Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Rakeris
Jul 20, 2014

Do note if you are in the US and have AT&T fiber it's a bit more complicated, and depending on the network and amount of "effort" you want to go through, using their equipment may be the unfortunate but better option.

Adbot
ADBOT LOVES YOU

LRADIKAL
Jun 10, 2001

Fun Shoe

Endymion FRS MK1 posted:

Thanks for the ONT help guys, that clears things up!

I’m still deciding whether I want a hAP ax3 or a UDR, any advice?

If you want to spend as much money as an ER-X costs, and want to use something with similar performance and an interface to an ER-X, you should get an ER-X.

e.pilot
Nov 20, 2011

sometimes maybe good
sometimes maybe shit

rufius posted:

Something something use Opnsense.

nerox
May 20, 2001

e.pilot posted:

not really, you can get brand new passive cooled multi-lan celeron boxes on aliexpress now for $100-150

I paid like $140 shipped for a quad 2.5gbe n5105 box with 8gb ram a year ago

I ordered one of these and waiting for it to come in.

In the meantime, I now have a 2.5gb switch, several 2.5gb nics, and an access point (which is also 2.5gb ethernet) sitting in my amazon shopping cart to the tune of about $320 that are taunting me. Luckily, right now I am just going to change my ISP provided router into AP only mode and put in the opnsense box so I have some actual control over my network that's not through an ios app with severely limited functions.

withoutclass
Nov 6, 2007

Resist the siren call of rhinocerosness

College Slice
Print the images out so they can be mailed and scanned into the system.

fknlo
Jul 6, 2009


Fun Shoe
I started having some internet issues this week, and in trying to sort things out before a tech needed to come over I hooked up the wifi router that came with my service to make sure it wasn't an issue with my USG and UAP AC PRO. It's not. But holy hell the speed and coverage of the other router just blows my setup out of the water. I've complained of range and speed in my current house but had never tried anything else. Current house is a split level with no real ability to run wires and isn't wired for ethernet even though it's less than 10 years old.

I feel like something like the dream router would be great if it weren't for the speed limitations. I currently have "gig" internet from spectrum but am considering switching to a new offering that has actual gig up/down with 2.5g availability at some point in the near future. What's a good option for an all in one setup that can handle something like that? I'd love to do a dream machine and access points but that not really feasible with the way the house is set up, and I'm not a fan of the price either. We have 4 fairly active users that always have something streaming, downloading, etc... So fairly normal household usage. Would something like the microtik hap ax3 work for me since there's the possibility of faster than gig service?

My desktop is the only thing hard wired, everything else in the house is running off wifi.

fknlo fucked around with this message at 00:28 on Nov 2, 2023

wolrah
May 8, 2006
what?

fknlo posted:

My desktop is the only thing hard wired, everything else in the house is running off wifi.
Did you have this device configured to match your old network settings or was whatever machine you were using for testing the only client on the network? Both speed and range of a WiFi network will be affected by the number of active clients.

fknlo
Jul 6, 2009


Fun Shoe

wolrah posted:

Did you have this device configured to match your old network settings or was whatever machine you were using for testing the only client on the network? Both speed and range of a WiFi network will be affected by the number of active clients.

I've generally been the only person in the house when I've done speed tests. So probably just my laptop streaming something. The only things that wouldn't have been on the network at this time but normally would be would have been the TV and an xbox, both not doing anything with no one else there. Antenna placement with my Unifi setup is a possible issue but I've tried a few different things with no success.

Kibner
Oct 21, 2008

Acguy Supremacy
I got ipv6 working on my fancy router! don't know if I did it correctly but it works! I went for SLAAC with DHCPv6 stateless server because it seemed the least fussy while still doing everything I think I need it to? (some of you network experts here might need to chime in lol)



In any case, I am able to go to https://test-ipv6.com/ and pass with 10/10!

wolrah
May 8, 2006
what?

Kibner posted:

I got ipv6 working on my fancy router! don't know if I did it correctly but it works! I went for SLAAC with DHCPv6 stateless server because it seemed the least fussy while still doing everything I think I need it to? (some of you network experts here might need to chime in lol)
As a general rule that's what you want, SLAAC for addressing and stateless DHCPv6 for additional options. Stateful DHCPv6 only really matters if you care about selecting a specific IPv6 address for a client, which is generally unnecessary and actually doesn't work at all with Android clients (because Google went out of their way to break it and has been stubbornly refusing to reconsider for years).

Good job!

Kibner
Oct 21, 2008

Acguy Supremacy

wolrah posted:

As a general rule that's what you want, SLAAC for addressing and stateless DHCPv6 for additional options. Stateful DHCPv6 only really matters if you care about selecting a specific IPv6 address for a client, which is generally unnecessary and actually doesn't work at all with Android clients (because Google went out of their way to break it and has been stubbornly refusing to reconsider for years).

Good job!

Ahh, that's good to know, thanks! And, yeah, I'm having to learn a lot because I have only had experience with consumer gear up to this point, where things like static ip's and port forwarding were extremely simple and straightforward.

Future plans are to actually get port forwarding working, setup an ipsec vpn, create separate vlans for home server(s), IoT devices, and everything else, and then one or two other things that slip my mind for now. So much to learn.

Kibner
Oct 21, 2008

Acguy Supremacy
Potentially dumb question: can a single computer access multiple VDOMs/networks?

I am going through the best practices guide and one of the first things it recommends is to setup a separate management network. I want to be able to access the management interface on the management network from my main desktop while still being able to connect to the internet via the traffic network. Maybe I just need to figure out a way to have my main desktop switch networks to the one that the management interface is on when I want to change settings? If so, what is a good way to do that? My main desktop is a Windows machine.

This is certainly tailored for business and not homes, but I still want to learn and understand.

wolrah
May 8, 2006
what?
The easiest way would be to just set up rules in your router/firewall to allow certain systems you want to use for administration to access the management network.

One notch beyond that would be if you have VLAN-capable switches any good NIC will allow you to use tagged VLANs, at which point you just set your switch(es) to deliver the management VLAN to the appropriate port(s)

You could also use an entire separate NIC in your management host(s) if you wanted to have the management network be physically separate, or even set up a cheap dual NIC machine as a dedicated management box that you remote in to from your normal use machines.


I do the first two myself. My desktop connects directly to three VLANs, my laptop also does when wired, and then my laptop and phone can also reach the other networks through the router when on WiFi.

The other two options are too paranoid for my tastes but IMO building an overkill home network is as much about learning as it is about having fun pretending your home network is a lot more serious than it really is, so do whatever fulfills your wants and needs.

ROJO
Jan 14, 2006

Oven Wrangler

Rakeris posted:

Do note if you are in the US and have AT&T fiber it's a bit more complicated, and depending on the network and amount of "effort" you want to go through, using their equipment may be the unfortunate but better option.

Not fully disagreeing, but throwing out another data point - I have had great success with putting my AT&T ONT into IP-pass-through mode (not a true bridge mode but that hasn't been an issue) and have everything working just fine at 1G symmetric speeds behind it. Unifi gear, wireguard VPN on a rpi, plex server, etc - all works just fine and only required about 2 minutes of changing settings in the AT&T router to work.

Endymion FRS MK1
Oct 29, 2011

I don't know what this thing is, and I don't care. I'm just tired of seeing your stupid newbie av from 2011.
Well I decided to pull the trigger on a MikroTik HAP ax3, and setting it up was… effortless? I literally hooked it up, downloaded the app, set it up there, and I’m good. I was very much under the impression I’d have to do a lot of stuff

Is there any dumb setting I’m missing that default setup skipped over?

Cyks
Mar 17, 2008

The trenches of IT can scar a muppet for life

wolrah posted:

The easiest way would be to just set up rules in your router/firewall to allow certain systems you want to use for administration to access the management network.

One notch beyond that would be if you have VLAN-capable switches any good NIC will allow you to use tagged VLANs, at which point you just set your switch(es) to deliver the management VLAN to the appropriate port(s)

You could also use an entire separate NIC in your management host(s) if you wanted to have the management network be physically separate, or even set up a cheap dual NIC machine as a dedicated management box that you remote in to from your normal use machines.


I do the first two myself. My desktop connects directly to three VLANs, my laptop also does when wired, and then my laptop and phone can also reach the other networks through the router when on WiFi.

The other two options are too paranoid for my tastes but IMO building an overkill home network is as much about learning as it is about having fun pretending your home network is a lot more serious than it really is, so do whatever fulfills your wants and needs.

The third way is the way I’ve seen the DoD do it but it’s a VM with virtual nics instead that you just log into through the hypervisor.

Kibner
Oct 21, 2008

Acguy Supremacy

Cyks posted:

The third way is the way I’ve seen the DoD do it but it’s a VM with virtual nics instead that you just log into through the hypervisor.

Well, I already run a VM on my machine for work, so this could work…

thiazi
Sep 27, 2002

ROJO posted:

Not fully disagreeing, but throwing out another data point - I have had great success with putting my AT&T ONT into IP-pass-through mode (not a true bridge mode but that hasn't been an issue) and have everything working just fine at 1G symmetric speeds behind it. Unifi gear, wireguard VPN on a rpi, plex server, etc - all works just fine and only required about 2 minutes of changing settings in the AT&T router to work.

I think you’re referring to the AT&T gateway, not the ONT. But otherwise I agree, I’ve had no problems putting my gateway into passthrough mode and using my Ubiquiti gear for routing and wifi.

fknlo
Jul 6, 2009


Fun Shoe

Endymion FRS MK1 posted:

Well I decided to pull the trigger on a MikroTik HAP ax3, and setting it up was… effortless? I literally hooked it up, downloaded the app, set it up there, and I’m good. I was very much under the impression I’d have to do a lot of stuff

Is there any dumb setting I’m missing that default setup skipped over?

Let me know what you think since I'm looking at that as well. And yeah, all the reviews say you need to watch some youtube videos to get it set up properly if you're just a normal person. So that's cool if that's not really necessary.

Wibla
Feb 16, 2011

Cyks posted:

The third way is the way I’ve seen the DoD do it but it’s a VM with virtual nics instead that you just log into through the hypervisor.

Do you have a link to the official DoD guidance for this stuff?

Endymion FRS MK1
Oct 29, 2011

I don't know what this thing is, and I don't care. I'm just tired of seeing your stupid newbie av from 2011.

fknlo posted:

Let me know what you think since I'm looking at that as well. And yeah, all the reviews say you need to watch some youtube videos to get it set up properly if you're just a normal person. So that's cool if that's not really necessary.

I will! So far in the ~4 days I’ve had it, it’s been rock solid

Zero VGS
Aug 16, 2002
ASK ME ABOUT HOW HUMAN LIVES THAT MADE VIDEO GAME CONTROLLERS ARE WORTH MORE
Lipstick Apathy
Is there a Windows app that will let me plug a USB Wifi adapter into my laptop, and get a graph of the signal strength over time of multiple signals with the same SSID but different MAC addresses? Trying to lock on to the strongest hotspot with some certainty.

Kibner
Oct 21, 2008

Acguy Supremacy

Kibner posted:

Well, I already run a VM on my machine for work, so this could work…

Oh, quoting myself, but I think an easier but still secure(?) way is maybe to just VPN into the management network. I'll sit on this, for now, and setup the rest of my network how I want first. A million ways to skin a cat and all.

ROJO
Jan 14, 2006

Oven Wrangler

thiazi posted:

I think you’re referring to the AT&T gateway, not the ONT. But otherwise I agree, I’ve had no problems putting my gateway into passthrough mode and using my Ubiquiti gear for routing and wifi.

yeah sorry, the gateway/ONT are the same box so I use them interchangeably

kiwid
Sep 30, 2013

Can anyone recommend me a home router that has parental controls like turning on/off the internet on a schedule?

Also, is OpenDNS still a good service to block porn and stuff? Haven't used it in like 10 years.

Kibner
Oct 21, 2008

Acguy Supremacy

kiwid posted:

Can anyone recommend me a home router that has parental controls like turning on/off the internet on a schedule?

Also, is OpenDNS still a good service to block porn and stuff? Haven't used it in like 10 years.

I don't know about the vast majority of the market, but the Eero routers do that. You make profiles in the phone app, assign devices to the profile, and then you can schedule the internet usage on a profile basis. You can also content filter on a profile basis, but that probably is subscription only and you are locked into using the Eero DNS servers. The subscription also comes with multiple licenses for 1Password, Malwarebytes, and some VPN software.

Cyks
Mar 17, 2008

The trenches of IT can scar a muppet for life
I tested 1.1.1.3/1.0.0.3 and it did a pretty good job. It blocked a lot of the big name sites at least.

Or just move to here in Virginia where youporn blocks our state.

thiazi
Sep 27, 2002

ROJO posted:

yeah sorry, the gateway/ONT are the same box so I use them interchangeably

Interesting, my ONT is entirely separate (it is in my attic, and connects via Ethernet to the gateway in my office - but connecting that ONT Ethernet directly to a device won’t work because it lacks the authentication the gateway provides.)

kiwid
Sep 30, 2013

Kibner posted:

I don't know about the vast majority of the market, but the Eero routers do that. You make profiles in the phone app, assign devices to the profile, and then you can schedule the internet usage on a profile basis. You can also content filter on a profile basis, but that probably is subscription only and you are locked into using the Eero DNS servers. The subscription also comes with multiple licenses for 1Password, Malwarebytes, and some VPN software.

This is going to be for some non-technical people who I suspect are not open to a subscription. Are you still locked to the Eero DNS if you don't use the premium features?

Kibner
Oct 21, 2008

Acguy Supremacy

kiwid posted:

This is going to be for some non-technical people who I suspect are not open to a subscription. Are you still locked to the Eero DNS if you don't use the premium features?

Eero is designed for non-technical people. You can change the DNS without the subscription. You just can't assign a certain DNS per profile/device.

Three Olives
Apr 10, 2005

Not a single fucking olive in sight

thiazi posted:

Interesting, my ONT is entirely separate (it is in my attic, and connects via Ethernet to the gateway in my office - but connecting that ONT Ethernet directly to a device won’t work because it lacks the authentication the gateway provides.)

You are both right, AT&T does both, for their 1 gig service they used a ONT and a gateway but you needed the gateway to authenticate, however, the ONT only physically supported 1GigE. When they launched 2Gps and 5Gps they released a new gateway that has a SFP port that they use to connect the transceiver directly to the PON, it is also equipted with one 5Gbps ethernet port and 3 1Gps ethernet ports. Also, oddly, an ONT port. I guess they aren't wasting SFP cards for 1Gps and below installs but want to go ahead and make the gateway compatible for when they phase out support for the old gateways?

This is obviously an idiotic setup for anyone that wants to install 5Gbps service in their home but my understanding is that AT&T Fiber is just hacked on to their VDSL network and they wanted to manage the service the same way because it used their existing tools to provision users.

Three Olives fucked around with this message at 06:53 on Nov 4, 2023

astral
Apr 26, 2004

There's an EdgeRouter 3.0 release candidate. :2monocle: Sounds like it's mostly a redesigned UI and native wireguard support, but according to reddit mediatek chipset routers might get a slightly newer kernel version.

Prescription Combs
Apr 20, 2005
   6

astral posted:

There's an EdgeRouter 3.0 release candidate. :2monocle: Sounds like it's mostly a redesigned UI and native wireguard support, but according to reddit mediatek chipset routers might get a slightly newer kernel version.

Wow I figured UI abandoned that platform. Might have to dig my ER-4 out and try it out.

fletcher
Jun 27, 2003

ken park is my favorite movie

Cybernetic Crumb
On my UDM Pro I keep seeing these errors in the console because I use WAN2 as my primary internet (Port 10 SFP+). My WAN (Port 9) is a 1G backup connection that is disconnected currently, not using it at the moment. I keep seeing these errors as a result:


I want to swap my WAN & WAN2 so that WAN becomes Port 10 SFP+ and WAN2 becomes Port 9.

Here's what it looks like before any config changes:



Then I go into the port config and set Port 9 to disabled, so I can then set Port 10 to WAN, then set Port 10 to WAN2 and click Apply Changes:


I then see a Network is offline for a few minutes:


Then it eventually reconnects and I go to set 1G-ETHERNET to Port 9, and 10G-Fiber to Port 10, and click apply:


After a few minutes, it seems to revert back to the original config though with Port 9 WAN and Port 10 WAN2.

How do I swap WAN & WAN2 correctly?

kri kri
Jul 18, 2007

What dns do y’all use? I’m using cloud flare now but wondering if there’s anything better out there. I’d like some level of adocking if possible.

rufius
Feb 27, 2011

Clear alcohols are for rich women on diets.

kri kri posted:

What dns do y’all use? I’m using cloud flare now but wondering if there’s anything better out there. I’d like some level of adocking if possible.

NextDNS. Used it for years now. Blocks ads, it’s cheap, easy to configure.

future ghost
Dec 5, 2005

:byetankie:
Gun Saliva

kri kri posted:

What dns do y’all use? I’m using cloud flare now but wondering if there’s anything better out there. I’d like some level of adocking if possible.
I use cloudflare secure DNS linked up via pfsense. DNS/dot/doh requests for all vlans are locked to using the firewall's forwarder, and the firewall handles adblocking directly through pfblockerng.

Burden
Jul 25, 2006

I use cloudfare on my pihole.

withoutclass
Nov 6, 2007

Resist the siren call of rhinocerosness

College Slice

kri kri posted:

What dns do y’all use? I’m using cloud flare now but wondering if there’s anything better out there. I’d like some level of adocking if possible.

NextDNS is incredible, do recommend for easy of use, cost, and ability to quickly set up encrypted DNS for your mobile devices so you're protected everywhere.

Adbot
ADBOT LOVES YOU

Wayne Knight
May 11, 2006

Is this a good thread for a router recommendation?

I’m looking for a mix of casual and advanced features, which may be an odd combination.

I would like a mesh system so I can have wired devices on both floors of my house without running Ethernet from upstairs to downstairs. I would like it to auto update firmware, and really the only specific advanced feature I need is for it to run dnsmasq officially (no custom firmware or rooting it). I have a hobby project that involves network booting raspberry pis. My synology will act as the tftp server, I just need the router to direct the pis there.

I looked at user manuals for mesh systems from tp-link, netgear, and linksys, but none showed much (if any) of the admin web interface (just app screenshots) and none showed what lurks behind the “advanced settings” tabs.

Does such a system exist? I would prefer it not look like an enemy spaceship from a sci-fi themed power metal album cover.

Thanks!

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply