Yes
#networking
waxen scroll
hollow marlin
/20 is the limit. Broadcast are not as big of a problem people make it out to be. But depends on situation
hollow marlin
What are you looking for? I don't get what you mean by recognize
If it's a managed port. Is the port no shut?
I would assume you tried another cable or pc into the same port on the router?
I still might think its a cable issue with mdix
pseudo blade
Might not have crimped them properly.
little schooner
@sudden void I think I've messed up three but I was able to notice it because the wires would always come out when I went to test them
Also I've seen the situations where one pair was broken and that caused a switch to negotiate 100mbps link instead of 1gbps
That situation was in a networking security lab and for the past 2 semesters all the computers were running on 100 mbps
covert ibex
@little schooner
I'd rather be looking through wireshark at 100mbps than 1gbps. :P
pseudo blade
Nah, I can always pause the capture. I'd rather have a gigabit of throughput.
nbn co please i beg of you justify my routing and switching equipment and legitimate bandwidth requirements
little schooner
Our new plan is to have every computer have all the resources needed for the semester on their local pc to cut down on downloading from the central server
It bottlenecks faster than a Ferrari driving down the Florida keys during the summer of 1993
thick minnow
What type of Ferrari you talking about? Maybe a Dino. lol
hollow marlin
I think it would be less work to just fix the central server
little schooner
@hollow marlin it isn't because we won't have 10gb nic on server
Just three PCs downloading brings the whole network down now
For 30min
And since they are VMs, they are static for a semester anyway
hollow marlin
Shaping or QoS would solve that
little schooner
@hollow marlin still wouldn't, it cuts into instruction time and students have to keep asking teacher for help
They wouldn't be able to follow along the lecture while it's downloading
The best solution is give all the tools local and remove the bottleneck until more money can be asked for
We're talking like 20 VM templates with isos
hollow marlin
Oh. Well then lol
thick minnow
Bottlenecks suck.
I should know, because my neck looks like one.
#NerdHumor™
I would recommend checking out
r/ProgrammerHumor
Decent subreddit.
thick minnow
I'm no network guru by any means but would caching help at all?
thick minnow
Whoops stupid question. Didnt fully understand the scenario 😅
The bottleneck is the connection itself, not the actual server right?
humble quarry
If I run a 8-port gigabit switch to my router, I can plug devices into it and they'll be fully networked? just looking to get a hardline to a couple devices across my house.
hollow marlin
Yep it will work just fine
humble quarry
noice
thick minnow
Just make sure the devices can take advantage of the gigabit speeds that you have.
Most NICs have a maximum theoretical throughout(Older NICs generally), make sure that the NIC in the devices you are plugging into the switch can utilize it, otherwise it’s kinda of pointless to do that.
hollow marlin
100/1000/10000....doesnt matter. Wired is always better
thick minnow
^
Wired Ethernet if implemented, configured, and maintained correctly, Will almost always be better than any wireless standard.
Watched the LTT video on WiFi 6, sounds like an interesting upcoming technology.
Now scriptkiddies can break in your APs even quicker. 😉™
hollow marlin
It definitely is. But until EVERY device on your network is wifi 6 enabled it will never be fully utilized. Linus really forgot to bring that up
thick minnow
Exactly, it’s not even that practical as of yet. Maybe only for corporate/business.
IIRC the wireless standard for that is 802,11AX?
hollow marlin
I dont know why it so hard to make things simple for IEEE
b/g/n/AC/AX
what you smoking
thick minnow
It’s because they’re engineers, they only change the naming schematics because they think most average people are to dumb to even remember and or care about the standards.
lol
Laughs in 802.X
hollow marlin
collision "please retransmit"
hollow marlin
Something like that. I stay away from wireless as much as I can lol
thick minnow
I feel sorry for the guy that has has to design, implement, install, configure, and manage the Wireless APs for a a corporate network(s).
Not to mention making sure that channels and frequency’s don’t overlap, and also make sure there is no EMI interference.
Oh did I forget to mention that they probably have to make separate VLANS and Subnets for each of the separate wireless networks?
That guy be like: 🙂🔫
ornate jungle
Huh? No he not be like that? He just buy UBNT gear and call it a day. Because UBNT is ❤ is life.
hollow marlin
I listened to a few podcast of guys designing stadium wifi. Long story short is all wireless is shit, its all the clients fault
@ornate jungle Ubi is nice but not mean fore medium to large enterprises
ornate jungle
I agree there; didn't mean to construe that UBNT is the be-all end-all to distributed networking, because there are a bajillion companies making networking gear out there, each with their own implementation depending on your requirements.
thick minnow
Wireless is a popular thing only because of its convenience over traditional wired Ethernet.
But technically all wireless networks eventually connect to a wired network somewhere, so it’s really just wireless Ethernet wired networks. Woah amazing right?
ornate jungle
Yup, something like 85% or more of cellular networks are actually wired. (I don't remember the actual %, but it's up there.)
thick minnow
Wireless from the standpoint of security makes me want to cry.
Big OOF.
Alright goodnight guys.
hollow marlin
see ya dude!
thick minnow
I will return in: 
half valley
speaking of wireless, was just reading a thread on r/sysadmin about the user wondering whats it like to be in charge/working IT on a cruise ship
pine panther
@half valley trust me feels like shit
half valley
i've read the comments, doesnt look too fun
the pros/cons balance out? or is it uneven? @pine panther
pine panther
Read more theres a lot of bad things and good things and its not easy :p
half valley
covert ibex
@thick minnow
Unless it's true mesh.
hallow nimbus
👀
thick minnow
So... they are integrating ubuntu in their terminal... why?
thick minnow
Easier to build things on linux than windows or mac
They already did it with wsl but had some stability issues
covert ibex
Think it's more like live VM running.
But interesting that Microsoft have decided to openly add Linux distros to marketing their own os.
broken cosmos
How do i get faster internet without upgrading my ISP????
clear igloo
You don't
thick minnow
@broken cosmos That’s not how that works bud, your ISP only provides you speeds with whatever plan you’re paying monthly for.
Most residents will not have an SLA where they need almost always perfect guaranteed speeds.
There are other factors to consider as well however, I would recommend watching a few videos on YouTube about optimizing your already existing SOHO network.
hollow marlin
Just don't dig too deep. Only so much you can do with the bandwidth you have. Most of it doesn't net any performances or can hurt it
fresh copper
Yea, we all wish that we could get faster speeds without paying but sadly it does not work like that. The only way to truly bypass the ISP to get more speed costs ridiculous.
Here is a cool article that I like on how to get the most out of the connection you have:
https://www.speedtest.net/insights/blog/maximized-speed-non-gigabit-internet-connection/
keen citrus
I think Vossie probably meant how to get better connection if ISP is 24mpbs and heshe gets 8 etc
fresh copper
They gave almost no details so I had to assume
little schooner
Assuming is how the election results were determined
fresh copper
There is an almost unlimited number of reasons why you might get a lower speed than you pay for with some being out of your control. I can try my best remotely but with my own customers, I always visit their home to try and solve the issue. This type of issue is hard to solve remotely due to the sheer number of possible issues and things that it depends on
thick minnow
Exactly, way to many variables.
People should just be glad they have internet access in the first place, there are many places and people in the world that don't. Let alone clean drinking water, or access or proper food.
🤔
chrome raptor
that terminal is hot. Like took them years for that. Also adding debian based distros might boost security in the future
unique crypt
any network people here?
unique crypt
lol
im trying to get better speeds since I pay for 150 but kinda only get 43.19 as of right now download up is10.82
just had a person come in
put a new line in
but only get around the high 100's when I am next to the modem
wireless
but down in my office (which is in the basement i get around 50mbs)
on 5Ghz channel
less on 2.4
fresh copper
Well, there are a million reasons why that could be.
