#networking

1 messages · Page 165 of 1

clear igloo
#

For Windows you can just put the NAS IP in the File Explorer and then mount the share that shows up that way. If you use their software I'm not 100% sure, haven't used it in a long time

#

I know there is a way to do that with Linux and MAC too, similar to the Windows method

ancient osprey
#

so if I have a dip would I need to set up a ddns?

clear igloo
#

Yah

ancient osprey
#

Okay, so, I would then have direct access anywhere, anytime. No upload or download required

#

Would, a server or a NAS be better?

little schooner
#

Well, if you are pulling files from a remote location, yes, you are downloading them. If you just want to access them (but not download them to your remote location), yes, no upload or download required. the upload of files from NAS to your remote locatkon is limited by homes upload speed

#

If that's what you mean by no upload or download required

ancient osprey
#

I want to access them and work on them from anywhere on any os

little schooner
#

Then yes, as you copy files from NAS to you, it will have to download (your computer) and upload (NAS)

#

Just hope it's not big files, like isos

#

They will take forever with slow upload speeds

ancient osprey
#

I won't be using ISO's

little schooner
#

k

ancient osprey
#

I just need a system where I can access and work on my files

#

I don't want to use google drive or dropbox or onedrive. As they are upload and download

little schooner
#

Like lurick suggested, a Nas is fine.

ancient osprey
#

and it's all cross platform. so all I have to do is mount it to the os and it's good to go and I can just start accessing and workong on my files, correct?

#

Sorry, I'm just triple quadruple checking everything making sure I understand

little schooner
#

Qnap and synology support nfs and and smb, so yes, works on all major operating systems

ancient osprey
#

Okay. Thanks

#

Anything I should know before continuing?

little schooner
#

Yes. If you are directly accessing Nas from within Linux or windows, you are going to use a VPN to access the files, right?

#

Ddns with a Nas will only let you download the files via web interface

#

Due to the firewall restrictions

#

If you use a VPN, you don't need to punch holes for file sharing

#

Or use https browser website of the NAS with its ddns

ancient osprey
#

Yeah, I was gonna try and setup a vpn connection to access directly.

little schooner
#

Perfect. There should be no issued

ancient osprey
#

Okay, would it work fine on MacOS?

little schooner
#

My professor uses a program called tunnel blik on Mac for OpenVPN connections and it works fine for him

#

He doesn't mount file shares in Finder, but I'm sure you could do that and it's transparent

ancient osprey
#

Okay.

#

Lol. I've asked around and most people thought I was crazy

little schooner
#

Well, having it exposed on internet is a bad idea

#

With a VPN connection it's better

ancient osprey
#

Yeah. I'm just trying to cut out uploading and redownloading all of my files 24/7 it's too much of a hassle

little schooner
#

Is there any reason not to use a network like 10.0.0.0/21?

#

That only breaks on legacy gear right?

hollow marlin
#

What would it break?

clear igloo
#

Like maybe on gear from 1990 or something

hollow marlin
#

Yeah it wouldn't do anything from the past 20 years. Classes don't exist anymore

little schooner
#

I see Cisco gear has this subnet zero config entry

#

That's what got me thinking

#

@hollow marlin just the subnet 0 part of it

#

Okay thanks

subtle glen
#

What is the purpose of adding your ddns to your router? Is it just to keep the ddns updated when my ip changes?

clear igloo
#

yup

little schooner
#

Yes that's the purpose

subtle glen
#

so like to use it to access my nas, since you were talking about it before, i still have to add the ddns to the nas config page

little schooner
#

That's how I can find my OpenVPN server from anywhere by ddns name

#

And yes access Nas too

subtle glen
#

with the ddns i have, there is a program that does that

#

good to know i can also do that from the router

little schooner
#

Yes. Like Edgerouter, it has a client that can connect to the ddns provider and keep it updated this way through api

subtle glen
#

in fact i am looking at that right now

#

and to access something with that ddns, like a file server, you put in the run box on windows \\domainname.ddns ?

little schooner
#

Well, I never used it that way, but if the ports are open, I guess so

clear igloo
#

You wouldn't expose the file server to the internet I hope

subtle glen
#

lol

little schooner
#

I've seen it used as a way to reach a https website internally

subtle glen
#

havent done anything like that so i am safe

little schooner
#

Like synology relay with ddns

clear igloo
#

Never messed with those clients since I just tunnel everything back home anyway but if the client works in that way then yes, I guess you would use the ddns name in the address bar of File Explorer

subtle glen
#

but if you vpn home, then you would just put the normal nas ip, like 192.168.1...

little schooner
#

Convenience or security

clear igloo
#

I was saying if the client uses the DDNS to access the files through a tunnel of sorts then you would put in the DDNS IP

#

Not sure how it works though, just guessing

subtle glen
#

i mean, i'm getting confused whether you put that ddns into the search bar of chrome or what.

#

never done anything like that either

clear igloo
#

Depends on what you're doing. If you're mounting a drive it would go in the address bar of File Explorer

subtle glen
#

seems a bit dangerous tho, like you said, exposing the nas to the internet like that

little schooner
#

Yeah that is dangerous.

#

It works better for like gateways or hitting a VPN server.

#

In the config, the server name can be the ddns name and from there it can work its magic

#

Or an open ssh server on the internet

#

Ddns names helps a lot

subtle glen
#

speaking of vpn's, did you made your openvpn one with a guide or something?

#

cause on internet you mostly find videos about using openvpn as a gateway to vpn to another location

little schooner
#

Heh, I ended up creating a virtual pfsense to handle OpenVPN with NAT and some obscure configurations for dnsmasq

#

It's not ideal setup. If you can do it on your router, do it that way

#

I have multi step hop which I really hate but I can't change it out quite yet

#

On the flip side, my OpenVPN speeds are crazy fast since it's a tower server cpu

subtle glen
#

on the edge router, to make the vpn you need a RADIUS server which i dont know how to make/what it is

#

so was looking for another option

little schooner
#

You don't need a radius server for it to work

#

Just local username and password setup is fine

subtle glen
#

wait, did you do it through the cli or gui

little schooner
#

It needs an OpenVPN server config and then you need a client config file that points to the server by its internet name or WAN IP

#

I did through cli, GUI doesn't even offer that option

#

Half baked updates by ubnt team

subtle glen
#

blob told me that once now that i think of

little schooner
#

It's silly, they have a GUI for l2tp but not openvpn

#

Why is there no love for OpenVPN

#

Maybe it's the license.

subtle glen
#

on my gui i have the pptp one

little schooner
#

Whoops I meant to say ipsec

#

Not l2tp

#

@subtle glen

subtle glen
#

oh ok

little schooner
subtle glen
#

i've never heard of openvpn and edgerouter

#

this is new

#

i tried to use my raspberry pi as an openvpn server but there was some kind of error during the setup

little schooner
#

this is technically in a GUI, but its not a helpful wizard

subtle glen
#

sneaky

little schooner
#

Yeh

subtle glen
#

i haven't read the guide but i suppose you put the openvp server ip in that field

#

im reading it now, didnt get to that step yet

tired hearth
#

Hey guys, i thought it would be more appropriate to type here, instead of #tech-support. Essentially, I am looking to get a nas that is 4 bay but, could be more than that and play games such as bf4 or steam games off it and use ssd for caching. My network is 1GB/s and Im wondering if the games would run just fine

subtle glen
clear igloo
#

I play all my games off my NAS and aside a few spikes I've never seen it need more than 1Gbps

tired hearth
#

Okay, what nas would u recommend? im currently looking at synology ds418

waxen scroll
#

@clear igloo come back here and take responsibility for your own advice

waxen scroll
#

its been 12hr

little schooner
#

A Nas? Synology if you want the easiest and best GUI experience

#

I use a server for my "Nas" but consistently pull 1GB per second for large files

#

A synology NAS to do that will be mighty more expensive

half thicket
#

Hey guys, just wanted to ask if you have any recommendations for hosting a storage server at home.
I obviously have a good internet connection, but not data center grade. I think about this because adding storage to my existing root server costs a lot of money. I haven't calculated this through yet but it could easily cost more than the electricity for a not-so-power-hungry storage server.
It must provide publicly accessible urls to the resources uploaded to it, so security is also something to keep in mind, I think.

waxen scroll
#

@rocky badge what do

rocky badge
#

@waxen scroll PingReee

little schooner
#

@half thicket how much storage do you plan on needing? And do you care if it can copy at or more than 1gbps transfer speeds over network?

