Unifi AP Lite or TP link EAP225 or EAP 245
#networking
lean pollen
vapid dune
get the cheapest. then throw it out in 1-2 years to get wifi 6e
I wonder if the ap lite 6 is worth it
fervent brook
go to goodwill and just get 5 AC1900 routers
little schooner
I'd get a zotac zbox instead
fervent brook
if you have 5 routers, you can simultaneously serve 5 clients
burnt oasis
I'm loving that the new ubiquiti pro gen 2 switches use augmented reality
cedar igloo
Hi guys, if anyone could offer any suggestions for this, it would be great.
We have a web app with a contact us page. This contact us page works when the delivery address is my work email - name@company.com, works with a distribution list - dev@company.com however does not work with another distribution list - info@company.com. I've tested info@company.com distribution list from my work email and its fine.
We've been stuck on this for a few days now.
burnt oasis
does the sender used by the form have permission to send to that distribution list?
cedar igloo
It used to have. I'm not in control of the smtp server so ill check
yeah. it has permissions to send to all emails and DLs
waxen scroll
whats the wireshark say?
burnt oasis
and the smtp log
waxen scroll
@little schooner @clear igloo 👀 👀
cedar igloo
and the smtp log
@burnt oasis the logs for the destination or sender? (these may be the same here. im not sure)
oh nvm
burnt oasis
webapp to whatever smtp it connects to -- if it's just using php mail, that damn thing is pretty damn useless now days in my experience.
with all of the mail security and anti-spoofing stuff
if your using gmail as smtp server it COULD also be not allowing it because the application is "unsecure".
cedar igloo
its all local, so im assuming exchange
burnt oasis
ok
waxen scroll
technically i dont because i have 1 device using it with an injector but i guess if i put cameras in..... hmm
rocky badge
😄
lean pollen
What AP is good placed closer to the floor
Aka, basically wifi direction is good out to the sides of it
rocky badge
UniFi?
waxen scroll
anything with an external antenna
rocky badge
FlexHD
lean pollen
Too expensive
cedar igloo
Can exchange spam filtering (if its a thing) block requests from the local network or is it only external spam blocking/filtering?
- by default
little schooner
@waxen scroll I need a crash course on how to use Wireshark like a pro
Or I need to find the time to do that
lean pollen
What about routers put in AP mode?
little schooner
@lean pollen them that is better option
But best that each AP has its own wire run
hollow marlin
@little schooner what with Wireshark are you looking for?
little schooner
@hollow marlin well, when I was trying to troubleshoot problems with 802.1x authentication between unifi AP and windows NPS server. Nothing made sense as the policies were configured right. Somehow was getting denied. I'd like to know how to better pinpoint the solution for that problem in particular. The other case is using packet filters or search filters to reduce the output results to just the things I want to look at
I know its practice in order for it to commit to memory
oh and knowing how to troubleshoot if I have a bad cable
lean pollen
Well, any recommendations?
north maple
That's one way to mount an AP, huh.
lean pollen
I don't want Asus because experience with the AC1300G have been bad
hollow marlin
@little schooner Firstly its about knowing what you are looking for. Use the filter for protocols, ie eap, eapol as it will narrow down your search completely. Now just FYI, any protocols that uses a known dst. multicast address will not be flooded or forwarded but will be process by the switch. So when trying to troubleshoot issues such as 802.1x, you'll have to mirror the port to capture the traffic
little schooner
@hollow marlin thanks for the tip
vapid dune
better just turn off your internet
clear igloo
i searched around, 0 fucks were found. Sorry 😦
thick minnow
thanks
little schooner
@vapid dune or use someone else's wifi access
Like Comcast makes public hotspots
vapid dune
I mean as long as you have a VPN
slender arch
anyone have any experience with plesk ?
sacred yew
lol your upload is better than my download
hidden storm
anyone has experience sending any type of internet connection over 400 feet through walls and trees?
hidden storm
yeah what i was thinking just trying to find a easy way to run internet to my shops without getting a seperate service there
steady creek
Go over the top? No idea
hollow marlin
@hidden storm 900mhz over 400ft should be cake. Dont expect 100/100 but we managed to shoot 900mhz through 1000ft of stone buildings during a disaster. Im talking about 3ft thick multiple stone/marble sides
~10mbps for emergency services
little schooner
Hey that's plenty as long as it's shaped
hollow marlin
For what they needed it was.
vapid dune
Point to point microwave is possible too. Just need a high enough pole
But really at that point just ask people for quotes and pay a pro
sleek bloom
is anyone able to help answer a pacemaker/corosync and iscsi/multipath question?
I have two iscsi target servers in a pacemaker cluster connected to a Dell MD1200, I can get the scsi reservations with the multipathd key, but I can't write to the array.
Only if I shutdown everything and boot only one node can I mount and write to the array
hollow marlin
@vapid dune I wasn't even talking best line of sight, more like 900mhz can brute force quite a bit
dry ibex
Someone wanna enlighten me on "NetCut"
When I turn my comp on, my internet shuts down.... For the whole house
vapid dune
maybe it steals the router's IP
heavy ember
Hi there, what would be the best way to stream my PC to my TV (same local network) at 4K 120hz ?
(Is it even possible?)
vapid dune
For gaming?
do you even have a 4k 144hz tv?
I mean if it's in your house why not do fiber thunderbolt or something
I was gonna suggest parsec as per the LTT video but that might not do 4k 144
heavy ember
I have a 4K 120hz Gsync TV
I was checking Steam Link?
And yes for gaming
I mean, if it's 60hz It would fine
Both my PC and TV are in Ethernet Cat6
vapid dune
the physical steam link probably can't
maybe if you got a computer and used that instead
I mean it's a waste of 120hz and gsync if you don't have both enabled imo
heavy ember
@heavy ember I have a Raspberry Pi 3 and a Xiaomi Mi Box S at home just in case
hazy ivy
Curse you windows file sharing, CURSE YOU!
vapid dune
lol
little schooner
I haven't had that happen to me
But I've run into serious problems not using fqdn for a file share. Ip address works good too
vapid dune
I just don't reconnect on startup
little schooner
@vapid dune that would be fine, if credentials were saved
Otherwise it gets annoying fast having to type it in each boot
waxen scroll
@hazy ivy whats the wireshark say
little schooner
its a shark made of wireframe
hazy ivy
i highly doubt that
hazy ivy
it works already
little schooner
@hazy ivy it was worth a shot to joke around
thorny vector
@little schooner I appreciated it
hollow marlin
@lean pollen Are you looking for an extension to a unifi setup or just another AP for coverage
nocturne harness
FlexHDs are just normal access points though? no?
lean pollen
I just want a AP for coverage
nocturne harness
Pretty much any consumer wifi router should be able to do that in AP mode then
waxen scroll
@little schooner i do wireshark for you. $70/hr
nocturne harness
You could try a UAP AC Lite if you want, it's half the price
lean pollen
@nocturne harness Normal APs antennas is designed to be placed on roof facing down, and from what everyone is saying, will not work that well if you are basically facing its side. While FlexHD have antennas pointing to all sides.
nocturne harness
generally APs are designed for both wall and ceiling mount
lean pollen
Neiter will be the case on me
nocturne harness
ceiling is just beneficial for a lot of reasons beyond the design
lean pollen
it will be placed on a shelf, closer to the floor ish
nocturne harness
the issue you'll have with close to the floor is closer to interfering objects
not antenna design
i.e. your house furniture will be in the way of the signal and cause reflections which introduce extra noise
that's why ceiling is best--least amount of furniture for horizontal spread
lean pollen
I can not place it in the ceiling
nocturne harness
Ah, well you should have no issue with pretty much any consumer device
no I understand, I was just explaining
lean pollen
(it was better router than some other ISP routers people seem to get)
nocturne harness
anyway, back to your question, pretty much any decent consumer device will serve your need
lean pollen
But how do you find one that have stronger signal than others?
nocturne harness
they're designed for table top use, maybe just google if the specific model has an AP mode
hollow marlin
Stronger signal =/= better
lean pollen
Or whatever else
nocturne harness
Ye, it's more of a quality question
hollow marlin
Devices still have to have a strong enough signal to talk back
lean pollen
actually work in AP mode for real
nocturne harness
and the answer generally is... more expensive devices are better
hollow marlin
No
nocturne harness
not across the board, I agree, but generally I think that's accurate in the consumer space
lean pollen
Some routers might just have a better router part I mean while the antennas is the same right?
wont use the router part I mean
hollow marlin
@nocturne harness still dont agree. Plenty of consumer gear from Mikrotik will wreck $2-300+ consumer devices.
nocturne harness
Ye, I wouldn't really say Mikrotik is consumer gear though
lean pollen
It got some issues and seems weaker than the ISP one was... but might be the little bit different placement
nocturne harness
plenty of UBNT gear will wreck more expensive consumer gear
hollow marlin
Just get a hAP ac2 for $60, put it in ap-bridge and call it a day
Any consumer networking above $100 is pretty much placebo
nocturne harness
eh, idk if I agree with that
lean pollen
I mean the range is the priority of what I get
nocturne harness
but generally I get your point
All those g4m3r routers are dumb IMO
but the more expensive mesh router stuffs def serve a market that you can't get < $100
lean pollen
Whats really better with FlexHD or whatever then?
nocturne harness
Ubiquiti is just known for making high quality gear for their price points
It's product name of a different Ubiquiti AP
Some of the $ for the FlexHD is paying for an outdoor rated unit though
no, quality in networking gear touches other areas than just pure range and power
hollow marlin
Again, don't focus on long range
hollow marlin
^
nocturne harness
quality = able to handle more concurrent devices, better noise filtering, etc
lean pollen
Then why do it seem like ISP router was more powerful than the ASUS mentioned?
nocturne harness
sensitive antennas + good filtering + higher performance processors that can handle more IOPS + software to tie it all together = better wifi gear
(obv a basic view of it, it's more complex than that)
hollow marlin
Agreed, there is a limit to "IOPS". After 50 devices talking you begin to reach the limit for physics
nocturne harness
Yeah good point
even just the gear being properly designed, end to end, to work efficiently
hollow marlin
Listening and talking with Wireless engineers changed my view on all wireless and how physically restrained they are due to the laws of physics
nocturne harness
like imagine shit router with terrible implementations of the standards (you'd be surprised how poor companies across the board implement "standards" or how vague they are), poorly designed pipelines that get backed up etc, it's def gonna perform worse then a well designed and built unit
little schooner
I like the form factor of the flex HD but don't like it's cost
lean pollen
Also, are you saying there is zero point getting FlexHD over a consumer router no matter who you are in your home?
nocturne harness
no
I feel like I've been saying this a lot on this discord: everything is a trade off
maybe it integrates into your ubiquiti setup == potentially worth it to you
hollow marlin
If you just need an AP for extra coverage, most routers today in AP mode will be fine as they are not handling other services (well not supposed to) which is where they crap out
nocturne harness
maybe you're using it outdoors == potentially worth it to you
maybe neither of those previous are true, but it seems to fit the exact feature set you need == potentially useful for you
little schooner
@hollow marlin do they have a 4x4 ap yet for mikrotik
hollow marlin
Doubt it
little schooner
So the flex HD it is
nocturne harness
very few things are bad options in absolution, only when you consider context can you make the decision
hollow marlin
Maybe the audience?
nocturne harness
(also some things are legit just shit and should be avoided, but I digress)
little schooner
The config of mikrotik scares me a bit
It's stark change compared to spoonfed Edgerouter and edgeswitch
I only have the outdoor poe unit from them
It's been working since.... Forever
hollow marlin
@little schooner Audience is 4x4
nocturne harness
there are legal restrictions, by the FCC, Industry Canada, legit every government, which governs how much power your wifi router can output
lean pollen
And how you find out what router work better than others because some do
little schooner
@hollow marlin u know what, I think I'm gonna return my flex HD
It's been giving me issues
nocturne harness
And it is illegal for a company to sell a router with a higher-than-permitted (i.e. uncertified) transmitter
nocturne harness
and not like minuscule bad boy pls change, like here's a giant fine illegal
little schooner
@lean pollen yes, all the consumer ones
nocturne harness
Read reviews
little schooner
A lot of them don't support configurable vlans
@hollow marlin my return window closed for the flex hd
I'm disappoint
nocturne harness
maybe just go with units that have been reviewed by well known reviewers than?
lean pollen
also, there is sooo many
nocturne harness
Read the testing methodology of their review and see if it's relevant to your setup
lean pollen
What is well known reviewers for routers?
