Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
MrMoo
Sep 14, 2000

You might want to look at something like Crashplan instead.

Adbot
ADBOT LOVES YOU

MrMoo
Sep 14, 2000

A power saving "green" switch is probably what you want, various vendors, TRENDnet are surprisingly not too bad:

http://www.trendnet.com/products/products.asp?cat=58#tabs-68

MrMoo
Sep 14, 2000

The Edge Router + UniFi AC looks an interesting combination and not too far off price from a regular 802.11ac Airport.

MrMoo
Sep 14, 2000

I've seen Ubuntu with Intel wifi not understand apple airport 2.4 & 5ghz networks with same SSID, Windows was fine though.

MrMoo
Sep 14, 2000

You probably wont notice, non-HD video will be fine unless you have spotty WiFi or cable line and it has to take longer to buffer. Generally its only going to be downloading files that really shows the difference, so you might have to be aware of occasional Windows Update or similar running in the background.

If you are really worried and don't have a neighbour to test with you could install a rate limiter, set it to 2mb/s and play with it for a bit.

http://www.netlimiter.com/

MrMoo fucked around with this message at 21:32 on Jan 31, 2014

MrMoo
Sep 14, 2000

That's inSSIDer.

MrMoo
Sep 14, 2000

Powercrazy posted:

Modern circuit breakers are isolated from each other and the main feed using cool engineering magiks. This means that the signal won't stay intact unless it's on the same "piece of wire." So the answer is if it all goes dark at the same time when you flip the breaker, powerline should work. If not, it probably won't. They have to be paired afaik. Just use a switch before or after the powerline segment if you want more ports.

According to the docs of the latest products this isn't all so lucky, the signal is quite happy to hop over breakers. This is why the products usually have an encryption layer. It also means it's a complete crapshoot whether powerline would work in every case.

MrMoo
Sep 14, 2000

It can be an IPv6 router, whether it is gimped is another question. Airport still only likes an odd subset of private addresses for IPv4 DHCP.

MrMoo
Sep 14, 2000

Use 5Ghz, that's what it is there for. Channel 14 is gimped enough already, its 802.11b and suffers from interference from commercial radio. I'm sure there are some insightful articles on the topic somewhere as this is frequently asked.

MrMoo
Sep 14, 2000

Jim Silly-Balls posted:

Really? Crap. I was afraid of that. I can do that, but it seems like it would be an easy option to have available.

OpenVPN :argh:

You can push the configuration using a CCD file:
code:
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "redirect-gateway"

MrMoo
Sep 14, 2000

I'll be tempted to suggest a travel router these days as they are tiny, not sure on long term stability though. Outside of an Airport Express try looking at the routers that sit inside a wall plug like the older Apple Express models did.

http://www2.elecom.co.jp/network/wireless-lan/hotel/wrh-150/

Tenda even explicitly compare their "travel router" against the older Apple models:

http://www.tenda.cn/tendacn/Product/show.aspx?productid=393

MrMoo fucked around with this message at 14:03 on Sep 7, 2014

MrMoo
Sep 14, 2000

Jim Silly-Balls posted:

Can I set this per user though?

Each user should have a unique CCD unless you are doing something weird. The CCD is the common name in the certificate.

MrMoo
Sep 14, 2000

If it is the SMC model you set 10.1.10.10 as your DMZ host and disable everything else. Pretty much all you can do other than asking "Tech_Comcast" on whatever forums to remote in a convert the router to bridge mode. For some inane reason bridging does not work if you have a static IP, how they managed that.

MrMoo
Sep 14, 2000

Combat Pretzel posted:

Jesus Christ, Realtek. When I leave the box idling during data migration, it musters up to 58MB/s via Samba on the gigabit link. But oh if I let Google Music play some tunes in the browser, the performance drops to half for no reason. Why are these terrible things still being built into mainboards?

That's probably just SMB1 being rear end. The super cheap onboard NICs are pretty good at basic accelerated TCP connections for quite a few years, UDP is terrible though.

MrMoo
Sep 14, 2000

Alternatively you can usually pick up recycled appliances, some low power units, for $100-200 on Ebay. It can be a bit random on the loudness of the device though: some can be silent, others not so.

MrMoo
Sep 14, 2000

Sounds like you are not using split-VPN, the VPN is forcing all traffic through the tunnel. But if you are saying the PCs are independent of the NAS and WDTV then something else is severely borked. It could be that one of the PCs has been elected the workgroup master for name resolution, try WDTV browsing by IP not hostname.

MrMoo fucked around with this message at 17:29 on Nov 8, 2014

MrMoo
Sep 14, 2000

Fibre is normally an optical transceiver and a wifi router, it would be interesting to learn if you can just use any media converter. Transceivers usually have the benefit for the ISP and end-user is that it is easier to monitor the health of the connection as thus assist you when things go bad.



Verizon's box looks significantly larger than it needs to be, it looks like it includes 4 FXS devices for VoIP though.

MrMoo fucked around with this message at 18:53 on Nov 8, 2014

MrMoo
Sep 14, 2000

e.pilot posted:

Scored a pretty nice pfSense box for $150 on eBay last night. It's going to be an xmas gift to my mother-in-law (yes, mother-in-law, lol)

She was wanting to get a second internet connection to set up load balancing and help make up for the crappy internet speeds where they live, she does a lot of consulting work via the internet, this should work beautifully.


Intel Celeron M 1.50ghz CPU
1GB DDR2 Memory
4GB Transcend Industrial CompactFlash Drive.
4x Ethernet ports
2x USB ports



Another one has popped up: http://www.ebay.com/itm/Pfsense-2-1...=item3399dc7b6d

MrMoo
Sep 14, 2000

e.pilot posted:

edit: also it's silver, not red like the picture

FYI: It says at the bottom of the page somewhere that shipped units may be in red, silver, or blue.

MrMoo
Sep 14, 2000

Minidust posted:

Every now and then, the router at my place loses its internet connection. Turning it off and on again brings the connection back, 100% of the time (so I know the issue isn't with the provider or IP settings or anything like that). Would regular power cycling prevent that sort of thing from happening in the first place? Or is that type of outage completely random and just something I'll have to deal with?

Sounds like a fault with the power supply, try a different cable or transformer if there is one. Do you suffer from brown outs?

MrMoo
Sep 14, 2000

Star War Sex Parrot posted:

Just use draw.io instead of installing something.

There is also https://cacoo.com but it doesn't appear as flexible on storage options.

MrMoo
Sep 14, 2000

e.pilot posted:

So something has broken my IPSec VPN.

Not sure if it is pfSense 2.2 or iOS 8.1.3, those are the only things that have changed between when I last used it and now.

The VPN connects, and I can access my home network, but it's not sending all of my traffic through the VPN, just traffic destined for my internal home network. I can't for the life of me find what's causing it to do this. Anyone know what it might be?

pfSense changed from Raccoon to StrongSwan so somethings may need more attention.

MrMoo
Sep 14, 2000

e.pilot posted:

Excellent, knowing what side to troubleshoot is half the battle.

I believe you need 0.0.0.0 as the leftsubnet in ipsec.conf: https://wiki.strongswan.org/projects/strongswan/wiki/ForwardingAndSplitTunneling Which probably means unchecking "Provide a list of accessible networks to clients" in the mobile-client page.

MrMoo fucked around with this message at 00:46 on Feb 2, 2015

MrMoo
Sep 14, 2000

A 2009 doc from Intel on QuickAssist and FreeBSD: http://www.intel.com/content/dam/www/public/us/en/documents/guides/ep80579-quickassist-freebsd-security-guide.pdf but this is presumably for OEMs adding support, like Cisco, Xerox, etc:

Intel posted:

Updates for 1.0.3 release including:
• The EP80579 security software release package version 1.0.3 does not support OpenBSD/
FreeBSD Cryptographic Framework (OCF), OCF-Linux or any open source projects such as Openswan*, OpenSSL*, or Racoon*. Text describing this functionality has been removed and is not noted with changebars.

Phoronix only announces Linux patches for OpenSSL last year though, http://www.phoronix.com/scan.php?page=news_item&px=MTcwOTM

MrMoo fucked around with this message at 17:04 on Feb 2, 2015

MrMoo
Sep 14, 2000

This looks neat, but I kinda wish Apple made it instead. From Reddit it appears a cheaper version of a Meraki AP with mesh networking. Designer from Nest and other places, will have option to install OpenWRT for those cloud-averse.



https://www.eero.com

MrMoo
Sep 14, 2000

CrazyLittle posted:

The secret they're not telling you is that you lose 1/2 your throughput per wireless mesh hop.

The Eero project discusses that on the Reddit thread, because they have bonded double MIMO antennas they get better backhaul performance.

MrMoo
Sep 14, 2000

Here is the Reddit thread - http://www.reddit.com/r/gadgets/comments/2un0pb/eero_thinks_its_tiny_box_can_fix_all_your_wifi/

MrMoo
Sep 14, 2000

flosofl posted:

There's nothing in there about bonding MIMO arrays. They are using 2x2 which is two spatial streams. MIMO comes in 2x2, 2x3, or 3x3. Now there's nothing *wrong* with 2x2 and I'm sure it was a decision to reduce costs. As long as there's no building materials that adversely affect RF in an unusual way (lots of metal for instance), 2x2 is fine.

Answered here:

6roybatty6 posted:

There are a bunch of reasons, but I can't go into them right now; some are technical and others are just caused by externalities.
As for which band does what- that's complicated, and depends on the RF survey results; we do bonded backhaul, and both radios work as both mesh and AP interfaces.

The detail on engadget is interesting, in particular the bandwith issue is a bit confusing - http://www.engadget.com/2015/02/03/eero/

MrMoo
Sep 14, 2000

Modus Pwnens posted:

Is a newer router my best option, and if so, what should I buy? I'd like to spend as little as possible but am probably willing to go up to the $200-$300 range if it means my home office computer gets reliable internet.

Sounds like an ideal scenario for Eero, but you'll have to wait till summer before it ships.

MrMoo
Sep 14, 2000

You can get travel WiFi routers can be set to client mode, i.e. just plugin a short RJ45 cable to your terminal. Advertised speeds range from 150-433mbps, the faster ones are bigger, I'm not sure if they get hotter.

http://www2.elecom.co.jp/network/wireless-lan/hotel/

On the cheap side in the US you can probably scour for "gaming adapters" targeted at the Xbox and similar devices that did not have WiFi. But older adapter may not support WPA so be careful on the speeds and security options.

Here is a random example from NewEgg:

http://www.newegg.com/Product/Product.aspx?Item=N82E16833320164&cm_re=travel_wifi-_-33-320-164-_-Product



Smaller units are powered by USB so you don't need a special dedicated power brick.

MrMoo fucked around with this message at 21:18 on May 10, 2015

MrMoo
Sep 14, 2000

An odd / interesting new development, http://www.bitdefender.com/box/



It lists itself as a home AV gateway but also a home VPN concentrator. It may skimp on the first half by simply providing a convenient method for PCs to install the Bitdefener software. At a minimum it is a firewall.

MrMoo fucked around with this message at 13:13 on May 14, 2015

MrMoo
Sep 14, 2000

Inspector_666 posted:

It sounds interesting conceptually, but the fact that the VPN service is subject to a "fair use policy" is :siren:

Also, up until the fact you cannot find any technical details on what it actually does aside of not perform SSL snooping. Sounds like typical AV industry racketeering, especially the protection for thermostats, :lol:

My ISP, Optimum (Cablevision), provides free McAfee AV to any subscriber already. I would be interested in using one for a small business as it is cheaper than say Netgear UTM firewalls ($164/yr for UTM5).

:lol: at the scammy poo poo Sonicwall are still pulling off under Dell:

quote:

1. Content Filtering costs $110.00 per year (free for 1 month)...
2. Antivirus for 5 users and gateway is $199.00 per year (free for 1 month). The Antivirus includes a license for 5 clients... I have been unable to determine what OS's are supported for the client (really hard to get anything other than marketing hype from the website).
3. Gateway Antivirus, Anti-spy, and intrusion prevention service $110.00 per year (free for 1 month).
4. Comprehensive Anti-Spam service is $135.00 per year.
5. Global VPN Client for windows is $50.00.
6. SSL VPN 1 user license is $50.00.
7. Viewpoint software (that I think lets you see which client is using the most bandwidth) is $137.00
8. "Comprehensive" Gateway Security Suite is $225.00 - unsure what that includes (finding "comprehensive" information is kind of tough from this company).
http://www.amazon.com/dp/B002E3AIG2

MrMoo fucked around with this message at 01:03 on May 15, 2015

MrMoo
Sep 14, 2000

Synology pushing out their own routers for some reason,



http://geekbeat.tv/synology-introduces-the-new-wifi-router-rt1900ac/

MrMoo
Sep 14, 2000

Inspector_666 posted:

Yeah, ASICs are basic enough that unmanaged switches are pretty much all the same thing now.
Some switches are able to power down the ASIC when not connected or in use, varies nomenclature about being "green".

16-port and larger switches often require an active fan, smaller units can be fanless. TRENDnet have some odd compact 16 and 24 port units, one 16 port model advertised fanless.

MrMoo fucked around with this message at 20:35 on May 27, 2015

MrMoo
Sep 14, 2000

That's probably why it is fanless, their crap rear end site must be running with one as it is no longer working.

Netgear faired better with a slimline 16-port model. The have another odd model range called "click mounting", example 16-port.

MrMoo
Sep 14, 2000

IPsec tends to be more reliable, an alternative would be Ubiquiti Edge Routers, not sure if all support VPN though. Depends if the additional functionality of pfSense is a bonus? I find recycled appliances on Ebay with pfSense pre-installed work well, but not ones with custom modifications like required for Firebox.

Ideally find something without a custom power brick as that usually fails first, until USB-C is more widespread that usually means larger rack units which unfortunately can have really loud fan units. Random pfSense appliance on Ebay.

MrMoo fucked around with this message at 17:18 on May 29, 2015

MrMoo
Sep 14, 2000

caberham posted:

Thanks for the reply. Is it possible to distinguish traffic? For instance, if I'm just surfing online or gaming, there's no need to go through the VPN, but if it's work related traffic or circumventing the great firewall, it's automatic port fowarding
It's a mixed bag, layer 3 (IP) based routing is fine but websites these days tend to work better at layer 7 (URLs). pfSense has a package system to add on software that can perform layer 7 logic to some degree or other, it would require some effort.

Some kind of HTTP proxy on pfSense that only uses the VPN interface and then configure clients on an URL basis to go DIRECT or use the PROXY.

I've done it to access the BBC in China, the setup is OK but looking after it is not user friendly.

(edit) Actually it looks like some extensions in Chrome can help out these days, you can configure the extension to enable proxy usage for certain URLs.

https://chrome.google.com/webstore/detail/proxy-switchyomega/padekgcemlokbadohgkifijomclgjgif?hl=en-US

MrMoo fucked around with this message at 18:29 on May 29, 2015

MrMoo
Sep 14, 2000

CrazyLittle posted:

Don't get the UAP-LR. Just because you can see the access point from your device, doesn't mean that your device is powerful enough for the return trip. The UAP-LR is generally a bad idea.

That's a rather novice understanding of radio transmission and reception. You pump more power into the antennas for longer broadcast, you use a larger antenna and amplifier to improve reception. You can work with just increased transmission power for point-to-point devices like Ubiquiti's airFiber range.

If you look at the product details the modern AP is the same as the older AP-LR, the older AP was basically a lower powered version. The AP-LR was the same as the outdoor models (183m / 400ft range).

MrMoo fucked around with this message at 00:07 on Sep 1, 2015

MrMoo
Sep 14, 2000

CrazyLittle posted:

Actually no,

Ah, the Unifi product page is broken, one implies there is no AP-LR model any more, and another has is highly prominent in the diagrams. Awesome.

Adbot
ADBOT LOVES YOU

MrMoo
Sep 14, 2000

So the question is, is this new for this version as it follows my comments earlier:

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply