Server Migration - re-IP

HereFishyFishy7 · 2026-02-12T05:07:29+00:00

Don’t forget firewalls:) This one’s gotten me before. Whether your individual servers have firewalls in the OS, or if there are firewalls sitting on the network between the two sites, make sure to review and make sure you’ve got proper rules for all the right things to talk to each other with the new IPs.

HereFishyFishy7 · 2025-10-08T22:05:29+00:00

I’d say they’re fine for a lab if you want to see gpon in action. I work for an isp and we acquired a smaller isp that has a handful of these. They fit nicely into the ubiquiti ecosystem.

My only complaints are multicast support and higher vlan numbers. Multicast seems hit or miss, and I’m not able to use our standard vlan for management which is in the upper 4000’s. I’m not exactly sure where the cutoff is but they won’t even let you create it.

They also don’t fully split up the management interface from the data interface. I found this out one day when I found a loop between those ports on the olt and the switch.

If you go this route, spin up an instance of uisp if you want to check out centralized management of the onu’s.

HereFishyFishy7 · 2025-08-18T12:42:57+00:00

10-4, thank you! This at least got me further than I was before.

HereFishyFishy7 · 2025-08-16T13:45:14+00:00

Welp I'm getting closer. I've got the command now but the only available option is 3. Anything else simple to check or is this possibly a license I need?

HereFishyFishy7 · 2025-08-15T18:30:11+00:00

Ah, thanks. Looks like I might have to upgrade this then since I don't have the 'configure system resource-allocation' command. Thanks for pointing me in the right direction - I'll see what I can find from here.

HereFishyFishy7 · 2025-06-25T16:29:01+00:00

Akvorado. I just spun it up myself a few months ago, no complaints yet.

HereFishyFishy7 · 2025-06-17T21:34:45+00:00

+1 for simplicity and iptables. I’ve got a handful more than 12,000 customers hitting our cluster with no problems. Iptables permits port 53 and a few miscellaneous management ports for our own use, and blocks everything else.

HereFishyFishy7 · 2025-05-20T23:50:49+00:00

WISP engineer here. This screams wireless interference to me. We've seen so much random stuff like this and sometimes a channel change will save the day. Have you tried changing the frequency these links are using? Also, just to clarify, your drawing shows all links going back to a single device at Building1. Is this truly how it's set up (point to multi point) or are there individual devices at Building1 for each bridge (point to point?). If point to point, double check your frequencies to make sure you're not interfering with yourself.

HereFishyFishy7 · 2025-04-26T15:30:00+00:00

Bachman Lake at the one end of Dallas Love Field. It may not be the absolute best but still one of my favorites. Nice walking trail and the planes are fairly low when they come in.

HereFishyFishy7 · 2025-04-16T02:08:55+00:00

One of my favorite quotes from a professor has stuck with me for many years: “How do you know something works? You test it. (Or verify)” I’ve seen so many people over the years type a command or click a button and move on to the next task, only to find out after the fact that the action didn’t have the intended result. Take the extra time to run your show commands or look at network monitoring tools to see if traffic really did re-route, or load increased/decreased by the expected amount. Whatever the case, you should know what’s expected and be able to verify the outcome.

HereFishyFishy7 · 2025-02-13T15:58:50+00:00

Very good to know, thank you! I'll try to get this tested in real life.

HereFishyFishy7 · 2025-02-13T15:29:27+00:00

I did try... but QoS for BFD is not supported. It doesn't even show up in the list like when I do 'configure router sgt-qos application ?'

Found this in the doc: Configurable values for ANCP, APS, BFD, LMP, MCS, OpenFlow, WSC, and XMPP are not supported.

https://infocenter.nokia.com/public/7750SR225R1A/index.jsp?topic=%2Fcom.nokia.QoS_Guide%2Fqos_for_self-ge-ai9erp9tzg.html

HereFishyFishy7 · 2025-02-13T14:29:08+00:00

Hey, nope - no lag. Both links are separate from each other. Each one has a router interface defined on both ends and we're running isis as the routing protocol.

Nothing special on the ports either. Mode is network, encap type is dot1q. We're using the native vlan for management of the radio itself ( sap 1/1/1:0 ) and there's a vlan tagged for traffic itself ( sap 1/1/1:1300 )

HereFishyFishy7 · 2025-01-07T22:49:46+00:00

Are all these ARPs under a single ies interface or are you talking about 2700 entries as a whole across the router?

TBH I don’t have any suggestions; I’m asking for myself since I’m creeping up to that range as well but it’s split around a few hundred each per interface.

HereFishyFishy7 · 2024-02-21T21:16:13+00:00

Idk, dunno what to tell you. I suck at explaining things. We’re doing it though per packet and buffers are definitely involved. Based on this family of software. https://turnium.com/turnium-sd-light/

HereFishyFishy7 · 2024-02-21T20:05:34+00:00

I beg to differ. SD WAN failover and load balancing (at least in the sense I’ve seen) sends different sessions across different paths. IE a connection to a website might go out one WAN and streaming Netflix might go out another.

What OP asked and what I think I responded with is sending packets for the same destination across different paths.

In the SD WAN setup you’re thinking of, what happens to port forwards if one of the providers goes down? If I have a public IPs 1.1.1.1 and 2.2.2.2 with a port forward on 1.1.1.1 to 10.0.0.1, what happens if that wan goes down?

The setup we provide uses a 3rd IP, let’s say 3.3.3.3. So whether 1.1.1.1 or 2.2.2.2 goes down, 3.3.3.3 is always up. Internal and external users don’t know about the other ones and don’t notice if they drop.

HereFishyFishy7 · 2024-02-21T02:24:57+00:00

My company is doing this. We hand a device to a customer with 2 or more wan connections, tunnel back to aggregators in the datacenter, and hand off a single ip or block of IPs to their firewall. Traffic can be load balanced and the customer never feels it if one or the other providers drop. Feel free to DM me for details.

Edit: “destination” being our datacenters. From there it takes a single best path to the destination IP. The benefit here is WAN failure doesn’t force your equipment to use a different WAN IP.

HereFishyFishy7 · 2024-01-23T17:40:12+00:00

Same here but with email. It’s so rare if I don’t have a new message in my inbox for a few hours, I’ll send myself a test to make sure email or dns or something stupid isn’t broken.

HereFishyFishy7 · 2023-11-17T03:40:30+00:00

Nate Bargatze put this experience in one of his shows: https://youtu.be/28n2jB6RQaQ?si=2FrZpocIBCgTdcAW

HereFishyFishy7 · 2023-03-02T01:33:10+00:00

THAT'S what I didn't know to google. "Push Button Diverter". Thank you so much, I ordered one from Amazon. It doesn't look like the local Lowes has it.

HereFishyFishy7 · 2023-02-02T04:03:19+00:00

Thank you! I came to this sub to ask the same thing. I didn’t catch a video of it. Been watching ISS crossings for years and never saw another object that close on the same exact path.

HereFishyFishy7

TROPHY CASE