#networking
1 messages · Page 160 of 1
Sweet @fresh copper . You know how to forward multiple ports in one go?
Me and the guy have gotten onto good terms so he lets me peruse his private business stock
I do not believe that you can forward multiple at a time on the USG. I suppose that you could write a script to do it though
Darn. Really dont want to make 20-30 seperate rules
but i mean what other network devices would be helpful in my situation
every 2 weeks i go and pick through some of his stock and buy what i find interesting
what is that nec in the 3rd picture
i was wondering
2nd
The USG is really just running commands in the background that must only effect one port. You can do it yourself manually by sshing in and running
configure
set service nat rule 4000 description "WAN to port 22"
set service nat rule 4000 destination address #external IP address
set service nat rule 4000 destination port 22
set service nat rule 4000 inbound-interface eth2 #or eth3 or whatever
set service nat rule 4000 inside-address address 172.16.0.7
set service nat rule 4000 inside-address port 22
set service nat rule 4000 protocol tcp
set service nat rule 4000 type destination
commit;exit```
It would probably be not to hard to write a script (it's just using a version of bash) to make a bunch of them
No easy way though, and nothing from the GUI
he also has hundreds of these
hes asking a dollar each
their fibre optic right?
they say mec
I think that you can add multiple destination ports to a rule if you don't enter the inside-address port but it's still a lot to type
Ive just done it manually
then second, you know if its possible to put multiple vlans on the WAN?
Those are fiber optics. The connectors on that one are pretty hard to use, most SFP fiber connectors use the LC connector and that connector either needs some annoying adaptors or you would have to find an SFP connector that uses that one which is probably impossible
yep
Those use the LC connector so make sure that any fiber you get also has an LC connector
@glacial glacier You can't do it though the GUI, but if you use the command line you can use set interfaces ethernet eth0 vif 128 rather than set interfaces ethernet eth0 for as many VLAN numbers as you want (the example used 128). When using a different vlan in other places, you just use eth0.128 or whatever to access the VLAN
so are certain sfp modules only compatible with certain sfp?
amazons selling like intel only and hp only ones
Most of the time, 1G modules work with almost any 1G port and a majority (but not all) 10G ports. The 10G ones are more annoying. A lot of them only work with one manufacturer but there are some that can be reprogrammed to work in different ones
alright atleast i only have a 1 gig switch for the moment
I would still recommend trying to check the compatibility first but they should be fine. 10Gtek seems to work in just about everything that I've tried
im not planning on getting that one
I already have some
for the moment
was just looking at different sfp+ at the moment
for when i want 10 gigabit to my media server
Bryce, would you be able to guide me through setting it up?
For what I need: I need WAN to have VLAN 300 and 640, then LAN1 already has 300, and LAN2 has 640
It would be really hard for me to do remotely. You could probably do something similar to in this post though, probably just changing the post numbers for whatever they are on yours: https://community.ubnt.com/t5/UniFi-Routing-Switching/2-VLANs-on-WAN-Internet-and-IPTV-USG-PRO/td-p/2079958
saw that one, didnt understand a whole lot haha
According to loads of guids online, I too need a managed switch, anyone confirm?
What do you need a managed switch for specifically
To seperate out VLAN 300 and 640
You don't need a managed switch but without one you need to deal with the command line
You just have to set up all of the NAT rules and whatever via the command line when dealing with the other VLAN
I assume that you just need to create a bridge between eth0.640 (or whatever port) and the port that you want to be able to access the VLAN from
I dont know if I do, as Im quite new to networking
I have all my TV decoders on LAN2, rest on LAN1, Then I have my incoming Fiber on WAN1, It is currently set to VLAN 300, so I can have internet access, But it needs to be 300 and 640. I have tried entering nothing, wont work
That's why you have to bridge eth0.640 (or whatever port) which will by VLAN 640 on your wan port to whatever port LAN2 is. I can't say exactly what commands you need to run but to do that it should be (assuming WAN1 is eth0 and LAN2 is eth3) something like:
configure
set interfaces bridge br0
set interfaces ethernet eth0 vif 640 bridge-group bridge br0
set interfaces ethernet eth3 bridge-group bridge br0
commit; exit
@fresh copper what's the difference between setting up a bridge interface vs just setting 4 different Lan ports to be in the same vlan?
Like on consumer routers. Why they insist setting up a bridge for the LAN ports
Yuk before I do that, USG messed itself up
Changed a firewall rule, usg went provisioning, then somehow into adopting, which failed
Restarted the thing, still stuck
Got any tips/solutions?
@little schooner I think that you are thinking about on a switch where a switch is just a big bridge and setting ports to the same vlan is creating a bridge. In Linux (which is what most consumer routers are based on and what Vyatta is based on which is what EdgeOS and the USG is based on), you can't just bridge interfaces directly, you have to create a bridge interface that the other interfaces are added to as slaves. In the EdgeMax devices that have switches, like the Edgerouter X, when setting the VLANs and such for the switch, you so actually interact with the switch directly and essentially just set ports to the same VLAN rather than create a bridge interface since it is the switch that it doing the bridging rather than the CPU
Not much. If you can't connect to it via ssh or the web server then you can't really do anything about it other than resetting
Well thats no. 5 today then
Could it be that my pi isn't strong enough to be a controller, @fresh copper ?
As far as I am aware, you can always ssh even with no controller at all
@void oracle Funny story - I answered all the questions you asked up until I had to leave. Sorry you felt the need to go all passive-aggressive over it.
We aren't paid to offer you technical support. You get what's available.
I thought so too Bryce, but I couldn't get into the router
I tried your CLI commands btw, didn't work
Sup my guys?
oh hey carl
@pseudo blade my support rate is $200/first hr then $100/hr after
maybe #networking should switch to a paid support model
then the client can be crabby all they want
I'm all for it :P
All hail aspirin, fixer of my headache 
@fresh copper thanks for the bridge explanation
So the bridge is when cpu is involved
And if it has dedicated switch chip, then it's not necessary
I did not know this distinction
Yep, if you're bridging the CPU's involved. @little schooner
If switching is possible instead, this is generally preferable.
