#networking

1 messages ยท Page 170 of 1

pseudo blade
#

@thick minnow I need to route a gig Oh get an R620 and a pair of SSDs, run pfsense

#

An R620 to route gigabit :P

#

A pair of SSDs? for the massive quantity of disk IO routers do, I assume :P

#

Gigabit's cheap to route, get your redundancy from buying two cheap MIPS/ARM routers instead.

thick minnow
#

I may have phrased that wrong

#

I'll have to fix that

#

Yeah... that went over my head.

#

I see the sarcasm

waxen scroll
#

omg my last job had a person like this

distant wedge
#

Quick Question

#

what do you guys call a disconnection that only lasts 1 to 2 seconds

waxen scroll
#

a blip

#

thats the technical term we use in enterprise networking

clear igloo
#

We call that a browser refresh ๐Ÿ˜›

hallow nimbus
#

That takes 2 seconds demn

distant wedge
#

hahah

#

Thanks guys, couldn't get the word in my head today

clear igloo
#

Usually any event that results in traffic loss is called a "convergence event" where traffic finds another path. Traffic that just dies as a result of some event is called "black holed" usually when it has no path to the destination

distant wedge
#

That would make sense

#

now to deal with these broadcast storms

hollow marlin
#

@distant wedge you didn't disabled STP did you?

distant wedge
#

no, someone brought a switch from home and plugged two of their ports into their allocated office space.

#

Why? Who even knows

hollow marlin
#

BPDU guard

distant wedge
#

Yeah no, they're on a slave switch, but a lot of mission critical stuff is on that switch as well

#

So when I looked at the device tree and all those devices were offline I was like awwwwww shit

hollow marlin
#

@distant wedge that's exactly bwhy you put BPDU guard on the aceess ports

distant wedge
#

Lol, I'm just the junior here so I don't have as much access as you'd think

#

I can only "recommend" things to my senior

#

I told him about it and he's like "noooooo, it has to be IGMP, there's no way" I'm like "ok have fun"

hollow marlin
#

This is a good time to show them what impact it has when it's not enabled, as you just found out

distant wedge
#

They don't want to listen to me, lol

#

Right now they're running wireshark and watching things

#

I'm like "okay"

clear igloo
#

lol

hollow marlin
#

You should tell them to read what IGMP actually does

distant wedge
#

I have, they told me not to be insubordinate

#

Startin to really think about this company now lol

clear igloo
#

I'd wager they disabled BPDU guard or failed to configure access ports correctly. If they disabled STP, run

hollow marlin
#

"buT spAnniNg-tRee cAuseS LoOps"

distant wedge
#

im sitting here shitposting on discord while they sort their shit out. Their excuse is that because they configured it before I was hired, I have no say on what they should do because the settings worked before I showed up...

I haven't touched a single thing because I don't have access to anything, no switches or servers, lol

#

not even switch management console

clear igloo
#

Mission critical apps on the same switch as end users is just horrific design

distant wedge
#

Try explaining it to them

hollow marlin
#

Are you off the same switch?

distant wedge
#

They have this stupid thing where they're all sharing the same VLAN regardless of what the device is because it's easier

#

I was like what the fuck

clear igloo
#

RUN... FAR

distant wedge
#

I want to ๐Ÿ˜ญ

clear igloo
#

Is it at LEAST not VLAN 1?

distant wedge
#

Yes, they have it set to like 125

#

@hollow marlin I'm running on the same switch through an AP

#

according to my superior, going wired into the device isn't best practice

hollow marlin
#

Run Wireshark and tell use what you see

distant wedge
#

I've heard so much bs today I want to call it a day

clear igloo
#

I would have walked out already ๐Ÿ˜›

distant wedge
#

lol, I would if I wasn't hourly

clear igloo
#

@distant wedge You should pull up design guides and the RFCs for STP and PVST ๐Ÿ˜„

distant wedge
#

@clear igloo SO real quick, my superiors superior came up to me and asked me why I was on discord. I was like "I've got nothing to do. 'x' said he doesn't want me touching the hardware, so I'm respecting his wishes"

misty cape
#

lol nice

waxen scroll
#

i dont see jr/sr/ or architect

#

i just do it

#

most of the time im playing architect and as long as it works, the actual architect doesnt care

#

in my org i'm not considered senior but i work on what i want

misty cape
#

sounds like a good job

waxen scroll
#

eh. it has its issues. people are busy enough though that they dont have time to worry about letting someone make decisions

#

at this point ive had enough successes to be off radars

little schooner
#

Is it necessary to have the transport input command assigned to vty lines in order to ping a Cisco switch from a host in the same vlan as Cisco switches svi?

waxen scroll
#

no

little schooner
#

I know I have done the configuration correctly, but my vms inside of esxi host is not passing the tag along or something to reach it

#

The esxi host is connected to Port fa0/48, set in trunk mode allowing vlans 99-200

waxen scroll
#

esxi... 100mbit? bruh

little schooner
#

VM is using tagged port group in esxi virtual switch vlan 99

#

@waxen scroll yes its for a lab lol

waxen scroll
#

whats the SVI number

little schooner
#

In theory it should pass through to virtual switch and then to physical trunk port.

#

It is vlan 99 on svi

#

I did interface vlan 99

#

No shut

waxen scroll
#

"show interface vlan99"

#

is it up/up

little schooner
#

I won't be able to check that right now. It's at the school :(. I only have the config available

#

But what if it was up/up?

#

What else could be it?

waxen scroll
#

then tagging is messed up somewhere in esxi

little schooner
#

Will have to double check all of that.

thick minnow
#

You know those power line adapters? How fast are those in the real world?

hollow marlin
#

@little schooner did you remember to create vlan99

little schooner
#

@hollow marlin well creating interface vlan 99 automatically creates vlan in vlan.dat

#

But yes, I did it anyway

hollow marlin
#

Eh.....not all the time

little schooner
#

I did remember typing vlan 99

#

Name management

hollow marlin
#

Always create vlan just in case.

little schooner
#

Yeh true

#

@thick minnow most I got was 60mbps

#

On the same circuit

#

My brother got measly 5 mbps off a 50mbps connection

hollow marlin
#

But yea, check SVI up/up and if it is, show mac add and see if any tag traffic is appearing on the trunk with the ESXi mac

little schooner
#

But he was in apartment

#

Alright I will be sure to do that probably Friday when I am back there

thick minnow
#

Ooof, yeah I couldn't use one of those, It was gonna be from the media converter, to the gateway. I have FTTH

little schooner
#

@thick minnow I want that next just need to wait until next year for the new competition to oust Comcast

#

I wish I had a direct connection to someone who works there

#

I could get my area prioritized

waxen scroll
#

@little schooner that professor needs to pay

little schooner
#

@waxen scroll in regards to what?

waxen scroll
#

you

little schooner
#

Ahh. Yeah i agree.

waxen scroll
#

i'd be charging $100/hr... $60/hr if i like the guy

little schooner
#

I'd like to be hired by the school to work with him as the cybersecurity program assistant but

#

money is tight for the school

#

At my university, they are rolling in it, but they have everything figured out nicely

#

If anything, my 2-year college is firing IT helpdesk and server admins

waxen scroll
#

i noticed when you said 100mbit

little schooner
#

Yeah. Basically, when they hired my professor, they were teaching networking courses without any of the cisco hardware in the classroom

#

and no computers for the students to use.

#

Guess how he managed to get 20 computers in the lab?

waxen scroll
#

u

little schooner
#

No. IT for the 2-year school was throwing out older systems and my professor happened to see them in the hallway next to elevator

#

and he asked if he could have them and they told him sure... as long as you carry it

#

so they didn't even want to help him move it

#

and then he started testing with an all Ubuntu-system classroom layout

#

that worked good for a good 3 years until I showed up.

#

When I showed up, I got aquantied with him a bit more and it turns out we share a common passion for the work we do

#

As we went along, we were getting attention and started being able to get grant money

#

But a lot of these things have to wait until break in order to implement them

#

Like summer is when we implement our biggest projects. whether that is new servers, lab makeover, etc

#

and implementing a platform that is complex in documentation (but easy once you do it once) kinda stuff

#

@waxen scroll its funny because the old female professor who was teaching networking class claimed that she used the lab layout we have now to teach students, when she didn't even have the motivation to institute any kind of good change for the benefit of student learning

#

It was all our work and she was taking the credit in front of this new dean guy

#

@waxen scroll the improvements were so vast that we are planning on finding money to convert the classroom into two-classroom sized room. The room next door is unused and for certificate program in CompTIA+. Then, we will have a nice glass enclsoure where our server racks will be in a freestanding rack that the students can look around 360 degrees. Another rack will have equipment students can grab and take to their desk if they want to do some physical work with switches or routers. Lastly, throw in some digital signage and displays in the room and have a massively sized network map print out on the wall

#

Its going to be a fun summer once we get to that point.

#

@waxen scroll I promise this is my last statement about this lol but my friends were saying how lucky my prof is to have someone me him help him out with all these things. Of course, I make sure to leave him docs so he can fully take over once if I were to leave the state or anything. Make it easier for the next people who take charge of it. I just hope they do it with students benefit in mind.

waxen scroll
#

@little schooner when you learning coding?

unkempt ferry
#

If I want to install IW-HDs in multiple rooms upstairs, would it be a better idea to run a single cat6 up there to a switch and then split it to each AP or should I run individual cables to each AP?

hollow marlin
#

@unkempt ferry Id run to each if possible

little schooner
#

@waxen scroll coding like java or python?

waxen scroll
#

yes

little schooner
#

@unkempt ferry I've tried splitting it between APs and it was a disaster when it came time to upgrading the firmware on them. That meant that they disabled internet access briefly to the whole household

#

I re-ran everything to have its own single cable towards a single switch

#

@waxen scroll Well, not formally yet. I need more motivation to start

unkempt ferry
#

Ok Iโ€™ll go with single runs for everything

little schooner
#

Maybe during the break

unkempt ferry
#

Thanks for the advice!

little schooner
#

No problem

#

@waxen scroll I've been scripting more in powershell

small prism
#

would anyone recommend Freenas for Nas and Plex server? I was gonna set up a raspberry pi to transfer new movies over to the nas for plex

little schooner
#

I'd recommend freenas. But I also recommend Synology NAS even more.

#

Synology's GUI is simply fantastic

ornate jungle
#

can confirm; and synology does support SSH access if you need to do advanced stuff

small prism
#

yeah but synology is 'spensive

ornate jungle
#

True that; much of what you're paying for is the small form factor, lower noise level, and customized Linux based OS. I'd love to justify a Micro-tower server in my living room, but just can't.

lean pollen
#

I recomend Unraid unless you actually need lots of speed or its for a big company or whatever

unkempt ferry
#

FreeNas is better

little schooner
#

@unkempt ferry better in what way?

#

It's definitely not in support and GUI

#

In price, sure.

#

Last time I got help from synology, a single packet tracer file was all they needed to diagnose my problem with smb 3

#

They were super knowledgeable

unkempt ferry
#

I mean for it being free, it offers pretty good features

little schooner
#

Yes, no doubt about it

#

For free tier.

#

We bought a synology for a smb because they wanted a number to call and something that just works

unkempt ferry
#

Well Synology is good is you have the cash for it

waxen scroll
#

I have the cash for EMC

#

๐Ÿ˜˜

#

*slaps @clear igloo around a bit with some block storage

clear igloo
#

Ouch ๐Ÿ˜ฆ

waxen scroll
#

@hollow marlin that feel when you go into python shell on Nexus switch

#

Network as code

subtle glen
#

To make a site to site vpn, do you need a router that supports that or it's something you can run off a server?

waxen scroll
#

Server can work

#

You may need to do something with static routes on your routers though

subtle glen
#

Hope there's that on the isp modem lol

lean pollen
#

Data is more safe inn Unraid than Freenas

#

Because data is not striped

little schooner
#

@waxen scroll you have to program for the nexus switches?

#

Or is it for added flexibility?

#

Like playing around with frames and packets based on some logic

clear igloo
#

Added flexibility, you can run python and whatnot on the box

#

Even spin up VMs if you're so inclined ๐Ÿ™‚

little schooner
#

@clear igloo actually, it kind of reminds me like how edgerouter can accept Debian packages to extend the router's functionality

#

Except it isn't package, it's whatever code you make it do

#

A VM? Well...

#

They must be beefy

clear igloo
#

Yah, it's got virtualization support, not sure how in depth but I know it exists on some of the lines

little schooner
#

Yeah that's real neat

clear igloo
little schooner
#

4 wires yeah

clear igloo
#

Just making sure I wasn't having trouble seeing ๐Ÿ™‚

little schooner
#

That is real tricky

#

Also the orange one looks as if it's take both white orange and oranges spot with single wire

#

But that can be done if you force it in hard

little schooner
#

My first introduction to Docker was with an appliance called xibo

#

Got to say, much better setup procedure without the messy server and config files editing

clear igloo
#

Yah, you won't run a full blown Windows VM in most cases but a nice lightweight linux distro is perfect

waxen scroll
#

@little schooner my script is done for the most part

#

it takes your login info and asks what switches to use... you define as many as you want

#

"show ip arp vrf all | i Vlan|Eth"

#

stores the output into a file, cuts some extra stuff out, deduplicates entries, makes a CSV

#

it'll do more later

young yacht
#

Interesting read for anyone interested in SDN/Linux

hallow nimbus
#

๐Ÿ‘€

ember phoenix
#

Yoshi

#

I want change my Internet from wireless to fiber optics

#

is that possible without changing the ISP

clear igloo
#

Unless the current ISP offers both, no

ember phoenix
#

the current isp has some show off shit like "super fast fiber"

#

so do i call them up and tell them to upgrade me to fiber?

clear igloo
#

I mean it might cost more but it can't hurt to ask

ember phoenix
#

im on this plan

#

it says 1000Mbps

#

*100

#

but in speedtest i only get 10 Mbps

#

is that normal??

#

(im on a wireless connection)

#

and they show this

#

i guess thats normal right?

radiant crane
#

They might throttle your WiFi speeds for what ever reason

#

What's your speed when you plug in wired?

ember phoenix
#

10Mbps

radiant crane
#

Yeah I would call them, if you bought 100 you should get 100. Are you using their modem?

ember phoenix
#

yes

#

here is something you should know

#

by wired i mean im connected to the router via lan

#

The actual setup is

#

There is an Antenna at the 12th floor

#

which sends a wire down

#

wire plugs into router

#

and im plugged into the router

radiant crane
#

Is it your router? Like one you bought?

ember phoenix
#

no

#

the company guys installed it

#

and this is the speedtest from 8 days ago

#

same connection same pc connected via lan

#

now they are throttling my speed i think

radiant crane
#

Yeah, looks like it. You're correct that you shouldn't be getting 10 Mbps

ember phoenix
#

an hour ago a guy came coz i reported some stability issues

#

i asked him about this speed thing

#

being reduced now

#

he said "you were getting high speeds coz of more bandwidth "

#

and said that the speed right now is normal

#

i just want to know whether the ISP is scamming me

radiant crane
#

I mean are alot of people home right now from work/school over where you are?

ember phoenix
#

home

#

and only i am connected the to internet

radiant crane
#

What timezone are you in? They might throttle everyone down during peak hours

ember phoenix
#

i am in IST

#

(indian time)

#

and i dont think they are throttling in peak hours

#

its 7pm here right now

#

and i have been on my pc for like 12 hours now

#

and the speed hasnt changed

#

its been like that

#

10Mbps

thick minnow
#

I love this page I found, It's great for planning WISPs that you can never afford building.

shadow mica
#

Anyone in here that could either talk to me or direct me where to find some info on 8K video streaming? I have a use-case that I'm not sure how to approach...

worldly lantern
#

@thick minnow Yep, that's the only thing I use it for lmao

thick minnow
#

I wanna make one irl, but it's waaay too expensive. Also the IP transit probably costs like $500 a month for 1 Gbps

worldly lantern
#

About 600ยฃ in the UK by my research

#

No idea about US, tried to research but surprisingly found nothing

hollow marlin
#

@thick minnow there are more than just cost with WISP

pseudo blade
#

@ember phoenix Yeah if a wireless internet service provider's offering "100mbps except for all the wireless users" it's clear they're using deceptive marketing techniques and you should tell them where to shove their service.

ember phoenix
#

oohkay

#

time for consumercare forums

#

@pseudo blade i used to think they are providing 10mbps on a 100mbps plan because its not possible

#

but they aciddentally provided me 60+ mbps speeds for 5 days

#

now i know they are throttling me

pseudo blade
#

Not possible, eh? If so it'd be on them.

ember phoenix
#

i guess they are just scumbags

#

time to head over to their social media and talk shit about them

shadow mica
#

Anyone in here that could either talk to me or direct me where to find some info on 8K video streaming? I have a client use-case that I'm not sure how to approach, and I need to quote them on some wiring installation very soon.

hollow marlin
#

@shadow mica what/how will you be streaming 8k

shadow mica
#

@hollow marlin I think they would like to stream recordings to a smart TV, but the primary will be a direct from camera to monitor situation. The client is an oral surgery school, and they will be doing live procedures that students will be observing.

hollow marlin
#

I guess it will depend on but rate. I cant see it reaching a gig/s but still unknown

clear igloo
#

Depends on the camera/codec/compression, and framerate, 4K video (24fps) can easily crush a gigabit pipe and push up towards 3+ Gbps depending on the camera and codec. I think RAW 4K video can do somewhere in the 2 to 3 Gbps range and depending on the fidelity of the 8k footage, which I hope is not too high, you could go MUCH higher than that

#

IEEE mentions 257Gbps per channel for UHD uncompressed 8k footage ๐Ÿ˜„

#

Obviously there will, or hopefully there will be, compression of some sort which would probably put you in the gigabit range for 8k footage though

hollow marlin
#

@clear igloo a packet pushers podcast has a video engineer for a live broadcast company. He was talking about complexity and their raw 1080p footage was 7gbps.

clear igloo
#

@hollow marlin Those were at 24fps rates, what I mentioned. Should have edited that in

hollow marlin
#

I cant even imagine. Also the ultra low latency with a lost packet or two destroying the entire stream. LAN side of coarse

clear igloo
#

Yah

#

Just put deep buffers everywhere kiichiLUL

hollow marlin
#

Good episode. I was wrong, I was thinking of something else. He said 4k 12gbps and 8k being 48gbps

clear igloo
#

Nice, I'll definitely give it a listen

shadow mica
#

Gonna have to dig into this...

shadow mica
#

... That 4K raw number looks wrong to me, is that HDR+ or just standard 8-bit color?

thick minnow
#

I would have to go through a bunch of legal stuff to start a business, learn how to make a DHCP server or manually assign IPs, I would also have to buy an IP Address pool. You also have to abide by the US Government and do whatever they want you to do, part of what I assume is assigning IPs. Not only that but I have to learn the security side of things too to prevent from being hacked or getting DDoS attacks. Im thinking of having the equiptment on farming equiptment like grain houses and stuff like that. I also have to find a base site that isn't too far from fiber, the more fiber I have to build to the main site the more it will cost.

#

I'm sure there might be some that I am missing. Let me know.

#

I could probably physically set it up. But I wouldn't be able to set the IP addresses ip. Idk how things work ISP side.

little schooner
#

@waxen scroll @hollow marlin the output with vlan 99 on switch did not show up/up status, so yes, that was the issue why I couldn't not connect to it. A "no shutdown" fixed it quick.

#

Thanks

tall frost
rough zenith
#

Is there any difference with getting an Asus RT ac1300UHP, and/or keeping with my current rt ac1200G+?

oblique aurora
#

is it possible the EPON i have from the isp to slow down the speed? on their page it says the minimum spped is 200 Mbps down and 100 up

clear igloo
#

It's a 802.1x authentication mechanism usually. What speed are you getting?

waxen scroll
#

lmao

#

the problem i have with scripts and letting other people use them is that often I have to code validation checks in

#

those blocks of checks can be just as big as the actual work the script does

#

you cant just go "if username empty, stop"

#

what if the username is nonsense like #$%^$ or contains escape characters?

#

Leelaroo says "I tend to expect help-desk staff to be smart enough to run scripts I provide them."

#

oof.

#

bad policy

#

@clear igloo da?

#

sure your helpdesk could be smart enough to type their username... but what if they hit \ by accident?

clear igloo
#

Yup, gotta think about what someone who doesn't know the script will do

little schooner
#

@waxen scroll That's where making GUI out of script function logic comes in handy, this way they are restricted to what they can do. Although, yes, you still need to do some input validation, but in C#, it does not take as long to do with a shared function. Yes, its more work :/

waxen scroll
#

once you need to ask for input its game over. you need all the validations.... if its a script to check firewall arp tables, you dont need input or can used predefined input

little schooner
#

I configured a Dell n1548 switch the other day and have to say there are a bunch of enterprise features I never knew about

waxen scroll
#

however theres also a catch with predefined input

#

for example with an HTTP site and a predefined hostname dropdown box

little schooner
#

something like that

#

Well, by this, they wont edit the script by hand and add in mistakes

waxen scroll
#

i can submit my own POST reply and give it an unexpected value for the dropdown

little schooner
#

I guess it still has its problems

#

is ISDP the equavilent to cdp?

#

I saw this yesterday on the switch

waxen scroll
#

i think some of the r/sysadmin people are underestimating the stupidity and curiousness of humans

little schooner
#

It happens constantly

waxen scroll
#

i would expect a bored helpdesk person who just learned about pushing their own manual HTTP POSTs to go try it on a hostname that wasnt in the list

#

now you have a rogue script trying to access devices and run commands that werent intended for that device

little schooner
#

@waxen scroll at that point, perhaps having a whitelist within the script is your next best bet

#

Will stop all their curosity

waxen scroll
#

thats what im saying, you need to validate all inputs

little schooner
#

is matching and validating the same thing?

waxen scroll
#

yes

little schooner
#

ok nvm then lol

#

yes your right

#

arrrgh

#

the struggle

waxen scroll
#

i released a dangerous one that had to run as root a while ago

#

that was fun letting coworkers use

#

๐Ÿ˜„

oblique aurora
#

asus rt 66u i belive is, i have another asus, might try it to see if it's better

hollow marlin
#

@oblique aurora what's the problem exactly?

oblique aurora
#

sometimes my internet is getting really slow... some pages not loading, others do. no idea ... maybe i can try a fiber optic media converter thingy

unique crypt
#

anyone able to help with a network connection problem?

oblique aurora
#

ask. someone must know the answer

unique crypt
#

well i just got a new wifi extender

#

and for a while now I was not able to connect to my 5ghz network kept saying cannot connect to this network

#

now it seems to connect

#

but I am still getting low dl and up

#

i am paying for 150

clear igloo
#

Well a wifi extender is problem number 1 because distance away from the router reduces the speed alone and then a repeater will pretty much cut that in half to repeat the signal

#

Couple that with any other load on the network, interference, etc. and you can easily see good speed drop way down

unique crypt
#

that is the the network not on the extender

waxen scroll
#

@clear igloo The network, extended.

clear igloo
#

@waxen scroll The network, wireless

waxen scroll
#

The network, outsourced

little schooner
#

The definition of networking is notworking

waxen scroll
#

@little schooner you kids today

#

there used to be so many level 1 network and systems jobs

little schooner
#

Now they are all taken and more of the specialized jobs are common

waxen scroll
#

yep

little schooner
#

well, at least in this area, they are looking for more database admins more than anything

waxen scroll
#

moved to india.... or if you're in europe, ukraine

little schooner
#

c# developer is pretty popular too for a position

waxen scroll
#

im waiting for the lolz when nobody can do level 3 positions locally cause nobody was training for a decade

#

the business people LOVE level 3 local

#

ive noticed all the big players who outsource are at least smart enough not to put all eggs into one basket

rough zenith
#

I thought the ac1300uhp was the successor to the ac1200g+, but im getting like half the speed in the 5ghz band with roughly the same signal strength....any settings on router or client to optimize this?

waxen scroll
#

dont let the router do auto channels, lock one in. it could be that the channel its chosen is too noisy

thick minnow
#

Do you think a 1 gbps backhaul would be good for up to 400 people? Each customer will have 100 Mbps speeds. I know it's slightly over selling, but not everyone is going to use their 100 mbps connection the whole time.

#

If everyone went like full balls to the wall at the same time, each internet connection would be limited to 24 mbps.

#

Probably actually 20 mbps

#

Cause 1 Gbps isn't 1000 Mbps, it's more like 940 mbps

waxen scroll
#

dunno. ive seen businesses with 3,000 people on 1gb

#

buy a 10gb port and inform sales that you might intend to upgrade to X speed later

#

some providers make you run new circuits if you dont tell them

clear igloo
#

Stop with your helpful planning suggestions sir ๐Ÿ˜›

waxen scroll
#

sorry ๐Ÿ˜ฆ

#

you're right, i need to be paid

waxen scroll
#

@clear igloo i have way more suggestions but pls insert $300

keen ermine
#

for some reason it defaulted to that even though my other systems can pull 1 Gbps on LAN

#

and I'm on Cat 6 on the connected port

waxen scroll
#

cable is probably bad

lean pollen
#

or its an very old computer/card

keen ermine
#

It's not old cause its Z370

#

apparently both my laptop and old run is reporting 100 Mbps from the Router but direct short line from Router to Laptop outputs 1 Gbps

topaz bane
#

Guys. is there any difference between red and yellow etherent cables?

waxen scroll
#

Usually yellow ones are crossover

clear igloo
#

Depends completely on the supplier but usually color is just color

pseudo blade
#

Our red ones were crossover back at the technical college.

hollow marlin
#

I cant remember the last time I saw a crossover cable. There are no standards with shielding color

little schooner
#

The crossovers at my 2 year school were different tips on both ends as a way to identify it

limber junco
keen ermine
#

that ain't 5 Gbps

lean pollen
#

Then get your money back

hollow marlin
#

@limber junco are you actually paying for 5gbps?

limber junco
#

Yes

clear igloo
#

Do you mean 50Mbps? Because 5Gbps would be roughly 100x what you're getting now

limber junco
#

I mean 5Gbps

clear igloo
#

And you'd be on a business line with proper equipment and a SLA

limber junco
#

yes

hollow marlin
#

@limber junco so what router are you using to route 5gbps

clear igloo
#

And you wouldn't be using a wifi extender to say the least. Do you mean 5GHz wifi?
Because if you have an SLA and are paying the roughly thousand dollars or more a month for that speed then I would be calling up your dedicated tech support person and complaining

limber junco
#

I am using the Razer Sila Router

#

The only creates up to 2000 mbps, but that would be completely sufficient, but I have an appointment tomorrow with my internet provider.

