Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
phosdex
Dec 16, 2005

I got all my servers and switches in my office closet. The closet has an exterior wall, if I would like to run at least 2 poe exterior cameras, what is the best way to do this? I'd also like to relocate the coax cable that comes into the room through a different exterior wall. So 2+ ethernet, 1 coax. I know you can just drill a hole and stick the cable through, thats the way the existing coax is. But what's a cleaner method? I own my house, but realistic I may sell within 2 years.

Adbot
ADBOT LOVES YOU

wolrah
May 8, 2006
what?

El Jebus posted:

Ok, so, I just pulled the trigger on 2 gig frontier fiber. I currently have a ERX. I know they are good up to about a gig, but is there something similar out there that can handle more? Frontier is sending me their amazon Eeyore or whatever, but I'd like to not have their equipment permanently. Also, I would have just gone with 1 gig but it was actually cheaper to go with the 2. Is that a marketing ploy to get me to use the stupid amazon thing? I can't imagine actually using the whole bandwidth anyways...
I have a Protectli 4x2.5G box I loaded OPNsense on the other day and will hopefully be hooking up to my AT&T 2gig via the Azores ONT bypass tonight, will definitely report back on how it goes. Certainly not the cheapest thing out there but it has a lot more raw horsepower than most of the ARM boxes out there. I unfortunately don't yet have a multigig-capable internal LAN though so I'll be testing it out by hooking my server directly to OPT1 and trying to hit gigabit speeds on both it and my LAN-connected desktop at the same time.

Next step after this is figuring out switching, I currently have all gigabit gear aside from a pair of 40G NICs directly connected between my server and desktop. As far as I've found 40G and 2.5G/5G aren't possible to have on the same switch outside of big gear that costs more than my car so I'm debating between putting new copper interfaces in both (and if so whether to go multigig or full fat 10G) or just tossing QSFP->SFP+ adapters in the 40G cards and using them in 10G mode.

Twerk from Home posted:

You only get the benefits of 6 or 7 if all of the active clients have Wifi 6 or 7, which is unlikely in home environments. Internet of Things bullshit lasts a long time and people aren't going to go replace their smart lightbulb once a new wifi standard comes out.
IMO this is one of those less noted advantages of the 6GHz spectrum for 6E/7, no legacy clients to deal with. All clients on a 6E network right now will be speaking the same language.

Shugojin
Sep 6, 2007

THE TAIL THAT BURNS TWICE AS BRIGHT...


serebralassazin posted:

Isn't wifi 7 supposed to allow for concurrent connections to different frequency bands (2.4ghz + 5ghz)? Wouldn't that provide better overall performance?

Sure, but only if your device supports it

CoasterMaster
Aug 13, 2003

The Emperor of the Rides


Nap Ghost
Right now I have CenturyLink fiber and I'm not using their modem/router/whatever. Right now, I have an EdgeRouter 12 connected to the LAN coming from the ONT and I have all the PPPoE credentials + VLAN 201 tagging set up there. I used the WAN + 2LAN2 wizard in my ER12.

Soon, CenturyLink will be migrating me from PPPoE to IPoE. Is there a way I can just change the configuration to disable PPPoE and use IPoE instead or do I have to rerun with wizard (which will blow away all my other settings)? (edit to clarify: even though CL won't use PPPoE anymore, it still will use VLAN 201)

And if I do have to run that wizard again, I can't remember if i checked this box:



This is what things look like right now if that helps:



CoasterMaster fucked around with this message at 23:08 on Jun 13, 2023

CoasterMaster
Aug 13, 2003

The Emperor of the Rides


Nap Ghost

Teabag Dome Scandal posted:

I am on Centurylink Fiber using pppoe with a Edgerouter X and I am having a hellish time trying to port forward to my NAS so I can run Wireguard. As far as I could tell I was following all of the correct settings on my existing config so I reset the router and I am still unable to open the drat port with a fresh configuration. I have the WAN interface set to my vlan tagged pppoe interface, I have the LAN interface set to switch0, I have hairpin and auto firewall checked. What am I missing here?