Anyone know if this idea went anywhere? https://shader.kaist.edu/packetshader/
It looked awesome back then but then... nothing.
Currently trying to figure out why everything is getting DHCP, except phones on my UAP
Router is a USG 4Pro from UniFi
yes. WiFi has VLAN 300, so does LAN1 on USG and so does WAN1
Is there only one VLAN in use network-wide?
Also 640, but thats on LAN2
@little schooner the bridge is not only when the CPU is involved. The times when you need to create a bridge is when you need is no different than any other siwtch. The commands are just entered behind the scenes
A switch is literally just a bridge. You just don’t see the bridge as an interface because the bridging is being done in the switch. It’s still a bridge though
@fresh copper Yes, I know that, thats not what I am say.
@fresh copper : Figured out the Wifi DHCP issue, not yet the trunking of VLAN 300+640 on WAN1 (eth2)
mmmm its just confusing when you dont explain that a rj45 connection for console port is different than a normal rj45
since its r232
all i really needed to know
but you neglected to mention
@pseudo blade
Was the whole reason why i couldnt find it
@hollow marlin just backing you up with another explanation. You are correct as well
asked a friend and first thing they asked is are you using a normal rj45 connection
all you were saying is connect to console port and you should be able to see it
which too me just says connect a normal rj45 connection to console port
I was just mad at how it was worded and that the whole time i was trying to connect with the wrong cable because i was under the impression it was a normal rj45
why i said half an answer
@void oracle He's not wrong. RJ45 is just the physical connector
yes but he didnt explain it had to be in r232 arangement
which is completely different
Yes, it is. But you could do a roll over or with some console ports you need a specific non-standard arangement
I am not sure what led up to this but you cant be that mad
I wasnt
Most of the switches I deal with are configured over a web interface or ssh/telnet so I always forget to tell people that the serial port is a serial connection rather than an ethernet connection and that they need the special adapter. I’ll try to remember to tell people that in the future so thanks for the feedback
all i said was you'll get half an answer because of that
Wasnt that mad
he just blew it out of proportion
which i did get half an answer
I had to find out that rj45 needed to be in r232 arangement on my own
from the manual that i found online
@glad prism Do I know you?
my aunts bringing me 5 cables from her work tommorow
she works at a cloud storage solution
but im on my way to bypassing this shitty bell routernow
just need to configure a pfsense with 2 sfp ports
1 in 1 out to the switch
no
So then how do you know my first legal name?
Perhaps this will stir your memory.
i dont remember that

How do you not remember that? Care to explain?
thats like 5 hours ago i dont remember
Mhmm.
Alright, I have one tidbit of advice for you: Learn to improve your memory, than maybe you’ll have an actual reason to be on this channel.
thank u
alright so anyone got any opinon on using a http://www.cpu-world.com/CPUs/K10/AMD-Athlon II X4 645 - ADX645WFK42GM (ADX645WFGMBOX).html
for a pfsense router
would it be able to handle gigabit throughput?
I think it would handle gigabit but it would struggle with crypto like any sort of VPN connections
Would a layer 3 switch be able to act as a router?
Would it be intervlan?
Would that affect the latency of the switch ?
All I'm really trying to do is take the sfp from the wall and plug it into the switch sfp port and out to computer with other going out to router for the tv
Cause the switch I got for 10 dollars is a layer 3 hp 2910al 48 port
I keep hearing that layer 3 has basic routing function
A layer 3 switch would be able to do basic routing. It probably can't do NAT, so it wouldn't work for normal internet connectivity.
Damn....
So still stuck with that pfsense router
Just trying to figure out if a athlon x4 645 or athlon x6 1090t is enough for routing
I'm using this one and it works really well. I think you could use your switch with vlan and let the edgerouter do the NAT.
Hmmm how much are these costing?
Cause I can build a pfsense router for basically free
Already have the cards and what not
ca 100 USD
Just people keep saying different things about the pfsense capability based on the processor
Looking at using either a athlon x4 645 or athlon x6 1090t
But j do also have an extra fx8350 just didnt wanna waste it on this
If you already have the parts for the pfsense that might be a better solution. I don't think you would have any problems with performance.
I mean I have 5 prebuilts that were file servers that I could modify
And parts for some overkill put together knes
I'm kinda a on the cheap person kek so I'm thinking of trying that pfsense first and if it doesn't work out that edge router for the nat
If not I have a bunch of extra routers
Maybe rig something up
Also could grab some other switches which I might
Why do you need two sfp ports?
One sfp port in to the router 1 out to the switch
Turning the switch into my network interface basically and just having 2 fps on the pfsense
Sfps
Fuck autocorrect
They were 10 a switch
That's a uqiquiti above it right?
Ubiquiti
yes
There aren't any ubiquiti products in that picture, unless a LONG time ago their logo was a Q instead of a U
I thought he referenced the link I sent higher up.
I thought he might have been talking about the devices in the picture but now I'm not sure
Yeah in the picture
And okay there logos not a q.
Any idea what that q or nec could be
Just a basic switch?
Soooo a switch?
I think it might be something for SIP phones. I don't think its a switch.
Ahhhhhh for phones makes more sense
This is a surplus from isps
So probable
What ever switch or anything like that I find in the building is as is so he sells me them for 10 bucks
It would be easier to identify the box with a Q on it if you could show us whats inside.
Yeah I should've taken more pictures
Gotta wait 2 more weeks to go back into the surplus place
They open every 2 weeks for 4 hours
All other times their a charity completely non profit only day they sell stuff to keep the place open
I wish I had access to a place like that.
It's where all the ewaste in my city goes.. asked around at repair shops and found this place called computer for kids
These guys drive around picking up bins of stuff from isps and places like that weekly. Small repair shops all that stuff
They have a bin of sfps I'm gonna look through next time
Looking for a 300m sfp+
Are you planning on using the sfp+ to connect to your ISP?
Is it bad that I am using a /24 for a vlan that will have maybe 150 IPs in use?
The most devices this will ever have is 300
300 is more than a /24 can handle but at the 150 mark, I think it's fine
I should consider a /23 then I suppose for the future growth in 2 years
Not for my sfp on the pf sense im planning on using the sfp provided by my isp
Which is 1 km
I'm planning on inputting the sfp from the ISP to the pfsense router my own sfp to the switch and than ethernet from there to everything else like my internet and my other router for tv
Probably cat6
Since my other router has to be in the network to send an authentication code cor the tv
Just gonna disable dhcp
What I'm basing the whole thing on. I know I need to tag the vlan 35 for internet and 36 for tv
Or sfp to the other router idk yet
@little schooner /24 is too small. There is no reason to limit yourself.
Alot a /8 and use it as needed.
I'd go for the middle ground and allocate /20's. I'd segment networks larger than that.
-Situation dependent, naturally.
Switch to IPv6 and never run out of IP space
I would for this new lab but lots of the training material is written for IPv4 for some reason
so would this card be supported in pfsense https://www.ebay.ca/itm/HP-NC523SFP-QLE3242-HP-10GB-2-Port-Server-Adapter-593742-001-593715-001/123168722251
which do you think would be the best for the money for making a 2 port sfp pfsense router?
Just dont understand which would be supported on pfsense, since i saw that their is limited support for certain cards
These NICs are identical.
@hollow marlin I still hate IPv6 😄
Well different brands are their any brand preference for these kind of thing?
Which board colour would you like, really...
they are the same brand...
The last three two now? are all the same brand and model.
Can pay to check things like SFP+ support, some OEM cards only support DAC
okay out of those 3
2 are emulexs different brands
ones that hp nc523sfp
which do you think would be most compatible with pfsense?
was checking on the hardware site but couldnt see anything about certain driver support
but people keep saying that theirs bad driver support for certain cards
I have an IBM revision of that Dell one infront of me atm, what you want to know about it?
Do you know if its compatible with pfsense for routing
full speed
building a small 2 port sfp router with a 48 port switch as the interface
It has pretty standard set of hardware offload capabilities but as far as support goes yea pfsense would, had no problem getting line rate out of them either
Alright ill settle on an emulex than
I don't use it for pfsense though, ESXi and Windows
Ahhh Im hopefully gonna be using for the pfsense im making out of an old fileserver and will work for turning that switch into a network interface basically with the pfsense doing the ppoe
and dhcp
I think the HP one might be a better one though
and nat
hmmm
yeah it is looking better honestly and newer
thats why i was worried though new means less driver support ussully
Yeah i'll just go with the ibm emulex for 27 dollars
Have a few QLE8150's and I dont' use them
I'm having to do all this networking shit because of bells crappy router
Have to completely bypass it for ppoe and internet and nat and dhcp
but go back to it for tv authentication
which im gonna go out of the switch to the router to the tv instead of having my whole network through that router
Now gonna have the internet before the tv
can i remove the magnetron from a microwave and use that as a powerful wifi antenna?
my wifi is in the basement and fortnite lags sometimes
ok weird i hooked it up to the outlet and the damn thing keeps flipping the circuit breaker
im thinking about jamming a toothpick in the circuit breaker so it keeps it turned on. i know a bit about electricity and since this is just wifi it shiouldnt be dangerous
yeah so this doesn't work
I figured an “IT PRO from Canada” would have easily figured out how to increase your WIFI signal strength.
Hmm....🤔
oh hey carl
Oh hey there random non IT person.
Try sticking a metal fork in an outlet and hook that up to your AP, maybe that’ll work for you.
kek
that would be a 60hz antenna but i need 2.4ghz for wifi
thats why i anted to use a microwave
Hey even better idea, try sticking your AP in the microwave. Run it, and tell me how many GHz you get.
lol
im about to order this crap @clear igloo
it scares the shit out of me
gonna have to PPE up for that
microbeads = RIP
never seen that stuff
i have a PVC to the attic and its very hard to pull new cable cause it has friction
i could buy the 5gal and just dump it down the pipe
xD
Fuck that's what i needed
Cable pulling lubricant
Fucking ripped my ceiling
Caught on something and just tore down
Always pull parallel
RIP
i have to do a ceiling install at my house this weekend
RIP me because my attic sucks to move around in, forget the heat
beams everywhere cause the roof is fancy shaped
Finally got it out of bell support
they limit the upstream when using download
software wise in the home hub 3000
Guy says that when using the full capacity of your download the upstream will be limited software wise because of the 1.2 gigabit sfp port
so it gives about 400 to the upload and 800 to download
thats what he said
Well he's wrong
that its software limited to priotize your download
i always get 800 and 400 upload
constant
which explains it
guy says yeah install the pfsense router before the bell router and put it to your switch and than the switch to the old router for your tv
and use the switch interface for internet
should remove the software limit, what they do for business's anyways with tv still
@void oracle rip.
