#networking

1 messages · Page 319 of 1

tame carbon
#

but @marble nacelle but individual wireless access points, and a small controller

peak cloak
#

you don't even need a controller do you?

tender hazel
#

he can get a few Audience units

#

they should work nicely for this

marble nacelle
#

whats a controller and whats a acces point

tender hazel
#

and will go over wireless

tame carbon
#
peak cloak
#

audience could work for someone who just wants something "simple"

tender hazel
#

it has a dedicated 5ghz radio for backhaul to the other audiences

gritty valley
#

I mean hAP AC2 would work too

tender hazel
#

you'll want one hardwired in to your router, the other audience units can connect to the 5ghz backhaul radio

tame carbon
#

@gritty valley or multiple hAP ac2's :D

#

for even more coverage

gritty valley
#

or multiple wAPs

tame carbon
#

they are so cheap.

#

$60

#

and they can double as controller.

tender hazel
#

if you want the high speeds though and can't run cable

lean pebble
#

When I'll get better internet I'm gonna upgrade my mesh system to one that Support 1/2gbps

tame carbon
#
tender hazel
#

the audience has two 5ghz radios for that reason

tame carbon
#

@marble nacelle these can do 2.4GHz and 5GHz. But would require you to run a cable.

tame carbon
#

The audience has two 5GHz radios, and can use one of them two talk to ther Audiences.

marble nacelle
#

we dont have this here

tender hazel
#

one runs on a different frequency and is used for connection to the other audiences

#

yeah

tame carbon
#

@marble nacelle which country exactly?

marble nacelle
lean pebble
#

My mesh have 5ghz but his rj45 connectors limited to 100mbps

tame carbon
#

@marble nacelle you're one of the lucky few with internet access then?

tame carbon
#

last I heard, you guys have quite some bad things going on

marble nacelle
#

im lucky to have 500mbps connection

#

thats it

tame carbon
#

Yeah. let me look if there's a vendor in Bahrain

marble nacelle
#

were good

tender hazel
#

there is

#

Realtime Technologies in Salmabad, Bahrain

lean pebble
#

I wish I could have 100mbps

tame carbon
#

@marble nacelle its worth it, this is ISP tier quality

marble nacelle
#

?

marble nacelle
tame carbon
#

@tender hazel their webserver is having me wait./..

#

fuuuuuck is that thing slow

lean pebble
tender hazel
#

yeah it loads fast for me too

tame carbon
#

now its snappy.

marble nacelle
#

most isp companies in the middle east are govermenaised

lean pebble
#

Load good for me to

marble nacelle
#

we dont have private isp companies

#

so theres no competition

#

so prices are high

lean pebble
tender hazel
#

their website is hosted in New Jersey

#

that's long distance hosting

peak cloak
#

oh no wonder

tame carbon
#

mh

peak cloak
#

I'm in NJ

tame carbon
#

@marble nacelle that store only sells ethernet routers, no wireless

tender hazel
#

they don't even have a web store, they just have links to the products on the mikrotik products page

tame carbon
#

@marble nacelle are there only online retailers you can buy thing sfrom?

marble nacelle
#

so theres no way i can find the right ip addreas for the extender ?

tender hazel
#

it may not have a management IP once it is set up

#

you could check your dhcp for a mac that matches the first 6 hex digits of the extender wlan mac

marble nacelle
#

maybe the ip is dynamic?

#

thats not possible

gritty valley
#

The managment IP should be handed out by DHCP Server

#

In general theory

tame carbon
#

or when it cannot find a dhcp server, it sets itself to a static ip

tender hazel
#

yes, if the extender is getting an IP from the huawei it will be in the dhcp info page on the huawei

tame carbon
#

but he said there was no lease.

lean pebble
#

I decided to leave the gre tunnel alone and try different protocols, any ideas ?

tame carbon
#

@marble nacelle show us that screenshot again

#

with the leases

tender hazel
#

there's no lease with the name tplink

#

I'm saying check the leases list for the tplink mac

marble nacelle
#

i just searched all the IPS on google

#

nothing worked

tender hazel
#

ok

#

but in your dhcp info page with the leases do you see any lease that matches the beginning of the wlan mac on the extender?

#

the huawei dhcp info page

#

XX:XX:XX:YY:YY:YY, the X's would match the wlan mac of the extender, the Y's may not

marble nacelle
#

Mine starts with a A4

#

nothing is simmilar to thjat

tender hazel
#

ok

marble nacelle
#

i have another question

#

so my router has two SSID

#

based on a 2.4GHZ and 5GHZ configuration

#

they have different names

#

the problem is

#

i cant connect my tp link to the 5GHZ SSD

#

because i cant open the tp link web

peak cloak
tender hazel
#

no you can't connect your tplink to the 5ghz ssid because it doesn't have a 5ghz radio

marble nacelle
#

oh

#

is there a tp link or perhaps a dlink device that does

#

TP-Link RE305 AC1200 Dual Band Wifi Range Extender

#

is this good?

tender hazel
#

that ought to work, that'll have 5ghz

marble nacelle
#

its worth 31.85

#

dollars

tender hazel
#

be warned that you aren't going to get 450Mbps from 5ghz with an extender though

marble nacelle
#

how much will i be getting

#

i need atleast 300

tender hazel
#

the extender takes up half the capacity because it uses the same radio to connect back, so you will get 200 or less

marble nacelle
#

o

tender hazel
#

because the ac does like 450 so half of it is used to connect to you and the other half is used to connect back to the main wifi router

#

whenever you use an extender that uses the same 5ghz radio to extend as well as connect back to the main router it will slice the bandwidth in half

marble nacelle
#

so only solution is if i put the router in my room

#

which i cant do

tender hazel
#

or you run a cable

marble nacelle
#

yeh

#

but i need a very LONG wire

#

and it wont look nice

#

but ill consider that

tender hazel
#

there is a similar solution to the mikrotik audience made by dlink

#

the COVR-2200

#

I don't know if tplink has something similar

marble nacelle
#

wait , if i run a wire

#

how do i choose the 5ghz ssd

#

with a wire

tender hazel
#

if you run a wire you still need a 5ghz capable AP

marble nacelle
#

yeh but how will i pick that configuration

tender hazel
#

and no tplink doesn't have something similar to the COVR-2200 with the tri band solution

