networking

[bitter shell]

yes both are connected to internet

DHCP server: Enabled

in the router configuration panel

[pseudo blade]

Right-click the network status indicator in the notification tray, select "Open Network & Internet settings"

You'll see something like this

[pseudo blade]

Does it say "Private network" on both machines?

Ok, Windows 11

[bitter shell]

this in desktop

yep win 11

[pseudo blade]

That one's private

Is the other one also?

[bitter shell]

oooh laptop is public

[pseudo blade]

Set to private for discovery

[bitter shell]

ok

[pseudo blade]

I need to get a Windows 11 machine into my lab lol

[bitter shell]

now the laptop is shown in the desktop

but desktop pc is not showing in laptop

[pseudo blade]

Refresh?

[bitter shell]

yep

[pseudo blade]

Try connecting to it via its hostname anyways

[bitter shell]

how to get host name?

[pseudo blade]

IP also works

But will change when the computer is off for a while

But for the sake of testing you can use the IP

Failing that open command prompt and type "hostname" and it will tell you

[bitter shell]

where should i type my ip?

[pseudo blade]

What are you trying to do?

[bitter shell]

u ask me to connect through ip right?

[bitter shell]

.

[pseudo blade]

No seriously, if you don't have a resource you're trying to access from one to the other, I can't really provide much assistance

[velvet jolt]

What is a good home router for around $100?

My TP link router is very unstable

[pseudo blade]

What's your home internet speeds, how big is your house, what's your current router and why do you want to replace it?

Oh yeah and how does the internet come in from the wall?

[velvet jolt]

200 mbps. It goes through a cable modem/router, through a cable in our wall, to my router since our house is too long for one router

[pseudo blade]

And you're fine with leaving the cable modem be?

[velvet jolt]

Yes

[pseudo blade]

Ok, so do you need it to do any routing, or just wifi and maybe a few ethernet ports?

[velvet jolt]

Maybe I could just get an access point instead?

[pseudo blade]

You can

[velvet jolt]

I just need wifi and a few ethernet ports

[pseudo blade]

I personally like these https://mikrotik.com/product/hap_ac2

[velvet jolt]

Though maybe also be able to connect to my raspberry pi remotely. The Spectrum router does not have as much options, but I think it can do the port forwarding

[pseudo blade]

It is a full router, but you can use it just as an AP and it's designed to be used that way

It has 5 ethernet ports you can bridge together so it just passes through the home network and you can use any of them

And an Android/iOS app for configuration (web interface and desktop client if you prefer)

[velvet jolt]

My ethernet works fine but any wifi device I use it loses connection every 2 minutes on my phone and it does not work unless i disconnect and reconnect

Factory resetting did not help and my phone does not do it on my work wifi

Do I not need Wifi 6?

[pseudo blade]

You can have it if you pay more, but probably not necessary at 200mbps

80mhz AC 2x2 can exceed that speed

[velvet jolt]

Do you think it would be better to have the SSID be exact same as the Spectrum router? I know my TP-Link has an option to make the 5 GHZ band same SSID, but in my experience, it was slow and would connect to wrong one

[pseudo blade]

If you set the SSID the same, your devices can just decide to pick the best one for them at any given moment

[velvet jolt]

So I currently have the 5 GHZ and 2.4 as separate. Also separate for the spectrum router

[pseudo blade]

I personally prefer it as all the same SSID

[velvet jolt]

Should I do same with 2.4 and 5 ghz?

[pseudo blade]

I do and find it works well for me

[velvet jolt]

I was only getting 1 mbps with the "Smart Connect" option, but I did not try not having that but both be same SSID manually

[pseudo blade]

Else I must explicitly move to 2.4ghz as I move further away

Or to 5ghz if I want more performance

Or to another AP if I walk away

Most devices are smart enough to pick the right choice for you if you set them all the same

[bitter shell]

In my laptop

but cannot access from desktop

[pseudo blade]

Go to advanced sharing and show me that

[bitter shell]

desktop

[pseudo blade]

No, on this window

[pseudo blade]

Because this picture says you have permission issues, not connectivity

[pseudo blade]

Permissions

[bitter shell]

Ok

[velvet jolt]

Do you have a preference of Linksys, Asus, or Netgear?

[pseudo blade]

None of the above if I can avoid it

I prefer Mikrotik or Linux-based solutions I have more control over

[velvet jolt]

Is that like a enterprise level brand? I have not heard of it

[pseudo blade]

Netgear has some alright stuff at the higher end

[pseudo blade]

It's more on the enterprise side of things from a control perspective but not exactly enterprise-grade, it's useful for situations where Cisco/the like are too expensive

[pseudo blade]

Ok, that tells me your sharing permissions are fine but your NTFS ones are likely not

So if you right-click the folder and go to security, you likely haven't granted "everyone" permission

BTW I don't really recommend enabling sharing to "everyone" on a laptop you're going to be carrying around for security reasons

For a home device used only at home it doesn't matter a ton

[bitter shell]

so can i set to share to my desktop only?

[pseudo blade]

You can permit a given user account to read and write, and connect as that user account on the other computer

[bitter shell]

oh so i need multiple account to get specific user access right?

[pseudo blade]

You can also share from your desktop with whatever settings you like

You don't need multiple accounts, you can just use your main user account if you wish

It's technically not as secure because you can't lock it down but it's not essential

[bitter shell]

so what if i could set an password protected share? wont i able to skip the user stuff?

[pseudo blade]

You can't protect it with a password, you have to use a user account for SMB sharing

The user account must have a password

[pseudo blade]

I will note that only grants read permissions, if you want write you should enable that

Via the Edit button

[bitter shell]

k

[pseudo blade]

So with that group setting, anyone who has a valid account on this computer can see that folder

[bitter shell]

ok

if i got it right, this means inorder to connect to my laptop from desktop i need to enter the user name and pass of laptop in my desktop network folder right?

[pseudo blade]

Correct

it must have a password

[bitter shell]

currently my laptop has pass

[bitter shell]

so how do i set up like this?

[pseudo blade]

https://support.microsoft.com/en-gb/windows/map-a-network-drive-in-windows-29ce55d1-34e3-a7e2-4801-131475f9557d#ID0EBD=Windows_10 Follow these steps on the desktop, when you see an option to specify username and password, do so with the username and password to log into the laptop (you may need to write your username as Asus_vivobook15\laptop_username_here)

[bitter shell]

ok let me see

wait

i should do this on desktop right?

[pseudo blade]

Yes

[bitter shell]

this is popping up when i select the network folder

[pseudo blade]

See "Connect using different credentials"?

You have to set that first

[bitter shell]

Asus_vivobook15\drsre

That is the user name?

[pseudo blade]

Is that what you log in with?

I presume so

If so: Yes

[bitter shell]

S

I am soo confused rn, different names?

[pseudo blade]

I'm not sure what you're looking for here

[bitter shell]

user name

[pseudo blade]

Use drsre

[bitter shell]

tried both user names

[pseudo blade]

Reboot your desktop and try again

[bitter shell]

ok

big name worked after restart

i press finish after typing user and pass

it still says u dont have permission to access\ASUS_VIVOBOOK15\Asus Databank\

[pseudo blade]

Go explicitly add that user with permissions under the security tab on that share

[bitter shell]

in the laptop, right?

[pseudo blade]

That's where the share is, so yes

[bitter shell]

did you mean effective access?

[pseudo blade]

No, I mean "Add"

[bitter shell]

my bad

New user is added

[pseudo blade]

I'll note that doesn't seem to match, but try it anyways

[bitter shell]

While applying

[pseudo blade]

You can't apply the security settings from the other computer, nor from the share locally

Apply it to the folder or drive itself (if you're sharing the root) that will contain the files on the laptop

[bitter shell]

I am doing this in my laptop (the folder which I need to share is in this laptop)

[pseudo blade]

You are applying the security settings to \\ASUS_VIVOBOOK\$SHARE - you need to not do that

[bitter shell]

i think i messed up i applied to the network map not the actual folder

[pseudo blade]

Yes

[bitter shell]

now i have add user to the actual folder in my lap

now should i map again?

its already mapped i guess

this is in my desktop

[pseudo blade]

It likely won't let you

[bitter shell]

ok, so now what?

[pseudo blade]

Does it work?

[bitter shell]

cant access

[pseudo blade]

Right-click, unmap, create a new user on the laptop using the "right-click > run as administrator" command prompt command net user shareusername shareuserpassword /add, add permissions to it and map with that

[ivory birch]

anyone that can help me with packet tracer?

[pseudo blade]

Sure thing, what do you want to do?

[ivory birch]

more specifically DHCP server

so i have this

and i want dhcp from the dhcp server in the top left down to the "Borger PC" in the bottom right

but it wont get past R1

[pseudo blade]

You're going to need a DHCP relay to do this

[ivory birch]

and i cant ping the R2 from the R1

how do i do that

[pseudo blade]

Is this for a lab? Were you asked to set it up this way?

[ivory birch]

its an exam

[pseudo blade]

Ah

[ivory birch]

and i need it done before 23:59 today

or else i will get kicked out my school

[pseudo blade]

I'm not going to help you with your exam

Sorry

[ivory birch]

bro pls

im struggling

btw its not the final exam

its like network topic exam or whatever its called

i have been trying to do this shit for like 7 hours straight and i cant figure it out

and i have almost no hope left

[bitter shell]

the new username is shareuser, right?

[pseudo blade]

If you directly copied the command I pasted rather than setting your own, it's shareusername

[bitter shell]

: )

now i cant find the "shareuser" to add thepermission

[unborn sluice]

what time is it for you now

[ivory birch]

13:35

[unborn sluice]

ah, you got so much time to google

[ivory birch]

nope

i have spent like 15 hours total on this shit in 3 days

and im stuck at this

i have had like 15 days to do it but i was dumb and started on it 5 days ago

but i found out what the problem is but idk how to fix it

cuz i cant ping my R2 from my R1

so the dhcp ofc cant get through to the things connected on the r2

but i cant figure out what i did wrong

[clear igloo]

Do you have static routes or a routing protocol setup?

[ivory birch]

i have static routing on my routers yes

[clear igloo]

Pointing in both directions?

[clear igloo]

wait, why does it say 10.0.0.1/29 for R1-R2 but
10.0.1.1/29 for R2-R2
?

Eth0/0/0 and Gi1/0/2 need to be in the same subnet

[ivory birch]

so they should be 10.0.0.1/29 on both?

[clear igloo]

10.0.0.1/29 and 10.0.0.2/29

[pseudo blade]

SMH

[ivory birch]

omfg

[pseudo blade]

But yes you should do that

[unborn sluice]

SMMH

[ivory birch]

why am i so dumb

[clear igloo]

Then fix your static routes accordingly and it should work (assuming all the rest of the connections are right)

Remember, point to point connections (or broadcast) need to be on the same network to talk, otherwise how do they know how to communicate in this case

[ivory birch]

that just shows that i should probably not take this education lol

[clear igloo]

Nah, networking can be tricky if someone doesn't explain it right

[ivory birch]

wait

[clear igloo]

ip route [destination subnet] [destination mask] [peer/destination ip]

[ivory birch]

bruh

i should probably edit the actual ip address first lmao

[clear igloo]

lol

[ivory birch]

like this

and the other one 10.0.0.1?

[clear igloo]

yup

[ivory birch]

and /29 instead?

[clear igloo]

You could use /30 or /29 doesn't matter

[ivory birch]

doesnt work

[clear igloo]

can you ping 10.0.0.2 from 10.0.0.1?

[ivory birch]

im dumb again

[clear igloo]

Nah, not dumb, it just takes time to get the hang of things

[pseudo blade]

Cisco will let you do /31 for point-to-point links also

[ivory birch]

forgor to put on same subnet

[clear igloo]

Yah but packet tracer won't I don't think

[ivory birch]

thank you so much

it works now 🙏

[pseudo blade]

I don't remember if it does, but knowing Cisco they're still teaching it as if it was 2003

[ivory birch]

i was about to die inside

[clear igloo]

Nice! 😄

[pseudo blade]

It's a pleasant surprise to see there's no serial links in this lab

[clear igloo]

Nah, most of that's been revamped a lot

[ivory birch]

ehm we got a new problem,. my friend im doing it with, did the same as me but his doesnt work

[clear igloo]

check the subnet masks and dhcp relay command

[rocky badge]

@clear igloo

[torn ingot]

Hi need help

[thick minnow]

https://tenor.com/view/i-have-it-i-have-your-ip-address-dancing-cute-cartoon-gif-17643337

[torn ingot]

updated my pc to windows 11, restarted it, now unable to discover my Wi-Fi. Before i updated no issues. Already uninstalled and reinstalled drivers and tried to also manually connect

[stoic veldt]

Can you reach it with your phone?

[torn ingot]

it connects and then disconnects

[clear igloo]

only AC 😦

[rocky badge]

Lol

This place doesn’t need WiFi 6

[clear igloo]

oh, well then it's fine, lol

[grand flume]

I wonder what Wifi is even needed for in the first place

other than maybe a little bit of smart home (which doesn't have a hub somehow)

[hexed talon]

Maybe Update bios. Or try a clean win11 install instead of updating from 10 to 11

[clear igloo]

Anything you can't wire up?
Cell phones, laptops, tablets, various smart gadgets, TVs, etc

There's actually a lot of smart stuff that doesn't use a hub, Lifx is all wifi bulbs, lol

[hexed wedge]

uhh ok so i am getting some horrible speeds on wifi
1,5 mbit down 10,5 up

[grand flume]

why would you need more than like 25-50mbps at most tho?

for wifi that is

[clear igloo]

Depends, some people (for some reason) don't wire up anything so their main computer is wifi even so if you're downloading games and whatnot you might not want it to take forever

[grand flume]

I would rather beg them to use a cable, lel

[torn ingot]

Do I have to uninstall current win11

[hexed talon]

Yes. You have entered trouble shooting

[hexed wedge]

uhhh

[kind violet]

Is the usb ethernet faster than the normal cable ethernet

[rocky badge]

@clear igloo 👀 https://community.cisco.com/t5/security-documents/configuring-eduroam-on-cisco-identity-services-engine-ise/ta-p/3655672

That's neat

[little schooner]

oh, I didn't know that's what it was called. Our campus has a setup like this. I just thought they put the name in the SSID but wow it's actually called eduroam

[rocky badge]

Yeah

[little schooner]

this is how other college teachers connect when they are visiting for events

[rocky badge]

eduroam is for everyone

My school has their own SSID though

[little schooner]

kewl

ik our instance of ISE has problems when it comes with 802.1x ethernet losing its IP address during the day, but, they don't want to check the logs

makes the system imaging process so slow too. I have to wait 15.min to get the PC to sync with ise before deployment can continue further

idk what the problem could be

[rocky badge]

rip

[rocky badge]

I like this tho bc I get WiFi at any uni that's a part of eduroam

[sudden kayak]

yeah eduroam is pretty awesome

my school lets alumni keep their email accounts indefinitely which... (maybe mistakenly) also lets me get on eduroam

i can basically find free wifi anywhere there's a college campus

[rocky badge]

Mine stays active as long as there's activity every year

So outlook background pull is enough for it

[sudden kayak]

yeah i think mine is the same deal actually

[noble nacelle]

Is it good to still run dedicated print servers when printers have apps and connect over wifi?

[sudden kayak]

but i dont wanna risk it so i do actually log into the webmail occasionally

[rocky badge]

Depends on your goal

if you want to centralize printing/charge per print/etc: Yes

Many universities still run print servers like Pharos or PaperCut

so they can charge per print and offer students print from anywhere

[noble nacelle]

Oh

Since my family got one of brothers new printers

[rocky badge]

not worth it imo lol

[noble nacelle]

And I have a Linux server running

[peak cloak]

for a 1-10 printers nah

[noble nacelle]

Oh ok

[peak cloak]

unless it's like a usb only printer

and you need it over network

[sudden kayak]

i actually like pharos (i cant believe im saying that)

are there any modern open source alternatives?

[noble nacelle]

Thanks for the insight PresentMonkey

[waxen scroll]

I still have one from like 2001

they dont really break

[rocky badge]

@clear igloo https://i.redd.it/mhzr4pl5jzv81.jpg 💀

Extreme at home

[clear igloo]

so organized with cables though

[waxen scroll]

seems like a poor design if that's whole home audio

the controller/amp should be in the wall controller and the serial control should be bussed or home run

Also I have to ask every time I see one of these.... they spent all this money to get sound in every room. They spend all this money on power for the whole system to idle. How many times do you think it gets used per year?

I'd wager only during parties.

[modest obsidian]

Holy fuck dude. that's like a LOOOOT

[rocky badge]

lol

[unkempt isle]

speaking of the printer, yes it can be worth it, I ran one because Win11 didn't have a working driver until last month that worked with our printer. CUPS, on docker/git

[final echo]

https://tenor.com/view/sad-ice-cream-eating-crying-gif-20932572

God that looks so pretty

[noble nacelle]

why cant printing on mac every be simple

Im trying to setup standard printing on a mac with a printer that doesnt have airprint

and im pretty sure my sibling wouldnt know how to use brothers iprint software

[peak cloak]

Don't macs use cups internally

Apple literally made cups

[rocky badge]

Mac printing is easier than Windows lol

Literally never had a problem with my Mac, or others, printing compared to Windows

[rocky badge]

Yes

If the printer uses AirPrint, IPP, or LPD MacOS supports it natively.

Then HP has JetDirect socket which is one driver for all of HP.

but MacOS has been able to setup Ricoh, OKI, Xerox, Canon printers automatically for me.

[fresh garnet]

Omg hi blob! it’s been like 2 years since I’ve seen you

[rocky badge]

👀👋

[fresh garnet]

I’ve never bought merch from LTTstore.com before but I’m hoping to SoonTM

Financially things started improving for me, so I’ll be keeping busy

[noble nacelle]

the printer I have which was made in 2021 dont have cups

[fresh garnet]

Since we’re talking networking, I just got internet installed in the new apartment!

[noble nacelle]

so now im trying to run a cups server

[fresh garnet]

I’d like a dedicated AP, but that will have to wait

[untold merlin]

Is this considered good?

[thick minnow]

where do you live?

depends on the average speed of your area

[untold merlin]

Canada.

[thick minnow]

rural?

that's okay

[untold merlin]

Not really. I think an important line went down. Usually I get less than 10ms ping and over 200mbps up/download

[thick minnow]

ah

[untold merlin]

Just thought it would've been funny to share the 2.5second ping

[thick minnow]

lmao sorry

I took it seriously

[untold merlin]

Didn't think it could get worse without going into satellite or phone lines

Most people take me seriously. It's my fault

[thick minnow]

WOdDuCk42

cool username

[rocky hawk]

Sending a homing pigeon with a pendrive might be faster. Is it somewhat broken or is it typical for you ISP?

[waxen scroll]

if thats through wires, no. not good. it's also possible you did not select the closest test server (the ping and jitter are quite high)

[untold merlin]

Na arterial line under repairs for my isp so gotta wait for that fix

[civic smelt]

power supply just died on my pfsense box

and it completely just tripped the breaker

i hate old dell proprietary stuff, so now i’m back to my little old tp-link router with no vlan function at all

the machine does not make a simple peep, it does not boot at all, no lights no fans, nothing. like it isn’t even connected to power

it didn’t kill any of my hardware which is nice

[waxen scroll]

it did you a favor, its better to use purpose built hardware for networking and as a result less power bill 🤣

stop killing the earth, you pfsense people

[south blade]

Hey, is there some way to have my devices grab the time from my OPNsense box?

[peak cloak]

setup NTP server?

[waxen scroll]

smooth brained

[south blade]

https://docs.opnsense.org/manual/ntpd.html it's enabled, so what would the address be to give my devices to grab it from the OPNsense box, the IP to the box is 192.168.1.1

[peak cloak]

yes??, what else would the IP be

[south blade]

I did that yesterday, so thought I was missing something, as you can see the devices shows 1970.

[waxen scroll]

some devices wont sync if the time is too far off from the NTP

[south blade]

I've actually got 2 devices that can't seem to get the right time/date. It's showing up correctly on the OPNsense box

[waxen scroll]

maybe the firewall blocks it

easiest thing to do is just wireshark it and see what happens if you're stuck

[peak cloak]

tcpdump also works in cli

[south blade]

🤦‍♂️ as always, I come and ask and it fixes itself.

[waxen scroll]

because you set the time closer to actual?

[south blade]

nope, restarted as I did a good 5 times before but this time it actually went to look? Maybe I should check the Android box now too.

[waxen scroll]

gg

[idle birch]

Hi Everyone, I am new to the channel and a novice at IT networking. I have recently configured a PFsense router in my home network and I was looking to deploy a 6E mesh network with the PFsense router instead of my current Netgear Access Point. Normally the Mesh network will also be used as a router, but I was planning on putting them in AP mode with PF Sense as the router. My question is will I lose any of the benefits implementing the mesh network in access point mode?

Ill try my best to answer any additional questions as best I can.

[peak cloak]

you shouldn't, but it all depends on the vendor (netgear) and how they implemented things

[idle birch]

Thank you! I was looking at moving from Netgear to the TP-Link Deco mesh.

[peak cloak]

tp-link consumer is also meh if you want more advanced features

look into omada, that can also do wireless mesh

[idle birch]

Will do!

[old steeple]

im looking for a network card for my pc.
I have fiber and on speedtest.net it goes up to 900Mbps
bluetooth is not necessary but would be nice
i have basically no frame of reference in this category of hardware so here i am asking for help :)

[meager ginkgo]

wifi?

[old steeple]

pls ping if you have a recommendation
ill be gone for a bit

yeah

[meager ginkgo]

AX210 is a good chipset

just search it up on Amazon

[old steeple]

ok yeah im looking and these prices are reasonable

but there's a lot of brands

any recommendation?
um i have to go rn ill be back soon

[meager ginkgo]

They should all be about equal

[thick minnow]

what box were you using?

i use a dell r210ii myself.

gotta love that low power intel chip.

[gilded jewel]

I'm looking for a VPS service that would be both cheap and reliable (my last experience with OVH was horrible, the VPS was hanging every now and then). Any suggestion?

[thick minnow]

Equinix or aws

I mean...your kind of asking for the moon in a sense. Cheap and reliable aren't really on the same planet as reliability is expensive at datacenter scale

[tribal coral]

I want to get a nas in my home for me and my family's storage. I am currently thinking about getting a synology nas system(4 bays 2 filled and 2 avalable for later)

The reason behind this is because i want to be able to read and write over the internet. I read somewhere it is not reccomended to make a nas yourself if you are planning to make it remotly avalable due to lacking security and posible loss of data, breach of data or becoming a proxy for some illigal stuf. Is this true?

What would you guys reccomend me to do(i am quite good at building pcs but i have never run a network before. Please leave any advice you might have.

[rocky hawk]

Equinix is bare metal, I don't think they have VPSes 🤔

[peak cloak]

for security use a vpn to access, don't directly expose to internet

software like tailscale, zerotier make it easy

could also roll with a more traditional completely self hosted solution that requires exposing just the vpn endpoint like raw wireguard, openvpn, etc.

[tribal coral]

How doable is that on a scale from 1 to 10 to someone with basicly 0 software experience

[peak cloak]

tailscale is very easy imo

zerotier is just a tad more complex, but still pretty easy

[tribal coral]

Alright, so you advise me to build my own one. Do you have any recomendations on the specs?

[peak cloak]

oh nas wise, idk

you can buy or build

I don't have much experience with storage myself

[rocky hawk]

If you can install and use a linux/bsd distro then you can easily install truenas and use it well. Synology or QNAP will be much easier to safely expose to the internet via their services though.

if you're doing just 2 drives with RAID1 then literally any hardware from the last 5 years will do, mind the power usage though, because it will be running 24/7

I'd advise purchasing two drives, try them out with an older PC, if you like it buy some low-spec modern hardware, if you don't buy synology or qnap and migrate those drives there (but you will have to wipe them)

[tribal coral]

Alright, thank you very much for the info

[fair knot]

may be a stupid question, but what are unterminated ethernet cables called? An amazon search of unterminated ethernet shows terminated cables, or unterminated that are 50m<. I'm looking for 10m

[rocky badge]

Probably going to be cheaper to buy 10m/15m of terminated and just cut off the ends

[fair knot]

huh ok thx

[carmine moss]

Yeah unterminated is always huge a huge spool buy a 15m terminated cable and remove an end if it's for a in wall run

[thick minnow]

True. Hahahah sorry that was bad advice, I was working in some edr and siem stuff at work and just kind of flippantly answered

[peak cloak]

yeah you won't easily find small sizes unterminated

I just have a 500ft roll I got and use for wall runs and stuff

[fair knot]

are "flat" STP cables worse than round ones in any meaningful way? e.g https://www.amazon.co.uk/Ethernet-ASRIKEEN-High-Speed-Shielded-Internet/dp/B08R75M1CJ/ref=sr_1_5?crid=26OQOD3KNI5G6&keywords=ethernet%2Bcable%2B10m&qid=1652731909&s=computers&sprefix=ethernet%2Bcable%2B10m%2Ccomputers%2C60&sr=1-5&th=1
and are some cables worse/harder than others to recrimp?