clear igloo
#

Well it only has a single gigabit WAN port so that's problem number 1 and that 2000Mbps is theoretical maximums based on a tri-band AC capable device in perfect lab like conditions and you'll never get that in the real world, let alone outside of the router since it doesn't even have a physical port capable of sending more than 1Gbps

topaz bane
#

@limber junco damn

limber junco
#

fuck, i have the wrong router i think

#

Actually, I would need a router that transmits 5 gbits or generally accepts

hollow marlin
#

Stuff still doesnt add up. You would still be pulling a gig (if the razer can even do that) if you are currently getting 5gbps. 5gig routing is not cheap.

clear igloo
#

5gig routing would still require a 10Gbps capable port since I don't believe there are any 5Gbps optics or anything

#

And then it would just be hard limited to 5Gbps on the port

topaz bane
#

internet providers are like printer cartridges, always disappointing

hollow marlin
#

@clear igloo yeah just 10gig with 5/2.5 support. When we were looking at Calix's new ONTs its a built in copper 10/5/2.5

clear igloo
#

That's pretty cool ๐Ÿ™‚

twilit current
#

anyone know where to get a decent Cat 6a Patch panel

hollow marlin
#

@twilit current Anything on amazon will do really,

waxen scroll
#

recommend Cisco ASR 1001-X w/ 10Gbps license over asus

#

why u smirking, we should only need 5Gbits but your licensing is bogus

#

;p

clear igloo
#

๐Ÿ˜›

waxen scroll
#

if i have RX using 5, ive met the license, my TX cant use 5 at the same time

hollow marlin
#

Hey Ciena pulls the same shit

waxen scroll
#

i have to triple check special order routers sometimes cause its like... wait.... how does it work?

hollow marlin
#

Even better though is you need a license to create non-management vlans on their L2 only switches

waxen scroll
#

lmao

#

does the ubnt stuff actually handle 5x5gbit?

#

never tried

#

"6.8 Gbps (Line Rate)
"

#

L3

hollow marlin
#

I would assume it would at least be limited to just the Edge series

waxen scroll
#

we have cienna too

#

its sitting in my lab

#

i never touch it and dont know how it works

#

its new too

#

that QSFP life

hollow marlin
#

@waxen scroll Its french translated into english, so the syntax is backwards

#

port show port x

waxen scroll
#

ew

hollow marlin
#

Its mostly a carrier grade switch. Mainly for transport and L2 circuits

#

Fucking rock solid

#

But support is less prevalent than Ubiquiti's. Calling and documentation

#

We have ~150 deployed with 6500 chassis for 80km 900gbps backhaul

waxen scroll
#

speaking of 80km

#

i got two of those SFP for free and cant even PoC with them cause i dont have an attenuator

#

๐Ÿ˜„

#

FS.coms competitor sent me like every gig and 10G SFP they have for free

hollow marlin
#

Just do what my coworked did and link them up at 3km and wonder why one is permanently showing -5db even when nothing is connected

waxen scroll
#

my coworker says why not just keep looping fiber between the lab and prod until its good

#

not sure we have that much to loop

hollow marlin
#

When I was in the field we used a pencil to wrap fiber, around -3db per wrap (testing purposes)

waxen scroll
#

we only use 80km in 1 facility so i cant test in prod

#

nice

#

i was told i need to -20db

hollow marlin
#

Yeah most our 80km can only get as hot as -5-6db before going poof

waxen scroll
#

im happy they sent them though

#

its like $700 free

hollow marlin
#

Id be happy!

waxen scroll
#

i already bought like $20k of SFP from them so i dont even know why they agreed with our var to send anything

#

i didnt ask, our var was like "how about you test X brand against [vendor you already buy from]?"

#

i was like..... its free, OK?

#

so both brands sent sample SFP

hollow marlin
#

Im always up for getting free SFPs, more concerned when the company wants to test this in live environments

waxen scroll
#

one brand is gonna win my business cause they're $5/ea cheaper for 10-SR, the other brand i already use is gonna get everything else

#

our var doesnt like dealing with the one i use cause they cant directly quote

#

if i need a quote now it takes a day

hollow marlin
#

We are still spending full price on SFPs -_-

waxen scroll
#

we are also doing that

#

they still want me to use cisco if its cisco to cisco connection

#

ive been kind of rogue, so i might change that and go "look! it works fine!"

hollow marlin
#

Last job we used nothing but FS.com, I suggested it (with that 80km optic), burnt out, then upper managment came down on me with "I knew that cheap shit would break"

waxen scroll
#

im not allowed to use FS

#

they dont want to open relationships with all these vendors, they want a var

#

the var is doing more than just being there for orders anyway

hollow marlin
#

Last job maybe had 3 die out of the 10,000 optics we purchased from them. Just got fucked at my current because layer 8.

#

I would like a consolidated sales/support like that

#

We have too many vendors

waxen scroll
#

ours has a staff ccie assigned to our account, so they lean on him if we order new stuff that they havent talked to us about

#

like when i ordered a new model line card they were like "wait. stop. do you know about XYZ?"

hollow marlin
#

Yeah thats so nice

#

Our juniper reps like to tell us that after we already run into the problem

waxen scroll
#

ive seen worse. lying about firewall feature support on a $300,000 device and "oops. not until next year"

hollow marlin
#

Sounds about right

waxen scroll
#

it was checkpoint

hollow marlin
#

Have never dealt with them, only heard about em

limber junco
#

Does anyone have a recommendation for routers the 5 gbits accept / transfer?

clear igloo
finite mango
#

Look at the Juniper line of routers.
Edit: Ubiquiti is good too.

clear igloo
#

And you'll never get real world speeds anywhere near 5Gbps on wireless, not for a few years at best unless you find an 8x8 AX client and AP

finite mango
#

^ Okay, I agree with this. If you really want 5 GB/s of speeds, youโ€™ll need to use CAT 7/Fiber. Another point: even if you use the types of cables above, youโ€™ll never reach those speeds due to bottlenecks with spinning drives.

#

Another way to go about that would to use RAM disks if you really wanted to use storage at 5 GB/s

clear igloo
#

Cat5e can do 5Gbps up to 30m, anything more and you need Cat6 or Cat6a for copper

finite mango
#

^ True. Iโ€™ve used MS Azure in the past and got 10+ GB/s to the internet. So I know itโ€™s possible, just difficult.

clear igloo
#

Gb*

finite mango
clear igloo
#

Yah but that's from a DC ๐Ÿ˜›

finite mango
#

Yes true, they have really good internet there. Because of cough cough government communications

clear igloo
#

shakes fist
da gubment!

finite mango
#

๐Ÿ˜‚

#

@clear igloo Do you do IT-related things?

clear igloo
#

Yah, I'm a network validation engineer

finite mango
#

Iโ€™d love to be friends!

clear igloo
#

I break network designs and get paid for it ๐Ÿ˜„

finite mango
#

(Iโ€™m 16 years old and already have admin access at school rofl)

leaden topaz
#

I'm 17, teach my teachers how to use computers and change the network id at home to kick my parents off the internet

finite mango
#

LOL

#

@leaden topaz You Australian?

leaden topaz
#

yeah

finite mango
#

Damn I was born there too

#

Lachlan (my name), nice to meet you.

leaden topaz
#

hiya I'm lachlan

finite mango
#

๐Ÿ˜‚๐Ÿ˜‚

leaden topaz
#

where you live now?

finite mango
#

US

leaden topaz
#

lol, nice

#

I wanna move to denmark in the next 10 years

clear igloo
#

I hear Denmark is really nice

leaden topaz
#

it's also going to be super fucking cold rip me

clear igloo
#

@finite mango Just one small thing, it's b for bits and B for bytes and network transfer speed is almost always referred to in bits ๐Ÿ™‚

finite mango
#

Yes, that's true about bits. I don't know why people are so picky about that stuff lol.

#

We just got students from Denmark at my school ๐Ÿ‘€ @leaden topaz

leaden topaz
#

oh nice

hollow marlin
#

@finite mango we are picky about b vs B because it's no small difference

finite mango
#

True.

clear igloo
#

Walked into 2 day training class
Opened the quiz
Passed with a 90% in 10 minutes
๐Ÿ˜„

waxen scroll
#

..................

little schooner
#

What if I only want 1gbps router that isn't an ubiquiti?

waxen scroll
#

Cisco ISR 4451

little schooner
#

@waxen scroll new or from ebay?

waxen scroll
#

new.

little schooner
#

Personal use

#

Lol I meant to say 10gbps

waxen scroll
#

Cisco ISR 4451 w/ max throughput license.

little schooner
#

Ahh

waxen scroll
#

oops. i forgot thats gig only. Cisco 4461 supports 2x 10G interfaces

#

either way you're not buying it

#

did you know you can put a server inside those routers?

little schooner
#

@waxen scroll yeah I think lurick was saying something like that

#

@waxen scroll also, my Intel NUC just randomly froze right now

#

Ugh this happened with the last generation of NUC too. I do not understand why this is such a problem

waxen scroll
#

:\

#

zotacs are decent

clear igloo
#

@little schooner Did you feed it the tears of a child and the blood of a mongoose?

little schooner
#

@clear igloo where in blazes am I going to find a mongoose in Northern US?