#

Because I'd suggest a small micro atx case like one from Silverstone so that you can tuck it in a low profile area or in a network cabinet easily

#

And use a 10TB hard drive inside it or something

#

That's what I was going to do when I get rid of the wire rack I'm using

#

1 10TB hard drive, 1 4TB NVMe, one optane ssd, one Intel 10g NIC, and windows server 2019 on it

#

In the size of no more than 6 inch tall

#

Since I don't need more than 10TB, it works for me

#

But if you need more, Nas units or an atx case suffices better

half thicket
#

I think 10TB HDD should be fine, maybe an SSD for caching. I would also like to have a RAID setup to prevent data loss (I know, redundancy != backup)

little schooner
#

The most redundancy I've had was one more drive. At 10TB, raid becomes incredibly expensive for redundancy

#

I got rid of my raid because I have a Samsung 970 pro that fits everything I need

#

And NVMe doesn't fail like a hard drive does

#

To alievate concerns, paying for a cloud backup is a good idea. Then you don't really need a raid if your internet connection is fast

#

Again, with hard drives, I would raid, but I've had my fair share of problems with it that I don't want to do it anymore

#

Still, I highly recommend something like a synology NAS, they are well built and accept many hard drives to protect your data

tropic sail
#

I just use freenas to have my 2tb storage drives mirror each other. Then my other 2 drives are for VM's for game servers that friends connect to. Thank god for fiber to the home 1000up and 1000down 😂

little schooner
#

How does one fit devices, IP addresses, host names and connection points in a neat fashion with visio? Is it a creative science?

ebon wasp
#

Is the add text to shape option not good enough?

waxen scroll
#

hi @little schooner

#

the secret is scale

#

set the page size to fit a piece of paper IRL

#

then go as small as you need to make it fit

#

you dont need giant router symbols on paper

little schooner
#

@waxen scroll scale, yes, I have such a hard time with them. So should I zoom in a lot too?

#

Also, portrait or landscape?

#
  1. If it's about two rooms, split it or combine it into single diagram?
waxen scroll
#

yes, zoom in

#

landscape

#

your network is small, combine it

#

in a larger network i would split by floor

#

depends what the network is and what i need to know about it i guess

#

at the end of the day in most diagrams i care about: device type, device name, major interface names

#

im not breaking it down by users rooms or anything like that

#

sometimes you can over document and it makes the diagram unreadable or very slow loading in visio or pdf

#

so find that balance

#

do you need to know every vlan on each switch without logging in? no. every AP? no. details on where wires go at the access level? no.

#

do you need routing information outside of major addresses like loopbacks, PE/CE, OSPF area, etc? no

#

the people who document that extra stuff are the pain in my side

#

you cant go making changes in the network without updating multiple visios for info that shouldnt have been in the visio to begin with

little schooner
#

Very solid points thank you @waxen scroll

#

At least it will shape my thinking in the right direction with this

waxen scroll
#

heres one more before i leave.... download stencils... many times they're free

#

so if you can have larger items on the diagram because its small, use "real" images of the devices

#

for example, cisco has them all free for their products

little schooner
#

Real neat. Thanks again for the tips

#

Dell should have some stencils I need too, if this is the case with Cisco providing them

little schooner
#

Ugh I can't believe this. The fluke Tester at school from the network admin confirmed that the cable I bought from Amazon is indeed not a shielded cable, despite the marketing on the website saying it is

#

That's stupid

#

Ugh no wonder the internet keeps downgrading to fast ethernet

#

Fluke to the rescue lol

little schooner
#

I wonder why my klein tools Tester didn't catch this one

#

The shield is supposed to be on the tip or inside the whole cable?

unreal wedge
#

Another day, another customer stolen from Comcast. Man I love my job. I get to fuck Comcast, and work on crazy tech shit. Oh, and I'm not a competitor of Comcast, but there's a better fiber ISP in the area I was working, so why not make a recommendation that has now been acted upon.

hollow void
#

@unreal wedge another day, another day without comcast because you don't have that here

#

we have like 2 networks: KPN (originally owned by goverment) and Vodafone-Ziggo

#

every other isp is on their networks

ebon wasp
#

Not really true. The connection to the home is KPN or Ziggo, but depending on the V-ISP the backbone can be completely their own.

hollow void
#

@ebon wasp touche

unreal wedge
#

@hollow void pick a really shitty monopoly ISP with outages out the ass, and techs + support that don't know shit, ingress on the line, and overextended nodes. Welcome to Comcast.

clear igloo
#

@unreal wedge You forgot the butt smashing and face slaps, lol

subtle glen
hollow void
#

@subtle glen runs at 200 gigabit

#

/s

subtle glen
#

linus should do it too

hollow void
#

nah, we need like literal watercooling

#

just put all the wires in a tube and let it run

fresh copper
#

The ARDC just decided to sell a /10 out of 44/8 to Amazon for “several millions” without consulting even the technical committee, let alone the ham radio community

waxen scroll
#

jokes on amazon. ipv6 is cheap

hollow marlin
#

Millions for v4.....what

fresh copper
#

For a /10

#

Which is a lot these days

hollow marlin
#

Not my point. V6 is the only way and Amazon is already quite deep in 6

pseudo blade
#

Disassembling a Telstra Smart Modem G1.

#

I think they didn't put enough U.FL connectors in there

#

Jokes aside, the big collection of them towards the centre of the board appears to be to an RF switch to change from the external SMAs to the shitty little internal PCB antennas. Likely the board-to-board ones were for signal integrity due to the distance from the LTE module under that big shield.

#

Unshielded chip to the top right is a BCM4360 (3 stream 802.11AC), so the big shield to the left's probably the 2.4ghz, as weird as it is to have 4 connectors to a 2.4ghz card.

#

Or it has a pair of AC chips and the tiny one to the top-left is 2.4, but why build it that way?

#

Methinks I'd need root or a signicant interest in desoldering large shields to really figure that one out.

waxen scroll
#

@clear igloo finally, a new version of virl is out

#

not sure if its their major redesign

#

guessing its not looking at the version

#

oh gawd

#

@unreal wedge thought leaders are cancer

#

especially IT ones

unreal wedge
#

What

#

VMWare is cancer right.

waxen scroll
#

you know... those talking heads at conferences, on youtube, etc who can only speak high level about brand new trends, then when it comes time to execute, they cant or suck at it

unreal wedge
#

Trends my ass. No one can see the next attack vector. We knew about Meltdown for years, but did Intel patch it!? No, because they knew it'd force them to redo hyperthreading altogether. Was noted in the Linux kernel for a while, too.

waxen scroll
#

people take them super seriously and hire them in the business world because they're good at talking

unreal wedge
#

There was literally a speculative flag in the kernel.

waxen scroll
#

i was gonna compare them to linus, but thats not fair to linus

fluid sigil
#

Does anybody know how I can get 600 feet of Wi-Fi from a hotel to a beach that is down a hill. I’m not looking for crazy good speed just good enough for a Wi-Fi calling, music streaming and probably around 30 clients. I know it’s asking for a lot but just thought I would ask to see if there is a possible solution.

unborn nova
#

@fluid sigil We've used the cnPilot e501S Enterprise Outdoor AP. It's max range is 700ft but I'm sure you can find other models that can send signals much further. We've set it up with VLANs to bypass the Enterprise network since this AP was used for clients near food trucks at a parking lot. You can Mesh more of these APs together for future expansion. We've been running it since last year November and it's still going strong. You can limit the clients to 5Mbps each so that it's balanced and shared. We give 2Mbps to each client which is enough for web browsing and social media.

#

For cheaper solutions there is Ubiquiti Outdoor APs but I'm not sure what the range is. I couldn't really find much information about a Ubiquiti Nanobeam or Nanostation radio being used as a Wireless Station AP for clients

thick minnow
#

dragleslayer
#2360 maybe you should ask in here form som ehelp with your problem

#

@north siren

north siren
#

that would have been smart to do lol

waxen scroll
#

where my boy @clear igloo

#

@little schooner got more nexus questions!

clear igloo
#

?

waxen scroll
#

hi bb

#

back to back VPC

#

N7K-A .2 -- N7K-B .3 (domain 1) HSRP .1 VLAN100
N7K-C .4 -- N7K-D .5 (domain 2) HSRP .1 VLAN100

#

so if i have A/B SVI unshut, traffic flows as expected

#

as soon as i unshut C/D, traffic stops

#

if i now shut A/B, traffic flows again

#

is same HSRP impossible over multiple VPC?

#

yes it looks weird, but this is a migration scenereo

#

trying to minimize packet loss

#

and calling it an HSRP problem is probably wrong, its a layer 3 problem

#

i see what i expect in show hsrp bri

#

@clear igloo 😦

clear igloo
#

So HSRP across two VPC domains?

waxen scroll
#

YEP

clear igloo
#

Yah, best practice is to run it on a single VPC pair only

waxen scroll
#

obviously layer 2 works fine... devices on domains 1 and 2 talk fine the whole time

#

i need intern @little schooner on the case

clear igloo
#

lol

waxen scroll
#

cisco has a migration guide and it claims it can be done, but my lab says no

clear igloo
#

Link?

hollow marlin
#

I don't see how having the same L3 in multiple domains on a single device would work in the first place

waxen scroll
#

CTRL+F: Add L3 uplinks on the F2 domain. (Network impact: Moderate*)

#

i think this article is bamboozle

#

i did the other steps fine... L2 got migrated with no drama

#

L3 is being a dick

clear igloo
#

Did you tune everything properly on both sides with metrics and priority?

waxen scroll
#

F1 domain was better priority and the A side was best... thats how i did it

#

thats how it was pre-migration

#

but as soon as i turn up SVIs on the F2 VDC, boom. packet loss

#

HSRP reports correct states

#

the F2 are in listen

#

F1 is active/backup

clear igloo
#

But is the L3 path pointed through the F1 domain over the F2?

waxen scroll
#

correct

#

err wait, im not sure im reading right

#

all the numbers are making my head spin

#

lol

clear igloo
#

haha, yah

waxen scroll
#

so for L3 in that state if you're a device on F2, you take layer 2 into that core and you should be able to go to the F1 core thats hosting the HSRP VIP

clear igloo
#

Yah

waxen scroll
#

but once the SVIs get turned up its blackholed until either only A/B or C/D have active SVIs

#

futher, if you shut all SVIs down and keep just one up, some paths for L3 work and some dont

#

so in that state if device A pings device B, it works, but not device B trying to ping A

#

its bizarre

#

you remember that packet loss issue i had with VPC months ago?

clear igloo
#

Yah

waxen scroll
#

its the same concept

#

if you dont have two SVI up and in the same subnet even if 1 doesnt host a default gateway IP, it breaks

#

so im about to write this off and say WELP, guess we're taking more packet loss

#

cisco says its doable but its not

clear igloo
#

The way I read the doc is that you'll have packet loss either way, just depends on how much

waxen scroll
#

the problem with this is that the loss is high

#

like 20 sec

clear igloo
#

Does it converge and work after those 20 seconds?

waxen scroll
#

you shut down SVIs on A/B, unshut on C/D and wait for spanning tree or whatever else

#

yes

clear igloo
#

Yah, that might be a "moderate" convergence time for the doc. I think that's stupid but hard to say

waxen scroll
#

i bet TAC wrote that doc and was like .... "oh yeah ive done HSRP 100 times, i dont need to lab this" and then suggested it

#

this whole exercise is bullshit. i shouldnt have to do this

#

i wonder if i remove the L2 from VPC and keep it single armed

#

maybe it'll snap out of it

clear igloo
#

Maybe, you could lab it and try 😛

waxen scroll
#

i can, i have a lab running right now at the L3 migration step

#

super easy

clear igloo
#

Hold up, I might have tested something similar, let me dig

waxen scroll
#

i feel bad for people whose companies who are big enough to have these and wont buy them lab gear

#

do it LIVE

clear igloo
#

Pay SVS 😛

waxen scroll
#

make oopsies

waxen scroll
#

OK

#

lets make some lolz

#

gonna try removing it from VPC

#

same packet loss issue

waxen scroll
#

@hollow marlin cisco = liar

#

Friendship ended with Cisco. Now ARISTA is my best friend

hollow marlin
#

@waxen scroll again I don't understand how they said it would work spanning across domains, even in A/P they cannot both function as the same time. Could be a version limitation also.

waxen scroll
#

packet loss is fine i guess.... im not promising no outage when i do it anyway

hollow marlin
#

Any chance of packet loss and maintenance/emergency maintenance email goes out. No worries then

#

I got tired of the "should be fine or might not drop" emails and shit going haywire.

little schooner
#

@waxen scroll the intern is going to struggle if you throw them some advanced technologies they never worked with before

#

Unless you are getting a skilled intern through pre-screen their base knowledge first

#

@waxen scroll btw I made the first network diagram for the room, now it's super small and only has what we need to know

#

Looking a lot better

waxen scroll
#

boy, ill tell you whut.... i didnt intern myself

#

refused to provide free or cheap labor

#

i dont think you'll find lots of interns with base knowledge where they can just do it after research

#

almost never, i'd guess

#

people like that shouldnt intern

#

proper interning they should be shadowing and you explain what you do and why IMO

#

did you use visio stencils?

little schooner
#

@waxen scroll I see your point. I am researching a lot lately for my classroom lab. We are trying to automate as much as possible. To the point where after it pxe boots, everything is taken care of without further intervention

#

We're trying to get Intel vpro configured so even the pxe boot key press is not necessary to do

#

@waxen scroll yes I did use visio stencil for the access point at least

#

I believe if the intern can find the answers that they can also handle the job, provided the answers are accurate for the job they needed to do

#

Like you can't just claim you found the answer but turns out that it doesn't apply to your specific sequence of problem. Or however you say that xD

hollow marlin
#

@little schooner just because they can find the answers doesn't mean they can handle the job. Sure they might have found the answer but not THE answer. It might be broke because of poor configuration or design but finding a fix is one thing, exicuting it is another.

waxen scroll
#

@hollow marlin hell... i have hard enough time getting hits on applications i make

#

god help less experienced people

#

everyone wants a network engineer who shits gold bricks

#

part of it is prob an HR problem

hollow marlin
#

@waxen scroll all I want is one that is willing to learn. So many of "I'm comfortable and don't want more responsibility"

waxen scroll
#

current job i actually applied at the website (so HR) and nothing for 2 months. a 3rd party recruiter reached out and i ended up getting hired there

#

3rd party just bypasses HR

#

@hollow marlin thats 80% of them

#

ive tried getting people moving and none have except 1

little schooner
#

@hollow marlin ahh yes that's what I meant. The execution

#

@hollow marlin my teacher is like the one where "if it works, don't touch it" but then he won't want to do improvements to it for a long time

#

Like say a new way of doing things comes around the corner (mdt for example), he was hesitant from letting me implement the solution due to being accustomed with clonezilla

#

I assured him that it really works and that I have a working config that I could drop in.

#

Some few hours later, we got a working deployment solution that doesn't involve him going to each PC to clone individually with two hard drives.

Also, now we don't need to make fat images, we use a clean base and mdt installs and set configurations during deployment

#

I like to try new ideas if it means it will improve what we have... Sure that's good up to a certain point in production

#

@hollow marlin I'll give everyone a chance to do the job, it's only fair

waxen scroll
#

hi @clear igloo

clear igloo
#

yo

waxen scroll
#

if you have two large ASR9k chassis per datacenter, would you move all your layer 3 to it or would you continue to let switches layer 3?

#

my boss is thinking of doing this

#

since ASR can do more

clear igloo
#

Depends on how confident you are in the ASRs to not fail

waxen scroll
#

😄

clear igloo
#

Or a need to upgrade them both for some reason 😃

waxen scroll
#

that

subtle glen
#

nice home router

clear igloo
#

Yah, I ordered fabrics for those by mistake 😄

subtle glen
#

how do you mount a thing like that damn

clear igloo
#

Carefully

subtle glen
#

but it's heavy

waxen scroll
#

you use 4 people and take the cards out... or two people and a temp shelf under it

subtle glen
#

also one rack just for that

#

look at how many u's that is

waxen scroll
#

yeah, basically uses most of a rack

#

not all of it

subtle glen
#

you can fit an ups under it prob

waxen scroll
#

people are also scared of it... so only 3 of us actually admin the thing

#

the syntax isnt the same as all the other ciscos

subtle glen
#

i would be scared of something like that too

waxen scroll
#

@clear igloo its been claimed that ATT was willing to extend raw MPLS to it

#

heard that story last week

clear igloo
#

interesting

waxen scroll
#

i think the person who offered didnt know what he was talking about

#

i cant see ATT agreeing to that

clear igloo
#

yah

waxen scroll
#

anyway, was curious if you would say hell no and give a good reason or what

#

we'd like netflow and the N7k only does like 1 out of 4000 sampling

#

thats the driver i know about, im sure he has other reasons

#

@little schooner lets see your diagram

little schooner
#

Sure but I am away from pc right now. Also I would like to finish the other one first too. I'm just testing the waters with placement of graphics, etc

neat mulch
#

anybody know if my router Netgear R6220 is compatible with DD-WRT or any other custom firmware?

#

i cant find anything

strange silo
#

@subtle glen You pay someone else to do it 😃

radiant shell
subtle glen
#

@strange silo lol

little schooner
clear igloo
#

@little schooner Yup

little schooner
#

I really hope they can run fiber cable for us. Sfp+ in 10G only good for 30m run

#

But the datacenter might be farther than that

#

I might have to beg to borrow the fluke tool again to measure distance

waxen scroll
#

@little schooner sometimes lurick is faster than calling TAC

clear igloo
#

@waxen scroll Google is faster 😛

neat mulch
#

@radiant shell i flashed it to OPENwrt but after using it. the stock was better in features. thank you for your time 😃

little schooner
#

I've been getting better at googling answers for MDT problems lately

#

Like how you can't service MCT version of windows 10 esd

waxen scroll
#

@little schooner i dont like how the diagram hasnt been posted yet

waxen scroll
#

hes ghosting me

neat mulch
#

👻

#

boo

little schooner
#

@waxen scroll I totally forgot lol but I didn't really forget. Just busy

#

It's just that today I was making a purchase order for the professor. We got more access to 50k in funding

#

But the grant guy said he needed all the things we wanted ASAP

#

My mom is coming home from Vaca too, so occuppied

#

Unfortunately they will not run fiber for us, so we had to settle for rj45 sfp+ Modules

ivory coyote
#

Fast question: I want to ban a device from my home network with the mac address ban, could it be reverted leter?

