networking

[arctic zephyr]

I check that on the cable itself?

[frigid sphinx]

CCA (Copper Clad Aluminum) is a way to reduce the cost of cabling by changing the wires from solid core to a aluminum core with a copper outer plating

yep

[arctic zephyr]

let me check

[frigid sphinx]

and the other as we discussed.. is terminations

[arctic zephyr]

the cable is this one - https://www.tekaelectronics.com/pt-pt/pares-cobre/cabos-uutp-futp/cabo-uutp-cat-6-cu

the termination I can't see now

it seems the cable is not CCA

good news on the cable I think

[frigid sphinx]

yep which leaves termination and run lengths.

[arctic zephyr]

length of the cable?

[peak cloak]

cable could also be damaged during the run, but that's like worse case

[arctic zephyr]

i think in this case is less than 15-20m

[peak cloak]

I've seen the things electricans do to ethernet

[arctic zephyr]

i also saw

[peak cloak]

running in a bundle of high voltage electrical wires

[arctic zephyr]

i have to leave now, later I will try to check the terminations. Thanks for the great support

there were some errors here in this remodelation, that's for sure. maybe this was one of them... oh wel...

[thick minnow]

currently trying to use caddy, the top domain works as expected, but when trying to access the bottom one's server, nothing works, and the way it fails is different depending on the port i use (80 causes infinite redirects, 8080 gives a 502 with no body, and 443 says "Client sent an HTTP request to an HTTPS server."), any ideas?

i.bottomservices.club {
   reverse_proxy localhost:40115
}

2b2t.bottomservices.club {
   reverse_proxy localhost:8080
}

the server config said it should be running at 8080 so i don't know why this doesn't work

actually nevermind, it's an issue with the server itself

[tiny scroll]

whats the diff between cat 5e and cat 6 in terms of networking speed

[primal ice]

https://www.google.com/search?q=difference+cat5e+and+cat6

[gaunt agate]

Long story short I have a programming project at school but the school computers aren’t great and have limitations. I was wondering if it was possible to run Apache Guacamole off my home desktop?

I have no clue when it comes to networking so if anyone is able to help me out I’d really appreciate it

[peak cloak]

rdp is better

just setup a vpn first, don't expose rdp to internet

you can even use something like zerotier

[gaunt agate]

I need something that doesn’t require me to download an application on the school computer which is why i’m mentioning guacamole as you access through browser

[peak cloak]

ah

kinda insecure imo to open guacamole directly

what I like using for dev on school computers is github codespaces

or similar things

no gui stuff though, only dev on cli stuff and web

[gaunt agate]

If I needed to use applications such as unity etc or needed to run files which i cant execute on school network😂😂 doesnt seem to be any simple answer🥲

[unborn sluice]

why can't you run unity though

[gaunt agate]

because it people dont want to do their job properly and install programmes

@unborn sluice

[waxen saddle]

Guacamole is fine if you keep it behind a reverse proxy.

That’ll keep it encrypted.

[somber oar]

Woops, didn't read the topic first.

So yeah. Symmetrical 3gbps internet.

[frigid sphinx]

@warm frigate so you could build something into a portable app but it's not trivial but what do you need to build?

[heady dome]

Looking for 10GB nic for server any recommendations?

[sage torrent]

Hey, Guys I have a L2 switch which I want to make 2 LAN ports as failover mode like, if the 1st LAN port is unplugged the whole data goes through 2nd port is this possible ??

[frigid sphinx]

yeah it's called LACP

I must buy some more patch cables I ran out of so I stole one from a LACP connection on my proxmox host 😉

[cobalt canopy]

some recommendations on 12-16 port 2,5gig switches, preferably with atleast 1 SFP+/10Gig port?

[pseudo blade]

Spanning Tree Protocol will just do that for you assuming the switch isn't complete garbage

If your switch is garbage/STP is disabled you will instead get a switching loop but usually it's pretty easy to tell if STP is present - one of the port indicators will shut off until the other is disconnected.

[pseudo blade]

QNAP has the qsw-m2116p-2t2s, Netgear has the M4250. If the price doesn't appeal consider used 10gbps switches or if you need multigig on all ports

[cobalt canopy]

looked for used 10gig ones already, but the marked for them is a bit fucked here rn, can only find the ballin enterprise stuff for 1k-12k per switch

[pseudo blade]

Not really any other options unfortunately

[frigid sphinx]

10gig is interesting in that 10GbaseT skipped the datacentre (they all went fibre sfp because power)

[gleaming siren]

can i replace my isp router with a 10 gigabit router or do i need to replace my modem aswell

and do i need a 10 gigabit ethernet cable to get that speed?

[low pond]

Depends on whether the modem could handle it, usually it's managed by the ISP, so if you get a 10G plan they should send you something that's compatible

[clear igloo]

Well first you need to pay them for that speed

[gleaming siren]

So I can't buy one by myself and cheat the system

[low pond]

Obviously not, you'd need to buy a plan from them anyway for getting those speeds

[peak cloak]

No, not how it works

Can't fit 10gig through a 1gig pipe

[gleaming siren]

My router rn is 1 gigabit

It cost like 100 bucks wifi is pretty expensive here

[peak cloak]

Equipment and service are 2 seperate things

Have to have equipment that is capable of the service

But just having equipment won't do anything

You can have 10gig local, but not 10gig to internet

Even then you won't have 10gig to most destinations

[gleaming siren]

Nvm it's 800$ for 1 gigabit

😂

And it's the max speed

[peak cloak]

Most places don't have 10gig

I don't even have gig. I can if I wanted but there is no point for me

300/300 works just fine

And I barely use that full pipe

Just in bursts when downloading and uploading files

Which is great to have

[hard cedar]

Thats basically the normal price for 1gb

[low pond]

Where are you from, just curious, Gig here is also pretty expensive

[hard cedar]

you mean 10gig right??

[rocky badge]

https://i.ryois.me/rFgUgQAar2

this is tempting sometimes lol

[low pond]

In the Right places, 10G is very affordable 🤷‍♂️

[rocky badge]

Funnily enough, this is a rural area.

"Regular" service https://i.ryois.me/88U07TKwS8

business 10 gig https://i.ryois.me/riqHz0EYWV

[low pond]

Ah yes now we are getting in the transit level cost for 10G

[gleaming siren]

Nope 1.

[remote salmon]

Hey guys, I just got fiber installed and running in my house (1gig) and upload/download is about what I anticipated on wifi (~500 up and down) but on my hardwired PC, I'm getting 900down and about 15 up. I feel like theres something obvious I'm missing here, could it be something to do with my ethernet switch?

[worn viper]

Is 300/30 internet good enough for 4 people with occasion torrenting

Or should I get 600/60

[worn viper]

I thought that it was a gpu for a second

[low pond]

Should be

[verbal ridge]

Any opnsense users here? How about opnsense + dd-wrt users?

Long story short, Netgear screwed over the Nighthawk 7900 users, I ended up installing DD-WRT on it and it fixed everything for a few months. A few days ago it started acting up. I factory reset it and restored the settings and everything worked again, until yesterday. LAN and WLAN both work, just no internet.

This gave me the kick I needed to finally set up opnsense, and now I have the modem going to opnsense, opnsense going into the wan port of my nighthawk, and both LAN and WLAN work, I can access the router on 192.168.1.1 and I can access the AP on 192.168.1.2.

The issue is everything is very slow.

[peak cloak]

opnsense is on what hardware?

[verbal ridge]

Let's see if I can find where to get it to give me a printout.

This is the Dashboard

[heady dome]

What model?

[verbal ridge]

It's a dual gige Intel NIC I think.

[somber oar]

Its a Dell Broadcom one

[peak cloak]

but like what did you install opnsense on?

[somber oar]

BCM957810A

[verbal ridge]

A compact workstation?

On an SSD

And if it's relevant, it's not GPT but MBR because this Silicon Power SSD's firmware does not work with GPT.