For my hairpin NAT configuration, I have this setup: (I am using an EdgeRouter 12 instead of ERX, but it should be the same)

Aredna
Mar 17, 2007
Nap Ghost
Getting 10g internet in a few weeks when I move.

It's going to come with a rental modem/router from Docomo (https://web116.jp/shop/hikari_r/pdf/HGW_XG100NE_man_202305.pdf), which unfortunately only has 1 local 10gbit port.

In the short term I'd like to place 4 devices hardwired, with 3 at 10g, but room to grow so I guess I'm looking for a 10gb switch. Any recommendations?

Wibla
Feb 16, 2011

Sounds like you need a Mikrotik!

https://mikrotik.com/product/crs309_1g_8s_in#fndtn-specifications

Shaocaholica
Oct 29, 2002

Fig. 5E
Ballpark napkin math, how much bandwidth does a 200 unit apartment building need in total? Lets assume at peak hours every single unit is streaming in HD.

withoutclass
Nov 6, 2007

Resist the siren call of rhinocerosness

College Slice
Netflix streams 4k at 25/mbps I believe

200 * 25 = 5000mbps

So it would top out around 5gbps, assuming no other usage I guess.

Twerk from Home
Jan 17, 2009

This avatar brought to you by the 'save our dead gay forums' foundation.

Shaocaholica posted:

Ballpark napkin math, how much bandwidth does a 200 unit apartment building need in total? Lets assume at peak hours every single unit is streaming in HD.

Are you planning to do traffic shaping and/or QoS? The current FCC guideline is 25mbps. If you have something in place that's able to prioritize delivering at least 25 mbps to each household no matter what and prevent heavy users from choking out other peoples light use, 200 * 25mbps = 5gbps symmetrical sounds fine, especially because people don't actually use all their internet all the time so I'd bet the occasional heavy user would see 500mbps+ speeds regularly.

Netflix 4K* streams 15 mbps, the floor for comfortable usable internet is around 50mbps in my opinion. It's not HD streaming you have to worry about, it's Call of Duty release day. About 8 million people in the US bought Call of Duty Modern Warfare 2, which required a 150GB download to everyone who bought it. The disc doesn't actually have anything on it, it's an empty disk: https://www.eurogamer.net/modern-warfare-2s-disc-has-a-whopping-70mb-of-data

So if you've got 20 Call of Duty players among your 200 units, they're going to be trying to suck down 3 terabytes of Call of Duty on release day. I stand by my 5gbps for the whole place rough estimate.

Edit: HD Netflix is 5mbps. Netflix 4K is 15mbps. I'd bet that Netflix's recent password sharing changes have made 4K Netflix less likely, so I'd bet most people are streaming at less than 10mbps.

Twerk from Home fucked around with this message at 16:50 on Jun 14, 2023

Shaocaholica
Oct 29, 2002

Fig. 5E
How does QoS work for something like that? Individual users get the full 5G until it’s maxed then it’s throttled equally among all the users?

Ok hypothetically what if 1 user is using 5G and 1 other user is using 1M. Do QoS systems split the bandwidth in half and cap the heavy user to 2.5G while the other users 2.5G is mostly unutilized?

Twerk from Home
Jan 17, 2009

This avatar brought to you by the 'save our dead gay forums' foundation.

Shaocaholica posted:

How does QoS work for something like that? Individual users get the full 5G until it’s maxed then it’s throttled equally among all the users?

Ok hypothetically what if 1 user is using 5G and 1 other user is using 1M. Do QoS systems split the bandwidth in half and cap the heavy user to 2.5G while the other users 2.5G is mostly unutilized?

Traffic shaping has a ton of options and knobs to turn, but any modern system should be a lot smarter than that. The problem is you would need pretty expensive hardware to route and shape at 5gbps line speed, hardware that's well past the home consumer stuff.