[carmine moss]

Don't get flat round is better to work with

[fair knot]

my wall disagrees but ok 🙂

[rocky badge]

the standards disagrees

[meager ginkgo]

+1 for round cables, flat cables usually have issues

[carmine moss]

Quality is better on round and speeds are more reliable

And Poe has issues with some flat cables

[rocky badge]

Love how they also falsely advertise CAT6/CAT6A can only go to 1Gbps

[fair knot]

ikr

[peak cloak]

flat have issues

the whole twist part of the cable is what makes it work well

[rocky badge]

https://www.amazon.com/Cable-Matters-Snagless-Ethernet-Black/dp/B00B3UR496/

[carmine moss]

Even 1m flat cables suck only use of flat is for over a floor

[fair knot]

out of curiosity, doesn't the cat revision itself ensure it meets shielding requirements? or is it false advertising

or neither

[thick minnow]

depends on cable type for shielding requirements

[rocky badge]

Also: https://www.cablematters.com/blog/Networking/what-is-cat7-and-why-you-don-t-need-it

[fair knot]

yeah I'm just looking for cat6a but cat7 seems to be everywhere on amazon UK ;P

[carmine moss]

Cat 6 is good enough for a home run

[fair knot]

Only want to run this once, we're upgrading to FTTP so cat6a probs a safer bet given future multigig speeds no

• no meaningful price difference

[peak cloak]

cat 7 is a weird standard that is all over the place

[rocky hawk]

use cat6a or 7, 10gbit is closer than you think 😉

[peak cloak]

most of those are all false marketing most likely

[carmine moss]

6a is better tho cat6 is good for runs that are short tho like in home runs

[peak cloak]

since cat 7 spec specifies a special connector

TERA

[thick minnow]

10 gig lan is. wan not so much.

[rocky badge]

6 can do 10 gig

no need for 7 either

6/6a is what you're usually doing

[thick minnow]

consumer gigabit capable fiber rollout is still only at like 20% of the United states.

[rocky badge]

Also, I doubt 10 gig lan is as close as you think

[thick minnow]

10 gig LAN isnt far off. maybe 5-10 years. 10 gig WAN is VERY far off.

[rocky badge]

most consumers barely max a gigabit lan now days, much less have a sustained traffic over 50Mbps tbh.

[thick minnow]

in consumer space that is.

[rocky badge]

that's why I said most consumers lmao

Even in the office space, not much sustained traffic either

[thick minnow]

speak for yourself on that one hah.

in my office space its been fun

[rocky badge]

in an actual office, it's not

[fair knot]

In London we have fibre providers starting to do 3Gb up/down (non-business broadband)

[thick minnow]

actual office?

lmao um...im an engineer in a 40k user company >.>

i dont think it gets more "actual office" than having over a thousand clinic locations alongside 3 HQ's in 2 countries

[rocky badge]

Per client, no. Although it does depend on how many clients ¯_(ツ)_/¯

Clients themselves don't use much

[thick minnow]

no, they dont, but when you are virtualizing that many users and have aws outposts in your 4 datacenters then yeahhhhh...you need 10 gig.

[rocky badge]

Well that's remote desktop usage lol, a typical office like web browsing and web apps don't use that much

[thick minnow]

remote desktop should be 95+% of modern enterprise

[rocky badge]

it isn't

[thick minnow]

simply for data security alone

anywhere from citrix to azure etc.

[waxen scroll]

I feel like you've never used VMs at work. I've been to a few companies that tried that. It never works great.

Always some kind of performance issue

[waxen scroll]

this has already been solved on laptops. my company has it locked down pretty tight.

[rocky badge]

intune & jamf 😍

[waxen scroll]

end of the day nobody can prevent a phone and a camera

[waxen scroll]

more. HTTPs man in the middle

they would have to do that with VMs too

I would assume that VMs are even worse at a cloud provider

[rocky badge]

that's what my school does as well

intune + https mitm offsite

[waxen scroll]

gg... cisco proxy?

[rocky badge]

onsite, mitm is only selective

contentkeeper lol

"cisco expensive"

[waxen scroll]

why the hell would a school be doing MITM? they dont need DLP

[rocky badge]

google/youtube filtering

it can block key terms and such

[waxen scroll]

really? come on. you're an adult at college. you pay for that internet

[rocky badge]

no, this was the k12

[waxen scroll]

ooooooooo

[rocky badge]

uni doesn't give a shit

[waxen scroll]

k12 makes sense, they have to

[rocky badge]

erate funded internet = coppa

[waxen scroll]

Yeah anyway... I've seen performance issues at multiple companies with even just web browsing

might get unlucky and windows gets delayed

too many users

[rocky badge]

idk how much uni has lol

[waxen scroll]

100G

[rocky badge]

Probably

[waxen scroll]

I only work for businesses so in terms of internet use its not massive because people really only web browse

a uni anything goes

[rocky badge]

15TB+ of netflix in a month

the uni used to do desktop virtualization and app virtualization for general usage

now it's just AWS App Stream for digital media/MATLAB students during COVID lol

[waxen scroll]

I would not do desktop virtualization at a uni. App virtualization makes total sense though

lot of "free" stuff still needs a license server and limited licenses

yay autocad?

[rocky badge]

solidworks needs a network license server lol

[waxen scroll]

god. I have not used appV for autocad but I imagine its not pretty

[rocky badge]

Autodesk lets us "MAK" with their cloud activation

[waxen scroll]

autodesk finally nuked my student account after like 10 years

I still used cad once in a while

not anymore!

i'm better at 3d objects in CAD than I am anything else

[rocky badge]

i did maya once, never again

[waxen scroll]

I tried blender once. My head hurt

[rocky badge]

that's why i do networking and servers loll

[waxen scroll]

my CAD teacher was visually disappointed in me when she asked what I'm doing after high school

"IT/networks"

lul

I say I made a great decision TBH. Engineering is a shitshow, very competitive, and does not always pay like IT can.

Plus math all day? Meh.

[rocky badge]

🤢

[waxen scroll]

Right now if you can skill up in school and go do a year at some job, you can probably get away with $80k with your next bump in some markets (not including CA, VA, etc)

The key is you have to be good.

[thick minnow]

lol...

Your right. Never use vms. Nope. Never.

it was easiest to block that out or id have taken just a picture of our director console....but that would basically look like something out of cia...pure black bars.

[waxen scroll]

You're using a laptop yourself while the plebs have the VM. Aren't you. 🤣

[thick minnow]

of course lmao!

My office setup isn't bad. Had to move all identifying stuff off the desk though

[waxen scroll]

Office???? They gave up and let me work at home 100%

[thick minnow]

were hybrid, and sometimes its easier to be in the office when you have to actually go downstairs to the datacenter floor

or the colo in downtown

[waxen scroll]

You don't have people for that? 😫

[thick minnow]

we have 6 floors of this building

and im an engineer lol, im basically tier 4 support

when someone yells fire i show up

[waxen scroll]

At my place we have people in charge of anything data center (physical) so I open tickets

[thick minnow]

otherwise i spend most of my day reading my kindle or in meetings

[rocky badge]

@waxen scroll Your opinions on FortiGate?

[thick minnow]

its fine for SMB's.

better than watchguard.

fortigate is basically a step up from unifi

the logging on it is pretty good too

[rocky hawk]

Wan too, depends where you live. It’s not very rare in Europe

[waxen scroll]

Pretty good. We had them at F100 retailer

[thick minnow]

i moved to the US because i get paid 10x more than in the UK, but thats fair in Europe

in the US...its a mess.

[rocky badge]

Would only be buying fortigate, not an entire fortinet network lol.

[waxen scroll]

Right

Just the FW

[rocky badge]

Only need 1 gig wan capabilities

[thick minnow]

I consider fortigate basically the best of the pre-enterprise stuff tbh.

[rocky badge]

not my first time playing with FortiGate but first one @ home

Friend got a fortigate for home and it's really been tempting

[thick minnow]

enterprise is a whole different animal though, and fortigate doesnt hold up to those offerings as well.

[waxen scroll]

Dunno about home but the large enterprise units do the job fine

[thick minnow]

we use palo alto here

[rocky badge]

I've been looking around but nothing else is really the same price range/features/specs

[thick minnow]

palo with cisco switches at work. for home i run opnsense and unifi switches

[rocky badge]

that aren't absolute 💩

[waxen scroll]

All I know is people seem to be ditching checkpoint

[rocky badge]

School IT offered me Enterasys shit

from their move the rest of the Enterasys shit to Extreme project

[peak cloak]

really?

mine doesn't do any HTTPS MITM

[waxen scroll]

Yeah if you want to filter part of a website

[peak cloak]

like is it mandated by law or something?

[waxen scroll]

Yes, sort of

[peak cloak]

I think they do something IP based, not sure

[waxen scroll]

If schools want tax dollars for internet they have to stop bad content. You don't want to block all of youtube

[peak cloak]

I guess they don't do any advanced filtering

I mean they could just use google accout tools

but that's only for school account

[peak cloak]

yeah idk if I want to stay in engineering for school

part of me wants IT, other part wants engineering

[waxen scroll]

You could learn it as a backup plan but then all that debt

[peak cloak]

yeah...

[rich prism]

its interconnected anyway. you can do the best engineering job ever but its worthless without proper UI and program that can make use of it

I would definitely recommend learning about how CPUs work, function of speculative execution units, pipeline and library functions. Some of my friends took a year off after highschool but I just studied IT before transfering into engineering

[peak cloak]

well like mechanical engineering

areospace

was thinking of maybe minoring in CS? idk

[rich prism]

can you code? any language

[peak cloak]

yes

[waxen scroll]

Yes mech eng was what I meant

[peak cloak]

I now have a part time job at an IT company

so yeah.. going to be working there over the summer

[rich prism]

what do you do there?

[peak cloak]

various stuff, it was originally my internship but I guess they liked me. Worked on deployed google classroom to a school so students could use it. Wordpress website maintence and updating. Adding various features for clients. Working on a custom web app right now for a client and "renovating" an intranet site for another client

Also just various things on the side, resetting network devices, basic setup of them aswell

Decommissioning old hardware

It's a small company so I get to do a lot

[rich prism]

so if I were to give you 2 devices(office PCon one side, PLC on other with motor connected to it ) on 2 different locations and asked you to have them communicate with each other could you do it?

over ethernet

[peak cloak]

yeah

Ik networking pretty well

not MPLS, BGP, all that stuff. But like basic l2, l3 stuff yeah

VLANs, fundamentals of how routing works, basic BGP I know

[rich prism]

how good are you with creating algos? coz the thing is. I know 2 mechanical engineers. And went to mechanical engineering high school myself. One of these is my uncle who ended up being the engineer for only like 8 years before transfering into management positions and hasn't looked back since.
The other one has learned mechanical engineering out of "necessity" after going trough "training institution"(high school alternative, 3 years and generally lower expertise. focus on physical work, using lathes etc.) Now he is able to operate and program CNC machine aswell as design parts from scratch by using norms. You might not realize it but especially in the prototyping departments the amount of work done by hand is insanely high.
With your skills in networking I would either go for electrical engineering, robotics or straight up networking IT/communications.

I see little overlap between networking and mechanical engineering which consists of reading standards and applying them. Anything nonstandardized has to be validated in a lab which is so expensive only big companies can affort to do it.

[rocky badge]

I mean, not all filtering is MITM.

[peak cloak]

algorithms? I honestly haven't done much with that. Yeah I go to a technical HS with engineering as one of them. I've done a bit of work with manual mills and laches
I kinda already committed to a college, but I can still switch to electrical. I was thinking of doing that.

[rocky badge]

you can just entirely block YouTube, but my school wants to allow certain YT topics/channels/categories

Plus blocking inappropriate search terms

[peak cloak]

and like if I wanted to go into areospace I can always do the software part more, which I was more interested in anyway

[rocky badge]

I'd rather do networking tbh.

I've become more and more interested in networked AV as well.

[rich prism]

coz #networking ? lol

[rocky badge]

i hate software engineering lol

networked AV is really cool

[peak cloak]

I'm not a fan, but I can do it

[rocky badge]

the idea of sending 4K HDR 4:4:4 over a gigabit network

or hundred of channels of audio

[peak cloak]

I think it also heavily varies. Like the type of code at like google, vs spacex/nasa/ULA which control rockets

Ik someone who does embedded programming at ULA

[rich prism]

depends on which kind of electrical you would even be able to switch to. Schools tend to offer either full electrician degrees that happen to be able to do design aswell. Or merging electrical part of device with software control. You might be able to learn how does electric motor work and then program a control chip that communicates over the internet. Or more mechanical way where you look into designing electrical components.
My point is that there is way way more overlap between electrical part and networking than mechanical part.

[rocky badge]

Although I am going to study cybersec & modern networking sooo lol

[peak cloak]

yeah

idk, it'll somehow workout I think

first year engineering is basically the same for everyone

[rich prism]

yeah. I mean there is at least 1 company that wants you so you are not going to go hungry.

[rich prism]

Before you chose I would recommend looking at bachelor theses that were done by students before you. And see what might interest you. Bachelor theses should, afterall, be the "look what I learned here in past 4 years" kind of paper.

[peak cloak]

there's only masters but should be similar, right?

[rich prism]

idk how does american system work. but here we first have to get bachelor degree and only then are we able to chose further specialization for masters degree. Then doctorate but lmao

[peak cloak]

I think there's just no public bachelor thesis's

[rich prism]

there sure are. ask techers. my school uses a system where students do have access to them but not outside people.

[peak cloak]

at this university at least

[peak cloak]

see I'm not a student yet

[rich prism]

u said the first year is basically the same. so just ask around during that year

[peak cloak]

yeah will do

[rocky badge]

"Digital Commons" is my uni's

Only honors students have to write a thesis

[rich prism]

those are most of the time the only ones able to use their knowledge for something useful anyway.

[rocky badge]

undergrad don't require a login lol

but graduate require a login

surprised it's not aad sso

[peak cloak]

yeah they have I think the same software, but only master's and PHD are up there

actually

nevermind those are just all undergrad works

not theses

[rich prism]

could be called undergrad work. idk. our systems are different.

[hollow skiff]

I need to connect a device that only has Ethernet access to a network, though the only way I can access it is wirelessly. I looked it up and found that I need a wireless bridge adapter. Is this accurate? If so, would any of you happen to have a recommendation of a good inexpensive one? (Probably should mention that I need to use a CA certificate and a Certificate server to connect a device to the network).
Sorry if this is a dumb question, but I don’t know much about this side of hardware.

[unborn sluice]

Why can you only access it through wireless? Do you mean the device can't do with ethernet?

[hollow skiff]

well it's a limitation of my college dorm

we get decent wifi but no accessible ethernet ports for some reason

[unborn sluice]

Normal for dorms ig

[little schooner]

I messed up 4 rj45 jacks trying to punch them down correctly 😭 I hate cable work so much

[unborn sluice]

patch cable
punch cable

[waxen scroll]

maybe networking isnt for you

[little schooner]

@waxen scroll today I did more practice punches after watching a video. I didn't untwist the copper pairs and the pairs didn't come undone as I did them. also, I had the cutting side of the punch blade facing into the jack instead of out 🤦. finally, my punch tool was set to hi impact, which ended up breaking my cat 5e cable on some tries. I dropped it to low and I finally did a good punch!

tho I'm still concerned because one of the twisted pairs is bending at a really sharp angle. The cable color jacket on the wires are starting to expose and I don't trust it's longevity.

next punch I have to make sure the wires are not bending like crazy.... and make sure I cut at least 1-1/2 to make it easier

[little schooner]

😂 crazy enough, I got an extreme headache from it all because I was frustrated. lets get punching!

[waxen scroll]

you should go work for a colo facility

cable all day

[civic smelt]

the optiplex 790 sff

sorry for the late response, was going to come back to this but forgot

[waxen scroll]

@little schooner cable is stupid easy with the right tools

the secret to rj-45 crimping is flattening the wires with a special scissors or some kind of rounded edge first

[little schooner]

I'd pass out for sure. but ur right, I just need the right tools and use a proper technique

[thick minnow]

Hah. It took me a bit to realise what you were talking about

[sudden kayak]

https://www.reddit.com/r/Comcast_Xfinity/comments/urj07n/is_anyone_else_getting_over_200_mbps_upload_now/ 👀 👀

this is a very interesting trial to see in the wild

[waxen scroll]

nope. I still have 10mbit up

[waxen scroll]

@clear igloo sent 500 API calls to ACI in 30sec

it didnt choke

[sudden kayak]

yeah it's very limited testing

may actually be an accident that these random people are getting it

[clear igloo]

I would hope not 🙂

[waxen scroll]

it was fun watching the delay after the calls were completed seeing the device counters slowly grow

r/thatpeelingfeeling

[rocky badge]

@waxen scroll @peak cloak Power at school went out, UPSes died. ADFS, ContentKeeper offsite filtering, and ofc everything at school is out.

SSO portal is also dead because it authenticates against on prem LDAP via an on prem connector

[peak cloak]

No generator?

Sounds fun

[tribal coral]

Does anyone here have any advice on a good password locker ? Im looking to up my password level on my phone pc and laptop so im looking for something that i can store everything in.

I do also use microsoft authenticator but im not sure this if i want to use that every time i log in.

Does anyone have anything i need to take in to account while doing this?

[atomic warren]

I'm trying to put together a basic home server for storage advice?

[peak cloak]

Password manager? Good cloud ones that I have used are bitwarden, 1password

Microsoft authenticator is multi factor authentication

Most services have options were you only have to do it every so often

But you will always need to on a new PC or something

I reccomend

There are different types of mfa, email, sms, TOTP, hardware, and all different types of custom things

[shadow wolf]

Anybody know if the LMG folks have ever done a bang-for-buck comparison of affordable consumer grade wifi routers specifically to use as APs only in a pfsense/edgerouter setup?

[peak cloak]

Don't think so, I don't watch ltt anymore

Omada APs are pretty good

I have them

[waxen scroll]

Yeah. I watch LTT a lot less

Hopefully labs are good

Or should I say I watch LMG less

[sudden kayak]

yeah just set up my parents place with omada APs and it was a pretty painless experience

good performance, probably on par with ubiquiti

(and they're actually in stock unlike any of the unifi stuff rn)

[torn steppe]

I don't think so. I'm actually working on an opnsense router right now and I was looking around at that sorta stuff. I 3rd the Omadas. I think unifi APs will be a bit of a pain without a UDM Pro.

[shy spade]

What does LMG stand for

[torn steppe]

Linus Media Group.

The name of the overall company that Linus owns that runs the LTT channel, TL channel, etc.

[shy spade]

Won’t labs just be gamers nexus

[torn steppe]

But a larger scale and dedicated to lab stuff, not really making videos it seems.

[frigid sphinx]

I've been using enpass for a while but bitwarden seems sensible.

[fresh shoal]

A lady pulling out 100m worth of Ethernet cable from a box of Ethernet spaghetti. Thought you guys might like it.

[golden ruin]

New router!

[waxen scroll]

No I don't think so. I think they realize their audience is not looking for a GN clone and I think they have the skills to take a complicated topic and make it interesting. GN will talk your ears off where LTT knows how to put on a show

I also think that if they intend to talk your ears off it's going to be a new channel entirely and not have a lot on LTT

[shy spade]

True

That’s mainly why I don’t watch GN bruh I don’t want to hear every single detail about something

[waxen scroll]

Exactly. Same. I watch a full video of his maybe twice a year. He has something interesting once in a while but I find i don't care otherwise

Do you watch stuff made here? I suspect labs might be something like that

Maybe part stuff made here, part GN

[ashen aurora]

So my ISP suddenly decided I have IPv6 now...

Err, what now? I heard the concept of "Static IPs" in IPV6 don't exist.

Or was it NAT'ing?

[unborn sluice]

Ipv6 static exist.
Nat no

Because the problem that NAT solves is not present

[ruby charm]

i got ipv6 whatever that means

[ashen aurora]

How do I setup IPv6 static? Is that what's known as Stateful?

[ruby charm]

i got this thing for free

what the heck is it

[ashen aurora]

Looks like a network switch

[ruby charm]

says 10/100/1000 on it

i plunged a wire from my router in my basement into it and another one to my computer upstairs I have it in my living room

i tried all 24 ports on it and i get a connection through them

the first image is where the one from my router plugs in

[ashen aurora]

It's a network switch. It lets you use more devices via LAN.

[ruby charm]

its a 24 port lan switch?

dope

[ashen aurora]

Useful if you have a ton of devices that can be hooked up via Ethernet cables instead of just wireless.

[ruby charm]

I like wired connection more then wifi

I only have one device so it is pretty overkill

my connection isnt very fast : (

[peak cloak]

You just make the IP not change

Default way of getting IPs is SLAAC which doesn't change the IP pretty sure

[ashen aurora]

Ah, so it's stateless

[peak cloak]

exactly

[peak cloak]

verizon fios?

looks like their router

[ashen aurora]

Yep

[ashen aurora]

I thought Stateful is the option that lets you make it so you can assign them? Been trying to figure out heads and tails.

[peak cloak]

well like from the router?

That requires DHCPv6

Which is a pain because of stupid android

Which does not support it for stupid reasons

[ashen aurora]

Seems like my router lets me use DHCPv6

[peak cloak]

It can, but problem is device support

If you want a static IP, SLAAC should be fine

[ashen aurora]

Mine right now is set to Stateful (DHCPv6) IPv6 LAN configuration.

[rocky hawk]

can you guys recommend some good outdoor switch (or outdoors weatherproof box for a switch). I need 2 PoE ports outside the house

[pseudo blade]

What are you powering specifically? Different devices may expect different PoE voltages or standards.

[peak cloak]

^ active poe? passive poe?

what poe standard

[little schooner]

@waxen scroll finally, after 5 punch attempts, always bc I snapped one wire somewhere in the process, It didn't break it this time

[ashen aurora]

Well, I don’t use Android, so…should I just leave it in Stateful DHCPv6 then?

[desert horizon]

Reee when your isp comes in and ruins your entire networking setup... Just curious do any of you plug a router into a switch? Because I was always told not to do this but my isp did this and im very confused.

They also said they couldnt get any information from my router and that they didnt want me to use it basically lol. But it works fine for me because it has privacy options and dos protection among other amazing features.

[pseudo blade]

IPv6 implementation is unfortunately pretty opinionated. Luckily for you SLAAC IPv6 addresses aren't random and are calculated from the interface's MAC and are for most purposes static - the advised approach is to leave it on SLAAC and just take note of the address it chooses with it, then it will work with nearly everything

Beware of your internet firewall's configuration, IPv6 security is often overlooked and unlike IPv4 provides publically routable IPs for all devices

[rocky hawk]

Two raspberry pi 4 via poe+ hat

[ashen aurora]

Wouldn’t the fact that it uses EUI-64 means it would make the device traceable? Not to mention it will be easy to figure out your device’s MAC address from the outside?

[ashen aurora]

And yeah I’ve been trying to read up/ research on IPv6 security. Right now there’s a connection issue I’m trying to troubleshoot and it may have something to do with ICMPv6 broadcasts. I tried momentarily allowing Windows firewall to allow for them from the outside, which solved my upload issues, but does leave me concerned about being left vulnerable, so I reverted it.

Truth of the matter is there’s very little material to go over except ones that explain SLAAC vs DHCPv6.

[pseudo blade]

It is true that this is traceable, though detecting it from the outside would not be easy, and require a bruteforce of your entire IPv6 block, which is nontrivial. You still want your firewall to have a rule to block hosts you haven't connected to from sending you anything unless explicitly allowed for a service on a host.

[pseudo blade]

ICMPv6 is blocked by Windows firewall by default, so likely you just need to enable that by adding an allow rule

[ashen aurora]

Any specific “safe” rules to use other than just “Allow all/any”?

[pseudo blade]

New custom rule > allow all programs > protocol type = (ICMPv6)

Allow that

Assuming you want to permit ICMP from anywhere

I don't consider it to be a particularly large security risk to do so

[pseudo blade]

https://store.ui.com/collections/unifi-network-switching/products/usw-flex Out of stock with ubnt but you can buy them fairly easily from Amazon etc. Takes power from a PoE++ injector you can buy separately so you only need to run the cat6

If you can't get those a similar, equivalent device is the Mikrotik PowerBox Pro if you buy the optional 48v power supply or injector for it

[ashen aurora]

No specific rules to create? Just “Allow from any”?

[pseudo blade]

That's really up to you

Where do you want it to work from?

[snow lance]

how do you set up this vpn thing to access your local network? my friend has it and it look like this

[unborn sluice]

does your friend have a VPN server at his local

[snow lance]

oof apparently yeah. her dad set it up

[ashen aurora]

Only hosts which I’ve established a session with, although I guess that wouldn’t make much sense if another server is handling a particular service.

[pseudo blade]

They won't be able to ping you if you do that

[harsh hatch]

does anyone know how to switch what netowork im on through ethernet

so heres the situation i have two networks on one router. Theres a guest and main one, through ethernet the guest one gets better speeds but my main pc rn is on the main networks ethernet and i cant change what network its on

does anyone know what to do

[ashen aurora]

Which profiles should this rule apply to? Domain? Private? Public?

[rocky badge]

Do you have passthru connectors?

[peak cloak]

What I do is on router block all new connections from wan

[waxen scroll]

you cant block icmpv6 at all

I dont recall if blocking echo is fine but you need the rest of it open

[peak cloak]

What's it needed for exactly?

[waxen scroll]

reporting problems in communication is a big one

https://datatracker.ietf.org/doc/html/rfc4890#section-4.4.1

   Error messages that are essential to the establishment and
   maintenance of communications:

   o  Destination Unreachable (Type 1) - All codes
   o  Packet Too Big (Type 2)
   o  Time Exceeded (Type 3) - Code 0 only
   o  Parameter Problem (Type 4) - Codes 1 and 2 only

   Connectivity checking messages:

   o  Echo Request (Type 128)
   o  Echo Response (Type 129)```

[little schooner]

I do, about a 50 pack of them, yeah

[rocky badge]

😭 how do you mess it up

[little schooner]

oh no, it's the rj45 punch down jack I keep snapping a wire off

[rocky badge]

doesn't slaac also work on icmpv6 somehow as well? idk

[rocky badge]

oh

[waxen scroll]

yeah lol.... like I said he needs the right tools. I've done 1000s of non passthru connectors and only like 3 were bad

[little schooner]

the plugs I can do okay

when I'm punching down the wires onto the rj45 jack, somehow one of the wires rip off from its metal teeth

or the tool doesn't force the copper wire all the way down

[waxen scroll]

yeah I think so

[little schooner]

also I get a headache trying to do just two of them

so definitely cable job isn't for me

headache lasted for 4 hours

[waxen scroll]

you're staging the wires first right? You should put it in the punch slot and put pressure on it to seat it, then use the tool and punch

also use long wires

[rocky badge]

that's why i don't want to do structured cabling

i admire their work and dressing the cables, but it's not for me lol

[waxen scroll]

the wire should be that long or longer before punching

[little schooner]

o yeah I wasn't giving myself enough wire to work with 😂

I had them short because the videos were saying they can't be too untwisted for cat6

[waxen scroll]

thats the trick to doing RJ-45 too... make them long, get them flat, get them in order, cut, insert into connector

[rocky badge]

i'm so glad rj45 isn't soldered

[little schooner]

but your other points, yes, I was pushing them in, but, ig I put too much tension that the copper cable. The copper cable running in the middle of the rj45 jack was crushed or frayed to much by the time I was rdy to punch. didn't notice until after the punch.

And another tip I learned is that I should buy rj45 Jacks that have some peaked tabs. It helps so that I can lay a twisted pair down and have the peak separated the white/solid color pairs easily without untwisting.

I bought leviton Jacks and they were superior for this. this time I bought cablematters Jacks and it's just harder to work with

[waxen scroll]

mhmm... just make the wires long, center the cable itself in the middle of the punch block, insert all wires into all slots and put pressure on so they seat, then punch

it will stay seated and you have a fun time

you can also use the punch tool to apply the pressure too without punching

[ashen aurora]

I'm still trying to figure out what could be blocking my ipv6 uploads

I already created a policy on my firewall for accepting ICMPv6 requests

[crisp elbow]

Hello guys,

Does someone also have a TP-Link ER605 V1 (TL-R605) Omada Gigabit VPN Router?
The problem is the following; every time I upgrade the firmware from ER605(UN)_V1_1.1.1_20210723 to ER605(UN)_V1_1.2.0 Build 20220114, after succesful upgrade, my internet connection goes down for like 10 minutes, comes back up for a minute, goes down again, comes back up...
When I rollback the upgrade to ER605(UN)_V1_1.1.1_20210723, I don't have these problems.
The configuration is still the same, it's managed by an Omada Controller, so the configuration is reinitialised after upgrading...

Can someone help me out with this? Can't find anything about it on the internet. Now you guys can say: "If it ain't broken, don't fix it", but I will always be up to date for vulnerabilities and stuff like that.
These are the release notes for the new update: https://static.tp-link.com/upload/firmware/2022/202204/20220408/ER605(UN)_v1_1.2.0 Release Note.pdf

Thanks in advance.
Kind regards,
WhiteSasch

[meager ginkgo]

I have this exact router but I have no clue how to solve that issue 😂

[waxen scroll]

IDK. Thing is its TCP so in order for the download test to work you need to send back TCP acknowledgements

so your upload is working...

[crisp elbow]

do you have the V1 with firmware ER605(UN)_V1_1.2.0 Build 20220114?

[meager ginkgo]

Yes

[maiden blade]

Guys, is networking over electrical wires okay? 😅 Does it keeps the high quality of your internet connection or does it decreases it?

[thick minnow]

If you are using the converter deal it is seperate from your network connection. The little plug in things are baluns and they convert not connect. You wont be getting 120vac on your etherenet with them.

It is even a supported standard see IEEE 1901

[maiden blade]

quick thing, I live in EU so its 240V here. but I bet it's not a big different if it comes to networking right?

[thick minnow]

Nope.

[maiden blade]

Okay thanks!

[thick minnow]

It is a known standard.

So they should say something about IEEE 1901 on the box.

[maiden blade]

Can't find it =/

Oh I see now, what do you mean with "converter"?

[thick minnow]

Yeah i was looking thinking that theyd write the standard

But its been years since they quit that even on wifi

[maiden blade]

Oh

[thick minnow]

Now they just give you phys link speed

[maiden blade]

Oh yeah I can find that.

[thick minnow]

Modern wifi doesnt even say shit like 802.11ax oe ac

[maiden blade]

So basically I can plug in my Modem into the electrical socket wall and somewhere else in the house I connect my access point to the electrical socket wall to increase my wifi setup right? without having speed and quality troubles

Or am I wrong? 🙊

[little schooner]

thx for the guidance

[little schooner]

now ik what to do when I'm feeling frustrated. Just PUNCH down with all my might and listen to the sound 😆

attempt 3 is tonight

how much jacket should I cut off? like 2 inches for long wires?

or more than that?

[peak cloak]

router, but yes

router/modem combo unit

[maiden blade]

Yeah I called it modem because that's a term we use alot more in my country 😉

but its a combo ofcourse

[hard cedar]

I have a couple questions. 1. Is there anything other than an extender that can basically take a wifi signal, and then have an ethernet port to connect to a device with? (Not powerline, doesnt work for me) 2. Whats the best extender for this ie 1gbps eth port and idrc about the actual wifi signal extension

[peak cloak]

wireless bridge

[waxen scroll]

@little schooner 3"

You can do smaller after getting used to it 😜

[slate sonnet]

Question for anyone who knows wireguard. Is it possible for me to have a vps forward traffic to my home server while at the same time my home server is using wireguard to host a vpn?

I want to host a minecraft server but make a vps forward traffic to me so that I don't expose my own public ip

[peak cloak]

yes

[peak cloak]

i've done that

[slate sonnet]

I remember asking this like 2 years ago lmao

But forgot completely

[peak cloak]

basically you need some nat rules

[slate sonnet]

On the vps?

[peak cloak]

yes

[peak cloak]

you have a tunnel between the VPS and server?

[slate sonnet]

Not yet

I'm trying to figure it all out rn

[peak cloak]

setting up a tunnel would be the first step

[slate sonnet]

If I make a tunnel between my vps and server it won't touch my own vpn right

[peak cloak]

depends how you configure it

[slate sonnet]

So for example right now I have wireguard forward all traffic through my home network if I'm not at home

So basically all phone traffic is routed through my home network for example

[hard cedar]

Whats a good one you recommend? I have a tp link ax router and 500mbps internet btw

thanks btw

[slate sonnet]

These are the rules that I have right now on my server

[civic smelt]

do you guys have any ideas on a small pfsense router under $250 AUD my power supply died on my last and the PSU costs more to replace than the box

i plan on just moving the SSD and changing the interfaces, but if i really have to i’ll restore from a backup i randomly made not too long ago

any one that would be available in the US or in Australia would be good

[little schooner]

Oki ty

[hard cedar]

also is it a standalone thing or do you mean like a router/extender in bridge mode

[little schooner]

Tips on straightening Cat6 23awg wire?

[waxen scroll]

A scissors meant for cables

Otherwise try to use the handle of your scissors. It's a pain that way

Put the wire on the handle. Press down on it. Pull it along with your other hand

Cable scissors have a rounded blade to rub against

[snow lance]

i watched a tutorial about setting up nextcloud on truenas. it says to disable hardware offloading, but when it doesnt work

works fine with it enabled tho

i saw on a forum a guy saying he often has issues with hardware offloading, would it be bad that i have it enabled?

[nimble sable]

can someone please explain this? 4.8Gbps/2 = 2.4Gbps and even if you take off another 30% for overhead putting that port with that advertised wifi speed seems like irresponsible lies

[rough geyser]

hey guys. do you got any idea how i can get chrome os flex running in hyper v? i want to test it out but google doesnt provide ISOs. The only way i found to install Chrome OS Flex is via a bootable USB stick. So I got 2 Ideas of doing it: 1. Find a way to pass a USB stick through to the HyperV VM. 2. Get an ISO out of the bootable USB stick and toss it into the VM. Do you know how to do one of this?

[nimble sable]

mkisofs its a bit of a roundabout thing, but u CAN use it to create an ISO file from a folder...which can be gotten by actually creating the bootable usb stick and using IT as the source. but either way i think that'd be the easiest thing, make the usb stick like you normally would, THEN use a tool on your OS of choice that is able to create ISOs from files

[rough geyser]

i am going to test that

my 8GB usb thumbdrive also shows up as this after installing the chrome os installer on it

[fresh shoal]

Okay so this shit is making me wild

My company's media server needs to be connected to the network switch with two 10Gbit ethernet cables. The Switch is a Ubiquiti 16 port 10Gbit one so of course we opted to network bond using 802.3ad.

However that netted worse results than just connecting up with one 10Gbit cables. So we switched to the "Dumb mode" aka ALB and surprise surprise it works wonders.

The r/w speeds on 802.3ad was horrible. 200MB/s read 80MB/s write.

[slow pivot]

Wifi APs can do wifi client to wifi client so the traffic would never touch the ethernet port. 4.8Gbps is a “bit” optimistic even with 4X4 MIMO

[snow lance]

why do i get slow speed like this to my nextcloud server? i got gigabit locally

and would i be able to use my direct 10 gbps connection to speed stuff up?

[peak cloak]

That's just interface speed

Wifi is usually super optimistic, basically theoretical throughout

[lilac sorrel]

do i just upgrade my ASUS ax82u router with GT-AX6000, keep trying to source a Mikrotik RB5009, or build my own for a symmetrical gigabit fiber that requires PPPoE and VLAN tagging (need fast single core processing)

[light slate]

so if i replace my normal router given to me by my provider and then replace that with for example TP-Link Archer AX50 will that increase my speeds

[peak cloak]

network speed is one thing, then write speed is another

[peak cloak]

you could

[thick minnow]

hi any reason why ipconfig /renew fails on me ?

whatever after modem configuration it seems to work

[snow lance]

is it difficult to set up? how?

[snow lance]

I tested this drive previously it's either 60 or 110 mb/s

[peak cloak]

you can hook up PC <-> NAS directly

or get a 10gig switch

[peak cloak]

then just set the IPs manually and just connect over the 10gig interface IP

make sure it's a different network than LAN

[snow lance]

that's what I got rn

it works on my iscsi share and stuff but this jail uses an ip through my 1 gbps to the internet

when I connect to it with the port like the lan IP it doesn't work

[peak cloak]

you to somehow set it to use your 10gig interface

never used jails so no clue

[snow lance]

is it possible to use both?

[peak cloak]

probobly, idk

[snow lance]

hmm

[nimble sable]

Eeh. I mean, I have the old unifi lite that's advertised at 800Mbps ish for 5ghz I get 400mbps pretty regularly more in fact so that makes sense so far

[nimble sable]

I mean, I don't see why not but I'm not sure about what kind of logic you'd have to program into it for choosing. But what I did was get a 10gig switch

But generally u can just assign stuff to for eg 0.0.0.0 and it listens on all available connections

[snow lance]

wot

its a truenas jail

[nimble sable]

There's a freebsd discord server btw. I'm super unfamiliar with jails but you should be able to get it to listen on any number of interfaces

[idle tapir]

I have a odd networking setup

Hard wired from my LAN port to a WiFi extender due to a previously odd network issue then a WiFi link to the router

Went from 200Mbps down to 400 down

[worthy tusk]

for some reason i cant access the router web page for my netgear orbi router at 192.168.1.1, it give a connection refused error. I can ping it just fine but the web interface doesnt work, it just started recently. i would just factory reset it and hopefully that would fix the issue, but i dont want to have to redo the port forwards for all of my servers. Any fixes without a factory reset? im willing to do that as a last resort as long as it wont mess up all of my servers. ping me if you know of anything to try, thank you

[primal ice]

try power cycling the router ? then accessing the web interface.

[worthy tusk]

i unplugged it for about a minute and tried again, no luck

i have tried a wired connection through my network switch, but not direct to the router yet

[primal ice]

what is your gateway set up as ? (that should be your router address) ipconfig /all

[worthy tusk]

what is it set up as?

its 192.168.1.1 if thats what you mean

[primal ice]

since you did some custom stuff did you change your internal network addresses -- okay. yeah if you factory reset you will have to redo all your custom settings again.

[worthy tusk]

Yeah

So if I reset the static ips to what they were, will everything work the same as before? Like proxmox and all my vms

After factory resetting it

[primal ice]

and port forwarding but yes it should work the same.

[worthy tusk]

Alright cool

Are there any other options to try besides resetting it?

[peak cloak]

Static as in DHCP reserved or actual static

[primal ice]

checking the default gateway with ipconfig /all or ip route if using linux system

[worthy tusk]

i think dhcp reserved

i just set them as static ips on the router

not too sure besides that

[worthy tusk]

i can see and ping it, i just cant access the web interface due to it saying connection refused

[peak cloak]

Yeah DHCP reserved

[worthy tusk]

it was working fine till a little bit ago, not sure what happened

[peak cloak]

Netgear things

[primal ice]

try using http://192.168.1.1

[worthy tusk]

any way to soft reset it without clearing the settings?

[primal ice]

power cycling it - but you already did that.

[worthy tusk]

yeah

is there anything in between power cycle and factory reset?

[peak cloak]

Try both http and https?

Other than that I can't think of anything

I doubt they would expose a shell like ssh

[worthy tusk]

http and https both give connection refused

same with orbilogin.com and .net and routerlogin.com and .net

really confusing

[primal ice]

could of been botted 😛

[worthy tusk]

i mean maybe but i doubt it

everything still works fine, its just the web interface

should i just factory reset or is there anything else i could try

ik theres a reset button on it, but idk how long to press it or anything

[primal ice]

generally hold it for 10-30 seconds with the power on - should restart with default factory settings for the firmware. also I would disconnect the wan port. til you get it set up again.

[worthy tusk]

alr will give it a try, i gotta go in and write down all of the ips and ports to set again

[plucky needle]

Need some info on IP's & networking as its out of my knowledge.
If I have 2 dedicated servers one in New jersey and one in texas but switched the IP addresses would that add latency and potential lag to the dedicated server?
idk how IP address work in that sense

[west sonnet]

so you just want to swap the IP's between the servers? or swap the IP on one of the servers for a new one

[plucky needle]

Yea we moved from the texas dedicated server to the new jersey and copied the Ip address over but I was thinking IP Address would technically still be based in texas if all we did was change the IPV4 settings in network adapter right?

its for a game server so would that mean the dedicated server would get some lag?

[west sonnet]

Are these public facing IP's or internal IP's?

[plucky needle]

public i believe

its the IP that we use to connect to the remote server / players connect to the game server

[west sonnet]

is it a 192.x.x.x, a 10.x.x.x, or a 172.x.x.x?

[plucky needle]

so I guess its public

172

[west sonnet]

okay, that's a internal IP. how do you connect to the server? Do you need to be on a VPN?

[rocky badge]

not all 172 is public/private

[plucky needle]

its not internal if its what players connect to?

https://www.battlemetrics.com/servers/dayz/13399676