Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Wifi mesh systems
Comments
-
-
-
-
-
-
Advertisement
-
-
-
-
-
It looks to be not double NAT. This is normal if you have your VM router bridged. Your TaoTronics is hop 1. Hop 2 ntlworld.ie [89.101.x.x] appears to be the VM gateway [they bought over NTL Ireland], not your router. Your router would show up as something like 192.168.0.1.
Sorry to be a squeaky hinge here but I got up earlier to do the VM Modem hack and it just crossed my mind that if my VM modem is stuck in router mode I should be getting a Double NAT result when I run a trace and it doesn't look like I am. Here's another trace just now.
Two other things spring to mind before I attempt this hack.
1. If the VM being in Router mode is what is preventing my ability to port forward why didn't it prevent port forwarding on my old Asus Router which was port forwarding fine before I installed the TT Mesh system?
2. Is the default gateway IP (local IP address) on VM's Cisco EPC3925 modem 89.101.211.41? Should that be set to something else?0 -
Advertisement
-
Sorry to be a squeaky hinge here but...
OK, so after I said it didn't appear to be double NATTED, you came back and same your VM was in router mode. That had me puzzled. I would expect the second hop to be the local IP of the VM box but it appeared to be your VM gateway ip. So here is my tracert to google.com. My VM is definitely bridged. But I have two other routers so double NAT'd. It's just a little different to yours.C:\Users\RangeR>tracert google.com
Tracing route to google.com [216.58.204.46]
over a maximum of 30 hops:
1 2 ms 3 ms 2 ms 192.168.86.1 <-Google WIFI
2 3 ms 3 ms 2 ms GL-MV1000 [192.168.0.1] <- Second router
3 14 ms 21 ms 13 ms 46.7.34.1 <- Virgin Media gateway [similar but different to my public IP Address]
4 16 ms 14 ms 13 ms 109.255.255.49
5 14 ms 18 ms 27 ms ie-dub01a-rc1-ae-44-0.aorta.net [84.116.238.158]
6 273 ms 39 ms 19 ms ie-dub02a-ri1-ae-73-0.aorta.net [84.116.134.110]
7 13 ms 14 ms 13 ms 74.125.118.8
8 20 ms 28 ms 19 ms 74.125.243.241
9 27 ms 14 ms 16 ms 74.125.243.247
10 26 ms 14 ms 17 ms 209.85.143.235
11 28 ms 32 ms 28 ms 172.253.71.195
12 1148 ms 83 ms 28 ms 216.239.58.132
13 23 ms 32 ms 32 ms 108.170.246.129
14 24 ms 30 ms 22 ms 108.170.238.117
15 31 ms 34 ms 30 ms lhr25s12-in-f46.1e100.net [216.58.204.46]
Trace complete.
On your trace, I don't see two internal private IP Addresses. I'm just not seeing two routers in your setup. Your first hop is your Tao. Your second hop is the VM Gateway [outside your house, VM edge network]. It just looks to me that your vm router is not in the mix.
If you search "what is my ip address", do you get similar or exactly the same as your second hop, 89.100.xxx.xx?
And don't apologise. It's good to workout tech issues
Just to be absolutely clear. I have a VM Hub 3. The front light goes pink when in bridged mode. When it's not in bridged mode, I think it goes green but it's been a while. I didn't have to hack the box. The setting was just there in the web UI. It's weird that some people have to hack the interface. Maybe VM are cracking down on unneeded support calls. Rather than hacking, maybe give them a call and ask them to bridge it remotely. I know they do this for business customers.
0 -
Thanks RangeR, sure what else would I be doing on a miserable wet freezing cold Sunday in the middle of a pandemic lockdown
OK, so after I said it didn't appear to be double NATTED, you came back and same your VM was in router mode. That had me puzzled. I would expect the second hop to be the local IP of the VM box but it appeared to be your VM gateway ip.
The 2nd hop is both the IP address of the VM box AND the gateway address specified on the TT Mesh Router. If that is a duplication / transcribe error on my part I guess it could be (or be part of) the problem?
On the VM modem Gateway tab there's a section called "Internet IPv4 Connection" and two things stick out there:-
1. The "Internet IP address" is a 10.100.xx.xxx number (never sure what IP's I can share on a public forum)
2. The "Default Gateway" IP address is the same as the "Internet IP Address" but the final digit is one less.
I assume you meant 101 not 100?If you search "what is my ip address", do you get similar or exactly the same as your second hop, 89.100.xxx.xx?[/IMG]
I get the Static IP address of the TT Router which is also 89.101.xxx.xx but not the exact 89.101.211.41 that the 2nd hop is.Just to be absolutely clear. I have a VM Hub 3. [/IMG]
I have the Cisco EPC3925 Modem which is the one referred to in the hack thread. I actually have 3 of them. The top one handles Broadband, the bottom two handle VOIP.