took 4 different techs til i got this guy that confirmed my theory
ciscos routers work the same way
the license applies to up and down at the same time
All the others were like your internet is running optimal
im like nah
I want better than optimal
this guys like aight i can hook you up
you buy a 100mb license you only get 50/50mbit if both are being blasted with traffic
But in the end he wanted to sell me one of their business routers
saying it would be better than the pfsense
But definitely confirmed my theory why speed tests always limit to 800 download and 400 up
Unless i only do up or download
than its 1.0 gbps
they also said that its kinda that way for a reason to prioritize business
also confirmed their router input port is only 1.2 gbps sfp
so their 1.5 package would be pointless
@void oracle that's not how that works. Period
Yes it's a 1.2/1.2 gig sfp
But it's doesn't mean you can only get a sum of both
besides the ethernet ports are 1 gigabit
again as i said its soft limited
not hard limited
it has more
but they limit it for connection quality they said
What are they claiming to limit
the sfp intake from the port and out take to ethernet
the download traffic is protitized
while upload is secondary priority
Upload and download DO NOT SHARE PRIORITY
atleast on this one they do on the soft limit
you are talking about gpon still right?
yea that kind of sucks love my fiber its not gpon active fiber is so much better
mm i have a dedicated line
doesn't matter
your only getting 1/32 of the upstream device for communication
GPON is about running single cable with splice points
but again im trusting what the technician said before you
he actually works on these routers
Ok well he's doesn't know much
I work for a fiber company, and we run active because its just better
Because false information make me mad
how is that false information
Thats what i was told
that the router does software wise
He told you to get you off the phone
tbh every router can "software" limit your connection
@chrome hound we run active and gpon and active is a pain to manage
it can be, but its just better
Meh. Both equal
even gossamer agrees its possible
well i mean im the 3rd in myneighbour hood to get it
our back bone is almost finished upgrading to 100g fiber links
all my other neighbbours are still with cogeco
In terms of real world performance yes, they are pretty equal. Unless you are an idiot putting 32 gig links on a single pon
But with 100/50 it works just fine
but watch when i switch out the router for a pfsense router its gonna route the traffic better
think about that for just a sec, and your typical ISP running as cheap as possible, then come back to me
instead of their stupid preset rules
over subscription is the name of the game, and you are lying to your self if you think ISP are following the recommended setups
why im doing my own setup now
said fuck theres
getting a sfp on the white list
and doing it my self
You realize I am an engineer for a ISP right? Yes oversubscription is mandatory but I don't push 100/1 that some do
you realize I don't know you from adam
KEK
sooo you could be a 10 year old girl on summer vacation
^
Oh snap
wow that is a lot of ports that you could mush pudding in
my current fiber speed https://www.speedtest.net/result/d/05b4a4d7-fd4e-4b11-aed5-dff20abc7071.png
how about this one: https://www.speedtest.net/result/d/5071b4d9-bfa0-4c1b-9ffa-c65fb1418dbd.png
one is 15 feet, the other is 80 miles
yep
the browser can not handle speed tests above a gig
yeah
well if you strip out adds with a blocker it can do alright
@void oracle are you sure your gpon? if they say you can replace there hardware with just PfSense how are you negoting the GPON with there hardware?
im pretty sure im gpon?
they have a stupid ip table
that stops it from touching traffic and just passes it through
is what im following
my setups exact same
from the wall
@chrome hound if your device works with pon sfps you can work with your ISP and it can replace the ONT. The signal is no different than active except it's just a broad spectrum that's shared
well sure, but you still ahve to deal with timing so your not flooding
Im planning on grabbing a sfp+ emulex as a pass through for a pf sense
@chrome hound yeah that's handled by the card
oh they make an SFP that can?
specifically the card im looking at
Yeah just a pon sfp is all you need.
gonna use that as a ppoe pass through to my switch on the pfsense
ok I see so you are dealing with it, I had assumed it was a normal sfp cage
technically I can take the fiberoptic from my ISP provider router and plug it into my switch, I was told not to as they would kill my connection if I did it 😄
Kek
guy said go ahead but we wont be able to test any of your equipment from h ere
and i said good
lol
But im planning on increasing my networking switch amount
and a couple other things
im looking for an actual cloud router eventually to reeplace this pfsense
surplus place will get one in eventually from a local isp
either ubi or cisco
I am your cloud router
but like its ussually 10 bucks a switch
or what ever
i pick
yeah thats what my hpe 2910al is
a layer 3
48 port
my current switch and ONT
most L3 switches do not handle NAT
it could be used as a router with some configuration and an external router to piggy back the nat
cause i mean i have 44 ports to spare
only planning on using about 7 at max so far
setting up access points soon
what's great is that you get the luxury of having to pay for the power draw of 48 ports, regardless of their utilization
this has a low power mode for ports not in use
neat
hey you can never have to many ports on stand by!
then buy a used 4510 or 6509
im planning on making my house into a full integrated smart house eventually
locks lights
plugs
everything
dont trust those
nest is shit
can you detect when @thick minnow jams a fork in his outlet?
i would use cctv for that kinda stuff
which is what that middle switch would handle i think
it does cctv and ppoip
you've linked that photo over 20 times or something
yeah but i've only recently figured out what it is
and not sure what to use it for
so its basically phone routing right
actually nvm doesnt do cctv
not worth it
just phones
Whats the one under that nec do you think?
@chrome hound
is it a normal switch ? or does that spacing mean something, Like a load distributor or something
can't you just google the model number
didnt catch it
will be there next time just wondering if hes come across on in working for an isp
do you have a higher resolution photo above nintendo DS
kek was kinda in a rush, was like 20 people behind me
didn't want them to catch your hentai phone wallpaper?
kek nah its just a bunch of shelves so its hard to get through right there
Your awesome roypur
jesus
The picture you posted earlier was higher res.
OOOOOF
this one has nat support
totally should've grabbed this one
my hpe 2910al doesnt have nat support so either using them in conjunction or just this 1 wouldve been awesome for my sfp connect
connection
wouldnt h ave needed a pf sense
then go get it
its a charity
computer for kids
they sell off all these things to keep the building open
and the lights on
oh windsor?
yus
Google machine is pretty accurate. I'm currently living outside of Manchester.
I would have had no idea where to start with that switch
like someone here could probably recognize it on looks alone
i mean, looking at the original photo that hadn't been reuploaded 47 times like roypur did would have been a start lol
I mean first couple times i was asking about the nec
not the switch
oh and that Q logo
asked if anyone knew of any netowrking companys that used that logo
didnt buy it
just didnt know what it was
now i can tell that nec is a media company
well
atleast this one is
specifically phone
i was looking for a cctv switch kinda thing
They are big, were big in the phone system world. Almost all customers that swap to hosted are tossing those
Yeah this is all from isps
sfp connections everything like that
just a bin of gpons
But they do have other gear. I'm not familiar with anything other than their phone sysrems
but just about every cable you could ever want for networking is there
brand new in wrapping fibre cables everything
I don't know why they would toss it but fiber is cheap
yeah but its like 1 dollar per cord you untangle
Are the tips covered?
I would still by a cleaning tool
yeah definitely
but i got a bunch of dac sfp too for my switch
3 just incase just need 1
rest of my network is gonna be through cat 6 cabling
just need 1 for from the pfsense
turning one of my old file servers into a pfsense
thinking either athlon x6 1090t or athlon x4 645
I think the mystery box with a Q might be a Compaq KVM.
@glad prism Can you detect whenever I make sure you breathe your last OOF?
what name do you want me to call you
You can call me:
🎵DOWNLOAD NOW🎵: ►ITunes: https://apple.co/2MiU86f ►Spotify: https://spoti.fi/2WEf8bQ ►Amazon: COMING SOON! Rock/Metal Playlist!: https://youtu.be/GvMhS0BTXyA...
that.
super late question but... what on earth is a "cloud router" 😉
Its a router that is place @ cloud level
@strange silo Something that's controlled via the cloud 😛
You laugh but they do make router and firewall vms which you can use on cloud services
@strange silo
@strange silo basically are routers that are automatically configured via the cloud, its so its easier to manage big networks
sorry if i'm late for the anwer 😄
You can say that it would be quite full if you filled that case with HDDs, and have ATX PSU as I do.
Large capacity HDDs is heavy
Yup
did you know the more data you write to a HDD, the heavier in weight it becomes?
anyone using ansible yet?
i just installed it at work
gotta figure that shit out
what i want it to do is complex and RIP i have no experience on that platform yet
^_^
We were considering ansible but never got around to it
do you remember the "linux inside windows" thing?
i did it on my work laptop
using ubuntu as the base
installed ansible on that, seems to work ok
im not gonna spring for the enterprise GUI version unless this thing performs miracles
hopefully when they inventory my computer they dont find it 😄
You really only need ansible in large instances such as SNMP fucking wrecks our old 6513 still kicking and ansible is lighter in it's polling
If I remember its a constant stream of meta data
im looking to see if it can query complex configurations into a human readable view. Like, I give it a VRF name and it logs into multiple devices, reads the configs for that VRF, and lets say while reading BGP it grabs the route-maps and prefix lists for the output
Next, I'd like to give it some basic parameters then have it create new complex VRFs
can it do one of these? i bet. both? not so sure
my goal is to save time over the current methods and reduce human error
im just not sure how well it is as a query tool. it can certainty deploy new configs
I would not apply any automated process to BGP, but if it's just to poll it and it's VRFs then sure
I only began to look into as people said how well of a query tool it was but like what you are doing I've heard of some crazy things people are doing with it
I have a lab with ios, ios xe, and ios xr... So at least I can test it without prod
Let me know how you like it/limitations
@hollow marlin You need some ssx instead of SNMP 😄
@clear igloo shhhhhh....don't say that too loud, the 6500 is listening
Is that was you call it now? 😛
OOF
@little schooner hi
@waxen scroll yes, I'm still alive
@waxen scroll I was sold an apple watch series 4 unit that was marked as "New", not "New (other)" or refurbished and stuff. The watch powered on for one day only. Once the battery was low, like 20%, I powered it down and put it to charge for 1 hour in my ups outlet.
Now the unit doesn't even turn on anymore. And It was my 29th day out of 30 days to return the unit back for a refund.
Wow did I ever luck out with the refund
amazon?
you can get amazon to accept returns past the window with a small amount of pressure
Ebay @waxen scroll
Yes for Amazon, they accepted my return for clothing one year later
I didn't know suicide hackers was a category
@little schooner oh lord they made an animated logo
Hey guys there's only fixed wireless service available where i live and right now I use 4g LTE network for playing games. My question is, is fixed wireless good for online games? Even on LTE network I get lag spikes
lol I have a new switch for my studio and it sounds like a microwave... OVer the other side of the room to sit in my server cabnet for u! 
My router too, gosh it's loud
is fixed wireless good for games No.
You can get silent 10 gigabit switches now in low port count (4 port) or silent 24-port gigabit switches, even quite full-featured managed ones.
@pseudo blade juniper has the EX2300 24 port with 2 10gig that's is fanless that we use. The PoE version however is one of the loudest switches we use and don't have fan curves
PoE switch variants tend to run a lot hotter.
this reminds me of a microwave meme
The one time we run a test run with Ubiquiti at a conference and a bug makes it shit it self 😡. Yeah def not going Ubi after this
I was going to give some of these switches a try https://www.fs.com/c/1g-poe-switches-3255?sort_order=price&count=24&settab=one
@little schooner people say their switches are ok but be careful the PoE, I think they are passive
@hollow marlin yeah. I mean I hope this is factual statements they are listing
@waxen scroll Starting to learn ansible now as well, different use case but yea fun time
hello guys, i was wondering if there are any rj-45 connectors that are compatible with "fat" cat7 wires or do I absolutely need GG45 connector? (i need anything backward compatible with rj-45 port)
You definitely can put an 8P8C connector (often called rj45) on a cat7 cable but I’m not sure why you would want to. Cat 7 is backwards compatible with cat5e/cat6 standards. So you can put any normal connector on it though you are supposed to get the shielded connectors.
I’m not sure what your use case is but do note that a majority of people selling cat 7 cable are trying to scam you and don’t sell you cable that is actually up to the standards. Cat 7 is also not recognized by the TIA and EIA.
I’ll also mention that in terms of speed, cat 7 is 10G over 100m, the same as cat 6 for Ethernet purposes.
But if you must use it for whatever reason, you can put standard 8P8C connectors on it. Note that you must have the same connector on each side
It would work fine, the cables are not really much thicker. It’s in the specification that you can but them on so as long as you have real cat 7 then it is required to work
i have a cat 7 in my wall, i know a bit bout networking and im a computer technitian (currently in college but we never spoke about networking much
but rj-45 cant be put onto it
even the wiki says it need a gg45 most likely
and many forums, im just not sure of there are alternatives to gg45 or no cuze i cant ge it here locally
Even if you put a GG45 connector on it, what you you do with it? There is only an extremely small amount of equipment that supports it
or maybe its a cat 7a, now im not sure lemme gocheck
i dont care about the speeds even if it dosent give me more than a gig
A fast ethernet cable would of saved you money then
my whole house is wired on cat 7
and i have like 400 meters of it left
and I want to use ot
it*
I don’t know why anyone would think that using cat 7 is a good idea and I suspect that since you can’t get a normal connector on it that it is a fake
Buyers remorse time
maybe because i used the plastic ones
@fresh copper because people think cat7 is better because 7 is bigger than 6. Not a jab but just ignorance. Companies are playing on this ignorance knowing damn well it's not a standard.
Cat5 is all anyone needs. It can go 10gig up to 30-40m.
I was more making a point that it’s useless over cat 6A rather than truly questioning why
@fresh copper but that is why. Most people don't know the differences
Yeah Cat7 is just like saying that the 'S" in iPhone 10s means "SPEED".
It's all just marketing gimmicks.
Which is exactly my point. Cat 7 goes beyond being just marketing to the point where a majority of Cat 7 made does not even follow the standard
Does anyone know how I can set up Wake on Lan through my prime x470 motherboard from Asus and my RT-AC51U Asus Router
@fresh copper it can't follow a standard. There is no standard for cat 7
i think I didnt ask for opiniona, I think I asked for connectora help.
i am not gonna ask for helo in here anymore cuze all of you just make jokes about mw having cat 7 no knowing my conditions I asked which connectors to get not for opinions and which cables to buy.
I put up a direct ethernet cable between my NAS (Unraid) and my desktop to not need to buy a switch or data go via wifi via the router.
It worked, yey
(My NAS have 2 ethernet ports)
Some said I would just get 65 MB/s writes on it for some reason before I did it (I got 50 MB/s on wifi)
But nah
I am happy
@rugged fern Well then if that's your attitude you can leave. You were given connector help, either use GG45 connectors or nothing since RJ45 don't fit per your earlier statement
@lean pollen Yah, most disks will give you pretty much full gigabit speeds and if you're directly connected to the NAS I would expect you to get that unless you have some really old disks or something
Its just someone told me I would not, said something about unraid parity bla bla overhead bla bla, I dont know
@clear igloo this is why I've started charging a consultants fee for questions here
@lean pollen Unless you have a single disk in unraid maybe but yah, sounds like they didn't really know what they were talking about shrug
@waxen scroll Like people get pissed off so easily. They answered their own question and then got pissed people kept talking about Cat 7
Its 2 disk, one data and one parity, JBOD
@hollow marlin there is a Cat 7 standard. It’s just not recognized by the TIA and EIA
To be specific, it is ISO/IEC 11801 Class F
CPU Load shown in the Unraid Dashboard is very diffferent from what shown in the System Statistics plugin
@lean pollen I guess they are measuring different things
I think I'm going to switch back to Sophos XG from pfSense
@stable crest what happened with pfsense
It doesn't have threat prevention or scanning
Also the wifi ap isn't working as well with pfSense
Hi!
any recomendations on 24 Ports wich for home lab?
SFP+ is a plus
cisco another plus
thanks!
(silent operation is more important than cisco)
Unraid port forward in router to spesific port on Unraid server that points to Lets Encrypt
Does the "Service" thing here matter, or is it just an auto fill feature and I can leave it on "other"?
Because if I choose HTTPS, it locks the ports to 443, and I can not choose to change the internal one to something else, that I need to do
The router/modem, it has a firewall, so yes?
Please say if I do something I should not do or whatever
I want to set up Nextcloud with Lets Encrypt
yeah, use the "other" option, this manu is made to be user friendly, so it uses simple terms
@lean pollen and https is universally known as 443 for average people
@clear igloo @little schooner we did it, reddit!
the cable lube and chinese finger trap made this so EZ that i ran cables for all the other rooms too
I've got two gigabit NICs teamed on my server and it nominally runs at 2x1Gbps. Annoyingly, one of the links keeps dropping and then re-establishing at 100Mbps. If I simply unplug and re-plug, it starts back up at 1Gbps. It's more annoying because it seems that it's the primary link and so most connections are capped at 100Mbps.
Any ideas why it's dropping?
its a bad wire
100% can confirm it's either a bad wire, connector, or port on a device. I'm leaning towards a bad wire or connector though, as I just went through this with poor quality keystone jacks in my house.
@waxen scroll I have this issue where my Edgerouter WAN connection to the modem negotiates to 100mbps after a random period of time. Usually in weeks.
I don't know if the modem or router is to blame. I have to wait so long in order for it to show up again and collect its logs
But to see the logs, I need to directly connect to it and I'm hoping that doesn't clear the logs of the link speed proboem
@little schooner finally like 5 feet from the patch panel with the wiring in the basement
last mile!
last step is going back to hot AF attic and dropping the wires in the walls
@waxen scroll thats awesome. The hard work of running it will finally pay off
i used most of my box now 😦
im down to maybe 300ft
good for one more run i guess
i waste cable on purpose
i'd rather have excess once i reach the end instead of 3ft too short
Cheers for the help guys. I updated the firmware on my switch last night and it's done 14 hours without dropping so far. If it goes again, I'll re-terminate the end and maybe then swap the cable.
@waxen scroll for my front porch, I kinda went too short, maybe like a foot short, but next time I will add like 20 feet extra or something and waste cable too
I'm kinda disappointed I didn't do it longer
❤
@little schooner looks like i only had 10 feet of excess on all 4
i wasted less than i thought
Nice bulk of cables hanging out there in the front
#monoprice
only the best
now i gotta find my cable tools
i got one of those fluke kits
this vaguely reminds me of a linus moment from "Building the $100,000 PC"
Wonder whatever happened to that.
they probably needed a part that takes 6 months to get
Lawsuit inbound.
Big OOF
Cisco needs a little fun spiritedness in their brand the way discord does it.
I would assume so.
I guess I will have to ask someone who actually uses pfsense
I use pfSense, cough cough. I'm a network engineer. What I'm referring to is that BSD might not have those exact flags, or the output may be a bit different, but it's still linux, so obviously it would have iptables.
how easy would it be to have pfsense also act as a nas?
Don't. Setup something adjacent. Security reasons. pfSense is also ROM-based.
ok
so pfsense on a vm?
If that's how you want it setup. I have one in a VM. Mostly stable.
I say mostly stable because I've seen it crash rarely, few others have the same issue, and it could be my server being bad at the wrong time. Not easy to tell, but for yourself, you won't know unless you try it. Perhaps yours won't have any issues whatsoever.
the main problem for me is that it would have to be a set and forget thing
Not the best idea when it comes to security, but otherwise, you'd never need to adjust settings so long as it's done right the first time.
oh also smart queuing
does pfsense support easy beginner stuff like fq-codel?
what do you mean by "output would be diff"
I use OpenWRT because its very open has a great community
easy to program for
and above all IT WORKS 😃
I can download ipsets from various sources (lists of IPs of known hackers and script kiddies)
which I can use with iptables in any way I see fit
mostly from https://iplists.firehol.org/
and with very little bash scripting (like 50 lines of code) I can use these lists in my firewall setup
only place I am struggling with right now is the logging to a central server (ELK stack) (Elasticsearch Logstash Kibana)
NFLOG (Netfilter Log) uses ULOGD2 and can give out JSON locally on my router but getting it sent to a remote server has been a challange
TIL dooley is a netadmin. i assumed sysadmin
The only network issue I'm facing is the negotiation of 1gbps downgrading to 100mbps on the WAN port.
The pfsense crashed the other day for me during an upgrade. A quick reboot brought it back. But I can imagine only having remote access and that thing needing a fix by physically going on location
@little schooner that's why OOB APC power supplies are a life saver
my internet providers only give me 8mbps down and 0.8 up any way to get a solution to this?
Pay more money, move, or live with it. There isn't some way to magically up your speed outside of that
@little schooner that could be by design
many providers make you hard code 100/full if you dont purchase over 100mbit
if the device does auto to 100/half, you know thats the issue
Hey guys I have a question about the gcp and my on premise network,, I almost tried everything and I am struggling with it. So here we go: I want to connect my on-premise Hyperv-server(s) with the Google cloud platform and use a public ip from Google. So clients and others can't see my home public ip. How do I do this?
so, knowing nothing about google cloud. did you try running a linux box of some kind on google... perhaps a router distro... then using a VPN tunnel from on prem to the router in google, then making the VPN your on prem default gateway? The effect is the router on google will NAT and ta-da you have a google public IP
No I did not tried that, I will give it a try @waxen scroll
its basically a site to site VPN back to a datacenter like a corp network. if you didnt want that you can do the same linux distro per-computer with openvpn or something on each OS
@waxen scroll oeff openvpn I wasted 2 weeks trying to set it up 😅
@waxen scroll with openvpn the computers could ping each other but the gateway was not forwarding incoming traffic from the outside
@waxen scroll but thanks, I will spin up a router os and try that. 
@hollow marlin does that work if even that access is cut off to the power switch?
I would have to tell someone onsite to do that
@little schooner that's what the second circuit is for
Oh right.
Also anyone going Cisco certs there has been a complete overhaul. https://www.cisco.com/c/en/us/training-events/training-certifications/certifications/professional/ccnp-routing-switching.html
Once upon a time, our schools iDRAC on two blade servers was visible and accessible on the public internet with default credentials
We are happy that no damage was done in the time it was active but reflashed the firmware for safe measure
F
@waxen scroll I do both.
ive done just as bad
RDP exposed to internet, just on a different port than standard
was at home and on purpose
The reason it came about was that my teacher wanted a "quick and dirty" solution to start preparing the servers instead of waiting for the IT department to make an extra run back to the classroom wall jack. The wall jack had its run disconnected in the server room, which was needed for us to manage it outside of the server room, but there was a wait time and we wouldn't have access to the server room again for the next few days.
So he figured that he wanted to use some of the 4 available public IP addresses our switch had access to and place them on iDRAC so he could start using ikvm to install esxi and stuff
I am happy he was able to see the danger once I brought it up to him, as it was really unprotected and ping able, and could see login screen
That was the first time, also, that I dealt with a switch being able to allow hosts to assign themselves public IPs and start routing to internet right away
Unless the switch was a layer 3 device itself
But I don't know the details
So new cert layout coming from Cisco. Sounds like it will be interesting
Glad it's dropped to two exams and you can pick the 2nd
@little schooner you talking about NP?
Yes
I'm looking for router recommendations. Preferably 802.11ax without breaking the bank with either options for custom firmware or something solid enough to config.
802.11ax is not finalized, youre better off waiting until then
@little schooner yeah the NP is two exams but route+switch are now one big massive exam and then just specialize.
I'm just waiting for confirmation that I can go straight to CCIE lab now
Any AC recommendations then?
i think im done with certs. with the announcement i have even less of a reason
my job history is the cert
nobody seems to pay for them anymore either
New certs are moving in the right path. Job history only goes so far
ive not had a single interview ask about my education or certs
nobody even checks the cert ID in a background check
Most interviews try to get your knowledge out. Certs help get past HR but are still valuable
hey linus i want to hook up a sever with a flash drive and a netgear router so i can put stuff on it over my wifi
So.... i have a a 10g internet set up in my house locally and 1g to the data center, is their any good thunderbolt 3 10g Nic for my macbook pro mid19
Plus, at least to me having the cert shows that you can go and work hard on your own time to learn what is needed for the job. At least that's one way to look at it
@thick minnow that has always been my view. Someone with a cert is showing their will to learn, especially if it was on their own time
I don't get that definition of socks
How does it work behind firewall?
You mean like hiding traffic with a port like 443?
@little schooner many corporate environment block * to the internet
They allow port 80/443 only from a proxy
The proxy blocks naughty websites
I see
Just did a demo of the Boson netsim 12 software. It's pretty good
@thick minnow that's what I used for my CCNP. But I got it when it was bundled with the test as well. It's good but very buggy
@thick minnow i hate wireshark
i LOVE opnet/riverbed products
you and @little schooner could be best friends tho
How do you reset these things
@waxen scroll sure, I could use another shark friend
you unplug them
@subtle glen You need a call manager
ask them for their call manager license and server
is this call manager a software or what
@clear igloo i dont do voip cause F that why dont you explain
lol and i thought getting 2 voip phones was gonna be fun
yes its a software but i dont know how you can get it or if its locked to servers using firmware
i got a tour of the server room and they are not getting rid of the voip servers tho
hope they have some spare license
what do you do at this job
and just now seeing the server room? ;o
its a school/work experience, don't know how you call it
o
i started yesterday..
lucky you. i wasnt able to find one when i was in school
i have to admit it's sad to see the empty racks. everything is getting moved to the main building somewhere
i want an intern
lol
@unreal wedge do you have interns?
for now im preparing pc's by booting a special ISO that makes a connection between the laptop i am configuring and a server room somewhere else, change people's docking stations, swap the VOIP phones with headphones that work with the laptop, registering badges etc
so, do i need a call manager license with the software running on a server mandatorily? even if i just want the 2 phones to talk to eachother?
Asterisk is one of the well known open source PBX that everyone uses
@subtle glen i think the phones can send data to eachother for a call, but not until the call manager helps set that stream up
again, i dont do voip. limited knowledge
@waxen scroll yep
@hollow marlin @little schooner might ask them for a license or something before trying them out
@waxen scroll 
I didn't setup voip but I saw a meeting where my college got some contract workers in to set it up so that they could ring different buildings without having to call an external number first
Also, the address book was totally out of date
why is this cisco stuff so complicated...
Not sure, but I guess it's good job security
But mostly because people want their systems customizable in a business setting, which means there can't really be one easy solution that everyone can just adopt.
Making something customizable like that can be hard to make it simple to install, I figure
what if a small office buys like 3 voip phones
they have to buy a server, get a license etc
Well you know Cisco and $$$
You don't buy three phones that require 6RU+ of server infra that's meant for large enterprises
They can't separate
i get it that this office has a lot of phones on diferent floors and i understand having a centralized server
There are plenty of offers, even from Cisco, that are cheap and easy to setup but for robust deployments of tens of thousands of phones, things are going to be complex
I've never installed those phones or voip but I'm sure it's an interesting configuration
@clear igloo Voip scares me because some of the phone calls I overhear in a teachers office sounds like they are literally in the same room
lol, that's a volume problem 😛
so if i took this phone from a thousand phone enterprise there is no way i can make it work without servers and software?
Not those models, no
Which models are the small business ones? They are plug and play?
Surely the licensing can be tamed...
Bootleg Cisco
If you don't want servers or anything, you need to go cloud managed or as a service stuff
@little schooner For small business you have things like the small business 4000 call manager stuff
there were also some smaller phones, but i guess the dimension dont matter
I see. Well that helps out a little bit
You can, for small branches and whatnot, run it on like an ISR router even
Like the 1941?
I have one of those
some cisco routers have VOIP functions??
Yah
Someone bought the router from me already though
In the same state
That was pretty cool
i guess these dont
It was through ebay
may be too old
Not sure about the 800 series routers but I'm pretty sure the 1700 wouldn't but I could be wrong
yeah but considering you can put the phone between the rj45 plug and your laptop, that creates a bottleneck for the laptop
Oh right like for my example with Dell laptops.
They sold me last year with 10/100mbps port
It was 2018 and gig is that expensive that they cut the cost that way?
Anyway it was on sale for about 478 after tax
now that i think about it, the equipment the server room in the office where i work needs an upgrade. They still have those green-ish switches
i remember those to be kinda old
you know what switch color really doesnt age well?
other than beige
@clear igloo extreme.
nope
fuckin purple switches
LOL
also those SUN servers that are purple as well look old
I have a kind of odd need. I need a PoE wireless AP that also has a wired port. Concept: Ran a line from how to garage, so can still have cellular calls when garage door is shut. Have older computer in Garage as well that does not have a wifi adapter. Thus the need for the wired port. Alternatively, a switch that can get power over ethernet would work too. Not the most conventional setup, I know, but in the sticks we do things unconventional all the time.
if anyone knows of a brand and model, please PM me
ubiquiti makes a few
i use one myself
-or-
UAP‑AC‑HD
i use the HD, but for a garage i would use the Pro
this wil work https://inwall.ui.com/