Rizvanrp

Yeah, my Unifi Dlink router got fried also. I just got free replacement yesterday. The Unifi people said mayb the router get too HOT. (But its 24 hours in the aircond room, I just wonder why, maybe the quality not vy good).

You can wire a single NIC into a layer 2 switch

run the Internet VLAN + your home LAN (192.168.x.x/24) over it

So your saying simply plugin the fiber modem to the spare pc which have 2 ethernet port. One for the modem, and the other to main pc i am using. And the routing will automatically magically work    ?? anything to configure.

Keep in mind my networking knowledge is as far as port forwarding the ports for torrent and some applications, thats about it  The instructions provided too general, most of which i don't how to do 
Whats a layer 2 switch ??? How to configure this ?
How to configure this ?

Haha, Yeah Moogle, Rizvanrp is Networking Guru here. He helped me a lot. I am interested to know too.

JetWay JATOM-GM1-330-LF Intel Atom 330 (flex ATX with 2 PCI and 1 PCIE):
http://detonator.dynamitedata.com/cgi-bin/...N82E16813153144

Intel PWLA8391GT 10/ 100/ 1000Mbps PCI PRO/1000 GT Desktop Adapter
http://detonator.dynamitedata.com/cgi-bin/...N82E16833106121

ASUS PCE-N13 IEEE 802.11b/g/n PCI Express Wireless Adapter Up to 300Mbps
http://detonator.dynamitedata.com/cgi-bin/...N82E16833320048

D-Link DGS-2205 10/100/1000Mbps 5-Port Green Technology Desktop Switch
http://detonator.dynamitedata.com/cgi-bin/...N82E16833127083

Rosewill R379-M Black/ Silver 0.8mm SGCC Steel Slim MicroATX Computer Case with ATX12V Flex 300W Power Supply
http://detonator.dynamitedata.com/cgi-bin/...N82E16811147098

Source:
http://www.overclock.net/networking-securi...erver-atom.html

pfSense is a FreeBSD-based firewall tailored for use as a firewall and router. The project started in 2004 as a fork of the m0n0wall  project, but focused towards full PC installations rather than the embedded hardware focus of m0n0wall.

Common Deployments

Although mainly deployed as a perimeter firewall, pfSense is versatile enough to fill many types of deployments. Here is a short list of common deployments:

    * Perimeter Firewall - As discused earlier, this is by far the most common deployment for pfSense.
    * Router - Due to the ability to load balance connections and provide failover capabilities, pfSense makes for an ideal choice for a DIY Router for the SMB market.
    * Wireless Access Point - With the ability of Captive Portal within it, pfSense can easily be deployed as a wireless hotspot solution.
    * Special purpose appliance - Some users have decided to utilize pfSense in a unique way to help fulfill their unique needs.
          o VPN Appliance
          o Sniffer Appliance
          o Dedicated DHCP server
          o Dedicated DNS server


Features

pfSense includes almost all the features of expensive commercial firewalls, and more in many cases. Here is a list of features taken from the pfSense Features page.

    * Firewall
    * State Table
    * NAT
    * Redundancy
          o CARP - CARP from OpenBSD allows for hardware failover. Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active. pfSense also includes configuration synchronization capabilities, so you make your configuration changes on the primary and they automatically synchronize to the secondary firewall.
          o pfsync - pfsync ensures the firewall's state table is replicated to all failover configured firewalls. This means your existing connections will be maintained in the case of failure, which is important to prevent network disruptions.
    * Outbound and Inbound Load Balancing
    * VPN - IPsec, OpenVPN, PPTP
    * PPPoE Server
    * RRD Graphs Reporting
    * Real Time Information - Using AJAX
    * Dynamic DNS
    * Captive portal
    * DHCP Server and Relay
    * Live CD Version Available


Minimum Hardware Requirements

The following outlines the minimum hardware requirements for pfSense 1.2. Note the minimum requirements are not suitable for all environments, see the Hardware Sizing Guidance page for information.

CPU - 100 MHz Pentium
RAM - 128 MB


Source:
http://en.wikipedia.org/wiki/PfSense

Most important part of the new setup will be to turn off all the routing features on the Linksys router.  You need it to be in AP only mode.  You can still use it as your switch, but I would suggest getting a gigabit switch.  Either way, never plug anything into the WAN port of the Linksys box.  pfSense will now act as your DHCP and caching DNS server, so if you have any special configs on the Linksys be sure to program them into your pfSense.  Same goes for port forwarding, etc.  The only thing the Linksys will do from now on will be to act as an Access Point.

Install pfsense with LAN and WAN, just follow the onscreen instructions.  Make sure you can access the net from a normal PC client on the LAN.  If it works, then hook up your AdTran switch.  Hopefully at this point all the PCs will have internet.  Now try the wireless, you should get an IP from your new DHCP range on the pfSense.

Yeah, I agree. Normal user not familiar about this Vlan thingy. I bought the Vlan capable router Linksys RVS4000 but still not successful. Hahaha.. too complicated.

Eh by layer 2 switch I'm referring to the standard 'dumb' switch you can buy for <RM40 (5 port). Not the expensive one with IP routing/smart switch. Basically the PC you plug into that switch will handle all the Unifi routing and VLAN bridging for you.

@nitewish

FTP with port forwarding is not so straight forward.. read http://homepage.mac.com/car1son/static_por...d_ftp_xtra.html

I've always had issues with FTP servers over NAT-ed connections due to this.

---

Regarding my earlier 'dumb' switch + 1 NIC setup :



Each line represents a single Cat5 cable (except the red one).

This is what I'm using at home now. Because the Fiberhome trunks VLAN 500 + 600 together and doesn't use non-VLAN traffic at all, you can combine the VLAN 500 + normal network traffic over the same physical wire. This means you can use 1 NIC alone to support Internet connectivity and 2 NICs will give you Internet + IPTV.

Also.. just visited 76radius and checked out his Unifi setup. You can only use the Cisco RVS4000 as a VLAN <-> Physical port bridge. This means if you have an RVS4000 you can set it up to allow you to use any router with your Unifi regardless of whether it supports VLAN tagging on the WAN port or not. This is pretty wasteful as the RVS4000 is a full fledged IPS + router but due to its inability to support VLAN tagging on the Internet port, it can only be used as a VLAN bridge ... and it costs RM600 locally.

As for the Buffalo Wireless N router (WHR-HP-G300N??) + dd-wrt which he had setup, the iptables FORWARD-ing rules which its dd-wrt firmware uses by default are totally screwed up and will mess with your PPPoE over VLAN-WAN connection. If you're using dd-wrt on this router, you have to run 'iptables -F FORWARD' as a cron job/startup script to get it to work. If you don't do this, it randomly resets TCP connections and drops a lot of packets for some reason. Other than that, its an "okay" budget dd-wrt router replacement for Unifi's DIR-615.

Hi guys, I am interested to apply for the Unifi, but not sure which package to go for.
I would like to get the 10Mbps package but i have a question, is there a different on speed to overseas server (other than local Malaysia Based server) with the 5Mbps package ? I remember i read somewhere that the speed to overseas server range from a few hundred KB to around 2 Mbps only, if that is the case then subscribing to the 10Mbps seems to be not so worth it, since the faster speed is only for connection to local server. I also remember reading somewhere on this topic that Unifi is giving 1 month free, is it true ? Thanks in advance.

Hi guys, I am interested to apply for the Unifi, but not sure which package to go for.
I would like to get the 10Mbps package but i have a question, is there a different on speed to overseas server (other than local Malaysia Based server) with the 5Mbps package ? I remember i read somewhere that the speed to overseas server range from a few hundred KB to around 2 Mbps only, if that is the case then subscribing to the 10Mbps seems to be not so worth it, since the faster speed is only for connection to local server. I also remember reading somewhere on this topic that Unifi is giving 1 month free, is it true ? Thanks in advance.

ps : Just to ask you guys for your personal opinion, should i apply for unifi now (any problem ? like i remember when i apply for streamyx when it first came out, it was hell... and TM was simply charging me ridiculous amount when i subscribed to RM 88 package) or should i wait ? (i am staying in subang and am currently covered, so not a problem with coverage area)

THANKS Rizvanrp. You are really networking Guru.

I can smile like never before now. Hehe. Your work was funtastic.        , will throw my ciplang Dlink DIR 615 :-P

If you have more than one device on your network, you probably have a switch. A switch is a simple device that operates at Layer 2 of the OSI model, forwarding data frames from one device to another based on their hardware or MAC (Media Access Control) address. The basic Layer 2 switch does not care or know about IP addresses, which operate at Layer 3.

Your switch may be a few ports built into your router, it may be a small unmanaged (non-configurable) switch such as the D-Link DGS-2205

An unmanaged switch  can support VLAN  tagging to do prioritization but it doesn't support  dividing ports on separate VLANs.

Any trunking protocol supposes that switches on both sides are aware of it and run it.

The DGS-2205 and DGS-1005D are the same unit, they just have different color housing and different model numbers.

The board and chipset are the same in both units.

Auto MDI/MDI-X crossover on all ports eliminates the need for crossover cables or uplink ports recognition. Auto-negotiation on each port senses the link speed of a network device (either 10, 100, or 1000 Mbps) and intelligently adjusts itself for optimal performance. 

Is it that using your diagram, the internet traffic travels from modem to switch (but doesn't go to pc1-2-3 yet), then goes to router (traffic has to go through the router Nat) before it then goes back to switch and the traffic goes to p1-2-3. Is that how it works ?

Well, I really shouldn't have said 'layer 2' switch because all switches are layer 2 switches and now you're confused ._.

5 port 10/100mbps switches only cost around RM40+ and its good enough for the job. If you have an old router with 4 LAN ports around the place, you can even use that. Basically you just need a switch, nothing special.
Yesh, that's how it works. The internet traffic from the fiberhome <-> switch <-> router PC is all on VLAN 500 so it doesn't affect any non-VLAN traffic.

And the bug with the Buffalo is probably unique to that particular dd-wrt firmware which is running on it. It's just an iptables issue so you have to set a script to flush the FORWARD-ing table. Not sure about using Tomato, never tried it before Still, the Buffalo doesn't have port based VLAN tagging either which means you can't set up IPTV on it.

1000 Mbps = 125.00 MB/s theoretical max speed.

100 Mbps = 12.50 MB/s theoretical max speed.

Originally Posted by Cytomax 
After spending a few hours reading that vlan stuff my friend just called me up with a good idea that i think ill be using...
DSl-->Switch-->Routers # 1 (WAN IP X & LAN IP 192.168.0.1/24) and Router # 2 (WAN IP Y & LAN IP 192.168.1.1/24 )

That's double NAT'ing...YUCK! The inside network suffers performance, some online apps can get quirky...plus the inside network can actually find and browse the outside network. Not visa versa though.

Port Based VLANs are wicked easy.
Take your router...plug it into port 1 on your managed switch.
Take Network A...and plug them into..say....ports 2-8. Make ports 2-8 members of VLAN1..and also make port 1 a member.
Take Network B..and plug them into say..ports 9-15..and make them VLAN2...also adding port 1 as a member of this VLAN.

Done. Network A computers cannot see Network B computers..and Network B computers cannot see Network A computers. They both share access to the router via port 1.

Todays managed switches are just as easy to log into and configure as your regular old Linksys router...through a web management interface.