Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
icantfindaname
Jul 1, 2008


I have an Archer A7 and RE450 range extender that I posted about here a while ago, and the setup loving sucks. Service cuts out constantly. Name resolution in particular fails constantly. Disconnecting and reconnecting the wifi connection often makes it work again, but only temporarily. Sometimes you have to reboot the router and extender. I've tried switching the DNS server to Google, doesn't work. Speed isn't a problem when the connection works, but it drops the connection constantly, even though it usually still registers in Windows as being connected to the internet through the wifi extender network. Occasionally it will drop even that

code:
>ping 192.168.0.1 -t

Reply from 192.168.0.1: bytes=32 time=15ms TTL=64
Reply from 192.168.0.1: bytes=32 time=62ms TTL=64
Reply from 192.168.0.1: bytes=32 time=38ms TTL=64
Reply from 192.168.0.1: bytes=32 time=13ms TTL=64
Reply from 192.168.0.1: bytes=32 time=1ms TTL=64
Reply from 192.168.0.1: bytes=32 time=1ms TTL=64
Reply from 192.168.0.1: bytes=32 time=15ms TTL=64
Reply from 192.168.0.1: bytes=32 time=2ms TTL=64
Reply from 192.168.0.1: bytes=32 time=2ms TTL=64
Reply from 192.168.0.1: bytes=32 time=1ms TTL=64
Reply from 192.168.0.1: bytes=32 time=3ms TTL=64
Reply from 192.168.0.1: bytes=32 time=2ms TTL=64
Reply from 192.168.0.1: bytes=32 time=2ms TTL=64
Reply from 192.168.0.1: bytes=32 time=3ms TTL=64
Reply from 192.168.0.1: bytes=32 time=4ms TTL=64
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Reply from 192.168.0.1: bytes=32 time=2ms TTL=64
Reply from 192.168.0.1: bytes=32 time=23ms TTL=64
Reply from 192.168.0.1: bytes=32 time=186ms TTL=64
Reply from 192.168.0.1: bytes=32 time=248ms TTL=64
Reply from 192.168.0.1: bytes=32 time=433ms TTL=64
Reply from 192.168.0.1: bytes=32 time=424ms TTL=64
Reply from 192.168.0.1: bytes=32 time=133ms TTL=64
Reply from 192.168.0.1: bytes=32 time=36ms TTL=64
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
This is pinging the A7 on the network created by the range extender. Is there any obvious solution to this? I'm not sure if the problem is the extender, the router itself, or the external internet connection. The house it's in is big and it's extending through walls and stuff, and in a pretty rural area so the external connection might not be great. There are multiple people on the connection, with decent bandwidth usage, at irregular times. I'm stumped, because I just bought this equipment a few months ago new and I've gotten problems like this, though not as bad, with previous stuff I've had

icantfindaname fucked around with this message at 08:27 on Mar 21, 2020

Adbot
ADBOT LOVES YOU

astral
Apr 26, 2004

icantfindaname posted:

I have an Archer A7 and RE450 range extender that I posted about here a while ago, and the setup loving sucks. Service cuts out constantly. Name resolution in particular fails constantly. Disconnecting and reconnecting the wifi connection often makes it work again, but only temporarily. Sometimes you have to reboot the router and extender. I've tried switching the DNS server to Google, doesn't work. Speed isn't a problem when the connection works, but it drops the connection constantly, even though it usually still registers in Windows as being connected to the internet through the wifi extender network. Occasionally it will drop even that

This is pinging the A7 on the network created by the range extender. Is there any obvious solution to this? I'm not sure if the problem is the extender, the router itself, or the external internet connection. The house it's in is big and it's extending through walls and stuff, and in a pretty rural area so the external connection might not be great. I'm stumped, because I just bought this equipment a few months ago new and I've gotten problems like this, though not as bad, with previous stuff I've had

I've never been a fan of wifi extenders. If you unplug the extender, do you still experience problems?

icantfindaname
Jul 1, 2008


astral posted:

I've never been a fan of wifi extenders. If you unplug the extender, do you still experience problems?

