no point now
#networking
waxen scroll
waxen scroll
@clear igloo FML
why cant firewalls do better DNAT
cisco and fortinet only do a global and/or per-VRF DNAT table >:\
its not done per rule
i dont see why a firewall couldnt handle it
little schooner
strong opinion about Comcast https://www.youtube.com/watch?v=KMcny_pixDw
fresh copper
Comcast makes me very sad
I’m happy that I don’t live in the US. Telus and Shaw are better than the main US ISPs in my opinion but they are not the best ever.
thick minnow
Hey folks, haven't spoken here much but, I recently got a new NETGEAR 5 port switch, the gs305, and I'm getting high ping spikes 200-1000ms when im connected to it, any sugggestions?
ornate jungle
Yes @thick minnow , disconnect all devices from it except of course for the router and your single computer exhibiting the spikes, then test it for a week. If they continue, something is misconfigured or the switch is defective. If they stop, one of your other connected devices is borking the network somehow.
thick minnow
Okay, will do, it wasn't doing this before (or it wasn't noticeable) I did get a router update recently from my isp, which supposedly improved WiFi stability, using band switching or something, shouldn't affect ethernet though, and it happened almost straight after that
ornate jungle
Heh, well did you get to see the source code for the update from your ISP? If not, we have no way to determine it's not causing the issue, so next you could try bypassing the switch entirely to rule that out.
thick minnow
This is odd, just reconnected the switch and i'm not seeing any spikes on the usual test i run
spark estuary
anyone online here?
I need a network check (FTP connect) since I reconfigured my server. need a connection from a different IP class.
any help would be appreciated.
thick minnow
@spark estuary Sorry, I can't help you with that.
Why don't you try asking Xeon#6123, blob#1337, or Lurick#6340?
spark estuary
I asked in tech support channel
and someone with an FTP client handy helped me
@thick minnow thanks anyway
unreal wedge
Yeah no, fuck Comcast.
hallow nimbus
Comcrap
waxen scroll
i got a new comcast customer deal under my same name
little schooner
@unreal wedge did you see the video I posted
unreal wedge
Didn't watch it. Already tired of Comshaft's bs.
little schooner
honestly they replied to my question with that link
waxen scroll
comcast doesnt check SSN anymore
canceled my shit, signed up under a different phone number, same name and address
hallow nimbus
LMAO
little schooner
nice one
unreal wedge
Technically that practice was illegal. They can't request SSNs.
fresh copper
No one can ever require SSNs because some people are legally allowed to not have one
unreal wedge
Like visitors from other countries on a long-term visa, lol.
It's also discriminatory towards undocumented immigrants.
fresh copper
Specific religious groups are given exemptions
Also, it says right on the card that they are not to be used as ID though that’s often ignored
waxen scroll
well you need them for the credit reporting agencies
even if they dont credit check, they have to hold you accountable if you dont return equipment
waxen scroll
Ayy lmao
Real id act means undocumented can't fly anymore
IL is so salty about real id, they're going to keep issuing non-realid drivers licenses
strange silo
@rocky badge That's Windows write cache, open up resource monitor and you'll see there is still disk activity after the copy window closes
fresh copper
I wish that google would bring back the https://com.google joke. They hardly even use their gTLD and they paid so much for it
rocky badge
@strange silo hmmm
royal thistle
fresh copper
Don’t use cat5, max speed is 100mbps. Cat 5e is 1G at up to 100m. Cat 6 is 1G at 100m but 10G at 10m. Cat 6a can do 10G at 100m. Don’t get cat 7 because it is meant for different connectors and other special situations. Cat 8.1 is still under development. Most people selling Cat 7/8 are trying to scam you.
hardy lantern
🙏 Thank you. Now i know exactly what i need.
molten hill
Could someone explain the difference between 568A and 568B wiring layout? I understand the basics, slightly different positions of the wires. Also 568a is the newer standard while B is the older but far more common. For the most part they should be interchangeable so long as the ethenet cable is the same on both ends correct?
Could someone one explain what the difference is in better detail? Like why is the benefit of over it the other, why there is two? I am making Ethernet cables and Wondering what's the best to use.
clear igloo
The "benefit" allows for crossover cables so like devices that cannot auto negotiate (old switches, computers, routers, etc) can talk to each other. It's very uncommon today to need crossover cables but there is always that one thing that will bite you
molten hill
So 568A works as straight through and crossover?
clear igloo
Crossover means one side is 568A and the other is 568B, if both sides are one standard then its straight through
molten hill
Ohh. I see. I though cross over was a different layout all together. That makes alot more sense now
I appreciate the quick help
fresh copper
It literally does not matter which one you use. Having a different one at each end makes it a crossover cable. No benefits to either
waxen scroll
clear igloo
That's a lot of nopes
Although one of the buildings on campus is called the "snake ranch" for a reason which would be bigger nopes >.>
waxen scroll
You could say the pi has... 🤔 🤔 🤔 buggy code
unreal wedge
@waxen scroll who the fuck thought it was a good idea to leave a Raspberry Pi out like that? Don't you know those attract ants!?
rocky badge
@waxen scroll that poor Raspberry Pi UniFi 8 port PoE switch
unreal wedge
Get some Terro™ and put a nice-sized drop next to the Pi. They'll instantly jump into it. It's a sugar-based poison. They'll carry it back to the mound and it'll fuck em up real good. It's only meant for infestations, like that.
If you use it where there is no infestation, you'll have one. Needs to be applied wherever you see ant activity over the course of 2-3 months, and the drop you put down will only last about 24 hours. It's a last resort to tactically nuke infestations like that.
bold karma
Your network is bugged
waxen scroll
if dooley tries to evade discord partner server rules with fancy fonts, im gonna have to 
thick minnow
How on earth does a Raspberry Pi attract so many ants?
fresh copper
The same way any other kind of pie does
unkempt crest
Looks like the source of the bug was from the blue cable on the unifi switch
it spread to the pi sadly
covert ibex
Crazy idea...
Computer with a lot of ram, like.. +100gb
Pxe boot, and when you run a game, it copies it into ram and launches it from there..
For a truly fast gaming pc..
Crazy?
ornate drum
Did you try turning it off and on again?
covert ibex
@thick minnow
Pxe boot is for other reasons. :p
thick minnow
explain @covert ibex
upper tinsel
subtle glen
This seems interesting
waxen scroll
why
little schooner
@subtle glen netacad made it so easy to learn networking. never will I do the book way again
radiant crane
@little schooner Did you take any certs after doing netcad?
little schooner
@radiant crane yes ccent and ccna
Basically study what netacad has, do the labs and practice tests (i did all of them) and your basically guaranteed to pass
I used about 3 weeks of summer time to make sure to review and wait for the voucher code
radiant crane
Very cool, I did book studying and practice exams for my CCENT. I'll look at netacad for the CCNA
subtle glen
@waxen scroll cause it's something new in my school and i am interested in it
little schooner
@subtle glen I stopped at ccna because anything above Cisco likes to specialize the candidates in things like asa
and the above certs are only needed in jobs that ask for it so
it did not make sense for me to pay a lot of money for something the job won't even look at
subtle glen
so you will specialize for something specific when you will find a job that requires that?ì certain thing?
clear igloo
CCNA is entry level across the various technologies, basic configuration, routing/switching, etc.
CCNP builds on that and focuses a bit more on application in a more Cisco-centric environment but still builds on the foundation and increases general knowledge too. There are some tracks like Data Center or Security you can choose what to focus on as you have to pass 3 out of 4 or 5 exams.
CCIE is the pinnacle for most tracks and builds even more on the knowledge and application of everything in a real world environment
Unless you take a cert that's targeted at specific specialties, which you know before going in, then saying you have to spec in asa or the like is incorrect
thick minnow
Interesting
I’m just probably going to apply part time in my college IT department as an IT Tech
Why not right? It would be a good experience for me, and it would build up on what I have already learned so far in my networking class.
clear igloo
Real world experience and being able to apply things in such an environment is definitely helpful
thick minnow
Agreed.
Right now I’m working on getting a Certificate in Computer Networking.
From there I probably am going to go for an A.S in either C.I.S.T or Cyber Security.
I’m just taking it one step at a time.
clear igloo
If you have the opportunity, through school or not, to intern at a company that you want to work at and focuses on the field you want to end up in, do it
thick minnow
My networking professor thinks it would be beneficial for me to apply for a job at the college IT department and get some experience working as an IT tech.
clear igloo
Then do that, but be on the look out for internships at companies too, there can be amazing opportunities and connections built that way
thick minnow
Yes, I agree. The best possible thing you can do is networking(Social type).
It can open up many possibilities for the future, and it can also be a good way of having references when you apply for actual jobs in the future.
But like I said, I’m taking it one step at a time.
Definitely stuff to consider and research on though. That is for sure!
little schooner
@clear igloo well even then, my. school didn't offer the program so
i would have to take on massive debt
experience would be better all the time
spice ledge
so what all needs to change to make a L2PT VPN work? i think im just missing one thing but this is what ive dont my NAS hosts the server, i have my network gear set to port forward the 3 UDP ports to the NAS, i have the account username, password, and key set up on my phone, made sure the external ip was the same but the VPN connection can not be made....
covert ibex
@thick minnow
That was my first job, and lasted four years until I started my qualification. Definitely a good idea to learn hands on knowledge about networks in a "relatively" easy introduction to scaled networks.
thick minnow
@covert ibex Thank you, it’s nice to have friendly people on here that give you advice and suggestions.
remote kernel
Any good printer monitoring software?
Id like a web UI with graphs and charts and stuff
waxen scroll
hardy kestrel
Hi, So I got a new ISP, with a new Router/Fiber Modem/Access Point thing. and should I use another Router or just use the one that came with the ISP?
spice ledge
I’ve never seen one of though combo router modem things to really ever do more than “provide” internet, though haven’t had one with fiber so.... the way every one I’ve ever come across had problems was with either multi user or internal network transfers @hardy kestrel
They just don’t have the power
In short my recommendation, get a router with MIMO
Or a UniFi setup but there a bit expensive so
hardy kestrel
It's basically a Fiber ONT (Had to google that) with a router built in
(Fiber Modem is the wrong term)
tawny seal
Yeah you should get e different router
Netgear Nighthawks are good if you juat want a simple home network
hardy kestrel
Yeah I really need since I connected just 3 Devices and the speed suffered -_-
sturdy mirage
maybe Ubiquiti edgerouter x SFP 🤔
thick minnow
Hey everyone, how are you all doing?
green sphinx
https://www.slashgear.com/malware-can-add-or-remove-cancerous-nodes-in-ct-scans-04572107/ this is very damn scary
hollow helm
clear igloo
Ninja stars? 😛
ornate jungle
No, they're giant spiders.
hardy kestrel
looks like a drone
rocky badge
Or get Ubiquiti 😉 @hollow helm
_
chrome hound
@hollow helm so does that one have 10gb ports? they have it on there marekting at 10gb, but I didn't see any when you look at the tech sheets, or maybe I just have the wrong one
fresh copper
I got my new servers!
rocky badge
stable iceBOT
@waxen scroll
waxen scroll
wat
that feel when you use the google assistant screener on spammers
then they hang up
but they dont learn and keep calling
they have a new trick
they call and its a private number
cant be blocked
thick minnow
Just finished my lesson on WLAN's.
covert ibex
On the phone with my ISP because I have a data connection, but no DSL line, and can't open any website due to something wrong with an SSL certificate.
4 days of techs being here installing, testing, and fixing old lines only for nothing to work..
But.. I can ping 1.1.1.1 and pool.ntp.org no problem..
"seamless upgrade to NBN", two days without an internet connection for a medium sized business..
fresh copper
I get a lot of pings on my pool servers
covert ibex
I tend to use them for that because they're typically not set custom routes on the ISP end..
foggy comet
anyone how to to assign an application with its own IP address? via maybe a virtual network adapter or something
covert ibex
@foggy comet
What application?
foggy comet
a relay proxy to setup a form of VPN tho not using any standards/schemes
echo vine
foggy comet
ill check just to be sure
covert ibex
@foggy comet
Too much overhead to set up a virtual machine?
foggy comet
while that would def work, like youve guessed too much over head
covert ibex
Even too much for a micro-vm?
foggy comet
hmm perhaps a better question. in windows at least are all the loopback addressed in a sense overlapping?
like if i sent on 127.0.0.1 to 127.0.0.2 would a listener on 127.0.0.1 get it?
id make an app to test it but figured if someone already knew id ask
covert ibex
They do overlap.
As they both point to the same local computer.
Had an issue with ports and one setting to 0.0.0.0 and one to 127.0.0.1
foggy comet
well the thing is, this is something I want to deploy and thus the footprint needs to be small as well as automated
sigh
ill look into light weight vms
hmm, i maybe stupid, but wouldnt a loopback adapter serve me? can i specify its ip address?
or does it get one from dhcp?
harsh jewel
Internet does this every 20 to 30 seconds any help please
covert ibex
@harsh jewel
Check cables.
If the modem lost connection, it wouldn't stop LAN.
So intermittent ethernet is typically a cable issue.
harsh jewel
Ok thank you
@covert ibex When I’m in a call ever once I a while it will lag and this has never happened before
On discord
I’ve checked all the cables
foggy comet
thats just discord being discord
harsh jewel
@thick minnow I have a wireless network usb and it still does the disconnecting thing
covert ibex
^thats not me.
New router?
harsh jewel
Oh my bad
No same router and it just started doing this
Today
I’ve restarted
And done about everything
covert ibex
Maybe it's dying.
harsh jewel
Ive had nothing but trouble with this router i wouldnt dout it
foggy comet
make your own router?
hallow vortex
How do you even make your own router?
thorn aurora
pfsense?
pseudo blade
@covert ibex Which ISP?
tawny seal
Yeah you just build a computer and install pfsense or opnsense
I like using a 1u server Chassis for a router and you just need a 4 port NIC
covert ibex
@pseudo blade
Commander/dodo
pseudo blade
What's your DHCP set to on your computer?
covert ibex
Everything's default/auto.
The "business" router/modem is configured by them.
honest flicker
Hey guys, I have a question. Can someone tell me what are the benefits of using UDP instead of TCP as a transport protocol for DNS?
clear igloo
You don't need a DNS request to go through and it can always be resent, lower overhead with UDP as well
honest flicker
thanks ☺
pseudo blade
@covert ibex Change the DNS to 1.1.1.1, most ISPs in our country are screwing with our DNS in ways that can cause interesting problems.
If your router refuses to let you do this, replace it.
covert ibex
Default passwords to the router don't work, and they requested I sign an NDA if I connect to the console port.
fresh copper
Oh my god
An NDA
What secrets are the hiding in the firmware?
I mean, I do actually know but it still feels crazy
unreal wedge
@covert ibex sound shady af.
pseudo blade
For an NBN connection? Sounds like bullshit to me.
covert ibex
End of the day, it's only a job I've been asked to do, so I'm not signing it. and if it hasn't been fixed by Wednesday, they'll change ISP and get another company to deal with it.
Strict policy not to sign any NDA, and that'll never change
pseudo blade
@covert ibex Which tech type? Can you replace the router to sidestep this?
FTTP, FTTC, FW and HFC: cakewalk to use your own router unless they're handling VoIP. FTTN can be a challenge depending on the ISP because VDSL modems tend to either be terrible or insanely expensive.
covert ibex
@pseudo blade
Contracted voip. (Which is fine)
FTTC, NBN installed the line to the fax, so that's being a headache to change over because apparently nobody has the power to change it on the backend besides NBN.
pseudo blade
I'd probably still mirror, wireshark and portscan the WAN port of that router just to have a little look at what's going on. For reasons that are likely obvious I don't trust CPE where the ISP does stuff like this.
waxen scroll
@covert ibex i signed an NDA with marvell to get access to ubnt's cavium CPU infos
go ahead, sign it
whats the harm
muh MIPS
dim bay
im trying to find a discord bot hosting sever
covert ibex
@waxen scroll
If there's something on there though considering it's a huawei router... I'd rather be able to tell somebody without the follow-up issues.
waxen scroll
@clear igloo who else in here does networking for a big company?
strange silo
@waxen scroll Not directly as I'm in the system engineering team but I work with our network team a lot. What type of thing/info you looking for?
@fresh copper Pitty it's the chassis with the dvd drive wasting all those potential drive bays
waxen scroll
im just wondering. i do fortune 100 size networks. wanted to know if there are more of us who just dont talk
strange silo
Being from NZ 'big' is relative but we're one of the largest networks here. We operate 3 different campuses and have around 15k on campus students and another 15k extramural students
waxen scroll
these arent exact numbers, we're at like 300k employees, 9k buildings
the bulk is in america, with some exposures in europe and asia
strange silo
And we're around 6k staff 😄
education sector is so different compared to other places, the student count doesn't mean as much as it normally would for network users as BYOD and shared computer labs cuts down the size a lot
strange silo
we only have around 10k owned desktops/laptops
waxen scroll
for example, i suggested they change to a standardized network hostname that calls out if its domestic or international (this school was international as well)
so if you have illinois (IL) and Israel (IL) you dont get confused
D for domestic, I for international
oh man, i fought them hard over it because they didnt want the international people to feel like a step child
"they arent part of the US, they wont like that"
what. even.
i lost that battle
strange silo
what did you expect, IT has no actual power in education
I mean we can't even stop departments buying 100+TB DAS servers with no backup strategy etc because IT provided storage is too expensive
waxen scroll
they were fine calling routers names like "dallas" even though the location was in a city an hour away... and if you had multiple near dallas they made even crazier names
strange silo
but then we have to look after those servers they buy, put them in our racks, maintain the OS and configure them.... wtf
waxen scroll
hah
strange silo
also now the university has a huge hard on for putting everything in the cloud, yea good luck with that when 80% of our funding is capital grant and isn't allowed to be used for pay for subscription services
waxen scroll
we're doing that right now too
they barely have dev moved into it and the bill is coming in.... huge
prod hasnt even started
strange silo
'but it's cheaper because you only pay for what you use and can turn things off'
when is the last time things got turned off.... never
also can we have 5 different copies of this dev environment
running 24/7
waxen scroll
that arguments only works for sites like reddit where you turn more on to scale for an hour. internal apps? NO
strange silo
oh and this is not a joke
quote from our CIO: "We don't need backups in the cloud because the service is so resilient it's not required"
strange silo
nah we just told him that's stupid and not correct
waxen scroll
going to bed. see you later
fresh copper
@strange silo Weirdly enough, while it looks like there is a DVD drive, it appears that one is not actually installed. I was considering getting a SATA card and stuffing one of my large format drives (since this one only has small format bays) in the space where the DVD drive would be but then I realized that I don't appear to have a good way to power it. The weird right angle PCI adapter thing has what looks like a power header of some kind on it but it has nothing plugged in so I have no idea if it is an input or an output. I can't seem to find any SATA cards that have a port to take some slot power to power the drive.
strange silo
Yea HPE servers don't really support non standard configuration and have no extra cabling etc
Those are power inputs on the PCIe risers from what I know but I've never had to use them
fresh copper
Even the header for the DVD drive is some non-standard "SATA ODD" header. I'll figure something out. One of them is not going in a rack so I may just get some extra power from an ATX power supply.
covert ibex
@waxen scroll
Well if you ever get the option to hire somebody, msg me. ;)
bold karma
Anyone familiar with Asa 5505 firewall appliances?
hollow garnet
Hello i just got an old router from school(cisco1841)
but when i started the router and connected it to my pc via console cable it was in a rommon readonly mode i dont know what to do and how to exit this mode
clear igloo
@bold karma Yah
@hollow garnet You can do "dir flash:" and see if there is an image on it still
pseudo blade
@bold karma Most likely several of us, but in future please just ask your question rather than asking if anyone knows about a specific product. Much quicker for everyone involved.
broken cosmos
What's the best solution to not being able to reach a network cable? (One that's stuck in the ceiling)
pseudo blade
Find a way to reach it or run another.
broken cosmos
Well reaching it is about 1% possible, running another isn't possible at all
clear igloo
Perhaps one of those snake grabbing things?
pseudo blade
I suggest thinking about the specifics of your environment. i.e. What are the bandwidth needs of the far end, what are the walls made of, what's the ceiling made of...
Oh. And your budget.
running another isn't possible at all How was the first one ran?
broken cosmos
The environment, uhm a house which needs a cable from the top most floor down to the lowest floor.
Bandwidth: all we have xD
Walls are stone, drywall and wood
Budget: no expenses, the first cable is stolen from my dad's work xD
And there never has been a cable going upstairs. Always used one of those wall adapters things.
pseudo blade
all we have xD Assuming that is 5 baud or so, you could hang a light and a camera out the window on each side and transmit each bit as a flash...
thick minnow
Hello networking people!
broken cosmos
5 baud what?
pseudo blade
~40 bits per second
broken cosmos
Ehh that adapter thing had 7 MB/S
pseudo blade
Yeah, but what's your actual internet speed (in megabits/sec please)
I'll take the nearest power of 10 if you're uncertain.
broken cosmos
Eh,
Tbh no idea.
Highest i ever had was 250mbits
(Connected to the downstairs router directly on laptop*)
broken cosmos
Yos
It was
It's now completely downstairs because my dad just destroyed the fluffing wall
hollow garnet
@clear igloo So i did (dir flash:/) what image am i looking for
clear igloo
what's the output look like?
hollow garnet
clear igloo
Are you sure you have an 1841 and not an 1811 or something?
regardless, type (without quotes) "boot flash:/c180x-advipservicesk9-mz.124-6.T7.bin"
thick minnow
128MB.sdf looks promising.
clear igloo
Weird, it says 1841 but that's not the proper image for an 1841
thick minnow
Interesting...
clear igloo
All 1841 images are c1841-whatever.bin, 1810,11, etc are 180x, so I think someone put the wrong image on there and didn't know what to do after
thick minnow
I assume he could just, re-flash it to the default image/firmware?
clear igloo
Well there are two options, 1 is slow as hell and would take about an hour, the second requires a flash card reader
hollow garnet
welp i dont have a flash card reader i think
clear igloo
It's been a long time and I don't have any 1841s on hand but you might be able to ftp the image onto the box, I just can't remember if it supports that or not
hollow garnet
waxen scroll
i keep trying to hire friends, it never happens
people be flakey when they think its a big job
@clear igloo dat job comfort
now ive run out of jobs to give. people shuffled around internally and the jobs belong to a team i have no control over
pseudo blade
@hollow garnet That's where it gets tricky. Cisco won't provide it to you because the device is out of support and even if you were in support you'd have no support contract to obtain a reasonable firmware version.
pulsar crater
Hello, I've got a problem. My family blocks some web site on the network and I want to unblock them for my cumputer. So I search a way to resolve this problem on windows. I test to see the host file but nothing insteresting ,change the dns , change the IPV6 too and the mac adress but nothing happend . Does anyonr have a suggestion?
hallow nimbus
How about a vpn ?
bold karma
most likely is blocked in the router
pseudo blade
Hosts file and changing your local DNS isn't going to do anything for you.
VPN would likely work.
pseudo blade
26MB/s, 208mbps Certainly beats a kick in the pants!
NGL I'm somewhat jealous, we can't even buy vague claims of half of that here, much less realities.
broken cosmos
😅
bold karma
can't seem to bring up the web gui for my asa 5505 firewall...any suggestions. I've done the following:
ciscoasa#http 192.168.0.1 255.255.255.0 inside
ciscoasa#http server enable
ciscoasa#write mem
ciscoasa#reload
clear igloo
needs to be http 192.168.0.0 255.255.255.0 inside
bold karma
ok
thanks
still no dice....my router is assigning it an IP of 192.168.0.79 if that makes any difference
clear igloo
What's the interface configuration look like?
Do you have a route back, can the asa ping other hosts?
bold karma
it can ping my machines fine
waxen scroll
you need firewall rules for it dont you?
"http 192.168.0.0 255.255.255.0 inside" is not a firewall rule
i think if you did http 192.168.0.0 255.255.255.0 management, then it shouldnt need a firewall rule
but you would need to use the mgmt interface
*slaps @clear igloo
clear igloo
*slaps @waxen scroll That's why I asked for the interface config 😛
bold karma
not sure how to get the interface config...this is my first firewall appliance...I bought it second hand, and managed to factory reset it...so it's pretty vanilla
pulsar crater
Thank you for respond me
clear igloo
@bold karma 'show int ip bri'
'show run interface (whatever is the inside interface)'
bold karma
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset down down
Ethernet0/1 unassigned YES unset down down
Ethernet0/2 unassigned YES unset down down
Ethernet0/3 unassigned YES unset down down
Ethernet0/4 unassigned YES unset down down
Ethernet0/5 unassigned YES unset down down
Ethernet0/6 unassigned YES unset down down
Ethernet0/7 unassigned YES unset down down
Internal-Data0/0 unassigned YES unset up up
Internal-Data0/1 unassigned YES unset up up
Vlan1 192.168.1.1 YES CONFIG down down
Vlan2 192.168.0.79 YES DHCP down down
Virtual0 127.1.0.1 YES unset up up
ciscoasa#
clear igloo
What interface do you have plugged into your network? @bold karma
bold karma
i assume the vlan2 since that has the ip that my router assigned it
unreal wedge
@bold karma put that in some code brackets ```
covert ibex
that
pseudo blade
Well having your VLANs and interfaces set to down probably doesn't help. (You do have cables plugged in to it, right?)
covert ibex
@waxen scroll
NDA was apparently because they where trying custom routing for better speeds, and didn't want me telling people some of their internal network info.
Understandable, but still didn't sign it. Tech didn't care and gave me credentials to use.
Shame it's only dodo internet info. :/
@pseudo blade
Also, after 4 hours on the phone. 3 of which was on hold, and a million transfers to "higher escalation" teams, case managers, and specialist techs, it's all fixed.
And finally this damn network is looking like a real network again, and not some mashed up thing a hippie came up with.
waxen scroll
@clear igloo is the asa working yet?
waxen scroll
@covert ibex lurick has an NDA with me
thick minnow
probably not the right server for this, but does anyone know some good projects i can do on a small vps?
i'm wanting to host one with the cheapest plan on digitalocean, just for some fun but i don't know any other things i can do besides making a VPN or something.
fresh copper
@thick minnow have a look at https://github.com/Kickball/awesome-selfhosted for some ideas.
There are also some more full sys-admin stuff at https://github.com/n1trux/awesome-sysadmin
If you really like ssh for some reason: https://github.com/moul/awesome-ssh/
In general, if you want to do something relating to computers, there is probably an awesome-list to go with it. There is a list of those lists here: https://github.com/sindresorhus/awesome/blob/master/readme.md
thick minnow
thank you!
hollow gazelle
any reason why over night my upload speed would tank?
it goes from this https://www.speedtest.net/result/8154188709.png
to this
fresh copper
Maybe a lot of people on your node have nightly backups and your ISP (like most) don’t value upload speed very much because they don’t think a normal person needs it?
It could be anything
hollow gazelle
yeah because i bought this internet speed specifically for streaming
and it's kinda cuckin' me
they did throw up an outtage in your area" after i called them at 3 am to ask why i had 99% dropped frames, at they where confused
fresh copper
You have better upload than me when it works. I get 600 download but only 20 up if I am lucky
hollow gazelle
this has peaked once it like 800mbps, but i realistically get 45-55Mbps on steam
fresh copper
Perhaps it’s just a one time thing and no consistent if you have only tried it one night
hollow gazelle
its been three nights now
fresh copper
Hmm
hollow gazelle
ill let you know more after tonight.
fresh copper
Could be just about anything
hollow gazelle
they just had "outtage" in my area.
the crazy thing is you know when you go over your upload
or way over it makes games unplayable.
i didn't go above 25 ping while playing csgo and attempting to stream, with it trying to force my normal 3Mbps upload rate.
it just dropped every frame in existence.
i don't know :<
unreal wedge
Supposed to be equal, but guess someone's eating some bandwidth.
Think I found the oldest saved speedtest https://www.speedtest.net/result/101000000.png
covert ibex
@waxen scroll
About what? :P
waxen scroll
so i can share diagrams and configs from my company with him
glacial glacier
Has anyone built a DIY rack?
fresh copper
I have not myself but the most popular DIY rack is called the lackrack. Just google it and you will find a huge number of pictures and tutorials
glacial glacier
Do you know out of your head how much it costs?
I've found it, looks good too :D
fresh copper
glacial glacier
4,99€ damn thats cheap
fresh copper
It's just a table from Ikea so yea
glacial glacier
You know approximately how much weight it can hold? That's the only thing then that I'm concerned about
Planning to put in 3x 2U servers, not alot of hdds in them, some patch panels, a unifi usg and a switch
fresh copper
If you start from the bottom rather than the top then your should be fine but if you wanted to start from the top then you will need to add some form of support to the other side
glacial glacier
Servers bottom, switches top would be ok hopefully
Otherwise I'll add some steel to the legs
fresh copper
That should work fine
glacial glacier
Awesome :D way better than those 200€+ racks
Will just add some wood to the sides on hinges to let those open too, and the front some plexi if I can find it
covert ibex
@waxen scroll
Can I sign it just to see the configs? :P
fresh copper
I forgot how cheap they were, I almost want to pick one up myself
glacial glacier
I definitely will
waxen scroll
@thick minnow what grade did you get on that diagram
covert ibex
^also curious
covert ibex
I remember.
glacial glacier
with new gear I hope to finally get this to Gigabit, as I do pay for it 😄
unreal wedge
You won't exceed like 940Mb/s under Windows. Network overhead. Seen 1000Mb/s on linux, though.
glacial glacier
aww darn it
unreal wedge
Still higher than you can reach.
Windows doesn't play well with speedtest.net. That's my point, nothing else.
I use http://ovh.net
And feel free to explain why a linux distro can reach 1000Mb/s on the same computer Windows only reaches 940Mb/s on.
Believe what you like, I'm not here to argue with you; I'm here to state facts from experience.
You know people constantly complain about you, right.
Like seriously, at least try to understand what others are saying, instead of breaking the dbad rule to prove them wrong.
sonic raft
thanks, amazon
pseudo blade
What kind of cable testing are you doing?
little schooner
@pseudo blade so the Mikrotik router that you showed me is still going strong outside, even surviving -10 degree weather
It's currently serving a camera but I am surprised it didnt freeze up and crash
the thing keeps working and working and working....
pseudo blade
That's what they're designed for.
Remind me, that was a Powerbox Pro, yes?
Yup.
covert ibex
@ancient vigil
Gunna have to post a pic or two against you here agreeing with Dooley..
little schooner
@pseudo blade yes, and wth it goes up to -40??
pseudo blade
Glad to hear it's working for you.
little schooner
I ended up buying the bigger power adapter for it for proper poe delivery
pseudo blade
Yeah, you're powering a camera over it, from memory.
little schooner
Yes, I am hoping to increase that to three devices soon
just waiting for the summer months to start
pseudo blade
You know where to check PoE load?
little schooner
they had a utility... something-box, where it shows some stats
covert ibex
little schooner
its tucked away to a place I can't even reach it anymore
because technically it is using an AP-to-AP connection to power that camera and for the camera to talk to my network inside
but the powerbox does not have a route back up
pseudo blade
You don't need winbox to access anything, but if you prefer there's a few ways to get at the data.
but the powerbox does not have a route back up Not that hard to fix if you really wanted that data.
covert ibex
New issue..
Dvr has to go through two unmanaged switches.
It gets DHCP info, but the router doesn't seem to actually add it to the vlan.
I haven't tried static after adding the second switch, but before it didn't help so I don't see that working this time.
covert ibex
Noted info, router doesn't have any matching DHCP lease for the DVR, no arp table info that matches, but DVR is getting subnet info, gateway info and DNS info automatically from the router.
pseudo blade
unmanaged switches router doesn't seem to actually add it to the vlan That's because you can have one or the other, but not both.
covert ibex
Can't have switches and a vlan?..
The 8 PC's on the network are fine though, and they all run through the switches..
pseudo blade
The important word is unmanaged.
You can put an entire unmanaged switch on one VLAN by dedicating the router (or managed switch) port to it, but if you're trying to show the DVR a different VLAN to the rest of the unmanaged switch you're out of luck.
pseudo blade
@covert ibex In that case... what's this about VLANs?
You don't need (nor can you use) VLANs in this configuration at all.
covert ibex
Theirs also a phone vlan, but that's not configured for those router ports.
@pseudo blade
It's literally only the DVR that's having issues..
pseudo blade
Router handling DHCP?
covert ibex
Yup.
pseudo blade
Big enough pool?
covert ibex
/24
pseudo blade
Is the port on the switch facing the DVR negotiating?
Is a layer-2 link being established to the switch?
covert ibex
The pc on the same switch is getting access to the router.
I haven't tried going from that pc to the DVR though. That's tomorrow morning's first thing.
pseudo blade
I'm curious if the DVR is even talking to the switch.
My other thought: The DVR might have a static IP configuration already which it is using instead of DHCP.
covert ibex
Well it's pulling default gateway info, DNS info and subnet info.
Where else would that be coming from?
Auto DHCP.
pseudo blade
Pre-existing configuration, or a previous lease hasn't expired yet.
covert ibex
So lease info on the DVR?
pseudo blade
Possibly, if the DVR didn't see its link upstream go down.
covert ibex
It's been rebooted since.
pseudo blade
Triple-check to see if it has a pre-existing IP configuration and that it's connecting to the switch, as this sounds a lot like that.
After that, try connecting the DVR directly to a laptop, then run wireshark and look for ARP requests to see if it's ignoring your config.
covert ibex
It's definitely set to auto, as I had the last router's DHCP set the Mac to a static IP.
pseudo blade
I'm just saying what I see. What you choose to try may be different.
covert ibex
What's got me buggered, is if I move the DVR and directly cable it to the router, everything is fine.
pseudo blade
Keep in mind that all of this would be much easier for you if you went for a cheap managed switch for future deployments.
You have no visibility into your switches right now, which makes troubleshooting much harder for you.
covert ibex
I don't have the available funds at this worksite to buy more hardware...
pseudo blade
There isn't even much in the price difference.
covert ibex
They're $10 switches.
pseudo blade
If accessing that data is only worth $10 to the customer, just leave it unplugged and hope they won't notice.
covert ibex
And when you're trying to explain why a managed switch would be a good idea to somebody who doesn't know what a switch is to begin with.. it's all down hill..
pseudo blade
$40 out of your price range? This isn't even a good one, but it'd at least let you figure out stuff like this.
Well without having that visibility, you're forced to take a different approach.
Keep trying things until you find that's broken. It's either the switches, the configuration of the DVR, the DVR's hardware (believe it or not things do go bad at random times), cables, the router/config or your assumptions about the state of any of the above.
waxen scroll
ive tried explaining my job to normal people, it just cant be done.
pseudo blade
Sometimes they need to see everything bursting into flames for themselves.
covert ibex
The last time the internet died, he took a hammer to the router...
waxen scroll
i usually go "well you know home networks where you have a router?" then try to explain i do that on a large scale
covert ibex
"if I can't Google, nobody can".
pseudo blade
The guy who's contracting me wouldn't let me secure his network until he got hacked.
Then suddenly we had a time budget for security. Isn't it amazing?
waxen scroll
once you start saying its more complex than just a router or modem, thats where you lose them
covert ibex
He doesn't know what a router is.
Just that it's a box in an office he doesn't go in.
pseudo blade
I mean... If you can't explain what you're doing and why in simple terms you're going to end up with a shitty network anyways.
waxen scroll
the solution to that is not to work in small business
pseudo blade
They don't need and can't process every detail.
covert ibex
@waxen scroll
Job plz. 🤣
waxen scroll
we have no openings on any teams i have a say in
covert ibex
I was kidding. I wouldn't expect anybody to hire randomly off a discord
waxen scroll
hiring isnt that easy anyway. even if i said yes, you still need to go infront of 3 other coworkers who will figure out if you're good enough
covert ibex
Well.. kinda kidding..
Would like to change fields into something I'm more interested in...
pseudo blade
Anyways... This is a switch. It lets lots of people connect to the internet and the cameras without needing to run a separate cable for each person from the router, and lets us plug more computers into the router than we have ports. The router lets us have internet. We need a managed switch so we can find broken computers and equipment quicker and separate our cameras from our computers , so random employees can't log into the cameras and delete video while you can still see it from your computers. Not having a managed switch just cost you $90 in wages, and for that much money you could never have this problem again.
Oversimplifying, but you pander for your audience.
waxen scroll
infact i knew the manager before applying for my current job. he still let my coworkers talk to me and decide
😛
pseudo blade
You know, apparently something like half of all jobs go to people who "knew the manager" and the like, rather than actually being advertised.
covert ibex
@pseudo blade
"I'd rather you go do your job and come back to me when it's fixed."
waxen scroll
the funny thing is this one was advertised and i didnt know this guy was the manager. he went WTF when he saw my application and called me
pseudo blade
At that point they have basically permitted me to waste their money doing a suboptimal job, which I would then do without guilt until I could find a different job.
covert ibex
Without the DVR being accessable from his home pc, job isn't done...
pseudo blade
If possible I'd get it in email.
Yes, but the time you waste making it work is no-longer your direct problem.
I used to lose sleep over stuff like that and then realised that it was only hurting me.
covert ibex
I think you're missing the "small business" punchline..
pseudo blade
You'd still try to make it happen.
I'm not saying "oh well I'll just faff about and do nothing".
But it's clear at that point that your manager is either unreasonable or a strawman.
covert ibex
He puts tape over the cameras on his phones..
You decide..
waxen scroll
most of my job is having a business unit aware that they need networking for a new project of theirs otherwise it wont work.... so i dont have to explain almost anything. i tell them how much it costs, they approve or deny
covert ibex
He thinks Google blocks his phone internet when he connects to the work WiFi.
pseudo blade
If your company doesn't see you as valuable enough to take your word on requirements relevant to your subject matter, you're probably in the wrong job or otherwise not doing a good enough one yourself.
Tolerate it for long enough to find another that won't disadvantage you too much.
That said if you're not explaining yourself well enough nobody will give you anything. Make sure that isn't the problem.
covert ibex
Payroll takes my word, owner doesn't.
Guess what one approves purchases.
pseudo blade
What are they paying you per hour, and what country?
pseudo blade
Ah. A fellow Australian.
waxen scroll
😮
covert ibex
That's also overtime... And flexible hours.
pseudo blade
After tax makes things a little murky - Was actually trying to determine your cost to the business vs. their willingness to give you the tools to improve your productivity.
That said that's not a terrible amount of money for many places, unless you're really central in a big city.
covert ibex
Well, if I can make it easier, it costs him $120 an hour for me to stand there.
Oof*
pseudo blade
$120/hour Shit. And how many hours have you spent on this?
covert ibex
waxen scroll
covert ibex
That's including running cables in walls and roofs though.
pseudo blade
You're a licensed cabler?
waxen scroll
ur under paid
covert ibex
@pseudo blade
Fitter and turner/machinist with disconnect & reconnect.
pseudo blade
Huh. Neat.
covert ibex
Basically Electricians don't like me...
waxen scroll
xD
elec are overpaid
i got quotes to install a zwave light switch... they want between $150 and $300
covert ibex
Basically...I'm qualified and licenced to tear apart a CNC machine, replace any circuit board, servo or bolt, and rebuild it..
waxen scroll
was like NOPE. and did DIY
pseudo blade
Yeah if I was paying people that much an hour to set up a network I'd be mad not to toss enough money at the hardware to ensure you almost never have to come back again.
covert ibex
Didn't you see the switch I replaced when I started and they didn't have net?...
20+ years old..
pseudo blade
Did you send pictures?
covert ibex
I did.
waxen scroll
none of us saw them
waxen scroll
i remember that one
covert ibex
Well, list of things to try tomorrow..
- Check all cables.
- Check auto/static IP settings.
- Try setting static info, and pinging from pc on same switch.
- Wireshark with laptop connected to check for arp packets.
pseudo blade
And try Wireshark and see if the DVR's sending ARP requests just in case the behaviour of the NVR doesn't match with its configuration.
Yup.
That's about all I can think of right now.
covert ibex
I'll write a script or two and take my laptop..
covert ibex
You forgot "flexible hours". ;)
pseudo blade
An excellent point.
covert ibex
Off site hours only cost him my hourly wage, so payroll doesn't care about me using up to 5 hours of home work a week.
pseudo blade
A place I'm working for brought in IP agreements saying I can't do that.
So I have basically spent hours rewriting stuff I've already written from scratch.
covert ibex
Work programming for me is all X0. C0. Z0. Stuff .
Gcode isn't ideal for bash scripting...
waxen scroll
what i do is i go to the companies devices and run the commands that the script calls for info... then on my own linux system those outputs are dumped to text files, which the script calls as-if its the command
so then i know things work
when it goes to prod things dont go tits up
covert ibex
Imma head off.
Write some stuff and pass out. See how things go tomorrow.
pseudo blade
I was going to make a joke about you always knowing where you're at with Gcode.
covert ibex
G30 = reference home position...
pseudo blade
Go home.
covert ibex
@waxen scroll
If you live in melb, Vic, aus, sure...
waxen scroll
its a joke. fosters is marketed in america like its aus beer
i dislike beer. i need to be on the whiskey.
pseudo blade
I don't drink as a personal preference but most around me drink Coronas.
covert ibex
Corona, great Northern, Bundy or c draught.. those are about as Aussie as things get.
Vic/melb bitter are for people who are 65+..
But.. that's not networking. :P night.
pseudo blade
o/
waxen scroll
@clear igloo ROFL i just hijacked someone elses status meeting. Its 5min after and only 2 others are there. "Do you all have anything to talk about?" <No.> "OK then im going to give you back your time. BYE!" <Everyone hangs up>
rapid sentinel
clear igloo
@waxen scroll Nice 😛
midnight sparrow
clear igloo
Connect them together?
pine panther
https://www.speedtest.net/result/8175980904 come at me
covert ibex
LTE Vs Australian fibre. :/
thick minnow
How y’all Ausie’s getting fiber down there? I thought them fiber cables can’t bend more than 90 degrees?
#SorryNotSorry
#AustraliaJoke
clear igloo
#FlatEarthJoke
stark yacht
covert ibex
@thick minnow
Use polycarb and refraction to bend around corners
@waxen scroll @pseudo blade
Fixed.
Changed so each switch plugs to the router instead of switch - switch - router.
Also set static IP for DVR, and forwarded ports as needed.
All good now.
Gunna buy myself one of those cheapo managed switches mentioned last night for personal use for this kind of thing
thick minnow
@midnight sparrow Lol the answers are in the lab itself
Literally telling you line by line what to type
thick minnow
In my java class ATM.
waxen scroll
@thick minnow grade?>
thick minnow
For?
waxen scroll
diagram
pseudo blade
@covert ibex These are cheaper and better for diagnostics if you're just looking for a little box for diagnostics, but 10/100 only. (runs full RouterOS, includes tools for packet and socket inspection) https://shop.duxtel.com.au/product_info.php?products_name=hAP-Lite
Can be powered off a laptop also, from personal experience.
More bag-friendly variant: https://shop.duxtel.com.au/product_info.php?cPath=30&products_id=471
covert ibex
Might get one of each.
pine panther
i got fibre here but the contract is purging on the other year or so :(
frail sonnet
steady loom
Self hosted EBS basically
covert ibex
@frail sonnet
Looks over my head as I can't see a benefit..
waxen scroll
We love you @covert ibex !
little schooner
that's neat
covert ibex
@waxen scroll
So I'm guessing you see the benefit? :P
All I get from it is they're using old tech in a new way getting worse speeds to do something companies have been doing for years in clearly better ways.
But.. cheaper..
thick minnow
So I made a LinkedIn account.
I’ll work on filling it with relevant information over the next couple of days.
Still learning the ropes.
I’m also working on my resume.
Yaaay
waxen scroll
omg
i have one of those
pro tip for later... when you have more advanced jobs, you might not want to list them until you quit
linkedin is spammer city
they'll guess your work email and send tons of sales spam
when i listed my job, it took all of one day for them (bots or indians) to go guessing it and then next week all the spams started
got some weird blank emails from two indian sounding names
waxen scroll
@clear igloo why arent we linkedin official yet
fresh copper
I’m going to try to avoid LinkedIn for as long as I can though I suppose I’ll need it some day
little schooner
My teachers recommended starting to join it last week. Something about professional connections and networking opportunities with old coworkers and stuff
thick minnow
I was told it’s a decent resource to start.
I honestly probably won’t solely rely on it anyways, it’s just more of social tool in all honesty.
I’m going to my college job fair tomorrow to see what employers are there and to do information gathering.
little schooner
@thick minnow honestly, my school has a bunch of career fairs
if I were to bet, I'd always say everyone has a chance to find a job at least at one of them
even if job leads were super dry. You'd be hard pressed to leave the career fair without a new lead that would accept a candidate
my school does so many its crazy to hear why people cant find work after school
covert ibex
@little schooner
McDonald's is always hiring.
hallow nimbus
That
glacial glacier
Hi, I am looking for a UniFi USG-Pro-4, if anyone's selling it, in Western Europe, please do let me know 😃 trying to get it cheaper than €260,-
thick minnow
My network previder also gives us cable through the router if I use a different router will I still be able to get cable trough it ?
glacial glacier
Depends
My ISP provides a DrayTek router by default, though they are totally fine with me swapping it out for an USG, only thing you need to pay attention to, do they use special VLANS, e.g for me it is 300 for Internet and 640 for IP-TV, and what type of cable with what connector is coming in, for me it is SFP. So I need to have a router with SFP or a media converter
pseudo blade
https://mikrotik.com/product/pwr_line_us Well now we know, I guess.
Add EoP to an existing USB-powered Mikrotik for $29? That's a neat hack.
That said EoP devices in general have become absurdly cheap, this one's mainly interesting because it and this (https://mikrotik.com/product/pwr_line_ap) make installing APs everywhere very easy and relatively inexpensive for homes or small businesses where cabling might be difficult or impossible.
little schooner
@covert ibex yeah but so are insurance, startups, Healthcare, banks and school sectors too for IT over here
so your guaranteed a position somewhere with a STEM degree
can't say that about all states though
stoic tendon
uh so hi. i have a full web app i made, and i deploy it, but idk how. id like to know how to set up a vm or a vps server, and if on a vm, add some ddos protection or anything
pine panther
What do you all guys think about wireless antennas that offer me 50mbit download
Interestingly enough
Its by other internet provider bevouse they cant get the cable to here
Ive read that those antennas got 200km range
clear igloo
@pine panther If you don't need low latency and can deal with the fluctuations then it should be good
clear igloo
Depends on the provider and maybe see if you can ask what latency might be like on an average day perhaps it could be decent, never know
You wont' have like 2ms latency but maybe it's in the 50s or so
pine panther
Idc i want it all wired cus me being me i want thr fullest potentional of my internet
Everything else is bs
We have fibre
But goverment said fuck you
And not plugged it in ""
glacial glacier
if you really need wireless, take a look at Ubiquiti
Ive been using them for some short and long range stuff, they've got good gear, and atleast for the UniFi line, a VERY good interface.
And drotz, contacted the owner of the fiber lines, they can plug it in, atleast thats how it works here (The Netherlands)
covert ibex
I just wanna show two things to do with long range networks...
Those antennas require directional line of sight btw..
It comes down to 0.00536819375 ms per mile. So 124 miles times 2 = 248 miles. Times 0.00536819375 = 1.33ms
So take the AF specs of 2 ms and add the mileage ms of 1.33 and you get 3.33 for a 200km AF5X link.
@pine panther
What company, and what fiber speeds will you be looking at once connected?
covert ibex
@pine panther
Your purchased speed plan?
little schooner
what would you recommend if I needed a small computer for the purpose of just sending WoL packets at a certain time? raspberry pi? can EdgeRouter do this too?
fresh copper
Personally a fan of the Banana Pi
waxen scroll
Personally a fan of getting off my ass and pressing the "on" button
sorry @unreal wedge i couldnt hold it in
😍
unreal wedge
covert ibex
@waxen scroll
I thought you'd be the person to use WoL the most here. :P
waxen scroll
I've never used it once
You don't shut servers or computers off that you need remote access to
That's the rule
I'm also not or have ever been a sysadmin, so I have no need to wake anything for patches or whatever
sage moon
Is Frontier good?
little schooner
@covert ibex how do I install those package in EdgeRouter? is it like dpkg?
@waxen scroll I never was a sysadmin yet either but I'm on the sysadmin reddit a lot sometimes giving advice too
@sage moon They are good at ripping off my father by saying one price then increasing it by $60
sage moon
Ah, a fellow Kirby fan. We have Spectrum, but we're switching to Frontier because Spectrum is giving us issues. I'll try to make sure we don't get scammed
little schooner
@sage moon I think frontier is dsl internet. do they offer fiber in your area?
over here the only cable company is Comcast, everyone else is dsl or satellite
@waxen scroll I am going to turn off my server every night at 1am to save some energy and use WoL to turn it in at 8am
hehe surprisely, I can't find a way to automatically turn on my server via UEFI settings
it's a x11ssh ln4 motherboard. if anyone knows the setting if it exists ping me but from the manual I read, it doesn't exist.
pseudo blade
@little schooner *sneaks in* https://wiki.mikrotik.com/wiki/Manual:Tools/Wake_on_lan
covert ibex
@little schooner
Pretty sure you'll already have etherwake installed.
So just use that.
pine panther
i havent purchased anything
im looking for fibre to be availible cus me paying for fibre is less expasive than paying for adsl strangly
covert ibex
Fiber is usually cheaper.
hallow nimbus
Less maintenance
chrome hound
adsl 70 tech fiber 80 tech with advances being made
pine panther
also thing ive been wondering why "Stalna IP adressa" which translates to permanent IP adress is a good thing and why would i benefit from having it
what are the benefits of it over the "normal" ip adress
hallow nimbus
Its handy for portforwarding
pine panther
so its nothing useful for my parents i guess lmfao
thick minnow
Morning™
clear igloo
thick minnow
Sup fellas?
clear igloo
Finishing setup of my new alarm panel and then I get to run around the house pairing all the Z-Wave devices, lol
thick minnow
Oh ok, so I’m not loosing my mind completely yet. 😂🔫
clear igloo
or that might be Zigbee
Yah, Zigbee is 802.15 and Z-Wave is proprietary in the 800MHz spectrum
thick minnow
I’m finishing up the chapter of Networking QoS stuff.
“It’s better to be proactive, rather than reactive.”
clear igloo
QoS is one of those touchy subjects. You need it for voice and video but you don't want to be too heavy handed either
And then you get into 100Gb and 400Gb data center links and you really have to question if you even need it for the most part
hallow nimbus
😂 😂
thick minnow
Yeah agreed. There’s not really a point for QoS stuff on a SOHO network generally.
clear igloo
No point but I still run it xD
clear igloo
Damn right 😛
@hallow nimbus You think people would ignore queuing at that point and just mark packets but there are companies that would still want to queue on a bundle of 100Gb links =/
hallow nimbus
😂 😂
clear igloo
Literally using 40 of 48 10Gb ports and have 4x100Gb uplinks. It's like, WHY?!?! You're not over subscribing and you definitely won't have all 40 ports maxing out their links sending N-S traffic, there is going to be E-W within the switch pair =/
Some customers are just stuck in that old way and don't want to move 😦
hallow nimbus
Nope
little schooner
Also important to note that QoS is usually done by CPU so any line rate bandwidth is out the window once enabled
@thick minnow
If EdgeRouter could allow it to be enabled for some interfaces and not others, that'd be great
@pseudo blade I still have to get the powerbox connected somehow outside. Maybe some use of conduit and another hole in the wall
clear igloo
For low end consumer and prosumer stuff QoS is usually CPU but for enterprise grade gear it's all ASIC driven for the most part with minimal, if any, CPU hit
pseudo blade
600 mhz MIPS seems to net me about 100mbps max for shaping (though I advise no more than 75mbps for latency reasons). 200mbps is probably easy enough on anything MT7621A-based (880mhz dual core, 4 thread).
Bright side of living in Australia - Who needs hardware acceleration, the internet connection's slow enough it's the same speed regardless :P
clear igloo
lol
pseudo blade
My traffic shaper for home is an outdoor access point with a dead radio, doing router on a stick via its 10/100 ethernet port.
If 10/100 were a bottleneck, I would likely not be shaping :P (or living in Australia, NBN above 100mbps is near unheard of here).
NAT, DHCP, queueing on it's 600mhz CPU. 100mbps is just about possible, though I have no faster uplink to test it to its fullest.
clear igloo
Is it 100/100 at least?
pseudo blade
50/20 is the max you can buy here, and that's what they market, not what you get.
clear igloo
Dang 😦
pseudo blade
Until recently 3 down 10 up was normal at peak due to congestion, they did an upgrade so now we see 6 down.
100/40 is the faster tier available in cities if you're close enough to a VDSL2/HFC node or lucky enough to have FTTP from before our government canned that.
Symmetric connections are only for companies paying lots of money here.
pseudo blade
Government monopoly wholesaler. Consumer protections are set up in such a way that you can only target the distributors (RSPs, like ISPs but with no infra), who can't do jack shit, and you play a game of telephone forever back and forth via your telco to the NBN and get ignored.
AKA talk to the hand, their official announcement is no upgrades for FTTN locations bar fixing outages until 2040.
covert ibex
@pseudo blade
About as good as it gets.
And why are you up at 3:30am on a Saturday?..
hallow nimbus
Because he can ?
fresh copper
Fastest I have gotten from my server:
http://www.speedtest.net/result/8178525260.png
fluid sigil
Hi I have a question, I have an LRT214 router from Linksys, and I was wondering for the dhcp server should I use dns proxy, which seems very quick, or use 1.1.1.1, or isp dns.
I want to know the pros and cons of doing this
pine panther
Fastest ive gotten was 17.52down 0.81up
covert ibex
@fluid sigil
Most ISP DNS route to 8.8.8.8, so I wouldn't bother using ISP defaults.
Manual configs are completely up to you if you want to use them or not. If it's not DNS over TLS/Https then their all pretty much fair game.
DNS proxy's are used with vpns to make sure your IP isn't leaked if a VPN loses connection for a bit. resolution speed can be impacted with this option.
I could be wrong... But that's the general overview.
little schooner
@covert ibex would you say that dnsmasq is also a dns proxy on the EdgeRouter?
waxen scroll
no ISP DNS route to 8.8.8.8
they run their own shit which talks to root DNS servers
little schooner
are root dns servers globally managed by more than one country?
and how do they decide how much each controls?
glad ferry
Companies will be in charge of a root server
For Example VeriSign operates and maintains server A and J
fresh copper
Some roots only have a small number of servers and some have many
Often times they are placed in IXPs
ISPs won’t route to public DNS services because they don’t have an SLA
glad ferry
Yep. ISPS will always go to the root servers
subtle glen
Found an open GPON rack, what do I unplug?
https://youtu.be/Ud6KhT7N3cU
little schooner
@covert ibex @pseudo blade thanks for the WoL suggestions. I ended up using Etherwake since it is in fact pre-installed on EdgeRouter which is super nice
did a test on a desktop machine and it works great so onto configuring the server to shutdown after doing backups
!!!
covert ibex
@waxen scroll
Did say I could be wrong. :P
devout anvil
covert ibex
@little schooner dnsmasq as far as I know, you'd think of as a small scale DNS caching server with additional features, but I wouldn't recommend it on anything the wrong side of a firewall.
(Think theirs a new security concerns with that)
I could be wrong about that too...
outer nexus
Hi all 😃
I am upgrading my network (Home / Office) And need to buy extra network cables. Should i go for STP or UTP. Prices are the same.
The Switch ,and router is close to a power installation if that makes any difference 😃
thick minnow
UTP is (Unshielded Twisted Pair) STP is (Shielded Twisted Pair)
UTP is most common, but remember it's copper so you're not going to have fiber levels of low latency.
Plus, you're going to have the potential for EMI with the UTP. STP is supposed to help mitigate that.
End the end, it's up to you to do your research and due diligence.
Best of luck to you @outer nexus. 👍
clear igloo
Define "close" and what kind of power installation? Like is it sitting 2cm from a city wide power distribution plant?
Or are we talking a few meters from a home power panel
thick minnow
@outer nexus Watch the video, it may help you.
Around 4:10 in is where I recommend you skip to.
outer nexus
@thick minnow Thank you 😃
@clear igloo 15cm from 2x household power panel for 220v and 400v
fresh copper
In my opinion, UTP is probably fine. STP is for being next to elevator motors or inside power distribution plants. The AC in your house, even 220v and 400v probably won’t cause any issues. That being said, sometimes it’s better to be safe than sorry
outer nexus
@fresh copper Thank you 😃 Think i will go for STP. "better to be safe than sorry" . And the prices are the same (for some reaason). Thanks all
clear igloo
One question @outer nexus What kind of cables/from where? I ask because if you're getting just a spool of cable then make sure it's pure copper and not CCA (copper clad aluminum) or if you're getting really long preterminated cables as well check to make sure they aren't CCA either as that can really make things a pain and they tend to break very easily
outer nexus
@clear igloo 😮 Dont know if its CCA. have to do more reading about this 😄
@clear igloo Think they are CCA, because its does not say "CU" or anything else that would indicate pure cobber.
clear igloo
Can you post the link?
outer nexus
https://www.proshop.dk/Netvaerk-kabel/LAN-STP-CAT-7-White-1m/2463160
https://www.proshop.dk/Netvaerk-kabel/LAN-UTP-CAT-6-White-1m/2463062
@clear igloo
clear igloo
@outer nexus Ah, at 1m it wouldn't really matter much if they were but if you want to be sure see if you can find anything on the manufacturuer's website
outer nexus
@clear igloo Havent messured the lenght i need, but will be getting some 1m. and i think some 30 meter.
