date:20160328

[AFMUG] DKIM and incoming emails / spamassassin

2016-03-28 Thread Eric Kuhnke

If you are adding "points" via spamassassin to incoming emails that fail a DKIM check, how many points?  I'm playing around with tuning things now and have had great results by adding 1 point for no DKIM. 
One point alone won't add the spam tag, but is helpful. Something needs to have no DKIM and other qualifiers before it gets tagged.

Re: [AFMUG] door access control

2016-03-28 Thread Jeremy

Alarm.com has a module for like $35.  It integrates with their mobile apps
and browser interface as well.

On Mon, Mar 28, 2016 at 10:18 PM, Charles Boening 
wrote:

> Anyone ever used these guys?
>
> http://s2sys.com/solutions-markets/solutions/access-control-systems/
>
>
> -Original Message-
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 3:53 PM
> To: af@afmug.com
> Subject: [AFMUG] door access control
>
> I'm dying here. Every single system I can find is shit or costs an arm
> and a leg, to the point where I'm considering starting a company to
> make a better system. I just need an embedded, web based, IP access
> control system. It needs to be able to control the individual door
> access controllers to electronic striker or maglock to the keypad. POE
> here is best. If it requires software running on a windows PC then I
> don't want anything to do with it, even for those of you who are like
> "put it in a vm"... no. Those resources are reserved for properly
> functioning operation systems (and LXC containers!).
>
> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>
> If it has a mobile app, that's even better.
>
> I've installed a couple of HID Global and DoorKing systems in the past
> and nothing about this is hard, but the chinese systems are only made
> for a single location.
>
> Any suggestions?
>

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread Josh Reynolds

Procera prevented problems like this from happening.
On Mar 28, 2016 9:22 PM, "Ken Hohhof"  wrote:

> It’s not really that the AP or SM is choking, it’s that the rate limiting
> process has to throw away most of the customer’s traffic.
> Indiscriminately.  So the customer thinks his Internet has high packet loss.
>
> The only thing I can think of that I could do is modify the rate limiter
> parameters somehow, like the buffer depth or something.
>
> It just seems so strange, doesn’t Youtube upload just use HTTP or HTTPS?
> Not sure why TCP congestion control wouldn’t apply.
>
>
> *From:* Kurt Fankhauser 
> *Sent:* Monday, March 28, 2016 8:54 PM
> *To:* af@afmug.com
> *Subject:* Re: [AFMUG] Youtube upload bandwidth
>
> I ran into this issue on the download side a couple times, when you rate
> limit at the Canopy SM and twice the limit is hitting the AP the customer
> WILL COMPLAIN about extreamly slow download speeds and high latency. I
> confirmed this with one customer and its painfully slow. I had to induce
> the rate limit somewhere before the AP so that the SM wouldn't be choking
> so bad.
>
> On Mon, Mar 28, 2016 at 8:11 PM, George Skorup  wrote:
>
>> That's the way it works. SM controls the uplink, AP controls the
>> downlink. The same thing happens in reverse with streaming. Torching a
>> customer might show he's pulling 15-18Mbps download when in fact the AP is
>> limiting his downlink to 12Mbps per the configured QoS and discarding the
>> extra garbage. Because you're looking at what's happening downstream of
>> where the throttling is taking place. That's what I see all the time with
>> the streaming crap. And we use only the built-in QoS on Canopy.
>>
>> So in your situation, yes, if you set the customer's SM QoS to throttle
>> at 2Mbps sustained uplink, then you will see only 2Mbps exiting the AP's
>> ethernet interface for that customer. At least you keep that extra crap off
>> of the air. And it's not cosmetic, that's real traffic over the air. Which
>> seems totally stupid when that's not how TCP was intended to work. Sure,
>> everyone just go ahead and mangle the protocols however you want. It's like
>> the DDoS bullshit. I'm fucking tired of it. Sorry for my rant.. I'll go
>> back to my hole now.
>>
>> On 3/28/2016 6:26 PM, Ken Hohhof wrote:
>>
>> In this case the SM QoS is set to 5M up, 15M down.ï¿½ The SM is letting
>> 5M through, then the tower router is chopping it down to 2M which is the
>> plan he is on.ï¿½ I may have to set the SM limit lower.ï¿½ I donï¿½t like
>> to do that because the router rate limit is set automatically via PPPoE
>> from the RADIUS database, whereas the SM limits are set manually.
>>
>> ï¿½
>>
>> *From:* Af [mailto:af-boun...@afmug.com ] *On
>> Behalf Of *George Skorup
>> *Sent:* Monday, March 28, 2016 6:15 PM
>> *To:* af@afmug.com
>> *Subject:* Re: [AFMUG] Youtube upload bandwidth
>>
>> ï¿½
>>
>> Where is your bandwidth control? SM or MikroTik? I'm guessing upstream
>> router. If you had it on the SM, you wouldn't see the overload.
>>
>> On 3/28/2016 6:11 PM, Ken Hohhof wrote:
>>
>> I had a customer today uploading for 2 hours at way over his rate limit,
>> he says he was uploading a Youtube video.ï¿½ Anyone here familiar with the
>> Youtube upload process?ï¿½ Why was it not invoking TCP congestion control
>> and instead trying to ram 5 pounds of data through a 2 pound pipe?
>>
>> ï¿½
>>
>>
>>
>

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

I have looked at them. 1102 Grand uses them.
On Mar 28, 2016 11:18 PM, "Charles Boening"  wrote:

> Anyone ever used these guys?
>
> http://s2sys.com/solutions-markets/solutions/access-control-systems/
>
>
> -Original Message-
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 3:53 PM
> To: af@afmug.com
> Subject: [AFMUG] door access control
>
> I'm dying here. Every single system I can find is shit or costs an arm
> and a leg, to the point where I'm considering starting a company to
> make a better system. I just need an embedded, web based, IP access
> control system. It needs to be able to control the individual door
> access controllers to electronic striker or maglock to the keypad. POE
> here is best. If it requires software running on a windows PC then I
> don't want anything to do with it, even for those of you who are like
> "put it in a vm"... no. Those resources are reserved for properly
> functioning operation systems (and LXC containers!).
>
> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>
> If it has a mobile app, that's even better.
>
> I've installed a couple of HID Global and DoorKing systems in the past
> and nothing about this is hard, but the chinese systems are only made
> for a single location.
>
> Any suggestions?
>

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread George Skorup


And the CDNs don't care. They instead blame the evil ISP.

On 3/28/2016 9:22 PM, Ken Hohhof wrote:
It’s not really that the AP or SM is choking, it’s that the rate 
limiting process has to throw away most of the customer’s traffic.  
Indiscriminately.  So the customer thinks his Internet has high packet 
loss.
The only thing I can think of that I could do is modify the rate 
limiter parameters somehow, like the buffer depth or something.
It just seems so strange, doesn’t Youtube upload just use HTTP or 
HTTPS?  Not sure why TCP congestion control wouldn’t apply.

*From:* Kurt Fankhauser 
*Sent:* Monday, March 28, 2016 8:54 PM
*To:* af@afmug.com 
*Subject:* Re: [AFMUG] Youtube upload bandwidth
I ran into this issue on the download side a couple times, when you 
rate limit at the Canopy SM and twice the limit is hitting the AP the 
customer WILL COMPLAIN about extreamly slow download speeds and high 
latency. I confirmed this with one customer and its painfully slow. I 
had to induce the rate limit somewhere before the AP so that the SM 
wouldn't be choking so bad.
On Mon, Mar 28, 2016 at 8:11 PM, George Skorup > wrote:


That's the way it works. SM controls the uplink, AP controls the
downlink. The same thing happens in reverse with streaming.
Torching a customer might show he's pulling 15-18Mbps download
when in fact the AP is limiting his downlink to 12Mbps per the
configured QoS and discarding the extra garbage. Because you're
looking at what's happening downstream of where the throttling is
taking place. That's what I see all the time with the streaming
crap. And we use only the built-in QoS on Canopy.

So in your situation, yes, if you set the customer's SM QoS to
throttle at 2Mbps sustained uplink, then you will see only 2Mbps
exiting the AP's ethernet interface for that customer. At least
you keep that extra crap off of the air. And it's not cosmetic,
that's real traffic over the air. Which seems totally stupid when
that's not how TCP was intended to work. Sure, everyone just go
ahead and mangle the protocols however you want. It's like the
DDoS bullshit. I'm fucking tired of it. Sorry for my rant.. I'll
go back to my hole now.

On 3/28/2016 6:26 PM, Ken Hohhof wrote:


In this case the SM QoS is set to 5M up, 15M down.ï¿½ The SM is
letting 5M through, then the tower router is chopping it down to
2M which is the plan he is on.ï¿½ I may have to set the SM limit
lower.ï¿½ I donï¿½t like to do that because the router rate limit
is set automatically via PPPoE from the RADIUS database, whereas
the SM limits are set manually.

ï¿½

*From:*Af [mailto:af-boun...@afmug.com] *On Behalf Of *George Skorup
*Sent:* Monday, March 28, 2016 6:15 PM
*To:* af@afmug.com 
*Subject:* Re: [AFMUG] Youtube upload bandwidth

ï¿½

Where is your bandwidth control? SM or MikroTik? I'm guessing
upstream router. If you had it on the SM, you wouldn't see the
overload.

On 3/28/2016 6:11 PM, Ken Hohhof wrote:

I had a customer today uploading for 2 hours at way over his
rate limit, he says he was uploading a Youtube video.ï¿½
Anyone here familiar with the Youtube upload process?ï¿½ Why
was it not invoking TCP congestion control and instead trying
to ram 5 pounds of data through a 2 pound pipe?

ï¿½

Re: [AFMUG] PMP450 - CPEs refusing to reconnect

2016-03-28 Thread George Skorup

I was saying for over a year that something goes screwy with the 450 
APs. We had no idea what triggered it. We swapped SyncInjectors, took 
out surge suppressors, changed grounding and none of it would stop the 
insanity. I sure did notice a pattern though. Sun went down, things went 
nuts. Definitely worse in the winter. So the cold absolutely does 
exacerbate the memory issue. Aaron confirmed that. Then they could 
finally reproduce it even at room temperature. So I'm pretty sure they 
have that one figured out now. At least they can fix it with software. 
FPGA FTW.


On 3/28/2016 10:09 PM, Bill Prince wrote:
Sounds like the cold might be an issue. We have several APs on 13.4 
with 200+ days. A few have 264 days.


It never really gets "cold" here. Mid 30s is about the most extreme 
we've seen this winter.



bp


On 3/28/2016 1:02 PM, George Skorup wrote:
You'll need to reboot the AP. I'm actually really surprised that your 
AP has been running on 13.4 for 200+ days. I figured you'd have seen 
some watchdog resets.


Anyway.. we see this somewhat frequently. Sometimes we get SMs 
failing to register due to "out of range" when clearly they are 
within range. Same symptoms. They continuously try to register to the 
same AP. I suspect that they're getting through the registration 
process cleanly, but whatever is screwed up in memory on the AP 
causes the session to fail. Or never fully establish from the AP's 
perspective. So the SM never locks out the sector and attempts to 
register to another. Other weird things happen too. Reboot AP, works 
fine again. Until it screws up again. We had a ton more issues when 
it was colder outside.


Aaron posted a couple weeks ago about the FPGA memory timing problem. 
As he said, you can't predict what's going to happen when your memory 
controller and contents are potentially unstable.


On 3/28/2016 2:32 PM, Sean Heskett wrote:
in my opinion 13.2.1 and 14.2.1(Build 8) are the only "stable" 
versions for the 450APs.  14.1.2(build 8) is still beta tho.


2 cents

-sean


On Mon, Mar 28, 2016 at 11:51 AM, Chris Wright > wrote:


I have a PMP450 AP on 13.4 up for 228 days. The last successful
CPE reconnect was six days ago. Now we’re noticing that CPE’s
who disconnect are unable to reconnect to that AP at all.
Furthermore, in spite of being able to see alternate APs on
secondary color codes, the CPEs seem intent on connecting to the
problem AP. Here’s what my SM Registration Failures page looks
like currently:

Registration Failures
Statisticshttp://10.10.10.246/_min.gif?mac_esn=0a003ea081e2

Number of Registration Grant Failures :



465

Most Recent Registration Failure
Listhttp://10.10.10.246/_min.gif?mac_esn=0a003ea081e2

*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:42:45 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:40:10 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:35:09 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
10:31:26 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:23:52 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
10:23:14 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:21:49 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
10:10:46 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:02:56 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
10:01:38 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:58:21 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
09:54:27 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:51:02 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
09:49:30 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
09:40:01 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
09:27:56 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:24:59 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:23:11 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:19:03 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:13:24 PDT : Status : 20 Flag : 0

I’d rather not reboot the AP as I’m fearful it could make the
problem worse for a few dozen more

Re: [AFMUG] door access control

2016-03-28 Thread Charles Boening

Anyone ever used these guys?

http://s2sys.com/solutions-markets/solutions/access-control-systems/

-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 3:53 PM
To: af@afmug.com
Subject: [AFMUG] door access control

I'm dying here. Every single system I can find is shit or costs an arm
and a leg, to the point where I'm considering starting a company to
make a better system. I just need an embedded, web based, IP access
control system. It needs to be able to control the individual door
access controllers to electronic striker or maglock to the keypad. POE
here is best. If it requires software running on a windows PC then I
don't want anything to do with it, even for those of you who are like
"put it in a vm"... no. Those resources are reserved for properly
functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past
and nothing about this is hard, but the chinese systems are only made
for a single location.

Any suggestions?

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

That would be very different then... Very odd.
On Mar 28, 2016 10:18 PM, "Nate Burke"  wrote:

> I think so, It's been a couple years since I hooked it up.  I use mine
> with only a striker, and i remember that there were a handful of wires that
> I didn't need to hook up to anything.  The only thing going to the door is
> a Cat5.
>
> On 3/28/2016 9:46 PM, Josh Reynolds wrote:
>
>> Uh, the reader operates the striker/maglock and gets input from the
>> door position sensor?
>>
>> On Mon, Mar 28, 2016 at 9:32 PM, Nate Burke  wrote:
>>
>>> There is no controller, it stores everything in the reader.  The
>>> Software is
>>> only used for configuration, or reading the access logs off the reader.
>>>
>>> On 3/28/2016 9:08 PM, Josh Reynolds wrote:
>>>
 What about the door controller?

 On Mon, Mar 28, 2016 at 9:04 PM, Nate Burke  wrote:

> I contacted suprema, and they directed me to a local reseller.  The
> Reseller
> had no problem selling me just the xpass no questions ask. I think they
> were
> about $350.  Very easy to install and setup.
>
> On 3/28/2016 8:59 PM, Josh Reynolds wrote:
>
>> Suprema looks pretty good..
>>
>>
>>
>> https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platform/BioStar-2-Mobile
>>
>> On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson
>> 
>> wrote:
>>
>>> Your pretty much back to the windows database solution at this point.
>>>
>>> You can do this with the cheap Chinese boards in aggregate with their
>>> software.
>>>
>>> Itâ€™s not pretty, but it does what you want, multiple controllers,
>>> software
>>> with users and keys and time/scheduler etc.
>>>
>>> All for a few hundred bucks per four doors using standard keypads and
>>> locks.
>>>
>>>
>>>
>>> Otherwise, let us know if you find anything cool!
>>>
>>>
>>>
>>> Would be nice to get a better turnkey solution that wasnâ€™t based on
>>> 90â€™s
>>>
>>> interface and DB paradigm.
>>>
>>>
>>>
>>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>>> Sent: Monday, March 28, 2016 7:51 PM
>>> To: af@afmug.com
>>> Subject: Re: [AFMUG] door access control
>>>
>>>
>>>
>>> My access solution needs to have different access per user / door /
>>> time
>>> via
>>> pin and keyfob, so can't really get something too simple due to
>>> various
>>> needs, contractors, etc. :/
>>>
>>> On Mar 28, 2016 8:47 PM, "Lewis Bergman" 
>>> wrote:
>>>
>>> You will all laugh but I just put in a wink and schlage locks.  Not
>>> exactly
>>> a real security system since there is no keypad you can arm or
>>> disarm.
>>> You
>>> can only do that through the app. One of my people doesn't have a new
>>> enough
>>> smartphone for the app. It allows you to use robots which are simple
>>> if
>>> then
>>> logic.
>>> I know it isn't difficult enough for many of you but it is cheap,
>>> easy,
>>> and
>>> pretty.
>>> A nice keypad would be a good pi project to round it out though.
>>>
>>>
>>>
>>> On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds 
>>> wrote:
>>>
>>> You have a door strike. The magnetic systems can be no or nc. If you
>>> loopback 12v from the keypad back to the doorcontroller, you can
>>> often
>>> trigger a fault state that releases power to the maglock. ;)
>>>
>>> On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
>>> wrote:
>>>
>>> Iâ€™m pretty sure you could also just smash the glass and walk in
>>> too J
>>>
>>>
>>>
>>> But the door strike on mine does go back to the controller I believe,
>>> so
>>> you
>>> couldnâ€™t just jimmy the keypad wiring.
>>>
>>>
>>>
>>>
>>> Not really a high security scenario since my idea was to
>>> theoretically
>>> be
>>> able to pay $5 and enter (then walk out with anything you like I
>>> guess).
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>>> Sent: Monday, March 28, 2016 6:07 PM
>>> To: af@afmug.com
>>> Subject: Re: [AFMUG] door access control
>>>
>>>
>>>
>>> Also, pretty sure the one you have... If I remember right, I could
>>> rip
>>> the
>>> keypad off and touch brown to red to open the door based on the
>>> wiring
>>> diagram.
>>>
>>> On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
>>> wrote:
>>>
>>> I've had the same problem.
>>>
>>> The local alarm company wanted like $3-4k for a two door install,
>>>

Re: [AFMUG] door access control

2016-03-28 Thread Nate Burke

I think so, It's been a couple years since I hooked it up.  I use mine 
with only a striker, and i remember that there were a handful of wires 
that I didn't need to hook up to anything.  The only thing going to the 
door is a Cat5.


On 3/28/2016 9:46 PM, Josh Reynolds wrote:

Uh, the reader operates the striker/maglock and gets input from the
door position sensor?

On Mon, Mar 28, 2016 at 9:32 PM, Nate Burke  wrote:

There is no controller, it stores everything in the reader.  The Software is
only used for configuration, or reading the access logs off the reader.

On 3/28/2016 9:08 PM, Josh Reynolds wrote:

What about the door controller?

On Mon, Mar 28, 2016 at 9:04 PM, Nate Burke  wrote:

I contacted suprema, and they directed me to a local reseller.  The
Reseller
had no problem selling me just the xpass no questions ask. I think they
were
about $350.  Very easy to install and setup.

On 3/28/2016 8:59 PM, Josh Reynolds wrote:

Suprema looks pretty good..


https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platform/BioStar-2-Mobile

On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson

wrote:

Your pretty much back to the windows database solution at this point.

You can do this with the cheap Chinese boards in aggregate with their
software.

Itâ€™s not pretty, but it does what you want, multiple controllers,
software
with users and keys and time/scheduler etc.

All for a few hundred bucks per four doors using standard keypads and
locks.



Otherwise, let us know if you find anything cool!



Would be nice to get a better turnkey solution that wasnâ€™t based on
90â€™s

interface and DB paradigm.



