networking

[plain siren]

But yes, amplifi.lan is your routers broadcasted local domain

the intention of running your own authoritative NS would be to have that be where it says "This is our local domain"

In larger multi-geo networks, you have your root domain "root.tld" and then lets say.. physical sites:
home.root.tld
office1.root.tld
etc

Your authtv. NS would delegate that part of its zone (the root.tld) to the nameserver on site to set that local domain (ns1.home.root.tld would be authtv. for home.root.tld)

[west vortex]

oh damn

that's hella information

lmao

[plain siren]

yeah its actually somewhat complex but it makes sense at the same time

In your case, its an easy setup.

However, its not something you wanna start carving at until you consider a proper network design in head

[west vortex]

Well I can't do much with my router. It's an Amplifi Alien, so the settings are super simple

[plain siren]

the DNS is usually that tree that everything grows from

[west vortex]

It just lets me add my own DNS servers and a few other networking options for the most part

[plain siren]

You got curious

and dug

[west vortex]

Like I said, I just want it to be able to say "Okay, I have these two DNS servers working" and if one goes offline, it will use the other. I want both DNS servers to access the root servers out there in the world instead of asking Google DNS or Cloudflare for the lookup info

[plain siren]

Oh thats just a Cache Server

Lol authoritative

Naw,

[west vortex]

I thought authoritative was the term for that kind of local DNS

[plain siren]

DNS Servers that you design for that are meant to assign domain names and host names to machines and give you a local structure

A cache/relay/proxy

thats just...

that

[west vortex]

Okay so in my use case it's just a cache/recursive DNS?

[plain siren]

Setup 2 Raspi's and do the following: You put one in 1 box, 1 in another

and yeah you got your recursive

[west vortex]

Yeah that's what I did, except they go into my router so that it's automatic for all devices

[plain siren]

Yeah

DHCP DNS Option

[west vortex]

Except my router is saying my DNS config is wrong somehow, even though it's definitely not

[plain siren]

Ubiquiti

[west vortex]

Maybe a reboot with correct it

DNS is port 53 by default, correct?

[plain siren]

yus

[west vortex]

Okay. So now it's all working

At least, my Alien is saying it is now

[plain siren]

Im clocking out

[west vortex]

And I tested manually in the windows ethernet adapter options, I put in each DNS server by itself, and it works

Thanks again man

[plain siren]

Gnite

and np

[west vortex]

really appreciate it

[slender shale]

Have a 20+ day email chain from an ISP that resells our lines, adamant that we can't tell that a customer is using a VPN on the line

Do they think that traffic is just invisible?

[twin zealot]

https://tenor.com/view/harry-potter-invisible-magic-magical-gif-13477941

[frigid pine]

Just show it to them.

[slender shale]

It ain't my job to prove stupidity at the end of the day.

The customer's had 4 new IP's and gets geo-blocked from IPTV within 2 days every time, if they can't work out it's following them that's their issue

[lean pebble]

I just noticed that when I'm connected to the gre tunnel and pinging my home external IP I get 135ms.

[grave rune]

how do you straight up block countries on Ubiquiti firewall

[twin zealot]

https://www.youtube.com/watch?v=bbYlz5Rls6w&ab_channel=180DegreesITSolutions

[tame carbon]

@tender hazel do you know what happens if you restore a backup of a tik onto another identical device?

do the MAC addresses change

or does it inherit from the backup ?

[slender shale]

I don't know specifically for MikroTik, but the MAC address comes from the chip itself

Unless it has spoofing

[tame carbon]

You can set it

I am just wondering, because it would be nice if it did.

Would make a big installation a bit easier to maintain if I can't be there at any time to fix it

so I need to be able to just tell someone over the phone to plug the new device into their laptop, so I can load the backup on there

before we install it in its location

. The system's backup file also contains the device's MAC addresses, which are also restored when the backup file is loaded.

I think I answered my own question

[grave rune]

Thanks mate

[slender shale]

Well there we go haha

[twin zealot]

np

[grave rune]

[compact python]

[sturdy ledge]

hi is there any way i can tell if my ax200 chip in my pc is using 160mhz channel width or not

[grave rune]

how to fix half the downloads and some web things not working on Ubiquiti security Gateway

[peak cloak]

didn't you just block a bunch of ips

there's your answer

[grave rune]

no

not yet

[peak cloak]

oh

well you have some sort of firewall

idk ubiquitishit things

show your firewall rules?

[grave rune]

I turned off all the firewall rules pretty much I'll get them up now

[peak cloak]

or it could be dns

[grave rune]

How could I change my DNS and what's a good one

[peak cloak]

is your router currently your DNS server

well forwarder

[grave rune]

Ubiquiti is my router

These are all my router options

[peak cloak]

those are static routes

that's not the issue here

what are your dhcp settings

[grave rune]

This is all I've got

[peak cloak]

you have to have dhcp somewhere

[grave rune]

I don't know why it just stopped today

[peak cloak]

ohh

it's under networks

[grave rune]

There are a lot of settings

Do you need advanced DHCP

[peak cloak]

wtf is that

[peak cloak]

oh no

wait

so you don't have internet connection at all?

[grave rune]

I do it works on about 80%

Of websites and downloads I think

[peak cloak]

try to ping 199.255.40.25

that's a epic games ip

[grave rune]

Ok in command prompt or PowerShell

[peak cloak]

doesn't matter

[grave rune]

all good

[waxen saddle]

DHCP name server is set to auto. Set it to manual and you can enter any DNS server.