The access point could be not very good.
The device itself may not have very good wifi hardware.
The wifi channels may be congested.
There may be a lot of metal around that reflects the wifi signals causing interference.
Other devices that operate on the same frequency like microwaves and cordless phones may be causing interference.
The ISP may not actually be giving you the correct speed (which they can do unless you have an SLA which is extraordinarily unlikely).
The ISP may be congested meaning that during off peak times like the middle of the night, you get the full speeds and during more congested times you get slower speeds.
The speedtest server may be many hops from the ISP due to bad peering.
The speedtest server may not be able to handle the load for some reason.
And many many more. It's hard to do remote help with that kind of issue because it could be so many things. Those are the main issues to consider.
This article is really great for the last little bit of optimization but may not be helpful to you until you can get up to 140ish https://www.speedtest.net/insights/blog/maximized-speed-non-gigabit-internet-connection/
unique crypt
That is where it is at
well im on the only channel for 5ghz
and there is only one other channel on the 2.4
this is what shown to me
when I look it up in issider
fresh copper
That's very weird that it only gives you so few options. Usually there are 3 main channels on 2.4 and quite a few on 5 (depending on if the ap can do radar detection or not)
unique crypt
my 2.4 readings
covert ibex
@Symona#8344
Possible to add a cable?
unique crypt
you mean lan cable?
thick minnow
@unique crypt You probably are just physically to far away from AP hence why you’re getting slower speeds.
I’d recommend using 2.4GHz Bands on older devices since they typically will take better advantage over that then 5GHz.
Depends on the device though.
I would always recommend going wired over wireless if you can.
Some newer desktops come with WiFi enabled NICs but I generally just disable it for myself personally.
I prefer wired, more consistent speeds and none of the wireless problems to deal with.
thick minnow
What's the issue with using ookla to test network speed? I remember linus mentioning it in a video but i cant seem to find it.
covert ibex
@thick minnow
They can't provide high-bandwith speed tests.
Doesn't effect the general user, but for enterprise tests, and setups like linus', their servers don't have the top send/receive High enough.
If I remember correctly
empty flint
@covert ibex you're correct
fresh copper
Oolkla did a blog post recently about 10G speed tests and they showed that in their perfect testing environment between directly connected powerful devices, the speed was only 9.9G. It gets much worse when there is actual networking gear in between and when Jumbo Frames are not used
This 6-9% loss just on overhead can effect any speed test. There are other reasons why speedtests are not the best
Because the internet does not “come” from anywhere, you may get faster or slower speeds to the speedtest server than any specific service. That why it’s nice that fast.com is on Netflix’s servers so you know what speed you will get when accessing Netfix rather than hoping your speedtest will be accurate for that service.
hollow marlin
Speedtest is good because you are actually using the internet. Sure a server might get bottlenecked time to time but it gives a realistic view of a network.
Iperf is good during testing but just doesn't cut it for the "feel" of the network
little schooner
I just experienced the good ol reply all fail for one of my marketing classes
hollow marlin
reply all please remove me from this coversation. Send
covert ibex
"send all" sorry, wrong number. "Send"
fresh copper
When using speedtest always be careful that it’s not a test to your own ISP’s server because many ISPs have speedtest servers. Depending on what I am testing for, I also like to try to get one that is not directly peered either which is helpful for checking if the ISP is overusing their transit link which may be why smaller sites are slow when large ones work fine.
I’ve got some annoying reply all issues before
Some guy on a mailing list I am on stoped working at their job so every time someone sent anything to the list, it would auto-reply, back to the list, that they no longer worked there
waxen scroll
Silly bryce
Speed testing is done to confirm you aren't throttled, and that occurs near your modem usually. It's best if tested on your isp speed test server and not outside the network where anything goes
I don't pay to have 10mbit constant to level 3, I pay to have 10mbit to my own providers backbone
fresh copper
It depends on why you are doing the speedtest. You might be doing it to confirm you aren't throttled but it's hardly the only reason someone might do it
strange silo
Anyone here participating in the boinc event?
covert ibex
I can if you send all the relevant info on installing and configuring. :P
hollow marlin
Bionic event?
covert ibex
You can now get 1gbps connections in Australia.
Minimum cost, $878.90 a month.
Yes. A month.
hollow marlin
Jesus. We have 10gig customers not paying that much
unique crypt
what would I do for increasing my wi fi strength so a stronger signal gets to other places of my house?
unique crypt
#chirp
pseudo blade
Replace router/buy access points (APs) and cable them in/repeat the wifi.
Or some combination of these.
waxen scroll
@clear igloo bby hi
little schooner
Do you think this is a good plan?
VLAN 1 for all student desktops, printers
VLAN 10 for Servers
VLAN 11 for isolated lab environments
I was just going to use a /24 of 192.168.x.x for vlan 1 and 10
fresh copper
Usually VLAN 1 is usually reserved for a control or maintenance VLAN
little schooner
So, should we make it vlan2 or just put the other unused ports in vlan 300 or something
@fresh copper
Also, I'm trying to find a sensible way for splitting ports to be associated for vlans
I could do 1-40 vlan 2, and 41-44 as vlan 10
Or should 1-4 be for Servers and the rest for vlan 2...
Choices choices 😶
hollow marlin
@little schooner if this is production try to make the vlans mean something.
modern garden
For any IT worker that happens to have nothing to do tomorrow in Amsterdam.
https://techtalksummits.com/event/amsterdam-netherlands/
fresh copper
@little schooner Usually I try to stick to VLANs above 10 because some switches decide that some of the lower ones are "special" and can't be assigned normally but if none of the switches you are dealing with have that then it's fine.
thick minnow
This is how to do 1 VLAN yes?
IDK why my Print Screen images always look blurry.
Snip and Sketch FTW.
So is that how one would go ahead making VLANS?
hollow marlin
@thick minnow depends on the network. Dont just do 10 for employees, 11 for management, 12 for voice. Leave room for upgrades. Do 100, 150, 200 instead. What if next month your employees need a lab network? Well instead of making 14 antoher employee network, you can make it 101.
When designing, think about how you would handle just starting and having to grasp all those vlans
thick minnow
What about just increments of 10? Like: 10,20,30,40,50 etc..?
9 vlans extra per 10.
MATH 100
lol
hollow marlin
Again all up to your design. 10 is plenty but I have seen some custom make full use of 3000+ vlans
thick minnow
Yeah umm, my professor said I can use the exact same subnet mask for everything so....
I don't need to do that. lol
Updated VLANS and Subnets for the Main Branch.
How does that look?
Decent I hope?
hollow marlin
Down forget to care over you subnets also. Like vlan 5 10.0.0.0, vlan 15 10.0.10.0....so on.
And no you don't need to have the same mask throughout.
thick minnow
He said I could.
I want to do that. As of right now, I'm using 255.255.255.0 or /24.
That yields, 65K Subnets and 256 hosts per subnet.
I want to also use the class C network.
I could do class A or B, but meh.
hollow marlin
Learn classes now, but know that in the real world classes are no longer a thing. And yes, /24 I'd perfectly fine. But don't shy away from using a/22, /23
little schooner
My professor said he wanted to use /24 because he doesn't know who will inherit the network next and he doesn't like the added complexity.
But okay yes I think Ill suggest to him to use vlans 10 or above.
I do remember some net gear switches just had to have some vlans for 5, 6, etc
And it couldn't be changed which is very stupid
fresh copper
Please please please never use classes. A lot of people use classes for size but they also meant the range that a prefix was in. It can easily confuse people because some people know how they work and some people think that they just mean size.
Just don't do classes
hollow marlin
@little schooner if your professor said anything other than a /24 is too complex he shouldn't be a network professor
little schooner
@hollow marlin hmm, I'm not sure. I guess that's what he wanted
On the flip side, without documentation, I definitely see how dangerous this can be like Bryce explained
Basically the room is stringed together without proper docs
@hollow marlin ohh and he recently renewed his CCNA
And got the cyber security cert too so he could teach netacad courses
thick minnow
Does he have practical experience?
Also question for yall. Got the itch to start studying for my ccna but I have a concern about how my current resume will work if I get my ccna while I finish college while working as a concierge. I assume most companies would want you to start in help desk of some sort for experience so my question is should I get the a+ or going straight for ccent and ccna cover me to start?
hollow marlin
Ah yes the experience paradox. Go CCNA then apply for NOC help desk.
empty flint
@thick minnow Not really answering your question, but if your college has career fairs, go to every one that seems relevant. It's a great way to paper over a bad resume and make connections with people who know you have what it takes without a piece of paper to convince them.
little schooner
@thick minnow well he teaches the hands on lab portion of the course too
He loves teaching Lan management with windows
But I'd argue he loves teaching ethical hacking with kali and autopsy just as much
thick minnow
@little schooner thats cool.
@empty flint I take classes online with the college being many states away.
empty flint
oh nvm then
There might be conferences/conventions/whatever in your area you can go to, those are also good networking events
little schooner
I know my university has several opportunities for work or getting experience
They have job postings and fairs time to time
thick minnow
hmm. I'll have to look for some. I have some IT professionals at my church that I can probe their minds for where to look for fairs and such
little schooner
We had like 45 companies show up for IT
thick minnow
oh dang thats cool
empty flint
My school's general tech career fair had roughly twenty billion companies
or at least it felt like that when I helped set up the tables
thick minnow
my city and its surrounding suburban areas has been dubbed the second silicon valley so there is plenty here.
empty flint
Christ there were a lot of them
empty flint
But there's also a lot of conferences, basically everywhere
They might be small, but those are better for networking anyway
little schooner
You need to pick only a few not try to be at them all
It will be exhausting going to so many
empty flint
^ that's true
little schooner
But if you can clone yourself then that's a different story
empty flint
You can probably just Google "IT conferences [your town]" and find a dozen
Pick the ones that look the most relevant to what you want to do
thick minnow
hmm. seems easy enough. I'm slowly narrowing down where I want to get to for now, which Im thinking is the network set up and maintenance, which i think is a network admin or engineer
thick minnow
Interesting information.
little schooner
Technically I've been volunteering for the longest time. If you count 2 years as long
That bachelors degree should change outcomes
hollow marlin
There is no reason you can't get an entry position then
waxen scroll
Sure there is. Network is hard to get into
Entry positions basically don't exist in the US
Not sure about elsewhere
I had to work 2 IT jobs before getting a network job
hollow marlin
My last job (In the US) just hired 3 people straight out of college
Enrty NOC positions are open everywhere in my area
little schooner
My area isn't so lucky I guess
They have help desk and database jobs here
The positions that I actually want requires an HR requirement of a bachelors degree
Once that is checked off, it will be easier.
I'm almost done with my degree, just two more semesters
thick minnow
Best of luck, I'm still trying to figure out if I even want to get into networking.
¯_(ツ)_/¯
little schooner
@thick minnow it's good to keep an open mind.
But in the case of my professor, he started he career in win2k and was a lab assistant for a while. Then, he was approached by his teacher to lecture a chapter from their cirriculumn for two classes
He did very well for the first one that the whole class stayed pass the class end time. The department chair asked him to teach again the next day
He did so and he knocked it out of the park again and was offered a teaching position right then and there
Since then he's been teaching his whole career and got into cloud and security related fields to increase his experience
Networking was his next biggest field to excel in
And he inspired me to pursue networking after taking his intro level course. It felt like a game I couldn't stop playing. I think packet tracer helped with that a lot
pseudo blade
The monitoring server has been monitoring its own ping for a year.
It auto-populates with any new hosts in a given IP range, and it was within that range.
covert ibex
@pseudo blade
Well, at least it's doing what it's meant to be doing.
pseudo blade
There's that.
little schooner
@pseudo blade which reminds me, I tested my server backups the other day and it can't restore. It has been doing backups for the past 6 months and I'm only finding out about this today
pseudo blade
That's less than pleasant.
little schooner
It bluescreens when it tries to read the backup file
pseudo blade
At least you found out before disaster struck?
pseudo blade
I've toyed with it, but haven't used it seriously.
little schooner
I use their free windows edition of backup software and...
It's saved me before but lately I don't know what started the problem
I had 2016 installed on this server prior and upgraded
But it seems that all my backup files are unusable
pseudo blade
Is this a physical server or a VM?
little schooner
It is physical
It says it's bluescreening from a driver used by Veeam.
Something about refs
pseudo blade
Hm. Sounds like a support call's in order.
You can't really fix that yourself, maybe work around but not fix.
little schooner
Yeah. So tomorrow I'm gonna chat with em. I really need this to work in case I am really in trouble
I almost had heart attack when Bitlocker keys were encrypted and unmounted on a drive I almost forget to save the pass for
That could of wiped everything I had
So now I've learned to keep USB drives with the recovery in a safe in case the worst comes to worst
pseudo blade
...And to test your backups more frequently, I hope :P
little schooner
Yeah xD
For sure now
I'll do those restore to VM deals
Scripted would work
The plan is to test restore the important files inside of a VM that has access to the backup file Veeam creates
That is small and can run after every backup or week or whatever
Then it will email me the result
That way I know that if it fails, the rest of the data probably can't restore either
And it won't take long to find that out
thick minnow
just bought the ccent book from amazon and a vid class on udemy. lets go
any study tips?
hollow marlin
@thick minnow the biggest thing I got out of the press books was keep reading. It's a lot at first and you might feel like you are getting lost as times but just read a few pages further and they usually asnwer your problem.
waxen scroll
hmm im not sure i consider NOC entry level networking
theres really little value for your network skillset
its mostly alert monitoring
i speak from experience. racking equipment and monitoring it, then escalating outages doesnt help your career at all and doesnt advance you to the next step
you need some kind of IT experience but its on you to self learn networks and pray that some place will go for it
the true entry level is not being on the NOC, but being in a support role (level 1) that the NOC escalates to
my first network gig i basically took escalated tickets from the help desk (user has issue) and the NOC (a network device has an issue)
if you want a laugh, even now as someone whose pretty experienced, i still have issues getting even phone screens
the expectations of employers are either extremely high or they dont know what they're looking for and think i dont fit
thick minnow
LZ, I'm not sure who you were responding to, but at least my plan is to seek out those who I know from my community and church who work in IT and see if I can use my connections there to get some sort of experience while I get my certs and finish college
waxen scroll
@thick minnow what are you working on for school o_o
thick minnow
Finishing up a final project.
waxen scroll
why dont you share with the discord
thick minnow
I did already.
hollow marlin
@waxen scroll the NOC is the entry level. Sure you are answering calls and monitoring alarms but that is still experience. Tier 1 NOC techs still have basic access to equipment and access platforms. True entry level is not who NOC escapates to. I started in NOC and am now an engineer and the NOC experience, while entry level, did help greatly with experience
@thick minnow try physically visiting smaller ISPs or MSPs and asking. Those are you best spots for networking. Or if you live in the Northeast I could probably help
thick minnow
Thanks for the offer but I'm in the southwest. I'll be searching for the smaller ISP or msps. Cheers
hollow marlin
Had youtube playing in the background while labbing and some kid that owns a WISP in UK was explaining that you need to mount your APs high because gravity causes the signal to fall. 👌 💩
To think this kid is making bank because he can click a could ubiquiti buttons
ornate jungle
I think I know exactly who you're talking about.... while I appreciate his videos, some comments indeed make me believe he is from Marz
hollow marlin
The videos are not bad for showing off Ubiquiti but man. If he has to go deeper than IP configuration it comes out that he doesnt know any networking. Also a lot of things he does would be illegal here in the US.
fresh copper
Technically, gravity does cause the signal to fall. But the earth is not a black hole so it’s not noticeable outside a very precise lab experiment
little schooner
I think we've made a mistake. We didn't include redundancy in our lab planning for the lab upgrade
Business isn't going to like it when we request for a spare switch and router in case of failure
hollow marlin
@little schooner good luck man. Those situations never go over well
thick minnow
Good luck
Also would gns3 enough to study for ccent in place of hardware for practice?
strange silo
Ok I'm way too tired atm, what does NOC stand for? Seriously might just go back to bed heh
NVM so obvious, forget I asked
clear igloo
@strange silo It's the Nobody Overly Cares center 😛
waxen scroll
^ pretty accurate
its where careers go to die
most people i know who NOC turned into lifers who escalate immediately instead of troubleshooting and suggesting how to fix
little schooner
@thick minnow yes for ccent
For ccna, it will lack stuff like licensing (from my memory) that the exam has questions on
I just bought the real thing switch and router and had 0 limitations and could follow all the labs fine
Oh and stuff like checking hardware stats, those commands were physical equip
hollow marlin
For CCENT/CCNA I highly recommend packet tracer. It covers all topics but most importantly it has a similation feature that lets you follow a packet around with detail description of what the switch/router is doing.
little schooner
I have access to Cisco VIRL, but it was totally unnecessary when packet tracer was much faster and easier to deal with
Packet tracer I'd say spent 90% of my time
Good ol pt
hollow marlin
I just got access to virl for the images. Been using it for my CCNP and wish I had it sooner... especially for my route
little schooner
Yes it's very helpful for ccnp
thick minnow
Do you think the Gigabyte GC-WB1733D-I can replace a tp link wifi adapter and bluetooth 4.2 dongle?
waxen scroll
i mean whats the requiement
i agree with the vlan separations but not the values
layer 2 shouldnt be extended outside of a building
repeat the same vlan IDs across all buildings
that being said, i dont know how advanced your class is, so i also dont like the diagraming showing the WAN and how it connects
but it all depends on the assignment requirements
this could be fine, idk
thick minnow
VLAN ID: 2 is only for the HQ. All the other branches access it via the IPv4 address of the Server I assume.(Project Instructions state the the Server must be on it's own VLAN.)
Since I also decided to use class C private IP addressing for the entire network, that yields 254 possible hosts per network, and 65K possible networks.
More than enough for this project.
waxen scroll
in a production network, its very important to standardize as much as possible. so in a standardized network, if you have a user vlan at all sites, its the same value at all sites
thick minnow
As for the diagram itself, this is a diagram of a corporate WAN that connects the geographically separated branch buildings to the main HQ.
There are also no fiber facilities between the branches and the HQ building so we can assume a T1 WAN is in use.
waxen scroll
the subnet length does not need to be the same at all sites, but the vlan ID should
i dont think you'll get dinged for anything im brining up, but you should know how it goes IRL
:X
thick minnow
I decided to use a VLAN ID: 200 for the Employees VLAN. The only number that changes in the last one in the VLAN ID, which is changed to match which branch it's for.
So for branch 5 it would be VLAN ID: 205 and a subnet ID of: 10.0.205.0
Easy right?
Same goes for the others.
waxen scroll
the problem with making vlan IDs match the subnets in some way is it may create address waste and/or create surprises if your user count needs to exceed that space
thick minnow
VLAN 110 = Wireless Network
VLAN 120 = VOIP
VLAN 130 = Video Surveillance
VLAN 140 = Physical Security.
waxen scroll
my company did exactly that and we burned SO. MANY. SUBNETS.
thick minnow
The project instructions stated: "Plan for expansion in your design."
There are a minimum of 200 employees at each branch.
So using a 10.x.x.x based C class private IP addressed network with a subnet mask in CIDR of /24 gives me 254 possible hosts.
Which leaves ream for 54 more useable IP's.
AKA extra room.
And this is PER network.
waxen scroll
also your internet is backwards
thick minnow
So if needed the network admin, could just add another subnet to the employee VLAN for building 2 and give it a subnet ID of: 10.0.222.0
waxen scroll
usually its router, then firewall
thick minnow
I do have router and firewall in the diagram...
Firewall is on the perimeter.
Then again, the instructions didn't specify how to set it up.
So I don't really care.
hollow marlin
Router/firewall can be in either direction. However, router in front is preferred. This is because while being DDoS'd the router can handle the hit while most firewalls cant.
More a side effect of all-in-one firewalls
thick minnow
Yes but I'm not going for a "perfect" diagram here.
thick minnow
Alright, thank you for the feedback. I will now finish my report and submit the finished project to my professor for grading.
tawdry plume
Evening, i have posted similar thing on the forum, but i think its better to ask here 😃 . I have some issue with packetloss (on upload), its similar as losing whole connection.. This happens all the time, i can fix it by turning on and off network adapter, and after that its fixed for 30-40mins untill it starts again
Still not sure if its about my PC or my net
i tested without cable (using wifi from phone to connect my pc to internet), same thing
tested with USB lan same issue
i dont have this issue when i switch to 4g on mobile
hollow marlin
Sounds like a OS issue. Did this occur after an update by chance?
The fact that it happens wired and wireless says more software
tawdry plume
I reinstalled windows via ingame "reset" option (removed all from system driver)
tawdry plume
Since i dont have 2nd pc, i downloaded pubg on mobile, im getting packet loss alot, its moving me back "lagging" dew meters evry 30-40sec
covert ibex
@tawdry plume
Reinstalled windows via in-game "reset" option?
Elaborate on that..
strange silo
@hollow marlin Agreed, router in front of firewall. Much prefer a proper router at the border of the network to handle routing tasks. For many places just a firewall is fine though.
tawdry plume
Sry, spent too much time on gaming discords.. well theres an option inside windows that allows you to clean install it without using cd/usb
@covert ibex
clear igloo
250Mbps is pretty fast, yah
clear igloo
Yup, that's about in line 😃
broken cosmos
I wonder what speeds my parents pay for
hallow nimbus
Nice ziggo you got there @broken cosmos
broken cosmos
😅
fleet widget
@thick minnow for these types of networks, we have seen people massively abuse the Spanning Tree Protocol for managed switches, which are unmanaged. So that means selective DDoS limited to the building, or if you have layer 2 passthrough, the whole network.
fleet widget
Referencing yesterday's chat
thick minnow
Undertale was a pretty decent game, the fanbase was awful though.
hollow marlin
@fleet widget how are people abusing STP?
fleet widget
In standard setups like that, people just neglect to send STP packets to the switches from the router every second. So, an attacker could spoof an STP packet, and make whatever machienes direct all of their traffic to wherever the attacker wants. That is, only if you have managed switches.