Edit: For example, I used to run QoS on my home connection on consumer hardware when my internet service was slower than 100mbps, to de-prioritize bulk downloads and make sure that browsing / streaming / voip / gaming worked well even when I was hammering a big download. Tomato firmware on my consumer Asus router was able to keep up at those speeds. When I got gigabit fiber at home, doing any type of QoS at all became a bottleneck, but also the connection was so fast that I didn't have to worry about it.

To fairly distribute a big connection between lots of units you'd need a higher end router and switches, which I guess you'd be looking at anyway if you're doing to be doing 200 units with port isolation. Have you thought about NAT?

Twerk from Home fucked around with this message at 17:03 on Jun 14, 2023

Shaocaholica
Oct 29, 2002

Fig. 5E
Oh this would be for a 200 unit building with a shared main connection.

I’m not at all involved in the setup a vendor is. My wife is dragging me into it to make sure it’s what they need and aren’t being gouged for it. My wife is the boss of the property manager but pretty much everyone involved is not tech literate. It’s all pipes.

Shaocaholica fucked around with this message at 17:20 on Jun 14, 2023

DerekSmartymans
Feb 14, 2005

The
Copacetic
Ascetic
Would I be able to use an old x86 quad-core intel/8 gb RAM laptop as basically equivalent to a QoS-capable, pi-hole-esque ad blocking router? I ran pi hole on a RPi a couple of years ago, and have a bit of newbie tinkering with Raspian/Ubuntu/Debian, so figure some flavor of Linux in a container(or bare metal)…the laptop isn’t in use but it is currently wired via Ethernet from a T-mobile 5G base station >TP-Link Deco mesh> laptop configuration. The T-Mobile base station is directly connected via Ethernet to my desktop, but I’d like to Adblock at a single point for the whole house/QoS to always make sure downstairs has enough bandwidth for 1080p streaming even when I’m online.

I can follow instructions or guides, but would appreciate a tip(s) or even a few keywords to Google for myself while I’m stuck away from my desktop Granny-sitting for the rest of the day! Happy to run the laptop w/any OS and wired in any series, just don’t want to mess up with the TP-Link because everything is actually working now-just wanting to try and get an even better-but-seamless experience for my folks.

Shaocaholica
Oct 29, 2002

Fig. 5E
Ok just getting back to my 200 apartment questions I have some details now. BTW the original issue is that (many) tenants are complaining about quality of service.

-The service is 10g already to the building so its not that.
-The service log for the entire building shows spikes only into ~400m so its not hitting anywhere close to 10g
-Each of the 200 apartments has its own AP. In a closet. Each unit has its own SSID. I'm told the closet door is plastic but I haven't seen one in person.
-Synthetic testing done in 2 random units 3months ago shows 900-940m up and down speeds (I'm not sure if this was tested over wire or wifi)

KS
Jun 10, 2003
Outrageous Lumpwad
It's probably the wireless layer.

>-Each of the 200 apartments has its own AP. In a closet. Each unit has its own SSID. I'm told the closet door is plastic but I haven't seen one in person.

Well this jumps out at me. There are 3 2.4 ghz channels and 23 5 ghz channels. Of those 23 you arguably only want to use 12 and leave some of the DFS channels out of the plan. A misconfiguration here (say, 80 mhz channels instead of 20 mhz) fucks you because it drops those 12 usable channels to 3. You probably need a mildly competent wireless specialist to do a spectrum survey.

Shaocaholica posted:

(I'm not sure if this was tested over wire or wifi)

It was tested over wire.

Shugojin
Sep 6, 2007

THE TAIL THAT BURNS TWICE AS BRIGHT...


You will also need to make sure you have APs that you can set to the broadcast power on so that you can turn it down, which will also with interference by minimizing overlap

n0tqu1tesane
May 7, 2003

She was rubbing her ass all over my hands. They don't just do that for everyone.
Grimey Drawer
Honestly, having supported a large apartment complex network before, I'd want a network diagram, along with hardware specs for every interface to ensure that they're running hardware in a configuration that can actually support 10GB.