Problems aren't as bad on the original A7 network, but it's not powerful enough to get signal throughout the whole house

Do mesh networks generally do better than extenders?

astral
Apr 26, 2004

icantfindaname posted:

Problems aren't as bad on the original A7 network, but it's not powerful enough to get signal throughout the whole house

Do mesh networks generally do better than extenders?

A mesh setup might work better than an extender, but nothing beats running a cable to a second AP if it's at all possible. Even powerline networking to a second AP would likely be a better experience than mesh or extenders (but, as always, how powerline networking works out will depend on the house's electrical setup, so make any powerline networking purchases somewhere with a solid return policy).

Could you elaborate on the "problems aren't as bad" bit?

icantfindaname
Jul 1, 2008


astral posted:

A mesh setup might work better than an extender, but nothing beats running a cable to a second AP if it's at all possible. Even powerline networking to a second AP would likely be a better experience than mesh or extenders (but, as always, how powerline networking works out will depend on the house's electrical setup, so make any powerline networking purchases somewhere with a solid return policy).

Could you elaborate on the "problems aren't as bad" bit?

I honestly haven’t tested it enough to tell for sure but the cutting out doesn’t seem to happen as much on the wifi directly from the A7.

Powerline to AP is interesting, I have 2 powerline adapters already for a desktop and a Roku TV box and they work pretty well, I’ll try hooking one up to the RE450 and using it as an access point

Neslepaks
Sep 3, 2003

Captn Kurp posted:

Hey guys, I was curious if someone here has experience with Palo Alto equipment in a home network. I'm mostly concerned about the way their licenses work and what will work on the device with and without certain licenses. I tried reaching out to PA but they were unable to really answer much and just tried selling me things.

I'm looking at getting a PA-220, I mostly want it to learn more about PanOS and have it serve as an IPSec VPN gateway. If anyone has some tips on the matter, I would appreciate them!

Thanks

I, too, tried to ask them about private/hobbyist license possibilities, and received no answer. :) Let us know if you figure something out.

bolind
Jun 19, 2005



Pillbug
I realize this is not strictly home networking, but seeing as the is the forum hangout for Ubiquiti fanbois/masochist, I'll pose the question here:

Work recently acquired a Ubiquiti mFi mPower PRO (EU) six outlet remotely managed power strip. The software was last updated in 2015 and hoooo boy, does it show. The firmware on the thing is ancient (I see indications that newer firmware will add more features) and one needs to install some controller software on a PC or Mac to make them work. Trouble is, it's all Java based (and crap), so none of them worked with an OS released in this millennium.

Anyone got experience with these? I think we bought the wrong product, all I really wanted was something that could be managed via a built in web server or shell or something. I really don't feel like setting up a five year old environment just to configure this loving thing.

H110Hawk
Dec 28, 2006

Per posted:

Oh ok, thanks, port forwarding ended.

Would you happen to have a link on setting up VPNs handy?

:toot: thread success story.

Lookup a wireguard setup tutorial, there is likely one on the wireguard site. It's what the kids are doing these days. Clients for everything. Once you have it running locally how you like, ironically enough, you then need to Google how to port forward from your router to the wireguard server:port. :v:

Then you get to find out if you can even connect to your home internet from the internet. If you can't you're going to either need to call and play the "work needs my ip to whitelist me for their corporate VPN" game, the "I need a static ip" game, or make a bastion host in THE CLOUD (e.g. digitalocean).

dpkg chopra
Jun 9, 2007

Fast Food Fight

Grimey Drawer

Per posted:

Oh ok, thanks, port forwarding ended.

Would you happen to have a link on setting up VPNs handy?

While Wireguard is the Tier A solution, you can also enable OpenVPN in your Archer settings for a more Out of the Box solution.

OpenVPN has some problems but I think that it’s an ok solution for a non-technical user.

H110Hawk
Dec 28, 2006

Ur Getting Fatter posted:

While Wireguard is the Tier A solution, you can also enable OpenVPN in your Archer settings for a more Out of the Box solution.

OpenVPN has some problems but I think that it’s an ok solution for a non-technical user.

I didn't realize Archers had it built in, if they do, use that. If you want to learn something hip and new, look at wireguard.

Per
Feb 22, 2006
Hair Elf

H110Hawk posted:

:toot: thread success story.

Lookup a wireguard setup tutorial, there is likely one on the wireguard site. It's what the kids are doing these days. Clients for everything. Once you have it running locally how you like, ironically enough, you then need to Google how to port forward from your router to the wireguard server:port. :v:

Then you get to find out if you can even connect to your home internet from the internet. If you can't you're going to either need to call and play the "work needs my ip to whitelist me for their corporate VPN" game, the "I need a static ip" game, or make a bastion host in THE CLOUD (e.g. digitalocean).

I went ahead on my own with OpenVPN. I got a server set up on my Pi and a client on my laptop and I´ve made a successful connection I´m fairly sure (no errors that I can see) while my laptop was on a mobile hotspot.

Now for a dumb question: What do I do now? How do I control the Pi from my laptop with like a remote desktop type thing?

dpkg chopra
Jun 9, 2007

Fast Food Fight

Grimey Drawer

Per posted:

I went ahead on my own with OpenVPN. I got a server set up on my Pi and a client on my laptop and I´ve made a successful connection I´m fairly sure (no errors that I can see) while my laptop was on a mobile hotspot.

Now for a dumb question: What do I do now? How do I control the Pi from my laptop with like a remote desktop type thing?

If you have VNC running on the PI just download whatever VNC client you prefer on your remote machine and connect to the PI’s local ip:[ PORT ]

H110Hawk
Dec 28, 2006

Per posted:

I went ahead on my own with OpenVPN. I got a server set up on my Pi and a client on my laptop and I´ve made a successful connection I´m fairly sure (no errors that I can see) while my laptop was on a mobile hotspot.

Now for a dumb question: What do I do now? How do I control the Pi from my laptop with like a remote desktop type thing?

How do you currently do it? A physical monitor? Which OS are you running on it?

Per
Feb 22, 2006
Hair Elf

Ur Getting Fatter posted:

If you have VNC running on the PI just download whatever VNC client you prefer on your remote machine and connect to the PI’s local ip:[ PORT ]

And it works, yay! Thanks guys!

quote:

How do you currently do it? A physical monitor? Which OS are you running on it?

I don't currently do it, this is all a bit new to me. But basically the idea was for my (Win10) laptop to access my Pi at home to do stuff while I am away (on a ship).

One last question regarding port forwarding: I forwarded port 1194 for the VPN stuff. When I use one of those port scanners websites it says that the port is closed. I get that this is a good thing, I am just wondering why it is closed if it is forwarded? How is the VPN tunnel happening through a seemingly closed port?

Captn Kurp
Oct 21, 2013

:bravo2:

Neslepaks posted:

I, too, tried to ask them about private/hobbyist license possibilities, and received no answer. :) Let us know if you figure something out.

According to a few threads I read on reddit, they sell "lab units" that are special SKUs for the device series that have cheaper licensing and work on an honor system.

I ordered a PA-220 lab unit (half price of a regular 220 @ 500 USD) from CDW, will report back as I move through the process.

In addition to the lab units others have stated having a VM-50 NGFW is significantly cheaper and is the same speed or faster with the right hardware but I really wanted a physical device.

Will report back (:

IOwnCalculus
Apr 2, 2003





Per posted:

This is my port forwarding. I´m not sure why it works with 5900, but not 3389.


Any ideas?

While I realize you have chosen the vastly superior path of VPN, the answer here might be your ISP trying to protect you from yourself. They might block inbound traffic to certain ports. Cox blocks port 80, which makes getting a letsencrypt cert for my router loving impossible.

astral
Apr 26, 2004

IOwnCalculus posted:

Cox blocks port 80, which makes getting a letsencrypt cert for my router loving impossible.

In case you did not already find out: there are other ways of verifying you own the domain than running a webserver, like setting some TXT records it asks you to.

Internet Explorer
Jun 1, 2005





Update yo poo poo people.
Critical bugs in dozens of Zyxel and Lilin IoT models under active exploit

IOwnCalculus
Apr 2, 2003





astral posted:

In case you did not already find out: there are other ways of verifying you own the domain than running a webserver, like setting some TXT records it asks you to.

I shall have to investigate this further, the automated scripts I was fiddling around with on my Edgerouter assumed port 80.

MagicHateBall
Dec 11, 2002

Humans were drinking alcohol five thousand years ago, and they're still drinking it now. Alcohol is humanity's friend.

Can I abandon a friend?

Per posted:

One last question regarding port forwarding: I forwarded port 1194 for the VPN stuff. When I use one of those port scanners websites it says that the port is closed. I get that this is a good thing, I am just wondering why it is closed if it is forwarded? How is the VPN tunnel happening through a seemingly closed port?

Depends on what port scanner you're using, but IIRC most default to checking to see if the port is open by sending a TCP connection request and seeing if they get a response. Most VPN clients are looking for UDP packets, so they just ignore TCP packets entirely, which shows up to the port scanner as a closed port. It can't tell the difference between a packet that got dropped because the port is closed, or because the service listening on that port simply ignored it.

H2SO4
Sep 11, 2001

put your money in a log cabin


Buglord

Per posted:

Hey guys. I´m pretty new to this stuff. My problem relates to port forwarding.

I have a Raspberry Pi I would like to connect to from outside my home (It is wired to an Archer C7 which in turn is wired to my provider´s cable modem, which should be in bridge mode). I figured Windows Remote Desktop would be good for this purpose, but I can´t seem to open port 3389. I can, however, open port 5900 to use VNC.

This is my port forwarding. I´m not sure why it works with 5900, but not 3389.


Any ideas?

eternally screaming

Captn Kurp posted:

According to a few threads I read on reddit, they sell "lab units" that are special SKUs for the device series that have cheaper licensing and work on an honor system.

I ordered a PA-220 lab unit (half price of a regular 220 @ 500 USD) from CDW, will report back as I move through the process.

In addition to the lab units others have stated having a VM-50 NGFW is significantly cheaper and is the same speed or faster with the right hardware but I really wanted a physical device.

Will report back (:

Yeah, I'm about to pull the trigger on a VM-50 lab license. I tried to sneak through an order for an NFR SKU since the company I work for has some kind of partnership but CDW just silently went "nahhhhh" which i'm assuming meant PA rejected the order.

H2SO4 fucked around with this message at 00:57 on Mar 22, 2020

H110Hawk
Dec 28, 2006

H2SO4 posted:

eternally screaming

I actually missed this, thank you.

The reason 3389 didn't work directly is it is such a phenomenally bad idea that I imagine your ISP (as all residential ISPs should) filter it at their border and just say "no fuckin way." If you want to find out why, google "Microsoft RDP pre-auth CVE" and see what you get. Often times you can find "rdp pre-auth rce" and get similar numbers of result. This means "before authentication" (pre-auth) "remote code execution" (rce) in Microsoft Windows Remote Desktop Protocol ("RDP"). This is Very Bad and will generally always warrant a CVSS score >9.0.

https://en.wikipedia.org/wiki/Common_Vulnerability_Scoring_System

You didn't know as you are a naive home user that the public internet is basically just a virus that you happen to not get due to luck, NAT, and the occasional firewall. Now you know. There are basically a handful of protocols specifically designed to be exposed to the open internet for secure access, and even those occasionally fail. Those are various VPN's, SSH, and their ilk.

namlosh
Feb 11, 2014

I name this haircut "The Sad Rhino".
And yet so much stuff is done on ports 80 and 443...