Sata 3

[peak cloak]

that stuff doesn't matter

that's just boot

[verbal ridge]

Then I'm not sure what you're asking

[peak cloak]

like cpu

[verbal ridge]

Intel(R) Core(TM) i3-4170 CPU @ 3.70GHz (2 cores, 4 threads)

[peak cloak]

does internet just feel slow? what type of bandwidth do you get on speedtest.net

[verbal ridge]

Should be gigabit, typical comcast I got 418down, 42 up (that's right) at 10ms when connected directly to the router.

I get between 100-200down at 12-15ping connected directly to the AP.

In my room which is hardwired to the DD-WRT router now AP I'm getting 11ms ping and 90mbit down right now. Upload is normal.

[peak cloak]

honestly no clue, there's lots of hardware optimizations on router OSes so dd-wrt may not be using that. hardware really isn't my strong suite

[verbal ridge]

So it's consistently slow across all devices.

[peak cloak]

why I mainly don't really flash 3rd party firmware.

[verbal ridge]

Speed wise DD-WRT was fast when it was working.

[verbal ridge]

It was this or throw a perfectly good router into the landfill.

[peak cloak]

what changed?

[peak cloak]

what was wrong with original firmware

[verbal ridge]

Netgear pushed a security update that broke Wifi. Wifi literally didn't work, and then they never pushed a patch.

I also discovered after installing DD-WRT that an update they pushed for their Disney parental control BS hurt performance. I went from 250mbits down to 750mbits once I moved to DD-WRT.

I didn't want to revert back to the unsecure firmware, so I moved to DD-WRT.

I don't know why DD-WRT now decided to stop functioning properly. I don't think constantly factory resetting it is a viable long term solution.

opnsense is a more robust router and firewall anyways.

[peak cloak]

never used opnsense so can't really comment on it

[verbal ridge]

This is clearly a configuration problem.

There is either some conflict/overlap or something needs to be tuned.

[peak cloak]

idk, maybe, but I honestly doubt

[verbal ridge]

Each piece of equipment on its own works fine, but together there is a bottleneck.

[peak cloak]

maybe MTU? idk

doubt it would be changed from default

only opnsense is configured as router?

[verbal ridge]

Yes, afaik anyways

[peak cloak]

could be double-nat if the netgear is also as a router not AP

[verbal ridge]

I followed the DD-WRT wiki article for turning it into an AP

https://wiki.dd-wrt.com/wiki/index.php/Wireless_access_point

[peak cloak]

any packet loss to opnsense from client device?

[verbal ridge]

Hmm

How do I check that?

[peak cloak]

one way is to ping opnsense

isn't the most accurate, but it will be good enough for local troubleshooting

[verbal ridge]

Ohhhhhh kay

I decided to try and move the cable from the WAN port to the LAN port. Got 9ms ping, 716mbps down and 41.5mbps up.

So that tells me there is a configuration issue with DD-WRT regarding the WAN port.

[verbal ridge]

So for what it's worth, I discovered that the wiki article is way out of date and "Assign WAN Port to Switch" is deprecated and if you uncheck it, WAN automatically gets bridged to the LAN ports when you disable the WAN functions in the router.

Once I unchecked that, the WAN port is fine. I just got 900mbps down.

[peak cloak]

That would make sense

Since switch is hardware accelerated

And it was trying in software which was slow

From wan - LAN

Bridging

[mighty crown]

Try to get a dell force 10 switch set up as simple as possible and am running into some issues with the setup. I am trying to set it up as close as humanly possible to an unmanaged switch. Only reason I got this is because of the 10G ports I put in the SFP slots. Anyone here versed in the black magic that is switch setup?

[thick minnow]

why are things the way they are, IPv4 uses 4 byte addresses, IPv6 uses 16 byte addresses

can't they be just a lil consistent and call it IPv16?

[little schooner]

It will be called IPv16 when the USA measures with mm instead of inches

[unborn sluice]

[frigid sphinx]

@mighty crown yeah you should be able to just turn it on with no config if that's all you want.

[mighty crown]

All ports were down by default and it doesnt accept DHCP offers. Specifcally stated rejected. Looking it up it was missing the image path and config path or something like that in the dhcp request for the server default set up

[frigid sphinx]

what's the exact model?

you might need to enable the ports but you shouldn't need to worry about vlans..

@mighty crown did you sort it?

[mighty crown]

Sorry for the delayed response! I got all the ports live, and could see the 10Gig ports as well. But not one of them is being assigned an ip address.Its a force 10 s60-44t

[frigid sphinx]

when you say not being assigned an ip address do you mean from the switch dhcp server? or from your router?

[mighty crown]

From the switch. The router assigns IP addresses no problem, if I plug an unmanaged switch into the same cable everything works perfectly. Its the managed 10gig switch thats the problem at the moment I think

[frigid sphinx]

I assume this is second hand? did you wipe the config?

because it could have anything up to and including 802.1x or similar config on it

can you get a dump of the config? (try show run on the console)

config reference https://downloads.dell.com/manuals/all-products/esuprt_ser_stor_net/esuprt_networking/esuprt_net_fxd_prt_swtchs/force10-s60_reference guide5_en-us.pdf

[mighty crown]

It was 2nd hand. I have read through the manual and am still stuck unfortunately. The output from show run is this. Its not the entire thing, but every other port is configured the exact same way.

[frigid sphinx]

so is your dhcp server at 192.168.9.1 ? 😉

[mighty crown]

I found out from another discord that ip helper isnt really needed in this context as its designed for cross subnet which isnt applicable

Thats the router/dhcp so yes

[frigid sphinx]

because that's where a dhcpdiscover is going to be directed that's recieved on that port

but also.. if it's directly connected you don't want to configure a helper address

[mighty crown]

Yep so I have to go in and wipe out the helper address, but that still leaves it non functioning dhcp, any thoughts on a possible go from there?

[frigid sphinx]

can you telnet to the switch?

what procedures have you tried so far?

do you get link lights?

[mighty crown]

I do get link lights, all ports are live, and I am currently using a serial cable to connect to it.

[frigid sphinx]

did you do a factory setting reset of the switch?

https://www.dell.com/community/Networking-General/Force10-S60-Factory-Reset-Issue/td-p/4556718

[mighty crown]

It came factory reset but if we want to start from a base I can do that too, not like its working now 😄

Would you like me to factory reset it?

[frigid sphinx]

I think it's probably worth doing again

[mighty crown]

Ok stand by for reset

[frigid sphinx]

power cycle the switch and then break out of the loader

[mighty crown]

Its reimaging right now but by default it is in bare metal provisioning. It give me DHCP offer received on Gi 0/0 i rejected

When I looked it up apparently its because its looking for a special dhcp server that has a config file and image or something like that to image it

[frigid sphinx]

it's probably rouge dhcp protection

(so offers from 'access' ports are rejected by the switch and not propagated into the network)

[mighty crown]

Okay, any thoughts on how to turn it off? Looking this error up earlier didnt get me anywhere unfortunately

Apparently it also goes by the name jump-start for dell, and on the wiki page for it it says "Jump-start requires DHCP server, TFTP server and DNS server in the network environment.
"

[frigid sphinx]

can you post a full boot log? and can you get to a FTOS # prompt?

[mighty crown]

I am not sure how to get to the full boot log without posting like 15-20 pictures. As for the FTOS prompt, I can get to FTOS-BMP. I cant get to FTOS without disabling BMP/ jump start which I can gladly do

[frigid sphinx]

just pull the text out of your terminal put it in notepad and post the file 🙂

so jumpstart is the ... 'wizard' configurartor

[mighty crown]

God I feel dumb now :/

I dont think so, without having the DHCP server TFTP and DNS server it doesnt seem to do anything, and its only other option is just disabling jump start I think

[frigid sphinx]

yep so to disable it properly you do "reload-type normal-startup" then "copy run start"

[mighty crown]

Rebooting with that right now

I can post the log file after that hopefully

[frigid sphinx]

that should give you a blank switch with a privilaged prompt

it expects it's dhcp offer to contain extensions with config and stuff 😉

[mighty crown]

here ya go. Its not in an elevated prompt but just running enable will get me there

[frigid sphinx]

ok sweet.

wanna jump in a voice chat it might be quicker?

[mighty crown]

Sure!

[frigid sphinx]

problem was missing the switchport directive on the interfaces 😉

[mighty crown]

https://tenor.com/view/youre-a-wizard-hagrid-afirmation-magic-magical-gif-16533730

[waxen scroll]

https://www.reddit.com/r/networking/comments/u58ugz/why_do_some_aws_ndes_engineers_solicit_resumes/

[normal wadi]

Hey just wanted to get some recommendations on good wifi adapter please

[waxen scroll]

@hollow marlin I agree with one of the comments, they're probably desperate to find people to fire so others dont

[rustic cosmos]

hey guys, any good sim only, unlocked routers that are available in Euroupe? I’m looking for one and my operator, O2 has a bad selection and I really can’t decide
Thank you!

[olive plover]

routing gore

[waxen scroll]

looks fine, why would you go the other way to europe

[rain surge]

Any recommendations for wifi router and extender or wifi mesh kit? I have very low connectivity on second floor and looking to plug into my ISP router (in the basement) then have the extender/mesh node on the second floor. But so far every single wifi mesh kit on amazon for wifi 6 has 1/5 star review has the most helpful then a 5/5 star review as second most helpful (then another 1/5 then another 5/5)

[low pond]

You have not seen real routing gore kek

Same country, 200ms. Roams EU just to come back

[ionic finch]

I've had good luck with asus APs, they are easy to put into a mesh and support mismatched models. I ended up finding a deal on a asus rog rapture locally and it works great for me, covering ~2800 sq ft. I'm not sure I'd drop the $400+ it retails for though 🤢

Ubiquity is a common recommendation but I can't speak much on them. I setup a 3 AP 2.4ghz network with them nearly 10 years ago for my father and it still works so that is nice but I have no experience personally with their new offerings.

[frigid sphinx]

@rain surge my mate has tplink deco in his 3story weatherboard and loves it. I recently did a omada (ubiquity alternative) deployment and I'm really happy with it.

the omada AP's have a TERRIBLE WAF tho

[sudden kayak]

im actually in the process of redoing my parents wifi and decided to try out the omada system

good to hear you're satisfied (mostly)

[peak cloak]

WAF?

[frigid sphinx]

Wife Acceptance Factor (aesthetics)

[peak cloak]

ah lol

the wifi 6 ones look nicer

[frigid sphinx]

the 620HD I have is still ugly as.. I believe they've tidied it up tho.

[peak cloak]

seems fine to me

[rain surge]

Thanks, i picked up a tplink deco set

[rain surge]

thanks for the info, i tried finding a starting point for the ubiquity unifi and just gave up after seeing that the basic "dream machine" was 600+

[peak cloak]

Don't need dream machine for the APs

Just need a controller

I like omada better tho

[pseudo blade]

What are you looking for, speed/cost/feature-wise? My idea of good likely differs from yours.

I tend to start with an OEM board and stick a pcie modem on it, you might desire something simpler. (Perhaps say why you dislike the existing offerings?)

[rustic cosmos]

Speed and range

[rustic cosmos]

ooh cool

[pseudo blade]

Speed and range, eh? 4G or 5G? Need ethernet ports?

Can you get OK coverage on your phone?

Or do you mean WiFi range

[rustic cosmos]

5G, Don’t need those

[rustic cosmos]

WiFi range

[pseudo blade]

Ok so you're metro then

I personally would get something like the Mikrotik Chateau 5G or it's half-the-cost LTE12 variant (Do be aware they're a bit more complicated to set up than your average 4/5g router as it's based on RouterOS, the mobile app is nice though), if you want an internal battery and portability look into the Netgear Nighthawk 5G

I'm sure if neither of those work for the price, someone can advise a lower-cost alternative they have experience with, Huawei has some alright stuff too for all shapes and sizes

By wifi range are you trying to cover a small apartment? A house?

Both of the above will cover an apartment well enough

[flat wagon]

do u guys like my wireless speed of 0.00 mbps and jitter 2,200??? ik it's great 👍

[rustic cosmos]

A cottage, but we need to cover the sauna as well, so I was thinking about a mesh, but idk if it’s possible with sim routers

and the sauna is something around 6 meters from the cottage

[pseudo blade]

Protip: Just say that upfront next time and you'll get the right answer faster

[rustic cosmos]

yeah, i forgot about it, sorry for that

[pseudo blade]

You don't need fast bandwidth in a sauna probably so try with one radio first

And if it doesn't cover... get a repeater

A full mesh is likely overkill

[rustic cosmos]

we won’t need anything super fast, just music streaming, that’s it

[rustic cosmos]

yep

[cedar igloo]

If you buy a domain from something like ens or unstoppable domains, can you use those for mail servers and normal websites? Or is it locked down in some way?
For example, the .x tld

Edit:. I think you need some browser extensions for it to work. So they aren't normal domains - they are heavily limited in what you can do with them.

[unborn sluice]

you aren't limited with what you can do

but limited on how you can access them

[pseudo blade]

Mailservers won't know how to contact your mailserver, because such domains won't resolve via DNS.

So unfortunately, no.

I looked into it just then out of curiosity and they look pretty cumbersome to use, nearly useless.

I'd suggest buying a domain with TLD that will be present in normal DNS servers. Perhaps a .tk if you're very against paying per year and don't mind the risk of your domain getting yanked arbitrarily.

[hardy grove]

I use a linksys velop mesh system I find its pretty good I'm not sure if they do wifi 6 but I have been using it for about a month and I find its good, if you want a link to the one that I have just dm me

[midnight field]

I am not sure where to ask this so...
how do I stop these? it's downloading Windows 11 and I don't want it

[echo tulip]

I could use some help with my old Apple AirPort Express. If someone’s available?

[slate berry]

https://lawrence.technology/pfsense/

Found some handy guides for setting up pfsense. Looking forwards to converting one of my laptops into a pfsense router;

[atomic warren]

Hi I might be able to help, what’s up?

[echo tulip]

@atomic warren I got it to work I think. But it was slow as fuuudge. So I gotta get something else as a Wi-Fi extender. Any recommendations?

Gigabit LAN and 5ghz

https://www.tp-link.com/no/home-networking/range-extender/re450/ maybe?

I have LAN-ports around my house. But my router is on the first floor, so the Wi-Fi barely makes it to the 3rd.

[peak cloak]

get an access point

wifi extenders suck

[echo tulip]

@peak cloak Perfect! Cheers 🍻

[peak cloak]

with an AP you just hook it up to ethernet, so it's much better than trying to boost an already weak and inferior wifi signal

[echo tulip]

Range extenders just boosts the same signal, while an access point “creates a new one”?

[peak cloak]

well it's another base station, yes

it can be the same wifi name though

and the client will choose which station to connection to

[echo tulip]

Awesome! Yeah I want it to share the same SSID as my current Wi-Fi

[peak cloak]

it can cause issues with some client devices, and may require tuning of TX power

[echo tulip]

Perfect, that’s exactly what I need

[peak cloak]

omada APs are good @echo tulip

[echo tulip]

@peak cloak Not sure if those are sold here in Norway

[peak cloak]

hmm

[echo tulip]

@peak cloak Anything from tp link, dlink, zyxel etc?

[peak cloak]

well omada is from tp link

and they have consumer APs but idk how good those are

[echo tulip]

@peak cloak I pretty much just need 5 meter extra range

[peak cloak]

what's a electronics store in norway?

I can try to find something descent on there

[echo tulip]

@peak cloak check komplett.no

https://www.komplett.no/category/10281/datautstyr/nettverk/aksesspunkt?nlevel=10000§10273§10281&sort=PriceAsc%3AASCENDING

Speeds above 300mbps are preferred, so not the cheapest ones.

[peak cloak]

https://www.komplett.no/product/903983/datautstyr/nettverk/aksesspunkt/tp-link-eap225-aksesspunkt# ?

if the picture is correct that's the v2 one

I have the v3 one, it came with a poe injector as well to power it

[echo tulip]

I’ve been looking at that one.

[peak cloak]

unifi is good aswell, problem is that it requires a controller, or using the phone app, which can be annoying

[echo tulip]

https://www.dustinhome.no/group/hardware/nettverk/tradlost-nettverk/aksesspunkter

[peak cloak]

the omada stuff just has a webui like normal

[echo tulip]

Gotta do some research. Thanks a lot @peak cloak

Been eyeballing the ones from Google as well. But 150 euro for one, seems a bit steep.

[verbal ridge]

Anyone here work for an ISP and can maybe get me a manual for something?

I've been using this bad boy as a dumb gigabits witch for the last 11 years. A few weeks ago it stopped powering on. I would love to try and use it to it's full potential but I needed a user manual for that, and now I need a repair guide.

Quick googling has yielded nothing. Chances of finding either are slim I'd guess, considering this is designed for ISPs.

I can confirm both PSUs work, and that the main board gets power (there are power LEDs inside), and I don't smell or see anything burnt.

The internal Power LEDs come on, but the main power LED on the front does not.

[verbal ridge]

I don't know where to even start with this.

[waxen scroll]

nothing on serial?

[verbal ridge]

You mean connecting to the console port?

I haven't tried. I never did it before. I use it as a dumb switch, never tried to get into it.

I assumed if there is no power LED and no fan spin, there won't be anything else. I suppose I can plug my laptop into it.

That said, I don't know the first thing about that, so I'll have to wait until my father gets home.

[waxen scroll]

The storage could have corrupted. The console might tell you

[verbal ridge]

Can I use any regular RJ-45 or do I need a special patch cable?

Actually I don't even know how I'm supposed to access it

[peak cloak]

yeah you either need a computer with a serial port and an rj45 to serial, or rj45 to usb serial adapter

iirc

[verbal ridge]

I have a serial to USB adaptor but I don't know about serial to rj-45

I almost certainly do have it, just don't know where

[peak cloak]

not sure if it's rj45 exactly or something similar

[verbal ridge]

Conveniently my new Router/Firewall has a serial port

I'll look for those adapters later

[frigid sphinx]

you need a rollover cable almost certainly (it's wired differently to a ethernet cable (it's NOT 568A/B

@verbal ridge

[verbal ridge]

That's what I thought

But is it still an RJ-45? Can I terminate my own?

[frigid sphinx]

the connector on ethernet cables isn't technically RJ-45 (it's 8p8c)

but yes it's 'just' a 8p8c connector like your usual crimp tool does

[crystal shale]

Anyone familiar with Fritz!Box'es?

I dont really loke the way it handles DHCP(i believe thats the right term), and i want it to respect some rules i would like.

(please ping when answering

[peak cloak]

rules like what?

[crystal shale]

Okay, so, i had a plan, that plan involved cleaning up/sorting my ips

[peak cloak]

oh I see it in #linux

[crystal shale]

Yes

[peak cloak]

so you want network segregation

[crystal shale]

Probably?

[peak cloak]

that's not done within a subnet

you want multiple subnets

[crystal shale]

Quite possible

[peak cloak]

so it would be like 192.168.10.x for VMs

192.168.20.x for LAN

etc.

[crystal shale]

Oh, yes, that works too

[peak cloak]

thing with that, is that you need hardware that supports that

[crystal shale]

Hm

[peak cloak]

what you described in #linux , no one does since it honestly has no benifit except for cleaness

[crystal shale]

I have an Fritz!Box Fon WLAN 7590 HM..

[peak cloak]

the best you could do is manually assign each IP via DCHP reservation

[crystal shale]

Yeah, i would just like cleanness tbh

[peak cloak]

but for actual network segregation you need hardware that supports VLANs

and multiple subnets ofc

that's what I have

then you can create firewall rules between these subnets

[crystal shale]

I hate that my stuff gets some random ip and that it has no real system under it.. kinda sucks to remember ips that way

[peak cloak]

run a DNS server

[crystal shale]

Well.. fair

[peak cloak]

it may be an option in the box

[crystal shale]

Im assuming my box cant do vlans?

[peak cloak]

prob not, let me check

[crystal shale]

Oki

[peak cloak]

yeah no

[crystal shale]

Usually speaking, i want my Proxmox Web GUI to be accessable via WiFi and LAN, but not via the VM's..
I want my WiFi and LAN Devices to be able to talk to each other

[peak cloak]

for DNS an common option is to use DHCP hostname for the name

[peak cloak]

yeah, I consider wifi and lan the same thing

both are lan in my book

[crystal shale]

I usually just call it WLAN

(W for Wireless obviously)

[peak cloak]

like I have all of this...

I should really get rid of the ones I don't use

[crystal shale]

Hm..

A bunch-

Probably stupid question..

If i take one port of my server, and tell the box to route everything to it.. and the server is maybe able to do some magic.. and routes back some vlans via its second lan port... Is that possible?

[peak cloak]

for it to be a router, technically yes. Would I recommend it, no

but it would be kinda useless without a vlan capable switch

well not really tbh if you just want LAN to be output

and just want LAN <-> VM segregation

if you really just want VMs to be seperated you could NAT them behind proxmox

https://pve.proxmox.com/wiki/Network_Configuration

[crystal shale]

Hm.. i dont really understand much of this...

I have a rough idea of what you mean

But i have no background knowledge

Or not really much

[peak cloak]

so basically with NAT, it basically acts like your normal router, and puts everything behind 1 IP

vs the current config, where it bridges, so everything is on the same network

[crystal shale]

That sounds good to me

But also kinda odd..

[peak cloak]

the problem with it is that you cannot directly access VMs

[crystal shale]

Why so?

[peak cloak]

since everything is on one IP, you need to port forward on proxmox

[crystal shale]

Well, yes.

[peak cloak]

tbh I don't like doing NAT, it's an ugly solution

[crystal shale]

Ugly, but leaves me with more configuration

I dont have access to "my" router

Its my fathers router, who agreed on this all, but i dont have the password.. probably could just ask for it but oh well

[peak cloak]

like if your goal is to clean up ips it kinda doesn't really help as everything is on one IP and it gets messy with ports and stuff

[crystal shale]

Fair..

[verbal ridge]

Could I take a normal patch cable, and a normal serial cable, and cut them in the middle, and then solder the cables together to make a Frankenstein's monster 8p8c -> serial cable?

[crystal shale]

Well, main goals are Clean up ips, make an ip order system, and set up my server, so its console can be accessed by local devices, but not the VM's

For 1-10, i can just have the ips constantly set up

[peak cloak]

if fritzbox supports static routes I have an idea

would require router access though

or this would only work on PC that would require changes to routing table

[crystal shale]

Aka
.1 router
.2 wifi repeater
.3 powerline
.4 powerline
.5 powerline
.6 (possibly powerline)
.7-10 open for more

[peak cloak]

static routes, not IPs

[verbal ridge]

Why not just assign static IPs to all your devices? Then shrink the DHCP range to start above for random devices.

That's what I do.

[crystal shale]

(well, i have access to the router, just shouldnt like, bother him with ip stuff everytime we plug something in

[peak cloak]

could do that, but they want a firewall as well

[verbal ridge]

DHCP starts at 101, .3-.100 are reserved for static IPs.

[peak cloak]

https://en.avm.de/service/knowledge-base/dok/FRITZ-Box-3490/581_Configuring-a-static-IP-route-in-the-FRITZ-Box/ so it seems like it does

[crystal shale]

Good idea actually

But..

How would i go about getting the vms ip set up?

[peak cloak]

@crystal shale I have an idea that would work

[verbal ridge]

I know DD-WRT could do vlans, I think the Nighthawk routers could do it stock too.

[crystal shale]

Do i just tell the vm to use like.. .69?

