<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>This is a bit odd though. I'm matching on the first 3 octets of a vendor so that when I boot these devices they only get a range. I've booted over 1000 on my network. I never have more than a few running at a time. Right now I have 3.</div><div><br data-mce-bogus="1"></div><div>The one thing about a web interface doing all that work is that I can look at its output (iptables-save, tc show, etc) to learn.</div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div> class "D300" {<br>#match if binary-to-ascii(16,8,":",substring(hardware,0,3)) = "00:E0:C5";<br> match if substring(hardware,1,3) = 00:E0:C5;<br> }<br><br> pool {<br> range 192.168.1.60 192.168.1.70;<br> option domain-name-servers 4.2.2.1, 192.168.1.254;<br> option routers 192.168.1.254;<br> option broadcast-address 192.168.1.255;<br> default-lease-time 86400 ;<br> max-lease-time 86400;<br> allow members of "D300" ;<br> }<br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>From: </b>"James Taylor" <james.taylor@eastcobbgroup.com><br><b>To: </b>"Atlanta Linux Enthusiasts" <ale@ale.org><br><b>Sent: </b>Sunday, May 22, 2016 6:45:54 PM<br><b>Subject: </b>Re: [ale] Complex QoS rules on network reorg.<br></blockquote></div><div data-marker="__QUOTED_TEXT__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">If you are not completely set up open source, the Sophos home license would cover that for free.<br>Download the vm and boot into configuration.<br>Very nice web interface with anything you would need to do for you network, including vlans and QoS and VPN.<br><br>https://www.sophos.com/en-us/products/free-tools/sophos-utm-home-edition.aspx<br><br>-jt<br><br>> On May 22, 2016, at 6:29 PM, Chris Fowler <cfowler@outpostsentinel.com> wrote:<br>> <br>> Wife ordered Xfinity business at 50/10. This is given me an opportunity to rebuild my network. I have daughters 13 and 11. Every one, but me, complains about "streaming movies". They are also out in a week and for my SSH sanity I need to lock everyone down.<br>> <br>> Here are my thoughts.<br>> <br>> 1. DHCP provides address by MAC not much in a pool.<br>> <br>> 2. 192.168.1.0/24 is subdivided into subnets. <br>> 2.1. "Enterprise". Servers, my desktop, services, etc.<br>> 2.2. Entertainment. XboxOne, WiiU, etc.<br>> 2.3. Each daughter gets their own cut of the 192.168.1.0/24.<br>> <br>> 3. SSH needs TOP BILLING. I type fast. Followed by OpenVPN and Vtun. All that will happen within 2.1, but SSH needs to defeat all Netflix<br>> <br>> I've just received a Ubiquiti AP. This Is just an AP. It will be the only AP. I'll use my own cable modem and then Linux will route between the private and the public.<br>> <br>> Purpose of 2.3. is so that when punishment occurs we'll simply degrade service (I'm evil) or block their sub. I'll have a web page the wife can log into to dish it out.<br>> <br>> I'm going to install squid to proxy for 2.3 and take the SSL as well.<br>> <br>> When they are out of school my SSH sessions go downhill fast. <br>> <br>> I can do much of this, but I don't have much experience with the complex QoS rules. Should I start with a CentOS 7 install or a firewall distro?<br>> <br>> Chris<br>> <br>> <br>> <br>> <br>> <br>> _______________________________________________<br>> Ale mailing list<br>> Ale@ale.org<br>> http://mail.ale.org/mailman/listinfo/ale<br>> See JOBS, ANNOUNCE and SCHOOLS lists at<br>> http://mail.ale.org/mailman/listinfo<br><br><br>_______________________________________________<br>Ale mailing list<br>Ale@ale.org<br>http://mail.ale.org/mailman/listinfo/ale<br>See JOBS, ANNOUNCE and SCHOOLS lists at<br>http://mail.ale.org/mailman/listinfo<br></blockquote></div></div></body></html>