I finally pulled the trigger on a UDM PRO and an AP lite and thought the thread would like to know that the UDM Pro is $20 off right now

May be other discounts too, but that was what I saw

H110Hawk
Dec 28, 2006

namlosh posted:

And yet so much stuff is done on ports 80 and 443...

And those are also frequently broken into and are constantly under attack. It's the wild west out there, but the old school remote access protocols are the worst of the worst. (rdp, vnc, all the "team viewers" of the world which don't do connections via a centralized broker.)

bolind
Jun 19, 2005



Pillbug

bolind posted:

I realize this is not strictly home networking, but seeing as the is the forum hangout for Ubiquiti fanbois/masochist, I'll pose the question here:

Work recently acquired a Ubiquiti mFi mPower PRO (EU) six outlet remotely managed power strip. The software was last updated in 2015 and hoooo boy, does it show. The firmware on the thing is ancient (I see indications that newer firmware will add more features) and one needs to install some controller software on a PC or Mac to make them work. Trouble is, it's all Java based (and crap), so none of them worked with an OS released in this millennium.

Anyone got experience with these? I think we bought the wrong product, all I really wanted was something that could be managed via a built in web server or shell or something. I really don't feel like setting up a five year old environment just to configure this loving thing.

Figured it out, what a tire fire. Ubiquiti has all but abandoned that product line, but there's a way:

The ssh server in the device is old, so to successfully ssh or scp to the device, use the following options:

ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -c aes128-cbc ubnt@123.123.123.123
(for scp, the options only work if the order is reversed.)

This thread: https://community.ui.com/questions/mpower-how-to-change-port-name-without-mfi-controler/b1ec094d-2ef0-47bb-831b-9e0be9c2655f describes how to set up names for the outlets.

This page describes how to update the firmware: https://help.ubnt.com/hc/en-us/articles/205222650-mFi-How-to-upgrade-devices-manually. The last bit you'll need exactly once, because the SW was last released in 2015 and is not likely to be ever updated again. Oh, and it probably has more security holes than a stock Windows 95.

Lightning Knight
Feb 24, 2012

Pray for Answer
Ok I’m sorry if this is the wrong thread. I’m not extremely tech literate but I’ve been presented with an unusual and suddenly urgent problem.

I have been sent to work from home. They had us bring our old dumb desktop computers home to set up and work. Which is all well and good.

BUT

These drat computers don’t have WiFi adapters and also will not let you install anything on them. My first instinct was to try and plug it into my normal desktop and network it like a LAN but that did not work and I am too feeble to figure it out without help. My second instinct was to buy a USB WiFi adapter and that’s how I found out you cannot install software on these PCs.

So, I need a way to get wireless on this PC that does not involve installing software on the PC if possible. I’m looking at something called a TP-Link Powerline AV500 Nano Adapter Starter Kit (model TL-PA4010KIT, SKU 2080136) which appears to be some kind of Ethernet antenna? But I already bought two WiFi adapters that don’t work and which I have to return, so I wanted to ask if there’s a solution that goons know that I can do.

Alternatively if you could help me do a LAN thing or whatever through my regular PC that would also work.

For reference, if I were by myself I would just put up with having to sit next to the router, but my fiancé and I work at the same company and now both have to work from home, and our job is calling people. Having to sit basically next to each other is not sustainable and I really would rather not run a 60 foot Ethernet cord into the other room if I don’t have to.

Please help goons. I will remove this post if this is the wrong thread. :smith:

H110Hawk
Dec 28, 2006

Lightning Knight posted:

Ok I’m sorry if this is the wrong thread. I’m not extremely tech literate but I’ve been presented with an unusual and suddenly urgent problem.

I have been sent to work from home. They had us bring our old dumb desktop computers home to set up and work. Which is all well and good.

BUT

These drat computers don’t have WiFi adapters and also will not let you install anything on them. My first instinct was to try and plug it into my normal desktop and network it like a LAN but that did not work and I am too feeble to figure it out without help. My second instinct was to buy a USB WiFi adapter and that’s how I found out you cannot install software on these PCs.

So, I need a way to get wireless on this PC that does not involve installing software on the PC if possible. I’m looking at something called a TP-Link Powerline AV500 Nano Adapter Starter Kit (model TL-PA4010KIT, SKU 2080136) which appears to be some kind of Ethernet antenna? But I already bought two WiFi adapters that don’t work and which I have to return, so I wanted to ask if there’s a solution that goons know that I can do.

Alternatively if you could help me do a LAN thing or whatever through my regular PC that would also work.

For reference, if I were by myself I would just put up with having to sit next to the router, but my fiancé and I work at the same company and now both have to work from home, and our job is calling people. Having to sit basically next to each other is not sustainable and I really would rather not run a 60 foot Ethernet cord into the other room if I don’t have to.

Please help goons. I will remove this post if this is the wrong thread. :smith:

My go to temporary solution is a 100ft ethernet cable. Get a flat one and you can hide it along the walls. Just buy it much longer than you need. It's an eyesore but it's temporary.

astral
Apr 26, 2004

Lightning Knight posted:

My first instinct was to try and plug it into my normal desktop and network it like a LAN but that did not work and I am too feeble to figure it out without help.

One option: the magical keywords you want to do that in Windows: "Internet Connection Sharing".

Another option: The Powerline networking you described, but make sure to buy from somewhere with a good return policy because performance can vary depending on your electrical setup.

Yet another option: Spend money on something like this or this that connects to your wifi network and lets you plug in your WFH desktop.

Aforementioned 100ft cable is great, too.

astral fucked around with this message at 02:30 on Mar 24, 2020

Lightning Knight
Feb 24, 2012

Pray for Answer

astral posted:

One option: the magical keywords you want to do that in Windows: "Internet Connection Sharing".

Another option: The Powerline networking you described, but make sure to buy from somewhere with a good return policy because performance can vary depending on your electrical setup.

Yet another option: Spend money on something like this or this that connects to your wifi network and lets you plug in your WFH desktop.

Aforementioned 100ft cable is great, too.

So if I stick these in the wall and connect them to my WiFi, and then plug the computer into it, it will be as if I plugged it into the router? As in, do they try to install any software or drivers?

Armacham
Mar 3, 2007

Then brothers in war, to the skirmish must we hence! Shall we hence?

Lightning Knight posted:

So if I stick these in the wall and connect them to my WiFi, and then plug the computer into it, it will be as if I plugged it into the router? As in, do they try to install any software or drivers?

Nope! Your computer should just see it as a normal wired connection.

Lightning Knight
Feb 24, 2012

Pray for Answer

Armacham posted:

Nope! Your computer should just see it as a normal wired connection.

Ok sweet. I’ll see if I can somehow buy one of these today.

namlosh
Feb 11, 2014

I name this haircut "The Sad Rhino".
Hey guys

I should get my UDM-Pro and AP AC Lite on Thursday according to the tracking number I was sent.

I'm very excited to set it all up, but I was a little worried about some posts on the Unifi community boards specifically about the UDM-PRO having issues:
https://community.ui.com/questions/Dream-Machine-not-ready-for-prime-time/938124ca-df43-4b34-8cbd-2462edf8a845?page=4

https://community.ui.com/questions/UDM-Pro-the-Dream-Machine-Pro-a-machine-nightmares-are-made-of/2dfc11c8-d696-42d2-8c51-566c923b81bf

https://community.ui.com/questions/UDM-PRO-release-is-a-disaster/bf98e20e-1290-40a2-9e30-517561fdb705

I'm a software developer, not a network guy. But I do have some experience supporting some network equipment (layer-3, vpn concentrator... all cisco) for a startup I had years ago. I thought I was spending more money and taking the high road with this equipment because it was awesome and highly recommended and would last me a while (have good ROI). Now I'm worried, it's the worst to feel like you took the safe route and find out it wasn't safe at all.