And this lasts until the tech fix it guy resets the network, or sends out a corrective STP packet.
hollow marlin
There is no neglecting to send STP unless you disable it
Also that is what root guard is foe
fleet widget
Not a buffer overflow, spoofing of identity. It's actually very common.
hollow marlin
That is not common with STP
clear igloo
Yes you can, on all of them
Any managed switch worth its weight can disable spanning tree
hollow marlin
Lol
clear igloo
Ummm, not sure where you're at but in reality any Cisco switch can disable spanning tree
fleet widget
Well, some techs are just too lazy to go to each individual switch and disable STP.
rocky badge
@clear igloo iDRAC over SSH tunnel <.<
clear igloo
@rocky badge staph! 😛
rocky badge
it's so slow
hollow marlin
@fleet widget you don't want to disable unless you know what you are doing
fleet widget
I know that.
That's why you are supposed to send STP packets from the router every second.
hollow marlin
From the switch
clear igloo
That's not how it works, that's not how spanning tree works. Routers don't deal with spanning tree unless we're talking about L3 switches
fleet widget
Yes we are talking about the big daddies, the L3 switches, that also have L2 support.
hollow marlin
L3 switches without layer 2 support are just routers
clear igloo
Also, you don't have to send STP packets every second, you can adjust your timers depending on what sort of convergence you want
fleet widget
1 second is more of a 100% safe guard technique that minimizes downtime, and optimises performance on a gigabit network. Because the overhead is negligible.
hollow marlin
Storm control with default timers are more effective
fleet widget
Storm control is also harder to implement on Cisco, and the techs are lazy, and much too busy, so the choose the faster method. Its psychology 101.
*they
rocky badge
@clear igloo 
https://pcmr.rocks/b/DirectAntiquewhiteBlob
I didn't know you could do this
You can watch a recording of the last boot
clear igloo
If you're too lazy to do interface range Gi1/0/1-48 and two storm control commands, you're beyond lazy
@hollow marlin Don't forget if you want to set a trap or shut action 😃
fleet widget
That's most techs. Especially in places other than Ontario, and BC. Because the networking industries are very centralized on the coasts.
Because there isn't much competition, since there isn't training available, so literally most people with networking certifications need to learn them in Vancouver or Toronto.
hollow marlin
@little schooner when a threshold is reached traffic is dropped
little schooner
Oh dang then if my teacher were to enable that in his lab
hollow marlin
Basically because with loops or storms you can lose manangement
little schooner
He would of had no internet access
Oh that's neat that it protects management
So I asked my teacher about the redundancy options for the lab upgrade and he said "We will use one of the switches in our lab, 48 port"
But that is the 100 Meg one...
Until dell ships the replacement
Maybe that will have to do for now since business hates when we revise our purchase orders
fleet widget
Imagine you had the best possible network topology. Imagine you sent all of the traffic to a specific location. Storm control would still cause DDoS, because it also cuts off legitimate traffic.
hollow marlin
Dropping broadcast isn't that risky
fleet widget
What is risky, dropping a bluetooth nearby advertisment on "Free Monero" in the middle of a crowd in San Fran.
hollow marlin
I honestly don't know what that means
covert ibex
@fleet widget
Best possible network topology, storm control would probably cut most of the traffic enroute as it builds up at each point.
(But sending all the traffic to one point with storm control enabled wouldn't be "best possible network topology, so this idea is flawed.)
fleet widget
Thank you Mr. Parodox, why don't you test that logic on some Omnipotent AI. Nothing is perfect.
fresh copper
If you define what you are attempting to maximize properly and the available options then you could consider the global maximum of what you are maximizing as a function of those options to be the perfect solution
hollow marlin
So defensive here....
strange silo
I have to agree in a well designed network that wouldn't happen, if you have giant L2 segments you're probably doing it wrong
covert ibex
Well.. saying "imagine you had the best possible network topology", it's a bit of a loaded proposal.
Best possible for what purpose.
strange silo
that too
no matter how good it is if you need a far too experienced expert to administer it than you can afford then it's not the best possible 😃
hollow marlin
Even saying "best topology" what I mentioned too is best practices.
thick minnow
There is no such thing as perfect. All it is is a network that EVOLVES and CHANGES over time.
It’s like saying a “perfect” human exists.
LMAO
hollow marlin
I would argue some networks are perfect, a loose sense of the word.
waxen scroll
@strange silo @clear igloo cisco ACI
you need $100k employees to admin it
luricks being quiet cause hes getting dicked on salary
clear igloo
😛
The only perfect architecture is where you shutdown all the ports and unplug the switches. It's also the most secure
fleet widget
This is what AI firewalls are for.
So the execs don't have to pay for responsible network administration
waxen scroll
execs are the worst
i remember one job where they gave a ton of them reserved spots near the building
but us network people had to park far away
so when there was a device failure it took way longer to replace
execs love shooting the business in the foot
they dont care
hollow marlin
Doesn't sound like "not care". Not sure what a parking lot has to do with replacing equipment
waxen scroll
imagine you run a fortune 1000 business that almost stops completely when the network goes down. your parking lot is the size of a small shopping mall and you have so many execs that you say fuck it and reserve a ton of parking spaces for them and ticket/fine violators
then your network dies and the IT people who keep your business running are forced to park far out and carry gear
its not a game at that point, its millions lost per minute
hollow marlin
I'm sure in those situations you can pull right up to the door
And if it's a fortune 500 where the hells the redundency
waxen scroll
redundancy can and does fail. having a duplicate of something doesnt mean you're safe from failure
and the more redundancy you have the more unstable it can get
hollow marlin
....I honestly don't know how to respond to that in a civil manar. Look I don't see how parking lot sizes screw us over and redundency hurts the network
waxen scroll
ive been doing this 10+ years at multiple fortune 1000s, you'll just have to trust me. ive seen some shit
hollow marlin
Soo .....were you in charge of the network redundancy then. I get that redundancy has limits, but saying it adds instability and isny worth it because that can fail too is just hog wash
waxen scroll
i never said it wasnt worth it, i said it can and does fail in response to your response about buildings not failing in the first place
clear igloo
Too much redundancy costs money and money today is greater than money saved from disaster tomorrow (sadly)
hollow marlin
The chances of both failing within a time period that slim is next to 0.
waxen scroll
more redundancy in routing also = more complex routing protocol config which can fucking burn you bad
HAH
you havent worked at a company with 40,000 devices then
you'll see it happen
hollow marlin
I'm an engineer for an ISP with more customers than that
waxen scroll
well i guess we're agreeing to disagree. this is my actual experience. none of these networks were configured poorly. shit happens. code bugs, failover to a node with failing hardware that wasnt known bla bla bla
hollow marlin
The fact that something failed that was costing the company millions by the minute leads me to believe it was configured portly. Redundency and routing is not that complex. Its not like it's every device either, like access switches
strange silo
@hollow marlin All I can say is have a working DR plan, I mean shit of course happens but if you don't prepare for it and know that plan works then to damn bad
Plus any decent DC has a dockway for trucks you can use
waxen scroll
for the record, im talking about office buildings full of people whose salaries keep getting paid while its down. i am not discussing DC's or their redundancy, only campus
the "millions" is just an embelishment
im trying to make a point
strange silo
Would take a lot to take out an entire building for us, would have to be a power outage basically
Most have backup power though because science stuff and cold storage etc
waxen scroll
you work for pharma?
