Brightglaive

HTTP Protocol over TLS SSL is commonly referred to as SSL but it uses TLS which has added enhancements to security, patched vulnerabilities,added additional hashing, Key exchange, and encryption methods. All of this is used to make web browsing, email, Internet faxing, instant messaging, and voice-over-IP (VoIP) more secure by obscuring and encrypting the Personal Info (PI) or Sensitive Personal Info (SPI) like credit card numbers, usernames and passwords, address, social security numbers, images, text, and even data files being transmitted. Any Tab in your browser with https:// in it is using SSL/TLS (probably SSL/TLS 1.2). Skype is using it to keep your conversations and texts private. Google is using it to keep the data transmitted to your Google drive and any appointments set up on your calender secure while being transmitted to and from them. Ubisoft is definitely using it. (see my comment about https://) Your home router is using it to protect the configuration data you send to it and the responses it sends back to your computer (Which you posted the picture of here. It's most likely using https://192.168.1.1.) It's difficult to tell which application could be using all the data because it is obscured and encrypted by the time it gets to the router. With a packet analyzer (exempli gratia Wireshark) you might be able to tell using the unencrypted DNS requests and subsequent packets destined for those IPs if you can determine the destination IP and who it belongs to.

Hard to say. Could be someone changed the IP address of the Admin interface to something other than the default. If so, you may have a LOT of trial and error in front of you. Or Just return it to the store and exchange it for a new unopened router. What is the IP address of your computer that is attached to the nighthawk? is your computer set to use DHCP? Is it pulling a DHCP address from the router? Have you checked your Hosts file in your system32 directory? Hove you tried leaving the internet unplugged and accessing that way? BTW if you have a 169.254.x.x address it means DHCP failed to respond to your computer with an address in time.

Lot of recent posts on this...I'll regurgitate a few that were mentioned: PureVPN PIA Tunnelbear

I would choose based on average distance you expect you would be away from the AP and whichever wireless band has less interference from other sources. Overall that will net you more throughput in the long run.

Think of every node in the network as if it were a switch or router (like a proxy server if you will). With mesh networking every node in the network is responsible for forwarding traffic to the other nodes. Leaving aside path determination (L3) and (at layer 2) spanning tree considerations, we are talking about the MOST redundant amount of paths to any given node on the network.if you have a ring topology you have one path from one node to the next, to the next etc. Ring topology also has the problem that traffic only flows in one direction. Kind of like a mobius strip or that picture where the stairs seem to connect to themselves in a square but all the while going up (or is it down?) so if one node goes down, so does the whole ring after that one node. but in mesh if you lose one path to a node you still may have 4 others (if we use your diagram with the 6 nodes in a full mesh topology). If you cut the link on the ring topology you only get one path to a node that may have been right next to yours. You cut a link in the full mesh topology and you should still have at least 15 other paths (indirect though some may be) to get from the node that lost a direct connection to another node. So which topology increases redundancy by having nodes connect to other nodes of the network? Or a better way to put it. Which topology has more redundant links (and thus paths) to other nodes in the network? 2 links/paths are great. 5 links are better. ....and the green diagram is only a partial mesh topology. don't believe me?... label the nodes on your full mesh diagram A,B,C,D,E,F and then cut the connection between A and B. You can still get to B by going A-->C-->B, ADB, AEB, AFB (2 hops), ACDB, ACEB,ACFB, ADCB, ADEB, ADFB (3 hops) etc etc up to a 5 hop path like ACEDFB or ACDEFB. If you like puzzles, try and find how many iterations you can. I can count at least 20 different paths off the top of my head without writing them down. The only rules are: 1) you don't go through the same node more than once 2) A is the start point and B (or whichever node you chose) is the endpoint

On what kind of device? Smartphone, tablet, PC? And what OS? android, IOS, Windows phone OS, Linux, Windows (XP-10?), Mac OS X (jungle cat version?) Are you looking to do it at network level? Your question is a little vague. So if you can clarify it will be easier to zero in on a solution for your specific issue. Let me clarify... what you are looking for is called content filtering and it can generally be done on the device (less effective because the device still receives data sent to it and just discards it. However, software can block outgoing requests thus preventing most incoming traffic). A better solution is to do this at the network level. Where content filtering and content delivery can be combined to cache specific content locally (to avoid sending multiple requests out to the WAN/internet) and filter outgoing and incoming requests for particular content you want to block. On mobile networks this is generally just not possible (your service provider may have some filtering options so check with them directly. Your mileage may vary.) On LANs and Wifi it is very possible.

some routers also allow DHCP passthrough...but it doesn't sound like this is one of them. So the WAN port on this router is not going to work for switching.You can't route to a network that has the same IP address space. Most consumer routers hard set the WAN port as a routed (Layer 3) port. If you can't turn on DHCP passthrough and disable routing, then z meul's method should work.

You can prioritize traffic using QOS-Quality Of Service to avoid the issues with being unable to get bandwidth if someone else is downloading files etc. This is only locally significant on your LAN and will control priority of each hosts traffic. QOS is usually disregarded on WAN connections by your ISP.

Aye. Hubs are obsolete. They were discontinued in favor of switches a LONG time ago. Nowadays hub is a misnomer. The devices used to connect hosts and routers are truly switches. Hubs are good only as doorstops. LOL

Well said and perfectly correct. Also keep in mind that the higher the dBi or dBd of the antenna the flatter the vertical coverage and greater the horizontal coverage.