#

Please @ me if you have an answer thanks

radiant shell
#

@ivory coyote We need more info like your router model however it would be safe to say that a ban could be removed at any point, Here is a randomly generated MAC address to test with: DF-64-5E-90-99-6C

#

due to discord emoji's replace the "-" with ":" depending on the format you need

ivory coyote
#

It's a combo unit leased from the ISP (pretty bad imo) that has all the options to whitelist/blacklist mac addresses. My question is: in general if you blacklist a mac address he won't be able to connect anymore to the network right? And if it doesn't connect to my router it won't show up, and if it doesn't show up there won't be that device under the mac filter settings, so it's banned forever?

radiant shell
#

when you add a device to the blacklist it should stay in that list always visible when you go to that page on the router, thats why i had provided a random one to test with

ivory coyote
#

I cannot add it to the black list, I should add it to the Devices on the lan, is that safe? I mean that mac address, what is it

hollow marlin
#

God every time I check r/homenetworking it makes my skin crawl. So. Much. Wrong. Information.

waxen scroll
#

Example?

hollow marlin
#

@waxen scroll whole sub

jaunty talon
#

I dont get how homenetworking can be a thing when 99% of all homeusers has one consumer router and maybe a netgear switch :D

pseudo blade
#

1% of home users is a lot of users.

true swan
#

Hey all! What channel would you say NAS discussions best fit in?

lean pollen
#

People said here to me a while ago

thick minnow
#

depends on the nature of the discussion I suppose?

ancient osprey
#

Opinion: Used server or New NAS?

little schooner
#

@ancient osprey I'd do a server if 10G was requirement.

#

If not, a synology NAS is a great idea

waxen scroll
#

Why wouldn't you want 10G on your NAS?

#

@little schooner why u no LTX?

little schooner
#

@waxen scroll well it wouldn't hit the full speed.

#

Unless you drop like 779

#

Also cpu usage will be high in those machines. I have a weak Xeon cpu and I can pull 20Gbps easily

#

But in a Nas unit, it's write speeds are under 1GB/s

clear igloo
#

My QNAP can do writes of about 4Gb/s and reads of 1.2GB/s

little schooner
#

Yes, so for reads it will be higher but writes suffer

#

Whereas the server I got does both at full speed

clear igloo
#

Depends on the drives too, if it's all SSDs you'll do more than HDDs

little schooner
#

Yes it is all ssds for me

clear igloo
#

Ah, I'm all HDDs

little schooner
#

But I did check synology website, their performance benchmarks, and it says 734 was its best write speeds

#

For I think the ds1817

#

Actually I can't wait to get my hands on a PCIE 4.0 nvme

#

Because I can't really saturate full 20gbps from a single connection

clear igloo
#

lol

little schooner
#

Not for cheap anyway

#

The less I have to wait, the longer I'll live doing other things

#

It's not like the lab at school. Where downloading isos files takes 40 minutes

#

Only thing I don't like is the reduced life of flash. I also got rid of my storage spaces volume and recently had an ReFS error that took a couple of my install.wim image files

#

I went back to good ol ntfs.

ancient osprey
#

I’m thinking of running a VM to use anywhere

#

But my file storage anywhere is foremost first.

hollow marlin
#

@little schooner the life of flash hasn't been a concern since 2nd gen SSDs

ancient osprey
#

So like I’m trying to narrow out my choice.

lean pollen
#

My NAS is custom

clear igloo
#

Depends on ease of use, what you want from the NAS, and how much time you can spend fixing things (if they break). If you want simple plug and play with just storage space and no VMs running on the box itself, go with a QNAP or Synology. If you want a mix of VMs and storage on a single box then custom, or at least used server stuff, is the way to go

lean pollen
#

I have no VMs, but I do have dockers like nextcloud, you could probably do that on a qnap or whatever too I bed tho

#

Custom allows for more "Just in case I need something more"

clear igloo
#

Yah, depends on the model. Some use just ARM processors so they don't have much spare compute but others that use an Intel or AMD CPU (that has some horsepower) can definitely handle some VMs

lean pollen
#

(qnap takes a cost for more bays while custom its not really)

#

I can fit up to 7 HDDs and a SSD if I wanted in my case

#

Have no idea if I ever need it tho....

clear igloo
#

lol, yah, they both have their ups and downs, custom can be much cheaper but in some cases more difficult to manage in that it's not as straight forward as install disks, hit power, and go

lean pollen
#

yes

#

I debated for a loooong time what I was going to get... more time than I spent set it up (if you ignore reverse proxy things maybe)

#

My dad made me lean towards custom because he thought I would enjoy setting it up building and setting it up and stuff, and I did

#

Not everyone would tho...

little schooner
#

@lean pollen you can buy hot swap bays too so it's easy to slide in and remove hard drives without having to take your entire case down and remove them manually

#

That's what I did for my x11ssh ln4 supermicro server

#

But since I've replaced it with flash, I don't even need to worry about it really failing the same as an hdd

#

The issue I ran into before with HDDs was an annoying intermittent problem that would surface every few months

#

Not even drive tests showed anything failing. Sent to Seagate and they found nothing wrong either

#

The mechanical parts are the most frustrating

lean pollen
#

My case have hotswap bays but I dont think software support in anyway

#

its not a "server" case

#

its a Lian Li PC-Q25

little schooner
#

Mine isn't a server case either. Cooler master haf x

ancient osprey
#

I’m trying to do a mix of a VM and private storage accessible anywhere.

#

But I want to also make the VM available anywhere as well.

#

I’m craz, but I know it’s possible and that is what I want to do..

little schooner
#

It's possible but make sure you include a VPN in that solution

#

@ancient osprey

mystic marlin
#

i have a curious issue at my house where if i'm downloading a steam game it completely sucks up all my bandwidth. i get 50 up and down from fios but if i'm downloading a steam game (which usually only reports ~7MB/s) I can't load a youtube video or stream netflix or anything else demanding until steam is done
i do have an old (probably crappy) modem from verizon that came with the apartment, is it possible that's the only culprit?
no other network devices, no switches or range extenders or WAPs or anything else

radiant shell
#

@mystic marlin You would be getting 50 Megabits from fios, Steam reports in Megabytes. 50 Megabits = 6.25 Megabytes so steam should say 6.25MB/s to know you are getting your full connection speed

mystic marlin
#

thanks @radiant shell friggin units grumble grumble

radiant shell
#

No problem. Just remember 8 Bits to a byte so just multiply what steam is saying by 8 to find your speed

waxen scroll
#

@little schooner hi

little schooner
#

@waxen scroll hey

waxen scroll
#

Anyone at ltx? Let's see some pics

#

Especially of the networking

clear igloo
#

They got a single 100Mbps hub at the core 😛

waxen scroll
#

Whatever

#

I bet they used juniper

jaunty talon
#

Haha :D

#

QFX5100-48S does L3
3750-E As distribution
2960G on the BYOC tables

clear igloo
#

Interesting

jaunty talon
#

and a netgate XG-1541 as firewall

#

shoot more questions if you want to know more =)

waxen scroll
#

lmao @clear igloo told you

clear igloo
#

lol 😛

jaunty talon
#

you dont like juniper? :D

waxen scroll
#

lurick works for cisco

clear igloo
#

shhh 😛

jaunty talon
#

aha :D

waxen scroll
#

i also dont like juniper CLI

clear igloo
#

I'd rather Juniper as opposed to another company >.>

waxen scroll
#

ORLY

clear igloo
#

TP-Link, duh 😛

waxen scroll
#

@jaunty talon are those products provided free or deep discount?

jaunty talon
#

we own these

#

but when we did 1,6Tbit/s in Sweden last year we get stuff from juniper's demo depo

clear igloo
#

Nice

waxen scroll
#

are you one of the engineers?

jaunty talon
#

the ROI on owning routers like MX960/MX10003 or ASR routers is not very good

#

when they're running for 30 days per year

#

I am the CTO of DreamHack

waxen scroll
#

cool

#

do you do that full time or... whats your other job?

jaunty talon
#

indeed

#

fulltime

clear igloo
#

I assume a lot of it is planning things out and whatnot

waxen scroll
#

i bet suom1 gets the FULL union experience 😉

#

"oh we cant do XYZ"

jaunty talon
#

haha

clear igloo
#

I will say, DreamHack Dallas was very fun this year 😃

waxen scroll
#

i heard in chicago they wont let you even plug anything into power without a union sparky

jaunty talon
#

Haha yeah

#

it's a crazy world in US

clear igloo
#

With the 1.6Tb/s was the main router an NCS 2000 series?

jaunty talon
#

nope

#

MX960

#

with MPC4E

waxen scroll
#

on that AMA "2)What kind of QoS you use?" lmao... yeah my observation is for the most part you never have to QoS the LAN, even in large enterprise

#

it all depends

clear igloo
#

I could have sworn a saw an NCS somewhere in there shrug
Yah, QoS is "fun"

jaunty talon
#

QoS is a pain the ass..

