• Breaking News

    [Android][timeline][#f39c12]

    Sunday, April 3, 2022

    Finding the source of cyclical 2.4ghz interference? Networking

    Finding the source of cyclical 2.4ghz interference? Networking


    Finding the source of cyclical 2.4ghz interference?

    Posted: 03 Apr 2022 07:53 AM PDT

    Hey guys,

    Hoping someone smarter than me can lead me in the proper direction because I have a problem that is really blowing up on me and I'm really having a difficult time trying to get an answer for my management.

    Here are the facts of the case here:

    • It's a hospital environment and I don't have much control over various devices that might and can put out RF interference.

    • The devices that are being affected are 2.4ghz only. They are EKG machines (with the shitty silex serial bridges) and honeywell label printers. They are unable to use 5ghz unfortunately.

    • We are running cisco 9800-80 controllers, but the problem remains if I move the APs to another controller, so we have narrowed it down to the airspace.

    • The devices will sometimes get into a RUN state, but will often fail to associate in two SPECIFIC areas. If they're in these two areas (same controller, site tags etc everywhere), they will fail, but if we move them down the hallway into another unit, they connect immediately. This is currently an issue in two areas that are 7 floors away from each other. We know it's not a DHCP, 8021X or controller issue. It looks to almost certainly be an airspace issue.

    • When the devices do get connected in the affected areas, we often see the noise floor at greater than -60dB. We've placed the devices right under an AP and had them fail to connect completely. At times, the SNR is 4-6dB.

    Here's what I've done:

    • Walked the area with an AirCheck and saw non-802.11 interference. The device detected it as a microwave oven. I thought that maybe it was a bad microwave, and the break rooms have microwaves but I see this detection all over, even in the places where the connections are fine. I unplugged some of the microwaves and the problem still occurs.

    • I looked at the auto-rf information from the APs and see it detecting microwave ovens in the controller.

    • The interference is broadband across the 2.4ghz spectrum and seems to be a duty cycle.

    • I scanned the air with an ekahau sidekick and can see the broadband waves. However when I did a passive survey, I do not see the interference or the noise floor on the survey.

    I'm kind of lost. I'm pretty good at RADIUS and thought I was alright at wifi, but I'm not sure how to find the source of this interference. I don't know if I just don't have the proper tools or if I'm just not using the tools I have correctly. Any help would be greatly appreciated.

    Thanks.

    submitted by /u/arhombus
    [link] [comments]

    Is there software that does what Fluke does on a hand held

    Posted: 03 Apr 2022 01:51 AM PDT

    Looking for something I can plugin my laptop to a switch and tell me what VLAN its set to, is there software that does this..

    submitted by /u/freeufc
    [link] [comments]

    Cat6 drain wire missing?

    Posted: 03 Apr 2022 09:33 AM PDT

    So, about 400ft in to a 1000ft roll of CableMatters shielded Cat6, I noticed the drain wire in the shielded layer is missing (I apologize if that's not the correct term). I was able to bend the foil back and tape it with copper tape and it's testing fine for now, but it's tacky as hell. Is it normal for the drain wire to be missing or did I get a defective roll of wire?

    submitted by /u/vcrtech
    [link] [comments]

    SaaS and VPC Peering

    Posted: 03 Apr 2022 05:27 AM PDT

    Hi All, I've seen many SaaS vendors offer VPC peering and the ability to deploy custom VPC/subnet.

    I wonder how do they avoid CIDR collision or routing when the customer can basically define anything they want? From my research static NAT would work, but not at the scale.

    Thanks in advance

    submitted by /u/blackpotoftea
    [link] [comments]

    VPN Connection between Meraki mesh and Fortigate.

    Posted: 03 Apr 2022 06:32 AM PDT

    A client of ours has an existing Meraki Mesh network containing 3 VPNs in 3 different states. They have purchased a new company in a 4th state but wanted to use the existing FortiGate firewall to create the VPN connection. I have successfully connected it to one of the hubs but I can't seem to get the other routes to transverse the VPN. I have tried adding multiple phase 2's on the Fortinet, multiple VPNs to each of the hubs, creating address groups, and attaching to the routes going over the VPN with no luck. Any ideas?

    submitted by /u/sh4d0w1021
    [link] [comments]

    For those that have rolled out Dot1x for wired environments. How did it go?

    Posted: 03 Apr 2022 07:57 AM PDT

    I'm currently in the design phase of rolling out Dot1x for a medium sized environment. Going to be using Cisco ISE and will convert the smaller of the ~30 sites first as they only have a handful of switches. I have concerns which I'm hoping the community here can shed some light on. What did you do for printers and such that don't support dot1x? Looking at using MAB for printers and other devices that do not support dot1x but is there a better way? Also what did you do for BYODs and IoT devices?

    submitted by /u/Privacy__ThrowAway
    [link] [comments]

    Camera Vendor Using 100.x.y.z?

    Posted: 02 Apr 2022 07:56 AM PDT

    Ran across a camera vendor that had their wireless cameras connecting to Wi-Fi that was handing out 100.x.x.x IPs

    I guess it technically won't hurt anything because it gets natt'd to a routable Public wan and no public service resides behind 100 since it's for CGNAT.

    Anyone seen something similar?

    submitted by /u/FuckBruceArians
    [link] [comments]

    Over 100 meters CAT6 for APs

    Posted: 02 Apr 2022 03:03 PM PDT

    Hello,

    What are the consequences of having AP's connected to PoE switches over 100 meters?

    We just upgraded our switches to Meraki PoE switches and I noticed that some of the AP's were connected as repeaters instead of regular AP's.

    I started to troubleshoot with the help of the Meraki dashboard tools and noticed that these AP's were at 130 meters away. I also noticed that the switchports were giving a very low amount of power but no MAC addresses were being learned.

    Before the switch upgrade, I would see all the AP's as "regular" AP's and not repeaters but they were connected via PoE injectors. Could that make a difference?

    They were also complaining in the last couple weeks that they had issues with the Wi-Fi outside (same area where these 130meters AP's are connected). That was before the switch upgrade.

    Could all these problems be related to the cable runs being too long?

    It's weird because the AP's have been working fine since the installation about 1 year ago.

    Thanks

    submitted by /u/Jubacho
    [link] [comments]

    Methods to measure packet loss / service degradation across our internet providers

    Posted: 02 Apr 2022 05:43 AM PDT

    Our enterprise uses 4 circuits by 4 different providers in order to access the internet. All critical and non-critical internet traffic uses this infrastructure, so availability and performance is a must. There are times that packet loss / jitter is detected to certain internet destinations, or bigger internet "domains". For example, it could be only to national destinations, or only to international destinations, only to a specific provider, etc. Of course, this degradation is usually introduced on a specific circuit/provider and not all of them at the same time.

    Our load balancing mechanism (balances only outgoing traffic) assigns IP address pairs (by hashing src and dst IP addresses, unless I override it with a static route) to a specific circuit between providers A, B, C, D. So that means that if there is a specific communication from a local source IP to a specific internet destination, the next hop will always be a specific circuit/provider. And that introduces problems when there is some significant packet loss, jitter or general degradation of the packet flow from a specific provider.

    We want to investigate a solution, free or paid, that could:

    A) Monitor various/multiple destinations from inside our network (outgoing monitoring), per provider, assess them, produce a score for the latency, jitter and other parameters, and detect potentially problematic destination "domains" (autonomous systems, providers, countries, cloud or CDN ecosystems etc.) The monitored destinations ideally should be managed by the vendor that offers the solution itself, in order to be always available and produce accurate measurements.

    B) Monitor our internet posture from the opposite side, the internet (incoming monitoring), from various parts of the world, per provider, and produce a score for the same parameters as in A.

    C) (optional) provide a way for outgoing traffic steering, if there is detected degradation in 1 or more providers, per destination "domain" (perhaps like some SD-WAN capable routers would do).

    Do you know of any such providers/vendors or any other infrastructure we could build to achieve the above?

    submitted by /u/eliasbats
    [link] [comments]

    40Gb - heat consideration, copper vs fiber?

    Posted: 02 Apr 2022 10:56 AM PDT

    Hello dear Engineers,
    I've started googling and making a research on Ethernet Media `Types and one thing made me curious.

    Is it true, that due to the "more power draw/requirements" for fiber connections, there might be possibility to over-heat the neighbouring ports? Again, stumbled upon this on internet, so taking it with grain of salt. I've been always a fan of going fiber everywhere (where applied), but do not have much of a experience with working with servers, where this problem is allegedly possible to inherit.

    I've asked couple of my friends and although some of them worked on 40Gigs links, it was always fiber connection. Did anyone of you, had issues with overheating fibres, in your work career?

    Regards

    submitted by /u/qajteq
    [link] [comments]

    Wireless Bandwidth for Event

    Posted: 02 Apr 2022 01:52 PM PDT

    Need help determining the amount of bandwidth required for an upcoming event.

    The event will have three areas- Area 1, 2 and Foyer/Breakout Area.

    can you help me determine the recommended amount of bandwidth i should have in each area?

    Area 1: 350 people- Video conferences (20 laptops set up for video calls ), general web browsing, emails and social media.

    Area 2: 170 people - Video conferences (20 laptops set up for video calls ), general web browsing, emails and social media.

    Foyer/Breakout Area: general web browsing, emails and social media.

    The options i have are:

    VLAN WIFI SSID per area

    VLAN WIFI SSID per areas (different bandwith)

    Thank you.

    submitted by /u/Ok-Indication5582
    [link] [comments]

    BGP over GRE - Bird 1.6.8 on ubuntu not connecting to each other

    Posted: 02 Apr 2022 08:03 AM PDT

    Situation: I would like to use my IP addresses at a provider that doesn't provide BGP sessions, I have a server at an exchange nearby though that peers with other exchange members via route servers and peers with Hurricane electric directly.

    What I have done: I have set up a GRE tunnel which is up and you can ping across it, configured bird to connect via internal AS numbers.

    What doesnt work: The 2 bird daemons get stuck at "connect" and never establish a connection.

    I can see via TCPDump that bird is sending the packets out via the tunnel interface but neither side ever respond to each other. Both sides have routes to each other.

    Guys that have done this before please let me know the best way to troubleshoot this/fix it or if you have any other solutions please let me know.

    submitted by /u/Smishplays
    [link] [comments]

    Port Forwarding on ASA 9.x?

    Posted: 02 Apr 2022 12:38 PM PDT

    Hi all,

    I have a web server in a network that I'm trying to open up to the internet on an ASA 5516-X running ASA 9.14. Here's what I have configured:

    My outside interface:interface GigabitEthernet1/1

    nameif outside

    security-level 0

    ip address dhcp setroute

    My inside interface:

    interface GigabitEthernet1/2

    nameif inside

    security-level 100

    ip address 192.168.50.1 255.255.255.0

    Web server object group:

    object-group network webserver

    network-object host 192.168.50.2

    access-list:

    access-list outside_in extended permit tcp any4 object-group webserver eq www

    access-list outside_in extended deny ip any4 any4

    Access group:

    access-group outside_in in interface outside

    NAT rule

    object network obj_any

    nat (inside,outside) dynamic interface

    I believe I need to add a NAT rule, but every guide I follow online appears to use a different version of ASA, so none of the commands work. Can anyone tell me what command I need to add to get port 80 opened? When I do a port scan from the internet, it shows port 80 being closed.

    submitted by /u/Difficult-Square-623
    [link] [comments]

    Cisco 1010 Addresses overlap with existing localpool range

    Posted: 02 Apr 2022 11:58 AM PDT

    I've run into a situation with a router where I have the configuration error shown in the title but I can only find a reference to the offending network in the device's CLI using show ip local pool. I'm sure this network is unneeded but I'm unfamiliar with Cisco. Which command do I need to remove RAVPN_Subnet-192.168.20.0-24 from my device?

    submitted by /u/redaphex
    [link] [comments]

    Short twinax cables

    Posted: 02 Apr 2022 07:09 AM PDT

    Any suggestions on who might sell 0.25 or 0.5m 10G<>40G octopus twinax cables? Don't care about coding. Don't ask why, custom purpose. 1m is easy, shorter ones seem much less common to impossible. And yes I get that physical constraints get problematic at some point. Willing to pay to have one made if it gets the job done.

    submitted by /u/rebacos
    [link] [comments]

    Retrieving wireless card statistics (snr, fer, etc.) and set data rate, bw, etc. in real time.

    Posted: 02 Apr 2022 05:23 AM PDT

    Hello, First of all i apologize if this is not the proper place for a post like this one.

    If so, I was wondering if you could guide me towards any community (subreddit or discord) that is better suited for this type of questions

    I am considering doing a phd on the field of Wi-Fi Link optimization... and despite knowing several commands that give me this type of information (iw, iwconfig) and the known Rate Adaptation algorithm Minstrel and Minstrel-HT, which outputs a table with these statistics every 100ms...

    I am looking for something more lower level for more reliable and up to date information, as well as more efficient. I was looking into the ath9k (9, 10 or 11) wireless driver and also the mac80211 implemented in linux. I believe this is the right path. But i do not know much of C or how Kernel Drivers work... or how i am supposed to interact with them.

    Basically i would like to have a user space program, interacting with this low level features, but i lack the know how to do so.

    Do you recommend any books/sources that address this? https://www.kernel.org/doc/html/v4.9/80211/mac80211.html lacks a bit of context in my opinion.

    submitted by /u/trueRukyr
    [link] [comments]

    SRX100 ping host with inet option works but doesn't work without .

    Posted: 01 Apr 2022 11:08 PM PDT

    This has been driving me nuts.

    Internet works through the SRX100. I can ping any IP from CLI that are supposed to respond. But I can't ping host names from CLI if I use the standard

    ping google.com 

    command.

    However. If I use

    ping inet google.com 

    it works.

    When it doesn't work it says

    PING6(56=40+8+8 bytes) :: --> 2607:f8b0:4009:81a::200e ping: sendmsg: No route to host ping6: wrote google.com 16 chars, ret=-1 ping: sendmsg: No route to host ping6: wrote google.com 16 chars, ret=-1 ping: sendmsg: No route to host ping6: wrote google.com 16 chars, ret=-1 

    From what I think is happening is the default ping is using ipv6 since 2607:f8b0:4009:81a::200e is an the IPv6 address which I assume is for google.com

    Is this standard behavior?

    or is there a setting to change that will default it to use inet instead of inet6?

    Thanks!

    submitted by /u/cive666
    [link] [comments]

    (Juniper) IRB on VPLS and VRF

    Posted: 02 Apr 2022 04:57 AM PDT

    Hi, i have a MPLS network with 5 MX480, and we are trying to extend to a new site with a L2 switch (fs brand).

    Im having troubles setting up the management, the way im doing it now:

    VPLS on the mx facing a subif with vlan 1040 (fs switch has a vlan if ip with same subnet) and routing-interface irb.1040 with a /31 on the mx.

    Im able to reach the FS from the MX with no issues, and i share that /31 to my other MXs over our management vrf, but for some reason i cant reach the FS IP from any other MX even if they have the route to it.

    What im missing here?

    submitted by /u/ChrisLamaq
    [link] [comments]

    Mesh Network Recommendations

    Posted: 02 Apr 2022 04:54 AM PDT

    Looking to implement a mesh wifi network at an office and considering using Watchguard APs as thats the current router and infrastructure in their other offices at other buildings. Havent before so I'm unsure if that's the best route. Was hoping to find a vendor that is set and forget to some extent. Looking for recommendations. Will likely need 3 or 4 APs.

    submitted by /u/readyg0
    [link] [comments]

    No comments:

    Post a Comment

    Fashion

    Beauty

    Travel