[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y ] [Search | Free Show | Home]

/rape/ - Router/Acess point/Ethernet General

This is a blue board which means that it's for everybody (Safe For Work content only). If you see any adult content, please report it.

Thread replies: 234
Thread images: 32

File: RB750UPr2-hEX-PoE-lite.png (76KB, 400x260px) Image search: [Google]
RB750UPr2-hEX-PoE-lite.png
76KB, 400x260px
I do not know what I am doing,but I have a medium sized wallet edition.

We talk about rape, routers,access points and Ethernet

Reminder Ubiquity is the windows ,Mikrotik is linux
>>
>>58004179
>Reminder Ubiquity is the windows ,Mikrotik is linux
theyre both consumer grade shitboxes
>>
>>58004179
I've got a router running Tomato on wireless client mode for one of my bands, but it doesn't seem to be working. I've got my ethernet plugged in and everything.

Also, the ports are completely wrong. It's saying my WAN port is my LAN 1 port; everything is shifted over one. Could this be the problem, and how do I fix it?

Wat do?

Here's a picture of my second problem.
>>
RT-N16 running dd-wrt mega since 2011. feels great.
>>
installing custom firmware to your router should be illegal
>>
>>58004179
At least Ubunquity devices have a Cisco IOS-type shell
>>
>>58005546
Fuck off NSA,fcc shill.


>>58005662
>>58005179
>Using Windows
>>
>>58005675
ip access-list extended eat_shit_fucko
deny ip 10.0.0.0 0.255.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 192.168.0.0 0.0.255.255 any
>>
>>58004179
>R
pfsense on sg-2220

>AP
Ubiquiti AC-Pro

>E
... switch? HP 1910G


Seriously kids; fuck everything except pfsense. You dont have to buy their hardware; it can be virtualized or ran on any x86 hardware (also recently released arm hardware/support).
>>
>>58005744
pfsense is a gooey interface meme. if you cant setup a router from a vanilla bsd/debian install using iptables and vim, you don't belong in this thread
>>
>>58005744
your router is overpriced for Bing a nuc kys
>>
>>58005744
>his switch isnt layer 3
laughingsluts.jpg
>>
>>58004179
>>>/rapeg/
>>
>>58004179
>move into flat
>only one ISP in the area
>the default router doesn't let you change DNS
what kind of hell is this? guess I'll have to get a router and install openWRT
>>58005546
serious question, why?
>>
>>58005800
You can modify your radio signal causing it to jam a watch tower causing planes to fly with out lane guidance
>>
>>58005214
what's the hardware?
>>
>>58005761
Never used Debian as a router. Is it as safe and sound as bsd?
>>
>>58005782
At least he doesn't have a cock in his ass.
>>
>>58005838
huh, cool - but that's like saying I can stab someone in the neck with a pencil so all pencils should be illegal
>>
>>58005744
>also recently released arm hardware/support
Now how well does this work?
>>
>>58005744
>routing on arm
does it run as bad as consumer routers?
we got ASICs for a reason
>>
>>58005838

That's already illegal.

There's a difference between radio firmware and operating system firmware. Radio firmware isn't open source and is generally completely separate from the OS.
>>
>>58005800
9/10 chance poster you replied to just bricked his own router because he didn't read the instructions and blames the firmware. Is what I came up with.
>>
>>58004179
All yall niggas are stupid. Buy a real cisco or something, the 3650g's are going for ~500$ surplus rn
>>
>>58006436
cisco is not relevant anymore after the backdoor fiasko
>>
Im about to get my CCNA cert. Is it worth to start building a server rack with cisco equipment like a single 2960 Catalyst switch and a 1941 router.

I feel more comfortable using that conmand line than any gui or other command line interface.

Also I think itd be pretty badass to have set up all that myself.
>>
>>58006464
Also, I heard the ISP collects data through your network. If I set up some kind of network segmentation using VLANS would that help?
>>
>>58006436
>Buy a real cisco or something, the 3650g's are going for ~500$ surplus rn
Jesus christ you're retarded, I have a 48 port 3750E which was $200 and can be had for even less

>>58006463
there was none

>>58006502
how retarded are you
>>
What are the chances I will be working with cisco stuff when I get a job? My school only teaches cisco based networking, and I have no experience in anything but cisco.
>>
File: CSCO-1.jpg (48KB, 514x288px) Image search: [Google]
CSCO-1.jpg
48KB, 514x288px
>>58006956
probable
>>
>>58005851
Yes, Debian is good.
>>
total noob who is looking for a cheap/solid dual-band DSL router/modem
any recs?
>>
I had Win 8.1 running VMware workstation running ESXi running Sophos running my gateway

now i got a free Checkpoint 1000n from work and its awesome

no lic tho so no updates
>>
>>58005711
>no permit ip any any at the end of your ACL
how's your first day on Cisco IOS going?
>>
>>58007262
them cheap linksys ones and such, no ?
>>
what do you guys think of tenda
>>
>>58007279
not that anon but
>implying you would never want drop at the end of your ACL list
>>
>>58007282
WRT54GL?
is that dual-band?
>>
>>58007338
does it say dual-band? no
only the AC monster version
>>
>>58007330
still doesn't make sense
if you're goal was to apply it to a VACL either permit those ranges in an ACL first or deny them and finish the ACL with a permit ip any any at the end

the way that guy has it you might as well not have a single statement in the ACL because you will get the same results regardless of if you are applying it to a distribute list, VACL, route-map, interface, management interface, or anything else really.
>>
>>58007279
>permit ip any any
jesus fuck that's disgusting
>>
>>58007402
>if you're goal was to apply it to a VACL either permit those ranges in an ACL first or deny them and finish the ACL with a permit ip any any at the end
Again this would be retarded and would allow traffic on the computers connected to the Tor subnet to potentially be able to leak things outside of Tor.

>blah blah blah, VACLs have a default deny at the end
For that to work there still has to be at least 1 rule in the VACL.
>>
>>58007413
you're right, the alternative is much better based on his ACL
>deny something
>deny something else
>deny something else
>OH AND DENY EVERYTHING


retard
>>
>>58004179
>another forced 'general'

literally kys yourself you fucking child
>>
>>58007363
aight I'm an idiot but I figured it out

going to order a used Linksys E4200 and flash tomato
shud be fun, thx
>>
>>58007461
I am personally all for this. We need more generals not about buying shit.
>>
>>58007480
>we need MORE generals

seriously, go back to wherever you came from because you are a fucking tool
>>
>>58007489
this is what has been happening to 4chan for like 2 years now

if you're really an oldfag like 2006 era oldfag and you're still here, you've probably come to grips with generals
if you don't like generals, leave because they've been a massive part of 4chan for years now and there are other chan boards out there
>>
>>58005761
>gooey interface
My one complaint is that it doesn't have a real, full cli (yet). That said if you wanted to you can access the shell to do any roll-it-yourself changes

>if you cant setup a router from a vanilla bsd/debian install using iptables and vim, you don't belong in this thread
A fun project buy literally kys if you're using that in a production environment).

>pfsense
>meme
Okay...

>>58005777
>your router is overpriced
Yes it is; bought it to support the project and to have a minified copy of my work production network (2x C2758's in HA; 2x HP 2920-48 POE switches; 3x Ubiquiti UAP AC Pro).

>for Bing a nuc
You're an idiot. This board was custom engineered for the software.

>CPU w/AES-NI & Quick Assist for crytpo accel
>dual Intel i354 NICs
>CoreBoot
>M.2/mSATA slot
>mPCI-e slot
>micro sim card slot
>onboard eMMC storage
>mini-USB serial port
>fanless; silent
>low power consumption; ~10W

>>58005782
It is.

>>58005858
My daily driver is a Mac. idgaf about any of the fanboy/hategames, I just use whatever works best for the task, for me. Servers are mostly *nix except for domain shit, network is bsd or other/embedded, my windows machines are for games or domain machines(users), and my laptop is a MacBook.

>>58005877
>>58005914
It's promising (and pfsense on a potato would be better than consumer garbage) but I'd like to see it on better hardware. They have an arm-based device for ~$150 (kek) that can handle a ~300Mb WAN.
>>
>>58007640
>blah blah blah blah i like cocks
>>
>>58007640
>my switch is layer3
>but im not using it such
>and it is so shitty it only supports 32 static routes as far as layer 3 goes
>>
>>58006464
>>58006502

>Is it worth
Not imo –just do everything in a virtual lab. Once you are better able to make an informed decision then maybe find affordable hardware to invest in.

>>58006502
>>58006502
>how retarded are you
Guy is a dick but pretty much spot on. You're probably thinking VPN rather than VLAN. VLANs segment your internal network. Regardless your ISP knows where you're going and undoubtably logs activity, and there's what we already know the NSA (and/or other nation states) are doing... and then what we don't know.
>>
>>58006956
Definitely depends on where you live but cisco is the main player. Assuming people in your area need enterprise-level networking there will surely be environments with cisco.

We use no Cisco equip (by choice), but our ISP's IAD is a Cisco so we've got it in the rack.
>>
>>58007673
:^)

>>58007688
... KISS? All of my lab is virtual (incl the network) so I don't have much need for anything other than a few vlans and a few ports for muh gaymen machines and APs. That said I guess >>58007673
>>
>>58007794
>my network is virtual
>because why would you ever want ASICs

>I keep things simple
>because i cant do complexity
>>
>>58004179
>/g/ will fight over anything, router edition

fuck you, I'm using a small edgerouter x for wired stuff and an asus with advanced tomato as AP. Everything works fine.
>>
A cheap ass chink 20usd 100/100 router and a highend gigabit switch.

What speed do I get?
>>
>>58007847
>he fell for the edgerouter meme
>>
File: fuckek.jpg (180KB, 899x650px) Image search: [Google]
fuckek.jpg
180KB, 899x650px
>>58007877
it works and it's almost the size of a fucking credit card. Really easy to setup too and has cli.
feelsgood.jpg
>>
>>58007847
>edgerouter
what a fucking shitty company. they say it is a "carrier class" router, but it only has 1GbE. It has "carrier class" reliability which they think is only 3 nines (8.76 hours downtime per year). they claim their lowend devices are capable of 1 Mpps, which i can only assume is with zero services enabled.
>>
File: homelab1.jpg (2MB, 3648x2736px) Image search: [Google]
homelab1.jpg
2MB, 3648x2736px
>>58006464
I just got mine the other day

Pic related, was about $360 on Ebay for the 3 switches and routers. The ASA was $160 and came with a good license.
>>
>>58004179
Care to make some guides OP?
>>
>>58007912
you are a dumb cunt if you use this outside a household. I also have an edgerouter lite somewhere, I do believe it's better for the X but it's a bit bigger. The wireless links are fucking great. Using internet with one of those with POE and it's more than enough for my 10mbps internet connection.
>>
>>58007915
>a bunch of 10/100 switches
>muh ASA license
you know there is a keygen for ASAs? at least all that old gear was cheap. youll probably pay more powering it than you did for it
>>
File: agree.jpg (3KB, 114x111px) Image search: [Google]
agree.jpg
3KB, 114x111px
>>58005761
>pfsense is a gooey interface meme
>>
>>58007915
Doesnt that rack get noisy in a home?
>>
>>58008660
Not that anon but for 1U cisco switches with blowers, theyre actually pretty quiet. 1U ASAs can be too if you replace the fans. I'm guessing the routers arent horrible since they have 60-80mm fans
>>
>>58008660
the rack doesn't get noisy

but the fucking Catalyst 3550 sounds like a damn hurricane even an hour after it boots up
>>
>>58008865
>but the fucking Catalyst 3550 sounds like a damn hurricane even an hour after it boots up
it shouldn't. my 3560g and 3750e are both quiet, and yours uses the same fan. if you run "sh env fan" does it say your fan is ok?
>>
why are you still using ipv4 on the inside of your network?
>>
>>58008891
just run "sh env all" and post it here to see what the temperature thresholds are at
>>
>>58007709
I didn't mean internet traffic. I meant how every communication between devices in my home passes through the ISP provided router. I'd rather only traffic exiting my network pass through my ISP.
>>
>>58008911
>between devices in my home passes through the ISP provided router.
then buy a switch you tard
>>
File: Untitled2.png (51KB, 1600x858px) Image search: [Google]
Untitled2.png
51KB, 1600x858px
>>58008900
>>58008891
it seems to be fine
>>
>>58005843
wndr3400v3.
>>
>>58009001
meh, guess it doesnt have temp sensors? if you get a 3560g or 3750e they are pretty quiet.
>>
what's a reasonable AC router right now?

im looking to get one.
>>
Ubiquiti UniFi is the Apple of networking (and I mean that in the good ways). It's got a nice UI (does what I need it to do), solid hardware (nice metal and solid plastic work), still has core features (not that I really need to touch it much). It's a little overkill for the home, but it satisfies my needs well.

I'm much happier with this than shitbox consumer crap that breaks constantly, and even over price enterprise shit you have to be paid for to upkeep.
>>
>>58007847
>he fell for the edgerouter meme

>>58009996
>solid hardware (nice metal and solid plastic work)
>>
>>58010417
oh dear, someone needs to learn how to imply properly.

hashtag implying implications!

Follow me on Instagram!
>>
>>58004179
>Reminder Ubiquity is the windows
Having some small experience with both Windows and Ubiquiti I can say that Ubiquiti isn'r Windows.
It's more like Mac in that it works out of the box and is hard to mess up. Just do what the instructions say to do and it just works.
>>
File: 1293937849366.png (102KB, 320x320px) Image search: [Google]
1293937849366.png
102KB, 320x320px
>>58004179
/rape/
>>
>>58005179
>theyre both consumer grade shitboxes
Are you stupid?

Ubiqity makes the best accesspoints in existens.
Basically plug and forget.
>>
>>58005214
>It's saying my WAN port is my LAN 1 port; everything is shifted over one.
That's a problem that exists on nearly ALL floss router os, it doesn't change the functionality.
>>
>>58005761
>if you cant setup a router from a vanilla bsd/debian install using iptables and vim
>HURR DURR I'm so fuckin special
Guess what, I like a web gui to tell me what the fuck fucked up the exact moment it did fuck up and an enterprise support to go along with that.
Not everyone is a poorfag whose work time costs shit nothing.
>>
>>58007828
>Wanting complexiti over stability
That's why everyone else in your network hates you.
>>
>>58007640
>A fun project buy literally kys if you're using that in a production environment.
A good sentence. Sad that you had to ruin it by mentioning you use a mac unironically.
>>
>>58005744
>pfsense on sg-2220
>>58005777
>your router is overpriced
Guess what, I use 1000€ server hardware for a pfsense installation.
>>
>>58004179
We use bintec routers for our small offices and ipsec connections, pfsense installations in our 2 central offices as a gateway to the internet, we have some mikrotik sxt antennas for a longrange wireless implementation and now have begun switching our radius controlled openwrt tplink boxes to a unifi ap-ac pro setup with central wireless management.

Does anyone know if that unifi central router is worth it?
>>
>>58004179
I just have a RT-AC68U. What the hell are you guys doing?
>>
>>58010812
not buying asus shitboxes
>>
what's an affordable router with a SFP slot that can handle 1Gbps?
>>
>>58010824
>shitboxes
What makes this a shitbox?
>>
>>58010851
it will break soon after warranty ends. t: former asus router owner
>>
>>58010858
I got it when it came out in 2014, and it's almost 2017. Nice try.
>>
>>58010851
>What makes this a shitbox?
It is overpriced as fuck for consumer grade functionality. It is basically the iphone of routers.
You can get a professionally router for the same amount of money.
>>
>>58010851
>What makes this a shitbox?
>HURR DURR WORLDWIDE FASTEST WIFI WITH 1900 MBITSORS
That line alone in the ads should make you realize it is for tech illiterate consumer fucks.
>>
>>58005761
I prefer OpenBSDs pf ( book of pf is neat if you want to setup it from the CLI)

>>58007640
We have Linux boxen at work as routers, moving from Cisco to Cumulus because it's better and open
>>
>>58007915
There is GNS3 that saved you lots of money
>>
Is there any meaningful difference in performance between ac68u and r7000?
>>
>>58005179
Ran a 2 mw data center on vyatta.
>>
Hey guys I was wondering what I could do to get wires internet in another room of my house without snaking a 100ft Ethernet. There was a modem and router in there once but then it was moved to a more central location. Could I just get another modem and plug it in where the old one was?
>>
>>58010992
GNS3 doesn't have switch emulation.
>>
>>58005838
>less than 1W router transmission
>distinuishable from AWGN at airplane height
> what inverse square law

1/10 for making me reply
>>
>>58005744
bruh
>>
>using pfSense instead of OPNsense
FULL PLEB
>>
>>58010660
>enterprise support to go along with that.
it isnt enterprise class

https://www.pfsense.org/get-support/support-faq.html
>no mention of the term SLA

>>58010837
pretty much any nonshitbox layer 3 switch made in the past 10+ years, or do you need NAT

>>58012126
ok, thats brocade, not microtik/ubiquity

>>58012147
a wireless bridge, you can usually get a pair of cisco aironet 1141/1142s for $10 each on ebay
>>
>>58012284
>HURR DURR A FORK
Yeah, no.
>>
>>58012673
pfSense is a fork itself, though.
>>
>>58005744
>(also recently released arm hardware/support).
where? is it the "netgate adi" thing?
>>
>>58012566
Would a wireless bridge be consistently good enough to game on?
>>
>>58013155
Define good enough. Right now i get 3ms pings (Cisco also responds to pings at a low priority on their devices) to my firewall with the following path

Laptop -> WiFi AP -> L3 Switch -> WiFi Bridge -> WiFi Bridge -> Firewall
>>
>>58010837
Mikrotik hex PoE
>>
>>58012147
>Hey guys I was wondering what I could do to get wires internet in another room of my house without snaking a 100ft Ethernet.
Cheap TP link powerlan connectors should do the job.
>>
so, what good consumer purchase can you guys recommend around 100€?
I want gb speed and decent wireless no memes like usb ports for stuff that I'll never use
and ofc a firmware that allows me to open ports :\
>>
Anyone have resources for setting up a 1900 series with a vdsl insert card?
>>
>Ubuntu router gets nearly half the speed vs a Windows router

Why?
>>
>>58016024
Linux network stack is shit
Windows network stack is based on a (free?)BSD version and BSDs have great network stacks
>>
are there any routers/access points to buy for home use that

(1) don't suck dick

(2) can have a wifi option as well

ps: I know my way around a linux system but my networking skills are mostly shit.

the pfsense hardware looks cool but there's no details on wireless and I have no idea what access points I'd pair it with.
>>
>>58004179

Is it worth buying my own modem instead of using the one provided by my ISP?

I'm with Cox on a 100mbps line, and I get my advertised speeds using their modem and my own router.

There are 3 users in my household and we all do a lot of high bandwidth stuff. Sometimes someones P2P will fuck with another persons latency or something, is this a hardware issue or just a limitation of my connection?
>>
>>58017865
>I'm with Cox on a 100mbps line, and I get my advertised speeds using their modem and my own router.

>Is it worth buying my own modem instead of using the one provided by my ISP?

no

>There are 3 users in my household and we all do a lot of high bandwidth stuff. Sometimes someones P2P will fuck with another persons latency or something, is this a hardware issue or just a limitation of my connection?

Implement traffic shapping
>>
File: C8aj3v4.png (44KB, 966x389px) Image search: [Google]
C8aj3v4.png
44KB, 966x389px
Who /gargoyle/ here?
>>
File: fed.png (34KB, 298x279px) Image search: [Google]
fed.png
34KB, 298x279px
>>58018307
Nice uptime.
>>
>>58018307
i use gargoyle

really easy QoS setup compared to vanilla OpenWRT
>>
is there a way to have custom host files on a host basis? Is this generally a good practice?
>>
>>58004179
so planning on upping my router game by buying a new router and putting openwrt on it - with openwrt is a network wide vpn a thing? could I make all my networks traffic go through a vpn? my vpn provider offers openvpn
>>
I'm trying to get an R6400 compromised in my virtual network. I'm having trouble finding the malicious link that escalates privileges.
>>
File: thisIS10InBongoland.png (823KB, 902x720px) Image search: [Google]
thisIS10InBongoland.png
823KB, 902x720px
>>58004179
I would like to buy some cheap router and install openwrt/tomato on it. (30-40$).


I would like to analyze my network traffic for fishy traffic. I would not be interested in data itself, just in the ip address and type of protocol.

For example.
If script/program would find that something on my network is connecting some server in poo country with tor/ssh protocol it would send my mail warning etc.

Is it possible to do on the fly if I am the only user? (Only traffic would by my pc and phone).

Are there any open source programs for this that are already written?
>>
>>58019249
I am pretty sure that even cheap stock software allows you to set up all your traffic through vpn
>>
>>58016580
Sure but Linux is used a lot in enterprise, never saw a Windows router in my life.
>>
>>58019814
>never saw a Windows router in my life.
I use RRAS
>>
>>58019781
mine doesn't, can't change dns or anything defaut routers a locked down POS
>>
>>58004179
>We talk about rape

You fuckers actually started talking about the other things mentioned. 4chan is dead.
>>
>>58021626
What did he mean by this?
>>
File: apu2c4.png (1MB, 800x1200px) Image search: [Google]
apu2c4.png
1MB, 800x1200px
Why not build your own combination security appliance/router with the apu2c4?
>>
i live a bit far away (130m or so) from my AP and the signal is not that good.
anyone here had experience making a cantenna? do i need to know soldering or shit like that to do a custom antenna and amplify the signal ?
>>
>>58005761
>if you cant setup a router from a vanilla bsd/debian install using iptables and vim, you don't belong in this thread
pointless time wasting wankery.

That's how I learned to network, and it is not superior to pfsense.
>>
>>58013155
it always depends on your RF environment, we can't make that judgement.
>>
>>58004179
Relevant question: What's the FCC maximum output power you can have on a 2.4GHz WAP in dBm? And if they catch you going over it somehow, how much do they care?

At my work we use these antennas that are mostly built to be long range wireless bridges, though they do have a WAP mode. Best fucking WAPs you can get, they're retardedly strong. They go up to 29 dBm, and every other WAP I've ever seen stops at 27. Is that the limit?
>>
File: DoingFuckAll.png (109KB, 885x847px) Image search: [Google]
DoingFuckAll.png
109KB, 885x847px
Router:
bullshit provided box & pic related.

AP:

5ghz: Prosoft RLX2-IHNF-W

2.4ghz: cisco 1220

Switch:

Nortel baystack 5510 meme switch.
>>
File: scr.png (29KB, 433x539px) Image search: [Google]
scr.png
29KB, 433x539px
Mikrotik. OldSchool Routerboard 450G.
>>
>>58022599
30dbm (1 watt) would be the limit coming out of it, but then the antenna brings it up higher.
>>
>>58022599
>how much do they care?
I don't think anyone gives a fuck.
>>
>>58022639
>bad blocks
>1.5%

>firmware
>1.5 years old
>>
My country is shit and blocked my access to 4chan by using transparentDNS from my ISP side.
I can bypass it by editing windows host file..

Is there similar way I can do this using my Mikrotik routerOS?
I tried using adding the host file address to RouterOS Static DNS result nothing.
Forwarding port 53 in NAT also not working anymore.

Please help.
>>
>>58022683
It's serving 4 of my neighbors and myself. I can't really dick around with it. 175days ago there was a 1min power outage, before that, it was more than 200days of uptime.

If shit works, I don't touch it.
>>
>>58022725
I was talking shit about how it uses shitty flash that wears out easily and they either dont offer software updates anymore you cant be bothered to install them

>If shit works, I don't touch it.
so you dont care about security updates is what youre saying
>>
>>58022723
First, try to DST-NAT all UDP 53 ports to 8.8.8.8. If that doesn't work, your port 53 may be intercepted by your ISP.

If that doesn't work, try DST-NAT UDP 53 to UDP 5353 of OpenDNS.

If that doesn't work, use Mikrotik's IP as your local DNS server and use the "static" feature to add your IP addresses.

>>58022764
They no longer use shitty flash but SPI flash instead of NAND. It's tinier, but it lasts longer and is more stable.

>and they either dont offer software updates anymore you cant be bothered to install them

Nigga, most RB devices are supported for years and years.

>so you dont care about security updates is what youre saying
I'm subscribed to the mikrotik newsletter.
There haven't been any exploits regarding mikrotik at all in the recent years. They have a great track record.
>>
>Ubiquiti UniFi AP AC Long Range
is this good for 100 yurodollars?
any better/cheaper alternatives with long range and 300+mbps?
>>
File: Capture.png (7KB, 366x336px) Image search: [Google]
Capture.png
7KB, 366x336px
>>58022798
>all UDP 53 ports to 8.8.8.8. If that doesn't work, your port 53 may be intercepted by your ISP.
It is, it was working months ago but I heard they already bypass that too now.
>DST-NAT UDP 53 to UDP 5353 of OpenDNS.
Not working, tried most other ports and other DNS addresses.
>use Mikrotik's IP as your local DNS server and use the "static" feature to add your IP addresses.
I used my mikrotik gateway as my DNS at my windows PC TCP/IP setting, then I add 4chan IP to static DNS.
Its still got redirected by the blocking filter.

What I can't get it is why is it working with only a simple solution of adding 4chan address to windows hosts file.
>>
>>58022891
>I used my mikrotik gateway as my DNS at my windows PC TCP/IP setting, then I add 4chan IP to static DNS.
Its still got redirected by the blocking filter.

You need to add www.4chan.org and all other crap, though.
Also, clear your DNS cache.

If I were you, I'd just get some free PPTP VPN and use it solely for DNS traffic.
>>
I want to build a home lab for practicing for the CCNA. Where can I go to get IOS updates without dealing with Cisco's bullshit?
>>
>>58022940

I did add all 4chan related links to said IP and its still not working.
I'm just curious where did I do wrong since its working perfectly by editing the windows hosts file.

Maybe because the windows host file works behind the server like some kind transparent proxy?
>>
>>58022988
What does nslookup say?
Have you cleared your cache with ipconfig /flushdns and net stop dnscache and net start dnscache?
>>
tfw fell for the edgerouter meme two years ago. It is working great on CL fiber plugged directly into the ONT. Just picked up a Zyxel 1900-16, anyone have any experience with them?
>>
>>58022798
>They no longer use shitty flash but SPI flash instead of NAND.
SPI and NAND are completely different things, SPI is a bus.

>There haven't been any exploits regarding mikrotik at all in the recent years. They have a great track record.
No it just means you havent been paying attention or they dont give a shit and dont issue them. Its runs linux, there are shit tons of security updates just for the kernel.
>>
>>58022975
googling the images, how retarded are you?
>>
>>58023121
>No it just means you havent been paying attention
Okay, point out some exploits, please.
>>
>>58005179
Ubiquiti is a known GPL violator.
>>
>>58005179
You've obviously never used a Ubiquity. That shit is easy as fuck.
>>
>>58023150
what is the linux kernel version youre running
>>
>>58023180
>That shit is easy as fuck.
hence one of the reasons why it is a consumer grade shitbox. even the tards on /g/ can figure it out
>>
>>58023191
It works for my clients. I make a really good margin on it, too. I certainly am not complaining.
>>
>>58023013

Oh shit its finally works.
The problem somehow fixed when I disable one of my ISP, I used two ISP method for my routers.
Where all ports for HTTP. HTTPS and streaming goes to one ISP and other ports that excluded goes to another ISP with better latency but lower bandwidth.
All of them where forwarded using mangle port forwarding.

Turning one of them off somehow fixed the Static DNS solution.
>>
>>58023185
4.4.0
Mikrotik 6.0 ran on 3.3.5
>>
>>58023220
>4.4.0
Your linux kernel isnt 4.4.0 you retard, that was released on January 10th 2016, the build date for your OS is May 27th 2015.
>>
File: 1443921711508.jpg (12KB, 200x182px) Image search: [Google]
1443921711508.jpg
12KB, 200x182px
>>58010606
>>
>>58023220
so to summarize youre so retarded you cant even figure out what version of the linux kernel youre running yet you think you're up to date on security patches, top kek
>>
My ISP provides a service where i can connect to almost every AP of other clients (using WPA2-Enterprise - AES) with my email as login and a unchangeable password they gave me, for up to 20 gigs a month.
Is this safe at all? looks like anyone connected could easily get my email with wireshark or anything like that.
>>
>>58022511
I thought it was slow shit?
>>
hello
is the Cisco C870 completely hackerproof ?
>>
>>58007463
Tomato isn't much fun, ghetto it up all proper with OpenWrt or LEDE if you're in it for that
>>
>>58004179
>ethernet
Not quite the right thread but I'm gonna be working on some IOT device using an ESP8266 (i've decided I want that).
Anyone know which one would be best to dev on?
I don't need much more than 2 GPIO and power really, so the ESP01 is fine but i've heard it's not the best to dev on.
>>
Maybe you /g/uys can help me. I am looking for a cheap router wich I can install tomato on. It must be able to provide 100/100 Mbit/sek internet speed, and be able to handle many devices simultaneously. Any advice?
>>
>>58004179
OpenWRT/Padavan/Mikrotik APs because they are cheap as hell and I can do VLANs on them with custom firmware. I recently got a 1200ac router from Xiaomi for 27$ shipped. I'm not rich enough to spend 200$ Ubiquiti APs.
Some cheapo managed switches. 2x 16 port and 1x 8 port.
Mikrotik for firewall. May put Pfsense on edge for firewall blocklist.
>>
>>58023250
>>58023398
I was referring to my Ubuntu box: 4.4.0-51-generic #72-Ubuntu SMP Thu Nov 24 18:29:54 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

Mikrotik 6.0 and later run on 3.3.5 and subsequent versions have security patches applied from later Linux kernel versions.

>yet you think you're up to date on security patches
You can't run custom applications on the Mikrotik OS. Any local security issues you may find are unexploitable. Most features of the Linux kernel are stripped off. Find me a remote exploit.
>>
File: X10SDV-TP8F_spec.jpg (30KB, 261x222px) Image search: [Google]
X10SDV-TP8F_spec.jpg
30KB, 261x222px
Name me a better alternative to this board
X10SDV-2C-TP8F
>sips power
>two cores/four threads, powerful enough to run Snort with at least 300Mbps bandwidth
>has two 10Gbps NICs built into the SoC
>6 1Gbps ports
>two expansion slots for more NICs
>mSATA and M.2 support for SSD caching
Only downside is that there are no USB3.0 ports on the board itself, only on the rear I/O
>>
File: image (2).jpg (79KB, 416x629px) Image search: [Google]
image (2).jpg
79KB, 416x629px
name a good cheap managed switch with at least 4 poe ports. pro tip, you can't.
>>
>>58012673
it's a superior fork

pfsense is old and the developers are money hungry idiots
>>
>>58005838
Fun times
>>
I want an ADSL/4g modem that has 1eth port, no wifi, no features, but fast and stable. The shitty one I have is slow and overheats all the time
>>
>Acess point
>>
File: reddit.jpg (87KB, 600x400px) Image search: [Google]
reddit.jpg
87KB, 600x400px
>>58027407
>enhance
>>
>>58022872
please respond
>>
>>58026967
>3.3.5
11 pages of security vulnerabilities you retard. You really think one of the most widely deployed software packages wouldnt have any vulnerabilities discovered in it for 4 years?

http://www.securityfocus.com/cgi-bin/index.cgi?o=0&l=30&c=12&op=display_list&vendor=Linux&version=3.3.5&title=kernel&CVE=

>You can't run custom applications on the Mikrotik OS.
You can, you just inject them in to the initramfs you tard.
>>
>>58010618
all access points are shitboxes
cable or bust
>>
File: circles.png (68KB, 1454x1616px) Image search: [Google]
circles.png
68KB, 1454x1616px
>>58007847
every day of the year i hope for a decent networking general and every day it is just another consumer grade shitflinging battle.

doesn't anybody on /g/ actually work?
>>
Should I enable igmp snooping?

I Googled it but I still don't know what it does.
>>
>>58029604

It peers into layer3 multicast packets (i.e. IGMP joins and leaves) and therefore can glean what actual attached stations are interested in a given multicast stream. Without this - mcast is delivered the same as broadcast in a given VLAN.
>>
>>58029635
Do I enable or disable it for gaymen?
>>
>>58010618
>Ubiqity makes the best accesspoints in existens.
They dont have features like Cisco CleanAir. All they have is AirMagic which just tells you where there is interference, they dont automatically change channels. Keep on larping that your shitbox is enterprise class.

>>58029663
If you dont know what multicast is then you're not using it.
>>
>>58029663

It's not really going to affect your gaming at all.

If you had IPTV for example (delivered via multicast) - it would make sense.
>>
/r/ing wireless cards compatible with pfsense, so I can build my own nsa-free router.
>>
>>58029709
jesus christ you're retarded
>>
File: Fidgeting KyoAni.png (391KB, 800x480px) Image search: [Google]
Fidgeting KyoAni.png
391KB, 800x480px
I don't know shit about networking. I'd like to buy a router that has good openWRT support or maybe even an expensive pfsense router.
>>
>>58029586
Not everyone is in-tune with networking you faggot, instead of complaining why dont you post a paste bin with helpful video for people to understand networking better.
>>
>>58031349
>please hold my hand for me /g/
>>
>>58031401
>being a bitch about quality of a thread,further reduces it quality by being a bitch,instead of elevating the quality with so called knowledge that makes the thread look low quality
>>
>>58031424
i wasnt that anon, im the one laughing at all the microtik/ubiquti fags in this thread with their shitty hardware.
>>
>>58004179
>Mikrotik is linux
>broken openvpn
>no shadowsocks
>Mikrotik is linux
Kek.
There is only two good router os/firmwares - EdgeOS/Vyatta and OpenWRT.
>>
Might as well ask here.
I am not tech-illiterate, but I did not convience myself into reading some stuff regarding the subject yet, so:

If I use a public wifi spot with which I connect to some VPN, is the traffic from my laptop to wifi spot encrypted so no MiTM possible, or bullshit? If bullshit, how to encrypt it on the laptop-wifi part?
>>
Ubiquiti VS Zyxel


>NWA1123-AC]
https://www.amazon.com/ZyXEL-802-11ac-Multifunction-Ceiling-Mount-NWA1123-AC/dp/B00I0F0I8Q

>AP AC Lite

https://www.amazon.com/Ubiquiti-Unifi-Ap-AC-Lite-UAPACLITEUS/dp/B015PR20GY
>>
>>58034328

Depending on how the wifi is set up - you could still get MitM'ed. But that's one of the reason's you are running a VPN...

If someone were to arp-spoof you and the gateway - they can intercept all your traffic. Assuming your VPN itself is using good crypto practices (certificate that you know the fingerprint for, etc) - the MitM attacker would also have to 'emulate' the VPN somehow to see inside your tunnel. All this depends on what protocols the VPN are (i.e. IPSEC, OpenVPN, TLS/SSL).
>>
Is there any way to remove the Verizon router if I still want TV to work?

I'd drop it in a heartbeat if this was possible.
>>
File: arm.png (53KB, 637x768px) Image search: [Google]
arm.png
53KB, 637x768px
>>58007640

>They have an arm-based device for ~$150 (kek) that can handle a ~300Mb WAN

The mikrotik 3011 we use to run entire residential buildings can easily handle 2Gbps throughput, I have yet to find a need for an SFP+ module

I'm considering one for the my house
>>
>>58027002

Netonix, nigga
>>
>>58007640
>CPU w/AES-NI

wow you got a modern cpu

everything you listed is lackluster
>>
so how are those web interfaces for routers written? how do they run with so little resources?

i wanted to write one for pf in openbsd but parsing GET strings was too hard in the only language i know
>>
>>58032982

link that shit unifi shill
>>
>>58029586
The only people who work here are programmers
>>
>>58038018
>implying programmers are even on here

we a sub board of /v/, were we act like we know shit about computers and argue about synthetic benchmarks,and new release of cpu,and gpu related shit
>>
>>58038909
cheap pfsense were?
>>
>>58023158
your point being?
>>
>>58040884
They steal my shit and sell it for a profit contributing nothing in return. This is the IT equivalent to a hobo taking your wallet then spitting you in the face. I don't do business with people like that.
>>
File: linksys-li-WRT1200AC-1.jpg (72KB, 600x317px) Image search: [Google]
linksys-li-WRT1200AC-1.jpg
72KB, 600x317px
What about WRT1200AC?
>>
>>58029709
Buy an access point. You can't build a better AP yourself using a wireless card.
>>
>>58045038
>WRT1200AC
There is cheaper routers with gbit ethernet and 802.11ac.
Yep, it have fast cpu which is useless for a router but it is still too slow for a nas (e.g. it cant fully saturate gbit link) or vpn server (can barely do 80mbit/s). For 120-150$ you will be better off getting an 802.11ac access point point with some core2duo-era server.
>>
>>58045527
How about TP-Link Archer C7 with OpenWRT?
I just want something that won't clog up when I'm torrenting.
>>
>>58045550
>TP-Link Archer C7
If you do not have 2+ laptops with ac adapters you can go with cheaper Archer C2.
Or you can wait a bit for GL-MT750. It will come with OpenWRT out of the box.
https://wiki.openwrt.org/toh/gl-inet/gl-mt750
>>
if i wanted to learn more about this how would i go about doing it?
i'm at uni and i'm sure there's a class on it, any keywords i should look for?
>>
>>58046118
CCNA.
>>
>>58036304
Those devices usually run a tiny HTTP server (lighttpd and such). They are Linux/BSD based after all, so a little webserver isn't that hard to make. Serving static web pages doesn't take much resources.

For parts that need dynamic stuff, it's usually done client-side using JavaScript. Some of them might embed a PHP/etc. interpreter, but I'm not entirely sure about that.
>>
>>58046118
>>58046414
>CCNA
Not necessarily but a Information Networking and Routing.
>>
>>58046053
C2 is not supported by OpenWRT.
>>
File: lT8CQJGx.jpg (7KB, 400x400px) Image search: [Google]
lT8CQJGx.jpg
7KB, 400x400px
Ask a SonicWALL CSSA/CSSP network engineer anything. About 2 years working with them on the daily.
>>
>>58046053
If you're still here. What about Archer C5? It's basically C7 with lower 5GHz throughput (only 2 antennas) and costs 25% less.
>>
File: 1470019395527.jpg (43KB, 460x460px) Image search: [Google]
1470019395527.jpg
43KB, 460x460px
I am getting mixed info about the WRT54GL. Can this deliver 100 Mbit/s internet speed?
>>
>>58047755
nope
>>
>>58047755
Why would you ever buy a 10+ year out AP/router?
>>
What kinda hardware would you guys recommend for beaming a home network & internet connection to a next-door neighbour's house? (Houses are about 20 ft apart with nothing obstructing a direct line of site.) From what I understand, I can accomplish this with a wireless bridge.. but to be totally honest the whole idea confuses me. My plan is to install two Access Points and one wired connection for the neighbors. I already have an ethernet switch. I also have a modest budget ($200-$300). Any advice?
>>
>>58048335
I recommend a cable. CAT6a would do fine. Add a switch and a AP in the other house.
>>
>>58047755
Nope, its even right in the name 54G means 54Mbits/s on 802.11G. Linksys recently released a successor to this router called the WRT1200AC, which can do, you guessed it, 1200Mbit/s on 802.11AC
>>
>>58049726
I'm using a 6 yr old ISP supplied router/modem combo.
Should I get an ASUS Modem/Router combo?
The UI looks neat, reviews say range is good, what else do I need?
Throughout the years I've tried TP-Link, Belkin, Linksys, all let me down and I always revert back to ISP one sure it restarts it self every few hours but atleast I don't get drop outs like the others.
>>
>>58049812
no, get a separate AP and router. prioritize what you need first, if you're chasing better internet get a mikrotik if you have cash, or build one and run vyos. for the AP you cannot go wrong with unfis, literally nothing can compete but asus and linksys still make decent consumer devices.

>>58046661
hows it feel knowing a 20 yo cisco device has a better CLI than current gen sonicmemes?
Thread posts: 234
Thread images: 32


[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y] [Search | Top | Home]

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible.
Read more on this topic here - https://archived.moe/talk/thread/1694/


If you need a post removed click on it's [Report] button and follow the instruction.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com.
If you like this website please support us by donating with Bitcoins at 16mKtbZiwW52BLkibtCr8jUg2KVUMTxVQ5
All trademarks and copyrights on this page are owned by their respective parties.
Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
This is a 4chan archive - all of the content originated from that site.
This means that RandomArchive shows their content, archived.
If you need information for a Poster - contact them.