#

so a good solution might be the D-Link COVR-2200

#

(if you can get that)

#

then you don't have to run a cable

marble nacelle
#

yeh its not in my country

#

fucking hell

tender hazel
#

you might be able to use powerline adapters

#

if you can get those, and if they are fast enough

sly wadi
#

Any ideas for exposing an SSH server (or whatever else) to the world while hiding your home ip? (looking for something cheap or free, idk if something like cloudflare exists for non-http)

waxen saddle
#

Why wouldn’t a VPN work for you? Exposing SSH is generally considered a bad idea no matter how much security you have.

peak cloak
#

Why is exposing ssh bad?

#

If you have key auth and a non standard port it's fine

#

Although I would still prefer vpn

sly wadi
#

VPNs would probably be too expensive for a simple homelab type thing (also, I used SSH as an example... I would probably be hosting Minecraft and/or Plex/Nextcloud)

peak cloak
#

That's what I meant

sly wadi
sly wadi
# peak cloak Host your own vpn

My goal is to hide my homelab ip address for public kinds of things like file hosting, not try to administrate it remotely

#

Sorry If I was being unclear

waxen saddle
#

No worries. I know LMG uses a masking service to hide the real IP of their Minecraft server, though I don’t recall what it is called.

sly wadi
#

Okie, thanks... Ping me if you do find an answer

peak cloak
#

but it's paid

#

actually I can check

tender hazel
#

SSH isn't always expected to be exposed, so for that reason I would say it would have a greater chance of vulnerabilities than VPNs

peak cloak
#

huh

#

they have a free option

#

I never knew that

#

I would use it myself then

sly wadi
peak cloak
#

they advertize it just for games

sly wadi
#

Huh, ok... Might check it out

peak cloak
#

won't hurt to try

peak cloak
#

wut?

#

ltt?

#

they use tcpshield

#

maybe

#

let me check

#

yep

tender hazel
#

I wouldn't say so - at least I wouldn't want to expose SSH on most of my devices to the world

#

we have many servers and don't expose ssh to the internet on them, no reason to

#

that may be so, but with a VPN there is little point in having a VPN if you don't expose it to the entire internet to be able to connect.. that isn't the case with SSH due to the different use case

#

no, but daemons that are not expected to be exposed to the entire internet would not be as inspected for vulnerabilities as thoroughly as those that are, as a generality

tender hazel
#

well how often would you set up a VPN that is not exposed to the internet, vs SSH that is not exposed to the internet? I would expect that there are a lot more SSH servers not exposed to the internet than there are VPN servers

#

I'm also not saying there is something wrong with something really standard like openssh in that way

#

but ssh on some random device

obtuse cove
#

help gig speed making my cpu0 at 100%

#

bonding gig with 5g (not even getting gig speed)

peak cloak
#

that's not how it works

#

plus are you on ethernet

obtuse cove
obtuse cove
peak cloak
#

you can have more overall bandwidth, yes but will it be worth it enough for you to see, no

obtuse cove
peak cloak
#

plus

#

just your main one

obtuse cove
#

idk about that when i start the test i can see it using the different networks

peak cloak
obtuse cove
peak cloak
#

cpu could be pinned, but I doubt that. Probobly just router

#

what's your router?

#

@obtuse cove

obtuse cove
#

HG8245Q

#

from my ISP

#

but i turned off WIFI and switching and got Cisco networking on house with cat 7 between the router and the switch

#

and the rest cat 6A

peak cloak
#

I can't find anything online for routing speed

obtuse cove
#

i can get the one gig speed but in the start of the test but then it will hover down to500mb and then start working up to that 700-800 mb/s

peak cloak
#

ISP rate limiting

#

that too

obtuse cove
#

i don't think so i think its CPU bound

peak cloak
#

me neither

obtuse cove
#

i got 3700x

peak cloak
#

it's a ryzen 7 3700X

#

it should be able to

thorny vector
#

-_-

#

For consumer use, and even most commercial/enterprise use, amd has no more issues than intel.

#

ummm, epyc?

peak cloak
#

epyc?

thorny vector
#

It's super taking over the datacenter

#

epyc is destroying intel in the datacenter. Most of the refreshes I've seen in the past 5 years (government/ISP space) that don't rely on any intel specific features, migrate over.

#

Especially those that are virtualization heavy, which is everyone nowadays

severe pollen
#

Can't...say I've ever had issues with AMD and networking

#

and I've got a virtual switch on my machine

thorny vector
#

They've increased market share I think by 5% in the enterprise world in the past year

#

That's crazy growth.

#

Intel have a higher market share indisputably, but I'd argue straight market share in the enterprise space is misleading, considering how many servers are just stood up and forgotten about.

hollow marlin
#

5% over a year is huge. Enterprise life cycles are 5-10+ years

severe pollen
#

It's hard to measure in general

thorny vector
#

Doesn't, in my opinion, represent current buying trends

#

@severe pollen for sure

obtuse cove
#

so what i hear is that this issue cant be fixed?

thorny vector
#

@obtuse cove What are you using to speed test with?

hollow marlin
#

How are you bonding the connections?

obtuse cove
thorny vector
#

Ahhhhh, I would bet its the website doing the throttling then

severe pollen
#

Your CPU isn't going to determine your wifi speed

#

Just in general

obtuse cove
#

yes

#

torrent is killed by my ISP

#

i turned off everything even the firewall

hollow marlin
#

Remove the bonded connection, retest on you main connection. I guarantee you're pushing the stack to software

obtuse cove
#

5g cellular

#

why is it bad?

peak cloak
#

Why

#

Why so you need to do that?

obtuse cove
#

but i got a NAS and home media server on my 5g so that even if I'm outside the house i can remote into my house and take some stuff

peak cloak
#

On my cellular they give public v6

#

But yeah cgnat v4

obtuse cove
#

no with the 5g move i have seen every device with 5G networking has its Own ipv6

#

the stupide thing is i can open ports on my 5G but not my 1gig router

peak cloak
peak cloak
obtuse cove
peak cloak
#

Bruh

#

If an isp has cgnat but gives you /56 v6, whatever it's fine. But cgnat and not v6 that's just ...

obtuse cove
#

if you got download large games from steam or epic games if that even a thing anymore you can get instead of 1000mb/s i can theoretically get 3gig/s (if 5G got that sweat 2gig speed)

#

no the max i got before my system crash with blue screen 2.5g/s

peak cloak
#

That's the standard, is it not? Fios here doesn't yet

#

Same

#

But no v6

#

Use tunnel for that

#

Why..

obtuse cove
#

btw will Linux handle high speed better or will it be the same?

#

lol even with iperf its still 100% with

thorny vector
#

Windows bonding is pretty resource intensive, since its all software

obtuse cove
#

still 4-5 sec of downloading and the system freeze

#

yes

#

i was thinking to boot into safe mode to remove the idea if its software that is getting my CPU cycles

#

idk i was thinking of malware or viruses but if its really malware or viruses it will take all 16 not only 1

#

and i was thinking it was cryptomining malware but the same why stop with one why not all

waxen saddle
#

Do you have tcp offload enabled?

obtuse cove
waxen saddle
#

So the CPU is handling all the packets

obtuse cove
waxen saddle
#

Not sure how it would. In my head, it has to glue the data from the packets together. I’m not sure how you would multi-thread that.

#

How bad of a freeze is it? Does the mouse move? Can you toggle the caps lock light on your keyboard? Does the entire screen freeze?

tender hazel
#

I wouldn't expect a simple 1Gbps of traffic to cause a single CPU core to max out like that

tender hazel
#

I would look at task manager and try to figure out what is happening

thick minnow
#

So I'm conneecting to a network hard drive and streaming a film on vlc

#

On my phone oneplus 7t pro it works fine

#

But on my ipad it keeps buffering

tame carbon
#

gigabit ethernet go brrrr

thick minnow
#

Both very close to the router and computer is wired

#

Nah I like paused anyrhibf using bandwidth

#

It's not a bandwidth issue afaik

#

It's just on my ipad it's buffering was working fine yesterday

#

My phone is super fast

#

I click on it it plays

#

Yea I'm watching on my ipad now plays for a few seconds then pauses

tame carbon
#

It is just common practice that new networks are v6

#

Because v4 is legacy.

frigid pine
#

In a VPDN tunnel there are multiple sessions. How do I control the session timeout from LAC side?

tame carbon
#

VPDN?

#

isnt that just cisco jargon for layer 2 tunnels?

frigid pine
tame carbon
#

But on my router, I can just set timeout for a client

#

oh, LAC, that's the concentrator

frigid pine
tame carbon
#

Only thing I can spot here

#

Session limits

frigid pine
frigid pine
tame carbon
#

It is

#

You can set timeouts on either end

frigid pine
#

The problem here is I am in the middle. Don't have accesss to the server or client. The server admin says timeout is configured properly at their end. But doesnt seems like working and they wont accept that it isn't working. So I am just shooting in the dark to find something to clear the session from my end.

tame carbon
#

@frigid pine you sure it is a keepalive issue?

#

and not just some other problem that breaks l2tp?

#

I've had my myriad of issues across a network that didnt have 1500 byte ethernet

frigid pine
#

I have single tunnel thru which multiple pppoe sessions are going. The sessions are stuck at the concentrator only if the client end dies abruptly eg. with a power outage. So I don't think it have anything to do with L2TP breaking coz other sessions work fine.

tame carbon
#

mh

#

ok, this is way above my skill

#

might want to wait around for someone else

frigid pine
#

Yeah. Thanks for trying anyways. 🙂

tame carbon
#

@frigid pine what would interest me is a log-dump of the concentrator

#

like, that admin of yours says all is well

#

but is it?

frigid pine
#

I am the concentrator admin. You must mean the server log?

tame carbon
#

yea

frigid pine
#

unfortunately server logs arent available as I don't have access to it. And the admin is a jack-ass.

tame carbon
#

@frigid pine sounds like my old ISP

#

"The line is fine, we see the full speed you can receive"

#

Yes but the latency is 400ms and I have 5% packet loss

#

"The line is fine"

frigid pine
#

yeah. lol. These people think that since they have configured it, it MUST work.

#

If it doesn't work 200% other party's fault.

tame carbon
#

tech support diddnt even know what latency or packet loss was

#

or for that matter: what even is a packet? xD

#

"have you tried restarting your router?"

frigid pine
#

packet I can understand them not knowing. But yeah ping is something even a non-tech guy knows these days.

tame carbon
#

@frigid pine the problem ultimately was, three poor splices on the DSL line, and a big 2 meter loop under the driveway, right across a city power line

frigid pine
#

since everybody is nowadays playing pubg or minecraft and whatnot

tame carbon
#

and the neighbor had an old NAS with a broken power brick

#

whose interference was bleeding into my DSL line through that loop and splice

#

8 technicians couldn't figure it out

#

until the 9th came, in press suit and tie, with a little DIY FM radio

#

he walked around the house with his headphones on

#

and found the problem within 5 minutes

#

I bet thats why he could afford a suit & tie

#

cus all the other guys are hopeless.

thick minnow
#

xD, this is kinda hilarious

tame carbon
#

@thick minnow I asked him why he wore different attire. And he said he primarily services business customers

frigid pine
#

Once there was an instance where all customers running from one BNG gets DC for few seconds and then reconnects. This kept happening atleast 5 times a day. I found there is some random packet loss (around 5 ping drops in a row) at the core and raised the issue with MPLS. They said "everything is fine at our end, And even if there is such kind of loss it is acceptable". LMAO.

tame carbon
#

wait

#

5 ping drops in a row on an edge router?