[crystal shale]

Im all ear

[verbal ridge]

That's purely for looking clean and ease of access, it won't take them off your network.

[crystal shale]

Yes. Thats already one step close to completing all goals

[verbal ridge]

But you can configure VMware to not show on LAN

[crystal shale]

*qemu

[verbal ridge]

I don't know what you use, that's what I know. It is likely you can do the same on other hypervisors.

[crystal shale]

Yup

[verbal ridge]

This isn't the "proper" solution, but it is a patchwork that would work until you have a proper firewall/managed switch.

[crystal shale]

Aka when i move out

Which will be probably still 2-4 years or something

[peak cloak]

so basically you would run a router VM (a software like vyos), and that would be directly connected to your LAN, like the VMs are right now. Now you would create a new bridge in proxmox and all your VMs would be connected to it. With some configuration I can help you (just not rn) create this type of setup.

Lets say you have LAN of 192.168.1.0/24
You can have like VMs on: 192.168.10.0/24

The router VM would have the IPs of 192.168.1.2 and 192.168.10.1 lets say.

Now with some super simple config on fritzbox, you will be able to access the VMs on 192.168.10.1 - 192.168.10.254 and on the router VM configure firewall policies

@crystal shale

perhaps a diagram would explain better

[crystal shale]

Sounds fancy

Does my base network still work if my server shuts off?

[peak cloak]

yes

[crystal shale]

Excellent

[peak cloak]

since it's only routing the VMs

[crystal shale]

Delicate

And i assume the vms wouldn't be able to access nor see my local devices?

[peak cloak]

if you configure it like that, yes

[crystal shale]

But i Could still ssh into them? (Probs not)

[peak cloak]

yes

[verbal ridge]

You could configure that

[peak cloak]

you can configure it so they don't allow any NEW connections to your LAN

[verbal ridge]

So basically the only gateway between your physical network and your VMs would be your software based router VM

[peak cloak]

but still allow NEW connections from LAN,

[crystal shale]

*mind blown*

[peak cloak]

and ofc still allow ESTABLISHED and RELATED connections

[crystal shale]

That sounds amazing

[peak cloak]

the only config needed on the fritzbox is a static entry to basically say:

To access 192.168.10.0/24, forward traffic to 192.168.1.2

[crystal shale]

Would you be willing to hele set that up?

[peak cloak]

yeah, just not at this current moment

[crystal shale]

Yeah

Its.. 2am for me

Not really in the place to do anything rn either

I would wake up at like 8, and need to get some stuff done.. so id be free from.. lets say 14 (12h from now)

Till basically the end of this day (22h from now)..

Is there any chance?

Would be nice to have it done "today", as school starts after, and that could mean a bit of a stress hell for me, so could be that i wont get to do stuff

But if its not possible, ill try to get some free time somehow

[frigid sphinx]

mmm

@crystal shale you still about? or crashed

[peak cloak]

I'm helping him

[atomic warren]

Does a network switch cut speeds?

[primal ice]

a switch is basically just a splitter for what ever speed its rated at. so if its a 100mb/s switch - all ports would be capable of 100mb/s speed.

[atomic warren]

So basically if my speed was 1000mbps it would split them to 500?

[primal ice]

no each port would be 1000mb/s

[atomic warren]

Oh alright

That makes sense ty!

[sacred nest]

is 300 mbps broadband good for 250$ per year?

[glad ferry]

Per Year? Yes

That’s a pretty good deal

[frigid sphinx]

the cost for 250/100 is $200ish/month here.

[gleaming siren]

Can I ask for help about port forwarding here

[frigid sphinx]

Sure

it's pretty heavily router dependant tho so what are you using?

[gleaming siren]

Secrum

Eouter

Some routers don't support it right?

[frigid sphinx]

most do. but with CGNAT things have gotten.. squirrely

secrum eouter?

[gleaming siren]

Secrum router

[frigid sphinx]

model?

[gleaming siren]

I'll see

S3 ac2100

[frigid sphinx]

secrum or spectrum?

[gleaming siren]

Secrum

[frigid sphinx]

Sercomm s3 ac2100 Etisalat?

[gleaming siren]

No

It's from xiami I think

[naive spruce]

Hey any Idea about this, I'm trying to login to my router.

[unborn sluice]

means ERR_SSL_VERSION_OR_CIPHER_MISMATCH

[naive spruce]

aaa.... yes. can you help me fix that ?

[frigid sphinx]

what's the router and what's the browser?

[naive spruce]

Router:
https://www.amazon.in/Digisol-Gepon-300mbps-Router-Gigabit/dp/B079C1WJY1/ref=sr_1_4?crid=2YIMWIODVJ1YN&keywords=digisol+router%2Bmodem&qid=1650363465&sprefix=digisol+router%2Bmodem%2Caps%2C323&sr=8-4
Browser: Brave

[frigid sphinx]

hrm...

[unborn sluice]

hrm...

@naive spruce have you tried reaching the router over http isntead of https though

[naive spruce]

yes tried that

Tried restarting multiple times no luck

it works fine

other plex server on other IP works as expected

just the GUI or the page for the router login is not accessible

[frigid sphinx]

https://www.digisol.com/products/ftth-solutions/gepon/digisol-gepon-onu-dg-gr1310-300mbps-wi-fi-router-with-1-pon-and-1-giga-port/ says it's EOL 😦

[naive spruce]

😭

[frigid sphinx]

it's probabbly built on some horrid. soc that only supports some subset of crypto that the soc can accelerate and sorry outta luck

[rocky badge]

@clear igloo I wonder if Extreme has any tunneling for the APs back to the WLC

[waxen scroll]

They did when I worked with them

I don't see why they wouldn't now

For each network they can run in tunnel or local mode. Guest network can tunnel for security

[frigid sphinx]

@naive spruce there might be a option for your browser to enable unsafe ciphers

[peak cloak]

Use Firefox and in settings change the tls version to like 1

[rocky badge]

Ok that's what I thought

[fading oar]

i need a bit of help with cloudflare DNS and http
I have a nginx running and a dynamic update client for cloudflare, as well as a minecraft server on the same machine

the minecraft server is accessible externally via cloudflare but for some reason nginx isnt.

when loading the page from outside of my LAN it says "timed out"
any ideas?

[peak cloak]

what's the nginx config like

port 80 and/or 443 is forwarded?

[fading oar]

i dont have SSL enabled now for simplisity

the nginx config is the default one,

on firewalld port 80 is open
on the router 80 is forwarded and addressed to the host machine

in cloudflare SSL is disabled a swell

[peak cloak]

can you access it locally?

[fading oar]

yes

from my other laptop it shows the default page for nginx

[peak cloak]

try using mobile data and go to your IP

and it's port forwarded correctly right?

[fading oar]

i think so

its loading...

i think it timed out

:/

[peak cloak]

so yeah

[fading oar]

ive checked logs
ngnix hasnt recieved any requests outside of the LAN

[peak cloak]

could be ISP blocking port 80, your port forwarding not being correct

[fading oar]

hm

i really hope its not the former

ive forwarded 80 the same way i did for 25565 and ik 25565 works on the WAN

oh cool
cockpit can be accessed externally

[low pond]

In my case, my ISP does block 80, 443, 8080, and I think SMTP stuff but rest are opened to my knowledge, so you got to confirm that

[fading oar]

that sucks

but its possible.

yeah cockpit on 9090 works externally

[peak cloak]

I wouldn't port forward cockpit

insecure imo

put everything behind a vpn

[peak cloak]

verizon doesn't block anything from my knowledge, I haven't tested SMTP in, but SMTP out works

I was suprised

[low pond]

kek imagine email RIGHT out of your laptop

[fading oar]

yeah its very powerful
i only forwarded as a test

[low pond]

For the longest time I had my cockpit open on the standard port too 🥴

[peak cloak]

I was checking spam, and I saw proxmox mail

[low pond]

But yeah I'd guess it makes more sense to "local networks"

[low pond]

wow haha

[fading oar]

oh wow
i think my ISP blocks 22 as well

rude

[unborn sluice]

understandable. would actually assume anything <1024 is blocked

[peak cloak]

idk if it was spam cuz I had DKIM and spf setup for no mail, or because of my IP

[low pond]

22 and 3389 works in my case (SSH, RDP,)

[low pond]

Probably not IP, i mean how often do you see mail servers like from an ISP's IP used for residential stuff 🥴

[fading oar]

all routers have 22 blocked by default, that's enough security
and besides if ISPs actually cared about security they'd make the login to the web panel not admin admin.
anyway

[unborn sluice]

web panel is not accessible to the wan

[fading oar]

true ig

[unborn sluice]

users that care about security should change admin admin at the first (setup) time

[peak cloak]

well lots of mail servers blacklist residential ips

[fading oar]

it just seems a bit much to disable 22 and 80 with no way to open them

[unborn sluice]

it's not much

[peak cloak]

I don't understand it either

[fading oar]

i'll call my ISP
see if its negotiable

[peak cloak]

SMTP I can understand

[unborn sluice]

probs negotiable if you have static/business ip

for normal customer, they might just tell you no

[fading oar]

it didnt occur to me that the ISP blocking was a possibility
thanks, this has saved me a lot of time

[fading oar]

i'll switch ISPs then lol

my current one is pretty garbage anyway

[low pond]

If you even have other ISPs sure

[fading oar]

hmm?

wait, you dont have other ISPs??

how is there competition, price regulation,

[peak cloak]

depends

sometimes in an area there's only 1

[low pond]

my whole damn country: only one

[low pond]

Simple. There isn't

[peak cloak]

what country

[fading oar]

over here we have...

TPG, Vodafone, Telstra, Belong, IINet, SuperLoop, DoDo, Optus, AB, and a few more i cant remember
if you go way out in a rural area its pretty much just telstra, but its government controlled and generally pretty ok

[low pond]

UAE, don't let it fool you that we have two different ISPs here, the prices and stuff are basically the same, and availability of home fiber is great on one of them. Other one is only good for telecom

[fading oar]

huh

[cerulean anchor]

Fiber available in my zipcode... not at my house.

[limber river]

The local fiber company just finished installing all the conduit on our street. I'm stoked.

[viscid mural]

Anyone know something about Proxmox and how to setup certai IPs in VMs, because i can't get it work.

[dapper tapir]

if you wnat to setup the IP of the VM you can do it in the OS of the VM

Thats nothing that should be configured in Proxmox as far as i know

[viscid mural]

Yea already tried that, but anything i setup there, it just don't work.

[unborn sluice]

elaborate don't work

[dapper tapir]

which OS does the VM have?

[viscid mural]

For testing the network Im using Ubuntu desktop

[dapper tapir]

If you want to setup your IP and its using DHCP you can do it thorugh your Router to

[viscid mural]

IPv4 i want

[dapper tapir]

Yes

[unborn sluice]

IPV4 you would get

[dapper tapir]

What Router do you have?

[viscid mural]

Im also using addresses that host gave me, but i think i should use some addresses from proxmox right?

[unborn sluice]

no

[viscid mural]

🤷 ?

[dapper tapir]

Your VMs do have different IP adresses. For what do you need the IP Adress?

[viscid mural]

I just want have VM with separated IP from proxmox

[dapper tapir]

Thats something you already have

[viscid mural]

Yea probably, but when i setup the IPs in the VM still the VM aren't able to get on websites

[dapper tapir]

If you check under Network the IPv4 adress you will see that it's a different one than your hosts

[dapper tapir]

The VM doesn't have Internet Acess?

Did you set Static IP?

[unborn sluice]

can you verify that the IP in the VMs are one used in the subnet

[viscid mural]

I did

[dapper tapir]

have you set the dns Server and Gateway?

[viscid mural]

Explain

[unborn sluice]

what static ip did you used

[peak cloak]

proxmox by default is in bridge config

[unborn sluice]

no

[peak cloak]

so it's on the same network as the rest

[viscid mural]

the second i have from host

[peak cloak]

it will get IPs from your router

[dapper tapir]

Just make dhcp

[viscid mural]

I setup it manully so it won't

[unborn sluice]

yea just make it dhcp

[dapper tapir]

And it will make it all themself

[viscid mural]

No

[unborn sluice]

why do you even need static

[peak cloak]

then what's the issue

[viscid mural]

Because its server!

[dapper tapir]

Whats the matter?

[unborn sluice]

its server

[dapper tapir]

my server is DHCP too

[peak cloak]

dhcp reservation ftw

[viscid mural]

Well basically its not when its all on proxmox

[unborn sluice]

the what

[peak cloak]

I don't understand

[viscid mural]

vlan maybe?

[dapper tapir]

If you want it to set Static then you have to fill in the Gateway and the DNS Server

with your Routers IP adress

Have you tried to ping the vm from your computer?

[viscid mural]

I still clearly don't underestand

[unborn sluice]

no

[dapper tapir]

What have you configured in Ubuntu?

[peak cloak]

what are you trying to solve

[unborn sluice]

that's why use DHCP

[viscid mural]

No

For server you don"t use DHCP, thats dumb

[dapper tapir]

he can't connect to the internet

[peak cloak]

many actually do

static IP managment is hell

[unborn sluice]

we are all dumb now

[viscid mural]

But me not

[dapper tapir]

You can just set the IP in your Router

[dapper tapir]

that is true

[viscid mural]

You stop writing if you not helping

[peak cloak]

because it's not dumb. But anyway this a a cloud hosted proxmox instance?

[dapper tapir]

have you put in a gateway and dns server?

[peak cloak]

what's the exact info your host gave you

you can censor ips if you want

because I feel I am missing information

[viscid mural]

Thats not much informations for me 😄

[dapper tapir]

Have you control of your Router?

[peak cloak]

from what I understand it's a cloud hosted instance

[unborn sluice]

Do you know your router

[peak cloak]

ofc you won't have access to the router

[dapper tapir]

ah ok

[viscid mural]

No i don't

[dapper tapir]

It is Cloud hosted?

Or do you have it at home?

[viscid mural]

Datacenter somewhere, so its bare metal proxmox

[dapper tapir]

might you send a photo of your ip config in Ubuntu

then we might can help you better

[viscid mural]

Its just IPs that i have from the host, etc.. gateway and netmask

[unborn sluice]

so you can't use other IPs, since it isnt yours

[dapper tapir]

How are you controlling it?

[viscid mural]

If i can't why the proxmox website is working via IPv4?

[unborn sluice]

Proxmox have ip baremetal from router from the datacenter somewhere

[viscid mural]

I just have the IPs available that i can use them, but i can control them in the dedicated server

[peak cloak]

so use those IPs

[unborn sluice]

how it available? it same subnet with proxmox or you nat?

[peak cloak]

what's the issue

[dapper tapir]

No i mean. Do you use VPN

Or Trough a website

[viscid mural]

Bro are you actually dumb? I writed so many times that i use them 🤦

[viscid mural]

No i dont

[unborn sluice]

asks for help
calls people dumb
💯

[dapper tapir]

how do you acess it

?

[peak cloak]

and what's the issue you are running into

I'm trying to understand you

[viscid mural]

Writed it many times, but from you i don't want help.

[peak cloak]

you said it doesn't work

[viscid mural]

He's dumb you guys not 😄

[dapper tapir]

He can't connect to the internet as far as i understood

[peak cloak]

what doesn't work

assigning?

[dapper tapir]

on a ubuntu vm in his Proxmox he set static ip with the configuration he got from his server provider

@viscid mural Can you ping the VM?

[viscid mural]

No

But how i can ping it when the IP there won't work

[peak cloak]

did you set a default gateway

[dapper tapir]

To figure out the Problem i wanted to check what works

The providers

[viscid mural]

Should the second IP work if its opened for my Dedicated Server?

[dapper tapir]

Did you get private or publice IP Adresses?

[viscid mural]

All public

[dapper tapir]

Have you tried to ping your ip?

[viscid mural]

The server ip or my IP from server?

[dapper tapir]

the public ip of your ubuntu vm

[viscid mural]

100% loss

Well if the IP is for the bare metal server should it work to ping?

When i dont have the vm

[dapper tapir]

Yes

Can you ping your proxmox?

[viscid mural]

Yes

[peak cloak]

@viscid mural

what are the gateway settings for proxmox

[viscid mural]

that gateway i got from host

[peak cloak]

and you set it in the VM, right?

[viscid mural]

Of course

[peak cloak]

if you do ip route show it shows the gateway

hmm

@viscid mural https://pve.proxmox.com/wiki/Network_Configuration

what does your /etc/network/interfaces look like

[viscid mural]

In that is everythink as good

If i would need wikies i won't come up here

[peak cloak]

I think what you will need is a routing configuration

because of this

Most hosting providers do not support the above setup. For security reasons, they disable networking as soon as they detect multiple MAC addresses on a single interface

"above" references the bridged configuration

I would talk to their support because obviously I don't how how it looks

[viscid mural]

They have it allowed cuz they also have tutorial FAQ how to setup multiple IPs on proxmox

[peak cloak]

hmm

I assume you followed that

[viscid mural]

Yes

I added the additional ips tha i've got there

[peak cloak]

I would contact them, I can't help much without specfics

[dapper tapir]

i agree

[waxen scroll]

@jaunty talon happy bday

@clear igloo hallo

[jaunty talon]

@waxen scroll thanks :D

[clear igloo]

Happy b-day!

[jaunty talon]

thanks! :)

[knotty gulch]

My internet is 40 mbps help

[viscid mural]

How I can got Subnet? From Adress and gateway?

[peak cloak]

kinda

you can makeup a subnet that the gateway is in

but you won't know 100% unless it's explicitly stated

common one is /24

[viscid mural]

When i have /32?

Im trying to install Ubuntu server now... but its keep telling me that ip address is not contained in the subnet ..../32

[peak cloak]

a /32 is a single IP

it's a weird one, since it's kinda not a subnet

so it's not really possible for that to be your subnet, unless for like networking stuff where's weird

[viscid mural]

So what if i set up subnet/32 same as IPv4 for that OS?

[peak cloak]

wdym

oh

I guess you could try

[viscid mural]

Well now its not throwing errors

[peak cloak]

yeah it won't, since it's part of that subnet

[clear igloo]

Money is the answer

[clear igloo]

Then how will it reach the gateway?

[peak cloak]

Yeah that's what I was thinking

[hollow marlin]

I forget which version of Ubuntu I tested this with, but I was testing /32 with a default to the gateway in which the host was within and it did work. I only attempted it because I was looking at L3 down to access layer/host designs and ran across a post about it

[clear igloo]

Interesting, I guess I can see how that might work

[hollow marlin]

I have a suspicion that it was not 100% intended to work that way lol

[clear igloo]

Haha, I'm sure 🙂

An undocumented feature 😄

[hollow marlin]

Meanwhile many vendors still struggle with /31

[clear igloo]

I'll take a /31 or /30 over a /126 any day of the week 😄

/127 I can deal with just fine but 126s are such a pain

[hollow marlin]

We have /127 only for transport links, do not think I have run into any monster requesting to use /126

[waxen scroll]

with OSPF duh

[digital urchin]

Anyone know why this started showing up today?

And more importantly, how I get it to stop? I don't remember setting up network credentials.

[digital urchin]

Nevermind, figured it out.

Had to do the things the tutorial said, and then restart.

[finite scroll]

hey guys

a friend has been having a aporblem with his wifi where it disconnects out of nowhere then it doesnt show up on the networks menu anymore

for like 5 minutes then it comes back

do you guys think its a drivers issue or shitty mb wifi

I was gonna suggest for him to buy a wifi 5 pcie card

but idk if thats gonna solve the issue as i dont even know the reason

[snow lance]

can anyone help me with SMB it used to work fine then it stopped (truenas). works fine on my laptop. someone said smth with smb1 and idrk so any help would be appreciated

[gray knoll]

Have you tried Diagnose? Its rarely helpful, but sometimes it is...

[snow lance]

says cant resolve the issue

[gray knoll]

Hmmm.... No Idea... But if it is SMBv1, you can enable/disable SMBv1 In the "Windows Features"

[waxen scroll]

Have you tried wireshark? It tells you exactly whats wrong. Just gotta know how to read packets!

[gray knoll]

My SMB just randomly decided, that I wasnt allowed to access my server...

[snow lance]

i did with a registry edit should i do it with that then?

[snow lance]

well it works fine on my iscsi share

[gray knoll]

I think its a good idea, and you might need to restart, before it actually takes effect.

[snow lance]

ofc you say that lmfao but alright

[snow lance]

right after connecting it says this

the blue stuff looks like its just iscsi and after a while it come again

thicc boi

[waxen scroll]

I thought the issue was SMB. thats not over port 80

[gray knoll]

SMB uses Port 445 and 139... Maybe try those?

[snow lance]

it is, idk why it says that

[snow lance]

filter by those?

how do

[gray knoll]

Dunno, I havent used wireshark in ages....

[snow lance]

i saw this idk if it matters

[waxen scroll]

tcp.port == 445

[waxen scroll]

what about 139?

[snow lance]

same thing

[waxen scroll]

🤔

[snow lance]

works with 80

[waxen scroll]

https://cdn.discordapp.com/attachments/387022787480387605/966393236753121390/unknown.png

you got that message when running the wireshark?

[snow lance]

oh wait

i connected and it asked for credentials but i opened wireshark

ok trying again

takes a while to get that message

hoh

when entering my password it just pops up again

then it says this

wireshark:

[waxen scroll]

😵

[snow lance]

aaaaaaaaaaaaa

[gray knoll]

Soo.... Entirely different Samba-Problem: I cant access my share via Samba, because apparently I lack permissions to access it, but I can touch files with that user in that share without problems (via ssh) and the share has me as Valid User in its config section.

[gray knoll]

Ah yes, solved it. It was just Windows doing Windows things...

[finite scroll]

anyone got an idea?

[little schooner]

I had this happen to our production kace SMA appliance where credentials are right but it refuses to go and mount it. windows randomly decides when it should work and I really hate that behavior

[snow lance]

do yk fix?

[little schooner]

unfortunately no, it still happens here =/

[snow lance]

[little schooner]

we don't use the smb share at all, I had to use it to do upgrades

[snow lance]

ic

[little schooner]

thankfully it's not for anything else in our case

[snow lance]

i just clean installed my pc i dont wanna do it again ruijghnberuiyjsdfbn auoyzhi<jkb

[little schooner]

ughh ik, I hate setting everything up again

[snow lance]

networking has been plaguing me like BIG ass time last time i couldnt get port forwarding and local ipv6 smth to work and now it doesnt wanna use smb liuke uhrgfnesdijgokhbneasyiu<ojgb

what is "insanity"?

[gray knoll]

I thought v6 didnt have port forwarding like v4 does...

[snow lance]

it was for parsec

and like only within the pc

[gray knoll]

But Parsec uses UDP-Holepunching, right?
You dont need to forward anything,right?

[snow lance]

idk one of their mods said it

I fixed it tho

by clean installing

[gray knoll]

This basically says your PC needs ipv6 support, even if you dont have ipv6 internet. no port forwarding there anyways...

[snow lance]

yeah like i said lmfao

[gray knoll]

oh well, ignore my stupidity plz

[topaz mirage]

Hi,
should I get Netgear GS308-300PES or Tenda TEG1008D switch for my home? Just need more ports for NAS, Raspberry Pi (Pi-hole, Wireguard...), set-top box...
Thanks

[meager ginkgo]

Either would work

[topaz mirage]

Tenda is EoL and I couldnt find out if it is unmanaged switch.

[meager ginkgo]

If you have VLANs or anything advanced going on you're going to want a managed switch. Otherwise unmanaged is fine

[topaz mirage]

...do I even need managed switch? First of all I should optimize my routing, cuz I have a lot of hoping on and from switch.

[meager ginkgo]

For most users unmanaged is fine

[topaz mirage]

Do Docker containers count?It shows multiple network interfaces in GUI.

[meager ginkgo]

No, that should work fine with an unmanaged switch.

[topaz mirage]

Great. Thanks.
BTW - Now that I have Synology...it has 2 LAN ports. Does it have something to do with Link Aggregation option in my router settings?

[meager ginkgo]

not sure on that

I would think the synology would do it automatically

[topaz mirage]

Probably. I'll get all info and probably come back in half a day back for info on optimizing my setup. Like console, DNS recursive server, NAS, TV and Shield on one switch...not a great idea I think.

[meager ginkgo]

I really need to re-do my network closet haha

I want to get a 24 port UniFi PoE switch, and a Dream Machine Pro Router

[peak cloak]

switches don't do any routing

[peak cloak]

doesn't really matter

[topaz mirage]

But...all that traffic through single cable...

[peak cloak]

and?

I mean yeah it's going to be limited to gigabit

[topaz mirage]

Couldnt I optimize it so PC and NAS is on the switch, so it can route it on itself and not through router?

[peak cloak]

if it's on the same subnet it already does that

[topaz mirage]

oh...

[peak cloak]

router or L3 switch is only needed when going between subnets

[topaz mirage]

Yeah, they are 255.255.255.0

[peak cloak]

that's the subnet mask yes

everyone these days uses CIDR format, so the subnet would be something 192.168.1.0/24

[topaz mirage]

Should I split my network on subnets? Everything is on that subnet.

[peak cloak]

if you want

I do

[topaz mirage]

Yeah. 192.168.0.1xx

[peak cloak]

seperate WAN servers from my LAN

since traffic will need to go to router to go between subnets, you can add firewall rules

[topaz mirage]

Like I dont have IP cams or aother iot devices, so...its not too much for the user's eyes

[topaz mirage]

Gotta educate myself on this more...

[formal ibex]

Does anyone know to get around vpn blocking? I have an OpenVPN server on my router that I connect to from school, however my school seems to be blocking the connection. I used to solve this by changing the port number for the vpn but that doesn't seem to work anymore. Any ideas?

[low pond]

They can block it by "DPI"

Long story short use a different alternative, Try Wireguard for example

[formal ibex]

My router only supports pptp and OpenVPN so idk how i would use a different service

[peak cloak]

Run a server on a seperate device and port forward to it

You could also try something like tail scale or zerotier which doesn't require forwarding

[gray knoll]

My school blocked UDP completely, maybe switching to TCP works... Afaik OpenVPN supports this.
Its generally not recommended, but worth a try.

[peak cloak]

Seems stupid

Blocking udp that is

[gray knoll]

Blocking UPD? Yes, it was, I never understood why...

[formal ibex]

I'm on TCP and it doesn't work

They seem to have blocked everything

I've tried other free VPNs as well

[gray knoll]

Even ssh? xD

[formal ibex]

Nope not ssh

I could do that ig

[peak cloak]

tcp over https

found this https://github.com/jpillora/chisel

[gray knoll]

Its pretty Fast: 100MB in 36s!

Faster than I expected tbh

[viscid mural]

Proxmox & networking, somebody?

I have 2 IPs, 1 for proxmox ve.
And the 2. I want to have it on VM, where i don't know what Subnet put there.

[digital wren]

Is it an internet facing IP or is it a private IP?

[viscid mural]

all public

[peak cloak]

Did /32 work?

I assume not

[digital wren]

if it's public you'll need to get it from whoever provided the IP.

cuz it'll need to match their networking config

[viscid mural]

Subnet Mask and Subnet are different things right?

[digital wren]

yes

What's the first octet of your IP?

[peak cloak]

Kinda

They are different, but you can derive subnet mask from the subnet

[viscid mural]

uhhh 37? what IP the first or the VMs ip?

[digital wren]

First set of numbers.
192.168.1.124
First.Second.Third.Fourth Octets

with a 37 subnet, you'll need the IP Provider to give you the subnet mask, and potentially the gateway as well.

[peak cloak]

Gateway is what's really needed

Again as I've been telling @viscid mural your provider has to give you the details

You could potentially check the proxmox host network settings and find what it uses

But proxmox could be on a different network

[viscid mural]

oh then 32

[peak cloak]

No

/32 won't work since there's no route to gateway

[viscid mural]

I have gateway

[digital wren]

usually when you are given IPs, you're given 3 things:

IP, Subnet Mask, Gateway

So it could be (Entirely made up numbers):
23.147.159.48
255.255.128.0
23.147.128.1

[viscid mural]

I have all yes

[digital wren]

you have all 3? Then why are you asking about the subnet mask

[peak cloak]

Problem is /32 is not a valid subnet mask

Well it is

But not for more than one IP

[digital wren]

I'm aware, I don't think he's saying it's a /32. I Think 32 was his first IP octet

[peak cloak]

there needs to be at least 2, since customer IP and default gateway

[peak cloak]

.

[viscid mural]

uuh

Its VM on proxmox

[digital wren]

that doesn't mean anything

[viscid mural]

Proxmox has own network?

So then what CIDR i need to put there for subnet when its telling me that ipv4 isnt contained in the subnet

[peak cloak]

It again

Depends on config

I cannot help you without specifics

[viscid mural]

Okey if im using default config for it and the additional IPs are set up

then how

just the subnet

[peak cloak]

I
Do
Not
Know

Default config is bridged

Depends on the network proxmox is connected to

Again

Ask your host

[viscid mural]

😢

[ebon prawn]

hi! i'm trying to connect a device

first lan adapter(in) is shared with ipv4 fixed settings as usual
the other lan adapter(out) with automatic settings

no internet on device
does end device needs to have access to ip configuration settings to work this way? is it because there is no DHCP that assigns ip?

[waxen scroll]

try making a bridge between network adapters. I forgot how but thats your answer

i think you right click with both selected or something

[ebon prawn]

lol got a blue screen of death trying to speedtest

[ebon prawn]

works perfectly on end device

but the pc sharing the connection now is stuck with this :\ cant understand why

usual tests are something like 2400/700

[meager ginkgo]

that upload 😭

[ebon prawn]

thats so slow i can say SpMb instead of Mbps

[gray knoll]

That's like miles per gallon instead of liters per 100km... Unnecessarily hard to understand.

[ebon prawn]

not hard to understand if you know what Mbps is

[tiny scroll]

Lmfaoooo

[frigid sphinx]

The minimum 'useable' subnet that's actually in spec for ipv4 is a /30 two hosts plus network and broadcast addresses

arrg scrollback 😦

[tulip geyser]

Seconds per megabyte

[magic adder]

sup guys, anyone here have experience using HAProxy with PFsense? I have a few questions.

[royal elbow]

is there any way to make a network drive on my laptop and access it through my mobile phone?

[gray knoll]

You want to host a Fileserver on your Laptop, and access it from your Phone?
Yes, thats possible, but pretty complicaed, if they are not in the same Network...

[clear igloo]

it's a /31 actually for point to point 😛

[royal elbow]

they will be on the same network. someone told me to use es file explorer on the phone and make a network drive on my laptop. but its not working

[gray knoll]

Well, it works for me... Does your Phones File explorer support Samba/SMB?

[royal elbow]

it does. i used a different explorerr and it works. thanks for the help

[gray knoll]

Np, I wish I had some, when I first started working with smb....

[waxen scroll]

look at the CPU of the computer in the middle while running the test. Probably at 100%

[ebon prawn]

nope, 7% cpu usage from speedtest, 12% including all win processes. this time download is better but upload.. lol

if i nuke the network bridge test is back as usual (2370 - 680)

[waxen scroll]

usually computers are terrible at processing network for other devices because all traffic has to hit the CPU.

[ebon prawn]

but test is on the main pc

crashed again. windows does not like bridging and speedtesting

without bridge