[peak cloak]

yeah try setting DNS server to 1.1.1.1 or 8.8.8.8

then try

[grave rune]

I am just so confused why it doesn't work and it just started not working

[peak cloak]

I bet it's dns

[grave rune]

Ok I changed it so I try again

[peak cloak]

first you need to renew your dhcp lease

to make sure it uses that DNS server

so

ipconfig /release

ipconfig /renew

[grave rune]

Cool

Now I get the site cannot be reached

I was not given a valid IP

Some stuff still doesn't work

Some stuff still doesn't work

I think it's completely broken now

[peak cloak]

show the output of ipconfig /all

[peak cloak]

dns server wasn't changed

go into windows and change it manually for now

[grave rune]

ok

[peak cloak]

don't change IP settings

just dns

[grave rune]

that what i did

[peak cloak]

no you didn't

show the top part

[peak cloak]

yeah no that's not how it works

exit that

go to general

under that there should be Use following dns servers

or something like that

not on windows rn

[grave rune]

Now the internet doesn't work on it

[peak cloak]

under Alternate Config you need to change it back to automatic private IP address

[peak cloak]

because you changed IP assignment to manual

Go to the Control Panel

Click Network and Internet > Network and Sharing Center > Change adapter settings

right-click the Ethernet interface and select Properties

Select the Networking tab. Under This connection uses the following items, select Internet Protocol Version 4 and then click Properties

Select Use the following DNS server addresses

[grave rune]

It is set to automatic

[peak cloak]

no

[grave rune]

Yes

[peak cloak]

ok

and under DNS enter 1.1.1.1

and 1.0.01

[grave rune]

Did that still got no internet

[peak cloak]

show ipconfig /all again?

[peak cloak]

you forgot the /

[peak cloak]

yeah

no default gateway

urgh

in the normal windows settings make sure ip assingment is set to automatic

[grave rune]

Windows diagnostic couldn't fix the problem

[peak cloak]

it never does

in the normal windows settings make sure ip assingment is set to automatic

[grave rune]

Got it

[peak cloak]

ok

you got internet now?

[grave rune]

Yes

[peak cloak]

ok cool

dns servers are set

try downloading something now

[grave rune]

Normal speed about 100 megabits

[peak cloak]

you sure it's 100megabits

[grave rune]

Yes use two different speed

[peak cloak]

usually game downloads are in bytes

[grave rune]

No I mean speed test websites

[peak cloak]

oh

idk then

[grave rune]

It will not still download

[peak cloak]

huh

idk

[grave rune]

Epic games launcher won't open as well

[peak cloak]

unifi making simple things complicated... as always

[grave rune]

Getting Gateway 502

[peak cloak]

huh

[peak cloak]

epic is probobly just down

yep

https://downdetector.com/status/epic-games-store/

lol

all this

and...

[grave rune]

But I'm also getting you some programs won't download from Microsoft

I still can't install that director X

Getting network config errors

[peak cloak]

restart windows

[grave rune]

Probably just try tomorrow

[grave rune]

I have

[peak cloak]

after our changes?

[grave rune]

Yes

[peak cloak]

huh

idk then

[grave rune]

And I think the Microsoft download service would be reliable

[lean pebble]

its funny microsoft store download speed are super fast I'm downloading there on 15MB/s with 40Mbps vdsl bundle

[limber elk]

Wait 15MB/s is like 120Mbps

[lean pebble]

ya

[peak cloak]

that doesn't make any sense...

[lean pebble]

I know but thats what I get in microsoft store

[peak cloak]

you sure...

[lean pebble]

I was shocked xD

yeah

[peak cloak]

I don't believe that

you sure it was megaBytes

[lean pebble]

yea

[peak cloak]

I don't belive that

[lean pebble]

Next time I use the mstore I'll take a pic

[peak cloak]

you can't create bandwidth out of nothing

probobly just bad reporting

[lean pebble]

Idk but that what it showed and it was pretty dawn fast

[frozen condor]

could just be a caching agreement on the ISPs part with msft

[peak cloak]

but it's dsl

[frozen condor]

oh

[peak cloak]

limited physically

[lean pebble]

I don't think so my ISP is good but my internet infrastructure sucks (they are separated)

[frozen condor]

it could be combining downloading and extracting speed like origin does

[lean pebble]

Idk man origin never was good on my network when downloading I hate them xD

But epic always taking all the bandwidth and crashing my net xD

nvidia to

[frozen condor]

just see your speed in task manager

that's the most reliable way on windows

[lean pebble]

Windows itself isn't reliable at all xD

mtik gre is so annoying

[lean pebble]

anyone know how to setup gre tunnel on pfsense ?

[hollow marlin]

GRE is the simplest tunnel to setup. Instead of trying it on pfsense, can you post your routing table on the VM?

[hot hawk]

i have a wireguard vpn tunnel set up on a ddwrt router, i can connect to it when im on my network, but cant connect to it when i am out side of my network

[tame carbon]

@hot hawk fw policies?

[hot hawk]

?

port fowarding?

[tame carbon]

@hot hawk I assume you are using your public IP to connect, while you are on your LAN?

But that same public IP doesnt work from the WAN side (internet) ?

[hot hawk]

yea

[tame carbon]

if the VPN is running on your router, it will need some INPUT firewall rules

to allow incoming traffic to the router on the wireguard port

your LAN traffic isnt subject to those firewall rules

[hot hawk]

i basically just followed the settings here:
https://wiki.dd-wrt.com/wiki/index.php/Wireguard

[hot hawk]

only "rules" i have atm is the command under "Note for Access Point mode"

[tame carbon]

@hot hawk your interface on your router is listening on a specific port

my guess would be that a firewall rule is blocking traffic to that port

[hot hawk]

does a port forward not add an exception to that?

or its a different setting

[peak cloak]

port forward is just for NAT

[hot hawk]

o

[peak cloak]

usually routers also allow it though firewall as well

but sometimes not

[hot hawk]

this router is in a lan to lan config to my main router/modem combo

i can prob look but im pretty sure i havent seen a firewall setting

[tame carbon]

waaait

hold up

wat

you have multiple routers in your home network?