From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 7:51 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control



My access solution needs to have different access per user / door /
time
via
pin and keyfob, so can't really get something too simple due to various
needs, contractors, etc. :/

On Mar 28, 2016 8:47 PM, "Lewis Bergman" 
wrote:

You will all laugh but I just put in a wink and schlage locks.  Not
exactly
a real security system since there is no keypad you can arm or disarm.
You
can only do that through the app. One of my people doesn't have a new
enough
smartphone for the app. It allows you to use robots which are simple if
then
logic.
I know it isn't difficult enough for many of you but it is cheap, easy,
and
pretty.
A nice keypad would be a good pi project to round it out though.



On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds 
wrote:

You have a door strike. The magnetic systems can be no or nc. If you
loopback 12v from the keypad back to the doorcontroller, you can often
trigger a fault state that releases power to the maglock. ;)

On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
wrote:

Iâ€™m pretty sure you could also just smash the glass and walk in too J



But the door strike on mine does go back to the controller I believe,
so
you
couldnâ€™t just jimmy the keypad wiring.




Not really a high security scenario since my idea was to theoretically
be
able to pay $5 and enter (then walk out with anything you like I
guess).











From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 6:07 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control



Also, pretty sure the one you have... If I remember right, I could rip
the
keypad off and touch brown to red to open the door based on the wiring
diagram.

On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
wrote:

I've had the same problem.

The local alarm company wanted like $3-4k for a two door install, lol!

Here is what I did so far:

I bought a controller board off of eBay that does the standard protocol
used
by the strike.
I bought the strike off ebay too.
I bought a keypad controller off eBay.
The controller came with a small locking box, and has room for a
battery
backup and can use PoE.

The whole thing cost less than $500 I think.

I used Ethernet to connect the box to my switch and to the strike and
keypad.

The controller has a simple web interface you log on to and then
add/remove
door codes.

I did have to interpret some Chinese manuals to figure out the pinouts
for
everything, but it works as expected.

What I have left to do is map the private IP of the controller to a
public
IP and firewall it.

And then I wanted to write a service/web api to it so I could use a up
to
date 'normal' API access to add/remove door codes.

Let me know if you want more details.

-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 4:53 PM
To: af@afmug.com
Subject: [AFMUG] door access control

I'm dying here. Every single system I can find is shit or costs an arm
and a
leg, to the point where I'm considering starting a company to make a

Re: [AFMUG] PMP450 - CPEs refusing to reconnect

2016-03-28 Thread Bill Prince

Sounds like the cold might be an issue. We have several APs on 13.4 with 
200+ days. A few have 264 days.


It never really gets "cold" here. Mid 30s is about the most extreme 
we've seen this winter.



bp


On 3/28/2016 1:02 PM, George Skorup wrote:
You'll need to reboot the AP. I'm actually really surprised that your 
AP has been running on 13.4 for 200+ days. I figured you'd have seen 
some watchdog resets.


Anyway.. we see this somewhat frequently. Sometimes we get SMs failing 
to register due to "out of range" when clearly they are within range. 
Same symptoms. They continuously try to register to the same AP. I 
suspect that they're getting through the registration process cleanly, 
but whatever is screwed up in memory on the AP causes the session to 
fail. Or never fully establish from the AP's perspective. So the SM 
never locks out the sector and attempts to register to another. Other 
weird things happen too. Reboot AP, works fine again. Until it screws 
up again. We had a ton more issues when it was colder outside.


Aaron posted a couple weeks ago about the FPGA memory timing problem. 
As he said, you can't predict what's going to happen when your memory 
controller and contents are potentially unstable.


On 3/28/2016 2:32 PM, Sean Heskett wrote:
in my opinion 13.2.1 and 14.2.1(Build 8) are the only "stable" 
versions for the 450APs.  14.1.2(build 8) is still beta tho.


2 cents

-sean


On Mon, Mar 28, 2016 at 11:51 AM, Chris Wright > wrote:


I have a PMP450 AP on 13.4 up for 228 days. The last successful
CPE reconnect was six days ago. Now we’re noticing that CPE’s who
disconnect are unable to reconnect to that AP at all.
Furthermore, in spite of being able to see alternate APs on
secondary color codes, the CPEs seem intent on connecting to the
problem AP. Here’s what my SM Registration Failures page looks
like currently:

Registration Failures
Statisticshttp://10.10.10.246/_min.gif?mac_esn=0a003ea081e2

Number of Registration Grant Failures :



465

Most Recent Registration Failure
Listhttp://10.10.10.246/_min.gif?mac_esn=0a003ea081e2

*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:42:45 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:40:10 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:35:09 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
10:31:26 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:23:52 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
10:23:14 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:21:49 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
10:10:46 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
10:02:56 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
10:01:38 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:58:21 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
09:54:27 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:51:02 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
09:49:30 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
09:40:01 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 :
09:27:56 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:24:59 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:23:11 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:19:03 PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 :
09:13:24 PDT : Status : 20 Flag : 0

I’d rather not reboot the AP as I’m fearful it could make the
problem worse for a few dozen more people. Anyone seen this before?

Chris Wright

Network Administrator

Velociter Wireless

209-838-1221 x115

Re: [AFMUG] Russians made a 10 Gbps radio?

2016-03-28 Thread Gino Villarini

mrsp?

On Mon, Mar 28, 2016 at 7:57 PM, Mathew Howard  wrote:

> Well, they didn't say it would work that well on Earth... how are they
> supposed to know you aren't going to be installing these links on the moon?
>
> On Mon, Mar 28, 2016 at 6:40 PM, Eric Kuhnke 
> wrote:
>
>> 12 miles is a silly claim...  Marketing department vs reality.
>>
>> It appears to be +22 Tx power into a 51dBi gain antenna, so not much
>> different than any other 80 GHz product in the link budget. Sure it'll be
>> -51 at 7km in clear rain free skies, or something like that. But the link
>> will be incredibly fragile. If you want full data rates at five nines
>> reliability statistically over a year, more like 2.5 to 3km max.
>>
>> On Mon, Mar 28, 2016 at 4:19 PM, Jaime Solorza > > wrote:
>>
>>> Wonder if Solectek will rebrand this one as well.  12 miles
>>> On Mar 28, 2016 4:42 PM, "Eric Kuhnke"  wrote:
>>>
 http://www.elva-1.com/news_events/a40107

 http://www.elva-1.com/products/a40106

 http://www.elva-1.com/data/files/Datasheets/2016_02_24_PPC-10G.pdf


 2000 MHz wide channel and 256QAM for 10 Gbps in the FDD 71-86 GHz
 bands. Question is...  What's the Rx level needed for that, and how quickly
 does it drop off with rain?



>>
>

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Uh, the reader operates the striker/maglock and gets input from the
door position sensor?

On Mon, Mar 28, 2016 at 9:32 PM, Nate Burke  wrote:
> There is no controller, it stores everything in the reader.  The Software is
> only used for configuration, or reading the access logs off the reader.
>
> On 3/28/2016 9:08 PM, Josh Reynolds wrote:
>>
>> What about the door controller?
>>
>> On Mon, Mar 28, 2016 at 9:04 PM, Nate Burke  wrote:
>>>
>>> I contacted suprema, and they directed me to a local reseller.  The
>>> Reseller
>>> had no problem selling me just the xpass no questions ask. I think they
>>> were
>>> about $350.  Very easy to install and setup.
>>>
>>> On 3/28/2016 8:59 PM, Josh Reynolds wrote:

 Suprema looks pretty good..


 https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platform/BioStar-2-Mobile

 On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson
 
 wrote:
>
> Your pretty much back to the windows database solution at this point.
>
> You can do this with the cheap Chinese boards in aggregate with their
> software.
>
> Itâ€™s not pretty, but it does what you want, multiple controllers,
> software
> with users and keys and time/scheduler etc.
>
> All for a few hundred bucks per four doors using standard keypads and
> locks.
>
>
>
> Otherwise, let us know if you find anything cool!
>
>
>
> Would be nice to get a better turnkey solution that wasnâ€™t based on
> 90â€™s
>
> interface and DB paradigm.
>
>
>
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 7:51 PM
> To: af@afmug.com
> Subject: Re: [AFMUG] door access control
>
>
>
> My access solution needs to have different access per user / door /
> time
> via
> pin and keyfob, so can't really get something too simple due to various
> needs, contractors, etc. :/
>
> On Mar 28, 2016 8:47 PM, "Lewis Bergman" 
> wrote:
>
> You will all laugh but I just put in a wink and schlage locks.  Not
> exactly
> a real security system since there is no keypad you can arm or disarm.
> You
> can only do that through the app. One of my people doesn't have a new
> enough
> smartphone for the app. It allows you to use robots which are simple if
> then
> logic.
> I know it isn't difficult enough for many of you but it is cheap, easy,
> and
> pretty.
> A nice keypad would be a good pi project to round it out though.
>
>
>
> On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds 
> wrote:
>
> You have a door strike. The magnetic systems can be no or nc. If you
> loopback 12v from the keypad back to the doorcontroller, you can often
> trigger a fault state that releases power to the maglock. ;)
>
> On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
> wrote:
>
> Iâ€™m pretty sure you could also just smash the glass and walk in too J
>
>
>
> But the door strike on mine does go back to the controller I believe,
> so
> you
> couldnâ€™t just jimmy the keypad wiring.
>
>
>
>
> Not really a high security scenario since my idea was to theoretically
> be
> able to pay $5 and enter (then walk out with anything you like I
> guess).
>
>
>
>
>
>
>
>
>
>
>
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 6:07 PM
> To: af@afmug.com
> Subject: Re: [AFMUG] door access control
>
>
>
> Also, pretty sure the one you have... If I remember right, I could rip
> the
> keypad off and touch brown to red to open the door based on the wiring
> diagram.
>
> On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
> wrote:
>
> I've had the same problem.
>
> The local alarm company wanted like $3-4k for a two door install, lol!
>
> Here is what I did so far:
>
> I bought a controller board off of eBay that does the standard protocol
> used
> by the strike.
> I bought the strike off ebay too.
> I bought a keypad controller off eBay.
> The controller came with a small locking box, and has room for a
> battery
> backup and can use PoE.
>
> The whole thing cost less than $500 I think.
>
> I used Ethernet to connect the box to my switch and to the strike and
> keypad.
>
> The controller has a simple web interface you log on to and then
> add/remove
> door codes.
>
> I did have to interpret some Chinese manuals to figure out the pinouts
> for
> everything, but it works as expected.
>
> What

Re: [AFMUG] Anyone from JAB read the list?

2016-03-28 Thread Ken Hohhof

I would say The Borg, but with a hive mind, the right hand would know what the 
left is doing, so that’s clearly not an apt comparison.

From: That One Guy /sarcasm 
Sent: Monday, March 28, 2016 7:13 PM
To: af@afmug.com 
Subject: Re: [AFMUG] Anyone from JAB read the list?

I don't know if Satan does reddit

On Mar 28, 2016 7:10 PM, "Ryan Ray"  wrote:

  Someone on Reddit is looking for some support

https://www.reddit.com/r/sysadmin/comments/4cc06o/anyone_on_jab_wireless_that_could_test_something/

  Sent while mobile

Re: [AFMUG] door access control

2016-03-28 Thread Nate Burke

There is no controller, it stores everything in the reader.  The 
Software is only used for configuration, or reading the access logs off 
the reader.


On 3/28/2016 9:08 PM, Josh Reynolds wrote:

What about the door controller?

On Mon, Mar 28, 2016 at 9:04 PM, Nate Burke  wrote:

I contacted suprema, and they directed me to a local reseller.  The Reseller
had no problem selling me just the xpass no questions ask. I think they were
about $350.  Very easy to install and setup.

On 3/28/2016 8:59 PM, Josh Reynolds wrote:

Suprema looks pretty good..

https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platform/BioStar-2-Mobile

On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson 
wrote:

Your pretty much back to the windows database solution at this point.

You can do this with the cheap Chinese boards in aggregate with their
software.

Itâ€™s not pretty, but it does what you want, multiple controllers,
software
with users and keys and time/scheduler etc.

All for a few hundred bucks per four doors using standard keypads and
locks.



Otherwise, let us know if you find anything cool!



Would be nice to get a better turnkey solution that wasnâ€™t based on 90â€™s
interface and DB paradigm.



From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 7:51 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control



My access solution needs to have different access per user / door / time
via
pin and keyfob, so can't really get something too simple due to various
needs, contractors, etc. :/

On Mar 28, 2016 8:47 PM, "Lewis Bergman"  wrote:

You will all laugh but I just put in a wink and schlage locks.  Not
exactly
a real security system since there is no keypad you can arm or disarm.
You
can only do that through the app. One of my people doesn't have a new
enough
smartphone for the app. It allows you to use robots which are simple if
then
logic.
I know it isn't difficult enough for many of you but it is cheap, easy,
and
pretty.
A nice keypad would be a good pi project to round it out though.



On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds  wrote:

You have a door strike. The magnetic systems can be no or nc. If you
loopback 12v from the keypad back to the doorcontroller, you can often
trigger a fault state that releases power to the maglock. ;)

On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
wrote:

Iâ€™m pretty sure you could also just smash the glass and walk in too J



But the door strike on mine does go back to the controller I believe, so
you
couldnâ€™t just jimmy the keypad wiring.



Not really a high security scenario since my idea was to theoretically be
able to pay $5 and enter (then walk out with anything you like I guess).











From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 6:07 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control



Also, pretty sure the one you have... If I remember right, I could rip
the
keypad off and touch brown to red to open the door based on the wiring
diagram.

On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
wrote:

I've had the same problem.

The local alarm company wanted like $3-4k for a two door install, lol!

Here is what I did so far:

I bought a controller board off of eBay that does the standard protocol
used
by the strike.
I bought the strike off ebay too.
I bought a keypad controller off eBay.
The controller came with a small locking box, and has room for a battery
backup and can use PoE.

The whole thing cost less than $500 I think.

I used Ethernet to connect the box to my switch and to the strike and
keypad.

The controller has a simple web interface you log on to and then
add/remove
door codes.

I did have to interpret some Chinese manuals to figure out the pinouts
for
everything, but it works as expected.

What I have left to do is map the private IP of the controller to a
public
IP and firewall it.

And then I wanted to write a service/web api to it so I could use a up to
date 'normal' API access to add/remove door codes.

Let me know if you want more details.

-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 4:53 PM
To: af@afmug.com
Subject: [AFMUG] door access control

I'm dying here. Every single system I can find is shit or costs an arm
and a
leg, to the point where I'm considering starting a company to make a
better
system. I just need an embedded, web based, IP access control system. It
needs to be able to control the individual door access controllers to
electronic striker or maglock to the keypad. POE here is best. If it
requires software running on a windows PC then I don't want anything to
do
with it, even for those of you who are like "put it in a vm"... no. Those
resources are reserved for properly functioning operation systems (and
LXC

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Door strikes are normally pretty universal
On Mar 28, 2016 9:27 PM, "Sterling Jacobson"  wrote:

> Yeah, this looks nice.
>
> It's a better turnkey solution, if the strike and something like the
> BioLite Net don't cost a fortune.
>
> I too need the API, so that would be nice to convert my setup to them
> (keeping the door strike since that was a major PITA to install).
>
>
>
> -Original Message-
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 8:08 PM
> To: af@afmug.com
> Subject: Re: [AFMUG] door access control
>
> What about the door controller?
>
> On Mon, Mar 28, 2016 at 9:04 PM, Nate Burke  wrote:
> > I contacted suprema, and they directed me to a local reseller.  The
> > Reseller had no problem selling me just the xpass no questions ask. I
> > think they were about $350.  Very easy to install and setup.
> >
> > On 3/28/2016 8:59 PM, Josh Reynolds wrote:
> >>
> >> Suprema looks pretty good..
> >>
> >> https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platfor
> >> m/BioStar-2-Mobile
> >>
> >> On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson
> >> 
> >> wrote:
> >>>
> >>> Your pretty much back to the windows database solution at this point.
> >>>
> >>> You can do this with the cheap Chinese boards in aggregate with
> >>> their software.
> >>>
> >>> It’s not pretty, but it does what you want, multiple controllers,
> >>> software with users and keys and time/scheduler etc.
> >>>
> >>> All for a few hundred bucks per four doors using standard keypads
> >>> and locks.
> >>>
> >>>
> >>>
> >>> Otherwise, let us know if you find anything cool!
> >>>
> >>>
> >>>
> >>> Would be nice to get a better turnkey solution that wasn’t based on
> >>> 90’s interface and DB paradigm.
> >>>
> >>>
> >>>
> >>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> >>> Sent: Monday, March 28, 2016 7:51 PM
> >>> To: af@afmug.com
> >>> Subject: Re: [AFMUG] door access control
> >>>
> >>>
> >>>
> >>> My access solution needs to have different access per user / door /
> >>> time via pin and keyfob, so can't really get something too simple
> >>> due to various needs, contractors, etc. :/
> >>>
> >>> On Mar 28, 2016 8:47 PM, "Lewis Bergman" 
> wrote:
> >>>
> >>> You will all laugh but I just put in a wink and schlage locks.  Not
> >>> exactly a real security system since there is no keypad you can arm
> >>> or disarm.
> >>> You
> >>> can only do that through the app. One of my people doesn't have a
> >>> new enough smartphone for the app. It allows you to use robots which
> >>> are simple if then logic.
> >>> I know it isn't difficult enough for many of you but it is cheap,
> >>> easy, and pretty.
> >>> A nice keypad would be a good pi project to round it out though.
> >>>
> >>>
> >>>
> >>> On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds 
> wrote:
> >>>
> >>> You have a door strike. The magnetic systems can be no or nc. If you
> >>> loopback 12v from the keypad back to the doorcontroller, you can
> >>> often trigger a fault state that releases power to the maglock. ;)
> >>>
> >>> On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
> >>> wrote:
> >>>
> >>> I’m pretty sure you could also just smash the glass and walk in too
> >>> J
> >>>
> >>>
> >>>
> >>> But the door strike on mine does go back to the controller I
> >>> believe, so you couldn’t just jimmy the keypad wiring.
> >>>
> >>>
> >>>
> >>> Not really a high security scenario since my idea was to
> >>> theoretically be able to pay $5 and enter (then walk out with anything
> you like I guess).
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> >>> Sent: Monday, March 28, 2016 6:07 PM
> >>> To: af@afmug.com
> >>> Subject: Re: [AFMUG] door access control
> >>>
> >>>
> >>>
> >>> Also, pretty sure the one you have... If I remember right, I could
> >>> rip the keypad off and touch brown to red to open the door based on
> >>> the wiring diagram.
> >>>
> >>> On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
> >>> wrote:
> >>>
> >>> I've had the same problem.
> >>>
> >>> The local alarm company wanted like $3-4k for a two door install, lol!
> >>>
> >>> Here is what I did so far:
> >>>
> >>> I bought a controller board off of eBay that does the standard
> >>> protocol used by the strike.
> >>> I bought the strike off ebay too.
> >>> I bought a keypad controller off eBay.
> >>> The controller came with a small locking box, and has room for a
> >>> battery backup and can use PoE.
> >>>
> >>> The whole thing cost less than $500 I think.
> >>>
> >>> I used Ethernet to connect the box to my switch and to the strike
> >>> and keypad.
> >>>
> >>> The controller has a simple web interface you log on to and then
> >>> add/remove door codes.
> >>>
> >>> I did have to interpret some

Re: [AFMUG] SyncPipe question

2016-03-28 Thread Forrest Christian (List Account)

I don't have a firm date yet.   I am in the process of nailing down lead
times on the enclosures and validating some final design choices.