#

And so easy to not have

#

I mean, its just adding more bandwidth and you have solved it =)

waxen scroll
#

@clear igloo i met tim szigeti for a private meeting on QoS before

fresh copper
#

I usually just see QoS on the outbound router

clear igloo
#

There are customers out there with multiple 100Gb pipes to their ToR switches and they want to do QoS on those links -.-

jaunty talon
#

@clear igloo our ISP had Cisco ONS in the rack for DWDM termination

clear igloo
#

Ah, that's what I saw then

#

I remember seeing some Junipers in there too but that paints a clearer picture in my head

jaunty talon
#

Indeed, that's the MX960's

fresh copper
#

Sometime I see lan QoS to stop people that are accessing file servers from messing up VOIP if the inter-switch links are the same as the client links

waxen scroll
#

MX960 is the only juniper platform i have experience on

jaunty talon
#

MX in general is a nice platform if you ask me

#

but ASR or MX it just a matter of syntax

#

both can do the same

#

and are priced more or less the same, all up to how good friends you're with your sales reps

clear igloo
#

Always gotta schmooze for those good deals 😛

jaunty talon
#

before MX routers we used ASR and CRS at DreamHack Summer and Winter

waxen scroll
#

we're not good friends with cisco right now but have one of the largest discounts they offer >:p

jaunty talon
#

I have bought with 98% discount from Cisco :D I bet not that many has done that =)

#

this was 6 years ago

clear igloo
#

Yah, I've been working a lot with the N9K and ASR 9000/9900 series lately but just got in some NCS 5504s and 55A1/5501 as well to test with

waxen scroll
#

if cisco gave you 98% and its a regular discount they're in breach of contract with us

#

🤔

jaunty talon
#

haha

#

it was a special deal =)

waxen scroll
#

98% on an ASR9k sounds good

jaunty talon
#

regional ceo had to sign off etc

#

hahaha

#

that would be the dream, right? :D

waxen scroll
#

i got 4 of them at work

#

but nobody wants to buy more linecards

jaunty talon
#

yeah :D

waxen scroll
#

does anyone ever do internal DOS?

#

if so what did they try to pull?

jaunty talon
#

naah

#

but during summer and winter there is always someone trying to send us a few 10Gbit/s of DDoS

waxen scroll
#

do you do any security measures like honeypotting?

jaunty talon
#

not much, some of our crew members does that sometimes

waxen scroll
#

i assume you're there now? how does it look? from the pics it seems like they did a good job. im not a convention guy so i didnt really plan on going. almost regret though. looked cool

jaunty talon
#

i am here indeed. if you ask me it looks good

waxen scroll
#

im happy for them. cool to see them grow so soon

jaunty talon
#

i agree :)

clear igloo
#

How do you generally handle wireless? Do you generally bring APs with you and set them all up or do you have a few different controllers and use what's at the center?

jaunty talon
#

We really hate wireless :D

#

So we let the venues do WIFI

waxen scroll
#

me too. happy to report wireless is a whole different team at work

#

not. my. problem.

clear igloo
#

Haha, that's about what I expected 😃

jaunty talon
#

wireless is such a pain in the ass

waxen scroll
#

you'll cry when a warehouse opens wireless issue tickets. troubleshooting those is the worst

jaunty talon
#

i bet

clear igloo
#

It's all wireless, you don't need wires, it just works, just do devops on it 😄

#

#AgileWireless

waxen scroll
#

@clear igloo for our new chicago HQ they wanted 100% wireless. NO WIRES EVER.

#

its so agile!

clear igloo
#

haha, wow

waxen scroll
#

they forgot about cameras, card readers, etc

#

they being management

clear igloo
#

wireless power, duh

waxen scroll
#

"why do we need all these switches still? its WIRELESS"

clear igloo
#

On a different note, we got this doozy a couple days ago:
"We tried to put the router in the ATM and it didn't fit, why didn't you tell us?!"

waxen scroll
#

o_o

#

why is there a router in the ATM

clear igloo
#

4G

waxen scroll
#

i would never buy from cisco for that

#

cradlepoint

#

look how cute it is

clear igloo
#

"Cloud-managed" 😄

waxen scroll
#

@clear igloo worst wifi ticket

#

"Research patients at <research hospital> have guest connectivity issues"

#

this was when i worked for a pharma

#

N.O.P.E.

#

someone else got the ticket xD

#

those are people who get paid for testing and ive heard uhhhh interesting things happen on that floor

#

hospitals already weird me out

#

or a scientist is complaining of a wifi outage and you get there... the door to the lab says WARNING: HIV or... WARNING: RADIATION

#

nooooooooopppppppeeeeee

strange silo
hollow void
waxen scroll
#

@strange silo I'm still unsure about solar. Seems like it takes a long time to get ROI and I live in a place that's not sunny year round

#

I'd also need a ton of panels for this large house

#

I think basic quotes online said $30,000+

strange silo
#

@waxen scroll It's way cheaper than that, mine is a 3Kw system fully installed for $10k NZD or $6.6k USD

#

Biggest mistake you can make is putting in an oversize system, if you don't have a battery bank and automate switch over to battery to use generated power you've literally wasted thousands on extra panels you don't need

#

Go micro inveter and just add as you need, if you need

#

String tied is a cost death trap

#

Also never put solar in if you don't actually have day time usage, I have lots of it because 24/7 servers. If you basically turn everything off and go to work then don't

waxen scroll
#

and how much power do you use in the day

strange silo
#

I use about 700Kwh a month and roughly 24Kwh per day

waxen scroll
#

im at 70 avg per day in the summer and 1,500-2,000 per month

strange silo
#

I'm mostly looking to bring that 0.2Kwh 24/7 to zero during daylight

#

Then if I can using my UPS and batteries capture the over production and off set long

#

Without batteries I'd look at my lowest usage over an hour, if your power company gives you hourly break down and don't install anything more than that

waxen scroll
#

my HVAC is crap and i have it zoned.... so its forced to not turn off until comfort is provided and doesnt listen to one room of the house

strange silo
#

so if your low point is 1kwh then put in a 1-1.5 kwh system

#

when I pull from the grid it's about $0.2/kw and when I export I get $0.06/kw

#

some power companies give $0 for export

#

hence the it's a waste to over size your system for peak loads

#

only time peak matters is if you go off grid

#

which are those $30k installs

waxen scroll
#

im surprised i havent been raided by police for a pot farm or something

strange silo
#

can you see your hourly graphs?

clear igloo
#

I can see mine, yah

waxen scroll
#

i can

#

the problem is my parents visit for 3 months

#

so more electronics are on, HVAC is going, all this during the day and night

waxen scroll
#

lmao wat

#

ive never seen a job post like this before

#

they must be tired from people too experienced leaving after 6 months

jaunty talon
#

Found picture on my laptop from DHS19 =)

ancient osprey
#

Dayum!!!!!

clear igloo
#

Noice 😄

waxen scroll
#

😍

subtle glen
#

oh damn

waxen scroll
#

measuring for that would be a pain in the ass

subtle glen
#

ikr

#

but it looks cool

oak frost
#

actually does look dope ngl

#

would be clean as hell

subtle glen
#

is the metal tube the conductor or there is a wire inside?

waxen scroll
#

i think its possible if it changes to soft wiring on the rear of the case

oak frost
#

I'd assume safety wise there's a wire inside

#

you wouldn't want live conducting wires exposed like that 😛

subtle glen
#

ye but, dc is safe xD

oak frost
#

still ¯_(ツ)_/¯

subtle glen
#

i mean, the wire would be small if there is one inside

waxen scroll
#

DC is actually more unsafe than AC

#

xD

#

if you get shocked its harder to let go of the wire

subtle glen
#

ye but 5/12 VDC of a power supply are nothing

waxen scroll
#

dunno, havent tested it. its the amps that kill

subtle glen
#

ahh we can start a debate here

waxen scroll
#

the GPU rails are usually like 30A

#

or if they dont break up the rails its what.... 100A?

subtle glen
#

can a 30 amp wire fit inside that metal pipe?

waxen scroll
#

i'd say no

#

i dont know the gauge standards for DC though

#

not sure if same as AC

#

the current wires in theroy are the same size as those pipes

#

so it wouldnt fit

subtle glen
#

then i'd say the pipe is the conductor

waxen scroll
#

can 3d printers make conduit that small?

waxen scroll
#

i went to cable mod and was surprised they cant offer unsleeved cables that are all the same color

#

with some supports you can get the same effect even though the cables are bendy

waxen scroll
#

@little schooner diagram pls

little schooner
#

@waxen scroll soon (tm), I've just been really busy with other things. But I got a question. Why is it that I reach 1GBps and do not need to enable Jumbo Frames to achieve such speed?

#

I see on the Intel guides that they recommend enabling it for better performance but I already get the speed I was looking for

fresh copper
#

What happens is that each packet you send has a bit of overhead. With jumbo frames (MTU over 1500, usually 9000), you have larger packets and therefore less overhead

#

If you already get the performance you want, the great, you don’t need jumbo frames

little schooner
#

Okay. Well I am very happy it works out that way 😄

pseudo blade
#

@waxen scroll I would quite happily bridge my hands across the output terminals of a 12V, 620A-capable supply to prove a point about its safety.

strange silo
#

@waxen scroll That doesn't actually seem sensible at all.... re: hard wiring

#

What about something like spray on glue to fix/harden the cables, make them hard ish to have the same effect

waxen scroll
pseudo blade
#

Hard wiring would suck to manage.

waxen scroll
#

i dont think so

#

realistically once it reaches the back of the case its soft wiring

#

most of the time you dont have a view in the back

pseudo blade
#

Even at the front it'd suck.

fresh copper
#

Everyone says, it’s the amps that kill, which is true, but going from 30A to 100A makes no difference. You can die with anything above 0.1A. The important part is that the voltage is high enough to counter your resistance to be able to allow that current to flow, see Ohm’s law

#

It still technically is the current because external circuitry can change the voltage required to produce the required current. Like if you added a big resistor in series

#

Interestingly enough. While you will always die between 0.1 and 0.2A, you can sometimes survive currents above 0.2A if you have medical attention which is why some people have survived lightning strikes

#
Above 200 milliamps, the muscular contractions are so severe that the heart is forcibly clamped during the shock. This clamping protects the heart from going into ventricular fibrillation, and the victim's chances for survival are good.```
hollow marlin
#

It's Volts and AMPs that kill you. Watch electroboom's rant on it.

fresh copper
#

The thing is, the voltage needed to allow enough current to flow varries based on the situation

#

If you are going acoss the chest and put soapy water on the contact points, the voltage needed will be much lower, going foot to hand with both very dry takes much more voltage for that same current

#

A lot of people don't understand and think that "the current kills you" means that a 1V 100A PSU could kill you, but it won't. You need to have a high enough voltage (sometime like 40V is about the minimum for death but less can still be dangerus) but 40V 0.01A won't kill you and neither will 10000V 0.01A. but both 40V 0.1A and 10000V 0.1A will kill you (assuming the resistance is low enough for the 40V to allow the 0.1A to flow).
It really is the current that kills you, there is just a minimum voltage required by Ohm's law

subtle glen
#

@waxen scroll Told you we could start a debate

fresh copper
#

Oh yea

#

There are so many good networking things to debate

north siren
#

hello anyone good with networking

fresh copper
#

Quite a few of us are. Probably why we hang out in the #networking chat

north siren
#

i keep getting disconnected from online games and cant seem to fix the prob

#

anyone have a clue how to fix

fresh copper
#

There are 4,000,605 reasons why that could be. Wifi or wired? If wifi, then it could be a bad connection (which there can be many reasons for), in both cases, a wire somewhere could be faulty allowing things to paritally work but not well. There could be a problem with your router, or your modem, or your ISP, or your drivers, or your NIC, or your computer in some other way.
Things that can help figure out the solution:
What speed and latency do you get at https://speedtest.net what speed does your ISP tell you you should get?
What packet loss and jitter do you get at https://packetlosstest.com/ (pick the Apex Legends preset as that is close to most online games)
What type of connection (wired or wireless)?
What type of ISP connection (cable, fiber, VDSL, DSL, dial up)?
That's about everything I can think of for general diagnostics of intermittent connections. I can't say much more without more information

north siren
#

is thair a way u can take controle of my pc and help me??

#

wired
32
cable i think

fresh copper
#

While I could, there is not much I could do without more information. I also help people on here for fun and to be kind so I don't really want to logon and do things for people like on my normal job. In general, outside of my job where I am paid to do things for people, I think that it is much better if people can learn themselves so that they hopefully won't have the same problems in the future

north siren
#

how much??

waxen scroll
#

$45/hr I'm guessing

pseudo blade
#

I'd remote in for $200/hr US (In advance only, hr blocks), but asking questions here is free, so wouldn't doing that be more logical?

waxen scroll
#

@pseudo blade why do it at your work rate

#

Do it at contractor rate. $200/hr

pseudo blade
#

Oh sorry, I must have forgotten to include my other fees.

#

:P

#

Let me just amend that dollar value for you.

little schooner
#

Time is expensive and rightly so if the problem goes south

waxen scroll
#

@clear igloo my change script is 15 Excel tabs long

#

It's because of copy running-config xD

#

5 phases, each phase has an install plan tab and a backout tab

#

Any files I do running config for have a tab incase it fails

clear igloo
#

15 tabs? That's all? 😛

waxen scroll
#

u mad?

nimble mulch
#

cpy run start

#

copy*

waxen scroll
#

Copy file.txt run

#

I put like 500 lines of config modification in and do that instead of paste

#

But if the command fails you need to manually paste

thick minnow
#

anyone here good with RDC

waxen scroll
#

Guess not

broken cosmos
#

Anyone able to help?

little schooner
#

It would help if users would describe the issue so anyone in here could provide an answer instead of playing cat and mouse if you're offline

#

Write out the problem.

broken cosmos
#

Which is weird, since it did work before it.

little schooner
#

Cable ends might be bad. Do you need to use that specific cable?

broken cosmos
#

Switch was just bad. I guess

#

Switched the switch

#

And it works now so ASakashrug

calm dawn
#

Hi, I hope this is OK for this channel, it's more theory than hardware based.
I'm trying to do some NAT traversal for some simple P2P network games. I get the general principle of having a publicly accessible server introduce 2 private clients by telling them what ports to use for communication. The thing I'm not sure about is do the P2P clients have to use the same ports that the server provides them to host the P2P connection or can they just use the open ports to introduce themselves as "trusted servers" which then opens them up for further communications on other ports?
e.g. Client 1 wants to start a game, they connect to the server and the server stores the (public) IP/Port combo they used to visit the site.
Client 2 wants to connect to a game and finds that client 1 has a game waiting for people to join.
Client 2 asks the server to introduce client 2 to client 1.
The server says try this IP/Port combo. It sends a packet to client 1 to try client 2's IP/Port combo.
Client 2 sends a packet on the provided port and Client 1 sends a packet. Client 1 does the inverse.
Hopefully both now accept each other.
Can client 1 now host the game on a dedicated game server and will client 2 be able to connect to it because they're both considered trusted?

fresh copper
#

@calm dawn
It depends on exactly how the system works but the basic idea is down. By sending a packet (has to be a UDP one) from Client 1 with IP 1 and Port 1 to Client 2 with IP 2 and Port 2. And having Client 2 sent a packet to Client 1 with the inverse of those IPs and ports, the NAT/firewall on either side will think that they are communicating to a server and should keep open the connection. Little do they know that it is a P2P connection. This will work properly in 99% of cases but there are a few where this won’t work. (Some carriage grade NAT solutions will use a different IP for each connection causing this to not work.
I would recommend reading about how ZeroTier works because it uses this principle itself. You might even want to use it since the system is very robust.

calm dawn
#

Thanks for that @fresh copper 😃 I'll give it a go then and have a look at ZeroTier

fresh copper
#

A lot of their website is marketing to make sure to look at the manual that explains how it works

calm dawn
#

ok thanks, definitely looks interesting

waxen scroll
#

i believe UDK uses STUN for that: https://en.wikipedia.org/wiki/STUN

Session Traversal Utilities for NAT (STUN) is a standardized set of methods, including a network protocol, for traversal of network address translator (NAT) gateways in applications of real-time voice, video, messaging, and other interactive communications.
STUN is a tool use...

bleak stone
#

Kind of a noob here, what's a wep index? I am trying to setup my extender and it won't connect to the router

#

I don't get what's wrong either

waxen scroll
#

Cisco is PCMR

hollow marlin
#

@waxen scroll huh, never would of thought to see cooler master on a Cisco board

hollow void
#

am i allowed to share server noods here?

waxen scroll
#

I guess so

#

Mods are sleeping

hollow void
#

more will come soon @waxen scroll

hollow void
#

@strange silo will appreciate it

hollow marlin
#

Why does no one see a benefit in even basic documentation

fringe haven
#

Hey guys, got a question, if I use a SOCKS5 proxy in for example chrome, then all the traffic will be sent though that right?

little schooner
#

@fringe haven well all traffic for the ports that the sock5 proxy was specified for, yes, will go through it

#

For instance, some people put http to go through, but not https

#

@hollow marlin that was our lab classroom last semester. Last month, we implemented the SolarWinds free helpdesk software for docs and track student encountered issues with the lab

hollow marlin
#

@little schooner didn't realize solar winds had that kind of software. I used it at my last job for monitoring.

But yeah, I should have a cowprker ask why when I said they should document a customer IP

little schooner
#

for IP addresses, we are using phpIPAM

#

It has served us well for now. My teacher only wants to use free solutions

#

they are not always that great...

#

sometimes I wish he could put some money aside for commerical solutions that are managed by vendor, not us

#

but spiceworks helpdesk is a joke, it was inflexible for what I wanted it to do

hollow marlin
#

@little schooner oh we have an IPAM solution. They just don't see the purpose to using it.
It's not like we have 10,000+ customers and they think it's more efficient to spend 30mins looking up an account vs 30 sec

little schooner
#

Yeah thats just nonsense. I instantly see the value in the IPAM the moment I interacted with it

#

The search was crazy fast

#

By company, by location, by network/subnet filters too

#

what isn't there to like? heh

hollow marlin
#

There are plenty of IPAMs too with active monitoring like basic ping to checking ARP and injecting it into the database. We have a huge problem with duplicate IPs because of this and lack of documentation.

Solarwinds did a lot of that and a co-worker and I dumped hours building it up. Now it's just the opposite

Elimitates so much BS

waxen scroll
#

@clear igloo almost got BAMBOOZLE by NX-OS

#

im writing the script and it turns out that if you have an F1 card because it cant route, it assumes "switchport" is default, so it drops it from the show run.... on the same VDC if you have an M1 that routes it considers those interfaces layer 3 unless otherwise told. "no switchport" is default. so its not consistent in the damn show run across cards

#

so if i imported F1 config to F3s, it will import as layer 3 and half the config is invalid

#

@hollow marlin just cisco things

little schooner
#

If I don't use a tape library, how does one make an air gapped backup system?

#

I don't get that concept if I have to do backups via Veeam using network connection

#

Is it just a bunch of firewall rules?

waxen scroll
#

depends on your version of airgapped

little schooner
#

Well something where it does the backup and eject the hard drive partition to keep it safe

#

But something that isn't usb external or tape

waxen scroll
#

the way i see it done is its a layer 2 or multiple layer 2 vlan in the whole datacenter.... no routing inside it

little schooner
#

So I can just leave the default gateway empty to replicate that, I suppose?

waxen scroll
#

yes

little schooner
#

Ahh. Well that's good enough then 🙃

waxen scroll
#

you have to, you cant run multiple default gateways without some hacks usually

little schooner
#

This upload speed shouldn't be legal with the download speed

#

It should be at least 30mbps

winter flint
#

Does anyone know an alternative to homegroup

#

Oddly enough we used to use it back when windows 10 still had it

#

Microsoft had to kill off one of the good windows features for home users

ornate jungle
#

Yes, you can setup a NAS or build your own, with or without LDAP or AD support, depending on your needs.

winter flint
#

How much do nas’s cost

#

I know what they are but i dont know how much they cost

pseudo blade
#

Does anyone know an alternative to homegroup I give you.... Workgroups!

#

No seriously, they work just fine in a home environment.

ornate jungle
#

@winter flint depends on whether you're building a customer one (more work, less money) or buying a premade one (less work, more money). I just bought & am setting up a Synology DS918+ right now which runs about $700 Canadian Rubles + the cost of HDDs, so for $1200 CAD you can get around 24TB of usable space with redundancy.

Could I have built a more powerful NAS for less? Absolutely, but both the simplicity of the DSM OS and the space saving size of Synology's prebuilt NAS hardware outweighs my desires to have a larger second computer & manual configuration work this would involve. Look around at prices for custom building vs. buying a premade NAS in your country.

winter flint
#

Lol thanks for the help but im a home user

#

I probably only need 500gb to 1tb

#

Maybe not even that much tbh

#

Just for basic file sharing

ornate jungle
#

Synology makes cheaper, smaller NAS's for the home user too FYI. I only went with a "prosumer" model of NAS because 1) I have some money to waste and 2) I wanted something to handle a family's worth of data.

winter flint
#

Ill look out for those

#

How would my pc’s connect to it after i set it up

ornate jungle
#

Over the network, via LAN - same as how they connect to your router / modem before leaving your home network to connect to a website.

winter flint
#

Yeah but like wouldnt u have to do some configuration in windows explorer

ornate jungle
#

Yes, you'd have to map a network drive, or you can use Synology's file explorer program - whichever you prefer. It's very similar to the old HomeGroup network sharing, except instead of relying on Microsoft's support (and having to have multiple full blown computers online) you have a smaller, low powered piece of hardware that all your devices can connect to for data backup & storage, aka a NAS.

#

First though... are you just looking to move files between machines, or is this actually for backup, too?

winter flint
#

No just to copy and move files

#

Thats why homegroup was good

ornate jungle
winter flint
#

Honestly i just wished they didnt remove it

#

Hmm

#

Lemme check dis out

#

Is this over LAN or over the internet

ornate jungle
#

Do some research first of course - main reason I went with a NAS is because I wanted something central & local in the home, in addition to the off-site backups I already make via DropBox & OneDrive.

winter flint
#

I tried using windows explorers file sharing (aka u click on the pc u want to access and then find your user) but i can only find my user and not the others such as my parents and brothers

ornate jungle
#

You have to setup folders manually for that to work - that is one thing that I too miss about HomeGroup sharing. SyncThing might be a better choice for you, as it's LAN based, and fully open source with ongoing development.

lean pollen
#

I have set up Nextcloud on my Unraid box

waxen scroll
#

@hollow marlin did you see the jellyfish LTT video?

hollow marlin
#

Yes sir

waxen scroll
#

did you laugh when he said "they could have saved $900!"

#

i agreed with him until that point

#

$900 for managed repair and support for a business? uhhhh YEAH

#

why roll custom?

hollow marlin
#

oh I chuckled....more from disappointment...

waxen scroll
#

i assumed the savings was like $15k not freaking $900

hollow marlin
#

Yes it performed better but yeah, support and warranty have a lot of value. Especially if you are only saving like what, 5%

waxen scroll
#

i used to think like him too TBH

#

then i got enterprise IT jobs

#

hell no dont roll custom

hollow marlin
#

Exactly

#

it became too much of, fuck I have to figure out this one off...again.., and now it, yep, vendor ticket

waxen scroll
#

for me its "other people need to learn it"

#

or from the other side "once this person leaves this business could be doomed if it dies"

hollow marlin
#

that too

#

Should see my last jobs mail server

#

what a shit show that someone created 15 years ago....

#

No updates, no login

#

ticking time bomb

waxen scroll
#

😄

hollow marlin
#

It running on 3 physical servers, 1 core xeons. This is back when the load for each service had to be distributed because process power then

waxen scroll
#

whole foods (aka amazon) tried to get me to work there and their pitch was "we dont want to buy IT tools, we are creating our own tools with our own teams!"

#

i gave the poor recruiter an earfull

#

yes its backed by amazon BUT holy shit that could go south if they have a mass exodus

#

and then nobody off the street knows how it use it

hollow marlin
#

But man, this basket can hold 100 eggs

#

so lets use this one instead of the 4 baskets

waxen scroll
#

the guy decided not to reply to my email. it was a 3rd party and not amazon internal so i dont think my message got passed on

#

oh and the icing on the cake? the position is in a city i refuse to work in and for the high calibur they were demanding in the posting they didnt allow work from anywhere, you had to be in the office

#

morons.

hollow marlin
#

why is working in office still a requirement

#

If you can get amazing employees remote, you are only hurting yourself

waxen scroll
#

im super close to work from any office w/ 2 days home... but its actually abuse and im not supposed to do it. my manager lets it slide

#

the home 2 days is allowed but we're technically supposed to be at corporate the rest of the time

hollow marlin
#

There is few times I need to be in office, either maintenance or shit has gone wrong

waxen scroll
#

now that last two jobs have had work from home elements, i pass on any jobs that come across my desk who dont offer 2 days min

#

i cant live without it

#

i also tell people from [undesirable city] that i need 90%+ home in writing before i interview

#

😄

#

i dont wanna pay to park, i dont wanna take a train, and the commute time is all over the place

hollow marlin
#

I need to do that. Last interview the manager told me I was moving closer after I start (1 hour drive). I was like, the fuck. You have the balls to tell me Im going to move if I get the job so I can be at the office AND close by for "any other things" under the job description.

waxen scroll
#

xD

hollow marlin
#

This was for a VAR in the area.

#

That was the least horrific thing of that place. Even though the job was perfect and pay was decent for my area

waxen scroll
#

i keep flirting with that type of job, but i honestly dont want to travel to random offices of customers

hollow marlin
#

This was just remote support, which was nice

#

I actually had to help the working engineer there when a VSS of 6500s shit the bed and he was having trouble getting them up. During an interview

#

It pretty much got me the job and pay but too many flags...

waxen scroll
#

:3

#

right now im super comfortable being semi-architect semi-engineer at large companies

#

they usually have actual architects but i try to play god as much as i can

little schooner
#

Should I scale back with creating a powershell profile script that only works with the teachers lab?

#

I should invest in solutions that anyone can use after I leave right?

hollow marlin
#

I want to get there at some point. Still relatively young and its hard pushing my way to higher engineering spots.

little schooner
#

Right now I feel like my professor doesn't have the time to sit down for me to explain the script to him

#

And leaving documentation only meant he doesn't have time to read it

#

He reacts to the problems as they happen

hollow marlin
#

@little schooner stick to what you know and just have decent documentation and it should be good.