[hot hawk]

yes

no double nats tho

[tame carbon]

are you sure? :P

[peak cloak]

routers?

[hot hawk]

yes

[peak cloak]

or just switches

[hot hawk]

i am 100% sure

[peak cloak]

routers acting as switches

aka bridging

[hot hawk]

^

[peak cloak]

or are you actually routing?

[tame carbon]

@hot hawk is your entire network a single subnet?

[hot hawk]

yes

192.168.0.x

is the subnet

[tame carbon]

192.168.0.0/24 (for future reference)

[peak cloak]

not a subnet fyi. What crystal posted is a subnet however

[tame carbon]

@hot hawk but the VPN service, is that running your main router?

[hot hawk]

o

[hot hawk]

no

[tame carbon]

then you need to port forward.

[hot hawk]

on the main router

[tame carbon]

Yes.

[peak cloak]

yes

[tame carbon]

Because your public IP is the WAN interface of your main router.

[peak cloak]

of course

[hot hawk]

do i need to do it on the secondary router which the vpn is on r no

[peak cloak]

is the secondary router doing NAT?

[hot hawk]

no

[tame carbon]

@hot hawk wireguard listens on some port, I forget, but pretend its 50100 for a moment

[peak cloak]

then no

[hot hawk]

kk

[tame carbon]

your public IP on port 50100 has to forward that to a local IP

[hot hawk]

i have the local port forwarded, but not the mtu

[tame carbon]

that local IP would be LAN IP if your 2nd 'router'

[peak cloak]

51820 udp

[tame carbon]

close

but no cigar

[hot hawk]

o its udp

[tame carbon]

UDP yes.

[hot hawk]

thats on my main rn

[peak cloak]

and 192.168.0.2 is the IP of the "router" running wireguard?

[hot hawk]

yes

[peak cloak]

ok

go on mobile data and see if it works then

[hot hawk]

it shows sending data but does not revive any data

so it seems no working plus stuff no load

when im on my network it works fine

[peak cloak]

using public IP to connect?

[hot hawk]

not sure i just scanned with qr code

let me see what settings wireguard got

[tame carbon]

@hot hawk can you run this on your PC in your LAN? ping 1.1.1.1 -l 1472 -f ?

do you get replies ?

[peak cloak]

ohh, that makes sense then

[tame carbon]

buuuurrrrrrr

that QR code

encoding private IP

[peak cloak]

I think openwrt or whatever it is, is using your internal IP

so that explains it

[hot hawk]

Berh

[peak cloak]

what's the tunnel IP

up top?

you can hide the last 2 octets if you want

[tame carbon]

wut

[peak cloak]

wut

[hot hawk]

Wait

[peak cloak]

let me check what it shows on my phone

[peak cloak]

yep

[tame carbon]

Endpoint

[peak cloak]

there we go

[tame carbon]

its wrong.

[peak cloak]

the endpoint

[hot hawk]

Berh

[tame carbon]

that should be your public IP

oh what a lovely day in NAT-land

can't we just use v6 already ffs

[hot hawk]

i can just change the ip to my public ip in endpoint?

[tame carbon]

yeah public IP and same port

[hot hawk]

df

ok my public ip is on a tottally different subnet than i last remembered it

smh i may need to account for a dynamic ip grr

[peak cloak]

my "dynamic" IP doesn't really change

on my last ISP it only changed if I turned off my router

but now it doesn't really change at all

[tender hazel]

I use a dynamic dns name for mine

[hot hawk]

yea too lazy to set that up

[tender hazel]

Mikrotik does that out of the box by default

[tame carbon]

@lean pebble #networking message

[peak cloak]

it really isn't hard

[lean pebble]

I have both the pfsense is testing my main gre tunnel is centos 7 vm in cloud

[tame carbon]

post routing tables :P

[hot hawk]

Test

Teat

Test

E

[tame carbon]

ping is a great tool for this

[hot hawk]

Looks like it connects but no internet

🤔

[peak cloak]

use ping

see if you can ping your router

see if you can ping the internet

[lean pebble]

not true

My bad my eyes connected the two sentences xd

[tame carbon]

@hot hawk change the address of the interface. set it to 10.10.0.2/0 to a /32

[lean pebble]

are you talking to me?

[tame carbon]

ye

juan has been trying to help you lol

[lean pebble]

haha

[tame carbon]

but you dont provide information that might help

[tame carbon]

tunnel address is very strange

why would it be 10.10.0.2/0

pretty sure you put individual clients on a /32

[tender hazel]

Yeah /0 is not correct

The /0 would mean the entire internet in one subnet

[tame carbon]

@tender hazel let me just broadcast to you

HELLO INTERNET

[hot hawk]

kk

[tame carbon]

lol when some guy in Internet HQ stumbles and accidentally flips the "global mute" lever