I would guess 90ish days.  I'll be able to firm this up a bit over the next
couple of weeks.
On Mar 28, 2016 2:15 PM, "Matt"  wrote:

> What is time frame on 1u configurable sync injector?
>
>
> On Sun, Mar 27, 2016 at 1:40 PM, Forrest Christian (List Account)
>  wrote:
> > There's already one of these on the roadmap.  Unit which will sync two
> > radios.
> >
> > On Mar 27, 2016 11:37 AM, "George Skorup"  wrote:
> >>
> >> Woulda been nice. Oh well.
> >>
> >> This I think is another good example for a UGPS-like SyncPipe. Could I
> >> send a climber up to take the Parasitic pipe out and then throw on a
> >> SyncInjector at the bottom... sure. Burning a GigE SyncInjector for a 1
> AP
> >> site though.
> >>
> >> On 3/26/2016 6:42 PM, Forrest Christian (List Account) wrote:
> >>
> >> I wouldn't recommend this.   Mainly because it's going to unbalance the
> >> gigabit ethernet pairs and likely cause ethernet errors as the power
> >> consumption changes.
> >>
> >> On Mar 26, 2016 7:15 AM, "George Skorup"  wrote:
> >>>
> >>> Dumb question, probably best answered by Forrest. Say I have one of the
> >>> newer universal Parasitic SyncPipes. Newer meaning Rev G+. Universal
> meaning
> >>> you can use them on standard Canopy 30VDC POE and the stupid 320/430
> pinout,
> >>> since they tap only the two power pins that don't change. OK, so now
> say I
> >>> take a GigE injector and configure a 450 AP to negotiate 1000BaseT.
> Will
> >>> GigE work... "through" the Parasitic pipe? I know the 10/100 data
> pairs are
> >>> passed straight through. Not sure about the other two pairs. Since it
> taps
> >>> only two pins for power, I doubt there's any bonding going on.
> >>
> >>
> >
>

Re: [AFMUG] door access control

2016-03-28 Thread Sterling Jacobson

Yeah, this looks nice.

It's a better turnkey solution, if the strike and something like the BioLite 
Net don't cost a fortune.

I too need the API, so that would be nice to convert my setup to them (keeping 
the door strike since that was a major PITA to install).



-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 8:08 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control

What about the door controller?

On Mon, Mar 28, 2016 at 9:04 PM, Nate Burke  wrote:
> I contacted suprema, and they directed me to a local reseller.  The 
> Reseller had no problem selling me just the xpass no questions ask. I 
> think they were about $350.  Very easy to install and setup.
>
> On 3/28/2016 8:59 PM, Josh Reynolds wrote:
>>
>> Suprema looks pretty good..
>>
>> https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platfor
>> m/BioStar-2-Mobile
>>
>> On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson 
>> 
>> wrote:
>>>
>>> Your pretty much back to the windows database solution at this point.
>>>
>>> You can do this with the cheap Chinese boards in aggregate with 
>>> their software.
>>>
>>> It’s not pretty, but it does what you want, multiple controllers, 
>>> software with users and keys and time/scheduler etc.
>>>
>>> All for a few hundred bucks per four doors using standard keypads 
>>> and locks.
>>>
>>>
>>>
>>> Otherwise, let us know if you find anything cool!
>>>
>>>
>>>
>>> Would be nice to get a better turnkey solution that wasn’t based on 
>>> 90’s interface and DB paradigm.
>>>
>>>
>>>
>>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>>> Sent: Monday, March 28, 2016 7:51 PM
>>> To: af@afmug.com
>>> Subject: Re: [AFMUG] door access control
>>>
>>>
>>>
>>> My access solution needs to have different access per user / door / 
>>> time via pin and keyfob, so can't really get something too simple 
>>> due to various needs, contractors, etc. :/
>>>
>>> On Mar 28, 2016 8:47 PM, "Lewis Bergman"  wrote:
>>>
>>> You will all laugh but I just put in a wink and schlage locks.  Not 
>>> exactly a real security system since there is no keypad you can arm 
>>> or disarm.
>>> You
>>> can only do that through the app. One of my people doesn't have a 
>>> new enough smartphone for the app. It allows you to use robots which 
>>> are simple if then logic.
>>> I know it isn't difficult enough for many of you but it is cheap, 
>>> easy, and pretty.
>>> A nice keypad would be a good pi project to round it out though.
>>>
>>>
>>>
>>> On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds  wrote:
>>>
>>> You have a door strike. The magnetic systems can be no or nc. If you 
>>> loopback 12v from the keypad back to the doorcontroller, you can 
>>> often trigger a fault state that releases power to the maglock. ;)
>>>
>>> On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
>>> wrote:
>>>
>>> I’m pretty sure you could also just smash the glass and walk in too 
>>> J
>>>
>>>
>>>
>>> But the door strike on mine does go back to the controller I 
>>> believe, so you couldn’t just jimmy the keypad wiring.
>>>
>>>
>>>
>>> Not really a high security scenario since my idea was to 
>>> theoretically be able to pay $5 and enter (then walk out with anything you 
>>> like I guess).
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>>> Sent: Monday, March 28, 2016 6:07 PM
>>> To: af@afmug.com
>>> Subject: Re: [AFMUG] door access control
>>>
>>>
>>>
>>> Also, pretty sure the one you have... If I remember right, I could 
>>> rip the keypad off and touch brown to red to open the door based on 
>>> the wiring diagram.
>>>
>>> On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
>>> wrote:
>>>
>>> I've had the same problem.
>>>
>>> The local alarm company wanted like $3-4k for a two door install, lol!
>>>
>>> Here is what I did so far:
>>>
>>> I bought a controller board off of eBay that does the standard 
>>> protocol used by the strike.
>>> I bought the strike off ebay too.
>>> I bought a keypad controller off eBay.
>>> The controller came with a small locking box, and has room for a 
>>> battery backup and can use PoE.
>>>
>>> The whole thing cost less than $500 I think.
>>>
>>> I used Ethernet to connect the box to my switch and to the strike 
>>> and keypad.
>>>
>>> The controller has a simple web interface you log on to and then 
>>> add/remove door codes.
>>>
>>> I did have to interpret some Chinese manuals to figure out the 
>>> pinouts for everything, but it works as expected.
>>>
>>> What I have left to do is map the private IP of the controller to a 
>>> public IP and firewall it.
>>>
>>> And then I wanted to write a service/web api to it so I could use a 
>>> up to date 'normal' API access to add/remove door codes.
>>>
>>> Let me know if you want more details.
>>>
>>>

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread Ken Hohhof

It’s not really that the AP or SM is choking, it’s that the rate limiting 
process has to throw away most of the customer’s traffic.  Indiscriminately.  
So the customer thinks his Internet has high packet loss.

The only thing I can think of that I could do is modify the rate limiter 
parameters somehow, like the buffer depth or something.

It just seems so strange, doesn’t Youtube upload just use HTTP or HTTPS?  Not 
sure why TCP congestion control wouldn’t apply.


From: Kurt Fankhauser 
Sent: Monday, March 28, 2016 8:54 PM
To: af@afmug.com 
Subject: Re: [AFMUG] Youtube upload bandwidth

I ran into this issue on the download side a couple times, when you rate limit 
at the Canopy SM and twice the limit is hitting the AP the customer WILL 
COMPLAIN about extreamly slow download speeds and high latency. I confirmed 
this with one customer and its painfully slow. I had to induce the rate limit 
somewhere before the AP so that the SM wouldn't be choking so bad.

On Mon, Mar 28, 2016 at 8:11 PM, George Skorup  wrote:

  That's the way it works. SM controls the uplink, AP controls the downlink. 
The same thing happens in reverse with streaming. Torching a customer might 
show he's pulling 15-18Mbps download when in fact the AP is limiting his 
downlink to 12Mbps per the configured QoS and discarding the extra garbage. 
Because you're looking at what's happening downstream of where the throttling 
is taking place. That's what I see all the time with the streaming crap. And we 
use only the built-in QoS on Canopy.

  So in your situation, yes, if you set the customer's SM QoS to throttle at 
2Mbps sustained uplink, then you will see only 2Mbps exiting the AP's ethernet 
interface for that customer. At least you keep that extra crap off of the air. 
And it's not cosmetic, that's real traffic over the air. Which seems totally 
stupid when that's not how TCP was intended to work. Sure, everyone just go 
ahead and mangle the protocols however you want. It's like the DDoS bullshit. 
I'm fucking tired of it. Sorry for my rant.. I'll go back to my hole now.


  On 3/28/2016 6:26 PM, Ken Hohhof wrote:

In this case the SM QoS is set to 5M up, 15M down.ï¿½ The SM is letting 5M 
through, then the tower router is chopping it down to 2M which is the plan he 
is on.ï¿½ I may have to set the SM limit lower.ï¿½ I donï¿½t like to do that 
because the router rate limit is set automatically via PPPoE from the RADIUS 
database, whereas the SM limits are set manually.

ï¿½

From: Af [mailto:af-boun...@afmug.com] On Behalf Of George Skorup
Sent: Monday, March 28, 2016 6:15 PM
To: af@afmug.com
Subject: Re: [AFMUG] Youtube upload bandwidth

ï¿½

Where is your bandwidth control? SM or MikroTik? I'm guessing upstream 
router. If you had it on the SM, you wouldn't see the overload.

On 3/28/2016 6:11 PM, Ken Hohhof wrote:

  I had a customer today uploading for 2 hours at way over his rate limit, 
he says he was uploading a Youtube video.ï¿½ Anyone here familiar with the 
Youtube upload process?ï¿½ Why was it not invoking TCP congestion control and 
instead trying to ram 5 pounds of data through a 2 pound pipe?

ï¿½

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Yes, it is important to us. Rule of thumb I hate Axis, but I'll take a look.

I really like what I'm seeing with Suprema though, especially the API, etc.

On Mon, Mar 28, 2016 at 9:10 PM, Jon Auer  wrote:
> Axis A1001 is ~$500 and PoE powered. Each unit will handle 2 doors BUT
> additional A1001s link up so there's unified config/provisioning/management.
> By PoE powered I mean the controller runs off PoE, powers the strike, and
> the reader. No separate power system needed.
> The Web UI is fast, unlike the lag on HID EdgeSolo.
>
> The cool thing is that, in addition to traditional Weigand, these work with
> the new reader standard so the reader-controller link is encrypted and you
> can do mutual authentication with RF smartcards (should you care about
> that).
>
> We're using these after getting annoyed with HID VertX (and associated
> Windows-based controller) and HID EdgeSolo (not sufficiently flexible).
>
> On Mon, Mar 28, 2016 at 5:52 PM, Josh Reynolds  wrote:
>>
>> I'm dying here. Every single system I can find is shit or costs an arm
>> and a leg, to the point where I'm considering starting a company to
>> make a better system. I just need an embedded, web based, IP access
>> control system. It needs to be able to control the individual door
>> access controllers to electronic striker or maglock to the keypad. POE
>> here is best. If it requires software running on a windows PC then I
>> don't want anything to do with it, even for those of you who are like
>> "put it in a vm"... no. Those resources are reserved for properly
>> functioning operation systems (and LXC containers!).
>>
>> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>>
>> If it has a mobile app, that's even better.
>>
>> I've installed a couple of HID Global and DoorKing systems in the past
>> and nothing about this is hard, but the chinese systems are only made
>> for a single location.
>>
>> Any suggestions?
>
>

Re: [AFMUG] door access control

2016-03-28 Thread Jon Auer

Axis A1001 is ~$500 and PoE powered. Each unit will handle 2 doors BUT
additional A1001s link up so there's unified config/provisioning/management.
By PoE powered I mean the controller runs off PoE, powers the strike, and
the reader. No separate power system needed.
The Web UI is fast, unlike the lag on HID EdgeSolo.

The cool thing is that, in addition to traditional Weigand, these work with
the new reader standard so the reader-controller link is encrypted and you
can do mutual authentication with RF smartcards (should you care about
that).

We're using these after getting annoyed with HID VertX (and associated
Windows-based controller) and HID EdgeSolo (not sufficiently flexible).

On Mon, Mar 28, 2016 at 5:52 PM, Josh Reynolds  wrote:

> I'm dying here. Every single system I can find is shit or costs an arm
> and a leg, to the point where I'm considering starting a company to
> make a better system. I just need an embedded, web based, IP access
> control system. It needs to be able to control the individual door
> access controllers to electronic striker or maglock to the keypad. POE
> here is best. If it requires software running on a windows PC then I
> don't want anything to do with it, even for those of you who are like
> "put it in a vm"... no. Those resources are reserved for properly
> functioning operation systems (and LXC containers!).
>
> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>
> If it has a mobile app, that's even better.
>
> I've installed a couple of HID Global and DoorKing systems in the past
> and nothing about this is hard, but the chinese systems are only made
> for a single location.
>
> Any suggestions?
>

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

What about the door controller?

On Mon, Mar 28, 2016 at 9:04 PM, Nate Burke  wrote:
> I contacted suprema, and they directed me to a local reseller.  The Reseller
> had no problem selling me just the xpass no questions ask. I think they were
> about $350.  Very easy to install and setup.
>
> On 3/28/2016 8:59 PM, Josh Reynolds wrote:
>>
>> Suprema looks pretty good..
>>
>> https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platform/BioStar-2-Mobile
>>
>> On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson 
>> wrote:
>>>
>>> Your pretty much back to the windows database solution at this point.
>>>
>>> You can do this with the cheap Chinese boards in aggregate with their
>>> software.
>>>
>>> It’s not pretty, but it does what you want, multiple controllers,
>>> software
>>> with users and keys and time/scheduler etc.
>>>
>>> All for a few hundred bucks per four doors using standard keypads and
>>> locks.
>>>
>>>
>>>
>>> Otherwise, let us know if you find anything cool!
>>>
>>>
>>>
>>> Would be nice to get a better turnkey solution that wasn’t based on 90’s
>>> interface and DB paradigm.
>>>
>>>
>>>
>>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>>> Sent: Monday, March 28, 2016 7:51 PM
>>> To: af@afmug.com
>>> Subject: Re: [AFMUG] door access control
>>>
>>>
>>>
>>> My access solution needs to have different access per user / door / time
>>> via
>>> pin and keyfob, so can't really get something too simple due to various
>>> needs, contractors, etc. :/
>>>
>>> On Mar 28, 2016 8:47 PM, "Lewis Bergman"  wrote:
>>>
>>> You will all laugh but I just put in a wink and schlage locks.  Not
>>> exactly
>>> a real security system since there is no keypad you can arm or disarm.
>>> You
>>> can only do that through the app. One of my people doesn't have a new
>>> enough
>>> smartphone for the app. It allows you to use robots which are simple if
>>> then
>>> logic.
>>> I know it isn't difficult enough for many of you but it is cheap, easy,
>>> and
>>> pretty.
>>> A nice keypad would be a good pi project to round it out though.
>>>
>>>
>>>
>>> On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds  wrote:
>>>
>>> You have a door strike. The magnetic systems can be no or nc. If you
>>> loopback 12v from the keypad back to the doorcontroller, you can often
>>> trigger a fault state that releases power to the maglock. ;)
>>>
>>> On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
>>> wrote:
>>>
>>> I’m pretty sure you could also just smash the glass and walk in too J
>>>
>>>
>>>
>>> But the door strike on mine does go back to the controller I believe, so
>>> you
>>> couldn’t just jimmy the keypad wiring.
>>>
>>>
>>>
>>> Not really a high security scenario since my idea was to theoretically be
>>> able to pay $5 and enter (then walk out with anything you like I guess).
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>>> Sent: Monday, March 28, 2016 6:07 PM
>>> To: af@afmug.com
>>> Subject: Re: [AFMUG] door access control
>>>
>>>
>>>
>>> Also, pretty sure the one you have... If I remember right, I could rip
>>> the
>>> keypad off and touch brown to red to open the door based on the wiring
>>> diagram.
>>>
>>> On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
>>> wrote:
>>>
>>> I've had the same problem.
>>>
>>> The local alarm company wanted like $3-4k for a two door install, lol!
>>>
>>> Here is what I did so far:
>>>
>>> I bought a controller board off of eBay that does the standard protocol
>>> used
>>> by the strike.
>>> I bought the strike off ebay too.
>>> I bought a keypad controller off eBay.
>>> The controller came with a small locking box, and has room for a battery
>>> backup and can use PoE.
>>>
>>> The whole thing cost less than $500 I think.
>>>
>>> I used Ethernet to connect the box to my switch and to the strike and
>>> keypad.
>>>
>>> The controller has a simple web interface you log on to and then
>>> add/remove
>>> door codes.
>>>
>>> I did have to interpret some Chinese manuals to figure out the pinouts
>>> for
>>> everything, but it works as expected.
>>>
>>> What I have left to do is map the private IP of the controller to a
>>> public
>>> IP and firewall it.
>>>
>>> And then I wanted to write a service/web api to it so I could use a up to
>>> date 'normal' API access to add/remove door codes.
>>>
>>> Let me know if you want more details.
>>>
>>> -Original Message-
>>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>>> Sent: Monday, March 28, 2016 4:53 PM
>>> To: af@afmug.com
>>> Subject: [AFMUG] door access control
>>>
>>> I'm dying here. Every single system I can find is shit or costs an arm
>>> and a
>>> leg, to the point where I'm considering starting a company to make a
>>> better
>>> system. I just need an embedded, web based, IP access control system. It
>>> needs

Re: [AFMUG] door access control

2016-03-28 Thread Nate Burke

I contacted suprema, and they directed me to a local reseller.  The 
Reseller had no problem selling me just the xpass no questions ask. I 
think they were about $350.  Very easy to install and setup.


On 3/28/2016 8:59 PM, Josh Reynolds wrote:

Suprema looks pretty good..
https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platform/BioStar-2-Mobile

On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson  wrote:

Your pretty much back to the windows database solution at this point.

You can do this with the cheap Chinese boards in aggregate with their
software.

It’s not pretty, but it does what you want, multiple controllers, software
with users and keys and time/scheduler etc.

All for a few hundred bucks per four doors using standard keypads and locks.



Otherwise, let us know if you find anything cool!



Would be nice to get a better turnkey solution that wasn’t based on 90’s
interface and DB paradigm.



From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 7:51 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control



My access solution needs to have different access per user / door / time via
pin and keyfob, so can't really get something too simple due to various
needs, contractors, etc. :/

On Mar 28, 2016 8:47 PM, "Lewis Bergman"  wrote:

You will all laugh but I just put in a wink and schlage locks.  Not exactly
a real security system since there is no keypad you can arm or disarm. You
can only do that through the app. One of my people doesn't have a new enough
smartphone for the app. It allows you to use robots which are simple if then
logic.
I know it isn't difficult enough for many of you but it is cheap, easy, and
pretty.
A nice keypad would be a good pi project to round it out though.



On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds  wrote:

You have a door strike. The magnetic systems can be no or nc. If you
loopback 12v from the keypad back to the doorcontroller, you can often
trigger a fault state that releases power to the maglock. ;)

On Mar 28, 2016 7:11 PM, "Sterling Jacobson"  wrote:

I’m pretty sure you could also just smash the glass and walk in too J



But the door strike on mine does go back to the controller I believe, so you
couldn’t just jimmy the keypad wiring.



Not really a high security scenario since my idea was to theoretically be
able to pay $5 and enter (then walk out with anything you like I guess).











From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 6:07 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control



Also, pretty sure the one you have... If I remember right, I could rip the
keypad off and touch brown to red to open the door based on the wiring
diagram.

On Mar 28, 2016 7:03 PM, "Sterling Jacobson"  wrote:

I've had the same problem.

The local alarm company wanted like $3-4k for a two door install, lol!

Here is what I did so far:

I bought a controller board off of eBay that does the standard protocol used
by the strike.
I bought the strike off ebay too.
I bought a keypad controller off eBay.
The controller came with a small locking box, and has room for a battery
backup and can use PoE.

The whole thing cost less than $500 I think.

I used Ethernet to connect the box to my switch and to the strike and
keypad.

The controller has a simple web interface you log on to and then add/remove
door codes.

I did have to interpret some Chinese manuals to figure out the pinouts for
everything, but it works as expected.

What I have left to do is map the private IP of the controller to a public
IP and firewall it.

And then I wanted to write a service/web api to it so I could use a up to
date 'normal' API access to add/remove door codes.

Let me know if you want more details.

-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 4:53 PM
To: af@afmug.com
Subject: [AFMUG] door access control

I'm dying here. Every single system I can find is shit or costs an arm and a
leg, to the point where I'm considering starting a company to make a better
system. I just need an embedded, web based, IP access control system. It
needs to be able to control the individual door access controllers to
electronic striker or maglock to the keypad. POE here is best. If it
requires software running on a windows PC then I don't want anything to do
with it, even for those of you who are like "put it in a vm"... no. Those
resources are reserved for properly functioning operation systems (and LXC
containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past and
nothing about this is hard, but the chinese systems are only made for a
single location.

Any

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Suprema looks pretty good..
https://www.supremainc.com/en/AccessControl-TimeandAttendance/Platform/BioStar-2-Mobile

On Mon, Mar 28, 2016 at 8:54 PM, Sterling Jacobson  wrote:
> Your pretty much back to the windows database solution at this point.
>
> You can do this with the cheap Chinese boards in aggregate with their
> software.
>
> It’s not pretty, but it does what you want, multiple controllers, software
> with users and keys and time/scheduler etc.
>
> All for a few hundred bucks per four doors using standard keypads and locks.
>
>
>
> Otherwise, let us know if you find anything cool!
>
>
>
> Would be nice to get a better turnkey solution that wasn’t based on 90’s
> interface and DB paradigm.
>
>
>
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 7:51 PM
> To: af@afmug.com
> Subject: Re: [AFMUG] door access control
>
>
>
> My access solution needs to have different access per user / door / time via
> pin and keyfob, so can't really get something too simple due to various
> needs, contractors, etc. :/
>
> On Mar 28, 2016 8:47 PM, "Lewis Bergman"  wrote:
>
> You will all laugh but I just put in a wink and schlage locks.  Not exactly
> a real security system since there is no keypad you can arm or disarm. You
> can only do that through the app. One of my people doesn't have a new enough
> smartphone for the app. It allows you to use robots which are simple if then
> logic.
> I know it isn't difficult enough for many of you but it is cheap, easy, and
> pretty.
> A nice keypad would be a good pi project to round it out though.
>
>
>
> On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds  wrote:
>
> You have a door strike. The magnetic systems can be no or nc. If you
> loopback 12v from the keypad back to the doorcontroller, you can often
> trigger a fault state that releases power to the maglock. ;)
>
> On Mar 28, 2016 7:11 PM, "Sterling Jacobson"  wrote:
>
> I’m pretty sure you could also just smash the glass and walk in too J
>
>
>
> But the door strike on mine does go back to the controller I believe, so you
> couldn’t just jimmy the keypad wiring.
>
>
>
> Not really a high security scenario since my idea was to theoretically be
> able to pay $5 and enter (then walk out with anything you like I guess).
>
>
>
>
>
>
>
>
>
>
>
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 6:07 PM
> To: af@afmug.com
> Subject: Re: [AFMUG] door access control
>
>
>
> Also, pretty sure the one you have... If I remember right, I could rip the
> keypad off and touch brown to red to open the door based on the wiring
> diagram.
>
> On Mar 28, 2016 7:03 PM, "Sterling Jacobson"  wrote:
>
> I've had the same problem.
>
> The local alarm company wanted like $3-4k for a two door install, lol!
>
> Here is what I did so far:
>
> I bought a controller board off of eBay that does the standard protocol used
> by the strike.
> I bought the strike off ebay too.
> I bought a keypad controller off eBay.
> The controller came with a small locking box, and has room for a battery
> backup and can use PoE.
>
> The whole thing cost less than $500 I think.
>
> I used Ethernet to connect the box to my switch and to the strike and
> keypad.
>
> The controller has a simple web interface you log on to and then add/remove
> door codes.
>
> I did have to interpret some Chinese manuals to figure out the pinouts for
> everything, but it works as expected.
>
> What I have left to do is map the private IP of the controller to a public
> IP and firewall it.
>
> And then I wanted to write a service/web api to it so I could use a up to
> date 'normal' API access to add/remove door codes.
>
> Let me know if you want more details.
>
> -Original Message-
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 4:53 PM
> To: af@afmug.com
> Subject: [AFMUG] door access control
>
> I'm dying here. Every single system I can find is shit or costs an arm and a
> leg, to the point where I'm considering starting a company to make a better
> system. I just need an embedded, web based, IP access control system. It
> needs to be able to control the individual door access controllers to
> electronic striker or maglock to the keypad. POE here is best. If it
> requires software running on a windows PC then I don't want anything to do
> with it, even for those of you who are like "put it in a vm"... no. Those
> resources are reserved for properly functioning operation systems (and LXC
> containers!).
>
> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>
> If it has a mobile app, that's even better.
>
> I've installed a couple of HID Global and DoorKing systems in the past and
> nothing about this is hard, but the chinese systems are only made for a
> single location.
>
> Any suggestions?

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread Kurt Fankhauser

I ran into this issue on the download side a couple times, when you rate
limit at the Canopy SM and twice the limit is hitting the AP the customer
WILL COMPLAIN about extreamly slow download speeds and high latency. I
confirmed this with one customer and its painfully slow. I had to induce
the rate limit somewhere before the AP so that the SM wouldn't be choking
so bad.

On Mon, Mar 28, 2016 at 8:11 PM, George Skorup  wrote:

> That's the way it works. SM controls the uplink, AP controls the downlink.
> The same thing happens in reverse with streaming. Torching a customer might
> show he's pulling 15-18Mbps download when in fact the AP is limiting his
> downlink to 12Mbps per the configured QoS and discarding the extra garbage.
> Because you're looking at what's happening downstream of where the
> throttling is taking place. That's what I see all the time with the
> streaming crap. And we use only the built-in QoS on Canopy.
>
> So in your situation, yes, if you set the customer's SM QoS to throttle at
> 2Mbps sustained uplink, then you will see only 2Mbps exiting the AP's
> ethernet interface for that customer. At least you keep that extra crap off
> of the air. And it's not cosmetic, that's real traffic over the air. Which
> seems totally stupid when that's not how TCP was intended to work. Sure,
> everyone just go ahead and mangle the protocols however you want. It's like
> the DDoS bullshit. I'm fucking tired of it. Sorry for my rant.. I'll go
> back to my hole now.
>
> On 3/28/2016 6:26 PM, Ken Hohhof wrote:
>
> In this case the SM QoS is set to 5M up, 15M down.ï¿½ The SM is letting 5M
> through, then the tower router is chopping it down to 2M which is the plan
> he is on.ï¿½ I may have to set the SM limit lower.ï¿½ I donï¿½t like to do
> that because the router rate limit is set automatically via PPPoE from the
> RADIUS database, whereas the SM limits are set manually.
>
> ï¿½
>
> *From:* Af [mailto:af-boun...@afmug.com ] *On
> Behalf Of *George Skorup
> *Sent:* Monday, March 28, 2016 6:15 PM
> *To:* af@afmug.com
> *Subject:* Re: [AFMUG] Youtube upload bandwidth
>
> ï¿½
>
> Where is your bandwidth control? SM or MikroTik? I'm guessing upstream
> router. If you had it on the SM, you wouldn't see the overload.
>
> On 3/28/2016 6:11 PM, Ken Hohhof wrote:
>
> I had a customer today uploading for 2 hours at way over his rate limit,
> he says he was uploading a Youtube video.ï¿½ Anyone here familiar with the
> Youtube upload process?ï¿½ Why was it not invoking TCP congestion control
> and instead trying to ram 5 pounds of data through a 2 pound pipe?
>
> ï¿½
>
>
>

Re: [AFMUG] door access control

2016-03-28 Thread Sterling Jacobson

Your pretty much back to the windows database solution at this point.
You can do this with the cheap Chinese boards in aggregate with their software.
It’s not pretty, but it does what you want, multiple controllers, software with 
users and keys and time/scheduler etc.
All for a few hundred bucks per four doors using standard keypads and locks.

Otherwise, let us know if you find anything cool!

Would be nice to get a better turnkey solution that wasn’t based on 90’s 
interface and DB paradigm.

From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 7:51 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control

My access solution needs to have different access per user / door / time via 
pin and keyfob, so can't really get something too simple due to various needs, 
contractors, etc. :/
On Mar 28, 2016 8:47 PM, "Lewis Bergman" 
> wrote:

You will all laugh but I just put in a wink and schlage locks.  Not exactly a 
real security system since there is no keypad you can arm or disarm. You can 
only do that through the app. One of my people doesn't have a new enough 
smartphone for the app. It allows you to use robots which are simple if then 
logic.
I know it isn't difficult enough for many of you but it is cheap, easy, and 
pretty.
A nice keypad would be a good pi project to round it out though.

On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds 
> wrote:

You have a door strike. The magnetic systems can be no or nc. If you loopback 
12v from the keypad back to the doorcontroller, you can often trigger a fault 
state that releases power to the maglock. ;)
On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
> wrote:
I’m pretty sure you could also just smash the glass and walk in too ☺

But the door strike on mine does go back to the controller I believe, so you 
couldn’t just jimmy the keypad wiring.

Not really a high security scenario since my idea was to theoretically be able 
to pay $5 and enter (then walk out with anything you like I guess).

From: Af [mailto:af-boun...@afmug.com] On Behalf 
Of Josh Reynolds
Sent: Monday, March 28, 2016 6:07 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control

Also, pretty sure the one you have... If I remember right, I could rip the 
keypad off and touch brown to red to open the door based on the wiring diagram.
On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
> wrote:
I've had the same problem.

The local alarm company wanted like $3-4k for a two door install, lol!

Here is what I did so far:

I bought a controller board off of eBay that does the standard protocol used by 
the strike.
I bought the strike off ebay too.
I bought a keypad controller off eBay.
The controller came with a small locking box, and has room for a battery backup 
and can use PoE.

The whole thing cost less than $500 I think.

I used Ethernet to connect the box to my switch and to the strike and keypad.

The controller has a simple web interface you log on to and then add/remove 
door codes.

I did have to interpret some Chinese manuals to figure out the pinouts for 
everything, but it works as expected.

What I have left to do is map the private IP of the controller to a public IP 
and firewall it.

And then I wanted to write a service/web api to it so I could use a up to date 
'normal' API access to add/remove door codes.

Let me know if you want more details.

-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf 
Of Josh Reynolds
Sent: Monday, March 28, 2016 4:53 PM
To: af@afmug.com
Subject: [AFMUG] door access control

I'm dying here. Every single system I can find is shit or costs an arm and a 
leg, to the point where I'm considering starting a company to make a better 
system. I just need an embedded, web based, IP access control system. It needs 
to be able to control the individual door access controllers to electronic 
striker or maglock to the keypad. POE here is best. If it requires software 
running on a windows PC then I don't want anything to do with it, even for 
those of you who are like "put it in a vm"... no. Those resources are reserved 
for properly functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past and 
nothing about this is hard, but the chinese systems are only made for a single 
location.

Any suggestions?

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

My access solution needs to have different access per user / door / time
via pin and keyfob, so can't really get something too simple due to various
needs, contractors, etc. :/
On Mar 28, 2016 8:47 PM, "Lewis Bergman"  wrote:

> You will all laugh but I just put in a wink and schlage locks.  Not
> exactly a real security system since there is no keypad you can arm or
> disarm. You can only do that through the app. One of my people doesn't have
> a new enough smartphone for the app. It allows you to use robots which are
> simple if then logic.
> I know it isn't difficult enough for many of you but it is cheap, easy,
> and pretty.
> A nice keypad would be a good pi project to round it out though.
>
> On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds  wrote:
>
>> You have a door strike. The magnetic systems can be no or nc. If you
>> loopback 12v from the keypad back to the doorcontroller, you can often
>> trigger a fault state that releases power to the maglock. ;)
>> On Mar 28, 2016 7:11 PM, "Sterling Jacobson" 
>> wrote:
>>
>>> I’m pretty sure you could also just smash the glass and walk in too J
>>>
>>>
>>>
>>> But the door strike on mine does go back to the controller I believe, so
>>> you couldn’t just jimmy the keypad wiring.
>>>
>>>
>>>
>>> Not really a high security scenario since my idea was to theoretically
>>> be able to pay $5 and enter (then walk out with anything you like I guess).
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Josh Reynolds
>>> *Sent:* Monday, March 28, 2016 6:07 PM
>>> *To:* af@afmug.com
>>> *Subject:* Re: [AFMUG] door access control
>>>
>>>
>>>
>>> Also, pretty sure the one you have... If I remember right, I could rip
>>> the keypad off and touch brown to red to open the door based on the wiring
>>> diagram.
>>>
>>> On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
>>> wrote:
>>>
>>> I've had the same problem.
>>>
>>> The local alarm company wanted like $3-4k for a two door install, lol!
>>>
>>> Here is what I did so far:
>>>
>>> I bought a controller board off of eBay that does the standard protocol
>>> used by the strike.
>>> I bought the strike off ebay too.
>>> I bought a keypad controller off eBay.
>>> The controller came with a small locking box, and has room for a battery
>>> backup and can use PoE.
>>>
>>> The whole thing cost less than $500 I think.
>>>
>>> I used Ethernet to connect the box to my switch and to the strike and
>>> keypad.
>>>
>>> The controller has a simple web interface you log on to and then
>>> add/remove door codes.
>>>
>>> I did have to interpret some Chinese manuals to figure out the pinouts
>>> for everything, but it works as expected.
>>>
>>> What I have left to do is map the private IP of the controller to a
>>> public IP and firewall it.
>>>
>>> And then I wanted to write a service/web api to it so I could use a up
>>> to date 'normal' API access to add/remove door codes.
>>>
>>> Let me know if you want more details.
>>>
>>> -Original Message-
>>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>>> Sent: Monday, March 28, 2016 4:53 PM
>>> To: af@afmug.com
>>> Subject: [AFMUG] door access control
>>>
>>> I'm dying here. Every single system I can find is shit or costs an arm
>>> and a leg, to the point where I'm considering starting a company to make a
>>> better system. I just need an embedded, web based, IP access control
>>> system. It needs to be able to control the individual door access
>>> controllers to electronic striker or maglock to the keypad. POE here is
>>> best. If it requires software running on a windows PC then I don't want
>>> anything to do with it, even for those of you who are like "put it in a
>>> vm"... no. Those resources are reserved for properly functioning operation
>>> systems (and LXC containers!).
>>>
>>> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>>>
>>> If it has a mobile app, that's even better.
>>>
>>> I've installed a couple of HID Global and DoorKing systems in the past
>>> and nothing about this is hard, but the chinese systems are only made for a
>>> single location.
>>>
>>> Any suggestions?
>>>
>>>

Re: [AFMUG] door access control

2016-03-28 Thread Lewis Bergman

You will all laugh but I just put in a wink and schlage locks.  Not exactly
a real security system since there is no keypad you can arm or disarm. You
can only do that through the app. One of my people doesn't have a new
enough smartphone for the app. It allows you to use robots which are simple
if then logic.
I know it isn't difficult enough for many of you but it is cheap, easy, and
pretty.
A nice keypad would be a good pi project to round it out though.

On Mon, Mar 28, 2016, 7:32 PM Josh Reynolds  wrote:

> You have a door strike. The magnetic systems can be no or nc. If you
> loopback 12v from the keypad back to the doorcontroller, you can often
> trigger a fault state that releases power to the maglock. ;)
> On Mar 28, 2016 7:11 PM, "Sterling Jacobson"  wrote:
>
>> I’m pretty sure you could also just smash the glass and walk in too J
>>
>>
>>
>> But the door strike on mine does go back to the controller I believe, so
>> you couldn’t just jimmy the keypad wiring.
>>
>>
>>
>> Not really a high security scenario since my idea was to theoretically be
>> able to pay $5 and enter (then walk out with anything you like I guess).
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Josh Reynolds
>> *Sent:* Monday, March 28, 2016 6:07 PM
>> *To:* af@afmug.com
>> *Subject:* Re: [AFMUG] door access control
>>
>>
>>
>> Also, pretty sure the one you have... If I remember right, I could rip
>> the keypad off and touch brown to red to open the door based on the wiring
>> diagram.
>>
>> On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
>> wrote:
>>
>> I've had the same problem.
>>
>> The local alarm company wanted like $3-4k for a two door install, lol!
>>
>> Here is what I did so far:
>>
>> I bought a controller board off of eBay that does the standard protocol
>> used by the strike.
>> I bought the strike off ebay too.
>> I bought a keypad controller off eBay.
>> The controller came with a small locking box, and has room for a battery
>> backup and can use PoE.
>>
>> The whole thing cost less than $500 I think.
>>
>> I used Ethernet to connect the box to my switch and to the strike and
>> keypad.
>>
>> The controller has a simple web interface you log on to and then
>> add/remove door codes.
>>
>> I did have to interpret some Chinese manuals to figure out the pinouts
>> for everything, but it works as expected.
>>
>> What I have left to do is map the private IP of the controller to a
>> public IP and firewall it.
>>
>> And then I wanted to write a service/web api to it so I could use a up to
>> date 'normal' API access to add/remove door codes.
>>
>> Let me know if you want more details.
>>
>> -Original Message-
>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>> Sent: Monday, March 28, 2016 4:53 PM
>> To: af@afmug.com
>> Subject: [AFMUG] door access control
>>
>> I'm dying here. Every single system I can find is shit or costs an arm
>> and a leg, to the point where I'm considering starting a company to make a
>> better system. I just need an embedded, web based, IP access control
>> system. It needs to be able to control the individual door access
>> controllers to electronic striker or maglock to the keypad. POE here is
>> best. If it requires software running on a windows PC then I don't want
>> anything to do with it, even for those of you who are like "put it in a
>> vm"... no. Those resources are reserved for properly functioning operation
>> systems (and LXC containers!).
>>
>> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>>
>> If it has a mobile app, that's even better.
>>
>> I've installed a couple of HID Global and DoorKing systems in the past
>> and nothing about this is hard, but the chinese systems are only made for a
>> single location.
>>
>> Any suggestions?
>>
>>

Re: [AFMUG] Blockchain write up or good book?

2016-03-28 Thread Mathew Howard

But robbing liquor stores seems more efficient, that way don't even have to
bother with the money part.

On Mon, Mar 28, 2016 at 8:25 PM, That One Guy /sarcasm <
thatoneguyst...@gmail.com> wrote:

> its all schemes, schemes is where the moneys at, that and robbing liquor
> stores
>
> On Mon, Mar 28, 2016 at 8:10 PM, Josh Reynolds 
> wrote:
>
>> Buy tons if it low which drives the price up, sit on it for 6 months or
>> less, sell at 1000x. That's a pretty good scheme.
>> On Mar 28, 2016 8:08 PM, "Tushar Patel"  wrote:
>>
>>>
>>> Rise and fall of Bitcoin now there is new virtual currency called
>>> Ethereum that has valuation on $1b. Went up 1000%.
>>>
>>> Before investing into any of these stuff, time to understand it better.
>>>
>>> People who have understood this well, any specific book or good website
>>> they recommend?
>>>
>>> Tushar
>>>
>>>
>
>
> --
> If you only see yourself as part of the team but you don't see your team
> as part of yourself you have already failed as part of the team.
>

Re: [AFMUG] Blockchain write up or good book?

2016-03-28 Thread That One Guy /sarcasm

its all schemes, schemes is where the moneys at, that and robbing liquor
stores

On Mon, Mar 28, 2016 at 8:10 PM, Josh Reynolds  wrote:

> Buy tons if it low which drives the price up, sit on it for 6 months or
> less, sell at 1000x. That's a pretty good scheme.
> On Mar 28, 2016 8:08 PM, "Tushar Patel"  wrote:
>
>>
>> Rise and fall of Bitcoin now there is new virtual currency called
>> Ethereum that has valuation on $1b. Went up 1000%.
>>
>> Before investing into any of these stuff, time to understand it better.
>>
>> People who have understood this well, any specific book or good website
>> they recommend?
>>
>> Tushar
>>
>>


-- 
If you only see yourself as part of the team but you don't see your team as
part of yourself you have already failed as part of the team.

Re: [AFMUG] Blockchain write up or good book?

2016-03-28 Thread Josh Reynolds

Buy tons if it low which drives the price up, sit on it for 6 months or
less, sell at 1000x. That's a pretty good scheme.
On Mar 28, 2016 8:08 PM, "Tushar Patel"  wrote:

>
> Rise and fall of Bitcoin now there is new virtual currency called Ethereum
> that has valuation on $1b. Went up 1000%.
>
> Before investing into any of these stuff, time to understand it better.
>
> People who have understood this well, any specific book or good website
> they recommend?
>
> Tushar
>
>

[AFMUG] Blockchain write up or good book?

2016-03-28 Thread Tushar Patel


Rise and fall of Bitcoin now there is new virtual currency called Ethereum that 
has valuation on $1b. Went up 1000%.

Before investing into any of these stuff, time to understand it better. 

People who have understood this well, any specific book or good website they 
recommend?

Tushar

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

You have a door strike. The magnetic systems can be no or nc. If you
loopback 12v from the keypad back to the doorcontroller, you can often
trigger a fault state that releases power to the maglock. ;)
On Mar 28, 2016 7:11 PM, "Sterling Jacobson"  wrote:

> I’m pretty sure you could also just smash the glass and walk in too J
>
>
>
> But the door strike on mine does go back to the controller I believe, so
> you couldn’t just jimmy the keypad wiring.
>
>
>
> Not really a high security scenario since my idea was to theoretically be
> able to pay $5 and enter (then walk out with anything you like I guess).
>
>
>
>
>
>
>
>
>
>
>
> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Josh Reynolds
> *Sent:* Monday, March 28, 2016 6:07 PM
> *To:* af@afmug.com
> *Subject:* Re: [AFMUG] door access control
>
>
>
> Also, pretty sure the one you have... If I remember right, I could rip the
> keypad off and touch brown to red to open the door based on the wiring
> diagram.
>
> On Mar 28, 2016 7:03 PM, "Sterling Jacobson"  wrote:
>
> I've had the same problem.
>
> The local alarm company wanted like $3-4k for a two door install, lol!
>
> Here is what I did so far:
>
> I bought a controller board off of eBay that does the standard protocol
> used by the strike.
> I bought the strike off ebay too.
> I bought a keypad controller off eBay.
> The controller came with a small locking box, and has room for a battery
> backup and can use PoE.
>
> The whole thing cost less than $500 I think.
>
> I used Ethernet to connect the box to my switch and to the strike and
> keypad.
>
> The controller has a simple web interface you log on to and then
> add/remove door codes.
>
> I did have to interpret some Chinese manuals to figure out the pinouts for
> everything, but it works as expected.
>
> What I have left to do is map the private IP of the controller to a public
> IP and firewall it.
>
> And then I wanted to write a service/web api to it so I could use a up to
> date 'normal' API access to add/remove door codes.
>
> Let me know if you want more details.
>
> -Original Message-
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 4:53 PM
> To: af@afmug.com
> Subject: [AFMUG] door access control
>
> I'm dying here. Every single system I can find is shit or costs an arm and
> a leg, to the point where I'm considering starting a company to make a
> better system. I just need an embedded, web based, IP access control
> system. It needs to be able to control the individual door access
> controllers to electronic striker or maglock to the keypad. POE here is
> best. If it requires software running on a windows PC then I don't want
> anything to do with it, even for those of you who are like "put it in a
> vm"... no. Those resources are reserved for properly functioning operation
> systems (and LXC containers!).
>
> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>
> If it has a mobile app, that's even better.
>
> I've installed a couple of HID Global and DoorKing systems in the past and
> nothing about this is hard, but the chinese systems are only made for a
> single location.
>
> Any suggestions?
>
>

Re: [AFMUG] Anyone from JAB read the list?

2016-03-28 Thread That One Guy /sarcasm

I don't know if Satan does reddit
On Mar 28, 2016 7:10 PM, "Ryan Ray"  wrote:

> Someone on Reddit is looking for some support
>
>
> https://www.reddit.com/r/sysadmin/comments/4cc06o/anyone_on_jab_wireless_that_could_test_something/
>
>
> Sent while mobile
>
>

Re: [AFMUG] door access control

2016-03-28 Thread liddy303

Executive suite company that I worked with 5+ years ago had this solution
across multiple buildings in Colorado:

http://portal.isonas.com/

Allowed them to have one central location to add/delete cards and allow
customers access to certain buildings for dropping into a location or
hot-desking.

Re: [AFMUG] door access control

2016-03-28 Thread Sterling Jacobson

I’m pretty sure you could also just smash the glass and walk in too ☺

But the door strike on mine does go back to the controller I believe, so you 
couldn’t just jimmy the keypad wiring.

Not really a high security scenario since my idea was to theoretically be able 
to pay $5 and enter (then walk out with anything you like I guess).





From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 6:07 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control


Also, pretty sure the one you have... If I remember right, I could rip the 
keypad off and touch brown to red to open the door based on the wiring diagram.
On Mar 28, 2016 7:03 PM, "Sterling Jacobson" 
> wrote:
I've had the same problem.

The local alarm company wanted like $3-4k for a two door install, lol!

Here is what I did so far:

I bought a controller board off of eBay that does the standard protocol used by 
the strike.
I bought the strike off ebay too.
I bought a keypad controller off eBay.
The controller came with a small locking box, and has room for a battery backup 
and can use PoE.

The whole thing cost less than $500 I think.

I used Ethernet to connect the box to my switch and to the strike and keypad.

The controller has a simple web interface you log on to and then add/remove 
door codes.

I did have to interpret some Chinese manuals to figure out the pinouts for 
everything, but it works as expected.

What I have left to do is map the private IP of the controller to a public IP 
and firewall it.

And then I wanted to write a service/web api to it so I could use a up to date 
'normal' API access to add/remove door codes.

Let me know if you want more details.

-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf 
Of Josh Reynolds
Sent: Monday, March 28, 2016 4:53 PM
To: af@afmug.com
Subject: [AFMUG] door access control

I'm dying here. Every single system I can find is shit or costs an arm and a 
leg, to the point where I'm considering starting a company to make a better 
system. I just need an embedded, web based, IP access control system. It needs 
to be able to control the individual door access controllers to electronic 
striker or maglock to the keypad. POE here is best. If it requires software 
running on a windows PC then I don't want anything to do with it, even for 
those of you who are like "put it in a vm"... no. Those resources are reserved 
for properly functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past and 
nothing about this is hard, but the chinese systems are only made for a single 
location.

Any suggestions?

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread George Skorup

That's the way it works. SM controls the uplink, AP controls the 
downlink. The same thing happens in reverse with streaming. Torching a 
customer might show he's pulling 15-18Mbps download when in fact the AP 
is limiting his downlink to 12Mbps per the configured QoS and discarding 
the extra garbage. Because you're looking at what's happening downstream 
of where the throttling is taking place. That's what I see all the time 
with the streaming crap. And we use only the built-in QoS on Canopy.


So in your situation, yes, if you set the customer's SM QoS to throttle 
at 2Mbps sustained uplink, then you will see only 2Mbps exiting the AP's 
ethernet interface for that customer. At least you keep that extra crap 
off of the air. And it's not cosmetic, that's real traffic over the air. 
Which seems totally stupid when that's not how TCP was intended to work. 
Sure, everyone just go ahead and mangle the protocols however you want. 
It's like the DDoS bullshit. I'm fucking tired of it. Sorry for my 
rant.. I'll go back to my hole now.


On 3/28/2016 6:26 PM, Ken Hohhof wrote:


In this case the SM QoS is set to 5M up, 15M down.  The SM is letting 
5M through, then the tower router is chopping it down to 2M which is 
the plan he is on.  I may have to set the SM limit lower.  I donï¿½t 
like to do that because the router rate limit is set automatically via 
PPPoE from the RADIUS database, whereas the SM limits are set manually.


*From:*Af [mailto:af-boun...@afmug.com] *On Behalf Of *George Skorup
*Sent:* Monday, March 28, 2016 6:15 PM
*To:* af@afmug.com
*Subject:* Re: [AFMUG] Youtube upload bandwidth

Where is your bandwidth control? SM or MikroTik? I'm guessing upstream 
router. If you had it on the SM, you wouldn't see the overload.


On 3/28/2016 6:11 PM, Ken Hohhof wrote:

I had a customer today uploading for 2 hours at way over his rate
limit, he says he was uploading a Youtube video.ï¿½ Anyone here
familiar with the Youtube upload process?ï¿½ Why was it not
invoking TCP congestion control and instead trying to ram 5 pounds
of data through a 2 pound pipe?

[AFMUG] Anyone from JAB read the list?

2016-03-28 Thread Ryan Ray

Someone on Reddit is looking for some support 

https://www.reddit.com/r/sysadmin/comments/4cc06o/anyone_on_jab_wireless_that_could_test_something/


Sent while mobile

Re: [AFMUG] door access control

2016-03-28 Thread Eric Kuhnke

Life imitates low budget action movie?

On Mon, Mar 28, 2016 at 5:07 PM, Josh Reynolds  wrote:

> Also, pretty sure the one you have... If I remember right, I could rip the
> keypad off and touch brown to red to open the door based on the wiring
> diagram.
> On Mar 28, 2016 7:03 PM, "Sterling Jacobson"  wrote:
>
>> I've had the same problem.
>>
>> The local alarm company wanted like $3-4k for a two door install, lol!
>>
>> Here is what I did so far:
>>
>> I bought a controller board off of eBay that does the standard protocol
>> used by the strike.
>> I bought the strike off ebay too.
>> I bought a keypad controller off eBay.
>> The controller came with a small locking box, and has room for a battery
>> backup and can use PoE.
>>
>> The whole thing cost less than $500 I think.
>>
>> I used Ethernet to connect the box to my switch and to the strike and
>> keypad.
>>
>> The controller has a simple web interface you log on to and then
>> add/remove door codes.
>>
>> I did have to interpret some Chinese manuals to figure out the pinouts
>> for everything, but it works as expected.
>>
>> What I have left to do is map the private IP of the controller to a
>> public IP and firewall it.
>>
>> And then I wanted to write a service/web api to it so I could use a up to
>> date 'normal' API access to add/remove door codes.
>>
>> Let me know if you want more details.
>>
>> -Original Message-
>> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
>> Sent: Monday, March 28, 2016 4:53 PM
>> To: af@afmug.com
>> Subject: [AFMUG] door access control
>>
>> I'm dying here. Every single system I can find is shit or costs an arm
>> and a leg, to the point where I'm considering starting a company to make a
>> better system. I just need an embedded, web based, IP access control
>> system. It needs to be able to control the individual door access
>> controllers to electronic striker or maglock to the keypad. POE here is
>> best. If it requires software running on a windows PC then I don't want
>> anything to do with it, even for those of you who are like "put it in a
>> vm"... no. Those resources are reserved for properly functioning operation
>> systems (and LXC containers!).
>>
>> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>>
>> If it has a mobile app, that's even better.
>>
>> I've installed a couple of HID Global and DoorKing systems in the past
>> and nothing about this is hard, but the chinese systems are only made for a
>> single location.
>>
>> Any suggestions?
>>
>

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Also, pretty sure the one you have... If I remember right, I could rip the
keypad off and touch brown to red to open the door based on the wiring
diagram.
On Mar 28, 2016 7:03 PM, "Sterling Jacobson"  wrote:

> I've had the same problem.
>
> The local alarm company wanted like $3-4k for a two door install, lol!
>
> Here is what I did so far:
>
> I bought a controller board off of eBay that does the standard protocol
> used by the strike.
> I bought the strike off ebay too.
> I bought a keypad controller off eBay.
> The controller came with a small locking box, and has room for a battery
> backup and can use PoE.
>
> The whole thing cost less than $500 I think.
>
> I used Ethernet to connect the box to my switch and to the strike and
> keypad.
>
> The controller has a simple web interface you log on to and then
> add/remove door codes.
>
> I did have to interpret some Chinese manuals to figure out the pinouts for
> everything, but it works as expected.
>
> What I have left to do is map the private IP of the controller to a public
> IP and firewall it.
>
> And then I wanted to write a service/web api to it so I could use a up to
> date 'normal' API access to add/remove door codes.
>
> Let me know if you want more details.
>
> -Original Message-
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 4:53 PM
> To: af@afmug.com
> Subject: [AFMUG] door access control
>
> I'm dying here. Every single system I can find is shit or costs an arm and
> a leg, to the point where I'm considering starting a company to make a
> better system. I just need an embedded, web based, IP access control
> system. It needs to be able to control the individual door access
> controllers to electronic striker or maglock to the keypad. POE here is
> best. If it requires software running on a windows PC then I don't want
> anything to do with it, even for those of you who are like "put it in a
> vm"... no. Those resources are reserved for properly functioning operation
> systems (and LXC containers!).
>
> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>
> If it has a mobile app, that's even better.
>
> I've installed a couple of HID Global and DoorKing systems in the past and
> nothing about this is hard, but the chinese systems are only made for a
> single location.
>
> Any suggestions?
>

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Wouldn't work for me, as I have multiple locations. I've already looked at
the ones on ebay / Amazon.
On Mar 28, 2016 7:03 PM, "Sterling Jacobson"  wrote:

> I've had the same problem.
>
> The local alarm company wanted like $3-4k for a two door install, lol!
>
> Here is what I did so far:
>
> I bought a controller board off of eBay that does the standard protocol
> used by the strike.
> I bought the strike off ebay too.
> I bought a keypad controller off eBay.
> The controller came with a small locking box, and has room for a battery
> backup and can use PoE.
>
> The whole thing cost less than $500 I think.
>
> I used Ethernet to connect the box to my switch and to the strike and
> keypad.
>
> The controller has a simple web interface you log on to and then
> add/remove door codes.
>
> I did have to interpret some Chinese manuals to figure out the pinouts for
> everything, but it works as expected.
>
> What I have left to do is map the private IP of the controller to a public
> IP and firewall it.
>
> And then I wanted to write a service/web api to it so I could use a up to
> date 'normal' API access to add/remove door codes.
>
> Let me know if you want more details.
>
> -Original Message-
> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
> Sent: Monday, March 28, 2016 4:53 PM
> To: af@afmug.com
> Subject: [AFMUG] door access control
>
> I'm dying here. Every single system I can find is shit or costs an arm and
> a leg, to the point where I'm considering starting a company to make a
> better system. I just need an embedded, web based, IP access control
> system. It needs to be able to control the individual door access
> controllers to electronic striker or maglock to the keypad. POE here is
> best. If it requires software running on a windows PC then I don't want
> anything to do with it, even for those of you who are like "put it in a
> vm"... no. Those resources are reserved for properly functioning operation
> systems (and LXC containers!).
>
> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>
> If it has a mobile app, that's even better.
>
> I've installed a couple of HID Global and DoorKing systems in the past and
> nothing about this is hard, but the chinese systems are only made for a
> single location.
>
> Any suggestions?
>

Re: [AFMUG] door access control

2016-03-28 Thread Sterling Jacobson

I've had the same problem.

The local alarm company wanted like $3-4k for a two door install, lol!

Here is what I did so far:

I bought a controller board off of eBay that does the standard protocol used by 
the strike.
I bought the strike off ebay too.
I bought a keypad controller off eBay.
The controller came with a small locking box, and has room for a battery backup 
and can use PoE.

The whole thing cost less than $500 I think.

I used Ethernet to connect the box to my switch and to the strike and keypad.

The controller has a simple web interface you log on to and then add/remove 
door codes.

I did have to interpret some Chinese manuals to figure out the pinouts for 
everything, but it works as expected.

What I have left to do is map the private IP of the controller to a public IP 
and firewall it.

And then I wanted to write a service/web api to it so I could use a up to date 
'normal' API access to add/remove door codes.

Let me know if you want more details.

-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 4:53 PM
To: af@afmug.com
Subject: [AFMUG] door access control

I'm dying here. Every single system I can find is shit or costs an arm and a 
leg, to the point where I'm considering starting a company to make a better 
system. I just need an embedded, web based, IP access control system. It needs 
to be able to control the individual door access controllers to electronic 
striker or maglock to the keypad. POE here is best. If it requires software 
running on a windows PC then I don't want anything to do with it, even for 
those of you who are like "put it in a vm"... no. Those resources are reserved 
for properly functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past and 
nothing about this is hard, but the chinese systems are only made for a single 
location.

Any suggestions?

Re: [AFMUG] Russians made a 10 Gbps radio?

2016-03-28 Thread Mathew Howard

Well, they didn't say it would work that well on Earth... how are they
supposed to know you aren't going to be installing these links on the moon?

On Mon, Mar 28, 2016 at 6:40 PM, Eric Kuhnke  wrote:

> 12 miles is a silly claim...  Marketing department vs reality.
>
> It appears to be +22 Tx power into a 51dBi gain antenna, so not much
> different than any other 80 GHz product in the link budget. Sure it'll be
> -51 at 7km in clear rain free skies, or something like that. But the link
> will be incredibly fragile. If you want full data rates at five nines
> reliability statistically over a year, more like 2.5 to 3km max.
>
> On Mon, Mar 28, 2016 at 4:19 PM, Jaime Solorza 
> wrote:
>
>> Wonder if Solectek will rebrand this one as well.  12 miles
>> On Mar 28, 2016 4:42 PM, "Eric Kuhnke"  wrote:
>>
>>> http://www.elva-1.com/news_events/a40107
>>>
>>> http://www.elva-1.com/products/a40106
>>>
>>> http://www.elva-1.com/data/files/Datasheets/2016_02_24_PPC-10G.pdf
>>>
>>>
>>> 2000 MHz wide channel and 256QAM for 10 Gbps in the FDD 71-86 GHz bands.
>>> Question is...  What's the Rx level needed for that, and how quickly does
>>> it drop off with rain?
>>>
>>>
>>>
>

Re: [AFMUG] Russians made a 10 Gbps radio?

2016-03-28 Thread Eric Kuhnke

12 miles is a silly claim...  Marketing department vs reality.

It appears to be +22 Tx power into a 51dBi gain antenna, so not much
different than any other 80 GHz product in the link budget. Sure it'll be
-51 at 7km in clear rain free skies, or something like that. But the link
will be incredibly fragile. If you want full data rates at five nines
reliability statistically over a year, more like 2.5 to 3km max.

On Mon, Mar 28, 2016 at 4:19 PM, Jaime Solorza 
wrote:

> Wonder if Solectek will rebrand this one as well.  12 miles
> On Mar 28, 2016 4:42 PM, "Eric Kuhnke"  wrote:
>
>> http://www.elva-1.com/news_events/a40107
>>
>> http://www.elva-1.com/products/a40106
>>
>> http://www.elva-1.com/data/files/Datasheets/2016_02_24_PPC-10G.pdf
>>
>>
>> 2000 MHz wide channel and 256QAM for 10 Gbps in the FDD 71-86 GHz bands.
>> Question is...  What's the Rx level needed for that, and how quickly does
>> it drop off with rain?
>>
>>
>>

Re: [AFMUG] Russians made a 10 Gbps radio?

2016-03-28 Thread Mike Hammett

I have a few cases where as long as it's enough... 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Mathew Howard"  
To: "af"  
Sent: Monday, March 28, 2016 6:25:45 PM 
Subject: Re: [AFMUG] Russians made a 10 Gbps radio? 


Neat! But I can't imagine you get too much range at 256QAM. 



On Mon, Mar 28, 2016 at 6:19 PM, Jaime Solorza < losguyswirel...@gmail.com > 
wrote: 



Wonder if Solectek will rebrand this one as well. 12 miles 


On Mar 28, 2016 4:42 PM, "Eric Kuhnke" < eric.kuh...@gmail.com > wrote: 




http://www.elva-1.com/news_events/a40107 

http://www.elva-1.com/products/a40106 

http://www.elva-1.com/data/files/Datasheets/2016_02_24_PPC-10G.pdf 


2000 MHz wide channel and 256QAM for 10 Gbps in the FDD 71-86 GHz bands. 
Question is... What's the Rx level needed for that, and how quickly does it 
drop off with rain?

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread Ken Hohhof

In this case the SM QoS is set to 5M up, 15M down.  The SM is letting 5M
through, then the tower router is chopping it down to 2M which is the plan
he is on.  I may have to set the SM limit lower.  I dont like to do that
because the router rate limit is set automatically via PPPoE from the RADIUS
database, whereas the SM limits are set manually.

 

From: Af [mailto:af-boun...@afmug.com] On Behalf Of George Skorup
Sent: Monday, March 28, 2016 6:15 PM
To: af@afmug.com
Subject: Re: [AFMUG] Youtube upload bandwidth

 

Where is your bandwidth control? SM or MikroTik? I'm guessing upstream
router. If you had it on the SM, you wouldn't see the overload.

On 3/28/2016 6:11 PM, Ken Hohhof wrote:

I had a customer today uploading for 2 hours at way over his rate limit, he
says he was uploading a Youtube video.ï¿½ Anyone here familiar with the
Youtube upload process?ï¿½ Why was it not invoking TCP congestion control
and instead trying to ram 5 pounds of data through a 2 pound pipe?

Re: [AFMUG] Russians made a 10 Gbps radio?

2016-03-28 Thread Mathew Howard

Neat! But I can't imagine you get too much range at 256QAM.

On Mon, Mar 28, 2016 at 6:19 PM, Jaime Solorza 
wrote:

> Wonder if Solectek will rebrand this one as well.  12 miles
> On Mar 28, 2016 4:42 PM, "Eric Kuhnke"  wrote:
>
>> http://www.elva-1.com/news_events/a40107
>>
>> http://www.elva-1.com/products/a40106
>>
>> http://www.elva-1.com/data/files/Datasheets/2016_02_24_PPC-10G.pdf
>>
>>
>> 2000 MHz wide channel and 256QAM for 10 Gbps in the FDD 71-86 GHz bands.
>> Question is...  What's the Rx level needed for that, and how quickly does
>> it drop off with rain?
>>
>>
>>

Re: [AFMUG] Russians made a 10 Gbps radio?

2016-03-28 Thread Jaime Solorza

Wonder if Solectek will rebrand this one as well.  12 miles
On Mar 28, 2016 4:42 PM, "Eric Kuhnke"  wrote:

> http://www.elva-1.com/news_events/a40107
>
> http://www.elva-1.com/products/a40106
>
> http://www.elva-1.com/data/files/Datasheets/2016_02_24_PPC-10G.pdf
>
>
> 2000 MHz wide channel and 256QAM for 10 Gbps in the FDD 71-86 GHz bands.
> Question is...  What's the Rx level needed for that, and how quickly does
> it drop off with rain?
>
>
>

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread Ken Hohhof

But Netflix streams adjust to use 100% of the connection capacity, not 500% 
(with the result that the rate limiter throws away most of the packets).

-Original Message-
From: Af [mailto:af-boun...@afmug.com] On Behalf Of Josh Reynolds
Sent: Monday, March 28, 2016 6:13 PM
To: af@afmug.com
Subject: Re: [AFMUG] Youtube upload bandwidth

It works similar to the way netflix stream does.

Send all of the packets. Moar. MOAR. FASTERRR

On Mon, Mar 28, 2016 at 6:11 PM, Ken Hohhof  wrote:
> I had a customer today uploading for 2 hours at way over his rate 
> limit, he says he was uploading a Youtube video.  Anyone here familiar 
> with the Youtube upload process?  Why was it not invoking TCP 
> congestion control and instead trying to ram 5 pounds of data through a 2 
> pound pipe?

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread George Skorup

Where is your bandwidth control? SM or MikroTik? I'm guessing upstream 
router. If you had it on the SM, you wouldn't see the overload.


On 3/28/2016 6:11 PM, Ken Hohhof wrote:


I had a customer today uploading for 2 hours at way over his rate 
limit, he says he was uploading a Youtube video.  Anyone here familiar 
with the Youtube upload process?  Why was it not invoking TCP 
congestion control and instead trying to ram 5 pounds of data through 
a 2 pound pipe?

Re: [AFMUG] Youtube upload bandwidth

2016-03-28 Thread Josh Reynolds

It works similar to the way netflix stream does.

Send all of the packets. Moar. MOAR. FASTERRR

On Mon, Mar 28, 2016 at 6:11 PM, Ken Hohhof  wrote:
> I had a customer today uploading for 2 hours at way over his rate limit, he
> says he was uploading a Youtube video.  Anyone here familiar with the
> Youtube upload process?  Why was it not invoking TCP congestion control and
> instead trying to ram 5 pounds of data through a 2 pound pipe?

[AFMUG] Youtube upload bandwidth

2016-03-28 Thread Ken Hohhof

I had a customer today uploading for 2 hours at way over his rate limit, he
says he was uploading a Youtube video.  Anyone here familiar with the
Youtube upload process?  Why was it not invoking TCP congestion control and
instead trying to ram 5 pounds of data through a 2 pound pipe?

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

I'd really like a combo keypad + rfid, but everything else seems good
and I can always add 3rd party weigand keypad.

Where can I get pricing on this?

On Mon, Mar 28, 2016 at 5:59 PM, Nate Burke  wrote:
> Suprema XPass.  POE Powered card reader, and outputs 12v from the card
> reader for your mag/strike release.
>
> On 3/28/2016 5:55 PM, Josh Reynolds wrote:
>>
>> Basically, you just need a centralized controller and then individual
>> controllers for each door that can operate when they loose
>> connectivity to the main DB. Striker/mag open/close, keypad input.
>>
>> On Mon, Mar 28, 2016 at 5:53 PM, Bruce Robertson  wrote:
>>>
>>> Sounds like a job for a Raspberry Pi
>>>
>>>
>>> On 03/28/2016 03:52 PM, Josh Reynolds wrote:

 I'm dying here. Every single system I can find is shit or costs an arm
 and a leg, to the point where I'm considering starting a company to
 make a better system. I just need an embedded, web based, IP access
 control system. It needs to be able to control the individual door
 access controllers to electronic striker or maglock to the keypad. POE
 here is best. If it requires software running on a windows PC then I
 don't want anything to do with it, even for those of you who are like
 "put it in a vm"... no. Those resources are reserved for properly
 functioning operation systems (and LXC containers!).

 I've got 3 doors at one location, then 2 more doors at 2 other
 locations.

 If it has a mobile app, that's even better.

 I've installed a couple of HID Global and DoorKing systems in the past
 and nothing about this is hard, but the chinese systems are only made
 for a single location.

 Any suggestions?

 !DSPAM:2,56f9b5b850877172017731!

>

Re: [AFMUG] door access control

2016-03-28 Thread George Skorup

We have two 4-door GeoVision controllers in our office. Two electric 
strikes on the outside doors. One maglock on an internal passage door so 
another tenant can use the bathrooms. GeoVision's AS Manager software 
runs on a Windows machine. Has a web GUI.


I think we're using Weigand 26 card readers. Don't quote me on that. I 
believe they read Mifare classic/1k UIDs. I know I can read my fob ID 
with NFC on my Android. We got a bunch of cards with no printed IDs so I 
figured out how to convert them to Weigand after reading with NFC.


On 3/28/2016 5:52 PM, Josh Reynolds wrote:

I'm dying here. Every single system I can find is shit or costs an arm
and a leg, to the point where I'm considering starting a company to
make a better system. I just need an embedded, web based, IP access
control system. It needs to be able to control the individual door
access controllers to electronic striker or maglock to the keypad. POE
here is best. If it requires software running on a windows PC then I
don't want anything to do with it, even for those of you who are like
"put it in a vm"... no. Those resources are reserved for properly
functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past
and nothing about this is hard, but the chinese systems are only made
for a single location.

Any suggestions?

Re: [AFMUG] door access control

2016-03-28 Thread Chuck McCown

No, not quite ePMP slow

From: Eric Kuhnke 
Sent: Monday, March 28, 2016 4:59 PM
To: af@afmug.com 
Subject: Re: [AFMUG] door access control

ePMP slow?

On Mon, Mar 28, 2016 at 3:58 PM, Chuck McCown  wrote:

  I am in the process of installing a new Honeywell NetAXS-123
  It does it all but the GUI/web page is terribly horribly slow.

  -Original Message- From: Josh Reynolds
  Sent: Monday, March 28, 2016 4:56 PM
  To: af@afmug.com
  Subject: Re: [AFMUG] door access control 

  Great picture/meme I read the other day...

  Something like "If Java took care of garbage collection itself, the
  world would have roughly 98% less java apps".

  On Mon, Mar 28, 2016 at 5:55 PM, Eric Kuhnke  wrote:

"Security" systems that run on windows are amazingly bad. It's as if they're
coded by the same people who write embedded industrial control/automation
software. No I don't want to install a 3 year old Sun JRE to run your
software. Here's a great writeup on "why we have stuxnet":

http://www.metzdowd.com/pipermail/cryptography/2016-March/028762.html

I usually do embedded cross-development under Linux, typically with some
hacked-up ancient version of gcc and obtuse command-line utilities that fail
with cryptic error messages until you've spent several hours hacking around
with them.  This time though I had to use Windows because getting the
drivers
going under Linux just wasn't working.  So I go to the web site of the $20B
global hardware vendor that makes this stuff and download their SDK tools.

  "We've detected that you've got A/V running.  You should disable this in
  order to run our tools.  Are you sure you want to continue?".

Yeah, I'm not doing that, so I click continue.

  "I said, WE'VE DETECTED THAT YOU'VE GOT A/V RUNNING AND YOU REALLY NEED TO
  DISABLE IT.  Waiting for A/V to be disabled".

OK, so I'll disable A/V.  At which point Windows goes to about Defcon 2 and
starts screaming about the imminent collapse of civilisation, but I don't
have
any choice.

So the install starts, except it won't install in $Program_Files because
that
has, you know, security applied to it.  It wants to create its own public
directory off $SystemRoot and install to that.

OK, so I'll allow it to do that.

Now Windows Firewall is throwing up warnings about tclsh groping around on
the
Internet (they install a complete Cygwin environment, presumably because
their
Windows SDK is all scripted in Tcl).  So I allow that, and various other
things that I get warnings about.

It then proceeds to download and install a 2-year-old version of Java, which
apparently is needed by their SDK.

After that, it reaches out to about a hundred-odd HTTP URLs, downloads
binary
blobs from them, and installs them.  I tried setting up a tunnel to an HTTPS
equivalent but it only does HTTP.

Finally, it's finished.  The app starts up and requests elevation to
Administrator.  Then it starts grabbing more binary blobs from HTTP URLs and
installing them.

All that was just from watching what was happening, I didn't do any further
checking to see what other horrors lurked beneath the surface, but given
what
I'd seen so far it was bound to be pretty bad.

I think we need to treat any embedded device developed via this vendor as
pre-
compromised.  And that includes the aerospace and military ones.

Peter.

On Mon, Mar 28, 2016 at 3:52 PM, Josh Reynolds  wrote:

  I'm dying here. Every single system I can find is shit or costs an arm
  and a leg, to the point where I'm considering starting a company to
  make a better system. I just need an embedded, web based, IP access
  control system. It needs to be able to control the individual door
  access controllers to electronic striker or maglock to the keypad. POE
  here is best. If it requires software running on a windows PC then I
  don't want anything to do with it, even for those of you who are like
  "put it in a vm"... no. Those resources are reserved for properly
  functioning operation systems (and LXC containers!).

  I've got 3 doors at one location, then 2 more doors at 2 other locations.

  If it has a mobile app, that's even better.

  I've installed a couple of HID Global and DoorKing systems in the past
  and nothing about this is hard, but the chinese systems are only made
  for a single location.

  Any suggestions?

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Will look, thanks Nate.

Earlier I was looking for security access control and came upon ESD
based proximity grids, underground fiber pressure/stress alerts,
pipeline monitoring fiber, megnetic sensors for roadways, and passive
cell device locators. The rabbit hole goes so deep on this stuff :P

On Mon, Mar 28, 2016 at 5:59 PM, Nate Burke  wrote:
> Suprema XPass.  POE Powered card reader, and outputs 12v from the card
> reader for your mag/strike release.
>
> On 3/28/2016 5:55 PM, Josh Reynolds wrote:
>>
>> Basically, you just need a centralized controller and then individual
>> controllers for each door that can operate when they loose
>> connectivity to the main DB. Striker/mag open/close, keypad input.
>>
>> On Mon, Mar 28, 2016 at 5:53 PM, Bruce Robertson  wrote:
>>>
>>> Sounds like a job for a Raspberry Pi
>>>
>>>
>>> On 03/28/2016 03:52 PM, Josh Reynolds wrote:

 I'm dying here. Every single system I can find is shit or costs an arm
 and a leg, to the point where I'm considering starting a company to
 make a better system. I just need an embedded, web based, IP access
 control system. It needs to be able to control the individual door
 access controllers to electronic striker or maglock to the keypad. POE
 here is best. If it requires software running on a windows PC then I
 don't want anything to do with it, even for those of you who are like
 "put it in a vm"... no. Those resources are reserved for properly
 functioning operation systems (and LXC containers!).

 I've got 3 doors at one location, then 2 more doors at 2 other
 locations.

 If it has a mobile app, that's even better.

 I've installed a couple of HID Global and DoorKing systems in the past
 and nothing about this is hard, but the chinese systems are only made
 for a single location.

 Any suggestions?

 !DSPAM:2,56f9b5b850877172017731!

>

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Yeah, I looked at the NetAXS too.

So not only is it shit (slow!), but it's also EXPENSIVE :)

There's no reason you shouldn't be able to have a reasonable system
for ~ $400-600 per door, including lock/keypad/door control +
centralized IP access controller.


On Mon, Mar 28, 2016 at 5:58 PM, Chuck McCown  wrote:
> I am in the process of installing a new Honeywell NetAXS-123
> It does it all but the GUI/web page is terribly horribly slow.
>
> -Original Message- From: Josh Reynolds
> Sent: Monday, March 28, 2016 4:56 PM
> To: af@afmug.com
> Subject: Re: [AFMUG] door access control
>
> Great picture/meme I read the other day...
>
> Something like "If Java took care of garbage collection itself, the
> world would have roughly 98% less java apps".
>
> On Mon, Mar 28, 2016 at 5:55 PM, Eric Kuhnke  wrote:
>>
>> "Security" systems that run on windows are amazingly bad. It's as if
>> they're
>> coded by the same people who write embedded industrial control/automation
>> software. No I don't want to install a 3 year old Sun JRE to run your
>> software. Here's a great writeup on "why we have stuxnet":
>>
>> http://www.metzdowd.com/pipermail/cryptography/2016-March/028762.html
>>
>> I usually do embedded cross-development under Linux, typically with some
>> hacked-up ancient version of gcc and obtuse command-line utilities that
>> fail
>> with cryptic error messages until you've spent several hours hacking
>> around
>> with them.  This time though I had to use Windows because getting the
>> drivers
>> going under Linux just wasn't working.  So I go to the web site of the
>> $20B
>> global hardware vendor that makes this stuff and download their SDK tools.
>>
>>   "We've detected that you've got A/V running.  You should disable this in
>>   order to run our tools.  Are you sure you want to continue?".
>>
>> Yeah, I'm not doing that, so I click continue.
>>
>>   "I said, WE'VE DETECTED THAT YOU'VE GOT A/V RUNNING AND YOU REALLY NEED
>> TO
>>   DISABLE IT.  Waiting for A/V to be disabled".
>>
>> OK, so I'll disable A/V.  At which point Windows goes to about Defcon 2
>> and
>> starts screaming about the imminent collapse of civilisation, but I don't
>> have
>> any choice.
>>
>> So the install starts, except it won't install in $Program_Files because
>> that
>> has, you know, security applied to it.  It wants to create its own public
>> directory off $SystemRoot and install to that.
>>
>> OK, so I'll allow it to do that.
>>
>> Now Windows Firewall is throwing up warnings about tclsh groping around on
>> the
>> Internet (they install a complete Cygwin environment, presumably because
>> their
>> Windows SDK is all scripted in Tcl).  So I allow that, and various other
>> things that I get warnings about.
>>
>> It then proceeds to download and install a 2-year-old version of Java,
>> which
>> apparently is needed by their SDK.
>>
>> After that, it reaches out to about a hundred-odd HTTP URLs, downloads
>> binary
>> blobs from them, and installs them.  I tried setting up a tunnel to an
>> HTTPS
>> equivalent but it only does HTTP.
>>
>> Finally, it's finished.  The app starts up and requests elevation to
>> Administrator.  Then it starts grabbing more binary blobs from HTTP URLs
>> and
>> installing them.
>>
>> All that was just from watching what was happening, I didn't do any
>> further
>> checking to see what other horrors lurked beneath the surface, but given
>> what
>> I'd seen so far it was bound to be pretty bad.
>>
>> I think we need to treat any embedded device developed via this vendor as
>> pre-
>> compromised.  And that includes the aerospace and military ones.
>>
>> Peter.
>>
>>
>>
>>
>>
>> On Mon, Mar 28, 2016 at 3:52 PM, Josh Reynolds 
>> wrote:
>>>
>>>
>>> I'm dying here. Every single system I can find is shit or costs an arm
>>> and a leg, to the point where I'm considering starting a company to
>>> make a better system. I just need an embedded, web based, IP access
>>> control system. It needs to be able to control the individual door
>>> access controllers to electronic striker or maglock to the keypad. POE
>>> here is best. If it requires software running on a windows PC then I
>>> don't want anything to do with it, even for those of you who are like
>>> "put it in a vm"... no. Those resources are reserved for properly
>>> functioning operation systems (and LXC containers!).
>>>
>>> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>>>
>>> If it has a mobile app, that's even better.
>>>
>>> I've installed a couple of HID Global and DoorKing systems in the past
>>> and nothing about this is hard, but the chinese systems are only made
>>> for a single location.
>>>
>>> Any suggestions?
>>
>>
>>
>

Re: [AFMUG] door access control

2016-03-28 Thread Nate Burke

Suprema XPass.  POE Powered card reader, and outputs 12v from the card 
reader for your mag/strike release.


On 3/28/2016 5:55 PM, Josh Reynolds wrote:

Basically, you just need a centralized controller and then individual
controllers for each door that can operate when they loose
connectivity to the main DB. Striker/mag open/close, keypad input.

On Mon, Mar 28, 2016 at 5:53 PM, Bruce Robertson  wrote:

Sounds like a job for a Raspberry Pi


On 03/28/2016 03:52 PM, Josh Reynolds wrote:

I'm dying here. Every single system I can find is shit or costs an arm
and a leg, to the point where I'm considering starting a company to
make a better system. I just need an embedded, web based, IP access
control system. It needs to be able to control the individual door
access controllers to electronic striker or maglock to the keypad. POE
here is best. If it requires software running on a windows PC then I
don't want anything to do with it, even for those of you who are like
"put it in a vm"... no. Those resources are reserved for properly
functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past
and nothing about this is hard, but the chinese systems are only made
for a single location.

Any suggestions?


!DSPAM:2,56f9b5b850877172017731!

Re: [AFMUG] door access control

2016-03-28 Thread Eric Kuhnke

ePMP slow?

On Mon, Mar 28, 2016 at 3:58 PM, Chuck McCown  wrote:

> I am in the process of installing a new Honeywell NetAXS-123
> It does it all but the GUI/web page is terribly horribly slow.
>
> -Original Message- From: Josh Reynolds
> Sent: Monday, March 28, 2016 4:56 PM
> To: af@afmug.com
> Subject: Re: [AFMUG] door access control
>
>
> Great picture/meme I read the other day...
>
> Something like "If Java took care of garbage collection itself, the
> world would have roughly 98% less java apps".
>
> On Mon, Mar 28, 2016 at 5:55 PM, Eric Kuhnke 
> wrote:
>
>> "Security" systems that run on windows are amazingly bad. It's as if
>> they're
>> coded by the same people who write embedded industrial control/automation
>> software. No I don't want to install a 3 year old Sun JRE to run your
>> software. Here's a great writeup on "why we have stuxnet":
>>
>> http://www.metzdowd.com/pipermail/cryptography/2016-March/028762.html
>>
>> I usually do embedded cross-development under Linux, typically with some
>> hacked-up ancient version of gcc and obtuse command-line utilities that
>> fail
>> with cryptic error messages until you've spent several hours hacking
>> around
>> with them.  This time though I had to use Windows because getting the
>> drivers
>> going under Linux just wasn't working.  So I go to the web site of the
>> $20B
>> global hardware vendor that makes this stuff and download their SDK tools.
>>
>>   "We've detected that you've got A/V running.  You should disable this in
>>   order to run our tools.  Are you sure you want to continue?".
>>
>> Yeah, I'm not doing that, so I click continue.
>>
>>   "I said, WE'VE DETECTED THAT YOU'VE GOT A/V RUNNING AND YOU REALLY NEED
>> TO
>>   DISABLE IT.  Waiting for A/V to be disabled".
>>
>> OK, so I'll disable A/V.  At which point Windows goes to about Defcon 2
>> and
>> starts screaming about the imminent collapse of civilisation, but I don't
>> have
>> any choice.
>>
>> So the install starts, except it won't install in $Program_Files because
>> that
>> has, you know, security applied to it.  It wants to create its own public
>> directory off $SystemRoot and install to that.
>>
>> OK, so I'll allow it to do that.
>>
>> Now Windows Firewall is throwing up warnings about tclsh groping around on
>> the
>> Internet (they install a complete Cygwin environment, presumably because
>> their
>> Windows SDK is all scripted in Tcl).  So I allow that, and various other
>> things that I get warnings about.
>>
>> It then proceeds to download and install a 2-year-old version of Java,
>> which
>> apparently is needed by their SDK.
>>
>> After that, it reaches out to about a hundred-odd HTTP URLs, downloads
>> binary
>> blobs from them, and installs them.  I tried setting up a tunnel to an
>> HTTPS
>> equivalent but it only does HTTP.
>>
>> Finally, it's finished.  The app starts up and requests elevation to
>> Administrator.  Then it starts grabbing more binary blobs from HTTP URLs
>> and
>> installing them.
>>
>> All that was just from watching what was happening, I didn't do any
>> further
>> checking to see what other horrors lurked beneath the surface, but given
>> what
>> I'd seen so far it was bound to be pretty bad.
>>
>> I think we need to treat any embedded device developed via this vendor as
>> pre-
>> compromised.  And that includes the aerospace and military ones.
>>
>> Peter.
>>
>>
>>
>>
>>
>> On Mon, Mar 28, 2016 at 3:52 PM, Josh Reynolds 
>> wrote:
>>
>>>
>>> I'm dying here. Every single system I can find is shit or costs an arm
>>> and a leg, to the point where I'm considering starting a company to
>>> make a better system. I just need an embedded, web based, IP access
>>> control system. It needs to be able to control the individual door
>>> access controllers to electronic striker or maglock to the keypad. POE
>>> here is best. If it requires software running on a windows PC then I
>>> don't want anything to do with it, even for those of you who are like
>>> "put it in a vm"... no. Those resources are reserved for properly
>>> functioning operation systems (and LXC containers!).
>>>
>>> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>>>
>>> If it has a mobile app, that's even better.
>>>
>>> I've installed a couple of HID Global and DoorKing systems in the past
>>> and nothing about this is hard, but the chinese systems are only made
>>> for a single location.
>>>
>>> Any suggestions?
>>>
>>
>>
>>
>

Re: [AFMUG] door access control

2016-03-28 Thread Chuck McCown

I am in the process of installing a new Honeywell NetAXS-123
It does it all but the GUI/web page is terribly horribly slow.

-Original Message- 
From: Josh Reynolds

Sent: Monday, March 28, 2016 4:56 PM
To: af@afmug.com
Subject: Re: [AFMUG] door access control

Great picture/meme I read the other day...

Something like "If Java took care of garbage collection itself, the
world would have roughly 98% less java apps".

On Mon, Mar 28, 2016 at 5:55 PM, Eric Kuhnke  wrote:
"Security" systems that run on windows are amazingly bad. It's as if 
they're

coded by the same people who write embedded industrial control/automation
software. No I don't want to install a 3 year old Sun JRE to run your
software. Here's a great writeup on "why we have stuxnet":

http://www.metzdowd.com/pipermail/cryptography/2016-March/028762.html

I usually do embedded cross-development under Linux, typically with some
hacked-up ancient version of gcc and obtuse command-line utilities that 
fail
with cryptic error messages until you've spent several hours hacking 
around

with them.  This time though I had to use Windows because getting the
drivers
going under Linux just wasn't working.  So I go to the web site of the 
$20B

global hardware vendor that makes this stuff and download their SDK tools.

  "We've detected that you've got A/V running.  You should disable this in
  order to run our tools.  Are you sure you want to continue?".

Yeah, I'm not doing that, so I click continue.

  "I said, WE'VE DETECTED THAT YOU'VE GOT A/V RUNNING AND YOU REALLY NEED 
TO

  DISABLE IT.  Waiting for A/V to be disabled".

OK, so I'll disable A/V.  At which point Windows goes to about Defcon 2 
and

starts screaming about the imminent collapse of civilisation, but I don't
have
any choice.

So the install starts, except it won't install in $Program_Files because
that
has, you know, security applied to it.  It wants to create its own public
directory off $SystemRoot and install to that.

OK, so I'll allow it to do that.

Now Windows Firewall is throwing up warnings about tclsh groping around on
the
Internet (they install a complete Cygwin environment, presumably because
their
Windows SDK is all scripted in Tcl).  So I allow that, and various other
things that I get warnings about.

It then proceeds to download and install a 2-year-old version of Java, 
which

apparently is needed by their SDK.

After that, it reaches out to about a hundred-odd HTTP URLs, downloads
binary
blobs from them, and installs them.  I tried setting up a tunnel to an 
HTTPS

equivalent but it only does HTTP.

Finally, it's finished.  The app starts up and requests elevation to
Administrator.  Then it starts grabbing more binary blobs from HTTP URLs 
and

installing them.

All that was just from watching what was happening, I didn't do any 
further

checking to see what other horrors lurked beneath the surface, but given
what
I'd seen so far it was bound to be pretty bad.

I think we need to treat any embedded device developed via this vendor as
pre-
compromised.  And that includes the aerospace and military ones.

Peter.

On Mon, Mar 28, 2016 at 3:52 PM, Josh Reynolds  
wrote:

I'm dying here. Every single system I can find is shit or costs an arm
and a leg, to the point where I'm considering starting a company to
make a better system. I just need an embedded, web based, IP access
control system. It needs to be able to control the individual door
access controllers to electronic striker or maglock to the keypad. POE
here is best. If it requires software running on a windows PC then I
don't want anything to do with it, even for those of you who are like
"put it in a vm"... no. Those resources are reserved for properly
functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past
and nothing about this is hard, but the chinese systems are only made
for a single location.

Any suggestions?

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Great picture/meme I read the other day...

Something like "If Java took care of garbage collection itself, the
world would have roughly 98% less java apps".

On Mon, Mar 28, 2016 at 5:55 PM, Eric Kuhnke  wrote:
> "Security" systems that run on windows are amazingly bad. It's as if they're
> coded by the same people who write embedded industrial control/automation
> software. No I don't want to install a 3 year old Sun JRE to run your
> software. Here's a great writeup on "why we have stuxnet":
>
> http://www.metzdowd.com/pipermail/cryptography/2016-March/028762.html
>
> I usually do embedded cross-development under Linux, typically with some
> hacked-up ancient version of gcc and obtuse command-line utilities that fail
> with cryptic error messages until you've spent several hours hacking around
> with them.  This time though I had to use Windows because getting the
> drivers
> going under Linux just wasn't working.  So I go to the web site of the $20B
> global hardware vendor that makes this stuff and download their SDK tools.
>
>   "We've detected that you've got A/V running.  You should disable this in
>   order to run our tools.  Are you sure you want to continue?".
>
> Yeah, I'm not doing that, so I click continue.
>
>   "I said, WE'VE DETECTED THAT YOU'VE GOT A/V RUNNING AND YOU REALLY NEED TO
>   DISABLE IT.  Waiting for A/V to be disabled".
>
> OK, so I'll disable A/V.  At which point Windows goes to about Defcon 2 and
> starts screaming about the imminent collapse of civilisation, but I don't
> have
> any choice.
>
> So the install starts, except it won't install in $Program_Files because
> that
> has, you know, security applied to it.  It wants to create its own public
> directory off $SystemRoot and install to that.
>
> OK, so I'll allow it to do that.
>
> Now Windows Firewall is throwing up warnings about tclsh groping around on
> the
> Internet (they install a complete Cygwin environment, presumably because
> their
> Windows SDK is all scripted in Tcl).  So I allow that, and various other
> things that I get warnings about.
>
> It then proceeds to download and install a 2-year-old version of Java, which
> apparently is needed by their SDK.
>
> After that, it reaches out to about a hundred-odd HTTP URLs, downloads
> binary
> blobs from them, and installs them.  I tried setting up a tunnel to an HTTPS
> equivalent but it only does HTTP.
>
> Finally, it's finished.  The app starts up and requests elevation to
> Administrator.  Then it starts grabbing more binary blobs from HTTP URLs and
> installing them.
>
> All that was just from watching what was happening, I didn't do any further
> checking to see what other horrors lurked beneath the surface, but given
> what
> I'd seen so far it was bound to be pretty bad.
>
> I think we need to treat any embedded device developed via this vendor as
> pre-
> compromised.  And that includes the aerospace and military ones.
>
> Peter.
>
>
>
>
>
> On Mon, Mar 28, 2016 at 3:52 PM, Josh Reynolds  wrote:
>>
>> I'm dying here. Every single system I can find is shit or costs an arm
>> and a leg, to the point where I'm considering starting a company to
>> make a better system. I just need an embedded, web based, IP access
>> control system. It needs to be able to control the individual door
>> access controllers to electronic striker or maglock to the keypad. POE
>> here is best. If it requires software running on a windows PC then I
>> don't want anything to do with it, even for those of you who are like
>> "put it in a vm"... no. Those resources are reserved for properly
>> functioning operation systems (and LXC containers!).
>>
>> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>>
>> If it has a mobile app, that's even better.
>>
>> I've installed a couple of HID Global and DoorKing systems in the past
>> and nothing about this is hard, but the chinese systems are only made
>> for a single location.
>>
>> Any suggestions?
>
>

Re: [AFMUG] door access control

2016-03-28 Thread Eric Kuhnke

"Security" systems that run on windows are amazingly bad. It's as if
they're coded by the same people who write embedded industrial
control/automation software. No I don't want to install a 3 year old Sun
JRE to run your software. Here's a great writeup on "why we have stuxnet":

http://www.metzdowd.com/pipermail/cryptography/2016-March/028762.html

I usually do embedded cross-development under Linux, typically with some
hacked-up ancient version of gcc and obtuse command-line utilities that fail
with cryptic error messages until you've spent several hours hacking around
with them.  This time though I had to use Windows because getting the drivers
going under Linux just wasn't working.  So I go to the web site of the $20B
global hardware vendor that makes this stuff and download their SDK tools.

  "We've detected that you've got A/V running.  You should disable this in
  order to run our tools.  Are you sure you want to continue?".

Yeah, I'm not doing that, so I click continue.

  "I said, WE'VE DETECTED THAT YOU'VE GOT A/V RUNNING AND YOU REALLY NEED TO
  DISABLE IT.  Waiting for A/V to be disabled".

OK, so I'll disable A/V.  At which point Windows goes to about Defcon 2 and
starts screaming about the imminent collapse of civilisation, but I don't have
any choice.

So the install starts, except it won't install in $Program_Files because that
has, you know, security applied to it.  It wants to create its own public
directory off $SystemRoot and install to that.

OK, so I'll allow it to do that.

Now Windows Firewall is throwing up warnings about tclsh groping around on the
Internet (they install a complete Cygwin environment, presumably because their
Windows SDK is all scripted in Tcl).  So I allow that, and various other
things that I get warnings about.

It then proceeds to download and install a 2-year-old version of Java, which
apparently is needed by their SDK.

After that, it reaches out to about a hundred-odd HTTP URLs, downloads binary
blobs from them, and installs them.  I tried setting up a tunnel to an HTTPS
equivalent but it only does HTTP.

Finally, it's finished.  The app starts up and requests elevation to
Administrator.  Then it starts grabbing more binary blobs from HTTP URLs and
installing them.

All that was just from watching what was happening, I didn't do any further
checking to see what other horrors lurked beneath the surface, but given what
I'd seen so far it was bound to be pretty bad.

I think we need to treat any embedded device developed via this vendor as pre-
compromised.  And that includes the aerospace and military ones.

Peter.

On Mon, Mar 28, 2016 at 3:52 PM, Josh Reynolds  wrote:

> I'm dying here. Every single system I can find is shit or costs an arm
> and a leg, to the point where I'm considering starting a company to
> make a better system. I just need an embedded, web based, IP access
> control system. It needs to be able to control the individual door
> access controllers to electronic striker or maglock to the keypad. POE
> here is best. If it requires software running on a windows PC then I
> don't want anything to do with it, even for those of you who are like
> "put it in a vm"... no. Those resources are reserved for properly
> functioning operation systems (and LXC containers!).
>
> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>
> If it has a mobile app, that's even better.
>
> I've installed a couple of HID Global and DoorKing systems in the past
> and nothing about this is hard, but the chinese systems are only made
> for a single location.
>
> Any suggestions?
>

Re: [AFMUG] door access control

2016-03-28 Thread Josh Reynolds

Basically, you just need a centralized controller and then individual
controllers for each door that can operate when they loose
connectivity to the main DB. Striker/mag open/close, keypad input.

On Mon, Mar 28, 2016 at 5:53 PM, Bruce Robertson  wrote:
> Sounds like a job for a Raspberry Pi
>
>
> On 03/28/2016 03:52 PM, Josh Reynolds wrote:
>>
>> I'm dying here. Every single system I can find is shit or costs an arm
>> and a leg, to the point where I'm considering starting a company to
>> make a better system. I just need an embedded, web based, IP access
>> control system. It needs to be able to control the individual door
>> access controllers to electronic striker or maglock to the keypad. POE
>> here is best. If it requires software running on a windows PC then I
>> don't want anything to do with it, even for those of you who are like
>> "put it in a vm"... no. Those resources are reserved for properly
>> functioning operation systems (and LXC containers!).
>>
>> I've got 3 doors at one location, then 2 more doors at 2 other locations.
>>
>> If it has a mobile app, that's even better.
>>
>> I've installed a couple of HID Global and DoorKing systems in the past
>> and nothing about this is hard, but the chinese systems are only made
>> for a single location.
>>
>> Any suggestions?
>>
>>
>> !DSPAM:2,56f9b5b850877172017731!
>>
>>
>

Re: [AFMUG] door access control

2016-03-28 Thread Bruce Robertson


Sounds like a job for a Raspberry Pi

On 03/28/2016 03:52 PM, Josh Reynolds wrote:

I'm dying here. Every single system I can find is shit or costs an arm
and a leg, to the point where I'm considering starting a company to
make a better system. I just need an embedded, web based, IP access
control system. It needs to be able to control the individual door
access controllers to electronic striker or maglock to the keypad. POE
here is best. If it requires software running on a windows PC then I
don't want anything to do with it, even for those of you who are like
"put it in a vm"... no. Those resources are reserved for properly
functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past
and nothing about this is hard, but the chinese systems are only made
for a single location.

Any suggestions?


!DSPAM:2,56f9b5b850877172017731!

[AFMUG] door access control

2016-03-28 Thread Josh Reynolds

I'm dying here. Every single system I can find is shit or costs an arm
and a leg, to the point where I'm considering starting a company to
make a better system. I just need an embedded, web based, IP access
control system. It needs to be able to control the individual door
access controllers to electronic striker or maglock to the keypad. POE
here is best. If it requires software running on a windows PC then I
don't want anything to do with it, even for those of you who are like
"put it in a vm"... no. Those resources are reserved for properly
functioning operation systems (and LXC containers!).

I've got 3 doors at one location, then 2 more doors at 2 other locations.

If it has a mobile app, that's even better.

I've installed a couple of HID Global and DoorKing systems in the past
and nothing about this is hard, but the chinese systems are only made
for a single location.

Any suggestions?

Re: [AFMUG] SyncPipe question

2016-03-28 Thread Matt

What is time frame on 1u configurable sync injector?


On Sun, Mar 27, 2016 at 1:40 PM, Forrest Christian (List Account)
 wrote:
> There's already one of these on the roadmap.  Unit which will sync two
> radios.
>
> On Mar 27, 2016 11:37 AM, "George Skorup"  wrote:
>>
>> Woulda been nice. Oh well.
>>
>> This I think is another good example for a UGPS-like SyncPipe. Could I
>> send a climber up to take the Parasitic pipe out and then throw on a
>> SyncInjector at the bottom... sure. Burning a GigE SyncInjector for a 1 AP
>> site though.
>>
>> On 3/26/2016 6:42 PM, Forrest Christian (List Account) wrote:
>>
>> I wouldn't recommend this.   Mainly because it's going to unbalance the
>> gigabit ethernet pairs and likely cause ethernet errors as the power
>> consumption changes.
>>
>> On Mar 26, 2016 7:15 AM, "George Skorup"  wrote:
>>>
>>> Dumb question, probably best answered by Forrest. Say I have one of the
>>> newer universal Parasitic SyncPipes. Newer meaning Rev G+. Universal meaning
>>> you can use them on standard Canopy 30VDC POE and the stupid 320/430 pinout,
>>> since they tap only the two power pins that don't change. OK, so now say I
>>> take a GigE injector and configure a 450 AP to negotiate 1000BaseT. Will
>>> GigE work... "through" the Parasitic pipe? I know the 10/100 data pairs are
>>> passed straight through. Not sure about the other two pairs. Since it taps
>>> only two pins for power, I doubt there's any bonding going on.
>>
>>
>

Re: [AFMUG] PMP450 - CPEs refusing to reconnect

2016-03-28 Thread George Skorup

You'll need to reboot the AP. I'm actually really surprised that your AP 
has been running on 13.4 for 200+ days. I figured you'd have seen some 
watchdog resets.


Anyway.. we see this somewhat frequently. Sometimes we get SMs failing 
to register due to "out of range" when clearly they are within range. 
Same symptoms. They continuously try to register to the same AP. I 
suspect that they're getting through the registration process cleanly, 
but whatever is screwed up in memory on the AP causes the session to 
fail. Or never fully establish from the AP's perspective. So the SM 
never locks out the sector and attempts to register to another. Other 
weird things happen too. Reboot AP, works fine again. Until it screws up 
again. We had a ton more issues when it was colder outside.


Aaron posted a couple weeks ago about the FPGA memory timing problem. As 
he said, you can't predict what's going to happen when your memory 
controller and contents are potentially unstable.


On 3/28/2016 2:32 PM, Sean Heskett wrote:
in my opinion 13.2.1 and 14.2.1(Build 8) are the only "stable" 
versions for the 450APs.  14.1.2(build 8) is still beta tho.


2 cents

-sean


On Mon, Mar 28, 2016 at 11:51 AM, Chris Wright > wrote:


I have a PMP450 AP on 13.4 up for 228 days. The last successful
CPE reconnect was six days ago. Now we’re noticing that CPE’s who
disconnect are unable to reconnect to that AP at all. Furthermore,
in spite of being able to see alternate APs on secondary color
codes, the CPEs seem intent on connecting to the problem AP.
Here’s what my SM Registration Failures page looks like currently:

Registration Failures
Statisticshttp://10.10.10.246/_min.gif?mac_esn=0a003ea081e2

Number of Registration Grant Failures :



465

Most Recent Registration Failure
Listhttp://10.10.10.246/_min.gif?mac_esn=0a003ea081e2

*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:42:45
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:40:10
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:35:09
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 10:31:26
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:23:52
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 10:23:14
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:21:49
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 10:10:46
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:02:56
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 10:01:38
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:58:21
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 09:54:27
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:51:02
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 09:49:30
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 09:40:01
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 09:27:56
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:24:59
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:23:11
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:19:03
PDT : Status : 20 Flag : 0
*MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:13:24
PDT : Status : 20 Flag : 0

I’d rather not reboot the AP as I’m fearful it could make the
problem worse for a few dozen more people. Anyone seen this before?

Chris Wright

Network Administrator

Velociter Wireless

209-838-1221 x115

Re: [AFMUG] PMP450 - CPEs refusing to reconnect

2016-03-28 Thread Sean Heskett

in my opinion 13.2.1 and 14.2.1(Build 8) are the only "stable" versions for
the 450APs.  14.1.2(build 8) is still beta tho.

2 cents

-sean


On Mon, Mar 28, 2016 at 11:51 AM, Chris Wright  wrote:

> I have a PMP450 AP on 13.4 up for 228 days. The last successful CPE
> reconnect was six days ago. Now we’re noticing that CPE’s who disconnect
> are unable to reconnect to that AP at all. Furthermore, in spite of being
> able to see alternate APs on secondary color codes, the CPEs seem intent on
> connecting to the problem AP. Here’s what my SM Registration Failures page
> looks like currently:
>
>
>
> Registration Failures Statistics[image:
> http://10.10.10.246/_min.gif?mac_esn=0a003ea081e2]
>
> Number of Registration Grant Failures :
>
> 465
>
> Most Recent Registration Failure List[image:
> http://10.10.10.246/_min.gif?mac_esn=0a003ea081e2]
>
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:42:45 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:40:10 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:35:09 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 10:31:26 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:23:52 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 10:23:14 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:21:49 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 10:10:46 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 10:02:56 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 10:01:38 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:58:21 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 09:54:27 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:51:02 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 09:49:30 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 09:40:01 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-a8-67 RegReq no time ref 03/28/2016 : 09:27:56 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:24:59 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:23:11 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:19:03 PDT :
> Status : 20 Flag : 0
> *MAC : *0a-00-3e-a1-95-aa RegReq no time ref 03/28/2016 : 09:13:24 PDT :
> Status : 20 Flag : 0
>
>
>
> I’d rather not reboot the AP as I’m fearful it could make the problem
> worse for a few dozen more people. Anyone seen this before?
>
>
>
> Chris Wright
>
> Network Administrator
>
> Velociter Wireless
>
> 209-838-1221 x115
>
>
>

Re: [AFMUG] ePMP Force 110 PTP bug?

2016-03-28 Thread Josh Luthman

Yep

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373
On Mar 28, 2016 1:22 PM, "Mathew Howard"  wrote:

> Did they have new stickers over the originals (like if the part number had
> been changed)?
>
> We got some that were apparently originally the non-US version and that
> were re-programmed to be Force 110 PTP's, and at least one of them did
> that. Some others stayed unlocked, but I was careful to use them where they
> aren't likely to go over 10 SM's, just in case they decide to lock
> themselves someday.
>
> On Mon, Mar 28, 2016 at 11:37 AM, Josh Luthman <
> j...@imaginenetworksllc.com> wrote:
>
>> I have a couple of units that I hand wrote as Force 110 PTP.  This is the
>> same thing as the 5 GHz AP lite.
>>
>> I log into them with 2.3.4 and they say they can do 60 registrations.  I
>> change it to 120 and it accepts that.  I update to 2.6.1 and then I'm
>> limited to 10 registrations.
>>
>> Update before you deploy...
>>
>> Josh Luthman
>> Office: 937-552-2340
>> Direct: 937-552-2343
>> 1100 Wayne St
>> Suite 1337
>> Troy, OH 45373
>>
>
>

Re: [AFMUG] ePMP Force 110 PTP bug?

2016-03-28 Thread Mathew Howard

Did they have new stickers over the originals (like if the part number had
been changed)?

We got some that were apparently originally the non-US version and that
were re-programmed to be Force 110 PTP's, and at least one of them did
that. Some others stayed unlocked, but I was careful to use them where they
aren't likely to go over 10 SM's, just in case they decide to lock
themselves someday.

On Mon, Mar 28, 2016 at 11:37 AM, Josh Luthman 
wrote:

> I have a couple of units that I hand wrote as Force 110 PTP.  This is the
> same thing as the 5 GHz AP lite.
>
> I log into them with 2.3.4 and they say they can do 60 registrations.  I
> change it to 120 and it accepts that.  I update to 2.6.1 and then I'm
> limited to 10 registrations.
>
> Update before you deploy...
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Jaime Solorza

not yet

Jaime Solorza
Wireless Systems Architect
915-861-1390

On Mon, Mar 28, 2016 at 11:16 AM, Bill Prince  wrote:

> Oh. Got massaging seats in your work vehicle?
>
> bp
> 
>
>
> On 3/28/2016 10:15 AM, Jaime Solorza wrote:
>
> yes...I am somebody nowgetting massages...
>
> Jaime Solorza
> Wireless Systems Architect
> 915-861-1390
>
> On Mon, Mar 28, 2016 at 11:14 AM, Bill Prince  wrote:
>
>> Appears to be working in CA.
>>
>> bp
>> 
>>
>> On 3/28/2016 8:47 AM, Jaime Solorza wrote:
>>
>>>
>>> Is this thing on?
>>>
>>>
>>
>
>

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Bill Prince


Oh. Got massaging seats in your work vehicle?

bp


On 3/28/2016 10:15 AM, Jaime Solorza wrote:

yes...I am somebody nowgetting massages...

Jaime Solorza
Wireless Systems Architect
915-861-1390

On Mon, Mar 28, 2016 at 11:14 AM, Bill Prince > wrote:


Appears to be working in CA.

bp


On 3/28/2016 8:47 AM, Jaime Solorza wrote:


Is this thing on?

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Jaime Solorza

yes...I am somebody nowgetting massages...

Jaime Solorza
Wireless Systems Architect
915-861-1390

On Mon, Mar 28, 2016 at 11:14 AM, Bill Prince  wrote:

> Appears to be working in CA.
>
> bp
> 
>
> On 3/28/2016 8:47 AM, Jaime Solorza wrote:
>
>>
>> Is this thing on?
>>
>>
>

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Ken Hohhof


https://en.wikipedia.org/wiki/Thing_(The_Addams_Family)

-Original Message- 
From: Josh Reynolds 
Sent: Monday, March 28, 2016 11:03 AM 
To: af@afmug.com 
Subject: Re: [AFMUG] Testing 1 2 3 


Nope. ;)

On Mon, Mar 28, 2016 at 10:47 AM, Jaime Solorza
 wrote:

Is this thing on?

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Mathew Howard

I object.

On Mon, Mar 28, 2016 at 11:03 AM, Josh Reynolds 
wrote:

> Nope. ;)
>
> On Mon, Mar 28, 2016 at 10:47 AM, Jaime Solorza
>  wrote:
> > Is this thing on?
>

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Josh Reynolds

Nope. ;)

On Mon, Mar 28, 2016 at 10:47 AM, Jaime Solorza
 wrote:
> Is this thing on?

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Josh Luthman

Uhm, tomorrow?

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373
On Mar 28, 2016 11:49 AM, "Jaime Solorza"  wrote:

> Bueno...probando.
> On Mar 28, 2016 9:48 AM, "Josh Luthman" 
> wrote:
>
>> What?!
>>
>> Josh Luthman
>> Office: 937-552-2340
>> Direct: 937-552-2343
>> 1100 Wayne St
>> Suite 1337
>> Troy, OH 45373
>> On Mar 28, 2016 11:47 AM, "Jaime Solorza" 
>> wrote:
>>
>>> Is this thing on?
>>>
>>

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Jaime Solorza

Bueno...probando.
On Mar 28, 2016 9:48 AM, "Josh Luthman"  wrote:

> What?!
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
> On Mar 28, 2016 11:47 AM, "Jaime Solorza" 
> wrote:
>
>> Is this thing on?
>>
>

Re: [AFMUG] Testing 1 2 3

2016-03-28 Thread Josh Luthman

What?!

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373
On Mar 28, 2016 11:47 AM, "Jaime Solorza"  wrote:

> Is this thing on?
>

[AFMUG] Testing 1 2 3

2016-03-28 Thread Jaime Solorza

Is this thing on?

Re: [AFMUG] Amphenol Connector?

2016-03-28 Thread Mike Hammett

I finally got from the manufacturer of the collector what the connection is and 
it is something made (and apparently abandoned) by Amphenol. 

http://www.amphenolalden.com/Connectors-Cable-Assemblies/Products/Ethernet%20Connectors
 
https://www.peigenesis.com/images/content/amphenol/other/aph_pulsenet.pdf 
http://www.aldenproducts.com/cgi-bin/config.py?part=361008 

Thoughts? I stopped the pursuit of L-Com when I saw Amphenol, but perhaps they 
make an alternate. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Mike Hammett"  
To: af@afmug.com 
Sent: Thursday, February 18, 2016 7:23:48 AM 
Subject: [AFMUG] Amphenol Connector? 


Is this an Amphenol connector? One of the cities with work with got service 
from me for their water meter collector systems. They wanted to have their 
electrician do the install. It didn't work. I come back to an indoor cable 
plugged into an unprotected connection on their box. The manufacturer (Itron) 
doesn't have anything to protect that connector. I covered it up with tape for 
now, but can anyone point me in the right direction to get something to put on 
that? 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP

Re: [AFMUG] ePMP reboot

2016-03-28 Thread Kerry

We had this issue on versions prior to 2.6.1 After updating to this 
version, I have not had the issue.
We use rancid to pull configs, and it seems there were issues with the 
command line after 5 days or so of uptime. It appeared that
the underlying snmp engine got corrupted or something. Those issues have 
all disappeared after updating to  2.6.1



On 3/28/2016 10:23 AM, Mathew Howard wrote:
Yep, I've seen it too. It has been quite awhile since I've had it 
happen though... definitely older firmware when I saw it.


On Mon, Mar 28, 2016 at 8:13 AM, Josh Baird > wrote:


Yeah.

On Mon, Mar 28, 2016 at 8:01 AM, Mike Hammett > wrote:

I'm seeing it on 2.3.4. By reboot the SM, do you mean power cycle?



-
Mike Hammett
Intelligent Computing Solutions 


Midwest Internet Exchange 


The Brothers WISP 





*From: *"Josh Baird" >
*To: *af@afmug.com 
*Sent: *Monday, March 28, 2016 7:59:40 AM
*Subject: *Re: [AFMUG] ePMP reboot


Actually, yes.ï¿½  This happened to me yesterday.

It was a result of a failed 2.6 -> 2.6.1 upgrade using
cnMaestro.ï¿½  The cnMaestro agent appears to have triggered a
memory leak/bug of some sort and made the SM run out of system
memory.ï¿½  The web interface would only partially load.ï¿½  I was
able to SSH into the device but got the same 'Timeout: No
response from localhost' error when I issued the 'reboot'
command.ï¿½  We had to reboot the SM.

Josh

On Mon, Mar 28, 2016 at 5:34 AM, Mike Hammett
> wrote:

Ever have an ePMP device that was acting a bit strange, so
you SSH in to reboot it and get, "Timeout: No Response
from localhost." I get that after issuing the reboot
command, not when trying to SSH in.



-
Mike Hammett
Intelligent Computing Solutions 


Midwest Internet Exchange 


The Brothers WISP

Re: [AFMUG] ePMP reboot

2016-03-28 Thread Mathew Howard

Yep, I've seen it too. It has been quite awhile since I've had it happen
though... definitely older firmware when I saw it.

On Mon, Mar 28, 2016 at 8:13 AM, Josh Baird  wrote:

> Yeah.
>
> On Mon, Mar 28, 2016 at 8:01 AM, Mike Hammett  wrote:
>
>> I'm seeing it on 2.3.4. By reboot the SM, do you mean power cycle?
>>
>>
>>
>> -
>> Mike Hammett
>> Intelligent Computing Solutions 
>> 
>> 
>> 
>> 
>> Midwest Internet Exchange 
>> 
>> 
>> 
>> The Brothers WISP 
>> 
>>
>>
>> 
>> --
>> *From: *"Josh Baird" 
>> *To: *af@afmug.com
>> *Sent: *Monday, March 28, 2016 7:59:40 AM
>> *Subject: *Re: [AFMUG] ePMP reboot
>>
>>
>> Actually, yes.  This happened to me yesterday.
>>
>> It was a result of a failed 2.6 -> 2.6.1 upgrade using cnMaestro.  The
>> cnMaestro agent appears to have triggered a memory leak/bug of some sort
>> and made the SM run out of system memory.  The web interface would only
>> partially load.  I was able to SSH into the device but got the same
>> 'Timeout: No response from localhost' error when I issued the 'reboot'
>> command.  We had to reboot the SM.
>>
>> Josh
>>
>> On Mon, Mar 28, 2016 at 5:34 AM, Mike Hammett  wrote:
>>
>>> Ever have an ePMP device that was acting a bit strange, so you SSH in to
>>> reboot it and get, "Timeout: No Response from localhost." I get that after
>>> issuing the reboot command, not when trying to SSH in.
>>>
>>>
>>>
>>> -
>>> Mike Hammett
>>> Intelligent Computing Solutions 
>>> 
>>> 
>>> 
>>> 
>>> Midwest Internet Exchange 
>>> 
>>> 
>>> 
>>> The Brothers WISP 
>>> 
>>>
>>>
>>> 
>>>
>>
>>
>>
>

Re: [AFMUG] ePMP reboot

2016-03-28 Thread Josh Baird

Yeah.

On Mon, Mar 28, 2016 at 8:01 AM, Mike Hammett  wrote:

> I'm seeing it on 2.3.4. By reboot the SM, do you mean power cycle?
>
>
>
> -
> Mike Hammett
> Intelligent Computing Solutions 
> 
> 
> 
> 
> Midwest Internet Exchange 
> 
> 
> 
> The Brothers WISP 
> 
>
>
> 
> --
> *From: *"Josh Baird" 
> *To: *af@afmug.com
> *Sent: *Monday, March 28, 2016 7:59:40 AM
> *Subject: *Re: [AFMUG] ePMP reboot
>
>
> Actually, yes.  This happened to me yesterday.
>
> It was a result of a failed 2.6 -> 2.6.1 upgrade using cnMaestro.  The
> cnMaestro agent appears to have triggered a memory leak/bug of some sort
> and made the SM run out of system memory.  The web interface would only
> partially load.  I was able to SSH into the device but got the same
> 'Timeout: No response from localhost' error when I issued the 'reboot'
> command.  We had to reboot the SM.
>
> Josh
>
> On Mon, Mar 28, 2016 at 5:34 AM, Mike Hammett  wrote:
>
>> Ever have an ePMP device that was acting a bit strange, so you SSH in to
>> reboot it and get, "Timeout: No Response from localhost." I get that after
>> issuing the reboot command, not when trying to SSH in.
>>
>>
>>
>> -
>> Mike Hammett
>> Intelligent Computing Solutions 
>> 
>> 
>> 
>> 
>> Midwest Internet Exchange 
>> 
>> 
>> 
>> The Brothers WISP 
>> 
>>
>>
>> 
>>
>
>
>

Re: [AFMUG] ePMP reboot

2016-03-28 Thread Mike Hammett

I'm seeing it on 2.3.4. By reboot the SM, do you mean power cycle? 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Josh Baird"  
To: af@afmug.com 
Sent: Monday, March 28, 2016 7:59:40 AM 
Subject: Re: [AFMUG] ePMP reboot 


Actually, yes. This happened to me yesterday. 


It was a result of a failed 2.6 -> 2.6.1 upgrade using cnMaestro. The cnMaestro 
agent appears to have triggered a memory leak/bug of some sort and made the SM 
run out of system memory. The web interface would only partially load. I was 
able to SSH into the device but got the same 'Timeout: No response from 
localhost' error when I issued the 'reboot' command. We had to reboot the SM. 


Josh 


On Mon, Mar 28, 2016 at 5:34 AM, Mike Hammett < af...@ics-il.net > wrote: 




Ever have an ePMP device that was acting a bit strange, so you SSH in to reboot 
it and get, "Timeout: No Response from localhost." I get that after issuing the 
reboot command, not when trying to SSH in. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP

Re: [AFMUG] ePMP reboot

2016-03-28 Thread Josh Baird

Actually, yes.  This happened to me yesterday.

It was a result of a failed 2.6 -> 2.6.1 upgrade using cnMaestro.  The
cnMaestro agent appears to have triggered a memory leak/bug of some sort
and made the SM run out of system memory.  The web interface would only
partially load.  I was able to SSH into the device but got the same
'Timeout: No response from localhost' error when I issued the 'reboot'
command.  We had to reboot the SM.

Josh

On Mon, Mar 28, 2016 at 5:34 AM, Mike Hammett  wrote:

> Ever have an ePMP device that was acting a bit strange, so you SSH in to
> reboot it and get, "Timeout: No Response from localhost." I get that after
> issuing the reboot command, not when trying to SSH in.
>
>
>
> -
> Mike Hammett
> Intelligent Computing Solutions 
> 
> 
> 
> 
> Midwest Internet Exchange 
> 
> 
> 
> The Brothers WISP 
> 
>
>
> 
>

[AFMUG] ePMP reboot

2016-03-28 Thread Mike Hammett

Ever have an ePMP device that was acting a bit strange, so you SSH in to reboot 
it and get, "Timeout: No Response from localhost." I get that after issuing the 
reboot command, not when trying to SSH in. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP

86 matches

Mail list logo