#networking
thick minnow
I've got this much to go before mid January for my ccent test, then a few weeks after that for my ccna before February 23rd. Good luck to me
hollow marlin
@thick minnow You got this.
grizzled cove
A lot of people in UK seem to be ignoring Cisco for Fortinet
Don't see why at the moment maybe in 10 years
floral thorn
@thick minnow Ask most difficult parts here.
hollow marlin
Yeah if you run into snags there are plenty Cisco guys here (including me) that can help
thick minnow
Thanks guys! Having the book and Boston netsim is helping a lot. I get like 2 hours of labs a day and read a few. Chapters at work and so far it is coinciding and explaining why in the book what happens in the lab
Thanks guys!
hollow marlin
Boson is a must, netsim is ight
thick minnow
Well it's what I have for now and it's working out well
hollow marlin
PT is even enough for the NP
thick minnow
What is cpt
thick minnow
Ah makes sense.
I've tried to get gns3 to work, but when I put it on my laptop at work, it didnt want to connect to the servers due to our firewall (I have enough downtime at work to study due to being a concierge in the evenings)
hollow marlin
EVE-NG for the win. Ive never looked back to GNS3
tender hazel
I can't wait until ROS 7 beta 5 comes out, hopefully with BGP and MPLS added
floral thorn
ok. every opinion will be count.
tender hazel
I've been running beta 4 on a test device but really want to see what they've done with BGP and MPLS
thick minnow
(I dont know what these acronyms mean)
thick minnow
Ah. I hopefully will learn soon then!
hollow marlin
BGP is enterprise as well. MPLS is primarily ISP and data center
Even though people at enterprises claim they work with MPLS in their resume
tender hazel
oh yeah, everybody does
I swear that every network engineer who sent us a resume had MPLS listed on it, but they had no experience with it
they basically barely knew what the acronym stood for
thick minnow
I get why people claim things like that on resumes to look better, but I think it would bite them in the ass if they dont actually knowcit
clear igloo
I had someone interview for a position and put ACI on their resume. They couldn't tell us what segmentation was, let alone micro segmentation but they sure could hold up a diagram of what they worked on and try to google answers while on VIDEO
hollow marlin
I have to deal with them time to time (ISP network engineer). They like to think they are the ones using MPLS for their L3PVN
tender hazel
yeah, we have to sort out such people on the interview stage
unfortunately.. because we can't trust what they put on their resume
because it is like everybody just looks up a list of all protocols and lists them all
clear igloo
@tender hazel It also depends on if they go through a contract company, for a while we would get people from a few companies and it was like they asked them "Have you heard about xyz? Ok, that goes on the resume"
drowsy delta
Hey all anyone know a good free app on Google play that acts as a 5g detector?
tender hazel
when it comes down to it though, what I really want are intelligent people who are hard working and have common sense and good troubleshooting skills
because if they have common sense and they learn quickly they can easily acquire skills that they didn't have before
hollow marlin
@clear igloo Yeah recruiters did that to me when I was younger. Drove me nuts when I had an interview and then saw all the "extras" aparently I knew
floral thorn
@drowsy delta i'm not
tender hazel
we've had a bunch of "network engineers" who were horrible at troubleshooting because they didn't really think critically
thick minnow
Speaking of, how can one train for an interview with just the ccna? Labs I'm guessing?
tender hazel
and a few business managers who didn't have the technical background but were blessed with enough common sense and critical thinking that they could say "wait a minute, it doesn't make sense that X failed because otherwise Y would have happened"
hollow marlin
It takes time and experience to tone their skills.
tender hazel
and those business managers were often better troubleshooters than some of the engineers as a result
clear igloo
@thick minnow Think critically and explain how and why you would approach a problem from xyz as well
tender hazel
yup
clear igloo
And NEVER be afraid to say "If I can't find it I'll ask but search first"
hollow marlin
Also dont answer right away, take 10-20s to think about it. Its better than just taking a guess and being wrong. Shows you are willing to think about the problem
clear igloo
I hate it when people ask a question that I can google in 10 seconds to answer for them. That too @hollow marlin
Think, don't blurt 🙂
thick minnow
Thanks guys and gals (assuming we have both here)
floral thorn
did someone tried Miro to create network diagrams?
waxen scroll
@hollow marlin i just let virl expire. wouldnt even buy it on discount. waiting for virl 2
hollow marlin
@waxen scroll eww VIRL... But I need the images for EVE 🤷♂️
tender hazel
@floral thorn I think you mean "has anybody tried".. if you say "did someone tried" it sounds like you are asking if any human being on the planet has ever tried to use Miro to create network diagrams, or possibly, if someone in here tried just before you asked (as opposed to anytime in the past). English can be really weird with some of these things.
tender hazel
I have many coworkers who are immigrants so their english is not very good. I have gotten into the habit of correcting them because I find it helps them improve their english skills. If people don't point things out (which often happens to try to avoid being rude) they keep making the same errors, which doesn't help them in the long run.
so I only point it out to be helpful
hot hawk
anyone one have experience in setting up vpn servers on ddwrt
thick minnow
any reccomended servers with ECC under 100? (not including the RAM)
little schooner
@tender hazel I'll take a look thanks
hot hawk
@shadow shoal hmm interesting
autho only issue it that im looking for a protocol thats supported natively by most operating systems
so its either pptp or IKEv2
strange silo
@hollow marlin yeah it's the L2 stuff that drives me up the wall with them, the problem really is just me stuck in "this should just be like a damn switch argh" but it really isn't that so.... change mindset (failing badly at it tho)
rapid moss
hey guys - I'm thinking of adopting a mesh solution for my home. I care primarily about all my 2.4Ghz IoT devices spread throughout the house operating with top notch performance and not dropping packets (which is the case now). On a secondary level I care about gaming on my computer but that's not a wireless thing as my PC is always connected via Ethernet - so that's out of the way. And finally I care about streaming some 4K content from my NAS to my SmartTV. So that's just about my needs.
So, any opinions on mesh networking and any real life experience with it in the above use case scenarios ?
paper rampart
Unifi is always a great affordable option IMO
rapid moss
Risking to sound really newbish here (which in fact I am) - unifi(s) are the Ubiquiti ?
or they are different ?
paper rampart
Ubiquiti makes unifi 🙂
rapid moss
ok cool - so do you have a mesh , cause I read quite a few cons for mesh technology and nearly every mesh implementation by bigshot networking companies have like a gazillion negative reviews on Amazon
to name a few , deco by tp-link , velop by linksys , orbi by netgear etc.
paper rampart
Not anymore; but I have before and I had no problems
It was a standard home setup with a ton of hues bulbs
rapid moss
is it true what I've read that placement plays an integral role , and if you don't position your nodes in a good way so that they can somehow "look at" the main hub then you get crappy signal? a guy in a forum reached to a point that he basically said that mesh nodes are fancy repeaters...
vapid dune
avoid mesh if you can lol
rapid moss
I mean people like that make me so confused when I am researching
@vapid dune I will if you can advise me as to why! 🙂
vapid dune
I mean even if you had dedicated backhaul, at the end of it each node in the mesh has to talk to some other node
wirelessly
it would be better to try and just wire up a couple APs
assuming you even need more than one. how big is your place
rapid moss
it's a realtively small flat - 2 bedrooms (1 of the is office actually) , 1 kithcen , 1 bath , 1 living room and a terrible "L" shaped hallway
connecting all these
shadow shoal
Can you not have the aps wired?
rapid moss
brick walls.
shadow shoal
Because mesh loses a lot of throughput after every hop
vapid dune
lol if it's brick walls I don't think mesh will help you
do you have wires to each room or?
I mean it might be better than what ever you're using now
rapid moss
I am using a single router/AP which is in the living room
far end IoT devices complain all the time
and there is no infrastructure that will allow me to route ethernet cables in order to put my own APs in place
at least not in a nice way without my wife complaining
vapid dune
single level place?
vapid dune
hmm that's not that large
really a place that size should be coverable with 1 centrally placed AP. not sure about the brick aspect of it
maybe if you drew a small diagram lol
I guess if the AP is only blocked by 1 wall in any direction then it's not a huge deal. but if you've got like 2-3 walls in between where it needs to reach then you've got to come up with a better solution
like maybe 2 APs in opposite corners almost
shadow shoal
Bricks and concrete is tough on RF though
vapid dune
which would make mesh even worse imo
shadow shoal
You could also do a survey with your phone to see where the signal drops
vapid dune
that's true
shadow shoal
should help with seeing where you want to put down additional aps
shadow shoal
You can also check if you have minimum bitrate set too high, what channel width you have, power level
If you are not using 20mhz wide channels for 2.4 your neighbours hate you
also if you don´t use 1,6 or 11
vapid dune
lol checking in unifi. 53 APs seen in the past hour
on channel 1 that is
4x with 40Mhz
little schooner
Very crowded
vapid dune
I mean a bunch of it is from cars driving by
little schooner
Have you seen any wifi with emojis in it?
vapid dune
not yet lol
little schooner
Apparently it's a thing
vapid dune
I wonder if devices even support that
little schooner
Standards would say no.
vapid dune
I have a wyzecam that uses a QR code to scan the wifi credentials
I bet you it would choke
little schooner
Heh
But I think if the devices have recent unicode support, it should recognize just fine
little schooner
That's what I've read in docs if one AP is hosting multiple ssids
If there are 5 the same name but hosted on different ap
It doesn't matter
little schooner
Oh yeah that can be tough to deal with
vapid dune
but I've considered maybe just running multiple SSIDs instead
little schooner
How would it know
vapid dune
it's not bad, I just have a radius server running on a pi
eh each SSID would just stick to a vlan
little schooner
Randomly?
vapid dune
no?
little schooner
But they have the same name
vapid dune
no no I mean different SSIDs lol
vapid dune
like run WPA2 on SSID1 on vlan 20, and WPA enterprise on SSID2 on vlan 30
little schooner
Yeah
little schooner
I couldn't get WPA enterprise to be reliable with unifi ap
It would mostly work and then fail randomly every 2 weeks or so
vapid dune
it would probably be better to just make everything on wifi into isolation mode then make anyone who wants onto the internal network use a vpn
lol
annoyingly it's the IoT things that don't allow WPA enterprise
so I haven't tried it at all
what failed with it?
lol I can't imaigne how this guy can even stand to look at this https://www.youtube.com/watch?v=s83esSaBAuo
little schooner
An error sometimes along the lines of "invalid messenger attribute was received by blah blah AP" then it's IP address
And waiting a bit randomly makes it start working again
But it was a hassle at home so I went back to psk
vapid dune
ah yeah I wouldn't have patience for that either
the mac assigned ones I mentioned seem to be working without issue for me so far
that video above makes me hurt lolol
makes me think I could get my own rack at home though... heh
shadow shoal
Do your iot things support 5ghz?
vapid dune
nope
shadow shoal
rip
vapid dune
well at least not the wyzecam
the Google home mini does
but it bounces between 2.4 and 5
shadow shoal
i´d think about switching to another one so you could just switch off 2.4
5 only is the dream
vapid dune
lol
shadow shoal
But its very sad that not all phones and laptops and shit support 5
vapid dune
oh wow in that video. there's an appneta appliance
I worked there for a brief time lol
shadow shoal
Setting up a Radius server is aids
vapid dune
it could always be worse lol
little schooner
None of my iot stuff uses 5ghz
I think because it isn't necessary
And for range purposes
shadow shoal
Most of mine does, it´s hard pushing a 5ghz signal through concrete
little schooner
I have more zwave stuff than anything else
I have HomeSeer, but am hoping they can release v4 for mobile push alerts
That would make it better to use
fossil turret
i bit the bullet and bought a bunch of decommissioned server gear because i want a project and needed a NAS. Next month we're getting business class internet too. Is it sketchy to buy a domain with crypto? Or is that a question for that thread?
er, room or w/e
rapid moss
hey @vapid dune
I got the diagram ready
all hail MS Paint
Whoops it looks like it didn't keep my last save 😛 Oh well the meaning is all the same - the colors are a bit fucked up
the red "X"s are the main router/ap and a silly repeater in usb stick form factor that I put (spoiler alert - made no difference)
vapid dune
what's the red dot lol
rapid moss
yeah - I know that wherever you may be , other materials are used , but here (in Greece) to combat the weather conditions everything is either pure concrete or brick
vapid dune
is the worst reception in the far corner of the kitchen?
vapid dune
I mean where you had that second X would be a good location for a single AP but maybe if it's too thick brick it wouldn't be enough
ah only repeater, I guess not like wired
vapid dune
lol
and I guess you can't run cables to each of those rooms to put a low powered ap
that would give you the most reliable setup
rapid moss
no I wish this would be my first choice
shadow shoal
Repeaters are terrible
rapid moss
indeed I read somehwre that they impersonate to the main router
each and every device
that is connected on them
that's like their job
they don't say "that device wants this"
they say "assume I am that device and I want this"
that's random stuff I read don't know if it's true
vapid dune
hmm depends on your budget but I guess it leads us to mesh since it's actually pretty opposite corner
I was imagining a layout where your living room and kitchen were more central lol
which had me wondering if maybe just your particular router/wireless is bad
but it looks like at least 2 layers of brick/concrete from what you say
shadow shoal
What router and ap are you using btw
rapid moss
The fact is that the router must be bad ... It's from Xiaomi and it's called "Wifi 3G" - I mean the name itself is laughable although it's decent spec-ed with the exception of lack of MIMO.
and then the repeater is from Xiaomi again - because apparently I don't learn from my mistakes
shadow shoal
Also the amount of other wifi networks around you is not helping with a huge interferance
vapid dune
get a gamer router? 😄 https://store.amplifi.com/products/amplifi-mesh-wi-fi-system-gamers-edition
rapid moss
yeah the other fact is that I have a single-later of brick
and the third fact is that I leave in what you'd call a college student area
that being said the area is teeming with 2.4 Ghz cheap internet connections
all around me
fully streaming porn and netflix
apparently 😛
vapid dune
I'm mildly joking about a gamer version since there's this less gamer focused one: https://store.amplifi.com/products/amplifi-mesh-wi-fi-system but I haven't tried it out personally
rapid moss
That is kinda too expensive for me 😦 I was thinking something like TP-Link Deco , or Linksys Velop implementations
rapid moss
just mesh I believe - in the block of flats that I live I wouldn't trust the electrical circuiting not in a million years
shadow shoal
Rx-Sop would probably be of use in your environment but then you´d have to buy enterprise access point
rapid moss
Just to put this in perspective for you guys the gaming amplifi that @vapid dune sent a while ago , goes for 550 euros in my retailer's store
vapid dune
woah what
rapid moss
which is more or less half my monthly salary (after tax)
and I am considered well paid
vapid dune
I wouldn't recommend anything at that price lol
vapid dune
I thought it was more in the 200ish range. but I might've converted the currency wrong
oh nope. I misread it
shadow shoal
is Greece´s economy still fucked?
rapid moss
well yes ... unemployment is somewhat close to 50% for certain traits
I am one of the lucky ones being a SW Engineer I can find coding/engineering jobs globally
and they offer competitive salary most of the times
but other people on other jobs are suffering
vapid dune
where I would hesitate with these mesh solutions is trying to figure out if they'd actually fix your problem and if their app isn't going to make you lose out on stuff. one comment I read from some device review was "doesn't let you choose wireless channel"
rapid moss
YES!
I read that too
and that's why I'm trying to find someone who uses one such implementation
to get to know what trade-offs there are
can I have VLANs ? can I not?
do they have DHCP ?
vapid dune
I'd assume not lol
swift fractal
I mean, a good first choice would to not choose products that market as "gaming"
vapid dune
the vlan part
rapid moss
can I access their DNS?
swift fractal
Most of the time they're no different than their conventional lineup and charge more for the name
vapid dune
the deco p9 seemed interesting through it's use of powerline
swift fractal
I found meshes to be more painful
vapid dune
to overcome that lol
swift fractal
Powerline can be very unstable
shadow shoal
I´m always surprised people actually still use powerline
vapid dune
I don't think dedicated wireless backhaul is a thing right
shadow shoal
Nah
swift fractal
I do on some things mainly because I'm too lazy to run ethernet across.
vapid dune
huh
swift fractal
It's mainly only used for more stable latency... until someone uses the microwave/paper shredder.
vapid dune
D-link COVR-2202 has it?
tender hazel
multiple SSID's on one AP only has a very minor performance impact
tender hazel
someone asked that earlier I saw, I had missed it
vapid dune
I mean that may or may not be better. 2x radio for talking to the device and 1 radio for talking back to the other node/router
shadow shoal
Powerline has a lot of interferance right?
rapid moss
can someone elaborate on the backhaul that I 've been reading ?
ethernet backhaul , wirless backhaul ?
swift fractal
@shadow shoal It depends on your wiring
shadow shoal
i see
vapid dune
backhaul just meaning how it gets the data back to the router
if you have ethernet wired backhaul, don't get mesh LOL
shadow shoal
Powerline is mostly non existent in my country
vapid dune
just get some unifi APs and be done with it at that rate
swift fractal
The wiring in my house is pretty good however if you use high power things it starts to get bad
vapid dune
powerline is pretty questionable, but if it works then it's great for not having to wire stuff
swift fractal
It's good enough if you can't or don't want to run ethernet
vapid dune
which is why the tp-link mesh with backhaul over powerline seemed interesting
I'd say it's a good combination of tech lol whether it works out is the other part
tender hazel
the mikrotik audience is similar, it has a dedicated 5ghz radio used for meshing with other audiences
swift fractal
I'd probably still prefer 5GHz wifi over powerline if possible
shadow shoal
yeah
vapid dune
I mean the problem with @rapid moss setup is that it's brick walls
so 5Ghz actually makes it harder not easier XD
tender hazel
so there are two 5ghz radios, one for mesh, one for regular, plus the 2.4ghz
vapid dune
I mean 5ghz should make it through 1 wall
shadow shoal
Also huge amount of interferance from other wifi networks around him
which fucks 2.4
vapid dune
lol that too
shadow shoal
So 5ghz should be the best bet
swift fractal
I live in a medium-large house and 5ghz makes it into pretty much every corner
Including some parts of outside
vapid dune
my first suggestion would have been to move stuff around to make it better coverage
swift fractal
With one router in a central location
vapid dune
but 2 layers of brick puts a kink in that plan
shadow shoal
Does your house burn down in 30 seconds if a fire breaks out
vapid dune
how thick are these bricks LOL
swift fractal
I don't have brick walls, but the walls aren't thin
vapid dune
I mean I have 1 AP for my place and it's a few floors but only 1000 sqft roughly
tender hazel
mikrotik has new powerline adapters that just came out several months ago
I haven't tried them
vapid dune
I guess that's the other option, get APs and powerline
probably not cheaper than a mesh package but maybe more flexible in terms of configurability
swift fractal
I believe I have concrete walls
tender hazel
mikrotik has an AP with powerline adapter built in in a single unit but it only has a 2.4ghz radio, no 5ghz
swift fractal
not entirely sure
rapid moss
okay one option of APs + PowerLine will be explored
what about mesh ? have we come to a verdict on it ?
tender hazel
mesh depends, things like the mikrotik audience are fine as long as you don't have super heavy walls between the units. Having different 5ghz radios for meshing vs transport helps to remove the downside of the mesh setup.
when you do meshing over a radio that is also used to serve clients you take a big performance hit, that's why meshing is bad in those cases, but I don't have a problem with it if there is a separate radio used only for meshing
vapid dune
lol maybe take a picture of what your wall thickness looks like
when I hear brick I think relatively thin red bricks
not concrete blocks
tender hazel
like if you live in one of those old buildings with heavy thick concrete walls that were built like early in the 20th century when they were worried about building structures to withstand bombings, I can see having big problems with wifi signal
rapid moss
that's exactly the case @tender hazel 😛
and idk , sometimes I sit and gaze into the infinite void of space thinking , is it better to have good wifi or survive a bombing ? 😛
@vapid dune
vapid dune
lol
yeah thicker than what I think of when I hear brick
I usually think these https://hips.hearstapps.com/clv.h-cdn.co/assets/17/26/1498773858-gallery-1487866745-clx060114well-hillegass-11.jpg
tender hazel
That's concrete, Lmnt?
rapid moss
That's brick mixed with concrete
more like that kind of brick
I think mine is the 3x2
tender hazel
is there a way of placing the device to minimize the number of obstructions between them?
like perhaps being able to see one device from the other
it might be ok with one wall like that but if there are a whole bunch, mesh wouldn't work well going through all of them
vapid dune
lol place them on walls directly opposite of one another through doorways
rapid moss
Yeah based on the previous diagram I think I could place 2 out of 3 nodes in such a way that they could see each other
tender hazel
yeah that's what I'm thinking, if you can position them so that you could shoot out a door, through a hallway and in another door then you could cover more area with fewer devices
line of sight will greatly improve the mesh performance
rapid moss
Idk if you've seen my floorplan from before
If I have the mesh hub where my router is now
and one node where my repeater is now
then the signal would have to travel through one such wall
and then another node in sight of the previous one
tender hazel
I had a quick look at it
I can't see where the doorways are, but could you have like one in the bottom left corner of the bedroom (from the orientation of the picture) and one in the top of the kitchen?
or the office might also work but it's hard to tell when the doors are not visible
tender hazel
oh ok
tender hazel
I'm not sure how important the kitchen service is to you, but you might be able to put the main one in the hallway in a place it can be seen from the living room or office and the bedroom.. and place one in the living room or office and one in the bedroom.. although it's possible you might get a strong enough signal with one in the bedroom or the office (instead of both)
my new power supply just arrived
bbl, I'm going to shut down to upgrade it
rapid moss
ok assuming I set it up like that (just had an internal discussion with the wife as far as placement is concerned) - which mesh solution do you guys should I be looking at ?
it's apparent I need 3 nodes (in total - hub included)
I assume a dual band is ok - I don't think I need tri-band
vapid dune
I'd probably start with a budget and see what options you have from there xD
lol from a fiber ninja video but I swear if you have a cable like that for power someone is gonna unplug it
vapid dune
oh it was cleaned up at the end
thick minnow
nice set up
also question. Im going over what ive read in my book ccent and I am getting tripped up over the subnetting. Is there any specific way to study for subnetting? how important is it to the ccent test?
clear igloo
Subnetting is foundational, especially on the entry level stuff
thick minnow
I figured. any tips
tender hazel
@rapid moss the mikrotik audience is powerful and good and cheap
little schooner
@tender hazel they just need to fix their hardware switching setup. By default, it should all be set to add vlans to ports
Like every other switch vendor
tender hazel
@little schooner it is like that with the crs3xx series
little schooner
@tender hazel is the crs 10g capable?
tender hazel
yup
little schooner
I will just have to buy it because everything else is expensive
tender hazel
mikrotik's newest ones are all crs3xx
they haven't released any new crs1xx and 2xx in months
I think they are trying to move everything to crs3xx so that they don't have to add support for the new vlan method to the older chips
little schooner
So wait, crs3 gets rid of software bridging?
tender hazel
so with the crs3xx the switch menu is gone basically
little schooner
I see
tender hazel
it is still partially there for like one or two features but people never use those
so you do everything from the bridge menu with bridge vlan filtering, and it simply "autoconfigures" the switch chip to do that behind the scenes
bridge vlan filtering is enabled by default with the crs3xx series
so all you have to do is add the vlans to the bridge->vlans tab, along with what ports should be tagged for that vlan (you don't have to set the untagged ports, even though there is a field for that), and set the PVID for the individual ports, which automatically adds them to untagged
it's easier than any of the older methods
tender hazel
the only "weird" thing that is left is if you want to give the switch an IP on a certain VLAN and you create a vlan interface (which is like interface vlanXXX on a cisco), to connect that vlan interface to the bridge vlan, you have to add the bridge itself as a tagged interface for that vlan.. adding the bridge itself creates a link to the vlan interface.. it's like adding switch1-cpu with the old method
that's the only remaining thing that is a little confusing - I would rather that they added like a checkbox "connect to vlan interface" or something like that
because otherwise adding "bridge" as a tagged port on "bridge" seems to not make sense.. you'd have to know what it actually did
little schooner
Hmn
Also another thing, do I avoid the products that say SwOS powered?
Some switches say that
I want the ones that can run routerOS I presume?
@tender hazel
tender hazel
yes - the CRS models run routeros
the CSS models run swos only
so I would avoid the CSS models
little schooner
k
tender hazel
so basically everything on that page that says CRS3XX is what you should be looking at it
tender hazel
yup, that's a very good one, we use a bunch of those in production for end user stations on 1Gbps
we power IP phones off them etc
they have a 48 port version coming out very soon
like in the next month
the 48 port version might also have qsfp+ ports
little schooner
Super cool
tender hazel
and there is this newer model that has 12 10G ports if you don't need poe powering and you want everything 10G: https://mikrotik.com/product/crs312_4c_8xg_rm
that's the model that linus tested in his channel
so yeah there are a bunch of new 48 port CRS3xx models coming out like very very soon
before they said they would ship by the end of year, but they were delayed into january
but yeah the CRS328 model that you were looking at, we have it in at a bunch of clients, it works great, reliable
and again the big thing I like is we get great remote troubleshooting ability
lots of tools in routeros for doing packet captures etc easily, so if you aren't on site it is easier to figure out what is wrong
for us it is really crucial to not have to be there to fix problems because flying there is a $1000 cost just for the airfare
tender hazel
@little schooner what is that?
humble oxide
Buy the Mikrotik, Take the hour or two that it will take to learn the basics of RouterOS or just use SwitchOS, and live a happy new 10G-BaseT life
They are amazing units
Been using Mikrotik for the last 10+ years, mostly to get long WiFi shots done, but they are so much more now
Be forewarned however, the switch centric products lack the CPU horsepower to do alot of Routing. So get a router for that. That being said, the basic NAT and DHCP stuff won't give you trouble.
rocky badge
I've got all ubiquiti UniFi and I'm loving it 😄
clear igloo
@rocky badge Yeet
paper rampart
Woot, got a RIPE Atlas Probe
vapid dune
Nice
tender hazel
ahh ok
I migrated from crashplan to backblaze
when they were discontinuing the personal version
waxen scroll
I migrated to local high speed storage
tender hazel
@waxen scroll without offsite backup?
waxen scroll
Correct
tender hazel
I wouldn't feel safe not having offsite backup
little schooner
@tender hazel the only issue I had with Backblaze was versions only lasted 30 days
And that exclusions don't work per drive
It's all drives, which is stupid
tender hazel
yeah I don't like blackblaze's versioning thing, but most files I work on in dropbox
I save everything to dropbox and work directly in there
little schooner
That's extra safe
tender hazel
backblaze also backs up my dropbox and everything else
and I do image backups nightly to an external hard drive
using another software program
little schooner
I do image backups too but they have been taking 45 minutes. I have verification turned on that makes it take that long
But it's usually just 20 minutes
Veeam, but I can't restore data using the older client
I had to ask Veeam support to let me bypass their business email filter
So I could log a case with them
tender hazel
ahh.. since I just have a single desktop, I use storagecraft shadowprotect
the only thing I don't like about shadowprotect is there are a certain number of activations allowed under the key and then I have to get them to reset it
major windows 10 updates show up as a new system and a new activation
they say to deactivate before you update but sometimes I'm not expecting an update to happen
hearty oxide
made my first 10gbe transfer today. Capped at 4gbps because my striped media server drives couldn't keep up lol
little schooner
@hearty oxide I moved all my 10gb data to NVMe
And even moved all my current data to 4tb ssd Samsung 860 pro
hearty oxide
I have two 4tb intel u.2 ssd's coming for that purpose
hearty oxide
DC P4500's
Linus mentioned a deal for them on his youtube snapchat thingy and sure enough, it was still going when I found them
400 each
seemed like an okay deal
anyways, when I buy a house in the new year, I'm gonna run cat6a or cat7 wherever it's convenient, and buy a nice switch. My local ISP also just started offering gigabit plans, so I'll snag that too. Right now though, it's just between my server and my new ryzen build, no switch or anything, just for the speed's sake lol
fresh copper
cat7 is not really a real thing for the most part so I would stick with 6a or fiber. Make sure that you get real 6a though and proper 6a rated connectors as there are lots of fakes going around since most people who buy 6a don't actually need it and will never notice
vapid dune
Might as well run fiber
clear igloo
Go with SM fiber for maximum speed 😛
hearty oxide
idk man fiber in my walls doesn't seem like the best idea
fresh copper
The thing with fiber is that you can't do POE (like if you wanted wifi routers), and wall plates are harder to find (though they do exist apparently) and you will have to have media converters (or a switch that has an SFP port) for any devices where you can't put an SFP card in. So generally I would not recommend it outside of if you wanted to run to a secondary switch location (such as if you had internet upstairs and a switch there to go to most things then you wanted another switch in a basement or something for a lab)
clear igloo
True, if you need PoE or don't want/need high speed later on then copper all the way. Like I know only @rocky badge will do 40Gb down the line 😛
rocky badge
lol
clear igloo
I've got wall plates for my fiber. A coupler + a standard plate = win
fresh copper
I do generally love fiber but for general distribution it can be a hassle
clear igloo
Agreed
hearty oxide
I personally don't see me needing more than 10gb for the forseeable future. And I'm not super comfortable with running out a system that I can't make custom cables for/repair broken cables with.
so that wipes SM fiber off the board, and unless I start doing WAY more networking in the very near future probably multi-mode as well
fresh copper
Sounds like sticking with cat6a is the best idea then
hearty oxide
I've never even seen the tools necessary to manipulate fiber before
clear igloo
Never messed with them myself either
We just throw fiber away if it's damaged, but that's a lab and it's pre terminated stuff that's usually less than 20m so it doesn't make sense. We've got a spool of fiber tool of which the name escapes me that simulates stupid distances though, like 40km and that I know has been worked on by a tech a few times
tender hazel
the main advantage of fiber is that with 10 gig copper ethernet it doesn't take much damage to a cable to make it no longer work at 10 gig
but there were some early adopters that jumped on the bandwagon too early
one of our schools went all fiber to the desktops like 11 or 12 years ago
and now the problem is that they are using technology that you can't buy anymore and they would have to redo all the connectors and possibly some runs, even though they spent a fortune on it
hearty oxide
Any house I get in my rainy-ass city is gonna need a new roof every 10 years, so It will be outdoor direct-burial cable even indoors
vapid dune
lol
I kinda want at least a single line of fiber for my pc to my nas
but it's certainly upstairs to downstairs so I'd have to at least pull it
how much is fish tape I wonder
little schooner
Is a plastic or metal roof any better?
hearty oxide
In my area? metal roof is extremely loud almost all year, plastic roof degrades too fast. And the wildlife will peck and bite right through it
you need a sturdy roof, good-ol torch-down materials. Not super cheap either, but worthwhile. and more importantly, ready for cold winters and year-round rain
waxen scroll
I just had squirrels chew the shit out of all the plastic stuff I had outside
strange silo
@clear igloo Only @rocky badge ? I'm getting some HPE 5900AF-48XG-4QSFP+ soon 🙂
Have around 10 coming out at work, they will be ewasted 😉
clear igloo
@strange silo Nice! 😄
hallow nimbus
👀
twin seal
i cant seem to fix my issue with multiple nics
they all get the same mac adress (proxmox)
even when i add hwaddress ether xx:xx:xx:xx:xx:xx to the /etc/network/interfaces config
little schooner
@twin seal seems to be working, because the real definition of networking is not working
fresh copper
Can't you change the mac address in Proxmox? It seems like you can on my instance. Maybe the interface it just not obeying what is set in Proxmox. I see you tried /etc/network/interfaces but have you tried changing it manually using ip link set [device] address xx:xx:xx:xx:xx:xx?
bold karma
@twin seal how on earth do they all have the same MAC address...while this could potentially be done on a virtual machine, there is no way out of the box multiple nics should be able to have the same MAC. MAC addresses are sat by the manufactures of the NIC. I guess I'm just not seeing the whole picture here.
rocky badge
obtuse briar
Anyone got a recommendation on wifi routers? Something that’s just set and forget and is stable?
vapid dune
Ubiquiti AP xD
hallow nimbus
^
hallow nimbus
I have been running 2 unifi AP's since half the summer without problems
obtuse briar
By router it doesn’t dchp?
little schooner
@vapid dune about a year of running them too
They just keep working.
Unlike my. Roku box
Has a memory leak because it hard freezes after being on for like a month
Or something.
@obtuse briar unifi ap doesn't do dhcp server no
vapid dune
Works well with a pure router. I'm using it work an edge router lite. But I hear the ERX or USG are good too. Or pfsense lol
craggy parcel
@bold karma If I recall correctly, there have been multiple instances of manufactures, that shipped network cards with identical mac addresses. They shouldn't but they did.
waxen scroll
@craggy parcel damn you and your logic
craggy parcel
Must be from the electronics I've been playing with the last few weeks..
little schooner
@craggy parcel actually, i remember hearing this exact thing
craggy parcel
Yeah well, I've only heard it from other IT professionals, so it MIGHT be an urban legend, but the cards were a cheap variant, and they might just have cut a few corners...
civic scaffold
Hmmm I run mesh wifi now, best thing I've ever done
little schooner
@craggy parcel hopefully they cut enough corners that it shapes into an extra 10g nic port square for free, on a 1nic adapter
regal zenith
I'm having what i think is asymmetrical routing in pfSense, has anyone had to deal with that?
hardy kestrel
Are Asus Routers good enough for large homes?
quick hollow
Do you mean the wifi on the router?
2.4ghz will probably reach to the edges of a large home but at reduced speed. You could either run some Ethernet around and install access points around the home (that's what I did at my boss's house). Or use a mesh wifi system.
hollow marlin
@regal zenith what makes you think it is asymmetrical? How many routers are fed off the Pfsense box
oblique aurora
stupid question: can i assign custom ipv6 address(like 192.168.10.10 on ipv4)? something like fe80:0:0:1:1:1:1(or something like that)
hollow marlin
@oblique aurora FE80::/8 is a link-local address. Just used to talked directly to a neighbor. If you want it as a host address it needs to be within the subnet of your router IPv6 address
fresh copper
In general, outside of link-local addresses which have special considerations, you can assign specific IPv6 addresses. Like how you might assign one in IPv4 because of a lack of DHCPv4 or because you want that device to have a memorable IP, you might assign them in IPv6 because there is no DHCPv6 or RAs.
If you don't own any IPv6 or have IPv6 PD, then you can use ULA space https://en.wikipedia.org/wiki/Unique_local_address
craggy parcel
@little schooner Haha.. I think the mentions nic's were 100 mbit nics. Yes, it was long ago.
@regal zenith Asymmetrical routing should only happen in networks with multiple routers, and therefore multiple paths between two points in the network. Or if you are announcing the same IP's through different carriers, for redundancy. It will usually happen if you configure static routing wrong, or announce routes internally with wrong parameters.
regal zenith
Thank you for the reply. So the issue happened somewhat recently i believe, possibly after trying to run the new pfblockerng-devel. I have a 24 port unifi switch with a LACP trunk uplink on two ports to my pfsense box. I have two APs hooked up to the switch one with two VLANs the other with a single VLAN, i do currently have yet another non-trunk'd connection going to another NIC on the pfsense box. I didn't think this one out so i ended up expanding and now my default LAN (native vlan1) is on the trunk port with the pfsense side having a 192.168.1.1. I'm sure i need to migrate that network over to its own VLAN and remove any IP from that interface so it can simply trunk
i was trying to solve some mdns issues so i did end up allowing other VLANs to talk to eachother which i've been makign things way over complicated i believe, i do have a internal DNS resolver that intercepted 53 routes it to localhost and then does DoT to cloudflare
rocky badge
@clear igloo lol, so my dad needed access to a computer with an ODD. So I showed him how to remote desktop into the family desktop. He was trying to play a video and was wondering why he couldn't hear it. He forgot he was in a Remote Desktop session. 
(His Surface's volume was muted, but the RDP session wasn't lol)
regal zenith
the reason i think i have it is on my LAN my speedtest is ~4mbit down, 40mbit up, whereas if i try on a wifi which is on a VLAN i get ~300mbit down, 40mbit up
wireshark shows a ton of tcp errors as well
and my internal firewall is actually blocking outbound traffic from the LAN to WAN even though i lifted any rules
sometimes not always
Just make sure that RDP box if exposed is updated for BlueKeep XD
craggy parcel
You will not be able to see asymmetric routing in a speed test.. They will only show up in traceroutes, and sometimes even only if you trace from both ends.
Seems more like you have another problem, that either drops traffic, or gets confused as to where it should be sent. Could you, perhaps, have an IP address conflict? (Two devices using same IP)
clear igloo
@rocky badge LUL
regal zenith
so my flows look pretty crazy only on the LAN, like sometimes 30 at once, a lot of flooding
duplicated sequence number on multiple packets
craggy parcel
Have you disabled spanning tree on the switch?
regal zenith
to see if it freezes from a loop?
craggy parcel
No, more because it sounds like a loop, either a switch or routing loop, if you see multiple copies of the same packets, that are not retransmissions.
regal zenith
oh true hmm
craggy parcel
A traceroute will show a routing loop, crazy blinking on a switch, is usually the easiest way to detect a switching loop.
regal zenith
The wifey loves it, i have 100ft ethernet running to the bedroom right now over the carpet to the rack
craggy parcel
Wish I could make a rack that was THAT neat. 😉
regal zenith
I ended up getting it for 80$ off craiglist, the 24U rack that is. I was stoked because i was going to do an Ikea lack rack
Black Box makes it, i guess USA made. It's pretty nice vs. some others i've seen at work.
craggy parcel
I was thinking more of the cable management.. 😛
regal zenith
bleh, the back side is a nightmare tbh atm
craggy parcel
Last time I built a rack, it looked kinda neat for about 3 months. 😛
That was until new equipment needed to be installed. 😛
little schooner
@regal zenith not being able to easily access both sides of a rack is difficult yes
craggy parcel
Also personally, I might have put the switch in the other way, to have the cables in the back, where I actually need them.
regal zenith
Yeah, i do need to try to organize my stuff and plan better. This has been a learning experience for me so a lot of stuff is just overly complicated for no reason
little schooner
@regal zenith same. I have to cut some of the vlans I am using. It's unnecessary extra
And the firewall rules
subtle glen
i tried to cable manage the back of my rack (i dont have access to the back), gave up after 10 mins
little schooner
@subtle glen it's hard, especially when racks are as tall as the ceiling
I can't even go back there. It's against wall
subtle glen
height is not a problem for me
mine is a 12 u rack and im like 6 foot 5
hard to crouch in it
little schooner
Oh wow yeah your tall
craggy parcel
Haha.. Yeah, or when you make the mistake of using the fact that you have access to both sides, and run cables there, then new racks are places on both sides, and you can not access the cables at all.
regal zenith
@little schooner yeah i hear ya. I've been lowering the amount of VLANs, i think i just need to go down to maybe one or two for say IoT and guests.
little schooner
@craggy parcel me and the prof made that mistake
We didn't align racks where the holes match
It is such a hassle to run cable now
craggy parcel
@regal zenith For a home network, I'd say one for all PCs (Maybe isolate the kids from the rest), one for guests, one for Internet of Trash devices, and maybe a management and/or server network, if you have any servers.
subtle glen
There was an attempt with that cable tray on the back
regal zenith
I have one setup with EAP-TLS, a radius server on the pfsense box, i ended up getting a second AP to put in our bedroom because neighbors interference and the wife has too much apple stuff, but atleast i can install a certificate on those to authenticate.
craggy parcel
@little schooner Tell me about it.. We did consider cutting some of the cables last we had to make a new run in the rack. But it's too messy, and too hard to follow the cables, because of cause we labeled them PERFECTLY from the beginning.
regal zenith
Yeah i think today I'll reconfigure the R710 and move the VM networks to their own VLAN and make the default unifi LAN only for management
My issue is i basically started building ontop of the default LAN and now i realize that's probably not the best idea
craggy parcel
@subtle glen I think the usual way to manage cables is to run them from the equipment to the side of the rack, and then up or down from there. Basically a lot of C's or reverse C's for the cables internal to the rack.
subtle glen
i tried to do that with the patch panel runs
but with new runs i did when the rack was full i just dumped the cable in the rack
craggy parcel
@regal zenith Yeah, sometimes it can be helpful to plan in advance. List the type of devices you have, put them in groups you want to keep separate, and you have your vlans. 🙂
@subtle glen Patch panels should probably be put at the top or bottom, depending on where the cables enter the rack (Usually the top), with a loop of extra cables to use when a connection goes bad. Also the patch panel should be of a type that can be services without having to disconnect anything.
But then again, the world ain't perfect. 😛
subtle glen
mine is at the top with wires entering from bottom xD
thought patch panels were always placed at the top, got surprised when i saw one at the bottom
craggy parcel
Haha.. I would place them as close to where the cables enter, as possible. To avoid all those cable runs inside the rack, makes handling the cables easier.
rocky badge
I've got 802.1X for wireless right now
and in a couple of days I'm adding 802.1X for wired
craggy parcel
@rocky badge For what reason will you add it to the wired network?
craggy parcel
Why would you need it?
regal zenith
yah the VLAN assigned based on auth is nice
rocky badge
802.1X devices are on VLAN 500 right now
regal zenith
For me, it's a learning experience. I don't see a real threat in my house but it's fun to learn and play around.
rocky badge
regal zenith
but that playing around comes at a cost when you're doing it in a "production" environment with a wife and kids when the network goes down and you're all derp...
craggy parcel
Try doing that playing around on an enterprise network instead. 😛
craggy parcel
I bet everyone would be annoyed, if I enabled auth on our wired office network. The radius auth on the wireless, when we moved office, gave enough complains. 😉
regal zenith
yeah we have enough issues with our enterprise network, rogue DHCPs popping up and GIS gutted to the bare minimum
rocky badge
wired IoT would be exempt from 802.1X but MAC filtered
Same for my ESXi hosts and shit
craggy parcel
Rouge DHCP should be easy to isolate, with decent equipment.
rocky badge
Every other port is going to be 802.1X enforced
regal zenith
oh the equipment is capable of it, i have no idea why they don't DHCP guard
craggy parcel
@rocky badge Mac filter? Give me 10 minutes, and I should be on that network.
regal zenith
native vlan for that port i'd assume then assigned vlan for auth'd devices
hallow nimbus
Yea but IoT is as untrust worty as it can get blob
craggy parcel
When I was at school, we quite often had the problem with DHCP servers being setup incorrectly. (On the external instead of internal network) which bumped everyone off the internet for some time, and IT came screaming, and complaining. Funny network setup, for a school that educates network technicians..
rocky badge
We've got 15 authorized DHCP servers at school
craggy parcel
@rocky badge But I'll be on your network, and that's certainly a start for getting more access.
rocky badge
And then I'll disable that port
craggy parcel
If you monitor the network. Sure..
regal zenith
Any idea why tracepath would show a 10.53.128.1 ip when i accidentally forgot the fourth octet of an address
rocky badge
Email alerts :p
craggy parcel
@regal zenith Depends on what you mean when you say "forgot the fourth octet"
regal zenith
linux, and i mean like tracepath 192.168.50
i just don't know why it shows that IP for any ip i only specify the first three octets of
craggy parcel
It made a wild guess?
clear igloo
It assumes you missed a 0 as the third octet
Tracing route to 192.168.0.50 over a maximum of 30 hops```Ahh it looks like that's the first hop regardless outside my network
i get the same hit when hitting a public IP
clear igloo
yah
regal zenith
Regarding the asymmetrical routing i think i have, i can't even iperf my pfsense box anymore , wireshark shows a whole bunch of TCP RST flags and it just hangs
rocky badge
@clear igloo Yeeeee I've moved almost everything to Docker
regal zenith
both are on the same subnet
clear igloo
Nice @rocky badge
rocky badge
The only things not dockerized would be a PITA to either Dockerize or move
clear igloo
Yah, I got most of my stuff in docker that make sense
craggy parcel
@regal zenith If they are on the same subnet, routing can't be the issue.
regal zenith
Nice, i'm slowly migrating stuff over to docker, it's kind of pointless to have dedicated VMs for such small workloads in some of my cases
rocky badge
regal zenith
maybe it's a L2 issue? Unifi did recall the latest firmware on their switch and i rolled it back
come to think of it, this is around when thew issues happened i think with that new firmware
*Ubiquiti, rather.
rocky badge
What I am virtualizing: non Dockerized NGINX load balancer, Windows Server as my primary domain controller/DNS/NPS, and a Minecraft server
regal zenith
That's cool. I want to throw minecraft on a docker as well. Have you played around with LinuxGSM at all for quick server setups? I was thinking running them in a container would be cool.
rocky badge
Nah, I've just use my own script to start them lol
regal zenith
not sure if the quality will be clear, but i'm noticing these rDNS queries still. I disabled ipv6 on my WAN do you think this might be causing my issue if the clients are still attempting ipv6 maybe?
craggy parcel
Could be. Most browser will either prefer IPv6, or make connections on IPv6 and V4 simultaneous, and use whatever responds the fastest.
regal zenith
Eh, i figure i should learn more about ipv6 to implement it. My fear is my ignorance which held me back but currently watching videos/reading to have a better understanding. My ISP offers it up and if i can get away from NAT that would be a good thing.
vernal gust
Here's a good book on IPv6 from Cisco @regal zenith
(whoever I just pinged accidentally sorry)
regal zenith
@vernal gust Oh, thanks 🙂
tender hazel
@regal zenith IPv6 is not hard at all
it is in fact easier than IPv4 in many ways
however you clients will only attempt ipv6 connections if they have valid global ipv6 addresses
fe80:: doesn't count
green compass
I just found HP ProCurve 1400 24G for $75 in my local shop, is it worth ?
I have TP Link 8 port switch and I am looking to replace it with something better
craggy parcel
@regal zenith Well, IPv6 is not that different from IPv4 from a configuration point of view. The addresses are 128 bits instead of 32, they are written with hex notation, instead of decimal, and netmasks are in CIDR notation, instead of dotted quad.. Also you use a firewall instead of NAT to prevent inbound connections.
Also you should avoid subnets smaller than /64 due to the way stateless auto configuration works.
jaunty talon
That depends also what you're building, if you're building a network that will supply IPv6 to customers etc you want to make sure you have setup proper prefix delegation
But at home you really only need to care about what you get from your isp
clear igloo
@jaunty talon
400Gbit in the lab hype 🙂
tawny seal
Holy crap how much was that lmao
clear igloo
Got it from the BU for testing, so free 😛
I think list price is like $30k or something
tawny seal
holy crap
tawny seal
Ryois did you buy another domain? blob.pcmr.rocks
cause you still have ryois.me right?
rocky badge
lol
tawny seal
ah okay
rocky badge
tawny seal
my domain is codexmedia.org but i thought about buying one to use for internal stuff also
My network is serperate from the rest of my house
I use to be on a AD DS domain
but the server i was using was a rackmount server and was too big and hot
rocky badge
rip
tawny seal
I have a file server now so i could do the domain on there but i dont feel like it
it dosent have windows server on it so
hollow marlin
@clear igloo ewwww, L2. Tag me when the 400Gb routers come in 🙃
clear igloo
@hollow marlin They already are 😛
hollow marlin
clear igloo
They got released as the 8000 series routers or are about to be 😛
Besides, it does some routing, as much as any other Nexus at least
@rocky badge sso all the things!
rocky badge
yeet
clear igloo
rocky badge
Why does it want to try connecting to a WiFi it's already connected to
hallow nimbus
¯_(ツ)_/¯
regal zenith
Man, i found my source which after days of troubleshooting is frustrating, i just have to solve it now. I swear i swapped multiple patch cables, keystones, migrated the management network to its own vlan as well as my default unifi lan off the trunk LAG uplink, played with rules all to find out it's my OS. I booted to another distro and had no issues.
yeah i'm gonna go sit in the corner...
I never learn Occam's razor, auto-negotiation was disabled on ipv4.
it was at 100mbit half duplex
jaunty talon
@clear igloo going with QSFP-DD or OSFP?
Neat indeed! Gonna use similar as core for our new office and do spine <-> leaf setup with 10Gbase-T to all endusers with 400G uplinks to core!
clear igloo
@jaunty talon QSFP-DD only 😛
I know Arista had a couple OSFP boxes but not sure if Juniper or anyone else ended up going to production with them
jaunty talon
Thought so, seems to be only Arista doing OSFP
Juniper is QSFP-DD also
or the current released products atleast
clear igloo
Yah, I was just reading up on that. I know the OSPF consortium had like 80 companies involved but Arista seems to be the only one bringing it to life
jaunty talon
Will be interesting with thirdparty market for OSFP, as Arista is much like Cisco when it comes to optics
they dont like thirdparty
clear igloo
Yah, just clicked on the press release of OSPF and I guess it makes sense Arista is bringing them to market since they are the ones behind the optics to being with, lol
jaunty talon
Yep
clear igloo
I've heard Arista is even worse with third party optics, heard something about a license, not sure if that's true or not though
jaunty talon
It's true
However they give it for free for you when you buy a box
But they dont like it
And I mean, I get it why both Cisco and Arista care about that but the problem is the fucking markup they have on the optics compared to 3rdparty
clear igloo
Yah, markup is stupid
jaunty talon
If they would cost 5-10% more, everyone would buy directly from them
polar oxide
Anyone able to help? I have an IBM X3530 M4 with 4 1tb drives in RAID 0. For some reason when I go to install CentOS it cant see the drives or array
jaunty talon
But now buying a 3rdparty 100G-LR4 from lets say FS.com is 4x cheaper than buying from Cisco with 75% discount
clear igloo
Yah, I'm curious to see the disparity on 400G optics since I've heard they are supposed to be in line with existing 100G optics in terms of price. Now if that happens or not is yet to be seen
little schooner
@polar oxide maybe it needs the raid driver loaded during setup
jaunty talon
@clear igloo in the start they will cost way more, but QSFP-DD prices will drop since 3rdparty is already out for them
1x QSFP-DD from FS.com (LR4) is 7100€
clear igloo
@jaunty talon yah, not surprised they are out already
That's pretty good for an LR4 optic
jaunty talon
I have ordered 4 of them so will test them out
the SR8 was even better priced tho, 1200€
If you keep it in same rack it will be very cheap :D
clear igloo
yah
polar oxide
I'll try that out @little schooner
jaunty talon
But sadly I have heard that the failrate on the 3rdparty QSFP-DD's are high at the moment :(
will see if any of mine fail
clear igloo
Interesting, any technical reason you've heard of or just maybe too early to tell?
jaunty talon
My friends who have tested them think it's overheating, but they have been sent back to both finisar and fs
so we will see =)
And it's not a 100% fail-rate, it's 2 of 24 QSFP-DD's they have in lab
clear igloo
Yah, I'd hope it's not near 100% 😛
clear igloo
Yah, I figured but best to be clear for anyone else
waxen scroll
Nerds
jaunty talon
:|
clear igloo
@waxen scroll Yes you are 😛
little schooner
Is VMware vcp cert worthwhile to do or I guess my other question is, are any of you vcp?
regal zenith
I haven't got mine but a few people at work have it. Although we have some customers that primarily use vmware.
Although lately we've been playing with KVM to migrate our dev vm's as we're running 5.5 XD
Would the cert benefit you as far as moving into a different posistion, are you looking for more certs under your belt or are yout hinking about for the knowledge?
little schooner
@regal zenith well, I would really like to have more knowledge with vcenter and clusters and some troubleshooting. But the cert would be a bonus if I could pass it
We are a VMware shop for now at the college
But we don't use clusters for some reason.
We have three systems doing nothing
regal zenith
Hmm, yeah i would say those would be good skills to have. We end up charging a lot to send someone out on site or even remote. I don't see them going away anytime soon. It looks like they're starting to take containers more serious too
Do you have a home lab you could play? Oh you say you're at college. I wonder if they would spring for a vcenter licenses
little schooner
@regal zenith yes the school is part of VMware academy
I do have some vcenter licenses
We hit a resource problem but I don't think I was able to troubleshoot it well
We think it's lack of cpu cores. 12 cores for 50 vms
But then a cluster would of probably helped us I think?
little schooner
@regal zenith unfortunately no. Clusters need shared storage right?
strange silo
@little schooner Do you have vSAN licenses?
little schooner
@strange silo I don't think so. Just vcenter and vSphere license
strange silo
Darn, could have looked at using the internal storage to create a vSAN cluster so you could do HA etc
@polar oxide Also you likely need to mark the array as bootable in the RAID config
polar oxide
Hard to find in the old ass ibm menus. I'll dig around a bit
That might be my issue
Initially it didn't show up even though I had Windows server booting off of it which is weird
I'm thinking I may just update the bios
lean pollen
Is Asus RT-AC1300G PLUS good enough?
Replacing ISP router we have had problems with
(problems as in we are quite sure the 5Ghz crashes and turns of when there is many enough users)
rocky badge
@clear igloo
cursive ivy
anyone in here messed around with using an unRAID server as a DSM hyper backup destination?
vernal gust
hallow nimbus
😂
waxen scroll
o.o
@clear igloo that feel when you go through netacad and cant even pass the new CCNA
clear igloo
ooof
waxen scroll
@clear igloo i was bamboozled when i went to school
clear igloo
most people are
waxen scroll
they switched to juniper in their datacenter and so basically none of the students passing could admin it without lots more training
teach cisco cause its relevant to most employers
use juniper instead so none of the students are qualified to work for you
clear igloo
lol
waxen scroll
i mean
you know how it is being a noob
you know cisco commands, some network concepts, but its not enough
so a whole new vendor? bleh
little schooner
I'm glad I finished it before the changes
But it never hurts to have a look over
@waxen scroll also my teacher is forced to get both ccna r&s and ccna Cybersecurity and recertify because you need it in order to teach the course on netacad
Of course he likes it so not really forced in the sense he hates doing it but it's a challenge after a certain age
waxen scroll
@little schooner @clear igloo did you know you can work on a CCIE network with 0 certs?
xD
clear igloo
yup
craggy parcel
@waxen scroll Well, for someone just starting in the industry, the certificates can help prove the skill they claim to have. But when you've been in the industry for some time, references and reputation means a whole lot more.
hollow marlin
Certs most definitely still have they place. Being in the field for sometime has no bearing, the countless 15+ year "Sr. Eng." that have really 15 years of 1 year experience I run into is sickening
craggy parcel
@hollow marlin "With 15 years of 1 year experience" I suppose you mean, that they worked with a particular technology/field/concept for 1 year, but in the industry for 15?
hollow marlin
Yes. A lot of engineers that push experience in your face tend to have done the same task/job for multiple years, never branching out or willing to push their knowledge
craggy parcel
Ok, and even though they are probably easily filtered in an interview, it's a waste of everybodys time, to actually conduct the interview.
But a newly issued certificate might not prove more knowledge, than those people being doing the thing in practice for a short time. It only assures a basic level of knowledge, nothing more.
hollow marlin
The problem is experience is still the first chosen for interviews. After that you might be able to weave them out but its too late by then.
Certs themselves are not the be all end all. Certs+Exp consist of the best engineers. They tend to have fundementals but more importantly people who have certs show that this person is willing to learn and expand which is a perk of its own
craggy parcel
True.. But so does having done a lot of different things over the years, as well.
hollow marlin
Sure, not saying its not valuable
craggy parcel
And for cisco's certifications, they are at least not know for being a walk in the park to take. 🙂
hollow marlin
CCNP wasnt bad, IE lab is going to be a bitch
craggy parcel
Never taken them, so I won't know. However, we did use the CCNA and CCNP course material when I was at school some 10 years ago.
hollow marlin
But compared to my JNCIP, Cisco = actual networking, Juniper = code monkey
craggy parcel
I don't know if it's actually how it is, but you would think they paid the authors of the books by the word, as they contains a LOT filler texts, that does nothing but wastes your time. 😛
hollow marlin
Yes there is a lot of out of date topics
craggy parcel
Yeah, Cisco teaches a lot of fundamental networking concepts that are in no way specific to cisco equipment. It just so happens that you have to practice on cisco boxes.
Outdated? Nah, frame-relay is the latest and greatest. 😉
craggy parcel
But I can live with the outdated technologies, as I like to get the bigger picture, and historical perspective as well, but all the repetitions, and saying the same things 3 times, while using lots of filler words that does nothing to aid in understanding the actual topic... That's just annoying, and only makes sense if authors are paid per word.
hollow marlin
Its a learning method. Its in multiple books (not just cisco) and even some RFCs. Its to dig a topic into memory
Can be annoying if you know the topic but its good for someone neww
craggy parcel
Maybe, but it's not only because I knew a lot about it to begin with, also others that knew nothing at all, found it quite tedious to read through. But then again, I'm danish, and the way we are used to getting taught things in schools, might differ from how americans are used to get taught. Also the materials being in english, which is a second language for us, also adds to the annoyance. Even though most danes are quite good at english, it still requires more of the brain to both understand the foreign language, and complicated topic computer networks are.
But I think the online materials in netacad kinda eased the pain of reading through the huge books, as they seems to have removed at least some of the redundancy in the text. However, I still prefer reading longer texts in print, instead of on a screen.
Hmmm.. I guess I better go to bed, the kid might wake up in about 6-7 hours, and would be nice to get some sleep before that. 😛
thick minnow
lol ok @craggy parcel
strange silo
@hollow marlin I pretty much have zero certs, after 4 year hassle of getting a decent degree I really just can't be arsed studying anymore and that feeling is just as strong now than it was back then. I'm just lucky enough to be in a country and region where the talent pool of actually good people is small and everyone knows everyone so interviews in themselves for technical roles can be a formality too.
But the downside to this is you're competing for jobs with people you know quite well
'Lifers' are a big problem here though, I know what I knew 15 years ago and I know nothing more
But they never change jobs so....
little schooner
I have a hard time sitting down and staying focused on study material
strange silo
Yep, I get the urge to just go a try it soon as possible
little schooner
@strange silo like I want to learn it but I guess I am lacking the motivation to just watch and absorb the material
Maybe it's because I hate taking notes or something
Or maybe it'd because to set up the same environment takes a day or something
So I can follow along
strange silo
I hate reading, so unless it's direct and right to the point I stop
strange silo
And if I actually do it I understand it more than being told/reading it
But material lead/instructor lead is my preferred actually doing it method
waxen scroll
I don't memorize/test well. I have to do it. Experience. Hey wait a minute!
strange silo
So I don't mind going on 1 day, 3 day, 5 day training course I just don't bother with the certificate test at the end if there is one unless it's as part of the course during it
little schooner
@waxen scroll at the moment, I need to learn how to use clusters in both VMware and hyperv
little schooner
Yes that's the best way most of the time
waxen scroll
I got access to VMware at multiple jobs
little schooner
Yeah that helps big time
strange silo
@little schooner just setup a cheapo storage server either FreeNAS (NFS) or Windows server with the iSCSI role and just give it a go, or just do it all nested VMs
like don't even bother with redundant disks etc, pure lab that can die
little schooner
It's a good thing I have a spare pc for lab purposes
It's 4790k system
Not a server but...
strange silo
it's fine for it, two ESXi VMs sharing virtual disk between them works fine. I don't like setting up vCenter cluster without shared storage between the ESXi hosts because it's largely pointless without it
but you can tick all those boxes using a single server and nested vms
strange silo
Not that shared storage is a requirement to create the cluster, it just doesn't really do anything without it
waxen scroll
That reminds me, I still need to learn python threading
little schooner
@strange silo so freenas with nfs share is my best bet I presume?
waxen scroll
@little schooner we're going to learn the shit out of threading. I need to learn about database locks first. That's where I left off
little schooner
I feel bad because the prof is looking to me to help him solve a resource problem
waxen scroll
Your prof needs to PAY
little schooner
@waxen scroll database locks like the one where Newegg saves your order for payment before someone else buys it?
@waxen scroll true. Pay. It will be.
@waxen scroll but the politics at the college are heated. They let go most of helpdesk
waxen scroll
If thread 1 tries to write the DB when thread 2 does, BOOM. App crash
little schooner
@waxen scroll hmm that's weird how that happens. It should work fine since they are isolated instances
waxen scroll
The DB is global
waxen scroll
Python and other languages should throw an exception and fail to recover
Python calls arrays lists as well
little schooner
I like it when exceptions are detailed. Makes it easier to troubleshoot
strange silo
@little schooner NFS datastores are the nicest to work with but can be performance limited compared to iSCSI/SAS/FC
little schooner
Not like the nonsense of "a predetermined error has occurred. Error 245"
And offer no explaination why
strange silo
But those block storage datastores have their own downsides so none is like better than the other
little schooner
@strange silo so iscsi would be most perforant?
Because of nic offloading I presume?
waxen scroll
@little schooner when I write programs I hide the exceptions behind plain English errors. Lol
strange silo
Generally you wouldn't see a difference, only things like DBs and Exchange show a difference or if you run I/O benches but those are pointless
little schooner
@waxen scroll I mean, by detailed I meant to say that explains a clear cut reason. Like if no permission to write to directory, it will say "unable to write to directory due to lack of permission"
strange silo
NFS isn't as good for small I/O commands and peak throughput as you can't easily multipath it
little schooner
Or "run program as admin"
strange silo
but we run thousands of VMs off NFS so don't worry about it 🙂
waxen scroll
My apps connect to like 60 devices at a time. Since it's not threaded it takes forever
strange silo
oof serial device access
strange silo
Nothing like scripts that are 'good enough' until they aren't
little schooner
@waxen scroll much better than manual work that's for sure
strange silo
I'm an expert at making those lol
waxen scroll
We're doing a huge migration project and the scripts are getting info in an Excel to help us understand the complexity
little schooner
@strange silo with iscsi, I remember running into an issue where freed up storage wasn't being reclaimed. This was on synology. Is this a feature of iscsi?
I didn't know how to get the space back
@waxen scroll wow, if only my prof took the time to do something like that
Before me, he was winging everything
strange silo
@little schooner Correct, you have to manage space utilization at the ESXi/vCenter layer with block based datastores. Some storage vendors offer vCenter/ESXi plugins that allow you to reclaim space but those work through the host layer and it's host doing commands against the storage.
Without the plugin the storage consumed is only as big as the largest non zero size used
never goes down, but won't just get bigger without a reason either
little schooner
Hmm yeah that is something I never knew
strange silo
So you can have 2TB of zeros, it's still 2TB as far as the storage platform is considerned but you still have 2TB of free space
Honestly space reclaiming isn't worth it unless a fault blew out the usage
Or admin error creating a vdisk to big
little schooner
@strange silo he was deleting VMs I think that is the thing I'm concerned about
A bunch of linked clones
That he said he didn't need anymore
strange silo
Well linked clones don't really use storage anyway, that's why you use linked clones
little schooner
I guess your right
strange silo
ref base vmdk then delta for each clone
waxen scroll
I still think you'll blow his mind with /31
little schooner
@waxen scroll it's coming lol. By January I'll see him
strange silo
geez I remeber when majority of things couldn't use /31
little schooner
He said he wants to enjoy his vacation
strange silo
fml
waxen scroll
I met my coworker on my vacation
strange silo
"I don't need a broadcast for 2 hosts damn it1"
little schooner
@strange silo 😂
waxen scroll
He said he forgot his phone and laptop. I was like uhhhh you dumb? Why would you bring it anyway
strange silo
lol
little schooner
Work stays at work on vacation
strange silo
Don't you know they aren't baby boomers anymore. It's been renamed to "The Silver Tsunami" or "The great ripening"