Here's what I want to do with it when it gets here:
VPN - both site-to-site with azure and Point-to-site to access my home network from anywhere
VLANS - want to segregate iOT stuff so it can't see my network and can't access the internet unless it has to
PieHole - not really something that has to do with UDM-pro, but it is on the list
Some kind of Content-blocking for the kids

Should I send this stuff back? Are the people that are complaining doing anything significantly different from what I want to do?

Also, any tips on having a trouble-free setup? should I upgrade firmware first thing? re-install the o/s? I figure I'm starting from scratch so that's good, a lot of people are having issues with importing existing configs.

I'm a home network, so I can deal with some issues/teething. I can restart the thing once a week if I have to for a few months or whatever. But now I'm worried that this thing will never be right. Is it possible that the product will be abandoned?

I trust your opinions and really appreciate any feedback you can give.

Thanks Ants
May 21, 2004

#essereFerrari


I'd return the UDM Pro and get a Netgate SG3100 if you want to do anything with VPNs - Ubiquiti's VPN support is appalling. If you have a really fast home internet service then you might want to consider the SG5100.

Internet Explorer
Jun 1, 2005





Or stand up a VPN behind the UDM.

St. Blaize
Oct 11, 2007
What router could I get that would handle full duplex gigabit? I had an edgerouter x and was considering the edgerouter 4. I do have unifi uap-ac-pros so would it be worth going with a usg to streamline that? I'm contemplating going with at&t fiber which is now available in my area.

TheWevel
Apr 14, 2002
Send Help; Trapped in Stupid Factory

St. Blaize posted:

What router could I get that would handle full duplex gigabit? I had an edgerouter x and was considering the edgerouter 4. I do have unifi uap-ac-pros so would it be worth going with a usg to streamline that? I'm contemplating going with at&t fiber which is now available in my area.

Be aware that you have to use AT&T's dumb residential gateway with their fiber service. The Arris (?) BGW210 will let you use it as a bridge with a different router and that works fine, but if you're like me, and are stuck with a Pace 5268AC, you'll be boned. Google "5268AC DMZ plus" if you'd like to read about the problems with it. There are ways around using their residential gateway that have been mentioned in this thread but you'll still need to keep the RG around.

A fun side note, I'm paying for the gigabit service now (was 100/100) and I'm only getting 400/500 while wired. Not sure if it's because my laptop dock is USB3 or if it's the dumb 5268ac but I haven't really felt like troubleshooting it.

Thanks Ants
May 21, 2004

#essereFerrari


I've had weird issues when testing gigabit connections and traced it back to poo poo USB adapters so many times, it's pretty much the first thing I check now.

TheWevel
Apr 14, 2002
Send Help; Trapped in Stupid Factory
It’s something else. I get the same (or worse) speeds using my laptop’s gigabit lan port. Example: 200 down/900 up. Something is screwed somewhere in the chain.

Internet Explorer
Jun 1, 2005





TheWevel posted:

It’s something else. I get the same (or worse) speeds using my laptop’s gigabit lan port. Example: 200 down/900 up. Something is screwed somewhere in the chain.

This is really odd. Having such different down/up rates when you should be seeing similar. 1) What are you testing from? 2) Can you use iperf to test between two clients on the LAN?

Adbot
ADBOT LOVES YOU

astral
Apr 26, 2004

TheWevel posted:

It’s something else. I get the same (or worse) speeds using my laptop’s gigabit lan port. Example: 200 down/900 up. Something is screwed somewhere in the chain.

Did you have QoS set up for your old speeds without updating the configuration since the speed upgrade?

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply