Recommended Posts

i think that is a bit overkill for what he is looking for, I think he is more in line for a 20 or 50 which I already suggested in his other thread.

Not only is the 50 cheaper it's actually more powerful than the 100...

The 50 is a dual core whereas the 100 is a single.

The only reason to chose a 100 over a 50 is if you need additional SSL or IPSEC VPN sessions.

Any models number for Cisco?

Depeding on your WAN link 861 or an 867 if you are looking at the Ciscos, but if you don't know IOS then its a pretty steep learning curve.

The USGs are much more friendly look at a 50 - Dual WAN ports, nice object based OS, semi-decent UTM features if you want to pay for them, easy bandwidth management - you can do all of this on a 8XX series too, but they are more complex to configure

However if you have DNS issues, swapping a router isn't going to help, your clients are looking at your AD server for their DNS right? If so do you have forwarders?

"your clients are looking at your AD server for their DNS right?"

No they are not, his dhcp server hands out both his AD DC and his router (old 2002 zyxel firewall). Few other things I would adjust in the sake of clean up - his dhcp lease time is 1 hour, which for how many people and his current /24 unwarranted. All of his boxes I assume are out of the box setup for ipv6, so I assume they are not imaged or managed in anyway. Could well have rampart viruses running around? Wireless is not secured, not isolated so all of his broadcast traffic from his wired devices is on his wireless network I have to assume, eating away at what is at best home wireless router for someone on a tight budget!! And just got something that was on sale ;)

His router/firewall needs to be replaced just because its from 2002 ;) He never stated how fast his internet pipe is, but its quite possible that such an old device can not route his full bandwidth. But he has some basic stuff he could do that might clear up some of his issues.

I am curious how all his devices are wired to his switches, one is smart - but not sure its acting as core switch, there could be switching loops? He could have bandwidth issues - they are all gig switches, but not sure how many devices on each switch how the switches are interconnected, where are his servers, were are his printers - might be better to downgrade some of his devices connections to 100mbit to not eat up the 1 gig interconnection of the switches. Maybe they should just use 1 switch? Maybe 2x48 porter with stack setup for redundancy? And some vlans to isolated different types of traffic, etc.

But still working on inventory and basic current configuration in the other thread before can take a look to what should be done.

The replacement of his current dated router/firewall is just 1 piece in the puzzle.

So did you FIX your dns problem yet? Telling you that most likely will remove many issues you might be having, since your current router is not going to to help your boxes find your AD.. Did you up your dhcp lease from 1 hour?

I havent had time to do even inventory; Some other (non network related) issues have come up. They are pressuring me for a firewall; Told them about pfSense but since I told them it would take me a couple of days to set it up (Ive done it once on a standalone and another on the VMWare, both which I have not been able to connect to the web config)

Thats why I asked for a firewall :) They want to order one ASAP.

Personally, I didnt even know about Zyxel. A lot of you recommend them so it must be a good firewall.....Ill look into them.

"your clients are looking at your AD server for their DNS right?"

No they are not, his dhcp server hands out both his AD DC and his router (old 2002 zyxel firewall). Few other things I would adjust in the sake of clean up - his dhcp lease time is 1 hour, which for how many people and his current /24 unwarranted. All of his boxes I assume are out of the box setup for ipv6, so I assume they are not imaged or managed in anyway. Could well have rampart viruses running around? Wireless is not secured, not isolated so all of his broadcast traffic from his wired devices is on his wireless network I have to assume, eating away at what is at best home wireless router for someone on a tight budget!! And just got something that was on sale ;)

His router/firewall needs to be replaced just because its from 2002 ;) He never stated how fast his internet pipe is, but its quite possible that such an old device can not route his full bandwidth. But he has some basic stuff he could do that might clear up some of his issues.

I am curious how all his devices are wired to his switches, one is smart - but not sure its acting as core switch, there could be switching loops? He could have bandwidth issues - they are all gig switches, but not sure how many devices on each switch how the switches are interconnected, where are his servers, were are his printers - might be better to downgrade some of his devices connections to 100mbit to not eat up the 1 gig interconnection of the switches. Maybe they should just use 1 switch? Maybe 2x48 porter with stack setup for redundancy? And some vlans to isolated different types of traffic, etc.

But still working on inventory and basic current configuration in the other thread before can take a look to what should be done.

The replacement of his current dated router/firewall is just 1 piece in the puzzle.

Ill up the DHCP time today and with the DNS problem, Ill try to view the configuration and point it back so I can tell you exactly what is going on.

About the IPv6, Ill distribute it via GP (if it REALLY bothers you, BudMan; I personally dont see it ripping apart bandwidth)

Bandwidth: From a HTTP Ubuntu ISO download (not the best tool I know) 450-500KB/seg. Speedtest says 5.65Mbpbs/0.66Mbps. That upload seems horribly slow. Not uploading anything on my PC.

"Speedtest says 5.65Mbpbs/0.66Mbps"

What speed are you paying for?

Yeah that upload seems bad! And 6 seems BAD to me for 20 some users.. What if you have some users watching youttube videos ;)

As to ipv6 ripping up bandwidth - that is not my point.. My point is its traffic on your segment that serves NO PURPOSE and be security issue. Be it 1kbps or 100kbps or 1mbps -- its traffic you don't have any use for. Its a clean up step, not a reduction of bandwidth step. But sure every broadcast packet going out on your wire - and therefore being broadcast over your wireless, is one less packet that is of use that could be on the wireless network.

Another clean up option would be to reduce the protocols your printers are running - many of them have ipx and appletalk enabled stil, etc.

Its about taking ownership of the environment keeping it clean and managed.. Do you trim your hedges in front of the house? Does it matter in big picture if they have some branches sticking out, or do you like them rounded or squared off?

If they are pushing you to buy a new firewall - then buy one.. You have a zyxel now, then just buy newer model - I would think a usg 20 or 50 is more than enough for you. If you have plans of adding say another ISP as a backup/failover internet connection then go with 50 that has 2 wan ports. If you have desire to allow for vpn inbound other than managment then 50 you can do concurrent with 5 with lic, 100 can do 25 with lic.

I doubt you have any use of ipsec tunnels, etc. difference in 20 and 50 models is about $100.. So your talking like 150 to 250. A 100 your looking at $350 approx, etc. Now 50 over 20 I believe you can add features like AV and IPS/IDS along with Qos features - that I don't believe are available on the 20. So 50 is prob the best choice and under $300 I would think for basic model. Other features would/could require more licensing cost, etc. But its prob a good choice for your budget and requirements.

But what you use as you gateway/firewall is just 1 piece of the puzzle in taking ownership of your network and getting it in the best possible shape you can get it in with your limits both in knowledge and budget constraints.

"Speedtest says 5.65Mbpbs/0.66Mbps"

What speed are you paying for?

Yeah that upload seems bad! And 6 seems BAD to me for 20 some users.. What if you have some users watching youttube videos ;)

As to ipv6 ripping up bandwidth - that is not my point.. My point is its traffic on your segment that serves NO PURPOSE and be security issue. Be it 1kbps or 100kbps or 1mbps -- its traffic you don't have any use for. Its a clean up step, not a reduction of bandwidth step. But sure every broadcast packet going out on your wire - and therefore being broadcast over your wireless, is one less packet that is of use that could be on the wireless network.

Another clean up option would be to reduce the protocols your printers are running - many of them have ipx and appletalk enabled stil, etc.

Its about taking ownership of the environment keeping it clean and managed.. Do you trim your hedges in front of the house? Does it matter if big picture if they have some branches sticking out, or do you like them rounded or squared off?

If they are pushing you to buy a new firewall - then buy one.. You have a zyxel now, then just buy newer model - I would think a usg 20 or 50 is more than enough for you. If you have plans of adding say another ISP as a backup/failover internet connection then go with 50 that has 2 wan ports. If you have desire to allow for vpn inbound other than managment then 50 you can do concurrent with 5 with lic, 100 can do 25 with lic.

I doubt you have any use of ipsec tunnels, etc. difference in 20 and 50 models is about $100.. So your talking like 150 to 250. A 100 your looking at $350 approx, etc. Now 50 over 20 I believe you can add features like AV and IPS/IDS along with Qos features - that I don't believe are available on the 20. So 50 is prob the best choice and under $300 I would think for basic model. Other features would/could require more licensing cost, etc. But its prob a good choice for your budget and requirements.

Hey..don't knock the dl/ul speeds. I used to work as an mdm consultant at a company that had at one time 40 people and had a 6/5 connection. There were times during the day that you couldn't even load a simple website let alone even think of looking at a youtube video.

"Speedtest says 5.65Mbpbs/0.66Mbps"

What speed are you paying for?

Asked and we have 3....So we are actually getting better :p

Yeah that upload seems bad! And 6 seems BAD to me for 20 some users.. What if you have some users watching youttube videos ;)

It does indeed seem bad.....We are paying for that plus a static IP for 60 bucks....To me it seems like a ripoff....

As to ipv6 ripping up bandwidth - that is not my point.. My point is its traffic on your segment that serves NO PURPOSE and be security issue. Be it 1kbps or 100kbps or 1mbps -- its traffic you don't have any use for. Its a clean up step, not a reduction of bandwidth step. But sure every broadcast packet going out on your wire - and therefore being broadcast over your wireless, is one less packet that is of use that could be on the wireless network.

Another clean up option would be to reduce the protocols your printers are running - many of them have ipx and appletalk enabled stil, etc.

Its about taking ownership of the environment keeping it clean and managed.. Do you trim your hedges in front of the house? Does it matter in big picture if they have some branches sticking out, or do you like them rounded or squared off?

I just trim it and dont mind if some branches stick out, as long as you dont pass by at get cut by it; Its the typical "if it aint broke, dont fix it". I mean yes disabling IPv6 makes sense as it use eats up bandwidth and resources but it is not that much for it to be looked at as the root of the problem; There are more important issues at hand (first being the DNS issue you mentioned)

If they are pushing you to buy a new firewall - then buy one.. You have a zyxel now, then just buy newer model - I would think a usg 20 or 50 is more than enough for you. If you have plans of adding say another ISP as a backup/failover internet connection then go with 50 that has 2 wan ports. If you have desire to allow for vpn inbound other than managment then 50 you can do concurrent with 5 with lic, 100 can do 25 with lic.

I doubt you have any use of ipsec tunnels, etc. difference in 20 and 50 models is about $100.. So your talking like 150 to 250. A 100 your looking at $350 approx, etc. Now 50 over 20 I believe you can add features like AV and IPS/IDS along with Qos features - that I don't believe are available on the 20. So 50 is prob the best choice and under $300 I would think for basic model. Other features would/could require more licensing cost, etc. But its prob a good choice for your budget and requirements.

But what you use as you gateway/firewall is just 1 piece of the puzzle in taking ownership of your network and getting it in the best possible shape you can get it in with your limits both in knowledge and budget constraints.

OK Ill look into it. Thanks

Good choice...

Easy to setup, I can probably help out if you post here - I've got 2x 300s, 10x50s, a 4 or 5 100s setup in various places running everything from load balanced leased lines to single DSL circuits

Comes in two days; Ill try to set it up. Any issues, Ill post in the other thread about redoing my network.

This thread can be pretty much closed.

  • 10 months later...
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • So size is the ONLY selling point????? People have been plugging in PC's to TV's in living rooms for 20+ years. I would take a bigger box for more peformance. Also lot and lots of SFF/Mini ITX build guides out there.
    • My point is, if you buying this instead of a console for TV purposes, that you need to understand that you will not be able to play the most popular MP games with Steam OS. Now if you are not into those games, and into some of the perputual alpha/beta games on Steam then this is an option. I would argue a gaming PC would be the better route, more expensive but take the 1k -1.4k you are about to spend on this thing and build a better one. Because it is running Linux you can overide its 1080p settings. However The Verge complained about its 1080p cap and how you would have to get around it at the CLI, so someone buying this instead of a PS5 or Xbox might have a challege on their hands.
    • A review of Synology's BeeCamera software for the BeeStation Plus by Christopher White Synology is leaning into the BeeStation and the BeeStation Plus, and it's easy to understand why. While power users will want something more customizable, the BeeStation and its more powerful sibling, the BeeStation Plus, are great for those who want a device they can simply plug in, click a few buttons, and have it work as their own personal cloud. Until recently, the device was mostly used for the storage of files, photos, and videos, and with the Plus model, you could install and stream media through Plex. Synology recently released a new free application for the BeeStation Plus called BeeCamera, which is basically a stripped-down version of Surveillance Station. First, let's get the confusing naming out of the way. While you might initially think that BeeCamera is a physical device, perhaps a camera that Synology created specifically for the BeeStation Plus, that would be incorrect. BeeCamera is simply the name for the application that runs on the NAS and on your mobile device. I think the marketing team missed the mark here, but it does fit the other naming on the device, like BeePhotos and BeeFiles, I guess. Camera Support As of right now, only Synology-branded cameras are supported, which many will see as a callback to the drive locking the company implemented and then backtracked on. That said, while I 100% disagree on drive locking, I agree that camera locking for a device made to simply plug and play is the right decision. The whole point of the BeeStation line is simplicity. There are currently three camera model lines available, a wireless device for indoor use, and two PoE models for external use. CC400W (Wi-Fi): Plug it into power using the included power adapter, and connect it to your wireless network. This camera is rated only for indoor use and is the one I was provided to review the BeeCamera. $198.36, in line with the Unifi G6 Compact. BC510 (PoE): A bullet-style camera. Connect it to an Ethernet cable that is providing Power over Ethernet (PoE). This camera is rated for both indoor and outdoor use. $240. TC510 (PoE): A dome-style camera. Connect it to an Ethernet cable that is providing Power over Ethernet (PoE). This camera is rated for both indoor and outdoor use. $240. Although this isn't a review of the actual Synology camera, I did want to note that a positive for the Synology CC400W is that it uses a magnetic base. This means you can mount it on any magnetic surface, which is pretty handy. However, a downside to the camera is that it's powered by a built-in USB cable that's about six and a half feet (two meters) long. This means that the cable will probably be either too long or too short, but more importantly, if the cable is damaged at all, you'll likely need to buy an entirely new camera because there doesn't appear to be a way to replace it, unlike many competitors, like the Unifi G6 Instant. Hopefully, this is something Synology addresses in a future revision of the hardware. The BeeStation Plus supports up to four cameras. Setup The setup of BeeCamera is, like everything in the BeeStation family, very straightforward. Simply make sure you're on at least version 1.5 of the BeeStation OS, and BeeCamera is automatically installed on the device. BeeCamera Setup Screenshots Setting up the CC400W was just as easy. Plug it in, open up the BeeCamera app, and follow the on-screen steps to add the camera. During this process, you'll configure the camera name and how many days of retention you want to keep. The system will also automatically update the firmware for you. The whole thing took only a couple of minutes, excluding the time it took for the camera to update the firmware. Once the camera is connected to the BeeStation Plus, you can manage the various camera settings within the app, although there aren't many to choose from. You're able to configure whether the microphone will record audio (some privacy laws may preclude you from recording it), select what codec to use (H.264 or H.265), configure the color and exposure of the camera, and determine what data you want to overlay onto the video. Finally, you can set up AI detections so that BeeCamera will alert you if it sees certain things. These are all of the common detections you would expect in a camera system, such as people, pets, and vehicles. Under people and vehicles, you can also add extra monitoring for lingering and congestion detection, although pets are currently in "Lab" and therefore have no extra features yet. Recording in 4K using H.265 for 30 days will take roughly 300 GB of storage, which is very reasonable for most regular households, as the BeeStation Plus has 8TB of native storage. If you want to set up detection zones, you can. These are areas that BeeCamera will look at for the various detections, and are helpful if, for example, there's a tree in your frame and you don't want to be notified each time the wind makes the branches move around in the frame. Finally, you can also schedule when the camera should and should not be recording, which is a very useful feature. For example, you may want to record only at night when you're sleeping, but not during the day when you're up and about the house, so you can easily shut the camera off between 8 am and 10 pm. Each hour of each day can be configured to record continuously, only upon a detection event, or disabled completely. You can't fine-tune to record at a specific time, though, only hourly blocks on the hour. Daily Use The best part of BeeCamera is that it's easy and just works. If you only care about being notified when things happen, the mobile app sends those notifications and lets you click the button to bring up the video and see what's going on. For example, when I went out of town and had the camera pointed at the cat tower in our hallway, it was nice to be able to drop in and check that my furry friends were doing okay without me. Initiating the remote connection to the BeeStation Plus through the app is very responsive, but this will heavily depend on your ISP. In my case, using Xfinity, I'm able to go from starting the app to seeing live video in roughly three seconds, which is about the same amount of time it takes to connect to my Unifi UNVR system that costs much more. If you want to see footage from a specific day and time, you can do so using the calendar icon. You can also scroll through the timeline, looking for detections that are labeled in blue (vs. the normal gray when there's nothing of interest). There are buttons that let you go to the last/next detection on the timeline, which is helpful if you missed the notification on your mobile device. That's where the ease of use stops, though. While you can download clips that are flagged by detection, there's apparently no way to select generic time frames you're interested in, and the only place to download is to your phone. In addition, sharing a video shares the actual video, not just a link back to your BeeStation Plus. While that's good from a security and privacy perspective, it's a little awkward for sharing large videos. Limitations While the ease of implementation is great, there are some things that are lacking from BeeCamera. The most obvious is that there is no way to view the footage on the desktop. You can log in to the BeeStation Plus to see how much storage BeeCamera is using, but unlike BeePhotos and BeeFiles, there is no BeeCamera on the web console to manage or view footage. This means you'll be viewing all of your security footage on your mobile device, which is pretty limiting. In addition, there's no way to download the video to your PC without first using your phone as the intermediary. The one exception to this is that you can use BeeFiles to see the raw MP4 files. They're saved in 5-minute increments, and it's just raw data with no detection information or any other way to identify what any of them are. The lack of a way to interact with BeeCamera on the desktop also makes configuration of the cameras more difficult. For example, trying to set up detection zones using a tiny screen and your finger to draw boxes is more cumbersome than it needs to be. This reinforces the idea that BeeCamera is not made for power users. It's also missing some of the more advanced functionality of Surveillance Station. For example, I couldn't find a way to say, "Alert me if the thing in this zone is no longer there." Another major deficiency with BeeCamera, and a feature I suspect may come out in the future, is that while it can detect generic people, there is no specific facial recognition yet. This is an interesting omission, given the fact that other Synology tools can detect specific individuals, and competitors such as Unifi Protect also do it. This is probably a software limitation, so we will have to wait and see if this feature is added in the future. Conclusion If you need a security guard to monitor surveillance cameras to make sure your property is secure, then BeeCamera is not the solution for you. That said, you probably wouldn't be using a BeeStation Plus as the brains behind the system either. BeeCamera (and BeeStation in general) is clearly aimed at households that want to avoid sending personal data to Google and Amazon, and now want to add some cameras to keep an eye on their home and their pets while they're away. BeeCamera excels at doing this. The target market isn't interested in creating cases, tying multiple views together in a single pane of glass, or the like, and for the intended use case, the system works great. Where it starts to fall apart a bit is with more advanced features. Not being able to use a desktop app is a major compromise in my opinion, and having to do all of the configuration on a mobile device is annoying, but not impossible. If you don't want to have a full-fledged NAS device in your home, but still want control over your data (or maybe want an easy way to backup your data for World Backup Day), and want to add a couple of cameras to keep an eye on your house and your pets, this is a great, cheap, and easy way to go, and I suspect more functionality will come over time. If Synology releases a desktop app or at least a way to configure cameras and view footage on a desktop browser, this would be a near-perfect solution for a general home user. As an Amazon Associate, we earn from qualifying purchases.
    • I forgot to add on my comment that when robots will take physical jobs, it's when they become more cheaper to manufacture and sell. That will be the starting point of the end to lanscaping, trash pickup, factory jobs, etc.
    • How many people can actually use a 2.5gig ethernet port? Most people do not have more than a 1gig internet connection, heck most have less than that. Most people at home do not have a switch that has multiple 2.5gig ports either.
  • Recent Achievements

    • One Month Later
      timbobit earned a badge
      One Month Later
    • One Month Later
      nates earned a badge
      One Month Later
    • Week One Done
      Almohandis earned a badge
      Week One Done
    • Rookie
      dorf went up a rank
      Rookie
    • First Post
      mike_rumble earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      476
    2. 2
      +Edouard
      172
    3. 3
      PsYcHoKiLLa
      104
    4. 4
      Michael Scrip
      88
    5. 5
      Steven P.
      70
  • Tell a friend

    Love Neowin? Tell a friend!