Clockfort's Tech Blog

… updated whenever a new project comes along

Apparently ITS hasn’t changed their pay structure in a very, very long time

(15:09:56) Andy Potter: Friday night the 3rd turns into 2x holidy pay at the stroke of Midnight. Make sure they don’t screw you.
(15:10:19) Me (AIM): Hmm, 2x holiday pay with C-Shift adjustment = $$$$$$$$$
(15:10:55) Andy Potter: what is C shift these days? before it was only .50 /hour
(15:11:24) Me (AIM): 50 cents an hour
(15:11:26) Me (AIM): inflation is awesome
(15:11:42) Andy Potter: Its been that since 1982
(15:11:46) Me (AIM): … nice.

… Gorram it.

A Tale of Two VPNs

So, I successfully managed to broadcast a “cshnowires-psk” network from my makeshift router. However, the encryption of the tunnel between the networks is NOT making my router’s 200MHz MIPS CPU happy – in fact, it’s maxing out at around 50KB/s with a strong wind behind the back of the bits.

Looks like I’ll have to have a Real Machine (TM) to do the encrypt/decrypt of network traffic so I can see an actual 100mbit link. It’s not so bad, really; I think I’ll kill two birds with one stone and create a media center/VPN gateway box out of an old machine (A P4) using linux, mythtv, and either vpnc or openvpn.

Enterprise Networking on the Cheap

Breaking weeks of blog-o-silence for this update…
I recently moved from RIT’s dorms to an apartment I share with some CSHers. Unfortunately, among the wide variety of amenities offered, wireless Internet is not one of them.
Unfortunately, I’ve been very spoiled in terms of networking hardware, having worked with Cisco’s product line, and I find it painful and miss the features when I’m using consumer-grade electronics. Unfortunately, Cisco wireless technology costs an arm and a leg.

The solution? I purchased a Linksys WRT54GL, a device specifically designed for people to use their own linux distros on. I put on OpenWRT, which gave me a variety of commercial-grade options for a pittance of the price.

I’m broadcasting a few SSIDs – a WPA2-Personal network for apartment mates to have their own little network (Opcom-Net-Internal), a WPA2-Personal network that ust acts as as WAP for my apartment’s wired network (Opcom-Net-External), and a WPA2-Enterprise network that uses OpenVPN and some kludging together in order to provide a seamless connection to CSH’s network (cshnowires-eap). (That last one isn’t quite working yet, but I’ll work on it more after I change some things that need changing on CSH’s own wireless; no use configuring things twice for a new setup) This could simply not be done without multiple SSID broadcasts, VPN, RADIUS, VLANs, and a variety of other enterprise-only features that one could simply not get for the $50 I paid for this network device. Amazing. Highly recommend this device; the only downside is that it’s wireless-G, and not N, and that there is not a whole lot of flash/RAM for programs, but this comes with the embedded territory.

Following my usual naming scheme, the hostname for this device is “Dr. Bob”, which fits especially well considering it’s plugged into my Cisco network switch “Dr. Pepper”. The good doctors are quite kind on my network :-)