nocturne harness
And read product recommendation guides from reviewers you know
lean pollen
I dont even know that
nocturne harness
pretty much all the big tech review publications do wifi routers
little schooner
@hollow marlin is it me or us pricing for mikrotik gear on Amazon is always higher??
nocturne harness
Small net builder used to be good but last I checked they weren't very active
nvm they seem to be active still
vapid dune
what do you even mean standard settings?
the last asus router I set up will prompt you all the settings
hollow marlin
@little schooner Always higher. Audience I think has been sold out constantly where they mark up the price. Same with the hAP ac2s that were almost $100 at one point
vapid dune
hollow marlin
Impressive but they exclude that ISPs are also to thank because they are really the first to react to the high load and DDoS whiteboxes are finally somewhat usable
stable iceBOT
OVH did it first with the 7Tb/s DDOS attacks back in 2016/17.
little schooner
@waxen scroll can't believe some of the administration staff at my university refers to us as "kids" when some complained that stuff in their dorm was broken or missing
waxen scroll
lmao
little schooner
Hello were all grown adults!!
waxen scroll
i call people younger than me kids too
waxen scroll
i worked for university once. ill never do it again
hollow marlin
Im a millennial, by default you are still considered a kid
little schooner
For the school, I'm usually calling them "my peers" or students when I'm having a convo with the networking teacher
hollow marlin
But usually I get called a kid when I call out the senior engineers when they are wrong
little schooner
They can't fathom that younger minds bring great ideas to the table too huh...
My prof lets me correct him all the time
hollow marlin
Many get stuck in their ways and refuse to learn new protocols, design, methods
hollow marlin
I mean...it still is in a lot of cases
lol
Just additional ways to fix its downfalls
clear igloo
Mesh all the things!
nocturne harness
Yeah, I feel like a lot of critical networks have moved away from the design though, no?
hard to make real fault-tolerant hub and spoke designs
hollow marlin
@clear igloo Like this?
clear igloo
yes
hollow marlin
Guy I know just got thrown in to fix this project. Yes, that is 30+ 2960x's in full mesh...L2
L.....2
clear igloo
shudder
nocturne harness
😬
clear igloo
^ yes
nocturne harness
nah, gotta use some homemade PoE injectors 😉
nocturne harness
lmao
I did accidentally kill a switch once using a PoE adaptor
it's was v sad
The $25 netgear didn't know what was comin
clear igloo
I've killed things I was trying to power with PoE
hollow marlin
Yeah I told him to just burn it to the ground and bail. I cannot imagine troubleshooting that dumpster fire
clear igloo
show tech spanning-tree detail >:D
thick minnow
looking for a good gigabit wireless access point
nocturne harness
mmm imagine a broadcast storm
craggy parcel
Spanning tree Will procent a storm.
hollow marlin
Pfff...how about imagine the cost. Each of those is the WAN. 48 MPLS circuits per site
clear igloo
Yikes!
hollow marlin
@craggy parcel Until it doesnt
craggy parcel
It does untill someone disables it.
clear igloo
Unifi AP
thick minnow
which one?
nocturne harness
Would spanning tree prevent L3 broadcast storms?
thick minnow
looking for something that can do gigabit speesd
hollow marlin
@nocturne harness You mean route loops? And no...I mean depending on setup not directly at least
craggy parcel
Would spanning tree prevent L3 broadcast storms?
@nocturne harness Broadcast on layer 3 does not pass routers. And then we are back to layer 2.
vapid dune
What do you mean gigabit speeds @thick minnow
thick minnow
i have gigabit internet
i need to use a wireless access point that does not bottleneck my internet
hollow marlin
If your goal is gig wifi, you're doomed to fail from the start
vapid dune
even if you went to wifi 6e at this point, it's just not a good solution
with AC stuff, you'd need to have 4x4 support
hollow marlin
Which most devices don't have. Which is why it always ends in failure
vapid dune
that page I just found is super comprehensive
puts the nanoHD as good value, but it's not like you'll get the speeds you're looking for really
I mean are you really going to download gigabit on wifi...
stuck night
YES, I finally have set up my Minecraft server. It has a domain, I own it at home, does auto backup, runs automatically on boot AND is in Linux, so I can give it 90% of my server ram.
hollow marlin
@waxen scroll Someone at a point in time said, yeah this look right
little schooner
@hollow marlin it's such a bad question right there
thorny vector
@hollow marlin it’s always true
south blade
You guys solder?
If the tip of my soldering irons looks like crap is it salvageable or is it done? 😛
thorny vector
@south blade it’s done, unless you’re solder big stuff
vapid dune
Tips are usually replaceable I thought
dire flare
They're replaceable & not all that awfully costly. Last time I got weller tips I paid something in the 10-15€ range
Also define looks like crap? As long as you can still tin it you can do work
strange silo
@burnt oasis Yea by phone I mean POTS so I know it's not data network related at all and I like to know which cables are APs so I can easily power cycle them if I have to. VOIP phone would just be general data
distant wedge
Tips are replaceable unless you buy a cheap solder gun that has the tip wired directly into the power supply. I’ve seen many soldering irons do this as a “you must continue buying me” f-you moment
little schooner
Comcast does a lot of letter f letter u pricing to current customers
burnt oasis
Anyone ever buy PoE analog clocks? lol
hollow marlin
Schools use them I think right? To sync the time or time change?
lean pollen
Schools I went to def dont, they had to be adjusted manually
rocky badge
We don't have any clocks, but intercoms are PoE
hollow marlin
One of our entire CO just went down due to power, both generators failed to kick on...yay
waxen scroll
your building engineer was sleeping
should have been obvious it was failing
WHY U UPS for 5min?! time to run to the electrical room
@rocky badge be a building engineer. cant outsource that to india
rocky badge
oof
hollow marlin
@waxen scroll There was an issue with voltage drop that was low enough it didn't kick them over nor did many PSU fail from A to B. Shit show of try to find out why so much failed.
hollow marlin
Emergency ticket has been open with our 3 power companies. Core stayed alive but everything on AC shit the bed
little schooner
@waxen scroll at university, the building engineers leave the entrance to the core power station (or whatever its called) wide open for anyone to just walk right in.
I don't know if there's another doorway that asks for badge to get in further though
Maybe they are tired of opening and closing the door with things in their hands
At the same time, animals can take refuge inside
waxen scroll
if i recall i worked on a massive campus that also had an unlocked door to the power station
ofc i went in
ofc i opened the panel to the power meter computers
i was supposed to be there but i dont recall a locked door
little schooner
Well there's a weak point right there
But who is really gonna want to do that to my school?
Low risk
waxen scroll
@little schooner i once tried to tailgate into a controlled area
it worked until the supervisor of the damn building was walking out the door when i went in without scanning
😄
little schooner
Soooo close
waxen scroll
yepppppp
pretty much told him "yeah ok, your stuffs not getting fixed if i cant get in"
i still got turned away
the building was full of drugs
soooo
xD
vapid dune
it makes a good heated bed
burnt oasis
Schools use them I think right? To sync the time or time change?
@hollow marlin most of ours currently are battery powered, not even atomic. New addition we are installing is concrete and steel reinforced, so doubtful atomic would work -- so i'm just doing PoE.
junior valley
At my school clocks are powered by batteries and comunicate with a national radio system that tells the clocks what the time is daily at 4pm
hollow citrus
Guys, I have a problem with my network setup(mikrotik), bascially I have connected an accesspoint and 3 vlans, vlan10(main), vlan20(guest) and vlan30(iot) on ether7, vlan10 is supposed to be connected to the normal lan and the other two are not, the problem is that sometimes on vlan10, when connected using the accesspoint, the connection sometimes works and sometimes it doesn't, meaning that packets are comming in from the target device but none are comming out from the router
hollow citrus
also vlan10 has the same address space as normal lan without vlan
hollow marlin
@hollow citrus I didn't think mikrotik would let you assign the same space. You cannot have two vlans with the same address space
hollow citrus
that sucks
vapid dune
o.O isn't that normal to have different subnets
burnt oasis
why would you want two vlans with the same subnet? I can't think of the practical use for that.
thick minnow
Yeah Me Too
hollow marlin
It doesnt make routing a nightmare, it breaks it completely
waxen scroll
you can do it with VRFs
linux based routers can also do VRFs but its not called that
hollow marlin
VRFs are technically only with MPLS. Juniper VRF-lite = virtual router which since most linux routers base off them I assume a similar name?
thick minnow
Trying to configure an old ISP router as an Access Point? Should I turn on NAt
Yeah
or u can leave it off
thick minnow
Do you guys think that Windows "sharing" network is any good?
Since i wanna use one harddrive of my main pc as a storage network drive for my family.
vapid dune
I mean windows shared folders are fine
but really is your PC a good place to store stuff
burnt oasis
Fortigate supports virtual as well so many VRF's per VDOM.
thick minnow
@vapid dune what do you mean with that? Safety concern orr...??
vapid dune
no, I just mean are you just dumping it to a hard drive? what's the point? it's not backup I hope
thick minnow
it's a harddrive that i have left over on my pc, i'd like my family to use it while my PC is on and they basically use laptops with low storage on them.
It's basically for saving images, perhaps videos, just private stuff that they need.
vapid dune
personally I'd go cloud with stuff like images
especially ones you don't want to risk losing
putting everything on a single hard drive isn't a good idea imo. you need some redundancy
I mean hard drives + cloud would be even better
thick minnow
I've thought of creating an "owncloud" service with my raspberry but idk how that would work with an HDD drive...
vapid dune
or offsite backup in place of cloud if you want it to be private
my point is to not use a single point of failure
ie one single hard drive
thick minnow
hmm, alright. thanks for the tip, perhaps i'll just install another one for backup.
vapid dune
even with multiple hard drives make sure you're doing checks on the data and hard drives frequently
thick minnow
alright
vapid dune
I mean you can certainly make copies of stuff into hard drives that then sit cold
not sure how long those last but at least it's not active
thick minnow
I've as of now have not run into a harddrive problem yet.
vapid dune
I mean to your initial question, shared folders are fine lol. I use em to pass stuff around and what not all the time
junior valley
"Hey lets do some server stuff!!!!" Wendal
fresh copper
I always thought about making a IPv6 only raspberry pi colo. The only problem is that unless people bought their own pis, the RoI is just too low to be worth it unless you have a huge number of them and run it for a long time. Even if people bought their own pis, there is still the power situation since supplying 5v at a high amperage is difficult to do well since not many power supplies are built for that.
hollow marlin
IPv6 is the way to go
vapid dune
it's definitely the way of the future
I think routers and what not just need to catch up
cedar igloo
Any recommendations on what I can do with my servers? I've created a full enterprise windows infrastructure, but now, it seems I have nothing much to do to improve it
Any recommendations on projects that companies could actually use would be great
waxen scroll
@hollow marlin i believe VRF-Lite can do it too but needs external help
theres no labels
im trying to remember if you could do statics between them
i feel like ive seen it
hollow marlin
If you want between VRFs, static to global then static to other verf. Or in juniper land, tunnels for days!!
thorny vector
@cedar igloo ever get any ideas on what to do?
thorny vector
Good. Pihole or some other dns black hole?
rocky badge
Pi hole
thorny vector
Now it’s time to collect all the logs
thorny vector
Aren’t iot devices great with their heartbeats back home to the mothership?
rocky badge
Yeah
That's why I'm forcing my DNS, I cba to stop direct IP though lol
iirc google hardcodes their DNS
thorny vector
I have it a simpler way. I just have it so that any dns request not from one of my dns servers just gets dropped at my gateway
thorny vector
I’m thinking about renaming my edge router terry crews
thorny vector
rocky badge
DNS1 is the master
DNS2 & DNS3 pull their config from DNS1
All pi hole lists, domains, manually blocked/whitelisted, etc are the same across all 3
I want to replace this switch AAAAAAAAA
I want a Nexus 5548UP
lilac tree
can anyone advise on a good server rack for home. Looking at either getting a sysrack or istarusa rack, just looking on advise which way to go.
twilit magnet
how many units do you need? @lilac tree
So... I got bored and bought a firewall. I then thought about it more and I decided I should use that with my server so I did more research and bought the stuff to do a whole rework of my network
vapid dune
lol
thorny vector
I’m gonna stop going up to the tech support channel. It’s filled with nothing but people apparently incapable of googling
fresh copper
In my opinion, this is the only good channel on this server. Though maybe the ones with stuff I'm not interested in are ok, but the other. pure tech ones are not so great in my opinion
thorny vector
##networking unite!