#

@waxen scroll I want a specific model, MI621, but I can't find out where to buy it

waxen scroll
#

@little schooner guess its time to buy the next step up

#

no loss

little schooner
#

@waxen scroll okay, so now that I'm home, I was able to diagnose the problem. Turns out, the scheduled task I created to autorun a web service application was set to automatically terminate after 3 days of running time. Since the service task never stops (unless crashing or manual stop), it was easily going to go over 3 days. So at three days, it terminated it all. I've adjusted the config to NOT have it stop running after x days and now it should be working better.

#

Almost thought it was Intel NUC's fault again, even after I followed all their Hardware verified lists when putting the NUC together

waxen scroll
#

Good job

hollow marlin
#

2nd Interview tomorrow for lead network engineer position. Weโ€™ll see how this goes

waxen scroll
#

ive always been senior but never in title

#

for some reason i can never get it

#

i interview for senior and then its either "we hired someone else but want to hire you anyway" (sr pay-ish but not title) or "im going to give you senior pay near the top of the non-senior band so the pay can grow more than it would if you were hired as senior"

#

next job i'm sure ill finally get it

#

im asking for a lot of pay

hollow marlin
#

Iโ€™ll get more info tomorrow. Different company.
There is no chance at senior here until the boomers croak

waxen scroll
#

๐Ÿ˜ญ

waxen scroll
#

@hollow marlin or worse.... gatekeeping in the telco industry

#

im friendly with a group of people who know people, its all telco, and no referral from a few people in that group ever works because i dont go to industry conferences like nanog and they refuse to look at anyone who isnt beer buddies

hollow marlin
#

@waxen scroll the more Iโ€™m branching out the more I see that as well

waxen scroll
#

Honestly it makes me want to attend those conferences even less

#

Since the people are kind of cancer

#

Lol

hollow marlin
#

I want to go if my employer allows it, but yeah, the whole "your not a real engineer unless you been doing from the beginning like the rest of us" really turns me off.

hollow marlin
#

Man I really wish Juniper's vSRX image didnt run like dog shit in VMs

#

10mins to boot...4gb minimum for stable release, 8gb for 1ver behind. 5 cores min but all processes are single thread and in flow mode polls 100% of the time

#

Then I sit with 30 IOSvs sipping less memory and CPU then a single vSRX node

unique crypt
#

how much would it cost to run a cable from the modem to another part of the house?

leaden topaz
#

why does internet in australia suck, like fastest you can get is around 90 Mbps

topaz bane
#

i only get like 10Mbps

leaden topaz
#

atm I'm living on 25Mbps across 7 people so drastic difference, I just want fast internet

tawdry veldt
#

I have NBN on Telstra and get 90-100 solidly

#

Also should I avoid killer networking like black plague? I hear it has a ton of issues

waxen scroll
#

@unique crypt assuming no major drywall work and 1hr of work, $350 minimum labor only. $1000 max

#

This is from skilled contractors. Unskilled or side gig would be cheaper but those rates vary

#

That's the lowest I paid for already existing wires to the attic and simply having them dropped into walls with existing jacks already there

#

I'm finding that wire runners and electrician don't like to come out for less than that

thick minnow
#

What kind of firewall could I get that would tell me more about the kind of traffic that's coming in, and what's using all the upload speed?

tawny seal
#

Passed this today

hollow wasp
#

@tawny seal Congrats! Any tips, Taking mine here in a few weeks!

tawny seal
#

I did not even study

#

I just kinda knew it

hollow wasp
#

Fair enough

tawny seal
#

I just took my chances since my teacher had aloymof vouchers from last year

#

I just knew most of it

#

I'd say just keep reading the textbook

#

And actually practice stuff in Windows 10

#

I'll be taking networking and security also

little schooner
#

The CCNA exam is one that they love to play around with you when it comes to deciding which of the answers is correct

#

They are having too much fun

clear igloo
#

@little schooner It's not about what's technically correct but what the question writer feels is MORE correct ๐Ÿ˜›

little schooner
#

@clear igloo I finished with like 2 minutes left

#

They really timed out those questions

waxen scroll
#

i finish with like 20min left

#

im always in the 800s

#

new test i'd probably fail

#

they changed up a ton i think

hollow marlin
#

God that interview was so awkward

waxen scroll
#

oh. one of THOSE.

#

conversation didnt flow?

hollow marlin
#

I tried to keep it going. I'm a bit on the quieter side in person but can hold a conversation easily when I need to... He just had no questions for me and at one point asked if there is anything he should cover in my resume....but...that's what you are here for

#

First interview when amazing

waxen scroll
#

rip

#

my boss tried that on me

#

"hey i need you to interview someone in 5min"

#

but... ive never interviewed someone before?

#

what are we hiring them for?

#

if that guy was technical i bet thats exactly what happened

little schooner
#

@waxen scroll my score was near 780

#

I only had lab and home practice, no work practice

#

In fact, still no work practice because the school thing I do is volunteer not work

#

And even then, the prof doesn't want complex things, so I am limited to what can be implemented.

waxen scroll
#

@hollow marlin you dont python do you?

hollow marlin
#

I started then gave up when I couldnt find a use

clear igloo
#

@waxen scroll Python!!!!! ๐Ÿ˜„

waxen scroll
#

I'm having trouble getting ssh outputs into arrays without a feature called fsm. But I suppose it's not possible

leaden topaz
#

I wish I knew more than super basic python

#

I can at least do something with pascal bc I spent 9 months doing that for my programming class

little schooner
#

I know I can learn it, I just need to find use cases for it like I do with Powershell constantly. It sticks better that way for me. The fact that I have to revisit it daily lets me remember.

waxen scroll
#

I found a few small cases to manipulate show command info but I also can't find a major use case. Too many people running around telling us that coding is the future for networking.

#

We use Excel template for major stuff and it seems to me that it makes more sense to do that then to give a script the information live and potentially screw it up

#

If work bought us some fancy Enterprise program like ansible tower where it's GUI and can easily be shared between people, I can see it

#

I've seen coding relevant in Cisco ACI because it's such a chore to use the GUI

radiant crane
#

@waxen scroll what switches are you using? The Nexus Switches support APIs that can be in JSON format

waxen scroll
#

Nexus and ios

#

I'm a little scared of enabling the API https because it opens me to more risks vulnerability wise

radiant crane
#

Yeah of course, it's a trade off

#

What are you trying to do with Netmiko?

waxen scroll
#

Two things right now. One is an arp scanner which scans multiple cores, dedupes, then does dns and ipam lookup before dumping into an Excel sheet. This is a report for maintenance. Next is a VRF scanner. Take a VRF name and get the configs for it across all network devices. My issue is I can't do an array without textfsm and have to dump to a text file then import to an array/list

radiant crane
#

And why can't you use TextFSM?

waxen scroll
#

I can use textfsm but there's more bullshit involved. I have to learn it. It also makes it harder to distribute the script unless I make a jump server with all the dependency like custom textfsm definitions

#

Yes it's me being lazy. I'm just curious

radiant crane
#

Yeah I get that

#

I did two things before I learned TextFSM. I made an array by separating at the space " " or I counted the characters I knew the output would be

#

Example 1:

  MAClst = [];
        for char in showMAC:
            MAClst.append(char)
        MACvarsplit = (''.join(MAClst).split('\n'))
#

Example 2:

interfaces = [];
for line in showMAC.splitlines():
        #only grabs interfaces that are not equal to userVLAN
        if line[2:4] != userVLAN:
            interfaces.append(line[38:47].strip())
#

But of course TextFSM is so much easier

lldp = net_connect.send_command("show lldp neighbors detail", use_textfsm=True)

    # iterate over the list
    for lldpf in lldp:

        # grab only "W" capabilities
        if lldpf['capabilities'] == 'W':

            # grab some information
            ap_ip = lldpf['management_ip']
            ap_port = lldpf['local_interface']
            ap_name = lldpf['neighbor']
waxen scroll
#

Thanks

little schooner
#

@radiant crane wait a second, textfsm is like treating it as an object and going through its properties, not just filtering output?

radiant crane
#

yuppp, they're custom templates people have made

little schooner
#

I can see why that is much more time efficient

radiant crane
#

You just have to write out the entire command, no shorthand

little schooner
#

Yeah. That's good, then if someone else is reading it, they can know what it is too

radiant crane
#

You guys have a GitHub? That's where I put all my random scripts

waxen scroll
#

No

#

I'm thinking about it but I make these scripts on company time so they own it

radiant crane
#

Huh, I never viewed scripts in the same way as software

#

To me scripts are a process, just a quicker way to do it

clear igloo
#

ScRiPtInG :D
Run Keyword IF ${v4uniconvergence[0]} > 4 Log IPv4 Unicast Convergence Greater Than 4 seconds WARN
... ELSE IF ${v4uniconvergence[0]} > 10 Log IPv4 Unicast Convergence Greater Than 10 Seconds WARN
... ELSE Log IPv4 Unicast Convergence Less Than 4 Seconds
Log ${v4uniconvergence[0]}
Run Keyword IF ${v6uniconvergence[0]} > 4 Log IPv6 Unicast Convergence Greater Than 4 seconds WARN
... ELSE IF ${v6uniconvergence[0]} > 10 Log IPv6 Unicast Convergence Greater Than 10 Seconds WARN
... ELSE Log IPv6 Unicast Convergence Less Than 4 Seconds
Log ${v6uniconvergence[0]}
Run Keyword IF ${v4multiconvergence[0]} > 4 Log IPv4 Multicast Convergence Greater Than 4 seconds WARN
... ELSE IF ${v4multiconvergence[0]} > 10 Log IPv4 Multicast Convergence Greater Than 10 Seconds WARN
... ELSE Log IPv4 Multicast Convergence Less Than 4 Seconds
Log ${v4multiconvergnece[0]}

waxen scroll
#

Oiii

little schooner
#

Scripting is so much fun, ngl

#

It's basically learning how to put yourself out of work, but at the same time, it isn't as automation is a thing

#

@clear igloo ahhh, I hope CCNP exam is not like that too.

#

Is it?

radiant crane
#

The new one?

#

Yeah the new one has a section for Automation

little schooner
#

The topics look interesting. And finally an understand of igmp on switch or the router version is taught

#

Vrf I never played with

#

VIRL is suggested for CCNP training?

#

I'm not looking forward to actually buying the equipment

clear igloo
#

Yah, VIRL is a good way to not buy a ton of gear

radiant crane
#

My company uses VRFs for everything, it's so needlessly complicated lol

little schooner
#

@radiant crane I just hope I eventually get it so I can comfortably implement it

#

I thought some stuff from ccna was hard

radiant crane
#

Yeah it was hard, I thought I failed it for ICDN 1 and 2

#

Are you waiting until Feb to do the CCNP?

hollow marlin
#

@little schooner I am using VIRL for my CCIE labs. VIRL images + EVE-NG is the best labbing experience.

#

@radiant crane VRF use really depends on your use case. What are they using them for/what scale

radiant crane
#

We use VRFs for every network, so security cameras vrf, staff vrf, guest vrf

#

Even though they are different networks with different IP ranges already

#

So when you're troubleshooting you'll do sh ip ospf neighbor

#

And troubleshoot that for an hour then remember it's sh ip vrf Guest neighbor

#

So on and so forth

clear igloo
#

at least you're not dealing with VDCs as well ๐Ÿ˜›

radiant crane
#

Oh please do tell, what's that?

clear igloo
#

Virtual Device Context, used pretty much only on Cisco Nexus 7000 series boxes. It cuts the box into virtual instances that live on a physical box

radiant crane
#

Yeah no thank you

clear igloo
#

๐Ÿ˜›

radiant crane
#

I'm ripping out VRFs when we upgrade our distro switches

#

It'll be OSPF area 0 to the core

clear igloo
#

Haha, nice. And just firewall and ACL off everything instead ๐Ÿ˜›

#

VRFs have a good use but only when done properly, you don't need a VRF for every network though

radiant crane
#

Yeah I can see the appeal. I think one article/person mentioned if your company bought another company with the same IP space, that would be a good use

clear igloo
#

Yah, ISPs use them a lot to keep customers segmented since you're almost definitely going to have overlapping routes and don't want Customer A to leak into Customer B's network and vice versa. Have multiple tenants/customers in your own network is another option for larger companies too

radiant crane
#

Oh true about the tenants. ISPs use full VRF though, not VRF-lite right?

clear igloo
#

Yah

radiant crane
#

Yeah we're not that fancy yet

waxen scroll
#

I have like 15 vrf!

#

And mpls at my network edge!

#

Linus vlan tips

clear igloo
#

Drop all the packets that way ๐Ÿ˜›

waxen scroll
#

๐Ÿค”

waxen scroll
#

Jelly?

little schooner
radiant crane
#

I think they are honestly. Those work just fine. The only problem you run into is when your internet is out. The moment they see you're not using their modem they'll hang up

waxen scroll
#

im pretty sure all that modem can do is bridge mode

#

why are you calling comcast on it?

#

@hollow marlin job = ?

little schooner
#

@waxen scroll my professor got a call from the dentist doctor, complaining that their entire network is down. Router had internet access, workstations had internet access. Domain controller was somehow changed from static IP to DHCP setting.

Told prof that Comcast Gateway defaults to Router mode when it's reset and that's when the problem starting getting worse. When you factory reset this particular router, it keeps the old static ip address. He couldn't connect to it. The modem was purchased today from a best buy and connected immediately

#

Then only the IP phones didn't work. Everything else was. Unfortunately, prof had to be in lecture by 4 something, so the fastest solution was to call Comcast to fix the problem

#

But then Comcast told him that modem that was bought didn't fully support bridge mode.

#

Obviously a lie but can't believe they speak misinformation like that.

Mind you, this is all happening during my physics class lol

#

@waxen scroll the doctor also grew impatient, so I guess calling Comcast was the last comfort resort to show that progress to solve problem was still rolling forward

#

@radiant crane so true. And even lie to the customers about it

waxen scroll
#

xeon... pls

#

do a VRF lab for us

radiant crane
#

oh yeah please

waxen scroll
#

@little schooner Requirements: 2x Simulated WAN provider, 2x remote office connected to simulated WAN (WAN1 to office 1, WAN2 to office 2), 1x Datacenter WAN edge router (2 VRFs one per provider, and global tables), 1x firewall connected to DC WAN edge, 1x switch connected to FW (DC LAN), 1x simulated server

#

I need you to provide resources from the server to remote office 1 and 2 without allowing them to anything else in the datacenter or between themselves. you may not share a default route or routing tables from the datacenter into their networks

#

you may not leak their internal routes into your datacenter or share between remote offices

#

because you're new, ill give you a huge hint... that firewall needs to do some sort of NAT. If you generate routes for this NAT, you can share them to the WANs but dont share the same NAT address with office 1 and 2.

#

draw it and someone will tell you if its good enough to start labbing

#

@clear igloo i think he ran

#

@little schooner this is close to what i do sometimes in the real world

little schooner
#

I'm still here but my dog just got sprayed by skunk

#

Just my luck

#

Also I'll do vrf when the time is right. I feel time is not right at this moment

hollow marlin
#

@waxen scroll So I just got an email for a job offer.....

#

You remember how low my current area is in terms of salary to market value, they even low balled that

waxen scroll
#

is it more than you make now?

hollow marlin
#

LESSSSS

waxen scroll
#

lmao, bye

#

watch louis rossman "the power of no" videos

#

just reply "no"

#

no emotion. just say no

#

let them bake

hollow marlin
#

I just responded by email with my desired salary. I know 2 people who work there and they said they do not know why they offered so low

#

This is also about an hour away where the cost of living is even higher than here. It honestly a slap in the face

waxen scroll
#

i would have said no to it just being an hour away

hollow marlin
#

Its a better city and I would have considered moving

#

how I really wanted to respond

waxen scroll
#

im about to get my review and i feel like ill feel the same way

#

expecting the bonus to be like.... $200

warm pecan
#

Does Realtek RTL8125-CG gives any real improvement over Intel I211-AT if you are just connect to a Gigabit Ethernet?

thick minnow
#

I don't know but curious to know the answer

#

Today I just got a Nighthawk 12X Wifi 6 router

#

but its in AP mode and I don' thave wifi 6 so...

little schooner
#

@thick minnow if you have one of the newest smartphones, like the s10, they have wifi 6 capabilities

clear igloo
#

S10 is the only wifi 6 smartphone I know of right now

#

Pixel 4 should have it when it launches though

odd idol
#

Huawei might have it

#

Like the p30 pro maybe

clear igloo
#

yah, maybe

little schooner
#

@clear igloo what about the note 10?

odd idol
#

Have wifi 6 capabilities @little schooner

lean pollen
#

Is there anything with 6 over 5 that really makes a difference?

little schooner
#

Not sure if this was common knowledge, but, when I tried to use my Gmail account for alert monitoring of servers and stuff, Google would actively refuse to accept credentials of my account, even with "Turn on less secure access" setting. It would ask me if it was me who logged on and I clicked the "Yes it was me" button to add it as a trusted logon source.

Nope, that wasn't enough either. Still getting silently blocked when server tries to use SMTP settings to send test email. What got it to finally work was to enable Two-factor authentication on Gmail account and then use an App Password. It immediately accepted the app password when server tried sending test email again and went through. I was able to get the email.

So in other words, Google errs on the side of mandating App passwords instead of regular password with no two step for personal accounts?

little schooner
#

I kinda like that idea

#

If only they focused more on stability vs. new products. Can't release stuff that has buggy firmware, even in the stable versions

waxen scroll
#

@radiant crane i got half my VRF script done but i ran into an annoying issue on ASR9k / ios-xr

#
if destination in (0.0.0.0/0) or destination in PS_LURICK or destination in PS_JAKE_HATES_TECH```
#

im not sure how to get it so the script can read that second line and go "OK, ignore any IPs in ( ) and make an array of the prefix-set names"

#

right now i use textfsm to match show run and dump anything that comes out into an array

#

i then loop the array to look for "if" and then it does an awk type deal to isolate each word

#

so if i say array['config'][3] i would get PS_LURICK ideally... if (0.0.0.0/0) shows up instead it shits itself at the moment

#

problem is if i try to fact find using [3] and keep going up, eventually the script will get an exception

#

before you answer, i also want you to know that second line is dynamic in length

#

some might be 1 destination, some might be 10 (lets just argue)

#

this crappy problem is the last one i have to deal with for IOS-XR... then i move onto the NX-OS part of the script

radiant crane
#

You would use something like

if "something" in output:
    do_something
else:
    do_something_else
#

But you would have to show my the TextFSM output so I can see

waxen scroll
#

the output looks like this

#

im not at work so im just freehanding

#

['route-policy block Xeon'], ['if destination in (0.0.0.0/0) or destination in PS_LURICK or destination in PS_JAKE_HATES_TECH']

#

im running a "show run route-policy Xeon"

#

the reason textfsm outputs like that is i need it all in an array so i can dump it into an excel file

#

its a VRF crawler that dumps the configs for the VRF into excel

#

if the VRF is calling a global object such as a route-policy, the script goes and investigates that so it can be included

#

i could potentially run it in textfsm a second time under a special template as well, but like i said its dynamic length and the (0.0.0.0/0) can be anywhere

#

textfsm doesnt seem like it can handle either of those two things

#

ive only seen textfsm templates for data thats always in the same spot and same-ish length

#

@little schooner please run that VRF lab

#

i cant tell you how much further ahead of like 70% of "network" people you'd be just knowing that

little schooner
#

@waxen scroll alrighty.

waxen scroll
#

thats the spirit

#

draw the diagram and let us have a look

little schooner
#

Not right now, but I'll get to it eventually

radiant crane
#

@waxen scroll I'll look at it tomorrow when I'm in front of my work computer, my brain is fried right now

little schooner
#

Right now I am fighting supermicro support

#

They dont want to support email alerting

waxen scroll
#

snmp

little schooner
#

Dont I need a server setup to analyze snmp data i get?

#

Also, it looks like their IPMI refuses to make a connection request to gmail to send the test email message

waxen scroll
#

yep. and that server emails!

little schooner
#

I don't understand this behavior from the IPMI

#

lol true

#

I think they broke email functionality with the latest IPMI revision

#

I see no traffic in vlan 99 from it attempting to access gmail server

waxen scroll
#

what did the packets say?

#

;p

little schooner
#

Nothing. It doesn't even send any packets

#

As if its broken functionality

#

FW is disabled for it

#

I am in same vlan

#

port mirroring activated BEFORE it hits router too, so not getting blocked

#

Its dumb, how could it just suddenly die?

waxen scroll
#

did you power cycle the server?

#

drain the juice, plug it back in

little schooner
#

That I did not do. The only "power cycle" that I've done is simply to the IPMI interface itself.

#

I can't power off the server until like 11pm though, its being used at the moment

#

I was hoping maybe resetting the IPMI interface itself would cause it to work again

#

but it might result in having to power off the whole server.... something that is devastating to productivity in a business environment

#

sorry... to a enterprise environment lol

waxen scroll
#

well maybe they shouldnt have one server for the whole business

little schooner
#

That is true. I wonder why they only budgeted for one server from supermicro

waxen scroll
#

dell? you said its supermicro

little schooner
#

My mistake, I am thinking about dell right now lol

#

Im supposed to go to the dentist again tomorrow

#

they have a dell server there.

waxen scroll
#

but the dentist is your professors client

little schooner
#

Yeah. But this one is paid.

#

We are working together

#

The meltdown was wednesday

#

IP phones were not getting IP or able to get phone calls

#

That was the one with Comcast fixed it. I still cant believe they lied to my professor about the modem not being true bridge mode

#

@waxen scroll With the new ban on Hikvision and Dahua cameras being sold in the US, do you think places like Amazon would stop selling them?

#

I buy a bunch of their IP cameras and really like em. I am not looking forward to buying american made cameras that are like 3 times the price

waxen scroll
#

yes, however some 3rd party sellers may sneak through

little schooner
#

That is really disappointing :(

#

But yeah, have to depend on 3rd party

waxen scroll
little schooner
#

omg louis should totally get his hands on that

lean pollen
#

No one answered my question do I then I will take the answer as no, there is no difference between WiFi 5 and 6 that makes any noticeable not small difference.

covert ibex
#

@lean pollen
Up to 40% Max speed jump from 5 to 6.

#

That's about it afaik.

lean pollen
#

Don't know what WiFi I am on, but my internet connection is the bottleneck anyway

#

So, so what

#

(150/20)

thick minnow
#

Does anyone know how to portforward an ipv6 for hosting games like rust or minecraft?
Do i set a static ipv4?

craggy parcel
#

@thick minnow Usually you don't have to make any port forwarding for IPv6, you already have a public address accessible from the entire world. (... World of IPv6 connected devices that is) But most routers do not allow inbound connections, for security reasons. Look for some sort of firewall settings in your router, and make the appropriate rule.

thick minnow
#

@craggy parcel How do i allow friends to connect?

#

Say i portforwarded, do i give them my ipv6 or ipv4?

craggy parcel
#

@thick minnow I don't think we're on the same page here...

#

The blue line is IPv6 traffic, the red line is NATed IPv4 traffic..

#

The IPv6 traffic is NOT passing through NAT, and therefore you would NEVER need to make port forwardings for IPv6 traffic, it is usually filtered by the router, so that only responses to traffic you initiate is allowed through. You need to configure the router to allow IPv6 traffic inbound to the game server.

The IPv4 traffic is passing through NAT, and you will need to make port forwardings to make things work.

What IP you need to give to other players, depends on wether you need them to use the blue, or the red route. If at all possible I would play over IPv6, as that will give totally bypass NAT and all it's mangling of the packets.

thick minnow
#

@craggy parcel The problem that i encountered first was while i tried to play minecraft with my mate

#

He couldn't connect regardless of me adding exceptions in my firewall and shit

#

My router doesn't even offer a portforwarding option

#

Do you mind if i talk to you about this when i am home?

#

You seem to know a lot more than i do

craggy parcel
#

@thick minnow I have no idea what timezone you're in, so I won't promise quick responses. I will however, look at direct messages, and messages where I'm mentioned.

thick minnow
#

@craggy parcel Alright, thank you; it's 12:24 pm for me atm

craggy parcel
#

That means you share my timezone. ๐Ÿ˜‰

austere scroll
#

Anyone online wanna inform a noob on VLans and DHCP?

clear igloo
#

VLAN - Virtual segmentation of a physical network into multiple logical networks
DHCP - Dynamic Host Control Protocol - Host broadcasts a request and the first server to respond with valid information will then give the host various information including an IP address, Subnet Mask, Gateway, etc.
VLAN + DHCP - Uses a helper address per SVI (layer 3 gateway) to redirect the DHCP request to the DHCP server(s)

#

Expand on what you want to know and I'll deep dive on that ๐Ÿ™‚

austere scroll
#

So what I was wondering was is it possible to have a DHCP server running on both the LAN and VLAN without them conflicting?

Like if I plugged in a server, how does the server know whether to get an IP address from 192.x.x.x or 10.x.x.x?

#

I have got all unmanged switches in my network btw

#

If it's not possible, what's the best way to assign addresses to devices on the VLAN? Does it all have to be manual?

clear igloo
#

What kind of DHCP server? Windows? Linux?

austere scroll
#

PFsense

clear igloo
#

Ah, so on the router then

austere scroll
#

I'm not looking for exact steps . . . just a general overview/best practices

#

Yeah

clear igloo
#

Then, depending on the design, you would assign a DHCP server per each sub-interface on pfsense which corresponds to the vlan I believe

austere scroll
#

Robsch . . . you've been typing for a while now, making me nervous ๐Ÿ˜‚

clear igloo
#

But you mention unmanaged switches, are you just grouping the switches without actually doing VLAN tagging?

austere scroll
#

Would an example sub-interface be the parent LAN interface?

radiant crane
#

@austere scroll lmao

#

I was typing up something for @waxen scroll

#

But I just DM'ed him

austere scroll
#

My switch configuration is very basic tbh

#

But i can see that the VLAN has a tag of 1

clear igloo
#

A sub-interface is dividing a physical into multiple logical interfaces based on VLAN. If you're just grouping the switches and plugging them into different physical interfaces on pfsense, then you would just do it on the physical. Assign the gateway IP to each physical interface in PFSense and then have it do a DHCP per interface

#

So if you had:
PFSense----Group/Switch A
|
Group/Switch B

Then assign a different IP address/subnet for each interface on PFSense and setup two dhcp scopes

austere scroll
#

That's what I was thinking, so for example:

PFSENSE
|
|
WAN
|
|
LAN (192.x.x.x) via DHCP
|
|
VLAN 1 (10.x.x.x) via DHCP
#

Is this correct?

clear igloo
#

Only if LAN is tagged with VLAN 2 or something else

austere scroll
#

I see what you mean

clear igloo
#

Well, I guess it depends, if there is no VLAN tagging on LAN and the LAN
switch will pass tagged traffic then technically it could work like that

#

untagged could be put in a different VLAN

little schooner
#

@clear igloo that reminds me, I tried having a non-subinterface setup with the Edgerouter and I could never get it working. Packets kept saying they were Invalid, retransmitted over and over and never was able to ping outside network.

Once I enabled subinterface mode on just one Edgerouter port, suddenly everything started to work. I was reminded never to buy hardware with beta software after this experience

#

My next router will not be from ubnt

clear igloo
#

ooof

little schooner
#

@clear igloo because I tested multiple router port connectivity in packet tracer first and it worked just fine

#

One interface in one subnet and another in a different subnet

#

No issues. But ubnt? Total issues non stop

clear igloo
#

lul

lean pollen
#

I have never had a download bug

thick minnow
#

Can anyone help me open a webserver port on 8080?

little schooner
#

@waxen scroll should I RAID1 OS drive and RAID 6 the last 4 or 5 drives?

little schooner
#

I ended up deciding on 10 for data

clear igloo
#

RAID 10 is best raid imo ๐Ÿ˜›

clear igloo
waxen scroll
#

i decided for xeon he is going cloud instead

#

outsource drive failure worries

thick minnow
#

@everyone

#

LOL i pinged everyone

waxen scroll
#

if you did i didnt get notified

#

@little schooner .... @rocky badge outsources his home lab to AWS so why are you still dealing in physical?

little schooner
#

@clear igloo hahah

#

@waxen scroll I like to play with the server physically and through software

#

Also, I don't have money for monthly fee

#

Finally, having my backup local will save me during apocalypse

waxen scroll
#

but you have money for physical hardware?

#

@clear igloo what do

clear igloo
#

Buy all the things!

waxen scroll
#

its like when my work tells me "oh shit we have $50k to spend in 3 weeks but it CANT be for reoccurring costs, even licenses where you pay for 3 years and it expires!"

#

thats not enough time to buy mostly anything you arent onboarded for

#

you'd think lab gear, but you still need to have a bunch of sales meetings before you can even get a quote

#

@clear igloo someone on my team is talking about T-Rex

#

they want to get a server with one or more 100G NICs

#

i'd rather have an ixia or spirent

clear igloo
#

I mean, I guess if all you're doing is bit blasting

#

Yah, exactly

waxen scroll
#

but i get thats its too costly

#

most of my testing is only ping testing TBH

#

if i was PoCing new gear on my own, then i might want a traffic blaster

little schooner
#

@waxen scroll well my server was only like $500 not including tax

#

Off the shelf parts

#

@waxen scroll I ended up not having to go to the dentist for some post Comcast work. I guess the free time wasn't there for the doctor to let us do it. So it's been rescheduled.

#

All that we would be doing is fixing up some issues with their dentist database software thingy. It would struggle to make connections to server sporadically but for no ryhme or reason

#

As the environment had been working for 2 months

waxen scroll
#

Good. The weekends are for Jesus anyway.

waxen scroll
#

At Chick-fil-A right meow

little schooner
#

@waxen scroll I really like their chicken sandwiches. I was close to ordering it on doordash

waxen scroll
#

xeon, no. dont support on demand companies

#

get it yourself

#

๐Ÿ˜„

#

i dont support native delivery driver either if it means a delivery fee. BOO

little schooner
#

@waxen scroll it's okay, I didn't tip since that's an American thing

#

@waxen scroll also, what to do if my dell poweredge at school doesn't want to install OS from IDRAC 6?

#

During windows, it says access denied 0xc000005 error, but usually that meant that the drive or media is inaccessible

#

But this never happened before on other iDRAC hardware

little schooner
#

I feel like I won't get my networking bachelor degree all because of dumb chemistry

#

Out of 70 people, 31 got a failing grade on first exam

clear igloo
#

@little schooner On their chemistry exam?
Yuck x.x

thick minnow
#

not much of a person who dwells in the networking world, but thought id dip my fingers in a little,

dunno if this is much of a basic qustion, but is it worth flashing your routers firmware, if so which one to pick from? what are the benefits?

  • DD-WRT
  • openWRT
  • Tomato
waxen scroll
#

Honestly, the gain is very little unless you're an advanced user. The router still works the same, but you are presented with about every option that should be tweakable but isnt in the factory GUI. Most likely you wont do anything more than you do now except have more pretty screens to look at.

#

I personally have used DD-WRT and can recommend it

#

no harm in installing it with no goals.... click around and maybe ideas will come to you

sterile pasture
#

Personally, DD-WRT works if you need to replace a provider box that uses a different VLAN such as Google Fiber

craggy parcel
#

@thick minnow If your router is still under warranty, you should NOT flash it with anything but original firmware, as doing so might make warranty service problematic. Also, unless you need an additional feature in your router, I'd say it's not worth it.

thick minnow
#

i see - got it, my router is the regular router provided by my isp, not that great tbh,

clear igloo
#

If it's a router/modem from your ISP then flashing it is almost always out of the question

thick minnow
#

ah,

#

guess ill leave it be,

waxen scroll
little schooner
#

@clear igloo and for comcast, isn't it illegal to do?

#

Since the modem is part of the combo unit

clear igloo
#

Maybe not illegal, I don't think, but more ToS breaking at least and you'll definitely get your butt taken to court

little schooner
#

Oh right. That's more accurate

clear igloo
#

There might be a law against it, probably tampering with non-owned devices or something, but I can't say for sure

valid tapir
#

There probably is

thick minnow
#

And i just set it yo now

little schooner
#

Ubnt is enterprise lite. Enterprise stuff is like enterasys, rukus, Cisco, Aruba, etc

sterile pasture
#

i'm planning to buy a 30$ dell optiplex with pfsense to replace google fiber because their wifi router and vlan translator is terrible (the modem is seperate)

waxen scroll
#

i feel like that would be worse

#

how fast is google fiber

sterile pasture
#

1gb technically

#

The wifi cuts out constantly though

#

DD-WRT worked on a test router that cost 6$ to bypass the router

waxen scroll
#

well, let us know how that goes. i know ive seen gigabit tax a laptop CPU and im sure an optiplex is not much better if its a crappy little dual core or something

sterile pasture
#

the processor in the normal router can't be very fast anyway

#

I think the main issue will be finding a decent PCIE wifi card

waxen scroll
#

i believe the router is mostly processing using an ASIC

sterile pasture
#

its kind of an ASIC, however it is included in the ethernet chipset

#

i might start after folding month because one of the folding computers might be a fine router and I don't think OpenBSD goes well with Ubuntu

hollow marlin
#

ASICs are made for one task. A folding ASIC will not know what to do with routing

#

ASICs in the ethernet chipsets dont do anything other that packet processing. Routing and switching are all CPU in all non-router hardware

sterile pasture
#

Folding Asics are gpus

hollow marlin
#

Still useless for routing

#

GPUs are also not ASICs

sterile pasture
#

They haven't made any asics for folding yet, and it seems like a gpu wouldn't apply to routing anyway as the nicer consumer home routers have low-end arm CPUs

#

i'm just going to see what happens

little schooner
#

@waxen scroll not sure how I would even test 1gbps with a 4790k pfsense system. I want to see what are the limit of all-cpu routing

#

In something like that

#

Unless it has already been done somewhere... I should probably Google first

sterile pasture
#

As far as I can tell, the CPU is usually used for routing

little schooner
#

I found one link on negate community forums

#

And it's not all that great for 4790k

hollow marlin
#

@little schooner I thought 1gig was pretty easy to hit with pfsense?

pseudo blade
#

@hollow marlin GPUs are apparently excellent for routing.

#

I remember a research project done on the matter. I think they called it "packet shader"

#

GPUs are ASICs, it's just that their "application" is "do all the stuff necessary to render stuff".