networking

[jovial shard]

i mean the url

who decyrpts it in order to know where to route the request?

[peak cloak]

the end server

a reverse proxy, load balancer, whatever

[jovial shard]

who is that end server

[peak cloak]

yes

wait, let me check on that, but pretty sure like everythin gis

[jovial shard]

i assumed the payload was encrypted, not the url. so that the request can be properly forwarded

[peak cloak]

the website

[jovial shard]

well but to reach the website you must read the url

[unborn sluice]

you don't

[peak cloak]

to route over the internet?

[unborn sluice]

that's the job of the DNS

[jovial shard]

how do you reach abc if you can't read www.abc.com

[peak cloak]

routers route the traffic based on the IP

abc.com is 1.2.3.4

[jovial shard]

how does it know

if it cant read abc.com

[peak cloak]

IP is not encrypted

[unborn sluice]

have you read what DNS does

[sudden kayak]

fundamentally

[peak cloak]

?, all client needs is the IP of abc.com

[sudden kayak]

you need to a) block dns lookups to a certain website

[jovial shard]

but how do i know the IP of abc.com if i cant read that the request is for abc.com

[sudden kayak]

b) block any alternative way of accessing dns servers

[peak cloak]

wdym

let me find a diagram

[unborn sluice]

it actually sounds like you need to read how DNS works

[sudden kayak]

c) block any request going to an IP address that is known to correspond to abc.com

[jovial shard]

dns convers a domain to an address, but the domain has to be read

[sudden kayak]

d) block any other way of tunneling traffic out of the network (vpn, proxy. etc)

[jovial shard]

if it's all a closed box, nothing could be done with the package

"hey, send this box to its address."
"what address?"
"ha! encrypteeeeeed"

[peak cloak]

it's transport level encryption

[unborn sluice]

you don't encrypt the IP, so the ha encrypted is incorrect

[jovial shard]

but how do you know the IP if you dont know the address to translate it

[peak cloak]

the client decrypts it

but the router can't

[jovial shard]

but the request starts from the client with a https request to www.abc.com

[peak cloak]

look into SSL encryption

[jovial shard]

it cant be immediately encrypted otherwise it couldnt be routed

[peak cloak]

give me 5 minutes

[unborn sluice]

not really

[jovial shard]

i need clarifications 🙂

[peak cloak]

@jovial shard kinda high level connection process

[jovial shard]

did you just do that?

[peak cloak]

ye

didn't show https connection process

[jovial shard]

"what is IP of google.com". so its visible then

[peak cloak]

well that's normal DNS

with normal DNS yes you can intercept and block/posion

DNS over HTTPS is different

[jovial shard]

found this https://datatracker.ietf.org/doc/draft-ietf-tls-esni/?include_text=1

[peak cloak]

dns over tls

wait no, idk what that is

[jovial shard]

that is to cover up the dns in the original request

Importantly, the service provider does not have access to the plaintext of the connection beyond the unencrypted portions of the handshake.

this is the aim of this rfc

this suggests it is still open

*When a client wants to establish a TLS session with some backend server, it constructs a private ClientHello, referred to as the ClientHelloInner. The client then constructs a public ClientHello, referred to as the ClientHelloOuter. *

[jovial shard]

making a foo request first

[peak cloak]

DNS over HTTPS, see it's completly encrypted

can't intercept

[jovial shard]

ok that's an understandable diagram

[unborn sluice]

understandable, have a great day

[jovial shard]

you have some problem, @unborn sluice ?

well, @unborn sluice thank you for doing nothing other than being the opposite of help 🙂

@peak cloak thank you for your patience and going the extra mile in being a substantial help 🙂

@sudden kayak thanks for tips

@pseudo blade thanks for the suggestion

[sudden kayak]

DNS over TLS is separate from DNS over HTTPS

[sudden kayak]

and yeah he's just like that

also my tips were more meant to convey that it's not really practically possible unless you have full control over the client and MITM everything with added root certs

[jovial shard]

it's for my home router and try to block some stuff out for my kids and myself

[peak cloak]

Could try DNS blocking, but they will learn how to get around it eventually

[jovial shard]

perhaps, but until then one does what one can

wasnt dns blocking the one that could not be done because the dns was encyrpted within the https request?

[peak cloak]

well normal dns blocking

as in not encrypted

once they figure out how to use encrypted dns then it won't work

[jovial shard]

ah i see

well it'll have to be a mix between dns and ip for the time being

are there any sites doing updated ip lists?

(at least for the popular sites, not a "local dns")

[sudden kayak]

dns blocking is enough if you're just trying to keep casual users or kids from getting to stuff they shouldn't

you can use a pi-hole and just add whatever additional sites you want to block to the list

and as a bonus you get network wide ad/tracker/malware domain blocking

[jovial shard]

with a pi-hole i dont avoid having to use a downstream router

so it would be the same as having one with extended capabilities like the one suggested

[sudden kayak]

a pi hole just replaces the router's built in DNS server

you can set it up with any router

or just change dns settings on their PCs

for younger kids that's probably enough

[jovial shard]

the sad part is that the "modem" provided by my ISP does not allow me to specify a custom DNS

[sudden kayak]

ahhh yikes

[jovial shard]

so i only have control by adding hardware downstream

[sudden kayak]

i missed that detail. wow

[jovial shard]

i did not mention it , sorry

[sudden kayak]

ah gotcha. but yeah you can probably just put it in bridge mode and add your own router anyway

[jovial shard]

yes, that's what i was thinking. take its wifi down, bridge it to something extra downstream that provides me some more control

[sudden kayak]

yep

[jovial shard]

i do have a Pi but i might as well add a more capable router downstream

[sudden kayak]

well. what ISP? you may also be able to just replace it completely to simplify the setup compared to bridge mode

[jovial shard]

the isp provides me with a coax cable

i'm not in the usa

[sudden kayak]

ah gotcha. if it's DOCSIS you will have better results w/ your own modem

but the practice of charging to rent a modem even if it's just in bridge mode is mainly a US thing

[jovial shard]

probably, i get internet and tv in it

[sudden kayak]

ahhh the TV part may complicate things... bridge mode is probably fine then

[peak cloak]

best is to have seperate router and modem

[jovial shard]

yes, that was the original plan 🙂

but the whole encrypted dns kinda screw*d me

so it know requires me to maintain an IP list

[sturdy mantle]

Anyone here have any exp with reverse engineering bluetooth protocols?

[tiny scroll]

Ikr

Isp provided modems are crap

[rocky badge]

@clear igloo

[clear igloo]

Yeet

[rocky badge]

Main SSID is 802.1X now

[peak cloak]

I can't bother with stuff like that

[clear igloo]

cloud based do1x radius?

[rocky badge]

yeah

[clear igloo]

nice

[rocky badge]

it's connected to Azure AD

LDAP via cloud as well.

[clear igloo]

$$$$

[rocky badge]

free

https://jumpcloud.com/pricing

[clear igloo]

Azure AD though is pretty pricey no?

[rocky badge]

I pay $5/mo/user

[clear igloo]

Ah, I was thinking it was more, that's not bad

[little schooner]

yeah pretty affordable

[kind cypress]

What do you think is the best browser for managing multiple local IP web interfaces?

[wide swan]

I'm an azure support engineer and I simply hate azure AD, imo there are better options like google or AWS

[clear igloo]

I mostly hate the inconsistent GUIs between links on a ton of Microsoft online stuff

That's if I had to pick one major gripe of course

[wide swan]

I also hate it, if MS was organized I woudln'd have my job

[rocky badge]

@clear igloo got rid of on site NGINX, also got rid of opening 443/80 to the Internet.

[clear igloo]

nice!

[thick minnow]

can someone help me with SSH on windows 11

i've set up OpenSSH and enabled it but i can't connect to it from clients, it says authentication failed on my phone

[wide swan]

did you allowed your user to connect?

[serene lintel]

I wonder for Microsoft's habit of having wildly different UIs, do they have design teams working completely separately with no one guiding an overall design to work towards?

[viscid harness]

It's MS... they definitely have that.

[thick minnow]

how can i allow it to connect?

[wide swan]

https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh_server_configuration

but i tested it here with a vm

and it worked without it

[thick minnow]

when i do ssh username@ip address then it asks for a password

but my windows has no password on it

[wide swan]

did you use your ms account to setup windows?

[thick minnow]

no its a local

[wide swan]

so try it with no password

[thick minnow]

is there an app you can recommend for iphone for ssh

[wide swan]

I don't know any ssh client for Ios sorry

[thick minnow]

i try it with no password and it says access denied

is there a default password specific to my ssh server

or do i have to enable something on the ssh server?

i just installed OpenSSH and allowed it through firewall and that's it

[wide swan]

Thats what i done but I use a ms account

[thick minnow]

is there any difference?

[wide swan]

and the password was my ms account password not the local password

[wide swan]

I couldn't find any in the docs

[thick minnow]

i have a ms account logged in tho

@wide swan what are the public keys or private keys do i have to setup any keys ti gain access

[wide swan]

I didn't set up any keys

It worked fine

[thick minnow]

and what about the passphrase?

[wide swan]

Can you try and set up a password on you user

or create a diferent one just to test

[thick minnow]

a password on my windows user?

[wide swan]

yes

[thick minnow]

aight

@wide swan it worked

[wide swan]

With the password on you windows user?

[thick minnow]

the password and login of the new administrator user that i made

but there's something wrong with my main user

why wouldn't it login with my main user?

is it because i enabled access blank password logins through remote client

or maybe wrong username

[wide swan]

i guess that there is some policy about blank passwords just like you have to enable logons with blank passwords with rdp

[thick minnow]

nope, has nothing to do with blank passwords

it's a wrong username for sure

do caps matter?

[wide swan]

sure? because I know when you try to enable rdp there is a policy that prevents users with a blank password from logging in

[thick minnow]

yes that's why i disabled that policy so i can login with no password

but ssh has nothing to do with it

[wide swan]

what kind of error are you getting?

[thick minnow]

access denied

this might be stupid but i'm trying to ssh to my own pc from cmd just for testing

[wide swan]

I don't know if this works

[thick minnow]

there is something wrong with the username, do you think it's spelling or keyboard layout?

[dry bronze]

did you edit %programdata%\ssh\sshd_config and see if theres a PermitEmptyPasswords

[wide swan]

there is a command to get the username

[thick minnow]

i don't see PermitEmptyPasswords in the file

[dry bronze]

look near the bottom

right above GSSAPI

[thick minnow]

does it have to be yes or no?

[dry bronze]

would have to be a yes for what you want, and remove the # at the beginning.

i assume this is on a home network?

not the best security idea

[thick minnow]

yes it's only for local use

i don't care about security of it it's fine

[rocky badge]

@clear igloo Lmao, ISP sells an overpriced ($75) battery backup for the ONT. And it "only works" for the ONT because it's using the power connector from the ONT.

[dry bronze]

make those changes, save, then theres probably an ssh service to restart

[dry bronze]

FTTH? is phone service over fiber too?

[rocky badge]

Yes

[dry bronze]

i thought battery backup was a requirement for 911

like fiber ISPs had to provide it

[peak cloak]

apparently not

[rocky badge]

, to offer subscribers the option to purchase a backup solution capable of 8 hours of standby power,

[peak cloak]

I had a modem with battery backup as an option, but it's not provided

I don't even know if fios ONT has it

[dry bronze]

i think my ISP provided one, didnt think to test last time my power went out

[rocky badge]

my ONT just has this 7 pin block with 12V and comms to the UPS

[peak cloak]

ah they do, as an option, but it only works for voice

[rocky badge]

I just have mine on a UPS though with everything else

[peak cloak]

same

[thick minnow]

@dry bronze uhhh

[rocky badge]

I want a new UPS though

[dry bronze]

you probably have to open your text editor as an admin then go open the file

[rocky badge]

Just for ONT, router, switches, and APs

[peak cloak]

my setup is small enough

I have an overkill UPS

1500VA

[dry bronze]

i dont remember the VA of mine, 330W. smol homelab

[peak cloak]

I use like 20 - 30 watts

[rocky badge]

My ONT consumes a max of 15W, new router will consume a max of 10W, switch 1 consumes a max of 56W, switch 2 consumes a max of 12W. APs max consume: 8.5W, 9W, 6.2W

[hollow marlin]

Did you have the Adtran or Calix ONT?

[rocky badge]

All networking consumes a max of 116.7W.

[rocky badge]

Adtran 452

[hollow marlin]

You should be good for just straight 12v output. I may have the docs for pinnout.

[waxen scroll]

Juan loves adtran

[rocky badge]

Well yeah, but I just have a wall wart inside lol

[waxen scroll]

🤔 I wonder if I can get blob an internship.

[hollow marlin]

Oh its not on a UPS? Do you have any POTS lines?

[rocky badge]

I do

I have my own UPS that my whole rack is on as well

[hollow marlin]

I was curious if the ONT had a 12v UPS installed by the ISP. At least in NY we're required to by law for min 3-4 hour standby for e911 with POTS

[rocky badge]

nope 😂

i wonder how many 10 gig customers they have

[peak cloak]

huh

[dry bronze]

sounds like ISPs only have to "Specifically advise every subscriber...of the circumstances under which E911 service may not be available" at the federal level

[peak cloak]

verizon ipv6 going

still not available here

[rocky badge]

my ISP's parent ISP/company says they are deploying dual stack finally

but not mine yet 😐

And apparently they offer dhcp ip reservations for residential

[rocky badge]

😂

they have one /28

[peak cloak]

the other ISP here has like no mention of ipv6 online

[rocky badge]

Twin Lakes provides “Dual-Stack” IPv4 and IPv6 connectivity for all fiber to the home broadband services.

this is all they say on the parent ISP site

[peak cloak]

absolutely nothing

[rocky badge]

i wonder what unms connected devices my ISP has lol

[peak cloak]

I was thinking of maybe one day getting a Juniper SRX300

[rocky badge]

i was looking at a srx for a while

My juniper friend was pushing for a SRX, fortinet friend was pushing for a fortigate

I eventually went with a fortigate 40f lol

[peak cloak]

I could maybe get an older fortigate or sophos box for free from internship

[dry bronze]

i want a pan 440

[peak cloak]

we have so many old unifi APs

like almost 2 bins of the old ones

[rocky badge]

i bought my fortigate through avfirewalls.com

[rocky badge]

lol how much are those

[peak cloak]

never a good sign

[dry bronze]

probably $1,000ish

[rocky badge]

lol yeah

my quote was slightly below this

[dry bronze]

might buy an old pan 220 at some point

but not really worth it, i prbably would never actually put it at the edge. just as a tap

[rocky badge]

as much as I like older stuff bc it's cheap, the power usage 😩

[dry bronze]

the problem im having as i looked at used servers

[rocky badge]

yeah...

That's why I want a separate UPS for networking and servers lmao

[dry bronze]

just get a giant 3 phase eaton or toshiba

[rocky badge]

lmao

[hollow marlin]

Since my company merged with an ILEC like 30 years ago, we inherited their regulations.

[wooden shore]

i wasnt sure where to ask and ik im not really supposed to ask questions like this here but ive asked in #tech-support before and i just got ignored so, are there any ISPs people can recommend, we've had verizon for like a decade now and theyve been nothing but awful however my mom refuses to switch but im sure she would if there was a better ISP for less money so

trying to download libre office btw

[peak cloak]

verizon fios?

I assume verizon dsl if it's that bad

because verizon fios is good

[wooden shore]

i doubt its fios, we've had it in this house for like 6 years and it hasnt been changed at all

[peak cloak]

get fios

assuming it's dsl, verizon wants to get rid of dsl eqipment anyway

[peak cloak]

show pic of modem

[wooden shore]

its like this but even older

[peak cloak]

can you take a picture of the back of the actual thing

or find a pic that has exactly what yours has on the back

or get the model number

[wooden shore]

its this one

[peak cloak]

thats not dsl, hmm

where does the WAN cable go to

@wooden shore actually

what does it say on the front

like this

is there DSL label/light?

if you could get a pic it would be much simplier

[wooden shore]

thats the best pic i could get

[peak cloak]

yeah it doesn't seem to be a dsl setup

slow speeds can be the result of wifi, bad wiring, and ISP issues

do you have something like this on the outside

[wooden shore]

the WAN cable goes to a solar city thing???

idek

[peak cloak]

verizon fios (at least in older installations) installed the ONT on the side of the house, and used coax cabling to get the router in a good place

if you really don't know anything, I would get a tech to maybe come out and check

but I would first connect PC to router via ethernet to get rid of wifi being the issue

[wooden shore]

theres this

sorry about the quality

[peak cloak]

yeah that looks like fiber

[peak cloak]

...

[wooden shore]

yeah ill talk to my mom about it, thank you

[primal ice]

its fiber, but they are using the tv service also that is why they ran the coax.

[peak cloak]

verizon fios is generally good, I have it it's great

[peak cloak]

well older installs too

they used to use coax, since it was easier

ONT -> MOCA -> Router

idk exactly what they do these days if you have like gigabit service and TV

I have only internet

[balmy shoal]

I'm shocked my ISP isn't throttling me

This is over the past week from just 1 device. Residential service

[thick minnow]

i wish i didn't have to use shitty ass 30mbps lan because wifi

[serene lintel]

The old actiontec routers that verizon provided with the fios service were horrible. Basically for along time the router would suffer memory leans and become extremely sluggish. That would then result in reduced throughput, and latency issues. It would also cause issues with on-demand service since while the coax and a separate spectrum was used for TV service, on-demand content was streamed over the internet, and Verizon would temporarily increase the WAN speed while viewing on-demand content. but when the router was slowing down, the extra performance wouldn't do much. Thus their router needed to be restarted regularly to maintain performance.

I had this model during that time period. (insanely horrible).
They eventually fixed some of the issues, but by then I had run some CAT 6 , and had them switch from MoCA to to Ethernet on the ONT, and then used the actiontec as a MoCA to Ethernet bridge so that the DVR/STB could get guide data, on-demand and with the proper ports forwarded, the remote DVR service.

Eventually the fios G1100 router that they started giving everyone who was still on the older stuff turned out to be pretty stable, though quite limiting in features, and the WiFi performance was horrible compared to routers that were a fraction of its price.

Though it can still have the MoCA and LAN ports bridged, then disabling WiFi, DHCP and any other extra functions you find, and then just use it to provide internet connectivity to MoCA enabled devices like their STBs which even though they have an Ethernet port, Verizon disabled the Ethernet function so that people would be forced to use their router.

PS, the mi424wr rev F was fairly okay in that it was at least able to not crash, but performance was inconsistent and WiFi performance was horrible as well.

[pseudo blade]

Well that's one antenna so I'm not terribly surprised

One antenna on 2.4ghz too

[subtle wing]

anybody know of public american iperf3 servers?

[primal ice]

https://iperf.fr/iperf-servers.php scroll to the bottom

[crystal oriole]

That is a good site to have in favorites at work.

[subtle wing]

both are sadly inactive

i just connected to serverius' and it is only sending back 12mbits and 5mbits, when i have 1.2gb up and 40 down. tried it at my server where i have fiber and same result. every iperf3 server i try same results

[crystal oriole]

one stream or multiple

[subtle wing]

one

[crystal oriole]

slap some more streams on that badboy

[subtle wing]

im just simply running iperf3 -c ip -p -t 30

[crystal oriole]

slap on a -P 5

to start with

[subtle wing]

after setting the time?

[crystal oriole]

yeah

[subtle wing]

tells me the control socket closed

[crystal oriole]

:(

              number of parallel client streams to run```

[subtle wing]

its only transferring like a mbyte a second lol

[crystal oriole]

usually run like 40 streams or so when doing minor tests at work - but with temporarily hosted iperf server and such..

[subtle wing]

yea i cant seem to find my max bandwidth

no idea wtf is going on

[crystal oriole]

http://ping.online.net/

try that one - tested from work laptop with 10 streams and seemed fine

ignore my poor choice of color in the iwndows terminal :P

[subtle wing]

THERE WE GO! 40mbit/sec, lets do the reverse

[crystal oriole]

-R ?

[subtle wing]

yes

[crystal oriole]

👍 fingers crossed

[subtle wing]

reverse only gives me 54 😦

[crystal oriole]

I got diddly squat :D

[subtle wing]

damn haha

[crystal oriole]

yeah i think office firewall might be blocking it

(sshed into my work laptop at the office)

[subtle wing]

the reason im wondering is because my plex server that has fiber 1gig up and down has been unable to upload media larger than 15mbps

[crystal oriole]

15 MBps? 120 Mbit?

[subtle wing]

MBps

[crystal oriole]

Yeah so 120 Mbit ish then - wifi or over cable?

[subtle wing]

ethernet both ends

wifi doesn't properly work either

[crystal oriole]

ethernet over wifi any day of the week

[subtle wing]

consistent buffering no matter what 🙃

[subtle wing]

until 7 comes out 😉

[crystal oriole]

Ethernet over wifi any day of the week

[subtle wing]

haha

[crystal oriole]

work a lot with wifi

But just to see I saw right when I scrolled up, you have 1.2 Gbit ..Upload and 40 Down?

[subtle wing]

haha typo

my home where i am at has 1.2 gb down, 40 up, PMS where i've been testing the connection using iperf3 has 1gig up and down on a fiber connection

[crystal oriole]

Ah okay then im following

guess PMS is on some VPS host?

[subtle wing]

family members house LOL

they got fiber so i hauled it over there

[crystal oriole]

[subtle wing]

yessir

[crystal oriole]

Then it sounds damn strange you are getting such low throughput...

[subtle wing]

yea i'm very confused

[crystal oriole]

they're not throttling your server over the router are they

[subtle wing]

i think they are

[SUM] 0.00-10.00 sec 68.1 MBytes 57.1 Mbits/sec 9 sender [SUM] 0.00-10.00 sec 61.8 MBytes 51.8 Mbits/sec receiver

PMS 🙃

[crystal oriole]

linux host?

[subtle wing]

w10

[crystal oriole]

Like it is what it is - but what do you get from like speedtest.net or fast.com

[subtle wing]

full

900 / 900

but i wonder if they're not throttling port 8080

or deep packet inspection

[crystal oriole]

got another url for you then - unfortunately hosted only in europe but they have an FTP you can upload (or upload via CURL even) to see how it goes over well. normal ports

http://speedtest.tele2.net/

[subtle wing]

cant seem to connect

[crystal oriole]

[subtle wing]

were you able to?

[crystal oriole]

thanks windows dialogue for being useful and showing speeds - oh wait

[subtle wing]

LOL hold on

[crystal oriole]

man these dialogue windows are useless

[subtle wing]

yea it just opens my browser lol

[crystal oriole]

gonna give it a try with filezilla

gaaah no i dont want to install it I just want a portable one jesus

[subtle wing]

haha no worries, i honestly think the whatever the ISP agent did fixed the issue. still not sure why im not getting full bandwidth using iperf3 but PMS seems to be back to normal

[crystal oriole]

🤞

It would be nice if there were more public iperf servers available but..bandwidth costs

[subtle wing]

ill play with it for the day, i appreciate your help. been trying to figure this out for a week, going over every detail i could and it pains me to come to the conclusion a simple refresh or whatever fixed it haha

bandwidth dont grow on trees!

[crystal oriole]

"come to the conclusion a simple refresh or whatever fixed it haha"

https://tenor.com/view/it-restart-gif-21531929

[subtle wing]

yea i dont think it was a refresh, something BMT, couldnt understand the dude

[crystal oriole]

fingers crossed it remains stable - ill go back to enjoying morning coffee and WAN show

miss so much being away from home for just some days

[subtle wing]

enjoy my dude, thanks so much again for your help

[crystal oriole]

[clear igloo]

lol, that's a pricey battery

[pseudo blade]

It's pricy for 8 hours, especially if it disables everything bar voice

I'd pass on that in favour of a UPS if power was a concern

[rocky badge]

Yah

[rocky badge]

They recommended that I just put it on my own ups after they saw my rack lol

[dense fulcrum]

Does anyone have any recommendations for high-speed Access Points? not Unifi Ubiquity, I got some of them and they suck.

[rocky badge]

@clear igloo holy fuck

These are awful lmao

[peak cloak]

Unifi is generally good, but another relatively budget brand is TP-Link Omada

Aruba is a more pricer option

[dense fulcrum]

Aruba, I didn't even think of them. I have one of their switches. Hmm, going to check them, thanks

[dense fulcrum]

Yeah, they might be but I have an issue and everyone I talk to doesn't. I have tried adding additional AP to my house, I have optimized the wireless signals and gave channel separation and everything I can think of, yet I still have wireless devices that just lose connection for a while.

Now I just have to figure out which one to get, lol

[rocky badge]

lol, I've been looking at new APs but UniFi still continues to work for me

[clear igloo]

;-; y u do dis?!?

[rocky badge]

not me

[clear igloo]

but why you not censor that pain

[rocky badge]

lmao

[peak cloak]

me when first making cables

[sudden kayak]

thats how i terminated cables when i was an intern with my middle school IT department at like 12

actually idk i think i did marginally better than that

[tiny scroll]

how to you get the windows 7 copying background

[crystal oriole]

Good question

[elder vine]

sat here like... does dedup on windows server even work

from how i gather, you have a chunkstore, and files are inside the chunkstore after it scrubs the volume etc...

but when you literally have a multiple of the same file and you can see the allocation size of the file it present on a copy, you can tell quite clearly it hasn't dedup'd

so you do a little powershell, or run the scheduled task, de-dup now pls... it runs, finishes instantly, and no change.

wish there was an option on the file properties. Dedup this now pls and this time do it?!

nvm, me being me. the file was younger than the policy 😄 Rage averted

[frigid sphinx]

@dense fulcrum I kinda like the tplink omada stuff

[waxen scroll]

Ubnt works for all of my network needs

[wheat inlet]

https://techxplore.com/news/2022-05-teleport-quantum-rudimentary-network.html

[rocky badge]

👍

[little schooner]

what doesn't work for me is there routing solutions. I tried the edgerouter xg and it was too loud for my use case. if they could make a 4 port 10g or 25gbps router, thatd work so much better for me

[rocky badge]

i don't feel like using ubiquiti for routing anymore

er-x is awful, usg is slow at management, and my udmp drops packets like crazy on wan

on top of not having many features

i pulled out my udmp and using a temporary router until i get my new router lol

[waxen scroll]

Meraki?

[rocky badge]

fortinet

[clear igloo]

@rocky badge New extended battery module for UPS installed. For some reason, after you configure the main module to reconfigure itself for a second battery module you're not supposed to wait when the screen says "Please Wait" otherwise the remote management card doesn't come up, just keeps rebooting itself (but thankfully not the UPS)

[rocky badge]

lmao

[clear igloo]

Added 90 minutes of runtime though so I'm at 2 hours 😄

[rocky badge]

nice

[versed nebula]

Is this bell fiber optic?

[clear igloo]

That's a tree

Might be fiber on the pole, hard to say for sure

[versed nebula]

Yeah I wonder what that box is

[tribal coral]

Hello, I am thinking of building my own nas and doing so using truenas. I have a couple of questions i hope some of you might be able to help me with:

1. Can you use microsoft authenticator as a 2factor authentication?
2. Are there more security functions for online acces i should know about(i dont want to become a proxy for some illigal shit)
   3 can i set it up with multable users and each give them a set of storage while still having controll as owner?
   4 can i set it as a network drive on my windows ans mac computers?

[livid aspen]

kind of twisted for fiber.

[versed nebula]

I see

Phone?

[peak cloak]

1. yes, although not the Microsoft way with push notifications I think. The standard is TOTP which I bet both support
2. VPN
3. Pretty sure yes
4. Yes

[outer lance]

This is the place to ask about Wi-Fi stuff right?

[pseudo blade]

Depends. If it's basic troubleshooting perhaps #tech-support. Otherwise yes

[outer lance]

I think this applies then. What’s the likelihood that coax ports on the same plate as a telephone jack carry internet?

[pseudo blade]

Hard to say

Depends on where it is

Where you are

The presence of a terrestrial antenna if it is a likely location for a television

[outer lance]

Alright

I plugged a modem in to see if it’s getting signal. The upstream downstream status life just keeps flashing.

[pseudo blade]

I'd say it's not unlikely

But plugging in a modem is definitely an easy way to test if the service is connected to it (but won't tell you if the cable goes anywhere if not)

Are you paying for a connection?

[outer lance]

Yeah

[pseudo blade]

Incidentally this isn't really a WiFi question

[outer lance]

Apologies

What’s the appropriate channel

[pseudo blade]

#tech-support

[outer lance]

Thank you

[hardy mesa]

guys is someone kind enough to help me in a vc to setup a windows file network windows is fucking with me

[fluid flume]

Hi everyone I have some POE ethernet questions, I have a Hikvison HVR with one ethernet port connected to a switch witch is connected to all of my 6 cameras and to my router. And I want to have a POE switch instead (the cameras are POE capable) . So my question is will I fry the HVR port and my router port if I connect them to a POE switch?

[white cove]

get a POE switch. trying to run off the 1 port wont be enough power for your cameras you can if you wont but you would need a power plug for each of the cameras and for a home or biasness security it would be easy for some one to come a long turn them off

[clear igloo]

Provided you get an active PoE switch and not a passive PoE switch then yes you're fine because PoE is auto sensing and will only apply power if it negotiates it

[fluid flume]

Is a active switch the same as a managed one?

[clear igloo]

active/passive are poe types

[fluid flume]

Okey I was thinking of getting this one then but what do the two ports at the left do?

It says 8 x POE+ and 2 x uplink but what do I plug into the uplink?

[peak cloak]

Active poe doesn't have to be managed, but it can and most often is. Same with passive poe, those switches are usually managed

[peak cloak]

Those are sfp ports

But really you can just router plug into any Ethernet port

[peak cloak]

Given this

[ashen aurora]

I solved my IPv6 woes issue!

https://www.intel.com/content/www/us/en/download/19174/disabling-tcp-ipv6-checksum-offload-capability-with-intel-1-10-gbe-controllers.html

In some situations where a client machine is connected via some specific Optical Network Terminals 
(ONTs), and data is appended after the packet checksum, the network adapter can drop receive packets 
when using TCP-IPv6 Checksum Offload for receive traffic.```

1. Before proceeding with any changes, create a restore point or otherwise ensure that all relevant 
files are backed up.
2. To disable all Intel-branded network adapters in the system, download and run the PowerShell 
script DisableChecksumOffload.ps1, included in the package with this document.
3. Alternately you can disable TCP-IPv6 Checksum Offload using Windows Device Manager. For each 
Intel 1 GbE and 10 GbE adapter:
a. Go to the Properties page and select the Advanced tab. 
b. In the Advanced tab, scroll until you find TCP Checksum Offload (IPv6) and click on that. 
c. The Value field should show Rx & Tx Enabled. Use the selection box and change the Value to 
be Disabled. 
d. Click on OK to save and apply the change.
Following is the content of the DisableChecksumOffload.ps1 PowerShell script:
Disable-NetAdapterChecksumOffload -InterfaceDescription "*Intel*" -TcpIPv6```

Basically went to my Network Card Properties, Advanced tab, and disabled TCP Checksum Offload (IPv6). Selected OK and eveverything now works as intended.

[scarlet steppe]

Hello its my first time here. I have a question. My friend has a brick house and they have a air bnb that is 50 ft from the house should I run a ethernet from the house router to the air bnb router or should I put an access point in the air bnb and run etherenet from the house to it. I was also thinking about doing a mesh system but I was thinking that might not work.

[primal ice]

grats - what a weird and random thing to of run into.

[ashen aurora]

I think it's a very specific network card issue that wasn't even solved by the latest drivers.

It reminds me of that Pitcarin GPU issue I had with Pop_OS and Vulkan. It's a super-duper specific hardware issue.

[median ferry]

There's a chance that a mesh system would work.
I'd be of the mind to run an ethernet cable and install a wifi router, keeping in mind to separate the "home" network from the "airbnb" network on the other wide of the cable in whatever way works best. using a system that has an app that can manage the wifi remotely could be nice for them, so they can easily change the wifi password after guests leave, or check on internet status when they aren't home.

[sudden kayak]

a mesh system would be unlikely to get decent performance over that distance. your best bet is to run an ethernet cable and put a separate AP in the airbnb with a guest SSID

or potentially if running a cable outdoors is impractical you could maybe hang a directional high power AP out a window or on the roof of the main house pointing towards the airbnb

[slender patrol]

What's the best raid config for 4 by 2tb

https://nz.pcpartpicker.com/list/dJX2k9

[waxen scroll]

10

[hot hawk]

rq if i host a vpn on my home internet, the max theoretical download speed would be the max upload speed correct?

[pseudo blade]

Yes. You are capped in download speed by your home upload speeds, and upload by home download speeds.

There's other limiting factors also, like VPN type and overhead, CPU performance on both server and client.

[hot hawk]

Thinking about wireguard so don't think cpu overhead would be too much of an issue

[serene lintel]

https://www.youtube.com/watch?v=JI9fvAcNpdk Interesting video delving into 60GHz WiFi hardware.

[sharp shell]

anyone around familiar with truenas?

[pulsar goblet]

https://dontasktoask.com

[copper hinge]

What network switch do you guys recommend that has a decent amount of ports and isn't too expensive but can spend a decent bit

Need at least 10 ports

[grand halo]

I'm not too too familiar but I've been trying out Core

on the truenas topic though -- my server has 6 GB of ram and I know I need to upgrade it -- would 16 GB be sufficient or should I spring for 32? My server is an older system (dell precision t5400 -- found it in e-waste lmao) and it's ddr2 fb-dimm is really hard to find/expensive

not sure how i feel about spending nearly $100 on ram for a system i literally found in the garbage and i think has dying caps

[waxen scroll]

@clear igloo naughty naughty

[clear igloo]

What did you break?

[waxen scroll]

I am viewing scripts inside of a nexus 9k. "# this is a hack remove it" comment located

[clear igloo]

lel

[waxen scroll]

/bin/check-fpga.sh

[clear igloo]

I'll poke at mine later 😄

[maiden shadow]

I would honestly recommend upgrading at that point.

That's a fairly old system. Even a basic modern system could outpace it

[grand halo]

Yeah maybe but I’m going to be probably just using it for storage and a few jails — I’m mainly just worried about ram since I’ve heard zfs pools can get corrupted if you have less than 8 gb of ram and a few jails

[peak cloak]

I don't think it can get corrupted

it's just won't be super fast

from a former zfs dev

I don't understand honestly where this myth got started. Probably on reddit or on some other "half intelligent" forum of the blind leading the blind. ZFS is a filesystem. It can work on almost any memory amount, down to 1GB for a 100TB pool, although it would probably work pretty poorly there. It isn't a magical, mystical pixie that does stuff that somehow is entirely novel. The 1GB-per-1TB is just a very rough scaling rule-of-thumb that can be quickly used to get a coarse beat on the size of a deployment, but nothing more.
In fact, in terms of how it would run, try running LVM + Ext4 on a 100TB filesystem on a 1GB machine and see how it goes. It would most likely perform just as poorly, if not worse.

[rocky badge]

@clear igloo my fortigate arrives tomorrow

[clear igloo]

[rocky badge]

I can't decide on what to do with my old udmp @clear igloo

[clear igloo]

Thought about selling it or holding onto it for something else?

[grand halo]

Ohh that makes sense
Yeah I figured that having lower amounts of ram wouldn’t damage volumes but everyone in forums kept saying that
Could you send the source to this post if possible?

[peak cloak]

it's a discord server I'm in

[rocky badge]

Idk tbh

[waxen scroll]

i'll take it free

[rocky badge]

No

[waxen scroll]

@clear igloo do i really need to upgrade FPGA if the installed version is newer than my code?

[clear igloo]

nope

[waxen scroll]

My cisco guy is like YOU SHOULD and i'm like I already upgraded 50 switches without doing it

[clear igloo]

yah, probably a "best practice" but meh

[waxen scroll]

also thanks for not telling me about that command in the one month of emails we've been talking about this with

[inner trail]

Hi guys! I'm looking for some nice, easy-to-hack (i.e. openwrt/ddwrt and open firmwares like that), and cheap router to experiment with. Anything worth noticing in the 25-50USD range?

I've got an old TL-WR841ND lying around, but its 4MB FLASH/32MB RAM doesn't cut it in 2022

[inner trail]

Or maybe some not "hackable" router, but one with many of the "bleeding edge" of networking to experiment with (wireguard, and that kind of stuff). Anything except mikrotik

[primal ice]

computer hardware laying around - opnsense or pfsense

[peak cloak]

why not mikrotik?

[inner trail]

Because I'm using mikrotik on daily basis, and want to experiment with something else

[peak cloak]

fair

[peak cloak]

like wifi needed? or just the router part needed?

[inner trail]

I don't really need wifi that much tbh

[dry bronze]

Apparently I've not been keeping switches updated. 😕

[waxen scroll]

Rude

It's time for nexus 9k

[dry bronze]

those went away a year ago

[pseudo blade]

Gl.inet opal?

I haven't tried it but the specs seem alright at least https://www.gl-inet.com/products/gl-sft1200/

VPN speeds promised are oddly low for the hardware, I'd expect more (65mbps wireguard on a dual-core 1gbps arm CPU?)

[waxen scroll]

It's so cute!

[tired imp]

Friends, any alternatives to a Ubiquiti Dream Machine Pro?

[peak cloak]

kinda? depends on your needs

needs to be unifi?

[tired imp]

No, what I enjoy about it:

• Rack mounted
• 2 Wans
• Router/DHCP
• Is also an NVR

[peak cloak]

the nvr part is tricky, there isn't much out there thats router and nvr

imo, better off getting a seperate nvr

[tired imp]

I could spin all of these in VMs and container, but you guys were against it, I was thinking of doing it, did partly, until I lost power and the server didnt come up and family was puzzled on why there was no internet

Excluding the NVR thing, any good router with a good amount of ports that you recommend?

[primal ice]

a good router only needs one port in one port out to a switch 😛

[tired imp]

That is true!

[rocky badge]

I'm getting a FortiGate 40F tomorrow to replace my UDMP lol.

[peak cloak]

there's always mikrotik which I love/hate. On the higher end could look at fortinet, juniper, stuff like that.

[tired imp]

Damn I am so burned by fortigate, I hate their VPN solution 😦

[rocky badge]

I like FortiClient/SSL VPN lol

[peak cloak]

I personally just have an er-x, does it's job good enough

[rocky badge]

My UDMP

[tired imp]

What made you change?

[rocky badge]

More features

and reliability, while the UDMP is reliable, I want more lol

More reporting on the FortiGate too

[peak cloak]

I would love an updated edgerouter line...

[sudden kayak]

honestly i feel like the best general purpose answer if you don't want to be tied to a specific company's software/licensing is just a cheapish 1u server w/ a multi port Intel nic and opnsense or vyos

[rocky badge]

And I like how FortiGate handles firewall rules better than UDMP

[sudden kayak]

and you can easily stick a few drives in for a basic nvr too

[rocky badge]

Plus, Fortinet is an actual enterprise company.

[slender patrol]

whats the best way to back up a steam libray to a nas

[rocky badge]

I'll get actual support from them.

[peak cloak]

until you need a support contract

[rocky badge]

FortiCare is dirt cheap

[tired imp]

True,I am checking them, their stuff is multiples times my monthly wage lol

[sudden kayak]

personally i hate the idea of paying extra for software features that i could get for free from a general purpose operating system

but if i was actually running a business it would be very different

[tired imp]

What is up with these mikroTik, they are cheaper than I expected

[peak cloak]

they are pretty cheap, but I am not a fan of the OS

[tired imp]

divide by 5 to get the dolarino price

[rocky badge]

you'll probably get what you pay for

[peak cloak]

very versatile OS, but it's ehh, not very polished

http://demo2.mt.lv/webfig/
if you want a taste

[rocky badge]

I want new switches and APs too but $$$$

[tired imp]

Is this it? This 80's/North Korea looking thing?

[peak cloak]

well that's winbox, which is their desktop GUI configuration and the preferred way to manage it

the UI is yeah...

[rocky badge]

webfig is basically the same gui as winbox just in the web browser with some features missing

[sudden kayak]

i mean if your top priority is slick modern saas startup web design you're probably not gonna get a particularly good router

[rocky badge]

😩

I mean

this is fortigate lol

The least it can do is not look like ass lol

[sudden kayak]

i mean that's basically the same design wise but with a dark theme

[peak cloak]

my issue with routerOS isn't the UI per say, but the actual way the config works

personal preference

[rocky badge]

i love how fortigate's works, which is one major reason for switching lol

[sudden kayak]

you don't get much other than basic routing/firewall without a license right?

[rocky badge]

licenses add stuff like ips, antispam, malware protection, ssl decrypt related features

You get stateless/stateful, VPN, management, reporting, etc included

[sudden kayak]

i mean, that's not stuff that i actually need for my home network (except maaaybe ips) but on principle i hate how they charge full price for hardware and then more for features

fine for enterprise stuff

[rocky badge]

welcome to enterprise networking

[sudden kayak]

but I'm not using that in my house

[rocky badge]

@clear igloo I am now looking at the Cisco C9200L-24P-4X since it has 24 GigE PoE+ and 4x SFP+ with 370W PoE budget while using like less than 60W on all port load.

[peak cloak]

aren't you going to college

I stopped buying anything new really

[rocky badge]

lol

[tired imp]

Cheers guys, you are always very helpful 🙂

Love this community

[rocky badge]

For the FortiGate, my parents paid for 2/3 of it and I paid 1/3.

So it only "cost" me $161.87.

[sudden kayak]

are you planning to bring a rack and put all this in your dorm? 😆

[rocky badge]

leaving the FortiGate at home

[primal ice]

ofc he is

[ashen aurora]

Seems the TCP/IP Checksum Offload for IPv6 problem was far more prominent than I expected.

[rocky badge]

but going to look into stuff to run an IPsec VPN in dorm.

[sudden kayak]

i think the school IT people would love you if you bring a little 15u rack

and stick it in your dorm closet

[peak cloak]

I saw it on dslreports looking at verizon v6 updates

[rocky badge]

they wouldn't care lol

Although....UDMP can run a IPSec VPN.

[peak cloak]

I'm just gonna bring a HEX and little server

tunnel home as well

[ashen aurora]

Apparently it’s not just Intel NICs that are affected.

https://ipv6-ops.cluenet.narkive.com/9vMMqscA/windows-nic-driver-issues-with-ipv6-tcp-checksum-offloading

[rocky badge]

And even if the UDMP switch is "bottlenecked" by a 1Gbps uplink to the SOC, my Internet in the dorm is only going to be 100Mbps.

And device <-> device will stay on the switch chip

I don't even really "need" my own router...as every student is on their own VLAN.

The router is only there so I don’t have to have a vpn connection from each device

[primal ice]

yeah but I have the same onboard nic and do not have the problem. ¯_(ツ)_/¯

[rocky badge]

a really exciting thing with the fortigate....less than 10W operating usage

[primal ice]

meh you are in a dorm use all the watts 😛

[rocky badge]

at home

5gbps fw, 1gbps ips, 800mbps ngfw

4.4gbps ipsec, 490mbps ssl vpn

the ssl vpn should be able to saturate my home uplink

[ashen aurora]

Has something to do with specific ISP carriers and their corresponding Optical Network Terminals.

https://www.intel.com/content/www/us/en/download/19174/disabling-tcp-ipv6-checksum-offload-capability-with-intel-1-10-gbe-controllers.html

It just seems weird that Intel couldn’t solve this issue with a driver update.

[primal ice]

yeah I agree

[ashen aurora]

Could also be just an IPv6 standardization implementation issue. I’ve read several things about the IPv6 standard got ammended over time, and more of these inconsistencies are being highlighted as more ISPs implement IPv6 on home clients.

[clear igloo]

Can I interest you in our lord and savior the Nexus 9300? 😄
That's some crazy uptime though

[clear igloo]

lol, why?!?

[dry bronze]

We had a pair of 9396s that got replaced last year. 5600s are just for an old flexpod until Cisco gets us a new chassis

[clear igloo]

Ah, the old 9396, those were "fun" when it came to TCAM especially
Nice, 9504?

I still keep some 9396s in the lab at work for fanout to save traffic ports and other odds and ends
Everything now is 9336/93240 FX2 or 93180/93108 FX3 for the most part in the testbed

[dry bronze]

We switched over to Aruba. And yea tcam was a problem when we started writing acls before we got an internal firewall pair

[clear igloo]

Ah, never messed with aruba. what are they like? I've used some dell stuff before that was a bit different by comparison

[dry bronze]

We're pretty happy with them. CX os is pretty Cisco-ish and we don't have to pay TAC just to keep our switches updated

[vapid dragon]

I've been using Ubiquiti networking gear for at least 10 years, both supplying to and installing it for clients and using it in my own business and home. A few weeks ago I had my first cause to use their support/RMA service, and it didn't go well.

I bought a G4 doorbell in 2020 and installed it at my parents house (which is also equipped with a UniFi network and other UniFi Protect cameras). They loved it, and because there were already UniFi cameras at the property, they were already familiar with the app. About 3 months ago the device started doing funny things. Random WiFi dropouts and power cycling became more and more frequent. One day it powered off and never came back on. Anyone who is familiar with this device might know this is an extremely common problem; their own forums and every Ubiquiti related online community is littered with posts from others claiming the same thing happened to their G4 Doorbell. Some were failing within 12 months, some a little later, but there is obviously a serious defect with a large number of units of this product.

This is already quite long, so I'll cut to the chase. I opened a ticket to return it and get a replacement, which I'm entitled to since it falls under the 24 month warranty they offer on devices purchased from them directly. This was a total fluke for me, because usually I purchase UniFi gear through resellers and am stuck with a 12 month warranty, but the G4 Doorbell was so new when I was buying it that no reseller had any, and I had to get from them directly.

They immediately refused and cancelled the warranty claim, and have now been ignoring my responses in the original support ticket (which is still open) for over 2 weeks.

I am thinking about writing to the WAN show team about this as I would like to hear Linus' thoughts on it, but has anyone else experienced this failure with the UI doorbell and the abysmal customer service that followed?

[clear igloo]

Ah, so no contract needed for firmware updates, that's nice

[dry bronze]

Best part is no "switchport trunk allowed vlan ADD"

[vapid dragon]

I should also note that adding the Doorbell to my parents setup at the time involved changing from UniFi Video hosted on a local Windows based server to a UDM Pro, as UniFi Video had been phased out and the Doorbell is only compatible with hardware UniFi controllers. So adding it to their network came at a significant cost, but was totally worth it.

[waxen scroll]

Yeah but here's the thing... You would need one anyway while it's in prod so firmware is a non issue

[dry bronze]

We're paying support for one of our core switches and that's it

[waxen scroll]

I need 4hr replacement on all my stuff

[clear igloo]

real time replacement, teleport the equipment in before something happens 😄

[dry bronze]

We keep a shelf spare or two

For switching at least

[waxen scroll]

Our spares cost more than maintenance as far as I recall

[clear igloo]

8818 chassis with 18 36x400g linecard spares?

[waxen scroll]

Yeahhhhh

20k per card or whatever

[dry bronze]

Yea we're not that size. Support on the 8400 core that's expensive but then at the edge just some spares

[clear igloo]

Yah, 1g or even 10g edge stuff is usually cheap regardless

[waxen scroll]

I work like 90% data center lan/wan. Not a ton of campus

[dry bronze]

Yea. 3-6k for a switch depending on the model

[waxen scroll]

@clear igloo i got more bad news

ACI will throw an error if I don't make the fpga match

It will work and it's cosmetic but it's going to alert

[clear igloo]

that's dumb

[waxen scroll]

Yeah, so I have to go get 50 switches racked so I can run one command

👺

[clear igloo]

💩

[inner trail]

That kind of looks like Mikrotik mAP Lite which I'm also thinking of buying

But the usb C power on the gl-sft1200 looks better than a barrel plug

Than a microusb*, mAP (not lite) has a barrel plug, I mixed them up

[waxen scroll]

@clear igloo found another N9k easter egg

[clear igloo]

oh?

[waxen scroll]

in BIOS:

Power Debug Register 1: 0xbaadbeef
Power Debug Register 2: 0xbaadbeef

[clear igloo]

lol

[waxen scroll]

its a 9504

[waxen scroll]

@hollow marlin juniper easter eggs are crashes

[dry bronze]

I thought Cisco Easter eggs were the bugs

[clear igloo]

undocumented surprise features*

The router didn't reboot, it saw nothing was going on so did some memory management real quick, you just happened to care that your traffic dropped afterwards

[dry bronze]

Job security for the network team

[waxen scroll]

I have had multiple "solar flare" RFOs from cisco

bit flip due to solar flare

[clear igloo]

lol, I know someone who worked in TAC about 15-20 years ago. You could reboot a router and it would come up before most people even noticed it was down to begin with

[waxen scroll]

not anymore

[clear igloo]

haha, yah

[waxen scroll]

my damn home router takes minutes to boot

[hollow marlin]

nah, the real easter eggs are what you find after sudden power loss and how well it handles it

[rocky badge]

School IT easter eggs are when the network admin doesn't save the running config to startup config and lock themselves out of the switch remotely

not really an easter egg 🤪

[rocky badge]

i want a 24 gig poe+ switch with 10 gig uplinks that's not stupid expensive and doesn't use a shit load of power

[clear igloo]

That's fair then

[hollow marlin]

Juniper EX2300-24P are excellent if you can get your hands on them used. Can even drop-in Noctua fans to quiet them down a tad bit

[rocky badge]

I don't care about noise at all

As long as i can't hear it from the basement

oh dang it's like $1500

[hollow marlin]

Yeah their extremely quiet after boot

[rocky badge]

that's less than the cisco

I don't have much experience with Juniper tho but I can always learn

[hollow marlin]

You'll never get one new for the next year. Our orders are now over 12 months out.

[rocky badge]

dang

[hollow marlin]

Used I think you can get them for ~$500 or so

[rocky badge]

doesn't look too bad

[hollow marlin]

Junos is the king of CLI

[rocky badge]

Max. System Power Consumption (Input Power without PoE)
80W not bad

[hollow marlin]

Let me see what mine is running at power wise in my office

[rocky badge]

better than the old Cisco I had LOL, 90W just booted with one port

I mean, our power is cheap but high capacity UPSes aren't.

Anything in the states is above $1k

[solar geyser]

guys

I wanna learn about programming How to learn by myself anyone can you guys tell me how to learn programming pls?

[rocky badge]

@hollow marlin is Juniper picky about sfps

[solar geyser]

or any recommandtion pls?

[hollow marlin]

Mine is running at 26w with 10 active connections, 1 being PoE

[rocky badge]

danggg

I'd have like 3 PoE and 12 non PoE connections

[hollow marlin]

Not really. In my lab I tossed tons of different vendor programmed SFPs at it and cannot remember it not liking it

[rocky badge]

okay that's nice

most of my SFPs are cisco or generic from fs/10gtek

Idk if I want to replace UniFi APs or not but I'd kinda like to move away from UniFi switching.

[clear igloo]

go mist with Jarvis 😄

[rocky badge]

The problem with APs.

UniFi has really good price/perf

[hollow marlin]

💰

[rocky badge]

Although, tbh I don't see any issue with my UniFi wireless.

[clear igloo]

Yah, provided everything does LLDP which it should you're fine in almost every case

[rocky badge]

it can do WPA2 Enterprise, delivers 400Mbps perf (good enough), and managed in a central location

[hollow marlin]

Real world you won't get much of an improvement

[rocky badge]

my current SSID is just Skynet with WPA2 Enterprise, doing RADIUS assigned VLANs

Yeah

[hollow marlin]

I just checked and our best quotes for the smallest AP12s are still ~$700 w/3-year license

[rocky badge]

@ my desk

[clear igloo]

That's not terrible I don't think

[rocky badge]

which is PLENTY for what you do on WiFi

[hollow marlin]

Not really. The AP 43s I think are around $3000ish without licenses

[rocky badge]

if it demands anything more or stable it's wired.

This is all I have left with UniFi

[clear igloo]

that's a pretty big jump, does the performance scale at least or add improved stuff from the 12 to the 43

[hollow marlin]

More radios and BT/IOT features are pretty much it

[rocky badge]

2.5GbE Eth0, 1GbE Eth1

Wanna know the DUMBEST thing about the APs at school?

[hollow marlin]

Oh, the new AP45 and 34 is out....hmmmm

[rocky badge]

(Extreme)

Amber ethernet means it's Gigabit and green ethernet means its 100Mbps

[clear igloo]

lel, that's pretty much the opposite of everything else

[clear igloo]

Just checked and rough price for a MR57 + 3 year license/support is $2000
Not 100% sure on the 9136 though but I think it's pretty comparable to that, don't have that off hand to confirm

[rocky badge]

I was like is this why WiFi is so shitty, the APs only have 100FDX link?

[clear igloo]

school budget needs to go somewhere else, duh

[rocky badge]

But no WiFi is just shitty

[hollow marlin]

Mist is really the only Ent. WIFI solution I delved into because we deploy it. Are the licenses support or are they "you need this to worky"

[rocky badge]

I opened wire shark on my laptop

Over 50% of the traffic was useless broadcast

[clear igloo]

For the meraki stuff it's support + make it work

the catalyst aps though are just licenses for DNA Center if you want to go down that rabbit hole of "fun" 😄

[hollow marlin]

Yeah thats the biggest problem I have with Mist. Its decent, but the moment the grace period on your licenses expire, you just have a brick

[rocky badge]

The catalyst APs that my uni has looks interesting lol

[clear igloo]

Probably 9130s or 9120s if they are rounded boxes

[rocky badge]

They are

[dry bronze]

Do you need a controller for catalyst APs?

[clear igloo]

Yes but it can be physical or virtual (either VM or on an AP)

[dry bronze]

ok, so you could buy a couple to use at home if you wanted

[clear igloo]

yup

Provided one supports autonomous mode you're good

[rocky badge]

@clear igloo

[dry bronze]

Paint it black

[clear igloo]

"When I see a Fortinet I want to paint it black"

[river dawn]

Can someone recommend a good Wi-Fi 6 router (in EU). I have 1000 mbps broadband and still using the ips Provided router.

[thick minnow]

Passed Network+ and immediately ordered the full cisco official CCNA book set

[sharp shell]

haha yeahh i'm playing around with it on an old IBM X3650 I picked up.. I'm also in the same boat with the ram, this thing came with 4gb ram and it's also ECC DDR2 and it's soo expensive haha

[grand halo]

Yeah lol, like idk how I feel about putting >$100 into parts for a system I found in an e waste bin
I share this server with my roommates and we have about 700 GB on it right now out of 6.3 TB — also running UniFi controlller and haven’t had any issues yet

[sharp shell]

haha yeah absolutely.. I'm tryna figure out why my SATA drives show in the serveRAID 8k-l interface but i am unable to initialize them for an array

all my research has led me to updating the SAS controller firmware and bios but when i go to the download page for one it says that it is no longer supported and I cannot download it.. then there is another download link and it says it includes the bios & firmware update but I don't really wanna risk bricking the whole system

so i'm not quite sure what my best course of action is now lol

[peak cloak]

there's a raid controller in there

[sharp shell]

yeahh

[peak cloak]

some allow IT or HBA mode I think it's called

have to do research for the specific one installed

[sharp shell]

well from what I've read the raid controller supports SAS & SATA as they run the same architecture.. and i have SAS & SATA enabled in the bios and as i said it shows in the serveRAID 8K-l interface and registers but I am simply unable to initialize it for an array

[carmine moss]

HDD size?

Old servers got a 2tb limit and they need to be the same capacity

[peak cloak]

SAS & SATA are just the interfaces

you need to change the controller mode, if it supports it

what raid board is it?

[sharp shell]

errrr

honestly not sure i only picked it up about a week ago, let me shutdown the server and check

[sharp shell]

serveRAID 8kl card

then in the raid controller port there is this card: IBM ROHS RD MOD ATB-205/32MB but i thought that was a RAM cache?

[peak cloak]

model number?

from what I read it should start with like M or X or some other letter with some numbers after it

or whats the server model?

[sharp shell]

IBM X3650 M7979 - 31M

[rocky badge]

@clear igloo I had my friend setup an IPSec site to site on his pfSense to my FortiGate....and it works! So I'm probably going to bring a pfSense box to college lol.

The only "issue" i could see happening is NAT traversal but pfSense & FortiGate both support it.

[unreal valley]

Be careful because I know some colleges ban the use of routers and switches

[rocky badge]

they allow it as long as it doesn’t emit WiFi

[unreal valley]

So AWS has a couple of free tiers with Lightsail. You can then spin up some instances but when end when you close the window. How would I avoid this from happening?

[wide swan]

I got a little curious on why they do it

[rocky badge]

Usually because people think routers = WiFi routers

So they say it like that so ppl don’t misinterpret

[wide swan]

I mean why they ban WIFI

[rocky badge]

Because WiFi interference

[wide swan]

Really that's only because that?

Really hard to believe that they do that

When I was in college they Didn't do that so I had my own wifi setup

[unborn sluice]

Each their own

But 2.4 is very very crowded

[peak cloak]

wifi spectrum can get crowded

[analog ravine]

So, my wifi adapter is dead on my pc. Can I use a laptop as a wifi adapter by plugging in a ethernet cable in the laptop and my pc in the meantime before I get ethernet installed in my room ?

[unborn sluice]

cursed

[analog ravine]

Well it's what I got rn

Till tomorrow

[unborn sluice]

just wait for a new wifi adapter

[analog ravine]

Well, I don't have a car or bestbuy near me and I have things to do. Now I really don't trust usb wifi adapters. And getting a pcie wificard will take even longer.

And my gpu doesn't really leave an room for one anyway

[unborn sluice]

use your phone as a wifi adapter in the mean time (usb tethering)

instead of a laptoop

[analog ravine]

Boi

My pc doesn't have a wifi adapter.

The old one is dead, I can't use my phone

The only option is to use a laptop and connect it to my pc with ethernet

[unborn sluice]

why can't you use your phone

[analog ravine]

Because my desktop, doesn't have a way right now to connect to it

[peak cloak]

is it possible? yes

[analog ravine]

Also I have an Iphone, windows last time I check doesn't like recognizing it

I will give it a shot

It doesn't work if your computer doesn't have a wifi adapter connected to it

Got to work over bluetooth, but my bluetooth adapter is outdated like my wifi adapter from bestbuy. So it's super freaking slow.

[peak cloak]

??

[unborn sluice]

^

[peak cloak]

in theory you just bridge the wifi adapter and ethernet on the laptop

[analog ravine]

No, Im talking about the phone

[analog ravine]

Also how do I do that if that works ?

[analog ravine]

Found a jank solution that will work for now

[dry bronze]

was just reading this. 10W idle w/o devices, fanless. https://www.servethehome.com/hpe-aruba-instant-on-1960-24g-2xgt-2sfp-switch-review-jl806a/4/

[rocky badge]

i don't really like instant on sw tho

[dry bronze]

alright, i dont really know anything about their cli. just saw it and remembered you were looking at something similar

[rocky badge]

@clear igloo

[vernal glacier]

does anyone know well about ndi

please help me

[shrewd blade]

Anyone with cisco experience? My 3560 switch firmware has decided to do the unalive, now for some reason even after flashing a new binary, it isn't loading it at all and just errors out or just freezes the loading
https://jud.has-no-bra.in/5y8G10zyZ

[dry bronze]

Can you run verify against that bin to check the md5 hash? Maybe it got corrupted?

[shrewd blade]

Shouldn't have, I deleted and reuploaded it several times

[fresh patrol]

Has anyone done something that dumb: What happens when you connect 2 modems with phone cable?

[shrewd blade]

not much

[pseudo blade]

A/V/DSL modems? Nothing. Other hardware and software is required. Dialup modems can work the way you describe.

There are a few exceptions... https://store.duxtel.com/Proscend-VDSL2-SFP-Modem-(LRE-CO-RT-Pair)

This pair of modems are configured to permit it.

[sudden kayak]

this link is dead?

ah no discord just lost the close paren

[pseudo blade]

Discord has kindly stripped the right parenthesis

[fresh patrol]

Could you create "virtual" dsl network in any way?

[analog ravine]

Sigh Any good recommendations for a wifi card or good usb adapter with Wifi 6E ?

[peak cloak]

you would need a dslam device

basically what's on the other end of a copper line

[rocky badge]

If you're wanting a new ONT, you probably can't.

They are using Calix OLTs and most likely locked to the 803G's MAC and Calix has some proprietary stuff on top as well.

Plus, the 803G is a nice little ONT anyways. No reason to switch it.

99% won't get it around it because of the way GPON works.

[chrome remnant]

so i am using an old machine as a home server with my network router and for some reason my sharing speed is limited to 5MB/s is it due to the router being a bottleneck or do i need to change some settings?

[fresh nacelle]

Does anyone know how to enable bridging on a century link c4000xg router because I have it lying around and I want to use it to make virtual desktop better can anyone help I got the router to show up on my PC just by it's self no internet I just need help configuring it then wiring it to my main router

[ornate jungle]

That C4000XG does not appear to be a router - instead, it appears to be a CenturyLink Wireless Gateway (modem / router potato combo unit) that's most likely running custom firmware. We don't have CenturyLink up here in Canada, so I couldn't begin to imagine what the admin interface looks like, but if they support it you're looking for a "bridge mode" setting. That being said, looks like CenturyLink uses PPP authentication, so you may need to contact them if you don't know your PPP username & password.
https://robotpoweredhome.com/google-nest-wifi-centurylink/

[rocky badge]

https://www.metageek.com/training/resources/use-router-with-dsl/

1. Before you get started, obtain your PPPoE username and password from CenturyLink.

Note: You may be able to log into your current router and copy it out into a text file, but if the password is hidden, you might need to give CenturyLink a call. Just say, "I need my PPPoE username and password" and they should know what you are talking about.

[heavy dagger]

Anyone else have a Wi-Fi bill of 6k a year and 2,214 in Wi-Fi tech

[peak cloak]

internet

USD? Are you paying for like dedicated fiber?

[rocky badge]

@dry bronze I could get a switch that doesn't have 10 gig uplinks ...

And tbh...I'm not really even using 10 gig rn

[dry bronze]

If there's no 10gig, then what's the point 😛

[rocky badge]

😂 I'm not even using it lol

plus, its a free switch

I mainly want this switch to replace my access layer switch

[dry bronze]

Oh well then. Acceptable

What is it

[rocky badge]

Cisco SG300-28MP 😂

[dry bronze]

If you ever look at 10g again you could look at 3560cx. If 12 ports is enough there's a fanless model

[rocky badge]

it's mainly the power usage

I don't care much about fans

[dry bronze]

Oh I thought noise was one of your concerns too

[rocky badge]

nah

The only way it can be a problem is if I can hear it upstairs from the basement

but I have 2 1U servers

[dry bronze]

Looks like 18.3 watts with nothing connected

[rocky badge]

The SG300 or 3560CX

[dry bronze]

3560cx. Tested the one I have

[rocky badge]

The SG300 doesn't use much power, bc its connected to a UPS rn and it runs for a while

Ah

The thing I hate about 24 port switches....

[dry bronze]

Just if you ever looked at 10G it might be an option

[rocky badge]

This is at a client I did an install at....

12" was needed for port 1 to reach port 1

can't get by with 6" patch cables

[dry bronze]

Don't some really cheap switches do 24 straight across. Could do that 😛

[rocky badge]

Would be cool if more switches were like this

[spare owl]

.....

[dry bronze]

I assume the circuit board only covers half the enclosure is why

[rocky badge]

lol

this is like the only internal pic i can find

[spare owl]

lol

[pseudo blade]

Not unless laws force them to or the owner is wholesaling their internet product.

[peak cloak]

depends

here in the US, ISP usually owns the infastructure

so ISP A owns the coax, ISP B also needs to have their own coax

but there are instances where there is like municipal fiber, where it's multiple ISPs over the same infrastructure

[sudden kayak]

for additional context, the assumption is (usually) that you only have one ISP at any given time, so they will use the cabling that's already in your house. but getting to the house usually requires each of them to have their own coax

sometimes depending on the house that coax might come in in the basement or on a box outside or something so it may be confusing

but the part the ISP owns is usually not shared

[sudden kayak]

probably

[sudden kayak]

except outside the US or sometimes with municipal fiber like presentmonkey mentioned

[odd crescent]

[short condor]

Hey guys. Atm I am using a mitx system using a i7-6700k with a 4xgigabit network card installed running opnsense (pfsense before). I want to lower my energy consumption and replace it with a Ubiquiti Dream Machine pro or se. I have 1000/1000 connection into the house through fiber. Is the dream machine comparable to pfsense/opnsense as a router/firewall, or will I need to keep my opnsense firewall? I want to be able to use the regular features like ipv4 and ipv6 from my isp and also be able to plug in the fiber directly to the UDM Pro/SE.

[torn moss]

How do I configure mikrotik metal 52 ac router as an access point for a sound mixer?

[torn moss]

And I need the longest range possible

It’s for an iPad Air

It’s needs to communicate with the mixer

[rocky badge]

@clear igloo I wish you could manually force NDI network interface

Stupid NDI wanted to go over the lowest priority NIC on my OS

Aka WiFi…it was absolutely killing the performance

[clear igloo]

ooof, wifi no bueno for lots of traffic

[rocky badge]

A constant 160Mbps that requires precise timing and no packet loss…yeah….

[pseudo blade]

Long range is achieved with directional antennas. The longer the desired range, the more directional it must be. The limiting factor is going to be what the iPad can do if you're trying a direct connection. Use a wireless bridge and AP at the iPad end if you need more range than the Metal and a high gain omni will offer.

[clear igloo]

ooof, that's a bit rough

[rocky badge]

did 100GB in about an hour and more lol

[clear igloo]

sounds about right, definitely a heavy load

[pseudo blade]

That's about how much bandwidth I use in a month lol

[torn moss]

That’s the point, the iPad controls the mixer, we take it with as to several point for the final mix before the show, it’s not that much just 20-30 Meters with no obstructions

Just need to now how to get the most range out of what we have

[pseudo blade]

Oh 30 meters isn't really long

[torn moss]

Yeah maybe a little bit but mostly in 30 meters

[pseudo blade]

I'm more used to trying to get 300 meters out of devices :P

[torn moss]

🙂

[pseudo blade]

The metal has a 1-watt radio right? (The ones I looked at were)

[torn moss]

We have some large point to point stuff too from UniFi

[torn moss]

Uhhh i don’t really know the specs

[pseudo blade]

Which Metal is it?

And what throughput do you need?

Either-or you have to be doing something wrong for it to not work through 20-30 meters of open air

[torn moss]

52 ac

I haven’t configured it yet

We got this but I really don’t understand router os