#

I dont think that sounds acceptable

frigid pine
#

YEAH!

tame carbon
#

perhaps public ICMP can be dropped if excess

#

but internal? sounds like a problem to me

frigid pine
#

I even got in a fight with them since my customers were troubling me and in the end they said "YOU DON'T KNOW ANYTHING SINCE YOU ARE NOT SITTING AT THE CORE". I was like OK! I reported the issue and kept quite.

tame carbon
#

core operator from hell

frigid pine
#

Knew nothing would happen for the report but atleast I am sorted at my end when someone comes asking why this issue wan't taken care of.

tame carbon
#

@frigid pine my current ISP, when I have a problem I dial a number that connects me to their NOC directly :)

#

they are very skilled and speak jargon :)

frigid pine
#

I am so unlucky with work that I always end up at ridiculous places. Sometimes I convince myself it's like this everywhere.

hollow marlin
dense sierra
#

Anyone familar with next Cloud?

waxen scroll
#

i'm familiar with how ubnt > mikrotik

tame carbon
#

@waxen scroll where did you hear that?

clear igloo
#

@waxen scroll I think you mean D-Link > all

tame carbon
#

all > asus

clear igloo
#

Assus + RGB = king speed

tame carbon
#

Motherboard marketing ^ rofl

#

T-BaseNOSCOPE

waxen scroll
#

so i want to bring up... most connections 1GB<, Kay? When does QoS need to kick in? What happens when QoS kicks in? Queueing? Whats queuing do? Oh fuk it adds latency

#

killer lied packets died

#

@hollow marlin boom

#

fifo so fast at processing

#

does killer even know your ISP speed

#

Does this stuff actually work tho? Seems like complete BS

#

Maybe if you had DSL?

#

muh 5mbit

tame carbon
#

@waxen scroll maybe it works if you added more ™️'s

waxen scroll
#

is that marketing implying you connect two interfaces to one switch and use wifi too?

#

like ....

tame carbon
#

no no

#

There's

#

KILLER™️ Ethernet

#

and

#

KILLER™️ WIRELESS AC 1535 WITH EXTREMERANGE™

waxen scroll
#

the caps make it better

tame carbon
#

wait no the ethernet

#

KILLER™ DOUBLE SHOT-X3 PRO™️™️™️™️

waxen scroll
#

SUNDAY SUNDAY SUNDAY.....

tame carbon
#

@waxen scroll I think KILLER™️ 360-NOSCOPE PRO sounds better

#

like is there a SINGLE SHOT-X2 HOME too ?

#

I'm just imagining rn that this is how the marketing dpt talks on daily basis

#

EXTREME

waxen scroll
#

oof

tame carbon
#

this whole msi website is shit

#

Nice.

timber imp
#

wait what is this

tame carbon
timber imp
#

msi usually have decent web pages

tame carbon
#

We're having fun at MSI's marketing dpt

#

top tier Gaming gear

timber imp
#

lmao

#

tbf it is from 2015

thick minnow
#

MSI is trash their laptops suck

tame carbon
#

Who makes these graphics?!

timber imp
#

their mobos are good

tame carbon
#

no but

#

Its..

#

Simply adding the max rated speeds for all the interfaces

#

that's cheating

waxen scroll
#

MSI laptops I feel arent bad, BUT they can overheat

tame carbon
#

@waxen scroll yeah but the BS marketing is consistent across all of their products

#

Like, companies hire those people to make adverts for the non-savvy

waxen scroll
#

thats why wifi numbers got changed

#

that was a good call though

surreal finch
#

Andybody here use Fortinet?

lean pebble
#

I don't like MSI

waxen scroll
#

Never believe someone with an Anime avatar

#

...

frigid pine
#

I don't see any keepalive setting under vpdn or l2tp.

tame carbon
#

kewl. my bag of rj45 keystones arrived

#

100 STP keystones for 30 euros

flat wagon
tame carbon
#

@flat wagon That's a big waste of money

#

oh wait

#

PoE

#

@flat wagon no.

surreal finch
#

@flat wagon from what I can see no 10G support

tame carbon
#

Something like this, has 2x 10G

surreal finch
#

Even the SFP ports are restricted to 1G

flat wagon
#

can you link me a managed switch with up to 12+ ports that is also 10G from Netgear on Amazon?

tame carbon
#

@flat wagon that one is managed ^

flat wagon
#

one sec

tame carbon
#

and honestly, far more versatile than a netgear equivalent

flat wagon
#

is it on amazon tho

tame carbon
#

that switch has bunch of L3 features too

flat wagon
#

prefer to get it on Amazon

tame carbon
#

CRS326

#

@flat wagon those SFP+ cages fit a module than can be used for 10gbit networking

#

either via a fiber optic, or another type of SFP+ module

#

10GbE (on copper) is very expensive and not really worth it

flat wagon
#

oooo ok. thank u so much. i'll order it rn

tame carbon
#

@flat wagon though wait

#

you get 1.5G?

#

do you know what kind of interface they will provide ?

flat wagon
#

yes

#

it's fibre optic

surreal finch
#

yeah I am wondering if a 2.5G is what they will supply

#

ahh

tame carbon
#

@flat wagon have you got a fitting router?

surreal finch
#

walks away as he needs more coffee before he types

flat wagon
#

I'll link i what I currently got hold on

#

so we going to replace it

tame carbon
#

@flat wagon yeah when you have gigabit network speeds, having a fast backbone is important

#
#

@flat wagon I have that one at home for my fiber optic connection

#

it has a 10G port, you can use to expand connectivity with like a switch

#

You can get short distance SFP+ cables for $20

flat wagon
#

I'll just spend a lot this one time and get the white switch u suggested

tame carbon
#

@flat wagon I invite you to have a look https://mikrotik.com/products

#

They sell many many products

#

and the software is the same on all of them, which is very nice

hollow marlin
# frigid pine That's my config.

Is there a config section for specifying PPP? While im familiar with BNG, VPDN not so much. L2TP is just carrying the PPP control packets but there should also be configuration for the PPP side which is where the keepalives need to be setup

reef gazelle
#

Just a huge disclaimer re: Mikrotik L3 it's ass-tier speed and feature wise

#

It'll do L2 all day everyday

tame carbon
#

@reef gazelle on their switches? yes.

#

very much so

reef gazelle
#

Don't expect near line speed L3

tame carbon
#

nope

thick minnow
#

What's L2 and L3?

tame carbon
#

@reef gazelle The CRS305 I have, caps out around ~1200mbit/s

#

but it switches at full 40G

hollow marlin
tame carbon
#

@thick minnow switching/routing

thick minnow
reef gazelle
#

L3 is where VLAN communicate to each other

tame carbon
#

inter vlan routing yes

#

@reef gazelle though some of the switches are actually capable of high throughput inter-vlan routing

flat wagon
#

for the switch u linked

tame carbon
#

depends on the switching chips they use

flat wagon
#

yes

tame carbon
#

@flat wagon err

#

I don't read amazong reviews. I just know mikrotik's products are reliable and affordable

reef gazelle
#

VLAN capabilities is where L3 gets most of its use, but not all.

tame carbon
#

and the interface yeah its a bit more complicated but nothing you couldn't do

reef gazelle
#

Inter-VLAN and ACL's

tame carbon
#

@reef gazelle I just have my RB4011 doing all the gruntwork

#

router on a stick

reef gazelle
#

The latter being "hey, iot devices can't talk to printers, but computers can" in layman's terms

#

I plan on upgrading my network stack but not until I move.

tame carbon
#

@flat wagon same screen is also available as web configuration.

reef gazelle
#

I'm on Unifi currently but only to have central control at a sensible price

#

USG is on wan failover because Eth0 oofed

#

CloudKey needs to be migrated to VM

tame carbon
#

@reef gazelle lol I got my IoT devices and LAN seperated

#

LAN masquarades to reach IoT

#

Easiest way to allow one way communication

reef gazelle
#

I have little IoT but it's locked down a fair bit

tame carbon
#

my IPcams are completely isolated

#

they get NTP from the router, and the surveilance VM has a vlan port to talk to the cams

#

no route to 0.0.0.0/0

reef gazelle
#

I have one camera, no expansion until moving

tame carbon
#

CRS305

flat wagon
tame carbon
#

wat?

#

antiddos?

flat wagon
#

like idk dos

tame carbon
flat wagon
#

or ddos

tame carbon
#

@flat wagon its called having a faster internet connection than the person flooding you

flat wagon
#

wait

tame carbon
#

@flat wagon its marketing jazz

#

doesnt matter

#

by the time the traffic you wish to filter has reached your device

#

it has already come over your fiber line

#

thus, has no effect.

reef gazelle
#

Youd have to have two things in effect for "anti-ddos"

#

Full tunnel vpn tunnel to AWS or somethere (not to mention the money to pay for it)

flat wagon
#

it's what mine has currently

tame carbon
#

@flat wagon that's marketing jazz.

reef gazelle
#

And a firewall there to mitigate traffic to your internal network

#

@tame carbon that sounds like STP actually

tame carbon
#

Okay even if it does

#

Mikrotik supports all of that xD

#

@flat wagon Its not something you'll need or have to care about. trust me ^^

cosmic steeple
#

Rate my networking

tame carbon
#

I can tolerate the pile of cables

#

what I cannot tolerate is that asus router

reef gazelle
#

Pile of cables is annoying given there's an empty rack right there

#

Ziptie the devices down or something

tame carbon
#

@reef gazelle or better

#

You buy one of these

reef gazelle
#

Also, don't piggy back power strips

tame carbon
#

YOu dont have a lot of equipment anyways

cosmic steeple
#

Where my modem

tame carbon
#

other half of the network is on that fiber

#

goes to my office

reef gazelle
#

The 2U wall vertical mounts are only useful for oob mountable equipment usually

tame carbon
#

@reef gazelle or a CPE switch for multiple fiber customers or something

reef gazelle
#

You could use 3m tape or hook and strap strips

tame carbon
#

I've seen this before, where they had a highspeed 25G switch

#

and bunch of access ports going to each tenant

#

bunch of vlans

reef gazelle
#

But a US-8 and mini router don't justify a wall mount for me

#

Most of that CPE has ears though

cosmic steeple
#

Amazon link please

reef gazelle
#

And if not there's usually a wall mounting frame that comes with them

tame carbon
#

@reef gazelle lol that vertical wallmount +

#

Big brain

reef gazelle
#

I hinted at that with the 3m tape but it'd be a pain imo

#

It'd be cleaner and less deep with target branded pegboard

tame carbon
#

@reef gazelle Im doing a big outdoor installation soon

#

gonna be using one of those RB4011's as centerpiece

#

I still can't think of an excuse to not use it

reef gazelle
#

Looks like a DIN panel router

tame carbon
#

@reef gazelle I got one of those at home

#

and whatever I can throw at it, it chomps through with ease

#
#

i'll be using around 10 of those

#

and a couple 60GHz backhaul antennas

#

got a total of 1 gigabit to distribute

cosmic steeple
#

Any guides to cable networking a house or a company in USA ct

peak cloak
cosmic steeple
#

Planing to move this need out and move pc in here

peak cloak
#

get fish tape

cosmic steeple
#

Only 2 wall power by the door and need

peak cloak
#

plan it out

#

know where your beams are

#

which direction they run

#

easiest would be get into the basement (if you have one) and back up

cosmic steeple
#

Want like a modern power cable plates

peak cloak
#

yes

#

wall plates

#

I have a ton

cosmic steeple
#

I have like 8k to spend lol

peak cloak
#

why 8k..