Will contact the store on monday to make sure what i am buying. 😃
clear igloo
Ah, yah, at anything over a couple meters I would definitely want to make sure they were pure copper 😃
thick minnow
good NIC for pfsense? 10 gig preferably but 1gig is ok. Lots of sites telling me lots of different things lol.
thick minnow
Looking to do basic firewall and vpn. Seen a lot of good stuff about intel I350 but maybe a little out of my price range.
unreal wedge
I run a virtualized pfSense.
thick minnow
Not looking to virtualize. Maybe someday in the future when i have more disposable income 😉
I was looking at the Aquantia nic from today's video but the drivers have me a little concerned
fresh copper
Do you want an 8P8C port (often called RJ45) or SFP+ for 10G?
thick minnow
8P8C
fresh copper
I don’t really have any good recommendations for that unfortunately
thick minnow
Intel seems to be the best(?) but the aquantia 10g nic for $90 seems to good to be true
unreal wedge
I have an Aquantia 10G NIC, works fine.
fresh copper
Intel is usually one of the best for NICs but I would think that the Aquantia would be fine
thick minnow
Aquantia it is then! Thanks for the help guys.
Just to clarify, thats in a pfsense box right? I don't want to mess around with drivers too much.
unreal wedge
My pfSense is in my PC not where the pfSense is.
fresh copper
You won’t have any driver issues
PfSense has drives for most networking devices and PCI based network cards use a standard protocol so it should work with any modern operating system
thick minnow
Oh awesome. Didn't even know about the standard protocol.
fresh copper
For example, a PCI based wifi card will probably not need a driver but unless you are on Linux, almost any USB wifi adapter requires a driver
thick minnow
Should be pretty straight forward. Anything else to look out for when configuring the rest of the hardware?
*for pfsense/nic
little schooner
was going to say that the aquantia 10g nic does have have support for vlans but since pfsense is software firewall, suddenly it has support for it
steady loom
@fresh copper It's annoying trying to speedtest servers, very few speedtest hosts can keep up 😦
fresh copper
That’s true
The IP of my server is set as the other side of the country so I have to manually select a server
I should really get around to having the GeoIP updated
still gazelle
hey guys, what benefit can I expect over a tp-link archer router with an asus router, 5k and under? I have a 3 router setup for now and tp-link seems to be pretty unreliable at times.
my issue is the G-PON/ E-PON box is working fine, no red lights. But the tp-link routers just don't get the WAN working often.
I reset the router, restore factory defaults and it works, but today it is being especially assholic, I have reset 7times and its getting the same issue over and over.
5k INR* $60ish
covert ibex
Tp-link archer is a standard ISP router.
Without more info about router specifics, I'd be using WiFi extenders instead of more routers.
pseudo blade
@outer nexus @clear igloo Found details provided that suggest that Goobay (the ethernet cable manufacturer) use CCA. Be wary.
Actually illegal to install it for telecoms use where I live in Australia. Up to a $13,200 fine if you attach it to a telecoms network, $11,000 for supplying CCA ethernet cables for use by customers, an additional $11,000 if you label it as being compliant with Australian standards.
clear igloo
Wow, good to know 😃
pseudo blade
They're really bad. Main reason they've made it illegal is that it's a potential fire risk, particularly if you're using PoE over it.
Also a crap experience all-around for data usage.
clear igloo
Yah, just surprised the fines are so high but it makes sense to keep that crap away
pseudo blade
I think it also breaks the CAT-whatever standards, so you can't call it CAT5/5e/6/whatever.
clear igloo
That would make sense, wish they would get smacked down on Amazon and the like for labeling it as CatX
pseudo blade
Place I've been contracted to buys cables from China, and if we get a new supplier I will take what they ship us and split them to check if they're actually proper copper or not. No issues so far to indicate bait-and-switch after our first batches so far.
Pretty much every cable we use is for outdoor use and with PoE.
waxen scroll
outer nexus
@pseudo blade Thank you for providing the information about the Goobay cable.
fresh copper
Crimping is so fun though.
There are ways to do that but it depends a lot of the ap and setup so I can’t say exactly. It’s not very common but I see it in schools a lot
unreal wedge
I can only use a passthrough crimper. Won't bother with the rest. Passthrough can't be messed up easily and always crimps right the first try.
covert ibex
Talking about catx crimping?
unreal wedge
Whatever the crimpers are that pass the wire through the head of a CAT5/6 ending, then perfectly terminate it.
covert ibex
Yeah, that's what I use. Makes life a lot easier.
That, and a distance reel so you run the string where you're going to run the cable, and it tells you how much you've unreeled, so you can either make a cable, or if it's close, just go buy one.
little schooner
@covert ibex a distance reel?
covert ibex
I dunno where I picked it up, but it's basically a digital meter wheel with a roll of string/rope instead of an actual wheel.
little schooner
@covert ibex that actually sounds really useful, something I might want
I know the eth cable has feet markings but I don't really like looking at those
covert ibex
I just run it instead of the Eth cable, and if I have one the right length, I tape it to the end, and pull the Eth cable though.
If I don't have one the right length, making one becomes 0 guess work.
little schooner
0 guess work saves time, I see the value already in that
waxen scroll
idk mang
i use standard rj-45 ends and never have issues not terminating them perfectly
you should be keystoning APs anyway
but they're usually on a drop ceiling where that makes sense, on a drywall ceiling i would probably still keystone if possible, but that box would be hidden in the ceiling or attic. its ugly to keystone the ceiling and then run a patch cable in public view to the AP
little schooner
@covert ibex does it come with the rope prefilled at a certain length?
I'm trying to find it but I don't think I'm hitting the right things on Google
@waxen scroll with pass-through eth ends, does it matter if you don't cut the jacket off at least 0.5inch?
because now you can just cut a little and it will be perfect anyway
waxen scroll
if its passing through, i would cut excess jacket off
little schooner
when it's in? or before you put the wires through
waxen scroll
before
little schooner
okay just making sure
because I have standard ends but didn't know it applied to pass through too
that's the part I mess up on a lot
waxen scroll
i have specialized tools for wiring, so passthrough or standard, doesnt matter, its quite easy
little schooner
I either cut too much or too little
covert ibex
@little schooner
If I remember I got it from a $2 superstore.
No idea if their a major product that was ripped off or not
little schooner
okay @covert ibex. I will just have to keep an eye out too for one
maybe I'll get lucky and find
waxen scroll
the key is getting all of those wires flat, then in the proper order after the jacket is removed
my scissors are rounded, so you rub the wires across it and they get flat
little schooner
I've been bending them with my fingers but I'll do that instead
that's the part I dislike the most
flattening
little schooner
on the edge? the ridges?
waxen scroll
little schooner
yeah that
covert ibex
Could make one with that, and a fly fishing reel on the side.
That's basically what it looks like.
covert ibex
If it wasn't a tachometer...
little schooner
@waxen scroll so you literally just roll them across the edge when they're separated?
waxen scroll
yep
little schooner
@covert ibex oh it says it can do both, it's length measurer
so I'm looking for length measure feature mainly
@waxen scroll hmm nice thanks
waxen scroll
my parents are visiting and want cat6 to their rooms for their tv boxes
kill me
i gotta run wires 3 floors up to the hot attic which is hard to move in... then the jacks are on outside walls, so theres insulation
covert ibex
@waxen scroll
Eop...
waxen scroll
@unreal wedge i have to buy wire lube for it too... plastic micro beads
im paranoid as fuck of those
covert ibex
Surge protector + eop.
waxen scroll
gotta get my OSHA stuff out ;p
i could try eop, but theres a lot of limitations to it so im not sure how it will go
i have a house that has long wiring and a box that has like 30 breakers in it
im set up to have many cat6 runs already but its the logistics of once you get near the room at the end
covert ibex
Can't just range extender and gimic a cat6 to the targets?..
waxen scroll
we tried that once and it didnt work well
i dont know why these devices are so sensitive to not having a true wired connection
waxen scroll
i did change my wireless to a 5GHz which nobody around me is using since he left last year
so maybe that will help IDK
little schooner
when I get my fiber installed, I will ask the techs to also do the work of centralizing the panel and modem to be in the basement