Rather than hacking, maybe give them a call and ask them to bridge it remotely. I know they do this for business customers.[/IMG]
I am a business customer as I have a home office with 4 landlines etc so I might give them a call tomorrow but there's 2 reasons I'd prefer to sort this myself:-
1. I'd like to learn / understand and be more in control of the setup / network myself than rely on increasingly outsourced and templated support from VM or or similar.
2. The quality of Business Support can be very patchy. I've had some great assistance over the years with in house based support but I've increasingly found that as support gets outsourced, whether to a local or international call centre, it gets really dumbed down and if your problem can't be fixed by reference to a set number of prescribed steps you can end up making things worse.0 -
Drinking?Thanks RangeR, sure what else would I be doing on a miserable wet freezing cold Sunday in the middle of a pandemic lockdown
Your public IP cannot be the same as VM's gateway. They have to be different so your devices can find a route to the internet. Is your TAO set for DHCP? I think it should. VM will assign you an IP. Unless you are on a static address. In that case, VM should have given you your IP, subnet mask and maybe gateway address. If you're not on static, ask then for a static. It's free. While your on, get them to bridge it for you. Unless you REALLY want to mess around.The 2nd hop is both the IP address of the VM box AND the gateway address specified on the TT Mesh Router. If that is a duplication / transcribe error on my part I guess it could be (or be part of) the problem?
You can share any internal address. Don't share publics. Internals are ALWAYS...On the VM modem Gateway tab there's a section called "Internet IPv4 Connection" and two things stick out there:-
1. The "Internet IP address" is a 10.100.xx.xxx number (never sure what IP's I can share on a public forum)
2. The "Default Gateway" IP address is the same as the "Internet IP Address" but the final digit is one less.
10.0.0.0 – 10.255.255.255
172.16.0.0 – 172.31.255.255
192.168.0.0 – 192.168.255.255
Anything else is public and could identify you.
Of course. Fat fingers syndrome. From one side of the keyboard to the other.I assume you meant 101 not 100?
Similar to what I have in all my business sites [maybe not cisco but look similar. Hitel maybe] but I think they are called. Ring them. It should be painless. Static IP and bridged.I get the Static IP address of the TT Router which is also 89.101.xxx.xx but not the exact 89.101.211.41 that the 2nd hop is.
I have the Cisco EPC3925 Modem which is the one referred to in the hack thread. I actually have 3 of them. The top one handles Broadband, the bottom two handle VOIP.
I am a business customer as I have a home office with 4 landlines etc so I might give them a call tomorrow but there's 2 reasons I'd prefer to sort this myself:-
Understood and totally agree. But these devices aren't designed or configured to mess around with. They are designed to go straight into bridged mode [for business]. No idea why they used them for domestic [costs mainly, I suppose]. I had one of these a few years ago as a domestic customer, one device for both internet and phone. They obviously split them over two devices for business.1. I'd like to learn / understand and be more in control of the setup / network myself than rely on increasingly outsourced and templated support from VM or or similar.
2. The quality of Business Support can be very patchy. I've had some great assistance over the years with in house based support but I've increasingly found that as support gets outsourced, whether to a local or international call centre, it gets really dumbed down and if your problem can't be fixed by reference to a set number of prescribed steps you can end up making things worse.0 -
-
-
-
There's no need for any Virgin Media hack. I'd factory reset the modem and get in touch with Virgin Media support via WhatsApp asking for an IPv4 address so you can put the modem into bridge mode, and you're done.
So I got in touch with VM via WhatsApp who wouldn't deal with me as they are consumer/residential support only and I have a business account.
Called their business support line and they confirmed that despite the Cisco router admin showing the modem is in Router Mode it's actually hard set my them in the firmware to Bridge Mode and can't be changed via the Modem interface hence the VM modem is doing nothing more than channelling internet to the devices which are directly connected to it by Ethernet LAN.
I have two devices connected directly to the VM Modem:-
1. A family PC which doubles as a Plex Server. It has a static IP address assigned to it from the 5 static IP addresses VM gave me years ago.
2. My TT Mesh Router which is set up with another of the Static IP addresses.
As far as VM are concerned as long as their modem is set to bridge mode port forwarding is a matter for the TT Mesh system to handle and not something they can assist with
I've tried engaging with TT Support but it's only available by email and tortiously slow.
I'll get there eventually................I hope.
Other than the port forwarding issue I have to say the TT MEsh System is working flawlessly throughout the house.0 -
I have two devices connected directly to the VM Modem:-
1. A family PC which doubles as a Plex Server. It has a static IP address assigned to it from the 5 static IP addresses VM gave me years ago.
2. My TT Mesh Router which is set up with another of the Static IP addresses.
Connect nothing to the VM Bridged modem except the TT Mesh Router, unless you really, really, REALLY know what you are doing. There are no protection on those ports. Windows built in protections are designed to protect your computer assuming you are behind a strong firewall/NAT.
Your Plex server doesn't need a public IP. Reset that to an internal static DCHP reservation with port forwarding. It's exactly the same if your primary IP is static and you're not doing any funny abuse stuff I've had that running for years with no problems, accessing externally.
Actually, I'd blow your plex server out of the water. Maybe back up your plex database and other documents but I wouldn't keep anything else. Reformat and reinstall. But that PC is no longer safe.
I remember tests about 10 years ago, where a pc was put on the internet without protection. It was infected and fitly within 30 minutes. You can't rely on windows 7/10 firewall as there could be various zero day exploits that we aren't even aware of yet.0 -
Connect nothing to the VM Bridged modem except the TT Mesh Router, unless you really, really, REALLY know what you are doing. There are no protection on those ports. Windows built in protections are designed to protect your computer assuming you are behind a strong firewall/NAT.
Your Plex server doesn't need a public IP. Reset that to an internal static DCHP reservation with port forwarding. It's exactly the same if your primary IP is static and you're not doing any funny abuse stuff I've had that running for years with no problems, accessing externally.
Actually, I'd blow your plex server out of the water. Maybe back up your plex database and other documents but I wouldn't keep anything else. Reformat and reinstall. But that PC is no longer safe.
I remember tests about 10 years ago, where a pc was put on the internet without protection. It was infected and fitly within 30 minutes. You can't rely on windows 7/10 firewall as there could be various zero day exploits that we aren't even aware of yet.
Crap, didn't cross my mind connecting the Plex server to the modem directly would be a problem.
Does the fact the PC has a static IP address mitigate the risk in any way?0 -
-
Advertisement
-
Actually, I'd blow your plex server out of the water. Maybe back up your plex database and other documents but I wouldn't keep anything else. Reformat and reinstall. But that PC is no longer safe.
Is there any viable option to doing a full reformat and reinstall as backing up 6TB of content isn't something I can just do. Even if I start an online backup now it'll take at least a week.
Are there virus / malware scanners I can run daily which will (eventually) pick up anything that might be on the PC today but which is a "Zero Day Exploit" yesterday / today?
Ran Malwarebytes and this is the result.
0 -
A Zero Day Exploit is basically an exploit that hasn't been made public yet. It could be found after a few days or could be months or years. Once it's found, it can be patched by the good guys but the bad guys don't usually announce that they have found a security vulnerability.Is there any viable option to doing a full reformat and reinstall as backing up 6TB of content isn't something I can just do. Even if I start an online backup now it'll take at least a week.
Are there virus / malware scanners I can run daily which will (eventually) pick up anything that might be on the PC today but which is a "Zero Day Exploit" yesterday / today?
Ran Malwarebytes and this is the result.
I don't have any easy answers for you. You obviously don't have to format the PC. I would.
As for backing up. If it was me, I'd assume that the pc is compromised so most files are potentially compromised. Payloads can be injected into images, word documents etc and you would never know.
Now, to be fair. I'm painting you a grim, worst case scenario. It's probably not that bad in reality, but the chance is there.
If you aren't risk averse, you can shrink your hard drive partition by about 10TB. Create a new, second, 10TB partition and put your data there. To be honest, I'd always have at least two partitions. one for Windows and programs and another for data. This allows you to scrub your machine at will. just, when reinstalling Windows, don't delete the data partition It's in the back of my mind, though, if your pc is compromised, this has a high risk of not getting rid of the problem.
I have three partitions. Dual boot Windows [one gaming, one work] and a shared data partition [and NAS].
*EDIT* nice piece of free partition software. Quite easy to use. https://www.easeus.com/partition-manager/epm-free.html0 -
-
-
-
-
Yeah that's right.
Got 677 and 102 there on my One Plus 8
Some impressive speeds from Ps5 too on wifi
Uneccesary speeds but just really happy no more black spots around the house
When you checked on the One Plus was it from the Deco app speedtest or from a generic speedtest app ? I'm happy enough with mine but if I can alter the setup to get a higher speed I will look at it. Not that I need it to be fair, just a serious case of much wants more 0 -
rodneytrotter15 wrote: »When you checked on the One Plus was it from the Deco app speedtest or from a generic speedtest app ? I'm happy enough with mine but if I can alter the setup to get a higher speed I will look at it. Not that I need it to be fair, just a serious case of much wants more
This was on the speed test by ookla app0 -
-
Advertisement
-
Advertisement