10GB service at the main data closet doesn't mean much if half the building is daisy chained through a bunch of switches with 1GB or slower links.

Ideally you'd have switches deployed throughout the building that all have fiber uplinks back to the main data closet to an aggregation switch, and those uplinks would be at a minimum 1GB, possibly 10GB, depending on how many units are connected through the switches.

There's also the potential for network loops and broadcast storms causing issues, especially if they've done something silly like have the entire complex on the same subnet.

Plus, the whole wireless spectrum argument with that many APs in a single building. It can work if they're centrally managed, as some will manage their channels and power levels automatically so that they'll work in a crowded environment like that.

That apartment complex I worked on had a lot of buildings daisy chained together, and some of the links between buildings were only 100mb.

Three Olives
Apr 10, 2005

Don't forget Hitler's contributions to medicine.

Aggressive Nap posted:

What more are you looking for out of your travel router? It looks like that device does what you're asking for. It supports wireguard so all you would need to do at home is setup a wireguard server.

I use https://hub.docker.com/r/weejewel/wg-easy which is as easy as the steps show on that page if you already have a server running docker. In your case if you are planning on hosting something on windows you'd either have to install docker for windows or find a way to install wireguard server on windows. Which seems possible. https://github.com/micahmo/WgServerforWindows

Jesus christ Wireguard is a nightmare to configure.

Ended up just giving up and buying the upgraded version with official Tailscale beta support:

https://www.amazon.com/dp/B0BPSGJN7T

Easiest config in the world, configured my home server as an exit node, my Synology NAS as a backup exit node, set it as a subnet, doesn't need any port forwarding or firewall config.

Took it to my office, asked it to repeat the office WiFi connection and sure enough my IP shows up as my home network.

Cyks
Mar 17, 2008

The trenches of IT can scar a muppet for life
Hi, I work in multifamily housing construction and management but not in the departments who normally handle this.

Putting an AP in each unit is a proposal I've seen a couple times on on new development; the new trend seems to be going from the IDF to a ceiling mounted AP (typically rukus) that has an ethernet port out that runs to either a stuctured media enclosure (that plastic box) or a single jack in the unit. These apartments have mandatory internet as part of your lease. Though just having fiber or copper to the enclosure in each unit for your ISP modem/router that you are responsible for ordering is still more common. Regardless, every unit should be treated as a separate entity and each one should be capped at what they are paying for. Don't do a "community" network outside of the community areas (club house, pool, gym).
10G sounds very reasonable for 200 units but I can ask my co-worker tomorrow what we are installing in our current construction sites.

Get bids from multiple vendors. We have some 8-10 year contracts where not only do we have price sharing but some allow us to increase the price to skim on top (I know it's horrible, but it happens and I'm not in charge).

Shaocaholica
Oct 29, 2002

Fig. 5E
AFAIK it’s 10g, 200 apartments, $35/mo no skim. That’s $7000/mo total.

Cyks
Mar 17, 2008

The trenches of IT can scar a muppet for life

Shaocaholica posted:

AFAIK it’s 10g, 200 apartments, $35/mo no skim. That’s $7000/mo total.

Assuming that includes full management and hardware? Property management doesn’t handle any of it?

That sounds like a decent price without looking at the specifics. The last project I looked at I believe the proposal we accepted was 37.50/unit with a 7.50 price share, and that was around 400 units.

Shaocaholica
Oct 29, 2002

Fig. 5E

Cyks posted:

Assuming that includes full management and hardware? Property management doesn’t handle any of it?


Yep. Nobody is paid enough to handle it and nobody is a computer toucher anyway. I'm not even involved except for being married to the boss.

TheFluff
Dec 13, 2006

FRIENDS, LISTEN TO ME
I AM A SEAGULL
OF WEALTH AND TASTE
We just signed our new group deal for our condo association, 10G to the building and 250/250M for each apartment, service and hardware included, 5 year contract. ~14$ per apartment per month, and it's 20 apartments. $14 per apartment is actually not a great deal, we could've gotten 1G per apartment for $12 instead but we have some old folks who still want their cable TV and we ended up with a compromise.