[lean pebble]

    link/gre 144.x.x x peer 82.x.x.x
    inet 10.70.3.1/30 scope global gre-tun1
``` VPS Link

[tame carbon]

I'd expect some distance there..

but its 0 ?

[hot hawk]

still no internet

hey at least the router sees the device

wooo

[tame carbon]

@hot hawk can you ping from your phone to your router?

[hot hawk]

pining 8.8.8.8 no respone

trying now

doesnt look like it either

[tame carbon]

@hot hawk no ping the IP of the router peer on that 10.10.0.0/24

your phone is at 10.10.0.2

[hot hawk]

o

different subnet

ight

[tame carbon]

what is the other peer?

[hot hawk]

10.10.0.0/24 is unreachable

[tame carbon]

yeah beucase thats not an address, but a subnet

[hot hawk]

how to check 😳

[tame carbon]

@hot hawk what IP does the WG tunnel show on your router?

I am guessing 10.10.0.1

[hot hawk]

10.10.0.1 and 10.10.0.0 not returning pings

10.10.0.2 does tho e

[tame carbon]

yeah

with 0ms

because thats the phone itself

@hot hawk https://i.imgur.com/Ac8uTFV.png

[hot hawk]

not sure where to enter in the interface ip cuz i dont see an option e

[tame carbon]

you created a tunnel called oet1 ?

that interface has an associated IP

[hot hawk]

yes oet1 is a tunnel, just no where to set an ip

[gritty valley]

@hot hawk what You want to acomplish? Phone tunneling to router?

[peak cloak]

need to masquarede it

so go to networking

and enable masquarade for that tunnel interface

[peak cloak]

vpn to home network

tunnel works

[lean pebble]

haha now my mtik refuse to enable the gre tunnel to my windows machine 😛

[peak cloak]

just routing

[gritty valley]

emm, using /0 will not work 😄

[peak cloak]

yes, we know

[hot hawk]

think masquarade is some where else on ddwrt

cant seem to find it under networking

[tame carbon]

its iptables

[peak cloak]

https://i.imgur.com/Ac8uTFV.png

I'm basing it off this image

under

[hot hawk]

wait nvm found it

assuming this one

[tame carbon]

subnet mask is 255.255.255.0

address should be 10.10.0.1

[gritty valley]

For my MTik setup:

/interface wireguard peers
add allowed-address=10.10.11.3/32 endpoint-address="" interface=wireguard persistent-keepalive=1m public-key=\
    "KEY"

[tame carbon]

@gritty valley I'm afraid to break my entire setup. havent yet gone for rOS7

CAPs on v6 can't connect to v7 CAPsMAN

[gritty valley]

Phone side

[tame carbon]

@gritty valley his wireguard endpoint sits on his LAN. Its behind another NAT

[gritty valley]

It should work faik

[gritty valley]

Ah, not on GW?

[tame carbon]

@gritty valley nah docs say specifically that it doesn't.

[hot hawk]

Test

[tame carbon]

WAN -> Router -> LAN -> "Router /w wireguard"

[hot hawk]

That did it

@tame carbon @peak cloak thx for all da help

[tame carbon]

@hot hawk that fix the issue?

[hot hawk]

Ye

Talking to u rn thrugh wg

[tame carbon]

@hot hawk as a final test, try pinging the LAN IP of your main router from your phone

[hot hawk]

Pings just fine

[tame carbon]

kewl

[hot hawk]

Me still noob at this

[tame carbon]

wireguard is surprisingly easy to use

[hot hawk]

Last vpn server I had was a md4 open VPN server on Android lollipop lol

[tame carbon]

its less complicated than L2TP/IPsec that's for sure

[hot hawk]

I tried setting up a openvpn server on ddwrt

[gritty valley]

If only L2TP/IPsec would allow Always-On for domains

Hence I forced my way to WG

[hot hawk]

Gave up cuz key too complicated for me e

[tame carbon]

@gritty valley wat? really? I have always-on VPN with l2tp

[gritty valley]

on Android - if you want to use domain name (because dynamic IPs at home) - You cant enable always-on

[tame carbon]

mh

I have a seperate bridge for my L2TP

and just route between them and my LAN

[gritty valley]

I just let my 4011 do all the shaninigans as GW

[tame carbon]

same

There's just a binding somewhere https://i.imgur.com/cIHGpIK.png

lol. https://i.imgur.com/dDqVc4z.png

yeah it just hands out a couple addresses, and then if I need more it just dumps them on my LAN

[hot hawk]

berh when u cant make a happy face

[tame carbon]

try double P

[gritty valley]

huehue 😄

[tame carbon]

or how a child might write 'dad' with -dy

names of US presidents are also instamute

[gritty valley]

meh, I just run UM + WPA3 EAP

[tame carbon]

the only limitation I can find on my phone with l2tp

is that you must provide a DNS server on the local range of the VPN

that's it.

[lean pebble]

my mangle rule dead

[gritty valley]

[F]

[lean pebble]

yeah its dead gg

[hot hawk]

wait

so it seems wireguard breaks when i add a second peer

its peer tunnel ip is 10.10.0.3

[tame carbon]

https://i.imgur.com/5OVS6a6.png

[hot hawk]

o

ok it now worky

:))

also wut speeds do u get when u use wireguard

[lean pebble]

I had enough of gre for one day 😆 I'm taking a break

Now all the mtik tunnel side is broken even mangle rule haha

[tame carbon]

@hot hawk depends on the hardware you have, but wireguard can run multithreaded

[gritty valley]

Atleast with my phone the bottleneck is LTE speed

[tame carbon]

wireguard can easily do 800mbit or more, whereas if you wanted to reach such speeds with ipsec, you need a hardware acceleration chip

[hot hawk]

me with a 5 year old router my cousin gave to me cuz wireless on it doesnt work

[tame carbon]

Yeah your phone processor can easily do gigabit

[hot hawk]

yea doubt it

[tame carbon]

Its just the wireless interface that is the bottleneck

[hot hawk]

my s20 on lte gets 30-40 mbps down

[tame carbon]

Yeah but that's your carrier

[hot hawk]

i only get 2 mpbs down on wireguard

