networking

[peak cloak]

thats why

depending how the feature works, it may not show v6 IPs since those don't use DHCP by default

they use this other thing called SLAAC

[velvet jolt]

Doesnt show ipv6 for devices i didnt reserve either

[peak cloak]

it prob won't

idk how it's coded, it may be just spitting out all dhcp leases, which in that case, no devices will show

[velvet jolt]

I unreserved it and it now shows my Pi twice. Each with different mac address. Except one with an ipv4, one with no ip

I am 100% sure there is no other raspberry pi

[peak cloak]

I wouldn't trust whatever the router says

whatever the pi says, that's what it is

[velvet jolt]

So I guess enter in the ipv6 address the pi claims it has, then see if it works. Then if it is blocked, try to port forward to the device in the app while I point to it? Idk

The app for the router is quite barebones

[peak cloak]

what router is it?

is there a webui you can access

[velvet jolt]

It looks like that. Cable modem and router combo

The webui just says to get the app on your phone

[peak cloak]

a model number would help

[velvet jolt]

SAC2V1K

All you can do in the app is change DNS, port forward to devices it finds, and block mac addresses

[peak cloak]

seems like it's super barebones

I'm afraid you may be out of luck

[peak cloak]

is there any v6 addresses in the device list?

[velvet jolt]

no

[peak cloak]

yeah sounds like you need a different router

smh, manufactures not properly supporting v6...

[velvet jolt]

What if I change my TP-Link router to not be a WAP and be an additional router? I could do all the settings there. But wouldn't it still need to go past the spectrum router?

[peak cloak]

wouldn't work, your spectrum router is the one with the firewall

[velvet jolt]

Well I really doubt Spectrum has a more advanced router, and we need the cable modem part of it, so I guess oof

We do have a cable modem that is fast enough we know they support, so we could ask to use that, but we would have to get another router or WAP for wifi to one half the house

[maiden nymph]

Factory firmwares suck

Something like disabling SSID broadcast is most-likely just an arbitrary restriction applied by the manufacturer

[fickle spire]

hey, trying to port forward a mc serv, just curious if wan and lan port are the same as internal and external port

[dry bronze]

up to you, making it the same is easier to remember but you could have it answer on a different port externally and then forward to the port your MC server is answering on

[trail venture]

Does anyone know of a utility that will allow me to add network speed and usage statistics to my RTSS overlay?

Trying to test out a new Steam over NAS system and want to see what kind of transfer rates I am getting when loading games

[trail venture]

hmmm something is off here I have two computers both connected to the same switch both running at 2.5GBE link speed. why is Iperf only giving me about 1.5 GBPS transfer speed between them ...

thats alot of bandwidth left on the table or lost to overhead

[frigid sphinx]

what speed is the switch 🙂

[short relic]

I'm so confused

Some of my devices constantly drop wifi connection only when they are line-of-sight to my AP

[high crest]

yes, wan is external and lan is internal

[fickle spire]

thanks

[rocky badge]

@clear igloo they really did plan this station for high density

[clear igloo]

Nice, rare to see, lol

[rocky badge]

I see 4 meraki MR57 and 4 56 from my seat

[clear igloo]

wow, the 57 are super new

Must have got an early order in

[rocky badge]

Ig

Unless it’s a cisco catalyst

I’m too far away to see the logo

[clear igloo]

ah, long bois are 56, sqircles are 57 or 9130s most likely

[rocky badge]

Yeah

Their captive portal is annoying

It doesn’t remember macs if they’re off the network for like 10 minutes and it’s a stupid Grubhub captive portal lol

[clear igloo]

dang

[peak cloak]

Grubhub ??

[rocky badge]

Well, it’s not login thru Grubhub but sponsored

[peak cloak]

ah

I see your in NYC

[rocky badge]

Yes

[peak cloak]

never tried the wifi in the station

[rocky badge]

wait is 56 WiFi 6

[clear igloo]

Yes

[rocky badge]

It’s not mr56 bc it’s not WiFi 6

But the squircles are catalyst 9130s

[clear igloo]

Yah, the 9130s are Wifi 6 capable

[rocky badge]

The plain cisco ones are ax and the meraki are ac

[clear igloo]

lol, weird mix but okay

[rocky badge]

It is a 255.255.0.0 on 192.168.0.1 😭😭

[clear igloo]

They might have turned off the WiFi 6 capabilities for some reason on the Merakis

[rocky badge]

I the meraki ones probably belong to Amtrak

And the catalyst to Moynihan train center

[clear igloo]

Ah, that makes sense

[rocky badge]

Because it is also a different captive portal

The Amtrak one is the generic Amtrak captive portal while Moynihan is the Grubhub

[clear igloo]

lol

order some grubhub and in the notes "good luck catching me, lol"

[clear igloo]

Might be old MR53 then

[rocky badge]

Look at that whole 10 ft distance

[clear igloo]

cover all the wifi!

[peak cloak]

now we know why it went overbudget

they want to build a whole new expansion to penn

with the new tunnels and bridges

[rocky badge]

Lmao

@clear igloo wow Verizon has an entire wall of led screens for advertising yet their service is shitttt in here

[clear igloo]

Sounds about right

It's probably masking their tower and the engineers are confused why the signal is so bad

[rocky badge]

I haven’t seen as many DAS as I have in MTA subways

[rocky badge]

@crystal oriole I know it wont be fixed like in a week probably but its still happening on this train

[rotund moat]

I cant get proxmox to pass through network to my vm's over any vmbr's, eno1 is my management interface and I am trying to passthrough network through eno2 which is on vlan 50, I statically set my IP addresses in my vm's and it still does not work. Any solutions, should I be using a trunk port and tagging the vlans that I want to use or use an interface per vlan? I am using proxmox VE 7.1-7

[crimson rover]

Not sure what the correct answer is because normally with some fiddling ill get it working. Anyway i think you should add your eno1 to vmbr0 and out your ip on vmbr0. Then you can add it to your vm. Thats should work. Then for yout vmbr50 you need to make it vlan aware i think. Then if you tag your vlan you should add it to your vms network config. If its untagged you don’t have to do anything to your vm.

[rotund moat]

I will try that, I think last time I put the web interface for proxmox on a VMBR I could not connect to it

[crimson rover]

I think when you change your ip you need to restart the pve-proxy service. Or something like that. Restart of the server also works.

[rotund moat]

I will apply this configuration, theoretically I should not lose access to it

rebooting the server

[crimson rover]

Aa actullay no wait. I remember now. You need to change your host file.

That was what i was.

Well actullay you should not. Unless you change it to another ip.

[rotund moat]

if I use the same IP I should not need to edit it

[rocky badge]

@peak cloak 64 bytes from 1.1.1.1: icmp_seq=104 ttl=53 time=85402.801 ms

[crimson rover]

Is the server back up?

[rotund moat]

not quite

takes a pinch to reboot

ok its back up, booting a vm

got a DHCP address in range

[crimson rover]

Does vlan work?

[rotund moat]

I have that switchport on a specific vlan

AHA it works

had to change DNS RQ because I block DNS but that is all

[crimson rover]

Good now time ti setup the vm. Goodluck.

[rotund moat]

Thankyou! I was struggling with that for over a week!

[idle adder]

im trying to set a static ip and use my default gateway to login to my routers web ui and i cant access the internet when i set my ip to a specific ip, i cant ping any of the ips, and i cant access the ui because it says my firewall may be blocking it and that i have no internet access

[peak cloak]

give us specifics, what is the IP, what is the gateway, etc.

[idle adder]

192.168.1.1 i have a netgear router, when i ping the gateway it says general failure

and i cant ping my ipv4

which are my 2 ips that show up when i type ipconfig

ive tired setting to using a specific ip and

i have it set to automatic because if i set the ip and default to my ipv4 and default i found on cmd it doesnt work

and it says i have a connection but i dont have internet

i factory reset my router and also tried resetting things with cmd like flushing dns and reset registy and stuff

[peak cloak]

what IP did you try to set

[idle adder]

bc i did change stuff with my registry but resetting didnt do anything

[peak cloak]

something seems to be actively blocking it

[idle adder]

when i type ipconfig, i get ipv4 and default gateway

they are both 192.168.1.x

they both dont ping and i cant change

this to the ipv4 or default gateway

which i wouldnt do that anyway bc they have a specific ip for default gateway

but i tried and ofc didnt work lol

the only thing i could think of is malwarebytes

doesnt have anything active

i have nord too but dont use it often and i havent opened it

so i put in the ip from the ipconfig

[peak cloak]

what did you put as the last number

[idle adder]

3

;/ lmao ig its fine to say it

[peak cloak]

and do other devices work or is it just the PC

[idle adder]

when i change my pcs to static

[regal cloud]

maybe that ip is already taken?

[idle adder]

it was .12 and .7 before

i renewed the ip a few times

to try and they never worked

when i go to my phone its .2

[crimson rover]

@idle adder can you ping the static adres that you set. Or can you ping 127.0.0.1. If you get the same outcome then there is probably something else wrong. But I can’t explain yet why it works on dhcp.

[plucky wraith]

Hey

I'm trying to get a good switch and wifi ap

I'll mostly be using a 300Mbps line.. i don't want the AP to be bottleneck. What switch and ap should I get

I'll most likely be needing a switch and 2-3 APs to cover my whole house

[manic inlet]

Hello guys, I am looking for one setting to turn Wake up on Lan on my bios. However, I can't find such setting. I see OnBoard LAN Controller and Network Stack Configuration. One of them can be?

