Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Weaver]

[burakkucat]

I suspect you are thinking of IPv6 addresses . . . just checking all the facts. As I really can't "get my head around" IPv6, I'm trying to picture it in terms of IPv4.

Would it be fairly simple for you to set up a test? A few experiments should give results that would lead to a definitive answer.

[Weaver]

[aesmith]

VLANs would be the standard way of doing this in a corporate environment, with the APs mapping SSID to VLAN.   By the way did you ever get your Cisco APs with Mobility Express into service?

[johnson]

VLANs would be the standard way of doing this in a corporate environment, with the APs mapping SSID to VLAN.

Have finally grappled with VLANs in the past week. Had no strong impetus until the recent acquisition of a chinese spy phone (xiaomi), not many guests and none that I wouldn't trust on the network.

Took a few evenings of reading to know posterior from elbow, but they are really neat. With a single managed switch downstream from router any number of isolated networks can be summoned with just clicks in openWRT.

Isolated wifi with guest credentials, an isolated single port for an untrusted device, tagged traffic on a port to my main machine so any of these can be accessed directly or from VMs.

Good fun!

[aesmith]

That just reminded me sometime I must test some of the scenarios speculated about earlier.  For example what happens if a tagged frame is received by an access port - does it (a) drop it, (b) accept but only if the tag matches the access port VLAN or (c) accept even if wrong VLAN.  Clearly I would hope not to see (c)!

[Weaver]

[burakkucat]

[j0hn]

Had no strong impetus until the recent acquisition of a chinese spy phone (xiaomi), not many guests and none that I wouldn't trust on the network.

Interesting comment.

My son's Xiaomi Pocophone F1 is probably the best value smartphone I've ever bought.

My security cameras are all Yi Cams (owned by Xiaomi)

My smart bulbs are mainly Yeelight's (owned by Xiaomi).

My Mi Band 4 that I wear 24 hours a day is also owned by Xiaomi.

Fantastic company that make excellent value for money products.
I have as little concern over their security as I do with the plethora of Huawei devices I use personally or that my data goes over.

[dee.jay]

[aesmith]

In theory there's no reason why it shouldn't work if the configuration was accepted, but as dee.jay said many routers will refuse the configuration.  I have seen "in the wild" a router with a directly connected /24 being over-ridden by a dynamically learned /32 from that same subnet.  In Cisco world the longest match takes precedence.

[johnson]

My son's Xiaomi Pocophone F1 is probably the best value smartphone I've ever bought.

Absolutely no disagreement from me. Xiaomi products are sold at cost or less, they are the some the best value devices around.

The process of unlocking the bootloader however requires - mobile data connection not wifi, use of a proprietary unlock program, a 360 hour (15 day) cool down period in which if you dont use the phone for normal tasks more time is added, registration with email and phone number and a sinister string in the unlock program: "Unlock failed, too few or too dark portraits".

Xiaomi started with people making the MIUI custom roms... their production of smart phones is a vehicle to get MIUI into peoples pockets.

[aesmith]

[dee.jay]

[burakkucat]

Which Cisco WAP's? I've configured them in the past.

Helping out Weaver with a couple of forum searches . . .

They are Cisco 1830 WAPs.

The two following links will have the full back-story --

• Cisco 1830 WAP
• Cisco WAPs (again)