#

Script should be easily reverse engineered in case someone new comes along

little schooner
#

Okay. I just don't want to be "the only guy who knows how to work the solution"

#

Yeah I made it so it can be read

#

Function help and everything

#

And examples

hollow marlin
#

Oh youngin.....you will learn soon that one person knowing all of one thing is very common

little schooner
#

I won't be helping him forever

hollow marlin
#

No matter how much time you put into explainations, documents and diagrams

#

There are unicorns that want to learn it though

waxen scroll
#

@hollow marlin you'd be angry at the amount of high level engineers at large companies knowledge vs you

#

lots of people who are questionable

hollow marlin
#

@waxen scroll ugh...i know 😭

waxen scroll
#

@little schooner i once made a login script at a job

#

i bet its still in use today v_v

#

if someone new logs into a packet analysis computer (lots of resources), the script identifies them as new and copies packet analysis app profiles with all the settings into their user profiles

#

i documented it too but im sure thats long lost

#

@little schooner we have ONE network tools person for the whole company

rose tangle
#

Wrong person?

waxen scroll
#

hes close to retiring

#

yes wrong person

little schooner
#

@waxen scroll i think my prof would appreciate a GUI front-end for the script

mild turtle
#

If answered please tag me. Lately we've been having issues with wifi. Our devices disconnect randomly and some times struggle to reconnect (Keep dropping and connecting) On my phone some times it will say authentication error. This happens for different devices, androids, apple phone and pads, desktop PC. This start semi recently. It's been happening for three days now and before then it happened for about a week max and stopped after resetting the router. What's going on?

ivory coyote
#

Hi all, I've recently set up my home network (pretty simple ADSL -> Modem/router/switch/AP combo unit -> My desktop and a second AP to cover the house better). All works fine, I can access both the APs via web interface at two different IP addresses (standard IP addresses, nothing special). Now comes my question: since everything is connected to the main combo unit, I shuld be able to see under "LAN Devices" both my desktop and the access point with its own static IP address, but only the pc is showing up. Again that's no big deal since I can see all the devices connected to the AP since they're listed as LAN and not WiFi devices, but it bothers me. I could add the device name/Mac address and IP, but when I click apply it says "Invalid IP address" even if it's correct and it's the static IP address the other AP uses… Any hints?

#

Tag me if you have an answer, thank you!

hollow void
#

does any of you guys know how to set up a caching server for windows update, manjaro/arch update and stuff like that?

pseudo blade
#

@mild turtle Do you have your wifi channel set to "auto" on your AP? Do you have more than one AP?

mild turtle
#

@pseudo blade Yes it's on auto.

pseudo blade
#

I'd advise checking what channels are in use and manually setting it to a minimally busy one.

#

More than one AP?

mild turtle
#

I'll be honest I'm not sure how to do this. Currently I am using channel 6 because when I changed it a while ago it was one that wasn't being used a lot.

#

By the looks of it I can only have one AP?, hold on I'll screenshot

#

@pseudo blade

pseudo blade
#

@mild turtle What is this router, for reference?

thick minnow
#

I don't know if this is the correct channel for this but out of Bell, Rogers, Worldline, & Telus which ISP is best?

little schooner
#

@thick minnow the one that doesn't raise your bill after a contract. And the one that is transparent about all fees and taxes. Finally, the one is delivers the promised speed.

thick minnow
#

hmm ok

fresh copper
#

It’s always a trade off, none are really best overall, you have to decide what matters to you yourself and research what is best for those points

mild turtle
#

@pseudo blade Just some standard ISP router, BT Home Hub 5. Just saying this as an FYI, the router works perfectly fine in terms of performance and I cannot justify buying a dedicated/non ISP one, I am only saying this because I've had people tell me to buy a non ISP one in the past.

little schooner
#

@mild turtle if it helps, it was my dad's isp modem that was the cause of his device random disconnections and Comcast ended up replacing it to fix the problem. Not saying it's the solution in your case but I've seen it happen that way when modem did not get updates or the coax cable signal wasn't checked

naive meadow
#

it is replacing the Huawei one that was installed when fibre got installed

hollow marlin
#

Oh God, ubiquiti has GPON

naive meadow
#

I believe its the huawei echolife

#

thats currently installed

trail venture
#

Is there anyone online who can help with a semi bricked R8000 router ?

#

ended up with problematic install of openwrt in which LUCI failed to install properly so the router is functional but in a headless state with no GUI

#

my only access is SSH

fresh copper
#

@naive meadow you have to ask your provider if they would support it. Some are super locked down because GPON is weird and is not always inter-compatible. The Ubiquiti one is pretty nice though if you can use it

naive meadow
#

I do believe that Vodafone allow use of other brands they just don’t provide tech support for it

ornate jungle
trail venture
#

@ornate jungle the firmware is running just not the web UI so i have SSH access but not tftp so if there is a way to flash using ssh I can avoid the ttl cable

#

apearantly the r8000 doesn't have tftp mode or cant access it unless the fw actually fails to initialize

#

so yeah I would need to enable TFTP from the ssh command line if its present on the system

#

I just dont know the commands very well

ornate jungle
#

neither do i as i've never had to flash my R7000 via serial before. hopefully the dd-wrt forums has an answer, or maybe someone here has done this before.

trail venture
#

I am trying to avoid using serial

#

the ssh is just through ethernet

#

router is running and has internet

#

just no GUI

#

Optimally I am prolly going to go to DD-wrt instead of openwrt

#

the open wrt thing was only required to get past a netgear version check that blocked the dd-wrt

#

it was supposed to be a simple upload but without LUCI running

trail venture
#

Okay all set got someone in another channel who had a fix

subtle glen
#

Lol my dad tried to shut down my server rack and he just messaged me "are there batteries in there? Cause I can't turn this stuff off"

strange silo
#

@waxen scroll Jellyfish also isn't really that good compared to other options on the market at similar pricing

#

But yea it's not uncommon for the 4/5 year support portion of a quote to be 50% of the total cost

thick minnow
#

Guys, I am looking for a robust network speed test / packet loss / ping time, jitter, but for a prolonged period of time - any recommendations?

#

Just want to see if there's odd drop outs in a interval outside of what speedtest allows etc,

hollow marlin
#

@thick minnow iperf, but you'll need it on the far end as well.

clear igloo
#

@hollow marlin Spirent Test Center 😄

hollow marlin
#

@clear igloo how have I not heard of this?

clear igloo
#

Great Layer 1 through 4(ish) traffic tool 😃

#

Avalanche/Cyberflood are their L4-7 products that do really nice application testing and attack simulations

hollow marlin
#

That would be actually nice for validation testing for out customers that request it. All other dedicated circuits are handled by out Ciena testing but outside that we don't have a way to validate outside the edge

clear igloo
#

Yah, STC is great for convergence and link testing

#

blast all the bits 😃

waxen scroll
#

Ixia breaking point is good too

#

Hope you got money

hollow marlin
#

@waxen scroll hah....money. ain't nobody got time for budgets

west sonnet
#

Hey Guys, I'm going to be moving soon. What's the best mesh wifi system under like $250 USD? Being able to put a module outside is a plus, but not required

pseudo blade
#

@west sonnet Do you care if it's easy, or do you just want a lot of kit for your money?

waxen scroll
#

I like money

little schooner
#

I like money too but just not cash. That isn't easy to get back once stolen

waxen scroll
#

@little schooner I've been 100% digital since 2009

#

I only have cash if someone needs to pay me and can't zelle

#

Everything goes on credit when possible

#

Even my damn bank has no branches

#

@clear igloo you use cash, bro?

little schooner
#

Oh hey I do the same. I love putting everything on the credit card

#

Why risk the checking account funds that we work for when the credit card removes all of that liability?.... Is how I see it

waxen scroll
#

I also see 2%+ cash back from every purchase

fresh copper
#

I hardly ever use cash as well. I only really use it at my local farmers market where not everyone takes credit. I always see people recommending banks based on how many ATMs they have and where they are located. I always think, who is it that is using so much cash rather than credit or even debit?

waxen scroll
#

lmao, really?

#

The online banks refund fees from any atm

clear igloo
#

@waxen scroll I have 30x 100G-LR optics, that's like cash right?

waxen scroll
#

Nope. You don't walk around with those

subtle glen
#

is it possible to turn on the vm's in esxi after a power outage automatically?

clear igloo
#

Yes

subtle glen
#

i'll look into that then, thanks

clear igloo
subtle glen
#

i did it from VMware workstation, i'm testing it right now to see if the settings got saved

little schooner
#

@subtle glen well, vcenter takes a long time to startup

random saddle
#

Im new to the server

#

But wanted to point out im a network egineer as my profession

subtle glen
#

you think it's cause the server is still booting @little schooner

#

welcome @random saddle

random saddle
#

Thanks