[tame carbon]

I have an A50 and I get 70mbit in the city

@hot hawk what's your upload at home?

[hot hawk]

10

mpbs

[gritty valley]

yeah, sounds like Your bottleneck is with GW

[tame carbon]

sounds about right

you get like half your bandwidth

[gritty valley]

and its intra-routing

[tame carbon]

limited by the lowest speed

I have a 250/250 line, so I can get full speed over that

[gritty valley]

500/500 and as I said - LTE is the bottleneck for me

[tame carbon]

but your upload is the major bottleneck here

[hot hawk]

😳

cant get around that f

[tame carbon]

@hot hawk you can limit what subnets the VPN will be used for

so instead of 0.0.0.0/0 you enter your home LAN

and all public traffic will go through your phone carrier

except LAN traffic will be through your tunnel

[hot hawk]

my home is 200/10

wait is it 200/10 or 200/20

[tame carbon]

so you get at most 10mbit/s

[hot hawk]

Mbps

[tame carbon]

https://www.speedtest.net/

[hot hawk]

yea 200/10

[tame carbon]

vrooom https://i.imgur.com/oxfMVyb.png

[hot hawk]

mean

gib

pls

🔫

[tame carbon]

what is this ^ LMAO

[desert yacht]

5ms is really good

[tame carbon]

are you on AT&T ?

[hot hawk]

^

spectrum

[peak cloak]

5ms on coax is good

[desert yacht]

i'm on coax and get 13ms

[hot hawk]

^

[peak cloak]

more vroom

[hot hawk]

i get 15 ms on coax

[desert yacht]

what

[tame carbon]

hold my beer

[peak cloak]

wait your on fiber?

[hot hawk]

sop flexing

no

[clear igloo]

That's still good, 15ms on spectrum is very good actually

[desert yacht]

not fiber directly to the home

[peak cloak]

yeah of course

your on fiber at some point

[desert yacht]

yeah

[tame carbon]

Get smoked. https://i.imgur.com/gZoypIC.png

[peak cloak]

the questions is, when

[hot hawk]

hehe time to bust out the inspect element

[desert yacht]

on the end my road begins the fiber

[tame carbon]

Its real.

https://i.imgur.com/vYXBi7t.png

[gritty valley]

The only reason I didnt take gig up/down was just becausee I wouldnt saturate it

[peak cloak]

yeah same

we have lowest one of 300/300

[tame carbon]

ok look its not at home. but it counts right? xD

[hot hawk]

the only reason i dont have gig cuz too expensive

[desert yacht]

well my max is 500 down and 50 up

[hot hawk]

lol

my school does 500/500

i should get a vpn there

[tame carbon]

this is just a VPS in a datacenter lol

[peak cloak]

at a pc?

[tame carbon]

Linode has blazing fast internet

[peak cloak]

they don't do qos, lol

[hot hawk]

no even on phone

[tame carbon]

Spoilers (isp)

[desert yacht]

my school has 2x 50mbits bundled together

[peak cloak]

they must not do qos

[hot hawk]

well i mean its in just one room

[peak cloak]

my school is their own ISP

[hot hawk]

every where else its dog crap

[peak cloak]

but the connection still sucks

per device

[tame carbon]

@peak cloak same

[peak cloak]

because so many devices

[desert yacht]

they use a home router lol

[dire osprey]

most universities are tbh

[tame carbon]

When I log onto my school network with my credentials, I get my own public IP

[peak cloak]

High school

[hot hawk]

lol

[dire osprey]

oh lol

[desert yacht]

and then connect it to a big switch

[peak cloak]

oh it's not natted? or ipv6?

[tame carbon]

Nope

public ipv4

[hot hawk]

;0

[desert yacht]

but yeah the unifi access points totally worth it /s

[peak cloak]

oh we have a full on server rack with dedicated fiber to the main campus I think

[gritty valley]

Probly uni has their own /16 block

[tame carbon]

^

Its very nice when you are working on projects with eachother

esp when you are a developer

easily put stuff up

no stupid firewall or shit

everyone gets 100M

[peak cloak]

huh

[gritty valley]

Atleast You dont find MT Switches running ROS v5 on campus

[peak cloak]

no security issues?

[gritty valley]

[tame carbon]

@peak cloak EAP and I think from the WAN there's some policies, I think webservers and such are allowed

if you run a torrent, you get expelled.

[hot hawk]

e

[thick minnow]

Even Linux iso torrents?

[tame carbon]

Why would you do that? we have our own mirror @ 1gbit/s

[peak cloak]

I just looked it up, my school get a /17, 4 /24's and one /22

[thick minnow]

Well, usually for me torrenting the ISO is faster than downloading

[tame carbon]

well, gigabit

that's as fast as the cable goes

@thick minnow the servers on the school grounds have a bunch of servers

and they host mirrors for ubuntu debian and fedora

[hot hawk]

👀

[thick minnow]

Ah, that makes sense

[tame carbon]

oh yeah and I asked for raspbian too when I was working on that lol

because that stuff was a bit slower

these admins do everything to reduce traffic

4 buildings, total connection I think is 10G

[hot hawk]

april fools: everyone stream 4k netflix

[tame carbon]

The first bump is people figure out what video calling is
https://i.imgur.com/RcrIwJQ.png

the second arrow points at service provider outages and them scaling up their resources

and that big crash, probably teams

[hot hawk]

[gritty valley]

Dont, Dont remind that

[tame carbon]

people working at home

dutch exchange

increased by 45% in a year.

we hit ~10tbit/s during evenings

[hot hawk]

[tame carbon]

https://i.imgur.com/SWxif0k.png

traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 60 byte packets
 1  router.<redacted>.nl (192.168.88.1)  0.169 ms  0.167 ms  0.161 ms
 2  r2.serv.dro.weserve.nl (46.243.152.3)  5.670 ms  5.704 ms  5.751 ms
 3  46.249.55.194 (46.249.55.194)  6.244 ms  15.720 ms  5.925 ms
 4  185.8.179.33 (185.8.179.33)  8.527 ms  7.430 ms  6.341 ms
 5  ams-ix.as13335.net (80.249.211.140)  8.664 ms  8.666 ms  8.661 ms
 6  one.one.one.one (1.1.1.1)  8.028 ms  7.951 ms  7.912 ms

@hot hawk its interesting to see how different ISPs use different routes

my old copper ISP had their own large network across the internet, and peered with many parties directly

with X-connects

and the traffic to the exchange was much slower

[hot hawk]

🤔

[tame carbon]

and the ISP I have now, peers directly with a colocation partner that peers with AMS-IX among a tonn of other parties

https://www.weserve.nl/img/transits.png

[lean pebble]

I have the best internet.

[tame carbon]

@hot hawk at high network speeds like fiber, it really becomes important what deals your ISP has with other network operators

[lean pebble]

I get 7ms to 1.1.1.1

[tame carbon]

@hot hawk yeah cloudflare peers directly with your ISP

My distance from the exchange is so short, that it doesnt really matter

I get to cloudflare directly from the exchange

[hot hawk]

i have no idea where my cable goes

[tame carbon]

@hot hawk you can :D

[hot hawk]

i just know it goes down the street

[tame carbon]

@hot hawk you see those IP addresses?

if they are in a datacenter

they often have an address associated with them

and the letters

[hot hawk]

[tame carbon]

@hot hawk look at the hop #3

thats in atlanta

then it routes to another place in ashb. state va

not sure where that is

errrr, hop 5

sorry

[hot hawk]

Virginia?

if i know my states

[tame carbon]

@hot hawk HOP 1 is your router, hop 2 is poorly configured ISP router,
3 and 4 are properly configured ISP routers

charter.com is the transit for this route

it goes from their backbone in atlanta

to somewhere in virginia

[hot hawk]

[sweet pawn]

Anyone know about NAT types?

It's really hard to change them, anyone know how can I?

[tame carbon]

🤿 erade

[peak cloak]

verizon doesn't look to peer with cloudflare

[hot hawk]

i should rlly be doing homework 😳

[peak cloak]

yeah, masquarade, source nat, destination nat

[lean pebble]

Cloudflare have servers in my ISP datacenter

And have servers 20 minutes from me in the city near me

[tame carbon]

@hot hawk ok so lets keep tracing

@hot hawk so it goes through charter.. lets see who their peering partner is

[sweet pawn]

Don't know whats that

[tame carbon]

https://i.imgur.com/YEfML2o.png

[lean pebble]

https://bgp.he.net/search?search[search]=Bezeq&commit=Search
My ISP

[marble nacelle]

So im trying to acces the main page in tplink but it wouldnt let me , it opens my router page tho but im tryna setup my tp link and i cant

[peak cloak]

@tame carbon huh, so it seems that fios just their core network under alter.net

if I look that up it just shows news

[tame carbon]

very helpful images

[lean pebble]

My ISP have direct fiber line to Germany frankfort

[tame carbon]

the closer to the exchange the better

AMS-IX basically just an internet hotel

bunch of people connect to them

and the exchange just helps provide the connectivity between the parties

in the case of AMS-IX they have ~900 ports

[lean pebble]

Yeah Israel iix have it to

Something like this

[tame carbon]

https://www.juniper.net/assets/img/products/image-library/mx-series/mx2020/mx2020-frontwtop-high.jpg

[lean pebble]

Connect directly to it isn't cheap at all

[tame carbon]

You'd want something like this ^

https://i.imgur.com/qbjy0Pz.png

[lean pebble]

I don't think I'll use it for home use

😂

[tame carbon]

an exchange could literally be 1 rack.

[lean pebble]

Our ISPs here have max 1.2tb total

[tame carbon]

have you seen my coffee?

[lean pebble]

Nope

My doggo wanna go out he is patrolling here between the lower floor to my room upstairs

[marble nacelle]

bruh i got buried

[tame carbon]

@marble nacelle actually I think, everyone is waiting who speaks up first about the wifi extender

@peak cloak you know more about tplink than I do xD

[peak cloak]

idk about consumer stuff lol

I just know my omada AP

[lean pebble]

I just want my 1Gbps bundle buy private houses for buried under the hood.

What is the tplink extender module ? @marble nacelle

[tame carbon]

fiber optics solve the problem of copper theft, it doesnt however prevent the idiots from digging it up :3

[marble nacelle]

TL-WPA4220 AV500

[lean pebble]

Here it happens almost every week in northern Israel

[hollow marlin]

Move to the Juniper dark side Crystal

[tame carbon]

@hollow marlin their smaller edge routers look so sick

but I am weary

I recently read something about spyware

I'm not buying US network equipment anymore

[hollow marlin]

We have a ton of MX10003s scattered about at the edge.

[lean pebble]

Disconnect from your wifi and connect to the extender directly with cable to configure it

I guess it just have the same range as your home network that's why you can't access it.

Juan can you help me with the gre?

[hollow marlin]

Yeah there was a potential backdoor but I have not heard anything since. Honestly its not much to worry about

[lean pebble]

I killed it

[marble nacelle]

when i do that nothing pops up

[tame carbon]

https://www.juniper.net/assets/img/products/image-library/mx-series/mx10003/mx10003-frontwtop-high.jpg

They look awesome yeah.

[lean pebble]

I used junpier

[tame carbon]

so much connectivity :ooooo

[lean pebble]

Nice product

[tame carbon]

you even got friggen clocksignal probes

[lean pebble]

Do you get IP address from it ?

[marble nacelle]

nop

cmd shows nothin

[lean pebble]

Weird

[tame carbon]

@hollow marlin are those things at the front for wireless RTC?

or LTE backup?

[lean pebble]

Try reset it to default settings

[hollow marlin]

Yeah they are dense for their use case, 2.4tbps is plenty for 2RU

[tame carbon]

@hollow marlin it looks like two routers in 1 case

its got identical modules at the top

[hollow marlin]

They are for very obscure monitoring. Its TDM based IIRC

The two top cards are the RE (Routing engine). The other slots are for the MICs which are the ports. The control plane and forwarding plane are separate.

[tame carbon]

does the housing have any sort of magic to it?

or do you need at least 1 routing engine?

[hollow marlin]

Its called the chassis, all it is a ton of pins that make up the backplane for the cards to talk to each other

And yep, you need at least 1 RE as its the management/control for the router

[tame carbon]

the other runs in slave then

yeah thats cool

the backplane is quite short

so you can get enormous bandwidth

do you know what kind of protocol they use for the interconnects?

[marble nacelle]

i just did so

nothing changed

this comes up

instead of tp link

[tame carbon]

@marble nacelle thats your router

[marble nacelle]

yep

[marble nacelle]

i want my tp link router to come up

[tame carbon]

@marble nacelle you need to give the repeater an IP address on the same subnet

[marble nacelle]

how do i do that

[tame carbon]

@marble nacelle do you know how the tplink obtains its IP address?

[marble nacelle]

no

[lone sun]

It kisses its feet

[tame carbon]

@lean pebble you have the manual url?

[hollow marlin]

Not really a slave, the PFE (Packet Forwarding Engine) is composed of switchchips that handle the actual forwarding. Each of the cards in the slots have the chips. RE does all the management, builds the routing table, handles adjacencies, sends/processes control traffic (STP, ICMP, etc) and once it has a routing table or forwarding table it pushes it down to the PFE and is all done on the cards.
Just like with your RB4011, the switchip handles L2 forwarding unless the CPU is needed

[tame carbon]

ya, but that is PCIe

wait no

[limpid lion]

did you try using the app to configure the adapter?

[tame carbon]

actually on routerOS that switching chip has actual interrupts

[marble nacelle]

it doesnt connect to the app

[tame carbon]

@limpid lion shouldnt need an app

you can use a web interface

[limpid lion]

Yeah

[tame carbon]

@marble nacelle I'm consulting the manual rn

[peak cloak]

check your router dhcp server, see if it got an IP address

[limpid lion]

if no IP in dhcp server maybe a factory reset?

[marble nacelle]

where do i find the dhcp ip

[tame carbon]

Why do these compaines do this lmao

https://i.imgur.com/nXHBdAu.png

stupid dns

[limpid lion]

Should be on your router page

[peak cloak]

go to your router and go to devices or something like that. In a normal router it's dhcp leases

[peak cloak]

that's just plain wrong

[tame carbon]

https://i.imgur.com/WvkpFXT.png

wow

[tame carbon]

and it resolves to a public IP.

@peak cloak OMG.

LOL

https://i.imgur.com/0KuUnvx.png

[marble nacelle]

question

[lean pebble]

Lol

[gritty valley]

wat?

WAT?

[tame carbon]

this manual is so bad ahahaha. what is this tplink.

[marble nacelle]

is it this

[gritty valley]

What did You expect from TPLink

[tame carbon]

https://i.imgur.com/pL2y60Q.png WTF>

[peak cloak]

no

[tame carbon]

fuck you tplink.

[peak cloak]

look for devices

where you can find all the connected devices

[lean pebble]

😆 😆 😆

[limpid lion]

Called "Network map" on my router

[lean pebble]

Yeah their manuals are bad af

[tame carbon]

@marble nacelle Okay, assuming this thing just uses DHCP. Go to your huawei router. And look for DHCP Leases.

[tame carbon]

or DHCP Client List

[peak cloak]

mine looks like this

an actual descent router

[marble nacelle]

Yeah i found it

[peak cloak]

you found the extender?

go to that ip

[tame carbon]

:)

[marble nacelle]

its hard to find

i got tons of ips

some are unmarked

[lean pebble]

I think the extender have its own dhcp server

[limpid lion]

It does yes

[tame carbon]

@marble nacelle can you find the tplink ones?

[peak cloak]

why...

that's so stupid

[marble nacelle]

nah theres no label for tp link in there

[limpid lion]

No idea lmao

[limpid lion]

you could check the mac address on the back of the adapter and maybe find it in the list?

[lean pebble]

So just need to fac reset and connect to it directly and wait untill it gives you IP address

[marble nacelle]

nice idea

[tame carbon]

@marble nacelle ok lets do this. we need to jsut use a network scanner.,

[peak cloak]

@tame carbon I think they want you to connect to it's wifi directly

[tame carbon]

no

[lean pebble]

I use fing on my phone to find all devices on my network

[tame carbon]

@peak cloak it just bridges, with same ssid

[marble nacelle]

on the extender it says WLAN mac

is that it ?

[lean pebble]

Yeah

[limpid lion]

should be

[tame carbon]

@marble nacelle it has two. the wireless and wired each have a MAC.

[lean pebble]

They call the cable connection wlan

[tame carbon]

but they could also be the same.

[lean pebble]

Abit same the end should be different

[marble nacelle]

couldnt find it there

[tender hazel]

I agree with PresentMonkey, I think it wants the user to connect with wifi to the extender

and then go to that site

[limpid lion]

Might be worth to just factory reset it IMO and see if that fixes it

[marble nacelle]

i did that like 5 times

[limpid lion]