[manic inlet]

Okay anyway I have activated it from device manager

I guess it will work from now

[flat mango]

Is the Netgear Orbi WiFi 6E (RBKE963) worth its price difference compared to the Asus ZenWiFi AX XT8?

[bleak oar]

Does anyone know if there's a difference between buying a 2-pack of mesh routers vs 2x 1-packs?

i want to buy the Xiaomi Mesh System AX3000, but they only have 1-packs in stock

[queen salmon]

does anyone know how i can make a vm on my pc that runs on my hardware but i can connect to it on another pc

but cant access any of my data from my account on it

i have a switch and plenty of ethernet i just need to know how i can do it

[lethal marlin]

just price and maybe duplicate accessories

[bleak oar]

yeah, im guessing you can configure them from the app anyways

[bleak oar]

what kind of vm, windows?

[queen salmon]

yes windows 11

[lethal marlin]

yeah i mean thats kinda the point lol

[queen salmon]

latest release

[bleak oar]

i haven't done vms in a while but im pretty sure vms show up on the network like normal pcs

[queen salmon]

can i use 120gb of a nvme ssd and give it a tb of hard drive storage

because i need a network account that uses my hardware not the hardware in the device thats connecting to it

[bleak oar]

you just gonna access it for storage?

[queen salmon]

just basic computer use

but it needs to be able to run on other machines

using the hardware within my pc

[bleak oar]

i'm pretty sure you can do that yeah

[queen salmon]

but also so i can use my pc at the same time without streaming the screen

if you get what im saying

[peak cloak]

depends entirely on config

you can NAT the VMs

[queen salmon]

id want it to use about 12gb of ram and 6gb of vram

[peak cloak]

you can use a bridge

you can use a routed config

it depends

[queen salmon]

i have vmware worstation pro

[peak cloak]

https://docs.vmware.com/en/VMware-Workstation-Pro/16.0/com.vmware.ws.using.doc/GUID-0CE1AE01-7E79-41BB-9EA8-4F839BE40E1A.html

[peak cloak]

ok????

[queen salmon]

so what can i do

[peak cloak]

^

read it

[queen salmon]

i have literally no idea what im doing thats why i came here

[crimson rover]

Just to get it clear for me. You want to connect a vm to your network. And then acces files from that vm on your home network. Correct? Then you should just make a bridge in vm workstation. Give the machine a static ip in your network and then you should be done.

[peak cloak]

I wouldn't use statics

just reserve it in the router

[plucky wraith]

Hello

Can anyone help?

Need to buy 2-3 APs and a switch

What's good for home use?

Will be getting a 300Mbps connection

[pseudo blade]

Gigabit switches, AC/Wifi 5 2x2 or better APs w/ 80mhz channels will likely let you saturate the link (4x4 with MIMO is better, WiFi 6 is more efficient if you can get it but not strictly necessary at those speeds).

As far as what to buy for your home... Well I guess that depends on your budget and what amount of control you need over the network.

[plucky wraith]

thanks

but isnt wifi 6 more prone to interference by walls?

idk if interference is right word

the 5Ghz band was very bad at signal coverage

[pseudo blade]

It's the same frequencies as N/AC so no

[peak cloak]

5ghz is, not specifically wifi 6

6e yes, that runs at higher frequencies iirc

[plucky wraith]

ah okay

[pseudo blade]

Correct

5ghz is used by both AC and Wifi 6, but WiFi 6 will also work on 2.4ghz at speeds too slow for your requirements.

[plucky wraith]

then what should be looking at?

we have a house that is 2000sqft ground floor and 1000 sqft first floor

[pseudo blade]

10?

[plucky wraith]

sorry typo 1000

[clear igloo]

tiny first floor 😛

[pseudo blade]

Elevator/stairwell

[plucky wraith]

nil

no elevator, only stairwell

[pseudo blade]

How long's the longest side of the building?

[exotic mauve]

Hi did any of you make pfsense here? Because I can't connect to the internet and It cant assign with dhcp ip from isp. Lan network works
Pls ping me. Thanks 🙂

[pseudo blade]

Alas, we did not make pfsense

[peak cloak]

you can't get a IP basically from ISP?

they may not use DHCP for assigning IPs

[exotic mauve]

When i change to home router, everything is ok.

[peak cloak]

it uses DHCP? it may have PPPoE settings saved on it

[pseudo blade]

Well that indicates it's something in your configuration. Perhaps check the ISP router's WAN config page/s?

[peak cloak]

^

check how home router is configured

[exotic mauve]

Yes home router use dhcp

[plucky wraith]

50ft

[exotic mauve]

I have saved ip ,gatway and subnet mask

[pseudo blade]

So it's almost square

[peak cloak]

uhh WAN or LAN?

usually that's not saved for WAN

show a screenshot

[exotic mauve]

Wan

[plucky wraith]

nono its 50x40 ground floor, and its around 17x40 on first floow

[pseudo blade]

Close enough. One AP per floor might work

If it was central

[plucky wraith]

ground floor has lot of walls first floor has only 1 central wall and 2 rooms

[pseudo blade]

Unless those walls are all concrete 15m isn't really much to deal with

[plucky wraith]

all are concrete, at least 6 inches thick

all concrete walls are basically 6-9 inches thick.. the outermost walls are around 10.5 inches thick

[exotic mauve]

Photo of what? Wan or lan?, do you need routing settings too?

[plucky wraith]

but i dont think we need to worry about outermost walls

[peak cloak]

WAN settings

[exotic mauve]

Give me a second, i need to change home router back

[pseudo blade]

Larger floor, I'd take a single 5ghz AP and experiment with positioning it in different places, then checking performance in different rooms using iperf. Use that to decide what else you need.

Some areas of your home are probably less important to cover at 300mbps, I'd suspect.

You might be surprised what you can get away with. It's really not that big of a radius.

[peak cloak]

I get away with 1 AP for 1,400 sqft

plus I get wifi even out in the shed

and in most of the yard

[exotic mauve]

I have public ip so i marked end of it

[peak cloak]

hmm, ok. Now what is the config on pfsense?

[exotic mauve]

I reinstall pfsense server, because i tried every configuration , and i think it will be better to start fresh, because I could have done something bad what we dont want.

[pseudo blade]

1 4x4 80mhz AC AP covering ~2600 sqft over two floors here, Everything bar my bedroom does 400mbps on two streams, bedroom is still over 100mbps.

Which is enough for me not to care much.

The actual internet connection coming in is only 50/20 anyways lol

[exotic mauve]

Need i change this about domain?

And i set cloudflare and google dns server

Wtf ok now its working 😂

Maybe i need to leave this and one question. What is purpose of this?

The domain

[pseudo blade]

Local FQDN for network domain usage.

[exotic mauve]

Ok, thanks, 😄

[rocky badge]

@clear igloo ecobee be running linux 2.6

[clear igloo]

Nice 😄

My old alarm panel ran Android 4

[hollow axle]

In before someone at LMG discovers the slingshot interconnect...

https://www.hpe.com/us/en/compute/hpc/slingshot-interconnect.html

[waxen scroll]

my current one runs some custom stuff

[gusty dove]

As for speed, what would be the minimum upload/download for something like this?

I wanna know if my CenturyLink VDSL2 is enough.

[mild turtle]

Just had the biggest loudest lightning strike about five minutes ago. The power didn't go out but the switch isn't working. Two flashing green lights.

[rocky badge]

@clear igloo @crystal oriole Our Amtrak train on the back just ✨ stopped handing out DHCP IPs ✨

I was just getting APIPA addresses

it worked for like most of the ride but when we were delayed for 5 hours it just stopped working sometime during it lol.

[peak cloak]

it has very little overhead so it would be most likely fine

[thick minnow]

Is it possible to use an orbi as a wifi receiver. I know open wrt supports this feature. Cant find a custom firmware though

[unreal current]

check your modem

[thick minnow]

Hey guys! Looks like spectrum is bumping up their internet speeds again
https://www.reddit.com/r/Spectrum/comments/vf92gy/psa_power_cycle_modem
Rebooted mine and went from 200mbps to 350ish

[tidal frost]

If i were to use a raspi to setup a nextcloud server and send it to my brother, how much setup would be required on his end?

[shell saffron]

Anybody here familiar with Aruba network switches? I enabled LACP on two ports for my home server as well as disabled the stacking ports to free up the 10G ports to use just as normal ports and now when I scan my network I get the switch showing up as almost every port on all IPs in the network

S2500 48 port switch running ArubaOS 7

The only device that should have been affected was my server on .50

[shell saffron]

It is also making the Hostname not show for that device, which is how I have my drives mapped instead of the IP

[mild turtle]

Well lightning destroyed some of my switches last night, so that's fucking awesome. At least replacing them has solved the problem.

[clear igloo]

10/10

[tidal frost]

Sounds like your buying a ups soon

[dry bronze]

Are you using it for any routing? Have any interface vlans?

[shell saffron]

Nope, all I've done is disable the stacking port config to make them normal 10G ports and then configured LACP on the ports to my server. Everything else is untouched from factory reset. It wasn't doing this until I made the changes

[dry bronze]

So vlan 1 is the only vlan? Does the switch reply to pings on all those IPs?

[shell saffron]

Correct, VLAN1 is the only one. And now after disabling LACP and reenabling it the scan shows up normal just missing a few hostnames, but I'd still like to understand exactly what happened to cause this

[dry bronze]

Not really sure, it sounded like the switch was just answering arp for every IP. But disabling lacp and reenabling sounds like maybe there was a loop

I assume you have the two ports in a trunk or portchannel

[graceful obsidian]

Hello!
I would like to be able to access a device on a local network from an external network in a secure way.
I was thinking of something like a VPN between the two or such.
While talking with some people I know, they suggested a couple of services called ZeroTier and TailScale (assuming you don't want to set up a VPN on OpenVPN from scratch).
Now, do you have any experience with one of those two tools? Do you have any additional idea tu put into work for the setup? Am I missing something and overcomplicating my objective?
Thanks in advance for the reply

[shell saffron]

yes to the port channel, that is the menu that LACP is configured under for Aruba if you do it in the GUI

[peak cloak]

yes, it's pretty easy, depends on what you want to do as well

do you want to access a whole subnet, or just a single device. Single device, super easy. Subnet, also easy (at least with tailscale, which I used) just a little more config required

[shell saffron]

if you want to do it with Tailscale all you have to configure it as an exit node and then enable the subnet routing and your home network is available. Took me like 10 minutes

By default Tailscale is just device to device

[dry bronze]

Ok, I'm not any help past this then. Sounds like there might have been a loop but not sure how it would've caused what you saw. Unless one link wasn't in the portchannel and was doing something

[peak cloak]

doesn't even need to be exit node

exit node is only if you want it to be an actual VPN

for just accessing a device, you can do it normally

[shell saffron]

you're right, thats just if you want to route all traffic through, instead of split tunnel. My bad

[shell saffron]

🤷🏻‍♀️

[graceful obsidian]

Ok yes my bad, this is the full context:
I want to access a single local machine machine from outside when I'm not in the place where the machine is located at.
I also don't want to keep it on 24h so I was thinking of setting up wake on Lan on the pc and keep a pi on the whole time that sens the magic packet
But I still have to access the raspberry and would like to SSH to it as well. Not exposing it to public internet would still be a pretty solid bonus point too

As of the pc, I have remote control starting on boot so that's fine

[peak cloak]

so yeah, there are 2 ways of doing that

either install tailscale or zerotier on both pi and pc

or setup pi as a subnet router which will allow you to access everything in LAN remotely

[graceful obsidian]

Is the second option still under tailscale?

[peak cloak]

yes

I do that myself

[graceful obsidian]

Btw the zerotier or tailscale options seem solid
How do they authenticate?
Do you login to them?

[peak cloak]

tailscale auth is with tailscale account

can do 2fa, all that fun

at the actual network level tailscale is just wireguard

but it does all the tedious connectivity and nat hole punch

[shell saffron]

Lawrence Systems did a bit of a deeper dive into these if you want to get a good explanation of the differences

[graceful obsidian]

Ah I see ty

[graceful obsidian]

Oh yes thanks I'll look it up

[rocky badge]

I love zerotier

I use it for S2S unless the routers support IPsec

[peak cloak]

zerotier seems more network focused

tailscale for clients

[rocky badge]

Yea

[graceful obsidian]

Ok I saw the video, pretty interesting

I guess I could just try both with the free plan and then see which one to use, since it would just be a small private use

Thanks everyone!

[rocky badge]

@clear igloo @dry bronze https://www.reddit.com/r/cablegore/comments/vfe21l/when_the_network_rack_moved_into_a_different_room/

[clear igloo]

[dry bronze]

Almost Exactly what my surveillance department wanted to do

[rocky badge]

nooo

[waxen scroll]

as long as they remember how many feet the run has

i'm dealing with this now, but fiber, and the quote is going to be millions to do it "properly"

@clear igloo who will win? many OM4+ or one single mode boii

[clear igloo]

single mode boii goes the distance

[waxen scroll]

it's going for.... SPEED

[clear igloo]

but then it's all alone

[waxen scroll]

we need to do a whole datacenter conversion to SM but we're just barely over the limit theory on OM4+

the cost for SM optics are insane too, hence millions

[dry bronze]

just move racks closer

[clear igloo]

Yah, anything over 2km and the prices go brrrrrr

and even 2km is pricey

[waxen scroll]

I dont work at a small place. The DCs are massive

[clear igloo]

Solution still works, stack the racks

[dry bronze]

Lurick gets it

or just put one person at each end and push real hard

[thorny edge]

how do I speed up my ethernet connection? I ran the google internet speed test before and after using an Ethernet cable, it stayed the same, 60 MB/s.

[peak cloak]

What's your internet connection speed

[waxen scroll]

60MB/s is pretty impressive IMO

[thorny edge]

but when I try to download a game it never goes above 6 MB/s

[thorny edge]

internet connection speed like wireless connection speed?

[peak cloak]

as in what internet plan

[crimson rover]

Isn’t the Google speed test in bits and for example steam shows speed in bytes.

[marsh ridge]

Hey there. So we are getting fibre installed finally and we’re gonna be getting around 900mb download speeds. Are gigabit switches fast enough to handle this? Like I know 900 is less than one gb but do I need to worry about the combined download and upload speeds at all or am I okay with gigabit switches?

[crimson rover]

I would not worry about it unless your always downloading games with multiple machines at the same time.

[marsh ridge]

Ok cool thank you. Yeah it’s gonna be for our server room which will run Ethernet into everyone’s rooms in the house.

[crimson rover]

Yeah so like I said you might notice it when you wil download with multiple people are the same time. But for normal day to day traffic you will not get close to 1 gb. Also you always try it out. If you find that it is a problem then think about a solution.

[peak cloak]

yes

[peak cloak]

at that point you are limited by the uplink, not the switch itself

[marsh ridge]

OK great, thank you very much 🙂

[rocky badge]

Almost all switches are full duplex meaning they do gigabit both ways at the same time.

@clear igloo Friend got AT&T gigabit and I am jealous

[clear igloo]

lol, why? You got fiber too

[marsh ridge]

Perfect, thank you! Yeah i found the term full duplex on google but couldnt find it on the product page of the switch that im looking at, but if most do it then I'm sure it will be fine 🙂

[rocky badge]

he has Gigabit up and I only have 500Mbps

[clear igloo]

ah yah true

[rocky badge]

Plus AT&T has way better peering than my local ISP

[clear igloo]

Their peering is pretty good

[rocky badge]

https://bgp.he.net/AS19331

my ISP

[thick minnow]

Is 55 downloading speed and 25 uploading speed decent?

[thorny edge]

I dont know how fast it is, we had to subscription long time ago, but i know its a 5G

[little schooner]

the upload is pretty good. download is enough for a good connection

[placid pebble]

~~I'm using Wifi to share my Ethernet connection on my PC with my mobile devices:

However once the device connects, my PC can no longer go on any websites except for Google/Youtube. The connected devices can go on any website without problems. How do I fix this?~~

Edit: this appears to be an issue with the latest Windows update

[hollow marlin]

Thats pretty average peering for Tier 3. As for AT&T having "better" peering, thats relative to use cases

[rocky badge]

I mainly mean it in the way that my friends accessing shit from my IP sucks a lot

[hasty oak]

Not sure how basic this is, but I'm having an issue with my ethernet connection being dead slow to load any pages or even youtube at 144p, but the speedtest still shows gigabit speeds. I thought it was a DNS issue, but using wifi everything is fine. Not sure what to do anymore

I tried swapping out the cables, trying different ports on the router, reinstalling the LAN driver. Just seems like such an odd issue

Using ethernet I couldn't even load the driver page for my motherboard lol

[grand siren]

So I recently started getting more into the networking side of my home and I have a couple of what I’d assume to be “dumb” or basic questions- recently did the leap due to availability and finally got gigabit internet. Alongside this, I also got a smart network switch. In QoS I set my desktop priority as high but was wondering if I should also set the port connecting the router to the switch as high priority, too. Any help is greatly appreciated

[topaz storm]

Hello Everyone! Does anyone know much about packet tracer? I am trying to export the command log...

[severe hatch]

Hello everyone,

I'm currently facing a little problem with my network: I connected my PC directly to one port of our provider modem and a WiFi router to the other port. I now can't access any device (like my Raspberry Pi) that is connected to the WiFi with my PC. Has anyone an idea how I can access my other devices without connecting my PC to the router?

[peak cloak]

assuming that the modem is actually a modem/router combo, you won't be able to access other devices, because they are on a separate network. See diagram. What you need to do is either put wifi router in AP mode (no routing, no NAT, just wifi) or connect everything to Wifi router.

[severe hatch]

My router is a Fritzbox. There I have the settings: "Internet access: IP-Client" (currently I have it set to "Cable modem/router"). Is this the same as the AP mode you've mentioned?

Sorry, forgot to make my message an answer @peak cloak

[tepid harness]

Have you tried these steps? https://en.avm.de/service/knowledge-base/dok/FRITZ-Box-7390-int/106_Setting-up-the-FRITZ-Box-for-use-with-another-router/

[severe hatch]

Nice, exactly what I meant. They mention the IP Client settting there

[tepid harness]

So under the instructions for IP client https://en.avm.de/service/knowledge-base/dok/FRITZ-Box-7390-int/3244_Setting-up-the-FRITZ-Box-as-an-IP-client/
Did you follow all the steps?

[severe hatch]

Not yet. I currently have set it to "Cable modem" not "IP Client". I guess that's why I'm not able to access anything in the network

Do I have any disadvantages after changing this to IP Client?

[tepid harness]

Requirements / Restrictions

You cannot use MyFRITZ!.
Parental controls, the online meter, guest access, VPN connections, and all functions that require a public IP address (for example port sharing) are not available in IP client mode.
The FRITZ!Box does not support operation as an IP client via Wi-Fi.

Basically because your secondary router is creating its own subnetwork, you won't be able to communicate between the two networks properly

[peak cloak]

yeah so follow this https://en.avm.de/service/knowledge-base/dok/FRITZ-Box-7390-int/3244_Setting-up-the-FRITZ-Box-as-an-IP-client/

[peak cloak]

basically no control

it's just an access point basically

[severe hatch]

I see. Then I have to connect my PC to the router instead I guess

[peak cloak]

there is another way also, but it's a little more complicated to setup

and depends if the modem/router has the features needed to implement it

which I doubt

[severe hatch]

Another problem I have is opening public ports. I can only reach my NAS within my network. The provider modem has basically 0 functionality. I've read something about a Bridge Mode I could activate, but they don't give any further information on that

[peak cloak]

if you do bridge mode, then it no longer acts as a router

then you can't connect PC at all to modem, but fritzbox should get full access to internet

your situation right now is called double-nat

[severe hatch]

Ah okay. So To achieve the port activation I probably need to activate the Bridge mode in order to give the fritzbox full access. Then I have to connect my PC to the fritzbox as well as my NAS?

[peak cloak]

yes, everything will need to be connected to fritzbox

[severe hatch]

This is unfortunate because I already have all the cables permanently installed in our house. But if there's no other way, I guess I'll have to solve it that way.

[peak cloak]

move fritzbox to where modem is, get an access point just for wifi

[severe hatch]

Since the modem has no settings to externally forward ports, I need to activate the bridge mode or did I miss something?

[peak cloak]

yes

[severe hatch]

Otherwise I cant setup my NAS properly

[peak cloak]

but then you can't connect anything else other than 1 device to the modem

[severe hatch]

It's a little bit of work, but luckily I have empty conduits where there' s still room to relocate the cables.

Do I have to take into account any settings on the router when I put the provider modem in bridge mode?

[peak cloak]

maybe, it depends

if ISP is using PPPoE, yes

if just DHCP, most likely not

[severe hatch]

It's just DHCP

Thank you btw for your information. I have no experience in network settings. You saved me a lot of tinkering

[mortal flare]

Wanting to not use my ISPs router for wireless (as it sucks). I am going to use something like Endian on a server I already have for the firewall/router but need a good AP, preferably one supporting wifi 6 (or 802.11ac?) Is there any recommendations you can give for a AP?

[peak cloak]

tplink omada makes some pretty good APs for the price

there's also unifi

[mortal flare]

The tplink ones look good, and are not near as expensive as the unifi ones. Thanks for the recommendations

[gusty dove]

trying to access my Samba server from my Windows 10 PC.

Being a real pain.

Tried putting this in a bat file:
@echo off
set str=%1
set str=%str:smb:=%
set str=%str:/=%
explorer.exe %str%

Didn't work.

I enabled these

added this to my smb.conf:
client min protocol = SMB2

client max protocol = SMB3

Made a reg file with this code and ran it:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\smb]
"URL Protocol"=""
@="URL:SMB Protocol"

[HKEY_CLASSES_ROOT\smb\DefaultIcon]
@="explorer.exe,1"

[HKEY_CLASSES_ROOT\smb\shell]
[HKEY_CLASSES_ROOT\smb\shell\open]
[HKEY_CLASSES_ROOT\smb\shell\open\command]
@=""C:\OpenLink\openLink.bat" "%1""

None of this worked

I'm thinking of getting another SSD and trying Windows 7.

[south mist]

my laptop keeps giving me errors about my date being incorrect when it is correct

and because of that i am only able to access limited websites

and another thing, pictures on google chrome image search wont load their full resolution

youtube works fine though which is odd

[unborn sluice]

Time is relative

[south mist]

ok

[wheat flicker]

Hey so I have a problem, every time I open minecraft (1.18+) I get network latency every seconds while I'm playing the game (whether it would be vanilla or on the a server). This happens both on ethernet and wireless, and also happens on this specific pc (sibling pc works fine). It's been bothering me for some time I really need help

Everything would be fine until hop 1 spikes and so does the rest

[pastel summit]

Got a Huawei 4G router with external antennas to a PYNTING XPOL type thing. Works great. Then I have an ethernet cable to the guest house type thing, connected to a Teltonika RUT950. To its WAN-port.

How do I "extend" the WiFi? I'm assuming just set it up as AP and use WAN port for internets? So access point, not "client mode"?

[mossy flower]

Do you guys know of any software that can forward traffic from one device to another in a configuration like this? I can't do normal port forwarding, so, I have to do it this way.

                                                      /‾‾‾‾‾‾‾‾\
[  Service:PORT - WAN  ] = [  Internet  ] = [  WAN - X  ]    [  X - LAN - Service:PORT  ]
       # friend's PC                            # VPS                 # my PC

[trail garden]

Hey everyone, Networking and network security, hasn't always been my strong suit and I'd like to learn more, I thought I'd finally ask for some guidance on where to start the learning process, Mainly what's possible, what's impossible, general rules of thumb when it comes to protecting oneself from sinister intentions from strangers but in more details, I have a programming background and thought its about time to learn about network security...Terribly late I know. My basic knowledge is limited to restarting the router and getting a new IP when I feel something wrong.

[tired swift]

I would recommend starting with CCNA guides to build up your fundamental knowledge before diving into network security

[peak cloak]

Understating how everything works is critical to knowing where it can be exploitted

[rocky badge]

@clear igloo I'd love to see a Y axis

[clear igloo]

y axis is mistakes per second 😄

[rocky badge]

While deploying a change to our prefix advertisement policies, a re-ordering of terms caused us to withdraw a critical subset of prefixes.

[clear igloo]

probably traffic in Tbps but still would be nice to see it

[sudden kayak]

big oops but their transparency is pretty awesome

makes me feel better about the outage

not that i have any production traffic relying on it... just random personal cheap/free shit

I'm sure it would be harder to be forgiving if it actually put a dent in your business

[rocky badge]

https://blog.cloudflare.com/tag/postmortem/

[peak cloak]

isn't their SLA 100%, idk how claims work

[rocky badge]

Yes

https://www.cloudflare.com/business-sla/

https://www.cloudflare.com/enterprise_support_sla/

[sudden kayak]

sla just means "if we go below this level of availability, we give you a bunch of credit/refunds/apologize a lot"

it's not like a black hole opens up and the world explodes if they have an outage

[peak cloak]

yes, they have to refund a bit

[sudden kayak]

presumably "here's exactly how and why we had this outage and what we're doing to prevent this mistake in the future" plus some credits rings a little more true than just "here's the minimum credits we're contractually obliged to give you"

[hollow marlin]

I believe they're a Juniper shop. At that scale I would always create an unused policy with the new config and Junos allows you to run prefixes against it.

[lean temple]

anybody know technicalities with vpns? I need to port forward a few servers, but my apt./isp probably won't give me that kinda clearance..

[peak cloak]

You can use a tunneling service like ngrok

[solid badge]

So does anyone have an idiots guide to how to allocate IPv6 addresses to a Debian 11 setup?

[regal delta]

Tailscale is awesome too, and you get up to 10 free devices unlike ngrok. But a downside is that you have to be in the Tailscale vpn network to access your devices instead of it being a publicly accessible address like ngrok. It will all depend on your use case.

[rocky badge]

@clear igloo

[clear igloo]

[rocky badge]

http://www.bom.gov.au/akamai/https-redirect.html

[nimble fractal]

this site that's constantly exchanging pings with my PC is getting me worried(since I've never visited it until I noticed, neither do I remember visiting any Chinese site in my life for that matter)
I know it's probably software somewhere on my PC causing this but I have no idea which
currently have both inbound and outbound connections with that specific IP blocked in windowd Firewall
Any Idea on how I can find out the culprit program? (netstat -b) not helping

(my PC is the one at .150)

[sudden kayak]

hinet.net is just an ISP that owns the address you're seeing a connection to

doesn't tell you anything about whether it's malicious or not (i doubt it) but it's just a generic PTR published by residential ISPs

[dry bronze]

admin powershell Get-NetTCPConnection -RemoteAddress 168.95.246.1 | select OwningProcess Get-Process -PID <The Process Number>

[sudden kayak]

I don't know PowerShell well but i doubt something named "Get-NetTCPConnection" will tell you about this since it's a ping

[dry bronze]

I overlooked that it was ping

procmon from sysinternals might be able to tell you

[next crescent]

i had my surge protector with battery backup without coaxial surge protector, can i buy that coaxial surge protector for my cable modem? https://www.amazon.com/Parts-Express-Cable-Coaxial-Protector/dp/B01L5JN0UQ/ref=sr_1_5?keywords=coaxial+surge+protector&qid=1655954453&sprefix=coaxial+surge+%2Caps%2C138&sr=8-5

i had my surge protector with battery backup has no built in coaxial surge protector, can i buy that coaxial surge protector for my cable modem? https://www.amazon.com/Parts-Express-Cable-Coaxial-Protector/dp/B01L5JN0UQ/ref=sr_1_5?keywords=coaxial+surge+protector&qid=1655954453&sprefix=coaxial+surge+%2Caps%2C138&sr=8-5

[next crescent]

bump still waiting for reply

[gray knoll]

You cant do port forwarding on the Router in front of your PC? Or at all?
Because I would suggest something like a Wireguard Server on the VPS redirecting some traffic to your Wireguard-Client on your PC...