#

that's way too much

cosmic steeple
#

Taxes

peak cloak
peak cloak
#

save it as well

cosmic steeple
#

I planing to wire the electric and networking to the house

peak cloak
peak cloak
#

don't do it yourself

#

unless you know the codes

#

and how to do it

cosmic steeple
#

How much would it be for someone to do it for me

peak cloak
#

no clue

cosmic steeple
#

What about my ax11000

peak cloak
#

and just

#

spikes

#

cringe

cosmic steeple
#

The like 3 power in this whole house

#

My friend have the next up model

#

Do you need a permit /contractor

peak cloak
#

idk

#

I wired my house with no permit

cosmic steeple
#

I can put the server room in the gym

peak cloak
#

for high voltage you technically do

#

key word

#

technically

tender hazel
#

@flat wagon that auto DoS feature is potentially dangerous - I am reading that what it does is it turns off the switch port if it receives more than 3 malformed packets from that port

#

a malformed packet doesn't necessarily constitute an attack

#

I'm seeing message from people about it blocking their printer because their printer software has some kind of bug where it sends certain packet types malformed, or blocking their uplink port for the same reason and then the entire switch goes down

waxen scroll
#

@peak cloak i'd get in trouble just for using romex

#

my area is conduit only.

#

if you do whips its gotta be like less than 2 foot

peak cloak
#

never knew

#

My basement is just romex everywhere

waxen scroll
#

yep

#

infact there are places that go a step further and want all low voltage in conduits

waxen scroll
#

keep the union workers employeed

tame carbon
#

@tender hazel the L3 hw offloading to the switching chips for routing on those CRS317 is crazy

#

juan showed me some of the stuff they did on rOS v7

#

if they bring this to the CRS305, that would be so nice

#

its same series of switching chip

marble nacelle
#

sup guys

#

i got me something

#

TP-Link Range Extender RE450

#

and it gives me good speed

tender hazel
#

that's quite good for an extender, arvine

#

it's triple chain, your router must be triple chain too

#

that's the only way you could get that rate

marble nacelle
#

whats a triple chain

tender hazel
#

it's the number of antennas/polarizations

#

more chains mean more bandwidth per device if the connecting device has that number of chains

#

an AP with three chains will be faster than an AP with two chains as long as the device also has three chains, otherwise it won't be any faster

#

most devices are dual chain so you are limited to around 500-600Mbps in best scenarios

#

triple chain devices can give more theoretically

#

your extender is knocking the bandwidth in half, which means that the huawei by itself is capable of giving at least 700Mbps which is really only possible if it has three chains

#

unless of course you are plugged into the range extender with a cable from your computer

frigid pine
tender hazel
#

are you doing LAC/LNS stuff?

#

@frigid pine I don't work with Cisco very often anymore but MikroTik has an example config here using Cisco as a LAC that may help

#

I'm sure you don't care about the mikrotik parts of that example config but perhaps the Cisco part will be helpful

frigid pine
#

I keep wondering if it is even possible from LAC side.

#

anyways I never noticed Mikrotik have a subdomain named help. This looks better than their Wiki pages. xD

tender hazel
#

@frigid pine it is the replacement for the wiki

#

the wiki is going to be shut down after they finish moving their pages over to the new help domain

frigid pine
#

Nice.

tender hazel
#

actually something I've figured out is that they have moved some pages over but haven't linked the old wiki pages to the new help pages yet, so the help pages are more up to date

#

@frigid pine that might be the command you need?

frigid pine
#

No this command is only used for tunnel. I need something which may affect the sessions inside that tunnel.

#

My tunnel hello is configured as default 60secs.

tender hazel
#

ok

fringe crow
#

Hey yall real quick question... I host a server on zap hosting for one of my games but I'm looking to move over to a vps. I saw contabo was cheap but offers good packages... have any of you guys ever dealt with that company for a vps?

plain siren
fringe crow
#

Okay thanks, I appriciate that for sure!

plain siren
#

https://lowendbox.com/ @fringe crow Heres a good place to look

fringe crow
#

Thanks I appriciate that!

plain siren
#

This is basically the market place central for that kinda stuff

fringe crow
#

Sweet, thank you

tame carbon
#

@fringe crow linode is also great for hosting

frigid pine
#

What tools do you guys use to draw network diagrams?

tame carbon
#

@frigid pine draw-io is quite nice

frigid pine
#

I use that too but don't like it's interface for some reason :3

#

ohkay so there's a desktop app too. lemme check.

tame carbon
#

I havent really done that much diagramming for networks

#

most of my work entails software design

#

so I am more into the UML-design of things

#

I use a combination of Visual Paradigm for certain diagrams

#

and Astah UML for domain and use-case

grizzled cove
#

I have an RDS Farm in Microsoft Azure and bossman now wants to create a whitelist only for accessing websites. Does anyone have any experience with this?

tame carbon
#

@grizzled cove run everything through an HTTP Proxy

#

thats what schools do to make sure people only use the internet for surfing

#

all traffic is blocked, except HTTP and a few other exceptions

grizzled cove
#

I did look at proxies but to me its a dead technology and easy to get around.. if you want to bypass a proxy, you can. I was thinking of using OpenDNS and configuring my forwarders on our DNS servers to point to OpenDNS servers

tame carbon
#

@grizzled cove and then someone uses 1.1.1.1

#

you could block outgoing DNS server requests, but that will just upset people

grizzled cove
#

It's an RDS server, so users don't have access to change network properties

plain siren
grizzled cove
#

Yeah that's the idea

plain siren
#

Microsoft ISA Server is another option

#

Its a Proxy server

#

Sorry ... Forefront TMG as its known as now

#

Too bad its basically old and dead lol

#

(squid)

grizzled cove
#

I settled for the middle ground

#

Had my DNS servers use OpenDNS IP's as the forwarders and used the Moderate preset in OpenDNS control panel

#

Strict preset caused some issues with Outlook as it blocks access to office365.com

#

Doing some research having a whitelist in a production environment is a recipe for disaster

vestal patrol
#

ah yes german internet

#

i pay 40€ for this shit

tame carbon
#

@vestal patrol nice DSL line you have there

#

I paid about the same a couple years ago

#

but for 4 down and 0.6mbit up

tawny flint
#

Hi 😄

#

so question

#

so this is my home NAS

tame carbon
#

@tawny flint you got permissions?

tawny flint
marble nacelle
tawny flint
#

the group is under is USERS

marble nacelle
#

i pay 105 dollars for this

tame carbon
#

@tawny flint yeah that's network, but what about file permissions?

tawny flint
#

same

tame carbon
#

clearly not

tawny flint
#

yes i did

tame carbon
#

because you dont have read rights on the directory you are trying to list

#

owner is admin

#

are you logged in as admin/

tawny flint
#

nope

tame carbon
#

theres ur problem.

#

There's user and group permissions

tawny flint
#

for the Filezilla im using the FTP_USER account

tame carbon
#

and idk what this GUI is doing

tawny flint
#

netgear Readynas OS 6.x.x

tame carbon
#

because I've always configured this stuff directly from config files

#

unless you have some kind of access log

#

gonna be hard to debug

tawny flint
#

i havent play with it alot

#

i know a few people in this server who has a Netgear Readynas

tame carbon
tawny flint
#

work with web

#

but why isn't working with FileZilla 😦

#

working with local IP but not with my public IP/ no-ip.com

#

ok so the issues is my Public IP i want to connect while im outside or at uni/college just dumping files in there

#

i dont know what sensitivity info but show this but im not from the US

tame carbon
#

@plain siren I was hoping so badly that this tool would have a T568B pinout on the side

#

I might just print out my own, and use some masking plastic and stick it on the tool

tame carbon
#

@plain siren im still fucking around with wires.

#

I thought this pushthrough would be much easier

#

fucking orange wire keeps going in the wrong hole

#

lets see if this tool was worth it.

peak cloak
#

never had an issue with passthough

tame carbon
#

@peak cloak its just

#

xD

#

me fucking aroudn

peak cloak
tame carbon
#

I did

peak cloak
#

don't look like it

#

It's hard to explain what I do

tame carbon
peak cloak
#

I like wiggle the wires in my hand

tame carbon
#

perfect.

#

time to test the wire tester

#

@peak cloak I remove insulation, untwist the ends

#

and then pull orange appart

#

and group green blue and brown

#

and put the orange inbetween

#

slide it onto the keystone

#

and pull it close

#

its always striped/solid/striped/solid etc

#

and Im an idiot

#

@peak cloak LOL

#

the cable I cut in half

#

was terminated with T568A

#

I just made a crossover cable O.o

#

wait no, I did the T568A and the cable was B

#

either way. I now have a crossover cable

#

take 2.

#

booyah. it works

#

perfect

#

@peak cloak $10 cable tester :D

#

I'm a big fan of this passthrough

#

makes life so much easier getting the insulation inside the keystone

plain siren
tame carbon
#

@plain siren they are just simple continuity testers

#

I opened up the back, electronics are actually quite simple

plain siren
#

yeah mines in pieces too

tame carbon
#

@plain siren that's it lol

#

there's a tiny IC on the backside under some goop.

flat wagon
#

Guys I just upgraded my internet to 1.5GBPS (from 940MBS) and I'm so conflicted on which speed test to trust.
My Ethernet cable is temporarily on Cat5 which is limited to 1gbps but idk which speed test to trust

peak cloak
#

your isp probobly has a netflix cache server right on their network

#

and your cable is not the limiting factor

#

it's your computer and router ethernet ports

flat wagon
#

Okay because I ran 4 other website tests and they also coming up with 930MBPS-ish

peak cloak
#

you would need to upgrade both to have at least 2.5G connectivity

#

which is expensive

#

that's why imo 1.5G just isn't worth it

#

1G is perfectly fine

flat wagon
#

our home networking is revamped with expensive switches and the ISP just gave us their new 10G router

tame carbon
#

Overhead.

#

930mbit sounds about right

#

Theres protocol overhead which it doesnt measure.

peak cloak
#

and are the switches 2.5G?

tame carbon
#

@flat wagon I recently linked you to some 10G capable gear

#

Gigabit wont cut it at those speeds. or at least not at full throttle.

flat wagon
#

yes I know and my switch is 10G atm but it's 8 ports

#

I'll link to my motherboard hold on

tame carbon
#

@flat wagon 10GbE (10G ethernet over copper) is NOT worth it.

#

The interfaces are far more expensive

#

You're better off using SFP+

#

and getting a fiber

flat wagon
#

not sure though

tame carbon
#

That's gigabit.

flat wagon
#

o

#

so I need a 2.5G card too?

tame carbon
#

@flat wagon Skip 2.5G

#

its relatively new, poorly supported.

#

and expensive

#

just go with SFP+ (10G)

#

You need one of these cards

#

They have SFP+ cages, like the switch I linked you

flat wagon
#

okay hold on

tame carbon
#

(The card in the image is an Intel X520-DA1)

#

You dont have to get 1.5G on every computer

flat wagon
#

i got the basic knowledge in networking but not super extensive, so what ethernet cable do I need to plug it into that? it seems like a different connector

tame carbon
#

1G is still fine for a laptop and such

#

@flat wagon ah ok. normally with copper ethernet, we all use RJ45

#

but once you go to higher speeds, the connector becomes a module

#

those SFP+ cages are holes for such modules

#

This is a copper cable, that you can directly plug into those cages

#

The same is possible with fiber optics.

#

its all SFP+

flat wagon
#

im just copying all the links on a notepad atm

#

hold on

tame carbon
#

@flat wagon now, such a Direct-Attach cable is only cost-effective within 3 meters.

flat wagon
#

ok i need like

tame carbon
#

Once you need longer runs, you can either get active optical cables.

flat wagon
#

50 feet

tame carbon
#

@flat wagon these are the same as copper

#

but they have fiber inbetween

#

also plugs into SFP+

flat wagon
#

will that support the full 1.5g?

tame carbon
#

@flat wagon it does 10G.

#

@flat wagon You use these kinds of cables between your Switch & Router

#

if you want to have full speed networking on your computer, you'll need one of those 10G interfaces

flat wagon
#

can you link me the SFS product on amazon including the pci card and a 50feet

#

cable

tame carbon
#

@flat wagon no just buy off FS.com directly.

#

they ship worldwide.

#

And they are the cheapest

#

@flat wagon network card leaves some options open. You don't have to get an intel card.

#

but it has to be SFP+

flat wagon
#

so where's something like a 50ft?

tame carbon
flat wagon
#

o im blind

#

ok

tame carbon
#

@flat wagon active optical is the easiest

#

because you can also get SFP+ modules with seperate patch fibers

#

That's what i have here

flat wagon
#

how are they the easiest

tame carbon
#

Because if you get dust in the fiber patch

#

then you have no signal

#

those active optical cables cannot be removed, they are spliced onto the connector

flat wagon
#

ooo

#

ok

#

thse prices

#

arent bad

#

i was expecting worse tbh

tame carbon
#

@flat wagon for 10G its very good :D

#

2.5G is about the same price, but you can barely find gear for it.

#

Thats why I suggested use 10G instead.

#

its futureproof, and not a gimmick :D

#

These are pure fiber modules

#

you remove the rubber plug, and plug your fiber in there

flat wagon
#

are they using the same image across all the cable products on their webpage

tame carbon
#

Yea..

#

because they all look the same, its just the length that is different

#

there's 1000s of different SFP+ modules

#

for different types of fibers, different wavelengths for the lasers

#

simplex, duplex

#

Active optical is therefor a bit "easier"

#

because you cant make a wrong purchase.

#

They just come as-is

#

and you plug them in, and boop. it works

flat wagon
#

so the switch u linked also supports SFP but my router itself doesnt have a SFP connector support, just regular ethernet

tame carbon
#

@flat wagon SFP or SFP+ ?

flat wagon
#

sfp+

#

but it has cat8 running tot he switch

#

to the*

tame carbon
#

@flat wagon that could be 10GbE

#

10G on copper. which works.. up to 25 meters

#

You'd want something like this ^

#

This plugs into SFP+

#

and has RJ45 on the other side

#

But these things are very expensive.

#

$55

#

RJ45 10G costs a lot more

flat wagon
#

ok accept fr cuz i'll probs be asking a lotof questions in the coming days when i order stuff

#

it's a lot to take in

#

all at once

tame carbon
#

@flat wagon ye it is :D

#

I went on this journey 3 years ago

#

took me about a month or so to do research

#

but I went into fiber specifically

#

These are good for 10 kilometers of fiber

#

xD

flat wagon
#

but if i wanted to, i can just get a 25 meter cat 6 cable and a sfp+ pci card and the generic ethernet adapter and plug it into the card?

tame carbon
#

@flat wagon I would only do that if the network card in your computer is 10G RJ45

#

if you have to choose, I would get something with SFP+

#

its more flexible, as you can do fiber or copper

#

@flat wagon if you wanted to run copper, you have to get cat6a (make sure all sides are shielded)

#

high speed ethernet on copper is subject to interference.

#

so you need shielded cables

#

Shielded ethernet means that there's a grounding jacket around the core

#

@flat wagon the interference, and the price of RJ45 interfaces, and extra costs in cabling make it not really attractive

#

If you go back to that switch of yours (CRS326), if you really wanted 10G for every computer.. this wouldnt be ideal

#

CRS317 is an all-SFP+ switch:

#

But that CRS317 is for really heavy switching (and soon maybe routing)

flat wagon
#

Back

#

let me read

tame carbon
#

@flat wagon no questions are stupid questions. esp if everything is new to you

#

so ask away

flat wagon
#

ok so just back up a little bit, so my router which is a ISP provided router (they also provided a small UPS battery backup for some reason for the router)
but ok so my isp provided router.... it doesnt have SFP+ so I would need an adaptor between that router and the switch?

#

for the active optical cable or do I just keep the CAT8 I have running between my switch and my router

#

im so confused

tame carbon
#

@flat wagon okay, so such an active optical cable is for directly connecting two SFP+ cages to eachother

#

And @flat wagon as for the ISP equipment, you'd have to look at the datasheet or manual

#

If they use 10GbE then you can use a module to adapt it to SFP+

#

@flat wagon if you had some more information on the ISP equipment, I could have a look

flat wagon
#

Yes one second

#

they also gave us

#

ugh

tame carbon
#

@flat wagon if you are in luck, you may not need that device at all

#

the ISP I have here, doesnt even ship a modem :)

#

I just have a fiber with SFP that plugs directly into my gear

flat wagon
#

which device do I not need?

#

o

tame carbon
#

@flat wagon yaasss. it makes life so much easier not having to deal with shitty ISP gear

flat wagon
#

Normally I would agree

#

but this router seems to be pretty high end and it's a mesh network with 4 boosters around the house

#

since it's a 3 story house

tame carbon
#

@flat wagon yeah but all that mesh shit

#

is garbage

flat wagon
#

o?

tame carbon
#

because they are an internet provider, not a hardware manufacturer.

#

If you want a reliable wireless setup, you buy specialized gear

#

those mikrotiks have a very nice way to do managed wireless

#

@flat wagon errr, can't find specifics on telus' website

flat wagon
#

same

#

hold on

tame carbon
#

gimme another 30 mins. I just got called for dinner, I'll be back soon ^^

flat wagon
#

Thats all I found and okay!

waxen scroll
#

why have telus when you could have ubiquiti

flat wagon
waxen scroll
#

you sure? check your bill for fees

flat wagon
#

our internet for 1.5G is 70/month because it's a loyalty plan

#

that's CAD too it's lower in USD

waxen scroll
#

loyalty plan? wtf is this concept

#

i have to quit and join back to get low rates

flat wagon
#

they got a loyalty department and they are responsible for ensuring to keep make sure their long-time customers (minimum 4 years) dont end up switching so that's when they start offering special rates.

We have TELUS mobile phone (so 3 iPhones on their plan), TELUS landline phone, TELUS cable tv (I never watch tv but got it in the bundle abyway) and finally TELUS internet at 1.5G.
All this costed $200/month