ah

[tender hazel]

what does it do?

[marble nacelle]

nothing

[tame carbon]

wait

it wants wireless configuration?

[limpid lion]

and there is no new SSID for the extender itself?

[peak cloak]

@marble nacelle ok, so does the extender make a new wifi connection?

[lean pebble]

Usually they write the IP address on the back of the extender

[peak cloak]

yes, look at the image you posted

[tender hazel]

I think with this they have a little built in wifi ap

[peak cloak]

https://i.imgur.com/0KuUnvx.png

[marble nacelle]

yes , its called tp link something

[tender hazel]

I have tplink smart plugs at home here for using google to turn my lights on and off and they have little wifi aps in them

[peak cloak]

ok connect to that

[marble nacelle]

im connected via cable

[peak cloak]

then go to configuration websit

[tender hazel]

you connect to the wifi ap for the initial configuration to get it to connect to your home wireless

[peak cloak]

to your router or the tplink

[limpid lion]

Yep , think this is it as well

[tame carbon]

@peak cloak that's not gonna work, dns cache :xD

[marble nacelle]

i also tried on my laptop but it still shows up as hawiw shit

[tame carbon]

its still not telling us what the default IP is

because of this stupid dns hack they try to do

[lean pebble]

ipconfig /flushdns in cmd

[tame carbon]

@marble nacelle seriously, just try https://macvendors.com/

[peak cloak]

connected via wifi to the tplink?

[lean pebble]

Will fix it

[tame carbon]

@marble nacelle enter the mac address of the device without a label

I can;t imagine that the web interface is only available from wireless and not from wired

[marble nacelle]

i entered it

what to do

[tame carbon]

@marble nacelle MAC addresses are traceable to a vendor name

if the MAC says something about tplink

[marble nacelle]

it showed up as TP-LINK TECHNOLOGIES CO.,LTD.

[tame carbon]

ok

what IP does that lease have?

[marble nacelle]

theres no lease for TP-LINK TECHNOLOGIES CO.,LTD.

[lean pebble]

Do you have 2 of those devices?

[marble nacelle]

yes

[lean pebble]

Just click the pair button

[marble nacelle]

they are paired

[lean pebble]

So it should work

[tame carbon]

thats just the network side of things

@lean pebble they want you to use the fancy web interface

@marble nacelle just connect to the wireless network

that it creates

then run ipconfig /flushdns in the command prompt

[marble nacelle]

lol tried that

[tame carbon]

and go to that url again

@marble nacelle another option would be to quickly install zenmap

that's a network scanner

the n we dont need their shitty dns

[marble nacelle]

ok im installing it

[tame carbon]

zenmap is nice to figure out what is where

@marble nacelle once you have connected to the wireless network, run ipconfig /all

try that

might just list the IP for us there

Should be the address of the DHCP Server

[marble nacelle]

tried it

my router came up again

[tame carbon]

what does it say?

[marble nacelle]

fuck

[tame carbon]

@marble nacelle look at the interfaces

wait

inb4 its just working

but ssid is wrong

[limpid lion]

no way it just works without configuring right

[tame carbon]

dont really need an address on L3 if you just do forwarding

[lean pebble]

It should copy the settings automatically when you connect it and click on pair

[tame carbon]

this is why I dont like repeaters

[marble nacelle]

yeh but i want to switch it to 5ghz

[lean pebble]

Ah

[tame carbon]

CAPsMAN ftw.

can manage 1

10

or 100 antennas

easy.

I forget what the limit is

[lean pebble]

I have my 3 little boxes that I can manage 1 and automatically changing all of them

[tender hazel]

that extender can't do 5ghz

[marble nacelle]

It cant?

[tender hazel]

TL-WPA4220

[marble nacelle]

ye

[tender hazel]

802.11b/g/n only

which means 2.4ghz only

[tame carbon]

you need 802.11ac

for 5GHz

[marble nacelle]

so i should buy a new one

but which one

[tame carbon]

how much did this one cost?

[marble nacelle]

50 dollars

[tame carbon]

I think you can just return it

if you put it back in packagaing

[marble nacelle]

problem is i bought it 2 years ago and forgot about it

[tame carbon]

mhn

[marble nacelle]

i just started using it for my second setup

[tame carbon]

@marble nacelle what kind of network speeds you expect to get?

[marble nacelle]

from my 5GHZ , 500 mbps

i have 2.4 ghz which gives me 80 mbps

[tame carbon]

do you have a fast internet connection?

[marble nacelle]

ye

[tender hazel]

you're only going to get 500Mbps from 5ghz in the best conditions

[tame carbon]

can you even get 500mbit/s over 5GHz ?

160Mhz ? :D

[marble nacelle]

average i get is 450

sometimes 300

on my phone

[tame carbon]

@marble nacelle if you really want to do this properly, you should into some kind of managed wireless solution

[peak cloak]

use ethernet if you want fast speeds

[marble nacelle]

im using ethernet on my computer

[peak cloak]

I call 300 on wifi good enough

[marble nacelle]

thats i have tplink

[peak cloak]

not powerline

I don't call powerline ethernet

[tame carbon]

@marble nacelle for mikrotik that's CAPsMAN, I think Unifi cough expensive cough can do it too

[peak cloak]

I wouldn't use unifi...

[tame carbon]

and tplink omeda also has a managed wireless solution

[tender hazel]

you can get a few audiences

[marble nacelle]

so which extender should i buy ? one that supports 5ghz ofc

[tender hazel]

that should work better

[tame carbon]

@marble nacelle no no, the idea is that you do not use an extender