[thick minnow]

holy shit

[crystal oriole]

all sizes of dumpsters? damn

I understand your excitement

[unborn sluice]

with a dumpster like that, who wouldn't be

[onyx portal]

Hi guys. Has anyone experienced when they're trying to share their connection using "Internet Connection Sharing", the connection will drop (you cannot access anything online)

So the setup: Wifi adapter's connection is shared to an ethernet adapter (This worked before btw).

[true thorn]

There’s not actually really any limit. Once you have more than 10 devices connected they _politely request _ that you upgrade your account. I’ve got around 25 devices on my free account.

[true thorn]

Personally I have a cheap VPS (you can get a free one from Oracle), on a Tailscale network with my home servers, running Traefik to forward traffic.

[regal delta]

Oh wow! That’s awesome! Thanks for letting me know!

[regal delta]

Can you send a link to some information on the oracle vps? How has your experience been with it?

[true thorn]

https://www.oracle.com/uk/cloud/free/#always-free

I haven’t used it personally, but there are lots of good reviews online

[pseudo blade]

I don't recommend Oracle if you're new to cloud and looking for free.

Vultr, Linode, AWS Lightsail are all cheap (but more importantly, predictably priced), if you must have free use AWS's T3.micro on their free tier for a year/GCP's always free instance though you'll pay for bandwidth, I won't recommend Azure's free tier because it tried to bill me for free tier stuff anyways and their support for people not on support contracts is worse than nonexistent, even seemingly for billing issues...

Oracle's pricing model is... significantly more complicated than one glance at their free tier page might suggest, though to be fair nothing's free in cloud without a very good reason

[pseudo blade]

I'd suggest investigating a little further into port-forwarding. Look for if CGNAT or other technical limitations are actually present, as it seems to be only an assumption that you can't port forward and if possible it will save you headaches later.

[chrome kiln]

hey can anyone help me host a mc server, im doing something wrong with the port forwarding i think

[chrome kiln]

like what is wrong?

i have made the ip of the host's pc static

[peak cloak]

do you have a public IP address even?

go to Internet/WAN status and look for an IP

what are the first 2 octets

[chrome kiln]

of the public ip adrdress? 110.137

[peak cloak]

and you got that in the router right?

[chrome kiln]

i got it from port forward network utilities program

[little schooner]

Can PFSense safely port forward a service port, like port 47000 but also scan the traffic that comes in and stop it if it's malicious?

[pseudo blade]

You're looking for Intrusion Prevention. You'll want something like Snort or Suricata.

[dull mirage]

What is better glass or wood? For wifi signal

[pseudo blade]

https://docs.netgate.com/pfsense/en/latest/packages/snort/index.html Here's a starting point.

[pseudo blade]

Depends on the type of glass, but what most would refer to as glass is transparent to microwave RF signals like WiFi. Wood is not.

[little schooner]

@pseudo blade thanks I will take a look through it

[elder folio]

Best bang for buck on a 100Gb switch? Let’s say, 20 connections or so.

How about a M4500-32C?

[sudden kayak]

the Oracle thing is actually (surprisingly) not following the same "some things are free but we might send you a surprise bill" model as AWS - they are very explicit that if you sign up as a free tier account, they will never charge you unless you switch the whole account over to paid services

it's the one good thing they've done in decades lol

you can argue that it's free to get attention and get people interested, and that the free services may go away in the future... but i am pretty convinced they are being honest about it being free for now and they have no intention of suddenly charging you

[shrewd blade]

https://jud.has-no-bra.in/ogp/5zVXXQ70i.png

cisco gang

[gilded ice]

i understand what get and post does

but like you can sorta switch them around

you can get data with a post

and you can post data with a get

[waxen scroll]

You can't post data with a get

[rocky badge]

https://www.w3schools.com/tags/ref_httpmethods.asp

[sudden kayak]

i mean you can put shit in the body, it's just likely to be ignored and/or rejected as malformed

[solid bison]

let me know if this is not the place but.... Can you swtich between any combiantion of two hdmi inputs and two hdmi outputs using consumer electronics?

[waxen scroll]

Yes

Look at receivers that support zone 2 and have two outputs

[rocky badge]

cisco web gui ew

[rocky badge]

Also you should never send sensitive data over GET, only use the parameters for stuff like filtering, pagination, search, etc...

[solid bison]

thank you.

[south mist]

how might i fix this (WIN 7)

[rocky badge]

by not using Windows 7

[south mist]

🗿

i do not think my laptop can handle anything newer than windows 7

i mean, i showed my specs a while back and everyone crapped their pants

no one had seen specs so old and outdated

[shrewd blade]

Then use linux

[south mist]

i fixed it anyway

take that, end-of-life

bro this laptop is so old it got a built-in modem

but it also has a hdmi port somehow

[shrewd blade]

I think it's time for you to upgrade

[rocky badge]

@waxen scroll @clear igloo 😐😐my isp..

Literally the past week, internet dies at around this time

[pliant kelp]

Anyone knows what the rest of the setting name is? lol
I can't seem to enlarge the window size

I thought it'd be "when system is shutdown" or something but seems like "shutdown wake-on-lan" is already there

[pseudo blade]

You can put stuff in the body - many popular web applications do it because the alternative in some circumstances is using POST to get things because some browsers limit querystring length. As to whether it works: Most HTTP clients I've used recently definitely support that, but whether it works or not is dependent on what the API was developed to expect.

[primal socket]

anyone able to advise why a basic non managed switch would be failing entirely

[pseudo blade]

If it's unmanaged, not really. Power supply. Dead component.

[sudden kayak]

right but it's not in the spec, therefore any properly functioning server is free to ignore it or drop the whole request

[pseudo blade]

It's not prohibited by the spec, has practical use and frankly the server can drop or not implement anything it likes, including anything that does or does not comply to the spec.

You're always going to need to do what a given API supports anyways.

[elder folio]

Since nobody replied to me yesterday… what are we finding is the highest quality 100G switch for the money? Surely someone in here has a 100G network

It would be awesome if I could get one for $15,000 or so.

[clear igloo]

I mean I've got 400g switches but define your needs more than "quality"

Like do you need evpn/vxlan/srv6/etc? or just basic L2 features and some basic (if any) L3 routing?

[elder folio]

Really just L2+L3 but my needs may expand over time.

[clear igloo]

New or used is my other question I forgot to ask

[elder folio]

I don’t care. New would probably make me a little more comfortable when spending 5 figures

[clear igloo]

I would look at fs.com then, you can get a new 64x100G switch for $14200

or a 32 port for about $9300

The bad part with new is lead times though

[elder folio]

Oh wow! That seems like a bargain I’ll give it a look. I was originally looking at a 32x100g netgear switch that was $18500

[clear igloo]

https://www.fs.com/c/100g-switches-3503
Dec 23 or sooner right now, lol

[elder folio]

Lucky me I don’t really need it till then.

This will be for my home network… lol.

[clear igloo]

lol, nice, where are you planning to put it?

I assume you've got a basement or well noise proofed room

[elder folio]

I’m building a dedicated server room

[clear igloo]

Very nice 😄

[elder folio]

My NAS will be underground but my non crucial data will all be in a dedicated room off of my machine shop with a separate HVAC loop

[clear igloo]

100g nas I hope 😄

[elder folio]

Yup! That’s the plan!

Raid 6 PCI Gen 5 drives?

[clear igloo]

haha, that would be pretty speedy

[sudden kayak]

it's not prohibited by the spec in the same way that any other random nonsense request is not prohibited, just that the server is not expected to handle it. if a particular server will process the body of a GET as if it was a POST or something, that's allowed, but a compliant server is allowed to drop it. in a modern environment you can't assume anything outside of the standard HTTP spec will make it to your nonstandard server (i.e. there could be all sorts of load balancers/[reverse]-proxies/whatever else that will only forward spec-compliant traffic)

it's a fairly common deviation from standard HTTP and so many things will be liberal in what they allow, but you can't rely on it... and if their reason for putting stuff in the body of a GET is to work around query string length restrictions, they should work on fixing that requirement first, because the spec does actually say that there should be no length limit

in other words, don't deviate further from the standard to work around a non compliant implementation of that standard

[sudden kayak]

i have seen people do exactly this at work because of length limits in a poorly implemented l7 load balancer appliance and it only created more problems down the line

[pseudo blade]

I simultaneously agree and disagree to an extent. If a spec does not prevent something, proxies should not prevent it from being transmitted because more often than not we can't control the approach taken by the API anyways. I'd blame the proxy for being unable to handle that more than I'd blame the API for having a rather common design choice even if its behaviour isn't defined in the specification

[sudden kayak]

well i agree... but i can tell you from experience that working around, for example, a proxy with an implementation issue by going outside the specification is only going to cause more problems, even if the proxy is the real problem

like it totally should be fixed but also the application design shouldn't rely on things allowing stuff that's technically outside the spec even if it's pretty common

(personally i think the right solution here is really to allow GET to have stuff in the body, but that spec is less likely to change than a poorly implemented proxy)

[pseudo blade]

I agree. Sometimes you don't have an easy alternative though.

[sudden kayak]

right

(in this case iirc the real answer was just to yell at the vendor until they fixed the length limit in a firmware update)

[smoky estuary]

WiFi 6 is awesome, except for the fact that my ISP provided router combo handles it poorly so half of my smart home stuff and my dad's phone cannot connect to it

[sudden kayak]

336k upload???? I'm so sorry

[smoky estuary]

I'm not uploading anything so that's why upload ain't great

[sudden kayak]

oh gotcha gotcha

i assumed this was a speed test not just your current usage

[smoky estuary]

I'm transferring a game from my desktop (connected to the router via 2.5gbit ethernet) to my laptop over wifi

[sudden kayak]

out of curiosity what the problem with the smart home stuff? sometimes low power iot stuff will refuse to connect to an SSID with both 2.4 and 5ghz radios combined (even though that's supposed to be the standard behavior lol)

[smoky estuary]

It seems to be incompatible with WiFi 6 but sees there is a connection option via backwards compatibility but fails, I have that stuff on a tplink powerline which I use as a signal booster for the back garden

It works fine as it is now.

Just every once in a while the powerline unit in my room where the router is has a stroke and needs rebooted to get it to connect to the other units again

[sudden kayak]

weirddddd

all wifi should be backwards compatible more or less

no spec survives contact with the real world... even so, it should degrade gracefully at least

[sudden kayak]

(sensing a theme here today)

[smoky estuary]

It's two tplink smart plugs (kasa hs100) and a Huawei mate 20 lite

[waxen scroll]

is "knob" a curse or a dial?

[smoky estuary]

It's both, but it's definition is dependant on the context

[primal socket]

Hmm, this switch might really just not work. Connected it to my router and nothing

[primal socket]

Could a router setting be blocking it somewhere

[rocky badge]

LibreNMS or Zabbix or Nagios or Icinga

[peak cloak]

I used libre a while back

it was pretty good

for my basic uses

[rocky badge]

hmm

[elder folio]

Y’all I’m blanking, what’s the formula for bandwidth on a NRZ-L transmission?

Isn’t it C=2B logbase2(m)?

Where C is data rate B is bandwidth and M is modules?

[crimson rover]

LibreNMS for networking is the best if you just get started with network monitoring. Zabbix can also be used but is not as easy to setup I think. If you also wants server monitoring then go Zabbix I would say.

[rocky badge]

Lol I setup zabbix

I got esxi and fortigate in it so far

[clear igloo]

LibreNMS ftw

[waxen scroll]

solarwinds.

Solarwinds for general SNMP monitoring / config storage. Riverbed Profiler for netflow. Splunk or similar for alerting on syslog

[olive berry]

Hi guys

So I recently set up a home NAS with OpenMediaVault on it.
Using PhotoPrism for self hosted google photos web app (just the gallery part)

Was thinking of using Syncthing for syncing the photos from my Android Phone to the NAS.
One small issue, the NAS folder is 120+GB in size (From all manual backups I have done through the PC) and phone only has the latest 20 or so GBs.

Syncthing shows out of sync (even if I set the phone to only send updates to the NAS) and if I (even by mistake) tap on OVERRIDE LOCAL button that appears in the app, all the photos except the 20GB on phone get deleted from the NAS. (Thankfully I had a backup of photos on NAS)

Any other solution that just works?

@mystic hull what do you guys use for nightly backups (or incremental) from one server to another?

[rocky badge]

@clear igloo I wish I had a UPS that lasted longer than 10 minutes.

[peak cloak]

1 hour be like

it says it can last 2, but I doubt it

[rocky badge]

Its the main substation that gets the feed from TVA feeding 4 major substations in this are 😩

TVA is the main electricity provider in this area

[peak cloak]

I rarely get outages

if anything just less than an minute, but there are sometimes brownouts

in extreme weather thats another case

[rocky badge]

they said its a "component" down in the substation

[peak cloak]

I'm right on the border between 2 different substations, so during the last major outage, which I believe was sandy, one of our neighbors didn't have power, but we did

[rocky badge]

my UPS only lasts 10 minutes too

That's my WAN interface

businesses are out too

[nimble fractal]

any ports here I should close? (I use AnyDesk and Windows Subsystem for Linux(vscrsvc) so leave any of the ones necessary for those)

[unreal valley]

I've had my home lab servers piled up for too long and I'd like to put them in a rack. There is a person selling a 48U and a 42U nearby for the same price. Is there any benefit for getting the 42U over the 48U?

[peak cloak]

It's smaller

[unreal valley]

Thx. Didn't know if there was something else that wasn't obvious on the surface

[dry bronze]

https://tenor.com/view/dreams-shia-motivation-dont-let-your-dreams-be-dreams-gif-4777431

[rocky badge]

lol

[worldly swift]

hey guys. how is this antenna connector called?

[unborn sluice]

i think it's fine to call it by the name

[worldly swift]

I need the name of the connector so I can buy the proper antennas for them

[spark sundial]

I wish my laptop battery wasn't a crap that last for just 2 hours.

Maybe because I never cared about unplugging it before 80-100% 🤔

[primal jungle]

rf connector I'm pretty sure

[rocky badge]

@clear igloo

[clear igloo]

vpn speed?

[rocky badge]

Idk

[clear igloo]

oh, I saw the 1.1.1.1 so assumed you were speedtesting vpn or something

[rocky badge]

@clear igloo I think they are explicitly blocking icmp now

[clear igloo]

oh, lol

no ping for you!

[pseudo blade]

RP-SMA

It is an exceedingly common connector for external WiFi antennas.

You can tell it from regular SMA because the outer-threaded "male" connectors you're holding have a pin inside them, rather than a hole.

[rocky badge]

@clear igloo thank u T-Mobile for free in flight wifi

I don’t have a T-Mobile number but I just put in one of my friend’s T-Mobile number

Since it doesn’t verify, it just checks if it’s a T-Mobile number

[clear igloo]

lol, nice, yah t-mobile is good for free wifi 😄

[rocky badge]

@clear igloo Somehow I am getting 5G UWB in the plane

[clear igloo]

o.O that's weird

[peak cloak]

How high up?

[rocky badge]

Oh landed

Yeah I’m getting 240Mbps in the plane on 5G UWB

idfk how

[clear igloo]

airport speed go brrrrrr

[peak cloak]

Plane isn't grounded so no shielding i guess

Would be interesting to compare now vs when they are refueling (they ground the plane)

[pseudo blade]

Small cell?

I certainly wouldn't expect a plane to remain in the extended range of a UWB cell for long enough to do anything useful with it

Seems that's not a thing yet (and WiFi's easier anyways so fair enough)

[waxen scroll]

my carrier claims they support that, yet ive never seen my phone use it

[rocky badge]

lol

It’s probably c band

[nimble fractal]

which app is this?

[peak cloak]

looks like wifiman

[unborn flare]

Any Canandian here have Bell Fiber as ISP

I want to get rid of my modem , but apparently the maxspeed I can get direct with them SFP direct to routeur is 1gbs

[pseudo blade]

SFP is practically limited to 1gbps. SFP+ is needed for faster speeds. I am uncertain if this helps.

[unborn flare]

Its sfp+ its just apparently tricky when you use it dirent on your routeur via ppoe

Just starting a home lab and will get them 3gbs internet

Just want ideally to bypass them hardware

[pseudo blade]

Not sure. It does result in CPU overhead but I can't think of why it wouldn't be possible for them to offer greater speeds, PPPoE or no.

[hallow junco]

I have an old Bigfoot Networks Killer NIC, would it be better than a realtek integrated nic?

[opal flower]

looking to wire a couple rooms in my house, was planning to use cat7 but I read it is stiffer and harder to work with than cat6a, any truth to this? I would be using S/FTP or U/FTP in both cases 23AWG

[meager ginkgo]

💀

[waxen scroll]

R/facepalm

[mild turtle]

I've had to replace a router with a second hand one. I've factory reset it and everything seems to be up and running. However and to note I WAS getting this before I replaced our previous router. The router we had died, long story. I'm not getting an issue but a family member keeps saying that when they're trying to load websites it's saying "Internet may not be available" I've not long had the second hand one set up and I've not used the wifi enough to see if I personally get this issue. But the family member is saying some websites are also saying it comes up with "Your connection is not private". Why?

[hallow junco]

ipconfig flushdns help? sometimes when you setup a replacement network, devices get lost re-establishing the connection as minor differences (what device get which IP or whatever)

[rocky badge]

@clear igloo I keep forgetting Discord is ipv4 only

[waxen scroll]

did you open a support ticket?

[clear igloo]

Open two tickets to make sure you get attention from the devs 😛

[waxen scroll]

sometimes all it takes is a request to jog memories

maybe they want ipv6 support but forgot to put it in the backlog

maybe not enough people asked

[thorn pelican]

They hate to wait for their cloud provider to have a wider rollout. AWS still isn't ready for production ipv6

[peak cloak]

they use GCP I thought?

plus they have cloudflare which they could use worst case to just proxy

[waxen scroll]

I was going to say you should be multi-cloud + on prem butttttt

I think discord is still technically not at the point they make enough money?

Or did I forget and someone bought them?

IRC has been doing hybrid ipv6+ipv4 with linked servers for years so IDK why discord cant do similar

[rocky badge]

It’s not aws lol. Aws is IPv6 ready. It’s google cloud + them explicitly disabling IPv6 in Cloudflare

[thorn pelican]

not everything on aws is ipv6 ready. you can setup your infra such that you receive ipv6 on edge but many companies are still waiting for amazon to rollout ipv6 support everywhere. I was under impression they host on aws. with google cloud and cloudflare they have no excuse. We have deployed multiple production ready services on gcloud with v6 at one of my previous workplace

[rocky badge]

it’s discord, and they’re on google cloud ¯_(ツ)_/¯

[peak cloak]

still not iirc

microsoft was apparently looking at it, but was like nope

[waxen scroll]

its not a great product for a business person

they depend on suckers to pay out monthly to get access to emotes and stickers

which for some crazy reason many of you in here do. mind = blown.

blobs been paying since 2018! No money from presentmonkey or matorone tho.

honestly surprised theres not even basic text ads in it

[vagrant yew]

Blob is interested in guys

I got news for you, I’m a guy

[waxen scroll]

you two should start a thing

@vagrant yew I see that you too dont give away money

[mild turtle]

This server could not prove that it is community.spiceworks.com; its security certificate is not trusted by your device's operating system. This may be caused by a misconfiguration or an attacker intercepting your connection.