strange silo
university
waxen scroll
oh. i worked for pharma mostly
hollow marlin
@strange silo shit does happen but yes, you need a plan. But it's not hard to plan for HA
strange silo
Yea, I was agreeing with your point about that parking lot stuff. Not that I read most of it though
In a company down perspective realistically that can only be 2 things, power or your DC went down
unless you are a single building of course
strange silo
we have a different policy for fire and natural distastes, go home 😃
waxen scroll
power, circuits, redundancy switched over to failed device (hidden like RAM/CAM/etc failure), code caused device crash, code caused unicast flooding, the list goes on
hollow marlin
What was cool is we had a COLO in our CO with another provider and they had a co2 bomb system for fires
waxen scroll
my favorite was when a source couldnt communicate with a single destination when plugged into a certain switch.... vendor did debug mode and flipped a bit in the ASIC to restore communication
native seal
i feel like this is decent for a £7 network card
strange silo
We're putting in a hypoxic system so the atmosphere can't sustain fire permanently
I like to say the DC is going in to the cloud
because it's like being at very high altitude
waxen scroll
saddly i cant make the more campus WAN redundancy = more issues argument make sense cause of an NDA, but the more layer 3 redundancy you try to add for the WAN (especially if you do local DIA w/ firewalls) the more chances it can fall on its face. you really have to do a bunch of metric and tagging fuckery once you add the 3rd exit point. two isnt bad but 3+ UGH.
and again, specifically speaking about a large campus with tons of buildings and not a DC
if i could share what we did it would make perfect sense
strange silo
We stick to two per campus, isn't any point here in this country because it's impossible to actually get 3 different geo paths
long and narrow surrounded by water heh
with fault lines through the country
yay us
waxen scroll
we had large groups of buildings, 3 infact in one city... so it made sense to make local exit points, BUT it also made sense to let the other buildings use them incase their groups exit died
but with 3 you have so much complexity and if you arent careful it will just fail
last i heard the company scrapped it and went back to 2 because it caused issues
hollow marlin
I'm fine with 2. I wasn't arguing crazy redundancy
strange silo
we're not afraid of complexity, everything here is BGP and our netscalers are setup in a way the Citrix trainer was like "never seen that before" lol
hollow marlin
But we also have 9 peers so with 100+ switches/access platforms and by law can drop phone service. So maybe I'm used to it
strange silo
Things are easy we you know how and do it regularly, there's plenty of 'simple' thing I find hard 😃
hollow marlin
Oh no doubt. Id probably shit my pants if something threw a DC network in my lap
waxen scroll
i got thrown ACI a month ago
it made me realize dedicated network engineer jobs at large companies arent going away any time soon
even with fancy GUIs
i assumed this was supposed to make things easier
but i might argue it made them harder
hollow marlin
Everyone...most...hate GUIs.
waxen scroll
GUIs are ok as long as cisco isnt the one who made it
hollow marlin
I despise them
waxen scroll
seems like they got their act together a bit with ACIs newer versions, but APIC is still a pig
hollow marlin
I just will stick with CLI when possible. So much faster to do everything
thick minnow
I just got my ccent study book. Holy crud that's a lot of book for the amount I paid for
waxen scroll
no CCNA book library?
hollow marlin
@thick minnow so is the book after that lol
waxen scroll
you might have paid $20 but they'll get you for $300 later
thick minnow
I see
It's the ole bait and switch
@waxen scroll I'm just starting out. Studying for my ccent
I'll get there soon enough
waxen scroll
what do you want to do as a career?
anything specific or just "dedicated networking person, dont care what"
thick minnow
Hmmm. As it is hard to pin point an actual name as each business has different titles, I am not sure where I eventually want to end up, but with my very limited experience with the set up and configuration of networks, i know starting with my ccna will get me in the door, and then feel around from there
Anyone know of a good way to find equipment to make a lab environment to practice? Ebay looks like a good way of doing things but I'm not sure
thick minnow
Is ccent mostly theory?
waxen scroll
its a new version now so IDK. it was like 30% theory years ago
hollow marlin
First 5/6 chapters are
thick minnow
Ah makes sense.
I'm using a course on udemy and I've just reached hexidecimal about 30 parts in out of 500 or so I think.
As well as the book that just got here
Wait a minute... I think I got the wrong book... I got the first edition released in 2016
The Cisco site for the certs show this one so I guess its okay
waxen scroll
my CCNA expires in aug
im not sure im gonna do anything about that
lol
i hate that i need one just to get CCNP
hollow marlin
No probs
fleet widget
@waxen scroll Just an idea. A truly good company should be able to swap everyone in HR and everyone in EXEC, and still be able to survive a year later.
hollow marlin
@waxen scroll IF you just have 1 left (I assume TSHOOT) Ill be taking that soon and am willing to lab with. Dont just leave it on 1
little schooner
@waxen scroll ugh they should make the cert expiration date a little longer.
I want to do ccnp but not at a fast pace
hollow marlin
You have 3 years to do 3 test for CCNP. It's pretty reasonable
I did route in a month and same with switch and have my test this weekend. Tshoot after that.
If you are not learning at that pace in the real world, you will go no where
little schooner
@hollow marlin rushing for knowledge never ends well
Doesn't that lead to burnout
pseudo blade
Mikrotik support for the Quectel EC-25 suuuuuucks...
Getting it into LTE mode involves disabling LTE mode detection, configuring it in PPP mode so I can send the modem AT commands to put it in LTE mode, doing so, rebooting several times and then configuring the router correctly.
PPP mode nets you about 12mbps, LTE mode easily gets me 60. (rb912)
Writing a script that functions between reboots to configure this unattended is fantastically hacky and involves dumping a config file on for each planned reboot, so I'm probably going to deliver the entire config via the API.
The actual LTE driver's missing a bunch of stuff you might actually want to use, like detecting the SIM serial number and ICCID.
You can pull both and much more via AT commands, but claiming "support" is a bit of a stretch.
bold karma
Ok so I have a question for the uber network geeks. I have to do a project in class next quarter that uses a Raspberry Pi. I was thinking of building a Linkrunner. Only problem is, I'm not sure where to begin, whether or not there is some open souce software that does what a Linkrunner does, etc...Does anyone have any suggestions? Feel free to PM me.
waxen scroll
the project isnt network specific but needs to just use a pi?
im honestly not sure how, as someone who doesnt have access to the hardware low level, can make a link runner
you can probably do error testing and such using apps already out there, but im not sure about wire pinout detection
i kind of think you need access to the firmware of the network chip to do stuff like that
strange silo
Sounds more like a SysAdmin project than a networking project
waxen scroll
thats what i think
sounds like the class wants you to dev something on a pi and Hexi wants to do network
you can probably make a ghetto wire map detector using the PIs GPIOs lol
pseudo blade
I reckon that'd be the limit. The GPIOs aren't fast enough for useful TDR without external hardware AFAIK, and at that point things start getting too complicated to make a good class project.
bold karma
The key functionality that I want to emulate is getting the VLan information. I worked with a linkrunner at my old job on occasions and the functionality we needed was just to see what VLan a machine was on before moving it from one location to the next, so that at the new location we could be sure to put them on the same VLan, so that they would have access to their resources as normal. Some VLans were corporate general vlans, while others were departmental, or specific use vlans. If I could emulate even that functionality I'd be satisfied. Which is the "Switch" functionality on the fluke linkrunner.
waxen scroll
so a CDP or LLDP reader
bold karma
Sure. If that is what it is called. In fact just knowing what it is called is probably the most helpful information.
hollow marlin
@bold karma any reason why you need a dedicated device?
bold karma
For mobility. Plus my previous employer use pays $1500+ for a fluke linkrunner to do that one simple task. If I could make one with a raspberry pi that does the same thing for a fraction of the cost, I could make some money selling it to them. So I get the grade for my class, as well as recouping the cost of the parts to create the device by selling it to them afterwards. Which I left them on good terms, and because there was no
room for further growth with them.
waxen scroll
my work has two of these
imagine what we paid
fucking fluke.
its been a long time since i saw the invoice but i want to say $20,000/ea
hollow marlin
@bold karma I still don't know why you need a physical device to determine vlans. You network Dept should give you either PCs or subnets in each vlan.
bold karma
As contract labor my previous employer was responsible only for moving computers from one location to another. The linkrunner was used to ensure that the new location's ethernet jack was connected to the proper vlan as the swiches in the DDC rooms may have multiple VLans configured on them. Without having to hunt through or keep a list of what ports are connected to what VLans, you just plug in the linkrunner
and it tells you what vlan that port is connected to
hollow marlin
So there is no documentation.... Like at all....ugh
bold karma
I'm sure there is, but large corporations aren't going to share it willy nilly
hollow marlin
You are looking at lldp. You can already see the vlans.
bold karma
With large coroporate networks consisting of tens of thousands of devices, a device that will display that information in mere milliseconds is much faster than hunting through documentation.
pseudo blade
https://www.pockethernet.com/ @bold karma Know of this?
thick minnow
Is intel 9260 good? A certain gigabyte wifi card has one for under 30GBP
little schooner
@pseudo blade hey yeah that's pretty neat
Does the app still look like that though?
