steeb/home_network_notes
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update Dang networks are sure things

steeb 2024-10-29 05:56:53 -07:00
parent 1b15196d14
commit 00acfb6b93
1 changed files with 17 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
Dang-networks-are-sure-things.md

@ -26,23 +26,29 @@ The WiFi here has been pretty terrible for a while. Upgrading our internet speed
- [x] Upgrade Neatgear switch to PoE switch - [x] Upgrade Neatgear switch to PoE switch
- Datto E24v3 - Datto E24v3
- [ ] Add additional access points - [ ] Add additional access points
- EITHER: - Option 1: Re-use the ASUS APs (no PoE)
- Re-use the ASUS APs (no PoE) - Option 2: Add some Ruckus R700 APs (older, but more compatible with the stupid Pi Zeros)
- Add some Ruckus R700 APs (older, but more compatible with the stupid Pi Zeros) - This is currently implemented but kind of sucks -- can't do subnets without double-NAT (can't assign addresses from router) and can't set an IP range, meaning I can't easily restrict internet access for IoT devices
- Option 3: (Most likely) Buy a few Extreme Networks WS-AP3825i (done) APs to flash with OpenWRT and addon to the local network.
- [ ] Disable internet for 2.4GHz network - [ ] Disable internet for 2.4GHz network
- [ ] Re-run bad ethernet runs - [x] Re-run bad ethernet runs
- Bedroom:(2 ports, difficult, currently running to the library & living room - Last thing left to do here is to replace the wall jack in dorkHole with a single-jack keystone plate cover and remove the extra cable
- Library (easy, just need to shorten the runs) - Luckily, all other cables were long enough to go where they needed to go
- Livingroom (less easy, insulation - but there are already runs to attach to. - As a bonus, even ran another line to the garage for another AP
- [ ] Add new runs for the APs - [x] Add new runs for the APs
- If we stick with ASUS, I need to either also run power or find convenient places to install them - ~~If we stick with ASUS, I need to either also run power or find convenient places to install them~~
- Ruckus APs will be easier, as they are PoE powered - ~~Ruckus APs will be easier, as they are PoE powered~~
- [ ] Upgrade bedroom switch connections to 2.5Gb - New runs have been done for the library, servers, and the garage - unlikely that I'll need more at this time
- However, one more run can be theoretically run to the master bedroom to really make sure there are no deadspots in the back yard, although the current setup works just fine, frankly.
- [x] Upgrade bedroom switch connections to 2.5Gb
- There is now a 2.5Gb switch in gayCloset. Currently, only the run to the (1Gb) switch in the bedroom and the Datto PoE switch have lines to them.
# Device-specific notes # Device-specific notes
## Ruckus R700 ## Ruckus R700
**EDIT:** These will be replaced soon. The Zyxel APs not running OpenWRT are forgivable since they are at least fast, but these things honk butt, run slow, and have zero-day exploits that, while they don't effect me, have not been patched so do not invoke confidence. I've purchased 4x Extreme Networks WS-AP3825i APs which can be flashed with OpenWRT to replace them. That being said, they are still in use, so the following section remains.
These are old devices with trash webpage interfaces that use older security than TLS 1.2 (which basically means no web browsers can get to them.) In order to get around this issue, you need to first setup some old security standards for SSH, and then remote into them and disable HTTPS access and enable HTTP access. These are old devices with trash webpage interfaces that use older security than TLS 1.2 (which basically means no web browsers can get to them.) In order to get around this issue, you need to first setup some old security standards for SSH, and then remote into them and disable HTTPS access and enable HTTP access.
First, modify `~/.ssh/config` with the following First, modify `~/.ssh/config` with the following