Why the fuck is everyone in my house getting this?

[slow pivot]

Only in your house?

[mild turtle]

If you're asking if it does it in someone else's, then I have no idea. I literally don't go to other peoples places

@slow pivot

[slow pivot]

snarky but whatever. I'd first go check what isn't matching in the certificate: the browser should tell you that when you click for cert details

[mild turtle]

Sparky? I answered your question.

What do I look for?

[slow pivot]

click the "lock" next to the url

[mild turtle]

No, I mean what should I be looking for in the cert?

[slow pivot]

it should indicate what is invalid wit the certificate that the browser is complaining about

[mild turtle]

OK, when it happens again I'll take a look. Post it here when it happens?

[slow pivot]

sure

[mild turtle]

Your connection is not private

Attackers might be trying to steal your information from (for example, passwords, messages or credit cards). Learn more

NET::ERR_CERT_AUTHORITY_INVALID

[slow pivot]

ah

the entity that signed that certificate is no longer valid it would seem

[peak cloak]

whats the certificate from

[mild turtle]

Just about any website. I literally get it for Google

[peak cloak]

make sure your system clock is correct

[mild turtle]

Your connection is not private

Attackers might be trying to steal your information from www.google.co.uk (for example, passwords, messages or credit cards). Learn more

NET::ERR_CERT_AUTHORITY_INVALID

[peak cloak]

whats the cert

click the red lock

click on connection

view cert

should look like

look at details

[peak cloak]

certificate information

[peak cloak]

self signed

someone is mitm

could be router trying

[mild turtle]

What does this mean?

[peak cloak]

https://community.bt.com/t5/Archive-Staging/quot-Your-connection-is-not-private-NET-ERR-CERT-AUTHORITY/td-p/1704448/page/6

why tf is a router / ISP trying to mitm a connection

[peak cloak]

some stuff here is incorrect, since you defiantly do not want to add an exception for this cert

try to update the router?

what dns server are you using, try to change it something like google's or cloudflare

[hallow junco]

second hand router... Did someone flash nefarious firmware?

[peak cloak]

I doubt thats the case, since many other people have the same issue with this telco

https://superuser.com/questions/1093753/is-my-router-trying-to-mitm-my-office365-connection

[mild turtle]

So to keep a really long story short. Here is what has happened for the last week. We had a really bad lightning storm and I heard possibly the loudest bang in my life as did everyone within a mile. I had a switch die and I think it might've damaged the router. I got a second hand one today and factory reset it and set it all up. However this has been happening with the original router and now this second one.

I had someone from BT saying they would ruin a line test. They claimed everything was fine but we kept having issues. They sent someone out to check it and he said he thought the router was gone. The guy on the phone said he would have the broadband monitored for 24 hours to check if anything was happening.

[peak cloak]

for this issue?

[mild turtle]

Huh?

[peak cloak]

as in the SSL issue

that's what you talked to them about?

[mild turtle]

No, so we kept having issues with our devices telling us to sign in. We'd get question marks and exclamation marks next to the WiFi symbols. I told him about this cert issue and he just said it was chrome, which funnily enough is what a friend who does networking said, but my friends been really busy so couldn't really help.

[peak cloak]

it's not chrome, that's for sure

at least chrome isn't the root of the issue

[mild turtle]

My brother said he can't play any games because he's getting 5000 ping and it keeps kicking him from discord chat.

[peak cloak]

try to enable encrypted dns on one device. https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/encrypted-dns-browsers/

see if that will fix it

it's not a permanent solution, just to see help troubleshoot

before you do that

in windows, try to do
nslookup google.com

in cmd

[mild turtle]

My friend said something about that it might be a signal to noise problem and that it can't cope with the resistance or something to that effect. House was built in the 50/60s and I imagine that the stuff hasn't been upgrades for a few decades. We still have shit ADSL

[peak cloak]

that's not the issue.... with certs

at all

[mild turtle]

No, not the cert, but the internet dropping.

[peak cloak]

connections dropping could possibly be because of this issue.

it could, it could not

[mild turtle]

The weird thing is that this started happening after the storm, could be a complete coincidence obviously, but everyone has different models of phone and different versions of browser. I have chrome, someone else uses Googles app. Another uses Firefox. It's really weird.

[true thorn]

It’s quite clearly your network. I assume it doesn’t happen when you’re on data?

[mild turtle]

No

[true thorn]

Try changing your DNS/enabling DoH, as @peak cloak suggested

[mild turtle]

How do I go about this? I have the BT hub.

[peak cloak]

on device

not router

[true thorn]

Try on your device first

[peak cloak]

@true thorn the ISP/Router is doing something funky

[peak cloak]

look at this

[mild turtle]

Also what was he talking about "mitm" I looked it up but I don't understand it.

[peak cloak]

middle in the man

[true thorn]

Yep, found some threads about it

[peak cloak]

something is intercepting the connection between you and google

[true thorn]

Easiest way is install the 1.1.1.1 app

[peak cloak]

chrome has it built in

just have to enable it

@mild turtle https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/encrypted-dns-browsers/

[true thorn]

https://play.google.com/store/apps/details?id=com.cloudflare.onedotonedotonedotone

[peak cloak]

doesn't that do the vpn

warp thing

[true thorn]

Ah - looks like it. Assumed it just set your DNS.

[mild turtle]

Could a slave do this? I used an old bt hub to create an access point? Someone in here helped me do it.

Cause issues that is.

[peak cloak]

I have no clue

it def shouldn't

but for all I know it could be a bug

[mild turtle]

I'm in the dns

[peak cloak]

no

on device

and that's dynamic dns, irrelevant to what we want to do

[mild turtle]

Sorry it's late. What do you want me to do it on?

dw, I've seen it

My eyes are really tired.

Says "use secure DNS" but I can't see it

[peak cloak]

3rd from the bottom

[mild turtle]

What do I do about the router thing though? From what you've said the cert is completely separate from the wifi issues, correct?

[true thorn]

Probably

[true thorn]

Do note that this only applies to Chrome. Anything done in other apps will still have the same issue.

[mild turtle]

So does anyone have any clue what could be causing the internet to keep dropping? Keeps asking you to sign in and then says it's connected without internet.

[true thorn]

That sounds like it’s part of the same issue

[little schooner]

Nothing is worse than internet randomly dropping :(

[ivory egret]

What systems do people use at work for VPN connection if you would want to work from home?

[true thorn]

Depends on the context. Do you just want to be on the network there? Do you need to access specific devices?

[ivory egret]

be on their network accessing storage servers mostly

[true thorn]

So you just need to access specific internal servers? What are you running - Windows Server?

[ivory egret]

We have Synology machines but using quickconnect i want to avoid using that to log into all of them

[peak cloak]

There are many different solutions. Some run thier own VPN server, others use stuff like tailscale

I personally don't use a VPN since we just remote into our desktops

Rdp gateway

[ivory egret]

Yeah thinking thats the best way makes things easier

[peak cloak]

If you want simple remote access, look into zerotier and tailscale.

[true thorn]

I personally prefer to be on my local machine.

[true thorn]

Exactly what I was going to suggest 😉

[peak cloak]

Setup a machine as a subnet router and you are good

[ivory egret]

Thanks, I am just searching for easy solutions for when people can work from home without signing in all the time

[true thorn]

But yes, remoting into your desktop is one thing to set up, as opposed to resetting up all your shares, etc on your local computer.

[peak cloak]

Wdym by

Without signing in all the time

[ivory egret]

Like logging into every server

[peak cloak]

Oh gotcha

[true thorn]

@mild turtle Check you don’t have BT Parental Controls or BT Protect enabled in your router.

[iron pebble]

hey at the moment i have 3 Linksys Velop AP's in my home with a 1gig broadband connection. I'll soon be moving my PC into the attic at the top of the house and looking for the best way to get gig speeds up there, would anyone have any ideas? It would be abit awkward for me to cable up directly from the router as it is 2 floors up

[inner lake]

hey guys so i just moved and was going to buy wifi from verizon and was wondering which option is better

[peak cloak]

Depends what you need

Verizon router isn't too bad, just depends what features you need

[sudden kayak]

if you have specific needs you can bring your own, and you miiight get better performance if you buy something aftermarket

but if you needed any of the specific things you can only do with your own router, you'd probably already know. so I'd say if you're not sure, safe to just get the included Verizon one

[acoustic warren]

Hey y'all I'm planning to get multiple Ubiquiti APs and directly connect each of them to a Ubiquiti Dream Machine Pro. But I want all the APs to behave as one network (Same SSID) and should seamlessly handoff devices to the nearest AP. Is it possible?

[meager ginkgo]

Yes, set up your network in the UniFi Controller, adopt the APs then it should automatically make everything the same

[acoustic warren]

And are the device handoffs from one AP and another going to be seamless?

[meager ginkgo]

On most devices they should be

I have UniFi 6 Pros (2) and everything I use is seamless.

[acoustic warren]

Another question, I was going to get an AP AC LR to cover up around 1500 Sq.Ft in case I'll end up using only one AP. Is there any alternate switch I can connect it to rather than a Dream Machine Pro?

[meager ginkgo]

I wouldn't get a WiFi 5 AP unless you can get a decent deal on it

and yes you can connect the AP to a PoE Injector or any PoE Switch

[acoustic warren]

What's a good 8 port switch that you would recommend?

[meager ginkgo]

I'm assuming you want UniFi?

[acoustic warren]

Non UniFi would also do

[meager ginkgo]

UniFi Lite 8 PoE would do

but good luck finding them.. UniFi gear is insanely hard to get nowadays

https://www.amazon.com/TP-Link-TL-SG108PE-Shielded-Lifetime-Protection/dp/B01BW0AD1W/

here's a option that is in stock

[acoustic warren]

But does the multiAP same SSID thing requires a UDM Pro?

[meager ginkgo]

I'm thinking about switching to TP-Link Omada personally, so take a look at them also

[meager ginkgo]

Nope, I use the software controller

[acoustic warren]

So you configure each AP individually to be on the same SSID and they internally manage the hand offs?

[meager ginkgo]

With UniFi or Omada, (or really any controller based APs) you set the SSIDs you want them to broadcast in the settings of the controller software and the APs automatically do the rest

You can still manually delete SSIDs from certain APs if you wish though

[acoustic warren]

So if I have a UDM Pro, that'd be my controller. Right? But if I don't, then what would be my controller?

[meager ginkgo]

Yes.. if you don't you'd need a Cloudkey or a Server that runs 24/7 to run it.. I have a server running smart home software already constantly running so I run it on there

[acoustic warren]

Do you have a topology diagram of your setup?

[meager ginkgo]

I don't haha

I have a mismatch of brands, I'm hoping to do an overhaul soon though. I have an ER605 Omada router, an unmanaged 16 port generic NETGEAR switch and 2 UniFi 6 Pros

[acoustic warren]

You use Home Assistant?

[meager ginkgo]

Yep!

Love that piece of software, bridges everything I want (basically) together under one home

[peak cloak]

Technically doesn't even require a controller

Just isn't as seamless

End device client chooses what base station to connect to

Ssid isn't the only identifier

[acoustic warren]

What do you run home assistant on? I was trying to get a Raspberry Pi. They seem to be unavailable everywhere.

[meager ginkgo]

I use an old Dell Optiplex 3020 SFF

got it for around $75 before prices went crazy

[acoustic warren]

Basically I wanted a mesh network kinda thing but without the hassle of a mesh network

[peak cloak]

I use a hp prodesk (similar to optiplex) for all the servers

[peak cloak]

Mesh technically means that the backhaul can be wifi as well

Having seamless roaming isn't mesh

[meager ginkgo]

UniFi has Mesh I think also? But it isn't very good

[peak cloak]

Omada does too

[meager ginkgo]

yep

[peak cloak]

But I avoid mesh, use Ethernet backhaul

[acoustic warren]

But is a mesh a better alternative to having each device on the the same SSID?

[meager ginkgo]

I can't imagine going back to wireless backhaul, i've had basically no issues since switching to hardwired APs

[peak cloak]

?

I don't understand

[meager ginkgo]

yeah, i'm confused also lol

[acoustic warren]

Is it better to have a mesh network or is it better to have multiple hardwired APs with the same SSID across the house?
My primary requirement is that there should be any deadzones and no matter where I walk into the house I should have full Wifi signal on my devices

[sudden kayak]

your devices should have the same SSID no matter what

[meager ginkgo]

Definitely hardwired APs..

A wire is usually always better than wireless

in anything..

[sudden kayak]

a mesh network is a bunch of devices with the same SSID, and will function the same from the perspective of client devices as a bunch of hardwired APs. the only difference is that the mesh network performance will be crap

you don't need a controller at all. it just helps devices do the hand off slightly faster with certain brands of APs

[meager ginkgo]

If you want something "easier" to setup, you could always hardwire some mesh APs. They will fall back to wireless backhaul if they lose the ethernet connection

[sudden kayak]

idk i would say don't bother buying mesh APs

they're usually just more expensive for the same hardware because they can advertise mesh as a fancy software feature

[meager ginkgo]

yeah that's true

[sudden kayak]

but if you already have them, or find a particularly good deal on them, no reason you can't use them

[acoustic warren]

Got it

[peak cloak]

mesh isn't something special

it's essentially the same as multiple APs

just the backhaul is different

[sudden kayak]

yep mesh just means if you can't hardwire them, they'll pass the traffic back to the gateway along wifi. but it can really reduce speeds and increase latency

[acoustic warren]

Got it chief

[peak cloak]

some mesh use a different wifi band for backhaul so it can be better than just generic mesh

[meager ginkgo]

If you want an example - my uncle has some Eero 6's and he has the main router in his office. He pulls around 600mbps up there, one floor below he gets barely 75mbps

[acoustic warren]

Also should I get CAT 6A installed over normal CAT 6? Is there any noticable performance diffrence?

[meager ginkgo]

I would personally do 6A to futureproof, but right now there isn't a big difference

[peak cloak]

6a just has shielding?

[meager ginkgo]

6A is a higher frequency usually, so I like to think of it how people are running 2.5gig over short CAT5e runs

[sudden kayak]

6A is probably not a noticeable difference for now, but you might as well if it's not too much more

[meager ginkgo]

it's not necessarily certified to do more at the moment, but you never know if 15 Gig or something similar comes out in 15 years and CAT6 just can't do it

CAT7 is where you have required shielding so I recommend fiber at that point as dealing with shielding is a mess

[acoustic warren]

My current setup at home is a UDM Pro and a UAP AC Pro. I've a Gigabit connection. So I get around 980Mbps on my wired devices but anything on WiFi gets only around 350-ish. What's the reason behind that?

[meager ginkgo]

The AP

I had AC Pros before upgrading to 6 Pros and only pulled around that

[sudden kayak]

yeah AC can't really do too much better than that in real world scenarios

[peak cloak]

I get around 300mbps on AC

[meager ginkgo]

My 6 Pro can pull full gig on AX201 Laptop

[peak cloak]

seems correct

[sudden kayak]

if you can get your hands on any of the unifi wifi 6 APs you'll do a lot better

[acoustic warren]

Oh dang.

[peak cloak]

I tbh don't need more

[meager ginkgo]

meanwhile my M1 MacBook Air can't pull more than 700mbps over wifi on the U6-Pro

[peak cloak]

I have a 300/300 line

[meager ginkgo]

it really depends on the device

[sudden kayak]

i have 600/25 lol

[meager ginkgo]

940/940 here

[peak cloak]

I can get gig, just not worth it tbh

[sudden kayak]

but i only get 300 down even on wired because my router is crap and i can't find any good replacements for a reasonable price

[peak cloak]

mikrotik

[meager ginkgo]

What router do you have right now?

[sudden kayak]

i have strict noise & size limits (small apartment) but i also want a router with good wireguard performance so I'm sitting on my hands until pi cm4s or something are back in stock

or i might get one of those fanless celeron j4125 boxes off AliExpress

[peak cloak]

does wireguard need to be on router?

[sudden kayak]

mostly I'm just cheap

[peak cloak]

I just run that on my server

[sudden kayak]

not necessarily but space limits make it hard to justify an additional server

my current router is like some horrible tp link all in one with openwrt

but it can't handle NATing more than 250ish mbps

[peak cloak]

I wish ubiquiti had a up to date version of the er-x

[sudden kayak]

well about that

[meager ginkgo]

I wish they updated the USG

[peak cloak]

I like it, it's just kinda pita with stuff, especially v6

[sudden kayak]

i have an ER-X that would be perfect except it was DOA and they can't rma it cuz they have no stock

[acoustic warren]

Ah shit, I realised I fucked up by getting an AC Pro. Time to flip it and get a WiFi 6 one if possible

[meager ginkgo]

What about a TP-Link ER605?

[sudden kayak]

I'm also keeping my eye out for a cheap er lite or something

yeah actually i got my parents one of those and it seems to be doing great so that's also on the list

[peak cloak]

how much can you do with it

[meager ginkgo]

I run that at my place and it gets me full gig

[meager ginkgo]

It can be adopted into the Omada controller, I have basic VLANs on it

[peak cloak]

ospf, bgp?

[sudden kayak]

orrrrr potentially the new nano pi

[meager ginkgo]

not sure what that means lol

[sudden kayak]

almost pulled the trigger on one a few days ago but shipping is expensive af

[peak cloak]

basically ways to distribute routes

looking into setting ospf at my place

since I'm going away, but still want to be able to have connected networks

and don't want static route hell

[meager ginkgo]

All I need is basic router functions, like Port Forwarding, VLANs and my full speed

works fine for that

full gig is easy when wired

[acoustic warren]

So when going for APs on Ubiquiti I shouldn't get anything which has AC in it?

[meager ginkgo]

That's what I would do. Either WiFi6 or 6E

[acoustic warren]

What does AC stand for anyways?

[peak cloak]

it's a wireless standard

[acoustic warren]

Ohh, got it

[sudden kayak]

AC is also called wifi 5

it's just a bit older but 6 is a pretty significant speed boost

[acoustic warren]

But 802.11 AC has a max data rate of 1.3 Gbps

[peak cloak]

total