Seriously though, this is more of a cyber engineering channel than pure networking. Maybe we should see about getting the name changed
fresh copper
It's more of a general enterprise tech at home kind of channel
thorny vector
@rocky badge I think half of us are past the mini part
rocky badge
lol
well I mean as in the homelab discord server
Not an entire discord for it but a channel for it
thorny vector
In my experience, that place is filled with snooty people just humble-bragging all the time
rocky badge
Yeah
fresh copper
Yea, I see you're in the "official" homelab server with me @thorny vector haha
rocky badge
Some of them are bad lol
thorny vector
“What do you mean you don’t color coordinate your cables, and use current gen hardware? R*10’s are so old, who uses those anymore?”
fresh copper
I muted the whole server and never look at it. I'm in like 11+ (depending on how you count) tech related servers so I just don't bother with the ones that don't have great communities
rocky badge
Released in 2009
thorny vector
Not saying they aren’t getting up there, but they nice and sturdy bois
fresh copper
I'm still running a bunch of stuff on a partially working Ubuntu VM on VirtualBox on macOS on an XSeve 2008 if you want to talk about things that are old and hardly working
thorny vector
Yoooooo, I’ve been trying to get an Xserve for my lab, so I can have a legit Apple esxi host
rocky badge
Since I've got a C2960S-48LPS-L
thorny vector
But everyone sees apple on it, and marks it up
rocky badge
I might keep my US-8-60W
Or I might replace it with some USW-Flex-Minis
Since I don't use the PoE on the US-8-60W anymore 😂
My Cisco access switch does PoE now
fresh copper
For whatever reason, the network card or macOS or something does not like promiscuous mode so I have to have the VM have the same mac address as the host which somehow works somewhat but means that I can only have one VM on it
rocky badge
plus these are just $29 + shipping https://store.ui.com/collections/unifi-network-routing-switching/products/usw-flex-mini
thorny vector
That’s really odd. Ever try throwing another network card into it, and seeing if that works?
rocky badge
I can get a 32 port 10 gig Cisco Nexus for around the same price as a 16 port 10 gig UniFi as well
fresh copper
Here is a pic with my XServe. It's not my rack, I am only rending space for the XServe and the switch above it, the rest is not mine
rocky badge
I need a rack lol
fresh copper
I actually tried both the internal network card and another PCI one but neither work for some reason
thorny vector
Cisco can die in a hole, their new monetization model is horrible
rocky badge
the little 4U mounting bracket thingy I have is too small lol
I'm looking at a 25U rack
I'm only using that UniFi switch for 10 gig now 😂
if my Cisco switch had 10 gig already, I probably wouldn't use it
fresh copper
If you have an ASN, a 10G router (and not just a linux VM unfortunately), then Herricane Electric will give you a free rack in their datacenter. Specifially:
Hurricane Electric will give anybody that has their own ASN and IP
address space from ARIN, RIPE, APNIC, LACNIC, or AFRNIC free colo
(cabinet + power + internet) in our Fremont 2 data center subject to the
following conditions:
* Have your own IPv4 or IPv6 address space and a public ASN registered to you.
* Install a real router with at least one 10GE port than can carry a
full IPv4 and IPv6 routing table. The router needs to be Cisco, Juniper,
Extreme, Arista, Ubiquiti, or Mikrotik and be able to carry a full IPv4
and IPv6 BGP table.
* Configure and run IPv4 and IPv6 BGP with at least one other network in
the building using a public ASN and your own address space (can be HE or
anybody).
* Connect to FCIX, SFMIX, and/or AMS-IX Bay Area. (FCIX is offering free
ports, not sure if the others will donate a port to you.)
* List your network in peeringdb.com as being present at the Hurricane
Electric Fremont 2 data center.
* You aren't already in the Fremont 2 data center running BGP.
The power included (at no cost to you) is A&B 20 amp 208 volt power. A
gige Internet connection is included at no additional cost.
Note in order to keep this oriented towards legit networks we require
that the router actually be one of the specific router brands listed
above and not just a Linux server.```Huh, that’s pretty cool
fresh copper
They only announced it via a Reddit comment (https://www.reddit.com/r/ipv6/comments/g6v7b2/comment/foisizz?context=3) which is very suspicious but it's a real deal, I have been moving some stuff into mine
rocky badge
I'm wearing that T-Shirt now
thorny vector
I gave up on ipv6 on my network when I could only get a /64 from my isp
thick minnow
@rocky badge are you a blob?
rocky badge
🤔 maybe
thick minnow
Cool
rocky badge
thorny vector
I have a /56
@rocky badge I have immense anger
rocky badge
lol
fresh copper
So far I am using up a very nice 0 amps
fresh copper
I think I can get a /56 or something from my ISP but I can't quite remember. I have a /48 and a /44 of my own space but I can't use it at home of course
thorny vector
Xfinity/Comcast
rocky badge
Ah
rip
someone said they can get a /60
but they had to set it and leave it for a while
fresh copper
I think ISPs pretty much everywhere suck in general but the US is especially bad in my opinion
rocky badge
I only hate my ISP (Spectrum) for slow uploads
But IPv6 is fine, download is fine, peering is fine, no data caps, no throttling
fresh copper
Yea, same here, I get super slow upload even though I am paying for quite good download. They took forever to get IPv6 but now that they do, I am very happy. Since I have my own IPv6 space, I am so much more used to working with IPv6 than IPv4 so it's great to have
rocky badge
yeah, 200/10, 400/20, or 940/35
:/
We're switching to AT&T Gigabit sometime though
fresh copper
I'm visiting my parents because COVID closed down my uni, and they get symmetric speeds since they use a fiber ISP rather than a cable one
rocky badge
nice 😄
fresh copper
vapid dune
I'm with Telus too
thorny vector
Great, now I’m not getting any ipv6 lease XD
rocky badge
rip
fresh copper
I use Shaw personally
vapid dune
fresh copper
Nice!
rocky badge
I'm on WiFi rn oof
But I max my internet speeds 😂
I'm getting 320/420 internally though
cedar igloo
@cedar igloo ever get any ideas on what to do?
still no ideas really.
stuck night
I have 1000/300 but that’s a speed test on my phone
lean pollen
Why do people bother with PfSense?
hollow marlin
I dont like it but there are good reasons to use it
lean pollen
What does it do that a out of the box router doesnt or whatever?
other than feeling good because it required more work from yourself
hollow marlin
Well you can build one that is more powerful. Many routers still can't handle over 400-600mpbs.
- updates
- IPS/IDP
- Plugins - adblocks, country block, etc
lean pollen
Plugins aka running pihole on it rather than just whatever else?
hollow marlin
Not sure if pihole can be run directly on it, but there are similar plugins Ive seen
lean pollen
Doesnt enterprise routers have IDP?
or non cheap ones
I know nothing basically but are curious
hollow marlin
No, enterprise firewalls with NGF (next-generation firewall) do. Its very wide in its coverage but honestly only the malware inspection is worth it. Stuff like Unify's IDS/IPS is really just a waste. I only think it does inspection on traffic trying to brute force in to itself
vapid dune
that's like asking why people choose this distro over that distro
or isp provided router over your own
lean pollen
nah, not really
hollow marlin
To me the power consumption vs a pfsense box max little sense to me. My hAP ac2(s) handle everything I need and sip power
waxen scroll
alllllll of it
muh ubnt tho
@hollow marlin i want the new CML: 2.0
but lurick holding out on free licenses
burnt oasis
Just get you one of these bad boys https://amplifi.com/alien
thorny vector
@hollow marlin what do you not like about pfsense?
hollow marlin
@waxen scroll haven't looked into it yet. I have to stick with EVE-NG because I need my lab with Juniper images as well as cisco
little schooner
I like OPNsense better
The interface makes a lot more sense
OPNsense even makes free radius dead simple to setup
I was up and running with certs in less than 5 minutes
rocky badge
I use my domain controllers for RADIUS
I'm currently running pfSense lol
I'd like to replace it with a ASA or Firepower running ASA code but $$$$ for one that does gigabit
little schooner
@rocky badge radius for windows clients or even mobile clients too?
It just wouldn't work for me
little schooner
What does your crp look like
rocky badge
IoT and guest are standard PSK
little schooner
I couldn't get it to restrict it to tls only
rocky badge
C reactive protein?...
little schooner
It kept dialing
rocky badge
lol
rocky badge
Ah
little schooner
Oh yours is allowing user+Auth though
I was trying to restrict it
Basically I only wanted eap tls
rocky badge
Yeah I have EAP TLS + MSCHAPv2
rocky badge
you have a CA and issued client certs?
little schooner
Yes
It says it cannot find usable eap method something something
As the reason for decline
little schooner
Maybe it's just my server
little schooner
Yes
little schooner
Yeah to AD
rocky badge
So RADIUS is working just not EAP TLS
rocky badge
little schooner
Yeah I got that setup right too to use nps server cert
I was trying to stack Network Policy conditions
What does your conditions section look like?
Maybe the stacking of them causes it to not match the policy for me
little schooner
Oh dang so yeah your policy doesn't restrict it to only accept eap tls
It just makes sure it's Nas type Wifi
I did the conditions that restricted eap types
I forget what it's called but you can see them in there if you click add
Something something eap something something Microsoft smart card or certificate
They are two different conditions
little schooner
Yeah when I have both those active
It wouldn't work
If take them out, it works
But in theory it should work
But Microsoft says a big NOPE
The work around was to add a Radius group of users that is empty and then you don't have to worry about disabling mschapv2
Because there are no users who can authenticate to get in the first place
Then, only certs would work
I gotta work on my sentence structure xD
rocky badge
lol
little schooner
@rocky badge ahhhhhh I have so many tabs open that it shows this
rocky badge
Oof
waxen scroll
why u oof
rocky badge
little schooner
@waxen scroll hmmm the feels are probably still raw
I just closed out all my chrome tabs
I'm a happy camper again.
waxen scroll
good
little schooner
@waxen scroll how long do you think until network troubleshooting becomes obsolete? Or never?
If they can hire AI workers instead
And by that I mean simulated people who learned the skill on their own and lives among humans but digitally
Its a little weird to imagine
A digital AI being requiring a living wage
waxen scroll
lmao are you reading reddit?
waxen scroll
someone made a post like that today
little schooner
Ohh really?
Well it's coincidence
I didn't read any of that on reddit
I'm happy that other people are thinking the same
waxen scroll
we have a LONG way to go IMO before we replace humans due to network automation
you'll need to know it though otherwise it might be harder to get a job
the companies who are doing automation for troubleshooting are massive networks and they need a massive amount of staff in the first place
for example, telcos have scripts that run when you open a ticket and the computer determines if a fault does exist before sending it to a human
sometimes it will automatically reset the jack and see if that fixes it
this is just my opinion, and maybe im old school, but i hate the thought of manual automation and i think its a risk to any company trying to put it in who arent hiring dev teams to specifically make a whole app for it
i dont see manual automation being used day to day in most companies
manual automation... python scripts, bash scripts, any kind of script thats not bound to a supported app like ansible tower
for example, i use python to help me do my job faster... but i dont support or share it (in most cases). i can walk away and the company network will continue to run and be supported by others. if they adopted my script, what happens when a new OS version breaks it?
...i thought we were having a conversation here
fine, whatever. lets shift gears
What does a L1/L2 network tech do at most companies who are big enough to have such a title?
little schooner
I had to step out for a moment
@waxen scroll probably not much
L2 barely breaks
waxen scroll
no no, i mean skill level
little schooner
Oh
I dunno, what do they do? I haven't worked in the field yet
Since internship don't count
I've only done small labs
waxen scroll
Includes but not limited to: cable running, rack and stack especially if gear fails, answering user tickets for "its slow" or "it doesn't work" or "i need new X", in depth tshoot... tracing paths, looking at counters and logs, maybe wireshark
an automation system might be able to go "oh, this path has errors" but how is it going to tell why and correct it?
little schooner
That's true. It has to physically be present to go and fix the problem
Software can't fix real life
waxen scroll
and troubleshoot is HARD depending on whats going on
waxen scroll
for example, the other day my work had performance issues on a port. all logs and counters looked great
turns out we had to run some obscure hardware command to see that the backplane / ASIC for that port was overloaded
not enough to drop traffic
maybe the network performance issue is caused by proxy #3 in a pool of 10
could automation help catch it? maybe? depends. but you need someone smarter than that to go look into it
anyway this is before you even discuss network engineers
thats where you need lots of brain power
to properly automate, my view is either you need a dedicated dev team (good luck firing them after the product is live) or you need one or more existing solutions at a stupid high cost and it wont cover every scenario.
ive worked for a few major companies and nobody is even coming close to the automation you're worried about
its only the big telcos
hollow marlin
@waxen scroll what command did you need for ASIC level? Id be interested in that for even future troubleshooting
waxen scroll
its specific to the 6500s but i think it was "show platform hardware capacity fabric"
little schooner
@waxen scroll good insight
Yeah I should brush up on some python stuff
I only do automation with powershell right now
Doesn't translate well to switches and routers
But I want to do cloud administration more and specialize in something
It would be a good challenge
@waxen scroll on the Cisco exam, I think they do test on those obscure commands
But maybe like 1 or 2 and done
@waxen scroll I was scared during the simulation part because I was working with a 1024 by 768 screen
Basically a tiny screen and lots of scroll bars
It wasted so much time
hollow marlin
@little schooner They don't ask those deep of commands until you get to the CCIE
little schooner
@hollow marlin that's a relief
hollow marlin
They ask some off the roads commands but 1 or 2 at most
little schooner
Because the things rarely break for us to even use it often
It's like one off stuff
Unless or course you work in the big enterprise stuff
Well then maybe you use the commands more
hollow marlin
Never have to go that deep. Most typical commands will show what you need. Like ASIC problems will show symptoms elsewhere like show interface with drops or output queue drops
little schooner
Yeh
Wish my other cheap gear let me run command line stuff to check
The GUI is just okay at showing the stats
The netgear switch I have has one of the worst processors to run it
I think it might be causing my latency problems
Sometimes it's http web page refuses to load outright
hollow marlin
The switch chips should be taking the load unless you have L3 running on them
little schooner
Just L2. It did lockup one time. All ports were lit green, no flashing
For no reason.
I thought the cpu died
hollow marlin
If CPU is involved in switching then its a crap switch
hollow marlin
But like Mikrotik sometimes the switchchips are bundled in 4 and 8 which can overload them
little schooner
This one @hollow marlin https://www.netgear.com/support/product/GS108Tv2.aspx#download
I never recommend it. It is sooooo slow to configure in web gui
They have v3 version now
Glad they realized it was a joke of hardware
@hollow marlin baltic networks is a vendor I see that sells mikrotik stuff at the discount price
Where do you buy yours?
hollow marlin
Personally, Amazon. Previous job through our vendor which got them through another vendor, not sure who though
I get what I can through work at a vendor price of what we used. Still want to pick up a CSR3xx though to replaced my Juniper 2200-12c
hollow marlin
Again, VLAN config still drives me up the wall which is why I want to stick with Juniper but a 2300-24p is like $600
wind bison
its only $15, snag 2 of them and you get an extra port @little schooner
use one of the ports to pass to the second one
little schooner
@wind bison I need the vlan support from it
That one says unmanaged
@hollow marlin ohhh and netgear is the only company that thinks setting your own Management VLAN is a "feature".
If it supports vlans, it doesn't make sense for the management interface to have vlan restrictions
Literally can just piggy back right off of it
Unless of course it's more complicated then that, which is almost certainly the case. I don't build hardware
But still....
waxen scroll
It makes sense
little schooner
@waxen scroll enlighten me
waxen scroll
MGMT is only for MGMT. You plug it into an OOB network. No vlan needed
little schooner
Well yeah.... But tagging is nicer
little schooner
Couldn't anyone just plug in though
@waxen scroll wait are you saying I shouldn't be tagging management vlan and just leave it on the bare vlan 1?
It caused me a huge headache before because I had trouble maintaining access to switch after making the vlan changes
But if I wrote it down on paper the order of steps, I never got locked out
little schooner
@rocky badge what I ended up doing was making some ports untagged into the vlan I wanted mgmt to be in, then make the mgmt vlan change and switch ports
And continue access
hollow marlin
@little schooner Thats where Juniper commit confirmed makes life so much easier. Also in Mikrotik you can do secure mode where if you lose connection from a change, like VLAN management, it automatically roles back
little schooner
@hollow marlin yeah like that right there is real handy
hollow marlin
I wish Cisco would finally push that to IOS-XE as they already have it on IOS-XR
clear igloo
It kind of is coming in 17.3 I think but only for SD-WAN mode I believe
hollow marlin
Of course SD-WAN only 🙄
vapid dune
go buy them and find out
hollow marlin
Like mentioned before, just choose a router in your price range. AP mode should be fairly similar between most
hollow marlin
Bet $100 there isn't any noticable difference if all you want is straight AP mode
waxen scroll
you didnt say it wouldnt improve performance so MAKE THAT BET
little schooner
@waxen scroll I'd buy both with Amazon return policy and return the one I didn't want
It's a safe bet
Unlike with Newegg, that slaps restocking fee
It's enough to make me avoid them
I always return the item back in New condition
waxen scroll
now that newegg charges tax i dont buy there unless the base price is like $100 less
little schooner
I still remember when Newegg reported everyone from CT of unpaid sale taxes
That was a dirty play
And guess what they pretended to say that CT residents didn't have to pay for it, despite the state saying, yes you HAVE to pay no matter what Newegg is telling you
Then Newegg sent another email saying sorry for saying that CT res didn't have to pay
And sorry for ratting everyone out without first asking them
A disaster. The way B&H handled it was more professional
There was no scare email
@lean pollen it's a 4x4 unit but the audience from mikrotik is probably better
And cheaper
But only get it if you really need that
You can get away with ac lites np
I don't recommend the FlexHD now because my unit has a long startup delay before wifi actually starts working
waxen scroll
@little schooner cause you're using radar bands
little schooner
@waxen scroll am I? I will double check that
If that's the case well ....
Silly me
waxen scroll
my AP has a long delay too cause it has to scan those bands to make sure its not gonna interfere
waxen scroll
@hollow marlin
little schooner
I'm glad that it came down to being user error
Now I am more educated
Where does it say that in the docs though
I know it says the scanning stuff
I just didn't know it affected startup
Neat
waxen scroll
i dont know where i read it, i think its in the spec as a government requirement
little schooner
I see
waxen scroll
When using DFS, a device selects a DFS channel to use and, prior to initiating communications, it monitors the channel for a certain time to verify no radar systems are present. If radar signals are detected during this channel start-up period, the device doesn't use the channel (and avoids it for the non-occupancy period), then selects another channel and starts again.
👀
if you locked a channel in and radar is detected, it should stop broadcasting all together and try again later
mines done it once
waxen scroll
@little schooner now that @clear igloo doesn't post on the forum and I have no account... you can only get top advice from here 😷
hollow marlin
@thick minnow AP mode is just an AP bridge (essentially a wireless switch). You can put it behind a switch
hollow marlin
@little schooner wtf is up with Mikrotik stock. Rb4011 is normally $169 but it's $450 on Amazon
waxen scroll
DBag seller probably
fresh copper
I wish in was $169 in Canada haha
hollow marlin
Appears to be low stock accross the board. Min2-300% markup
little schooner
@waxen scroll only the best advice
@hollow marlin I know why it gotta be so expensive
I have to buy from vendor website
But the restock fee is scary
burnt oasis
everything on amazon seems to be jacked up right now
100% markup on some EK waterblock stuff for example.
little schooner
Yes because the US dollar is going to be worth nothing soon
They are throwing it left and right printing
Inflation here we come
little schooner
I'm sure it's both
burnt oasis
supply and demand and little oversight on the rules of gouging.
little schooner
Hard to win all the time
lean pollen
@thick minnow Ethernet ports do still work if you put an Asus router in AP mode
It's basically the router part you turn off.
lean pollen
Why do Asus have routers that is the exact same just two different names?
so stupid
for example RT-AC2300 and RT-AC85P
lean pollen
They are listed as two different routers both on Asus webpage and some stores have one while others have the other, but hardware is the exact same
Ment RT-AC2400
I think the AC68U and AC1900U may also be the same internals, but there there at lest is one little difference of the outside casing
But those two, AC85P and AC2400 seem to have the same casing too
waxen scroll
according to the compare tool theres no difference
oak prism
Hi there! Just wondering if any1 here has any experience with a home nas thinking of using one for an upcoming project, but im not sure if their suitable for high write rates (1 new file every 0.25 seconds for about 1-2 hrs straight)
lean pollen
Depens on the files and sizes
lean pollen
Then it depends on the NAS
oak prism
Thinking of a diy build
lean pollen
One with a single HDD for example would not work I dont think
lean pollen
If you mean 69 Mbytes 4 times a second
oak prism
yup
lean pollen
thats 276 Mbytes/s
oak prism
yup
lean pollen
more than a single HDD can take
lean pollen
SSD would be fine
lean pollen
Its also faster than normal 1 Gbit networking
Yes, write speed if its going to the Nas
oak prism
ok
lean pollen
as 1 Gbit/s is about 110 Mbytes/s ish
lean pollen
Well, NAS is really a storage server
Is it from a PC or phone to the NAS/Server or from a camera or someting?
oak prism
essentially im trying to take a photo every 0.25 seconds with a raspberry pi and then *read that file on another pc so im wondering if a home server with storage would be better also i dont have more than 1gb internet but they would all be had wired together so i assume it would not be a problem
charred meadow
Why are the images from a rasberry pi 70MB?
lean pollen
Raspberry Pi connected to a real camera?
lean pollen
Why would that be 69 MB?
oak prism
i was looking at the wrong figure
xD
my bad sorry about that
i was looking at the figure for another camera
the jpg file would be about 2.4mb
so thats 9.6mb a second
lean pollen
then its a hole other ballgame
oak prism
i presume a nas could do that using a hdd
lean pollen
yes
oak prism
Ok
thanks
any would pretty any hdd be ok (write speed)
also it would be about the same situations for reading
lean pollen
Should be
lean pollen
Reading is easier than Writing
oak prism
ok
" also i dont have more than 1gb internet but they would all be had wired together so i assume it would not be a problem"
like ethernet cable from rpi to nas and pc to nas
Or is it a problem?
lean pollen
Should work fine as long as you have the software for it (I dont know much about that)
lean pollen
(I mean for the Raspberry pi to see the nas and push the photos to it)
lean pollen
No
oak prism
ok thx
lean pollen
Not if your photos are 2,4MB each
lean pollen
Actually, Rasberry pi might have a 100 Mbit ethernet port and not a 1 Gbit one, so that might be close but I dont know
lean pollen
it would not be the NAS that is the problem
oak prism
rpi4 has gigabit
lean pollen
oh
oak prism
Yeah I had 3 its was very limiting for lots of proj's
@lean pollen I just checked the wifi conn in the room that the nas, pc and rpi will be in and its 72.3mbps so i dont think i will even need to connect the rpi to the nas via ethernet considering its only 9.6mb/s?
plus theres loads of documentation on wifi mounting a nas to an rpi over wifi but very little for ethernet
U think wifi would be an issue? just for rpi
the rest can be ethernet connected (pc,nas)
and the rpi will have a wired internet connection
little schooner
@oak prism on wifi, I get close to gigabit speed with my desktop. On the pi, it probably won't be that fast
If it uses tcp to send the files over, there's nothing really to worry about
rocky badge
https://blob.rocks/VAtIyIoVfu.png
FreeNAS time
vapid dune
first time using it @rocky badge ?
rocky badge
Nah
rocky badge
10GB Just trying it out in a VM right now with my H310 passed through, 3x600GB, with those disks operating in non RAID mode
rocky badge
Yeah
vapid dune
I'm running mine with mirrored vdev
a bit of a waste at 50% space but I don't buy my hard drives in large numbers
rocky badge
😄
vapid dune
can't be bothered to buy sets of 3-5 drives lol
rocky badge
I'd love to get a Synology
vapid dune
I can stomach 2 drives usually though
rocky badge
But I might go R720xd/R730xd and FreeNAS
vapid dune
nice nice, how many drives for each of those?
rocky badge
Depends on the model you get
vapid dune
I'm just using a desktop case lol. it's already heavy enough and it's mostly just me moving it around
rocky badge
There's a 2.5" and a 3.5" model
vapid dune
lol... minus the hot swap I think I can fit ~12 3.5" drives in my desktop
but those do look nice
rocky badge
Lol
Yeah, 3.5" will be cheaper and comes in larger capacity
but 2.5" just looks badass lmao
vapid dune
I was considering getting an additional case and just running a sas cable between them
rocky badge
vapid dune
then again probably don't need that many hard drives. better to just upgrade my current ones or something
I always see people saying "use ECC ram"
rocky badge
vapid dune
do you plan on needing a lot of compute on your nas?
vapid dune
I only just moved away from an atom processor lol
rocky badge
All it would be is iSCSI + NFS + SMB