They should give it a face lift
It hasn't been updated since 2017
@thick minnow very good. It's the same one I have in my Dell computer
It gets max throughput via iperf easily
My AP doesn't have 160Mhz but it maxes 80 like nothing
thick minnow
Is it good replacement for tp link 1900
thick minnow
no i mean the archer wifi adapter
little schooner
Well yes... In the sense that with just a 2x2 antenna array and less power, you can reach 1.73gbps speeds
Since it supports the 160 MHz VHT
And has Bluetooth v5
I know some expensive routers support 160 MHz channels
The one I got is unifi AP AC pro. I would need the unifi AP nanoHD to use 160 MHz
yeah thats why I need to upgrade to reach the full 1733 mbps
green sphinx
I do not like troubleshooting my network for 5 hours on a Monday
little schooner
@green sphinx hey I've been there before
It's a learning experience
Also helped me realize to start creating documentation
little schooner
@green sphinx in my case, I use the Edgerouter and it would fail to do a DHCP lease renewal on its own unless I rebooted the thing.
That took a while for me to realize just to reboot the thing
green sphinx
Ah, yeah mine is a whole different story
little schooner
Oh oh and one other time where my modem was responsible for dropping the internet connection over and over due to firmware bug
I thought it was Comcast but it wasn't
Arris ruined their modem quality with docsis 3.1
3.0 had no problems
little schooner
And then there was a weird problem with my Dad's comcast-provided modem's wifi where only specific devices could connect to it and not others (TVs, rokus, etc)
As soon as I rebooted the modem, suddenly all wifi-enabled devices could now connect again
but this problem came back again within a week and comcast just replaced it with their newer model gateways
covert ibex
Theirs a firmware upgrade for my modem, but only the source ISP can apply it..
(My ISP pays for the connection to the source ISP)
So I'm basically waiting for them to read an email..
little schooner
yeah it stinks that they dont let the consumer do it... but then again that stops people from just easily flashing their own firmware with a GUI
i think that was good enough security for them
covert ibex
Oh, I can flash a custom one. That's not an issue. :P
little schooner
oh. I dont think mine lets me do that
i have a netgear docsis 3.1
They have this sticker on the modem that says any tampering of the unit would be illegal
covert ibex
Take the sticker off.
little schooner
xD
covert ibex
If you use a heatgun, just say it must have gotten hot and came off.
little schooner
true
hollow marlin
@bold karma even with 10,000 devices you should have to manually probe ports and onlu plug certain devices into certain ports.
little schooner
In one year, my future all-fiber ISP will build their infrastructure in my neighborhood
I can't wait to get rid of comcast. The bill is already $112 because for 150 mbps, they HAVE to bundle it with TV otherwise its $120 internet only
little schooner
nice, that is some serious speed
covert ibex
$880 a month.
covert ibex
I'm not even kidding.
hollow marlin
You guys acted shocked but we still have customers paying $1500 for a t1
little schooner
ouch
hollow marlin
They just refuse to switch
little schooner
they dont want to give up their dedicated line?
is it the latency they are worried about?
hollow marlin
No it's just the people who managed it have been there for decades and don't like change
little schooner
At least my teacher isn't like that for his lab. I helped him see the fact that we needed new gear instead of using the same only 100 meg equipment for CCENT/CCNA
and they didnt even have v15 software on the equipment
Now all of a sudden we are buying the latest (or almost) stuff for the lab
intel 9000 series cpu are the latest but when we bought, dell only had 8700 as their highest
The cloud courses should be interesting. He will be teaching azure and aws in a few semesters
The other teachers dont want to touch the new things since they have been there for like years and years
waxen scroll
little schooner
wow your area is so much cheaper
waxen scroll
you also priced yours with TV
little schooner
hmm, yes that I did
i did not remove the filter
regional pricing is terrible
they should let everyone get the lowest rate
waxen scroll
my house had like 4 owners
the POTS line is dangling outside
none of them ordered ATT service ever
lol.
theres no demarc box, only a cat5e cable just dangling
thick minnow
UK has unlimited on all fibre plans with gigabit rolling to areas like milton keynes. London hasn’t got gigabit though...
waxen scroll
i went to london 2 weeks ago
i learned i hate pubs
gimme that american host/ess role over a UK pub any day of the week
;x
thick minnow
have you eaten at a pub
thick minnow
Ah you are probably better off at a nightclub or something... or those bar places they have.
waxen scroll
my turnoff was the pubs were crowded and you basically had to poach tables rather than queue up
we had 5 people so that was annoying as hell
thick minnow
football on or something?
thick minnow
off peak better
anyway uk has cityfibre and vodafone fibre
gigabit
but virgin media has 500mbps internet including tv and calls
all cable channels and whatnot
waxen scroll
you have to pay tv tax still?
thick minnow
yes
also includes sim
tv tax is £120 a year though
seperate to buying cable or whatever
green sphinx
Aaand 7 hours into troubleshooting my network. I only kinda know the cause now 😐
waxen scroll
omfg what was it
green sphinx
I don't know yet. I only know what my dad's router's DHCP isn't working properly ( I think ) so my router isn't getting any internet
clear igloo
Now do my calc class 😄
thick minnow
And now, it’s time to relax for the summer. Well, as much as I can relax.
No thanks, just use Wolfram Alpha @clear igloo. It’s a pretty decent tool.
clear igloo
lol
clear igloo
lol
thick minnow
It’s funny how it all works out, as kids we don’t want to go to school, while in school we don’t want to have to work, after school we want to work so we don’t have to go to school.
lol
It’s the cycle of hypocrisy.
hollow marlin
I can't believe there was a day when I dreaded school. 8-2, Summers off, little hw, no bosses, no bills....
mild summit
Can I forward port 80 to the IP of my Ubuntu Server Machine (192.168.x.x) that runs a web service
So I can access it via internet?
hollow marlin
Sure. I would not use 80 though.
hollow marlin
Through NAT on your router. Just set in port to say 60080 and local to 80
green sphinx
@waxen scroll I wish :p
little schooner
I'm excited to start unpacking and putting all the new equipment we're getting this summer in the lab
That can only happen on school breaks so
mild summit
@hollow marlin everythings green ethernet is blinking, no internet
whats default option for NAT?
RoutedWith or Without NAT?
hollow marlin
Where are you configuring that?
mild summit
router
ethernets blinking green but no internet
idk wth
nvm got it
but the NAT doesnt work
waxen scroll
@clear igloo ugh first day back and the first 30min im told a solutions engineer asked for something dumb on a project i put in
bold karma
I wouldn't use regular http
https is much more prefered
@waxen scroll Could have been worse. I spent damn near an hour trying to talk someone through running Teamviewer so that i could remote in and fix their issues that were non-existent.
waxen scroll
yep. thats worse
mild summit
@hollow marlin had to make a DMZ
i wanted to try it but i was unsure how safe it is?
works now
bold karma
I wouldn't use a DMZ for a server
waxen scroll
its not safe
hollow marlin
DMZ are safe. Used in the real world. You just need to know how to secure it.
mild summit
alright
bold karma
Honestly, if you needing to demo a webserver, there are plenty of cheap VPS out there that you could rent for a super small fee per month. This would serve a website much better than your home internet connection would.
mild summit
True but 500 MB is alot
so i dont know about that
i started uploading it on AWS but soonly i realized its a wrong move
might do it overnight
im not sure if i have to change anything though
bold karma
the 500MB most likely refers to your down speed
your up speed is usually much less
www.speedtest.net should give you a fair idea of up speed
little schooner
What is the difference between using DMZ and just NATing a port to a server in the internal network? Cisco didn't touch on the topic but the security course does
Isn't it the same thing?
NAT can have firewall rules and so can DMZ
hollow marlin
They are two different things
NAT is just address translation, DMZ is stateful firewall or lack there of
little schooner
What if NAT then firewall?
hollow marlin
Most the time they are handled at the same time
little schooner
Can I then call it DMZ?
hollow marlin
DMZ is just a zone where the firewall doesnt act on
bold karma
thus the only firewall on a machine in the DMZ would be the firewall invoked by the OS if any.
hollow marlin
NAT (specificallyPAT) and firewalls are similar in terms of statefulness but thats where the comparizon stops
little schooner
I see
Our networking lab gets hit by the internet by a lot of telnet and ssh requests
Also the isp router is using some kind of. Ipv6 multicast traffic
Querying over and over again
little schooner
Hmm yeah the first time I noticed that was on a pfsense box
I didn't know I guess
In order to get appliance support, the vendor who troubleshoots the hardware asks up to open up ssh to the internet
But as long as we just enable the vendors ip as allowed traffic, should be fine right?
hollow marlin
Yes it you have rules just for their IP its fine
little schooner
My teacher needed assistance with this and so far looks like we did the things right
He was having trouble with NAT too
hollow marlin
Where was he configuring NAT?
little schooner
From the GUI of pfsense
But he kept putting the wrong info in the wrong fields
Now for Cisco, he just used the GUI to do it fast
He said something about Asa wizards
hollow marlin
GUI.....ewwwww
little schooner
Yeah he wanted the gui
He said someone else will inherit the setup and there's no documentation for command line stuff
hollow marlin
Its cisco....google is the documentation
hollow marlin
I havent dealt with pfsense before so I cant comment on good/bad
little schooner
Now for the LAN management of the workstations I started created some powershell scripts for him to use instead of going to each machine manually
He was literally taking one master drive to each machine, opening it up and connecting them together to sata controller, run clonezilla and clone
Sooooo slow
Somehow though, that didn't bother him.
hollow marlin
You could build a clonezilla server and put it in the vlan and just PXE boot and clone. With multicast I remember doing 30 pcs all at once without a hiccup
little schooner
Yes, when I joined, we experimented with that for pushing Ubuntu 14
hollow marlin
I liked zilla. Decent
little schooner
It worked for a few semesters fine
Ahh that was during the time we had pxe problems
The solution was to change ports to portfast
The link took too long to establish
hollow marlin
That would do it
little schooner
Then he started getting annoyed with the lack of support for apps that run on Ubuntu
Like packet tracer and VMware workstation
He said the problems plagued the classroom and ruined lectures
hollow marlin
Well VM I know now is supported. Smaller apps like packet tracer are very hit and miss
little schooner
Yeah I remember we had to do this hacky fix installing gtk dependencies
Just for packet tracer to work again
hollow marlin
I would say setup a EVE-NG VM for the class to access, but PT is much better for intro
little schooner
So he teaches ccent two sections and he uses pt for all that
mild summit
@bold karma 500MB is the webservice i need to upload to the host server xD
hollow marlin
PT is perfect for CCENT/CCNA
little schooner
I agree
hollow marlin
The simulation mode alone make it worth its wieght in gold
little schooner
Yah and the times where you take exams, it opens it in PT from the web
Like command practice
hollow marlin
Hmmm...didnt know it supported that
little schooner
Well, like webstart
hollow marlin
But cool none the less
little schooner
Java web start
hollow marlin
oh
little schooner
My exams had a few of those
It wasn't just multiple choice, drag drop questions
Sometimes you had to work the simulation in PT first and find the answer. Then go back to exam and mark the correct choice
little schooner
Yes they are my favorite. Testing the working knowledge
I think I had 3 chapters that had none. I think QoS and the part about ip sla
It was just book smart questions
hollow marlin
I live in one note when studying
This was my note I posted for route if you are ever interested in going that....route...Its an export of one note in gdrive
little schooner
Wow really nice guide
hollow marlin
Ill have switch notes shortly. My test is on Sat
nervous as hell. Supposed to be much easier but so much memorization
mild summit
Ironically just today I had a Junior Linux Administrator job interview yet i have 0 idea what u guys are talking about
LOL
hollow marlin
We are talking about cisco certs
Sysadmins dont deal with networks much, mostly basics
slow pivot
any opinions on Mikrotik vs Ubiquiti PoE switches? (looking at the 24port variants)
clear igloo
Mikrotik is more CLI based but if you're familiar or comfortable with that then I would say go with Mikrotik, otherwise Ubiquiti would be better imo
slow pivot
I already have a Ubiquiti AP... so running the controller software. That's the only reason I'm considering Ubnt
clear igloo
Yah, I would go with Ubnt then
slow pivot
fair, thanks 😃
hollow marlin
Mikrotik does have a gui. Hasn't been updated since 1978 though
clear igloo
Ah, good to know 😃
hollow marlin
I love mikrotik but for a pure switch, if you need vlans, go Ubi. Configuring vlans on mikrotik is still pulling teeth
little schooner
When I am reading the specs of a PoE switch, what's the deal about power budget? I see a trendnet switch having a 64W budget but have 8ports total on the switch
It supports 30W output per port but...
clear igloo
It's not targeted for 8 ports at 30w each, that's why it's a budget switch with a low power budget
little schooner
So what price range should I be looking at? 150+?
clear igloo
Usually meant for a few 15.4w devices and some non-poe devices
little schooner
If I have 4 802.3at devices
clear igloo
Type 1 or Type 2 802.3at?
clear igloo
PoE or PoE+
PoE (type 1) is 15.4w max
PoE+ (type 2) is 30w max
clear igloo
Yah, then look for a 150w+ PoE budget switch
little schooner
Okay thanks
keen citrus
You could try sending an email at the LTT email
thick minnow
Dooley OP.
Don’t mess with Dooley, he will packet switch your frames into a T1 CSU/DSU as punishment.
🤔
keen citrus
i am going to remove fiber from you and put you back in the copper age with 16kb up/down
thick minnow
If you owned a ARIN allocated /24 IP block - (IP4) - what would you do with it? (not rent/leased or provided by an ISP)
bold karma
I'd sit on.
clear igloo
Give it back because I don't want to make payments on it 😛
thick minnow
I've seen people lease out blocks for roughly $200 a month, or sell for $12k or so at auction for a /24
clear igloo
I mean if I could sell it without hassle for more money, then sure, I might sit on it for a bit and make payments 😃
little schooner
Do you think the networking jobs could be replaced in the next 5 years?