This is in Stockholm though which has a municipally owned black fiber network. Competition works.

Shaocaholica
Oct 29, 2002

Fig. 5E
Maybe final update on apartments. My wife had a meeting with the company that is providing the internet service and manages the APs. She asked them to do a spectrum survey across the building. One of their tech managers said ‘no need we know it’s bad’. They apparently deployed some janky cheap asus APs to all 200 units and are now going to replace them all with eeros at no cost.

Wibla
Feb 16, 2011

For 200 units I would have gone with 25gbit service to the building, but I don't like overselling bandwidth :v:

Cyks
Mar 17, 2008

The trenches of IT can scar a muppet for life

Shaocaholica posted:

Maybe final update on apartments. My wife had a meeting with the company that is providing the internet service and manages the APs. She asked them to do a spectrum survey across the building. One of their tech managers said ‘no need we know it’s bad’. They apparently deployed some janky cheap asus APs to all 200 units and are now going to replace them all with eeros at no cost.

This is the existing provider, not the ones who you are asking about? Or am I misunderstanding.

namlosh
Feb 11, 2014

I name this haircut "The Sad Rhino".
So what’s the current best approach to having a VPN into my network so I can access local resources from anywhere?
I have:
UDMPRO running 6.2 unifios and the latest firmware
Lots of vlans set up to segregate everything and put crappy iot stuff in jail with no internet
Pi’s sitting around that I can use if it makes sense. I even have a usb3 network adapter to give a pi another network interface

I’m not really trying to stream anything too much, just want to be able to hit my local home assistant server and mess around with my homelab stuff.

Clients would be iOS or windows mostly

withoutclass
Nov 6, 2007

Resist the siren call of rhinocerosness

College Slice

namlosh posted:

So what’s the current best approach to having a VPN into my network so I can access local resources from anywhere?
I have:
UDMPRO running 6.2 unifios and the latest firmware
Lots of vlans set up to segregate everything and put crappy iot stuff in jail with no internet
Pi’s sitting around that I can use if it makes sense. I even have a usb3 network adapter to give a pi another network interface

I’m not really trying to stream anything too much, just want to be able to hit my local home assistant server and mess around with my homelab stuff.

Clients would be iOS or windows mostly

Teleport works well and it's built into the UDMP.

Gonna Send It
Jul 8, 2010
I use the WireGuard server built into my UDM base.

namlosh
Feb 11, 2014

I name this haircut "The Sad Rhino".
Thx for the quick replies… I took a look at it and it said that I had to enable remote login to my UDM to enable it? It just didn’t seem like a good idea. I don’t like exposing my UDMs admin interface to the internet

Shaocaholica
Oct 29, 2002

Fig. 5E

Cyks posted:

This is the existing provider, not the ones who you are asking about? Or am I misunderstanding.

It’s always been the existing provider.

Aredna
Mar 17, 2007
Nap Ghost

Thanks!

It looks like using multiple SFP+ Ethernet adapters next to each other are not recommended due to heat concerns.

I only 100% require 1 to be Ethernet. If I want to set the other ports up on something else knowing I can put whatever NIC is required in target devices - is fiber my best choice?

Distance really doesn't matter for current reqs - 2-3m at most. Long term I can't see anything being more than 20-30m from the switch.

Cyks
Mar 17, 2008

The trenches of IT can scar a muppet for life

Shaocaholica posted:

It’s always been the existing provider.

Followed up with my coworker. In his opinion, $35 is what we would find reasonable with a brand new install, including cabling to the building and cabling to every unit, covering hardware and labor. For an existing infrastructure, the bid should be in the 20s for it to be a contender.

Of course we have a larger portfolio and a company dedicated to this industry, so our experience will differ. We also operate mainly in the south east so pricing may be regional.

Teabag Dome Scandal
Mar 19, 2002


I was not able to get my Edgerouter X to port forward so I decided to try with a Mikrotik to see if I had a better time at it. I got a hAP ac2 and seem to have successfully setup pppoe and vlan tagging for Centurylink after doing the Quickset Dual AP and following these instructions https://www.technowizardry.net/2022/01/centurylink-pppoe-gigabit-service-on-mikrotik-routeros/ but skipped the ipv6 stuff. I did change the MTU for the pppoe client interface and the 201 vlan interface to 1492 but I'm not sure if I needed to.

This seems to be the extent of what I need to do to get my network up and running, correct? If I wanted to stop here I could and everything should be fine for a home network? Its letting me do internet stuff and I get 900ish down but only 500ish up which is whatever.

Shaocaholica
Oct 29, 2002

Fig. 5E

Cyks posted:

Followed up with my coworker. In his opinion, $35 is what we would find reasonable with a brand new install, including cabling to the building and cabling to every unit, covering hardware and labor. For an existing infrastructure, the bid should be in the 20s for it to be a contender.

Of course we have a larger portfolio and a company dedicated to this industry, so our experience will differ. We also operate mainly in the south east so pricing may be regional.

We're in Los Angeles so the cost of living delta sounds about right.

Twerk from Home
Jan 17, 2009

This avatar brought to you by the 'save our dead gay forums' foundation.

Shaocaholica posted:

Maybe final update on apartments. My wife had a meeting with the company that is providing the internet service and manages the APs. She asked them to do a spectrum survey across the building. One of their tech managers said ‘no need we know it’s bad’. They apparently deployed some janky cheap asus APs to all 200 units and are now going to replace them all with eeros at no cost.

I'm disappointed that we don't get the gory details because I'd bet the surprise twist at the end of all this is that they were 2.4GHz only APs.

buglord
Jul 31, 2010

Cheating at a raffle? I sentence you to 1 year in jail! No! Two years! Three! Four! Five years! Ah! Ah! Ah! Ah!

Buglord
Trying to help my buddy pick out a new wireless router to work with his Netgear CM500 modem ( https://www.netgear.com/support/product/cm500#docs) His maximum download speeds have been in the low 100s, and this modem supposedly covers up to 680mpbs, so this should be fine still?

However, his ISP recently doubled the speed of their baseline plan to 200 and now he can’t get over ~95 when connected to the wireless router either by Ethernet or wireless. That router is the TP-Link AC1200 (https://www.tp-link.com/us/home-networking/wifi-router/archer-a5/). That brings up a question, shouldn’t that more than cover his current internet speeds anyway, even if he he’s theoretically using only the 2.4ghz signal? Or is there some funny math things that router manufacturers do where a rated speed has to be divided by X factor and that’s your real speed or something? I get that theoretical is a different beast than reality, but this seems far off. Something seems real obvious here but I don’t network well.

Also he lives in a smaller 650sq ft apartment with his girlfriend, so it’s not like 4 iPads and 2 computers and a console are hammering the connection at once with Netflix/game downloads.

Shaocaholica
Oct 29, 2002

Fig. 5E

Twerk from Home posted:

I'm disappointed that we don't get the gory details because I'd bet the surprise twist at the end of all this is that they were 2.4GHz only APs.

It's going to take time to replace all 200 APs. I might be able to find out which model Asus it was but also effort since all of them are in private apartments. Maybe if there's a vacant apartment.

Adbot
ADBOT LOVES YOU

Three Olives
Apr 10, 2005

Don't forget Hitler's contributions to medicine.

Shaocaholica posted:

Maybe final update on apartments. My wife had a meeting with the company that is providing the internet service and manages the APs. She asked them to do a spectrum survey across the building. One of their tech managers said ‘no need we know it’s bad’. They apparently deployed some janky cheap asus APs to all 200 units and are now going to replace them all with eeros at no cost.

Wait, are they going to try and create a 200 AP mesh network? lol.

Unless someone knows something I don't know, literarly the only reason to use eero is when you are creating a residential mesh network.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply