Tuesday, October 23, 2018

Accessing CCTV camera on a dynamic IP

My DVR is connected to the router via an Ethernet cable. However, my ISP does not provide a static IP and blocks all ports

I purchased a VPN service that gives me a static IP. However I am still unable to connect to the DVR. My VPN provider has tried to “force connect” the DVR to VPN using PPTP I am still unable to bypass the blocked ports.

I have an OpenWRT router.

This image illustrates the configuration i have.

I have a raspberry pi that I can use as a device to remotely port my DVR.

ALSO, I am horrible with networking and have absolutely no knowledge so please help me out. I have wasted so much time on this.

Thank you so much.



Synology docker - two containers don't see each other - default network bridge

Hi all !

This is my first post so right now it is a big welcome for your all great community :)

From couple of days I'm looking for any hints for my problem:

I have Synology DS716+ and of course installed Docker. When I tested basic behavior in this environment I found something that I don't undestand.

I created two test containers exactly like in this place:

https://docs.docker.com/v17.09/engine/userguide/networking/#the-default-bridge-network

$ docker run -itd --name=container1 busybox $ docker run -itd --name=container2 busybox 

I don't specify network so it is default network bridge. There I have:

$ sudo docker network inspect bridge [ { "Name": "bridge", "Id": "626ea4d1f79a25c848e3d499363352bdc688384f145dbe5d9e7bc2e7f31b84df", "Created": "2018-10-23T14:02:32.711835262+02:00", "Scope": "local", "Driver": "bridge", "EnableIPv6": false, "IPAM": { "Driver": "default", "Options": null, "Config": [ { "Subnet": "172.17.0.0/16", "Gateway": "172.17.0.1" } ] }, "Internal": false, "Attachable": false, "Ingress": false, "Containers": { "6e118603b221486ff2a2b8584451e436c59501d1549ae943dea5dda5469c5c3f": { "Name": "container2", "EndpointID": "87924511839ac2347a9be4d87f6cc9071033f1d10301a96a998fecd5a882a300", "MacAddress": "02:42:ac:11:00:03", "IPv4Address": "172.17.0.3/16", "IPv6Address": "" }, "b8f0bce0ab48932e1011f4502687ea7078011c541db7f44e631f7d5e3c14ad0d": { "Name": "container1", "EndpointID": "1b1acf3307eb888017d252763a3e6f099dd92eeb12eb0da6b8d067dd1aed8270", "MacAddress": "02:42:ac:11:00:02", "IPv4Address": "172.17.0.2/16", "IPv6Address": "" } }, "Options": { "com.docker.network.bridge.default_bridge": "true", "com.docker.network.bridge.enable_icc": "true", "com.docker.network.bridge.enable_ip_masquerade": "true", "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0", "com.docker.network.bridge.name": "docker0", "com.docker.network.driver.mtu": "1500" }, "Labels": {} } ] 

Two container connected to the same interface bridge. Then I type:

$ sudo docker attach container1 / # ping -w 3 172.17.0.3 PING 172.17.0.3 (172.17.0.3): 56 data bytes --- 172.17.0.3 ping statistics --- 4 packets transmitted, 0 packets received, 100% packet loss 

​

I should see when container2 can respond to container1 ping command. But no ! Command

/ # ping -c 3 google.com 

either don't work :(

​

I next created user-defined networks and tring all this in the same way but still no luck.

I have no idea where I made fault.

Maybe someone could help for begginer ?



LFN and site to site VPNs

so we have 2 DCs with a large distance between them. currently we have 2 5gb L2 DCI circuits between them, with riverbeds in place to help with the issue of LFN where they can, and some windowing tuning where they can not.

im curious, does the same problem of LFN come into play with site to site VPN tunnels? if we were to say create a backup IPSEC tunnel between our DCs over our internet connections, would it still be an issue, or would the fact the encapsulated packets are not traveling across a 60ms+ L2 segment but rather many shorter segments, mean is not an issue.



Cisco Nexus 5K secondary IP in the same subnet

I cant seem to find out if a secondary IP can be in the same subnet as the main IP. I know it sounds strange, I have a change coming down in a few weeks that involves me changing the primary IP on a vlan interface, but the current IP is being used by all other servers on this site to route to a witness server. My plan is to acdd a secondary IP, change the static route statements on all the servers to point to this new IP and then when I do my change in a few weeks hopefully all our VM's wont reboot over the stretch cluster.



GNS3 VM Help

When I choose the IOS option and enter the loop back address (127.0.0.1) and use the port 3080 it throws an error saying “the target machine actively refused it”. I disabled my firewall as well as antivirus, but of no use.

Please help me in bypassing this error.

Thanks in advance.



How to create a basic ACL on HP switch so that Guest VLAN can't talk to other VLANs?

What's the basics for creating a small ACL to block the guest network from talking to any other VLANS on site? Hopefully this isn't an overly complicated answer but I suspect it might be



Cisco FTD blocking and flagging Microsoft CRL as Malware?

Anyone else seeing this? https://imgur.com/pwWQEEJ

The CRL seems legitimate, http://crl.microsoft.com/pki/crl/products/WinPCA.crl

Seems like a risk to be blocking this traffic.

​

​

​



What do you think of the security level for this networking architecture ?

(local network 1)----eth0----[Firewall]----(DMZ " demilitarized zone ") ---eth1---[Firewall]---- ---- -----|internet|



Anyone have a good way to automatically poll the network speed and latency from remote network segments?

Here's the situation: I have a guest internet VLAN on my network connected to a random DSL link through an ASA. It is logically separated from our production network and its monitoring tools. Some clients on this network have requested proof that their internet connection is working over time, in the form of regular ping tests to certain internet hosts and download speed tests at regular intervals. Does anyone have any idea how I could get something like that?

We use Solarwinds for our production network, but I haven't found any evidence that their agents could report metrics like I need, especially not when there's no direct connection to the polling server.



Trunks and Tagged/Untagged

What is the difference between Types of Trunk Ports in Cisco versus Aruba? On Cisco you have Trunk ports with Allowed VLANs. On Aruba you have Tagged/Untagged Ports? What is the difference? Does it relate to the Native VLAN?

​

Edit - My core Layer 3 switch is a HP 2620-24-PoEP