remember

#

luckily I can still maintain it with the subset of gear i have at home

fresh copper Mar 27, 2019, 7:34 PM

#

Most fiber solutions still use Ethernet though some don’t

#

Ethernet is actually two thing, the Layer 1 standard, and the Layer 2 frame

#

Both the copper and fiber (and some other crazy stuff) are in the Layer 1 standard but you can use the Layer 2 frame type in other Layer 1s though not as common unless you count a tunnel like TEoGRE (GRETAP) as the Layer 1 which carries the Layer 2 Ethernet Frame

#

Correction: The Layer 2 frame is the Ethernet II frame. We don’t use Ethernet I anymore though they are somewhat compatible

modern forge Mar 27, 2019, 7:50 PM

#

I think this is supposed to go here, I copied my message in #public-chat:
Question, I was at the IT of my school and I was asking if they had space in their server room. They said it is unlikely I can place a server for a school project there because of 2 things:

Interference because of same services in same network
Their servers are in the same subnet and have sensitive data.

Is there a way that they could isolate my server from accessing other servers in the subnet but still be able to access the internet? My school uses cisco for networking and windows server for dhcp

#

@ me

carmine moss Mar 27, 2019, 7:53 PM

#

@modern forge ask if you can make a vlan in the subnet for your server?

modern forge Mar 27, 2019, 7:54 PM

#

I will need to ask the IT of my school tomorrow about that

#

Let me google

clear igloo Mar 27, 2019, 7:54 PM

#

@modern forge A simple VACL would do the trick to isolate a host from accessing other hosts but the fact that they make it sound like none of the servers are properly protected to begin with makes me worry =/

modern forge Mar 27, 2019, 7:54 PM

#

they do

waxen scroll Mar 27, 2019, 7:55 PM

#

Nerd.

modern forge Mar 27, 2019, 7:55 PM

#

Servers have own subnet, school pcs have own subnet, and all personal stuff like phones and laptops have own subnet

clear igloo Mar 27, 2019, 7:55 PM

#

I read it wrong which made it seem like they had sensitive and unprotected data on the servers, whoops 😃

modern forge Mar 27, 2019, 7:55 PM

#

But if I put my own server in the server room it will be in the same subnet as the other servers

clear igloo Mar 27, 2019, 7:56 PM

#

Why do you need it to be in their server room to begin with?

modern forge Mar 27, 2019, 7:56 PM

#

Bc I don't have really anywhere else to put a server

#

And there it'll be able to run 24/7

#

at my home not, bc my parents won't allow it

#

I will ask them tomorrow if they can do that (vlan/vacl)

#

Just wanted to know if it was possible
(Dooley, pls don't be mad if you see this)

clear igloo Mar 27, 2019, 7:58 PM

#

It's not as easy as just plug the server in and it's got internet and you can access it from the internet. Your server has to be properly secured and locked down, the network needs to block any traffic to/from that server from accessing anything else on the network, you need to prove that all your apps on the server are up to date and not vulnerable and they would have to punch a hole, or multiple holes in the firewall to allow access to a server from the internet and serve content on it which can be a huge no-no in just about any environment unless proper justification is given and access it maintained

#

All of that can be done but it takes time and proper management of everything to ensure it's all safe

modern forge Mar 27, 2019, 8:04 PM

#

Yeah, I understand. If I get permission of the IT I'll of course make sure if it's all safe. Like if it's on my home network I don't necessary care, but like at a school it's pretty important. And I know the IT of my school pretty well and the person I was talking to today also said if I need help I can ask them.

fresh copper Mar 27, 2019, 8:10 PM

#

It’s possible that if you just needed the services to be accessed from inside the school and not the internet that it could be put on the same VLAN/subnet as the client computers. Even without port forwarding, you could access the server through VPNs that can traverse NAT like ZeroTier

clear igloo Mar 27, 2019, 8:21 PM

#

Yah, if its a local need then that's easier to deal with access but if you need internet access then I would say you just need to be even more security conscious since if you mess up and leave a critical service vulnerable then things can go south fast. Not to say "OMG H4x0rz" but common services need to be locked down and secured at a minimum because there are bots out there scanning and if they find a nice open service they'll quickly try to attack it. There are caveats behind all that but just one more thing to keep in mind 😃

fresh copper Mar 27, 2019, 8:51 PM

#

Yea. If it was me, as someone who knows about networking, I would ask for just standard internet access, no need for a public IP or port forwarding, then I would access through my ZeroTier mesh, either by exposing ports on one of my VPSs or directly connecting from my phone/laptop.

spice ledge Mar 27, 2019, 9:41 PM

#

In the realm of networking anything is possible with the right equipment, like with my UniFi gear I can make every port on my switch have a different vlan very easily.

fresh copper Mar 28, 2019, 12:54 AM

#

Fiber Ethernet vs Copper Ethernet is very similar

#

But DOCSIS is really bad

#

Light works via the electromagnetic force and copper uses electricity which works via electric fields which work via the electromagnetic force. So the latency is all the quality of cable and protocol. Even GPON is slower than Ethernet but not as bad as DCOSIS or DSL. I have no idea what Xeon is talking about there.

little schooner Mar 28, 2019, 1:23 AM

#

@fresh copper I guess what I was trying to say is, instead of having to buy expensive sfp modules for a home network that is already using docsis and not FTTH internet, having an internal fiber network wouldn't reduce latency because of the isp connection

#

also local network latencies are already low as it is no more than 1 or 2ms for all local targets in a home

#

that was I was trying to get at. there would be no benefit because you need to further make additional changes at a higher cost vs. just buying copper ethernet copper that is basically universal in availability on all sorts of motherboards and devices

waxen scroll Mar 28, 2019, 1:28 AM

#

thats a fire hazard

#

remove that top bin at minimum

fresh copper Mar 28, 2019, 1:35 AM

#

There would be no benefit to having an internal fiber network even if it was FTTH

waxen scroll Mar 28, 2019, 1:49 AM

#

more like 0.3ms

#

ICMP is a bullshit test

#

xD

covert ibex Mar 28, 2019, 2:05 AM

#

Network monitor software for monitoring internet connection, uptime and downtime, and around 7 pc's?

Don't want to go full ham into something like nagios but do need something.

ornate jungle Mar 28, 2019, 2:30 AM

#

@covert ibex You'd need to run that on the router or central networking gear where everything connects to for it to be effective, or have a dedicated pfSense box capable of running said software. I use the built-in bandwidth monitoring that comes with AdvancedTomato firmware on my R7000 router. Ubiquiti Networks gear also has great management built into its' firmware too, if you're into their ecosystem.

little schooner Mar 28, 2019, 2:59 AM

#

Opnsense vs. Pfsense vs. Untangle. does it matter which one to use?

#

pfsense has a NAT that won't turn off easily

fresh copper Mar 28, 2019, 3:39 AM

#

Pfsense has weird firewall issues where it sometimes ignores rules and blocks traffic anyway, sometime for non-existant rules. It also dislikes too many interfaces, especially too many IPSec interfaces. Opnsense has fewer plugins than Pfsense but does have a ZeroTier plugin which Pfsense does not. It also is pretty much unable to make IPSec connections though it works on occasion. Never used Untangle so I can’t comment

little schooner Mar 28, 2019, 3:51 AM

#

randomly I have been seeing video descriptions that mention them, that why I bring it up. they show under suggestions for some reason after watching gamer nexus and linuses channel

covert ibex Mar 28, 2019, 3:57 AM

#

@ornate jungle
The router/modem that the network uses is a Huawei ar129.
And I have 0% faith in it whatsoever.

little schooner Mar 28, 2019, 3:58 AM

#

might as well leave the house keys on the front door mat too

covert ibex Mar 28, 2019, 3:59 AM

#

It's also wan connected to the phone network they use.

#

Puzzled me today.. DSL line went down, it didn't wireless backup, it just rebooted itself.
Somebody was using a phone the whole time. I thought it would have dropped the connection, but nope.

And couldn't get an internet connection back for another 20 mins.

ornate jungle Mar 28, 2019, 4:16 AM

#

Yeah.... I have no idea how your particular DSL line works - normally I'd say put your modem in bridge mode and replace it with a semi-competent device, but you'll want to contact your ISP for help with this.

little schooner Mar 28, 2019, 4:17 AM

#

doesnt dsl use the concept of filters too for voice and data?

ornate jungle Mar 28, 2019, 4:18 AM

#

Usually, yes - DSL ISPs provide line filters to ... filter ... out data from voice signal, since normally your POTS is still analogue.

thick minnow Mar 28, 2019, 4:19 AM

#

Question: I have a 150 150 internet from my ISP and with my phone wireless near the router I get 163 and 173 but when I run a test on my pc it gets 150 but when downloading anything anywhere it downloads at 22mbps

ornate jungle Mar 28, 2019, 4:21 AM

#

150mbit != 18.75mbyte - check the units of whatever you're downloading from - a megabit does not equal a megabyte.

thick minnow Mar 28, 2019, 4:22 AM

#

??

little schooner Mar 28, 2019, 4:22 AM

#

@thick minnow where are you seeing the download speed from

#

task manager?

#

task manager will report it right for you

thick minnow Mar 28, 2019, 4:22 AM

#

Speedtest.net

little schooner Mar 28, 2019, 4:23 AM

#

strange since speed test also shows speed in mbps

ornate jungle Mar 28, 2019, 4:23 AM

#

Speedtest.net usually reports in megabits - where are you seeing the 22 number? Steam?

thick minnow Mar 28, 2019, 4:23 AM

#

Yes..

little schooner Mar 28, 2019, 4:23 AM

#

oh steam...

#

they do show MBps

#

don't they?

ornate jungle Mar 28, 2019, 4:24 AM

#

Mbps != MBps -- notice the capitalization - it absolutely matters

thick minnow Mar 28, 2019, 4:24 AM

#

📎 image0.jpg

little schooner Mar 28, 2019, 4:24 AM

#

yes that's correct speed

thick minnow Mar 28, 2019, 4:24 AM

#

Whats the difference between MBps and Mbps

ornate jungle Mar 28, 2019, 4:24 AM

#

https://www.quora.com/What-is-the-difference-between-Mbps-and-MBps

What is the difference between Mbps and MBps? - Quora

The Difference between a Megabyte (MB) and a Megabit (Mb) One thing that often gives people confusion is the difference between a Megabyte (used for file size) and a Megabit (used for download speeds). People often assume that a download speed of ...

thick minnow Mar 28, 2019, 4:25 AM

#

Mm

#

Ty

ornate jungle Mar 28, 2019, 4:26 AM

#

184 Mbps is great if you're paying for 150 mbps, and works out to 23 MBps so it makes sense if you see downloads top out at that speed. You'll want to check the units that the program reporting the download speed of 22-23 MBps is using - megabits or megabytes.

thick minnow Mar 28, 2019, 4:27 AM

#

Would upgrading to 300mbps be worth it?

ornate jungle Mar 28, 2019, 4:29 AM

#

Depends on whether you need that speed or not, and whether your WiFi & WiFi devices can handle it. Bear in mind that speeds can never be guaranteed with WiFi, unless you install your WiFi AP / router / modem in a clean laboratory test environment.

little schooner Mar 28, 2019, 4:29 AM

#

@thick minnow if you can get 150 /150 synchronous I'd say you have a very great connection at 150

#

that's pretty fast

thick minnow Mar 28, 2019, 4:29 AM

#

Indeed,

little schooner Mar 28, 2019, 4:30 AM

#

I wish I could get there

#

new isp is in town I want to get rid of Comcast

thick minnow Mar 28, 2019, 4:30 AM

#

What speeds do you have.?

little schooner Mar 28, 2019, 4:30 AM

#

they are still building the lines though

ornate jungle Mar 28, 2019, 4:30 AM

#

We upgraded from 150 to 300 only because the discount I receive makes it worth it, but honestly, I'd rather have a symmetrical connection rather than the currently asymmetrical DOCSIS 3.0 cable connect we have now. I cannot wait for DOCSIS 3.1 full duplex.

little schooner Mar 28, 2019, 4:30 AM

#

I have 150/8

thick minnow Mar 28, 2019, 4:30 AM

#

Well it’s only 20 bucks more a month to upgrade.

#

To 300 300

little schooner Mar 28, 2019, 4:30 AM

#

and the bill is 110

#

ish

thick minnow Mar 28, 2019, 4:31 AM

#

I’m paying 95 CAD for unlimited data and 150/150

little schooner Mar 28, 2019, 4:31 AM

#

anything is better than Comcast

#

I want to get rid of them

thick minnow Mar 28, 2019, 4:31 AM

#

115 CAD for unlimited data and 300/300

ornate jungle Mar 28, 2019, 4:31 AM

#

Telus, or another DSL ISP in Canadia land?

thick minnow Mar 28, 2019, 4:31 AM

#

Telus

#

Shaw sucked.

ornate jungle Mar 28, 2019, 4:32 AM

#

Nice, see we technically can't even get faster than about 90mbps where I live, despite Telus sales reps claiming they have fibre in our area. LOL nope

thick minnow Mar 28, 2019, 4:33 AM

#

Your in canada?

#

I assume then

ornate jungle Mar 28, 2019, 4:34 AM

#

Yes, fellow western Canadian here. To be fair, all ISPs suck... a little... in their own way. It's actually not Telus service that prevents me from using them, it's their call centres all being overseas. I refuse to deal with that. Period. Fullstop.
And it has nothing to do with culture, or race, or any of that - myself, the customer, should never have to ask to be transferred to a Canadian call centre because 1) I want to support Canadian wages and 2) I genuinely cannot understand the person on the other end of the phone (and they can't understand me.)

thick minnow Mar 28, 2019, 4:34 AM

#

Mhm.

ornate jungle Mar 28, 2019, 4:36 AM

#

I straight up no longer help my neighbors with their services since they switched to Telus, again, not because I don't love helping the neighborhood in exchange for baked goods or IT client cash moolah, but because I will not under any circumstances call Telus for them. I'll go power cycle & factory reset their equipment, but then I'm done. Full stop. At least with Shaw I know almost all the call centres are in Nanaimo, Vancouver, or Winnipeg.
That being said, I really wish we had more competition and lobbying from the CRTC to regulate pricing for the minimum Internet package, similarly to how we have a minimum $25 TV package that all providers MUST offer by law. Speeds might only be 30mbps down & 3mbps up, but at least those on a tight budget know what they can afford to pay over say a 5 year period.

#

Do you have other options than Telus or Shaw in your area Soctt?

thick minnow Mar 28, 2019, 4:39 AM

#

Yes, but they aren’t very popular company’s and their plans suck compared to shaw and telus.

#

I’m likely going to go play some VR. See you!

#

Thanks for the information!

naive meadow Mar 28, 2019, 6:27 AM

#

I have pretty nice wifi
nearly 500mbps down and often over 400mbps up

pseudo blade Mar 28, 2019, 6:45 AM

#

@ornate jungle @little schooner I know I'm being a super-pedant, but the term for having different upload and download speeds is asymmetrical, not asynchronous. The latter has an entirely different meaning.

thick minnow Mar 28, 2019, 7:30 AM

#

📎 Bahnhof_9091.png

#

it's official. the fastest internet speed in a private person home sector (non-company)

#

only in sweden

#

9 gigabit/down
8.5 gigabit/ up

covert ibex Mar 28, 2019, 9:40 AM

#

Bad idea to have two piholes running?

covert ibex Mar 28, 2019, 10:44 AM

#

@unreal wedge
Ok, so the only thing that's annoying me, is I don't know if dnoise is running on my pi or not.

#

Like, my best guess that it is, is running pstree gives me a line:
Cron-cron-sh-sh-python-4*[{python}]

And that's just a guess.
(Running it passthroughed another script to make sure other services have started and pi-hole creates a log file so I definitely know FTL started and stayed running, and a few other important to me things running.)

#

GitHub should really make it easier to get in contact with the creator of things..

dusty star Mar 28, 2019, 10:49 AM

#

@covert ibex Can I just ask what you'd need two piholes for?

covert ibex Mar 28, 2019, 10:49 AM

#

@dusty star
Incase one dies?

dusty star Mar 28, 2019, 10:49 AM

#

Oh yeah, that makes sense

covert ibex Mar 28, 2019, 10:50 AM

#

I've got like.. 20 rpi's so.. it's not really a big issue.

dusty star Mar 28, 2019, 10:50 AM

#

Does PiHole have a failover mechanism though?

covert ibex Mar 28, 2019, 10:50 AM

#

Not that I'm aware of.

dusty star Mar 28, 2019, 10:50 AM

#

Or do you just set the other one as a secondary DNS server in your router?

covert ibex Mar 28, 2019, 10:50 AM

#

Yeah, primary and secondary

dusty star Mar 28, 2019, 10:50 AM

#

Okay

covert ibex Mar 28, 2019, 10:52 AM

#

And a really badly designed macro trigger on my "fileserver" that if it drops connection completely, it manually logs onto the router, and changes the DNS settings off them if they both go down.

#

And by bad, I mean literal timed clicks, and keypresses.

dusty star Mar 28, 2019, 10:53 AM

#

Changing DNS servers on my router is a huuuuge pain...

covert ibex Mar 28, 2019, 10:54 AM

#

Same.. now imagine recording the movements and writing scripts to do that..

dusty star Mar 28, 2019, 10:54 AM

#

Yeah, I can imagine... I'd never get myself to do that. Too much effort for too little result

#

I'd just set a third DNS server on my devices

#

like 1.1.1.1

covert ibex Mar 28, 2019, 10:55 AM

#

Router can't do more than 2..

dusty star Mar 28, 2019, 10:55 AM

#

Yeah, neither can mine. I meant set another DNS server on like my PC and so on

covert ibex Mar 28, 2019, 10:56 AM

#

It forces connections to DNS servers..
It's a horrible router..

dusty star Mar 28, 2019, 10:56 AM

#

Oh, that's annoying...

covert ibex Mar 28, 2019, 10:57 AM

#

I've got a replacement to use, I just haven't bothered to pull the DSL settings and change it over.

waxen scroll Mar 28, 2019, 7:03 PM

#

I'm going to the primary data center tomorrow @little schooner

waxen scroll Mar 28, 2019, 7:59 PM

#

linusPerfect

#

@clear igloo my coworker gave me 6 copper SFP for used in the lab!

#

We were low

clear igloo Mar 28, 2019, 8:00 PM

#

Ah, hides the boxes of copper SFPs

waxen scroll Mar 28, 2019, 8:01 PM

#

Give. Me.

#

Muh N5k could use more

clear igloo Mar 28, 2019, 8:01 PM

#

I've literally got 3 boxes stuffed full of 100G QSFP LR too >.>

waxen scroll Mar 28, 2019, 8:02 PM

#

I don't need that crap for a lab

clear igloo Mar 28, 2019, 8:02 PM

#

Why not use 10G SFP+? 😛

waxen scroll Mar 28, 2019, 8:02 PM

#

I don't need 10g either. Only if troubleshooting prod

clear igloo Mar 28, 2019, 8:03 PM

#

well, I'll ship you a few. Each SFP inside its own anti-static bag, inside a tube, inside a box, and then each box placed into a larger box 😄

waxen scroll Mar 28, 2019, 8:04 PM

#

U mad?

clear igloo Mar 28, 2019, 8:04 PM

#

No, just annoyed when I get so much packaging for a few copper SFPs

waxen scroll Mar 28, 2019, 8:05 PM

#

All these people with home lab, and I'm here like yollloooo n7k, N5k, asr9k

#

Worth more than your house

#

Dexter's lab

clear igloo Mar 28, 2019, 8:05 PM

#

lol

waxen scroll Mar 28, 2019, 8:07 PM

#

nickCreep soontm banHammer @unreal wedge

#

I'm not allowed to make connections in the lab... Technically

#

I do it sneaky

#

The data center team is supposed to

#

They do rack and stack, plus all cabling

#

But I'm not opening tickets for every cable move

clear igloo Mar 28, 2019, 8:13 PM

#

lol, that feel when you can move your own cables freely 😄

waxen scroll Mar 28, 2019, 8:15 PM

#

It's a thing at many companies now

#

If you're not a DC tech or noc, no data center access allowed unless you open a ticket and potentially be escorted

clear igloo Mar 28, 2019, 8:16 PM

#

I know, it makes sense from a security standpoint

waxen scroll Mar 28, 2019, 8:16 PM

#

It annoys the crap out of me

clear igloo Mar 28, 2019, 8:16 PM

#

or a control standpoint so random people like me don't just go "shift cable from 1 to 2" 😄

waxen scroll Mar 28, 2019, 8:17 PM

#

I work here, my gear is in there, where's my access

#

jamesLaser

#

I do have unlimited lab access

thick minnow Mar 28, 2019, 9:58 PM

#

Is ProtonVPN good?

waxen scroll Mar 28, 2019, 10:22 PM

#

tunnelbear is good

clear igloo Mar 28, 2019, 10:24 PM

#

We don't talk about tunnelbear on here @waxen scroll
banHammer

waxen scroll Mar 28, 2019, 10:25 PM

#

you dont have the rights to do it

fresh copper Mar 28, 2019, 10:50 PM

#

I would love a box of 10G SFP+ modules

pseudo blade Mar 28, 2019, 11:24 PM

#

How long do you need the runs to be? @fresh copper

fresh copper Mar 28, 2019, 11:39 PM

#

Probably less than two meters though I might get one to another rack in the DC at some point. Seeing as I don’t have a box of 10G SFP+ modules, I’m probably best off just using DAC cables

thick minnow Mar 28, 2019, 11:53 PM

#

ISDN Sample Topology.

📎 07fig14.png

#

Frame Relay Sample Topology.

📎 07fig15.png

#

ATM Virtual Circuits Sample Diagram.

📎 07fig17.png

#

MPLS Sample Topology.

📎 07fig19.png

waxen scroll Mar 29, 2019, 12:13 AM

#

i dunno why you're paying attention to frame relay

#

or ATM

#

MPLS is bae

#

i was annoyed that my classes didnt tell us about MPLS

thick minnow Mar 29, 2019, 12:35 AM

#

I’m only sharing what I’ve been reading and learning about so far in my course.

I personally think it’s important to learn about the older WAN networking topologies and technologies in order to really appreciate how far we’ve come.

waxen scroll Mar 29, 2019, 1:23 AM

#

@thick minnow just wait until you attend change review board

#

@unreal wedge these young'ns dont know about CAB yet

#

its where ideas go to die

thick minnow Mar 29, 2019, 2:09 AM

#

can i use a laptop as a router+modem ?

thick minnow Mar 29, 2019, 2:28 AM

#

no

#

you can but dont

fresh copper Mar 29, 2019, 2:44 AM

#

What he said. Totally possible but there are multiple reasons no to (mainly because hardware was not meant for it)

thick minnow Mar 29, 2019, 2:58 AM

#

hmmm

#

the reason i want to do it is my router is shit + i have an old laptop (which is shit normally but would make a powerful router) that i don't use so i thought would be nice to use it as a router since it have better wifi than my router + 1gbps ethernet

#

can you link a guide for how to do it ?

#

also what are the reasons to not do it

covert ibex Mar 29, 2019, 3:00 AM

#

@thick minnow
Better to sell the laptop and buy a router with the money.
The list of security reasons alone outweigh any benefit.

thick minnow Mar 29, 2019, 3:02 AM

#

any idea about hm to sell a laptop with these specs for ?
i3 1st gen
2gb ram
1gbps ethernet
320gb hdd
720p screen

covert ibex Mar 29, 2019, 3:03 AM

#

Country?

thick minnow Mar 29, 2019, 3:03 AM

#

egypt

#

look at cragislist

#

we dont have that here 😐

covert ibex Mar 29, 2019, 3:04 AM

#

Uh... If conversation rates are right.. around 750ish EGP.

thick minnow Mar 29, 2019, 3:04 AM

#

so same laptop with i5 and 4gb of ram is 3000egp !!!

#

actually its a bit newer

#

but still thats way higher than i expected

#

the conversion rate is 1usd=18egp

covert ibex Mar 29, 2019, 3:06 AM

#

(not really networking related atm.)
Enough to trade for a router though.

thick minnow Mar 29, 2019, 3:07 AM

#

does raspberry pi make a good router?

covert ibex Mar 29, 2019, 3:07 AM

#

From my experience with 20 of them, not really.

fresh copper Mar 29, 2019, 3:27 AM

#

I would be surprised if you could get 1G with a laptop. Most laptops only have one Ethernet connection and you can’t get 1G over USB 2.0 or 3.0 though USB C maybe

thick minnow Mar 29, 2019, 4:16 AM

#

I tested it and ... I didn’t get full 1g but I think it was around 500-600 mbps which is better than my routers 100mbps

#

But I just tested wifi and it’s maxed at 32mbps so ye doesn’t seem like it makes a great router

covert ibex Mar 29, 2019, 11:29 AM

#

For those times you really need a poe line..

📎 images12.jpg

thick minnow Mar 29, 2019, 11:35 AM

#

Whats the point of this? @covert ibex

#

Is it a router?

#

It seems like one

waxen scroll Mar 29, 2019, 12:25 PM

#

That looks like a wan port too

#

Doesn't make sense

thick minnow Mar 29, 2019, 1:49 PM

#

Sup?

waxen scroll Mar 29, 2019, 1:54 PM

#

Hiiii

#

@clear igloo bad news. We have to run cable tray to get single mode fiber

#

$$$$

clear igloo Mar 29, 2019, 1:55 PM

#

oooof

waxen scroll Mar 29, 2019, 1:55 PM

#

Whose gonna pay???

#

Not my team

clear igloo Mar 29, 2019, 1:56 PM

#

You? 😄

tawny seal Mar 29, 2019, 2:30 PM

#

@thick minnow get a older PC get a 4 port NIC and your good

#

Use pfsense

waxen scroll Mar 29, 2019, 6:46 PM

#

Omg @clear igloo my coworker just got two boxes of 100G sfp

clear igloo Mar 29, 2019, 6:46 PM

#

Good 😄

waxen scroll Mar 29, 2019, 6:46 PM

#

For our new n9k

#

😘 😍 linusPerfect

clear igloo Mar 29, 2019, 6:47 PM

#

😛

waxen scroll Mar 29, 2019, 6:48 PM

#

Meanwhile I just put 9 copper SFP into the lab 5k

#

I'm hoarding

clear igloo Mar 29, 2019, 6:48 PM

#

Hoard all the things!

thick minnow Mar 29, 2019, 6:49 PM

#

Remind me again what SFP is?

#

Serial Flash Port?

#

¯_(ツ)_/¯

hallow nimbus Mar 29, 2019, 6:53 PM

#

Super fiber port

#

😂

little schooner Mar 29, 2019, 6:53 PM

#

@thick minnow More like Seriously Flawed Product 😂

joking aside, I actually don't know off the top of my head since barely Cisco talked about it in the studies

it's a Google search away luckily =p

hallow nimbus Mar 29, 2019, 6:54 PM

#

small form-factor pluggable (SFP

thick minnow Mar 29, 2019, 6:55 PM

#

"(Small Form-factor Pluggable) A small transceiver that plugs into the SFP port of a network switch and connects to Fibre Channel and Gigabit Ethernet (GbE) optical fiber cables at the other end."

little schooner Mar 29, 2019, 6:55 PM

#

Basically it's modularity for flexibility then

thick minnow Mar 29, 2019, 6:55 PM

#

I do think I read about it in chapter 2 or 3 of my course.

little schooner Mar 29, 2019, 6:56 PM

#

The one I saw in person was the picture I took earlier of the computer lab

#

where it was an sfp to ethernet

#

The uplink looked like it was going up to the ceiling and the Mac lab was on the other side of the room I was in

#

still that single point of failure cable is a disaster. Anyone can literally pull it out

thick minnow Mar 29, 2019, 7:01 PM

#

True, redundancy is key.

little schooner Mar 29, 2019, 7:08 PM

#

I am still waiting for my teachers response about Business dept. giving us the Intel 8700 workstations we were supposed to get. Im curious if they will accept the proposal or not. It was my first time doing such a thing.

thick minnow Mar 29, 2019, 7:08 PM

#

https://tenor.com/view/spongebob-technology-patrick-hung-gif-5567497

Tenor

little schooner Mar 29, 2019, 7:08 PM

#

It's weird that we have to write proposal to use the money he earned by a grant

thick minnow Mar 29, 2019, 7:09 PM

#

IDK how that works, just do what you have to do man.

#

Hopefully you'll get the equipment you need.

little schooner Mar 29, 2019, 7:09 PM

#

Should I start using buzz words with them to make it seem like it's worthwhile xD

thick minnow Mar 29, 2019, 7:10 PM

#

You mean like hype it up? Like: "Powerful 4 Core processing power!" ?

#

IDK man, do whatever you want it's your proposal not mine.

waxen scroll Mar 29, 2019, 8:17 PM

#

My network devices have a Xeon in them

#

@clear igloo truth.

hallow nimbus Mar 29, 2019, 8:20 PM

#

Cause ur using a old server as a router ?

clear igloo Mar 29, 2019, 8:22 PM

#

Because a lot of networking gear uses server chips for control plane traffic dealings

#

ASICs deal with 99% of traffic but you have some control plane stuff and that control plane traffic is usually handled by a CPU, usually server grade chips like Xeon CPUs

little schooner Mar 29, 2019, 8:42 PM

#

Do you guys know if Watchguard or Fortigate is a good value for DNS entries in firewall rules?

#

or if there is a cheaper one that can also do line rate with that feature

waxen scroll Mar 29, 2019, 9:18 PM

#

Call both companies and run a POC with their sales people

clear igloo Mar 29, 2019, 9:24 PM

#

^

waxen scroll Mar 29, 2019, 10:09 PM

#

many of them lie about being able to do line rate

#

lots of caveats and even when you do it exactly how they tell you, it still wont

#

ciscos also guilty

#

a good one... line rate until you turn on more than 1 feature!

#

at that point its just an access list firewall

#

but you paid $200,000

#

thats why you need to call sales and request a demo unit

#

then fire traffic at it yourself or hire a firm

#

the sales sharks are smart though, they prob wont give you one unless you're a well qualified buyer

unreal wedge Mar 29, 2019, 10:12 PM

#

👀 too many messages there, eh.

clear igloo Mar 29, 2019, 10:20 PM

#

@waxen scroll Everyone knows you just scale to 10% of CPU and then multiply it by 10 to get 100% load 😄

waxen scroll Mar 29, 2019, 10:22 PM

#

yeah no

little schooner Mar 29, 2019, 10:44 PM

#

thanks for the advice

#

yes I am still new to all that stuff

waxen scroll Mar 29, 2019, 11:05 PM

#

@little schooner another LOL

#

sometimes line rate is only with the largest packet size possible

#

have a bunch of tiny ones? good luck

little schooner Mar 29, 2019, 11:25 PM

#

I received the supermicro TPM chip in the mail today. Now, I can implement the plan of powering down the server, after backups complete, to cut down on the energy bill.

With the chip, Bitlocker can unlock automatically without me having to input a passphrase. I'll make the local account passwords difficult so that in the event it gets stolen, they will most likely trip Secure Boot to bypass the account. I'll feel at ease because at least the data is encrypted and will require the long recovery key to unlock.

waxen scroll Mar 30, 2019, 12:59 AM

#

Kawaii

waxen scroll Mar 30, 2019, 1:13 PM

#

@unreal wedge omg kawaii.... LTT pins

thick minnow Mar 30, 2019, 2:27 PM

#

Sup my networking peeps?

clear igloo Mar 30, 2019, 2:28 PM

#

All the servers and gear is up

#

😛

thick minnow Mar 30, 2019, 3:05 PM

#

That sounds very ONLINE to me.

#

Networks be like: network noises

clear igloo Mar 30, 2019, 3:08 PM

#

Networks be like: 01110011 01101011 01111001 01101110 01100101 01110100 00100000 01110111 01101001 01101100 01101100 00100000 01110010 01101001 01110011 01100101

waxen scroll Mar 30, 2019, 5:45 PM

#

lurick~~

thick minnow Mar 30, 2019, 5:46 PM

#

Very accurate.

little schooner Mar 30, 2019, 7:20 PM

#

School makes it very easy for someone to feel inferior, its so frustrating

#

It doesnt make sense how my networking degree requires so many non-core classes in order to complete it

waxen scroll Mar 30, 2019, 7:28 PM

#

;/

#

probably to meet some sort of minimum standard for accreditation

#

or you can go full alex jones and say "they just want you to pay more"

fresh copper Mar 30, 2019, 7:34 PM

#

If you go to the UK, you do just your subject and nothing else in most places

little schooner Mar 30, 2019, 7:35 PM

#

Only because I feel like engineering technical writing is such a drag on me

fresh copper Mar 30, 2019, 7:35 PM

#

You often get a degree faster too. Some offer 4 year programs to get a bachelors and masters

little schooner Mar 30, 2019, 7:36 PM

#

Thats really fast

#

wow

#

I only got 5 weeks left

#

It can't end soon enough omg

little schooner Mar 30, 2019, 8:20 PM

#

I was so close to freaking out when Visio randomly crashed on me in the middle of my network diagram....

#

then i remembered that I was saving every 3 minutes or so

#

disaster averted.

strange zealot Mar 30, 2019, 11:25 PM

#

hey, I'm having some IP routing issues, can a few people traceroute 161.129.154.70 and send the result?

waxen scroll Mar 30, 2019, 11:26 PM

#

tons of providers offer BGP looking glasses and traceroute sites, maybe start there

ornate jungle Mar 30, 2019, 11:32 PM

#

@strange zealot there are tons of online routing sites that will show you routing details, but here you go:

Tracing route to 161-129-154-70.static.nexril.net [161.129.154.70]
over a maximum of 30 hops:

  1    <1 ms     1 ms    <1 ms  spACe.local [10.1.1.1]
  2     8 ms     7 ms     9 ms  70.66.xx.x
  3     9 ms     9 ms    11 ms  rd2cv-xxxxx-x.gv.shawcable.net [64.59.xxx.xxx]
  4    10 ms    11 ms     9 ms  rd1bb-tge0-4-3-0.no.shawcable.net [66.163.72.22]
  5    12 ms    12 ms    12 ms  rc1wt-be40.wa.shawcable.net [66.163.68.18]
  6    12 ms    11 ms    11 ms  100ge14-2.core1.sea1.he.net [206.81.80.40]
  7    16 ms    15 ms    15 ms  100ge11-1.core1.pdx1.he.net [184.105.64.138]
  8    40 ms    39 ms    57 ms  100ge10-1.core1.slc1.he.net [184.105.213.242]
  9    59 ms    58 ms    59 ms  100ge8-2.core1.den1.he.net [72.52.92.41]
 10    58 ms    58 ms    58 ms  100ge14-1.core1.mci3.he.net [184.105.64.50]
 11   112 ms    93 ms    96 ms  100ge10-2.core1.dal1.he.net [184.105.81.206]
 12    88 ms    87 ms    85 ms  hivelocity-ventures-corp.e0-11.switch3.dal2.he.net [216.66.79.226]
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.

strange zealot Mar 30, 2019, 11:46 PM

#

rip

#

paying $200/mo for this dedi and it doesn't work

rocky badge Mar 31, 2019, 12:01 AM

#

@waxen scroll @clear igloo https://pcmr.rocks/u/422a412721.webm

▶ Play video

#

pls explain this

#

my client is Gigabit, my server is 2 Gigabit, the drives on the server can do 600MB/s read and write, the drive on my client does 125MB/s read and write.

#

YET, Windows says 2.58GB/s

floral willow Mar 31, 2019, 12:02 AM

#

🤔

rocky badge Mar 31, 2019, 12:02 AM

#

pls Windows

#

have some logic pls

floral willow Mar 31, 2019, 12:02 AM

#

my mac's logic is worse

waxen scroll Mar 31, 2019, 12:03 AM

#

caching?

#

you copied it multiple times

rocky badge Mar 31, 2019, 12:03 AM

#

🤔

#

even on first try before I recorded it

#

it did 2.69GB/s

#

and does iSCSI even do caching?

waxen scroll Mar 31, 2019, 12:06 AM

#

do you have optane or something

rocky badge Mar 31, 2019, 12:08 AM

#

no

waxen scroll Mar 31, 2019, 12:13 AM

#

dunno bro

#

that behavior is classic caching

#

so

#

just be happy its fast?

#

😛

fresh copper Mar 31, 2019, 12:15 AM

#

Maybe it’s Windows being bad

waxen scroll Mar 31, 2019, 12:16 AM

#

i used to have a 1gb raid controller cache on mine

#

i dont screw with raid controllers in gaming PCs anymore

#

they're not really compatible

#

but they can work

#

thats straight from LSI/Avagos card designers mouth

#

had a long support case open

#

lol

#

the card wouldnt work unless it was on a specific firmware (nobody could explain why) and even then the raid bios GUI was flaky

#

tl;dr x8 raid card needs x8 slot. it can work in x16 but its not supported. SLI compatible systems have a different clock speed on the bus than a server and it can cause the raid CPU to act funny

#

theres my bad summary on what was discussed

#

i got into raid during the 1st - 2nd gen SSD boom

#

where you get like 6 of them and its stupid fast

#

but NVMe has made things so much better....