Speaking as one that has both set up CCNA lab equipment and exercises on physical equipment AND taught CCNA classes, having the equipment is satisfying and comforting and wonderfully tactile. Easy to put hands on, have physical connectivity, and try to resolve physical connection and cabling issues locally. However, you don't often get that luxury as a network admin. You have to get used to configuring and troubleshooting remotely. That's the reason why GNS3 (or VIRL and Packet) is so handy. Quick reconfigurations are easy and integration with physical hardware is possible as well. As the packet size goes up so does the throughput. But the PPS goes down. There is a maximum throughput and PPS of mixed packet sizes but it's not generally advertised. Oh and yes the throughput does rise above the maximum listed on that sheet at higher packet sizes. Keep in mind that the first packet in any stream is process switched and all subsequent packets are CEF-Switched. Process switching is like searching for a person in a phonebook by starting with the first entry in the list and seeing if its the correct one then moving to the next if it's not. Binary searching is also used to cut the each search by halves. CEF switching is like looking alphabetically. It searches by octet and each subsequent octet. So it will search for the first number. For an IP address of 175.230.64.110. It will look for the first number (0-255) and then under 175 it will search again (0-255) then under 175.230 and so on until its find the final octet which has the actual location of the route in the routing table (If I recall correctly it actually lists the interface/IP address to send the ip packet from/to). As you can imagine this is much faster than to search a routing table for an entry 1-by-1. However on a router this is all done in IOS software. On a switch this is done by a specialized hardware processor called an ASIC. Because it's done in hardware L3-switching can reach into the millions of packets-per-second and hundreds of Mbps on up into gigabits per second.

Starting at the sub board level....More water pipes/sewer pipes (especially on a "wet" wall where multiple floors run water pipes down a single wall), Thicker sub flooring, Denser Wallboard/Lath &Plaster/Sheetrock for water resistance, Tile (especially if on the walls) and the underlying cementboard, and the porcelain fixtures. Just that alone would be enough to block most of the 5GHz signal. Metal tends to absorb or reflect wireless signals. Wood absorbs wireless signal. Water absorbs wireless signal. Cement, and tile and plastic absorb wireless signal. Glass and porcelain reflect wireless signal. More of a restroom than a proper bathroom would imply the walls are covered by tile or plastic. If there are stalls or a glass shower or tub enclosure then you add in the effect of creating a metal, glass, or stone box (shower/tub surround) around or next to your wireless device and likely between your access point and your phone. APs transmit at a power level between 0 and 4 Watts. 2.5Ghz (which is just above 802.11g/n frequencies) penetrates into most things pretty well at high levels (greater than 500 Watts, like in your microwave). But the AP is only transmitting at 4 watts (Maximum). If you double that frequency you've lowered the penetration by at least half and more likely by a quarter. 9 or 10 meters is a pretty good distance especially if you are going through multiple walls, even at 2.4 GHz, let alone 5GHz. If you truly would like to know, try doing your own site survey with something that can measure the signal in dBm (that's deciBels in relation to milliwatts). I use WiFi analyzer for android and I know there are similar apps for iOS like AirPort utility, Network Analyzer and WiFiPerf. Try drawing a map of your dwelling and then recording the dBm of the signal at different points. You'll get a pretty accurate read of where any obstacles might be blocking or reducing wifi connectivity. 0 to -80dBm is pretty decent. -90dBm is ok. -100dBm....it's pretty dicey....not much speed/throughput or signal. -120 to -130dBm....feel lucky you even have a signal but don't expect ANY throughput.

There are many dealers that deal in grey market and EOS (End-of-sale) catalyst switches as well. I was able to find a 3560 switch for $60USD. Just so you're aware

Keep in mind entrance and exit points are always weak spots for VPN. If your computer gets compromised or somewhere out on the net (past the VPN server/concentrator) gets compromised you are STILL vulnerable, regardless of what encryption is being use on your VPN.

If no one has mentioned it yet, GNS3 is a great training resource for CCNA Routing and ASA Firewall training. It will get you a long ways toward a R+S CCNA or CCNA Security certification.

Sounds like a "Shared" Network or a Business/ Corporate thing if you are paying for the connection but have no access to the router. If it is business/corporate you should talk to your IT guy/department and let him know this is an issue and he should test this. If it is a "Shared" internet connection you should check whoever is managing the router to see if they can test the gigabit connection. Try and eliminate any patch panels between you and the router, and make sure any switches are full gigabit switches. Gig-ethernet requires all eight wires. The fact that one port can't negotiate gig ethernet speed would indicate the wiring is missing pair 4/5 and 7/8 somewhere between your computer and the router. The other may be caused by a bad connection or slow connection from switch to router. Ideally you should connect directly to the gig-ethernet port on the router (it should have at least one that is 1000BaseT)

That's like terrible "Dad Jokes" but instead it's terrible IT Jokes....wait, IT is usually terrible anyway. That means these jokes might actually be funny....LOL. But they did bring a smile to my face.

Yeah....Speaking of overkill.....When I was trying to connect to the Nintendo update server via my Cisco 871W the Nintendo support had NO IDEA how I should configure my Cisco IOS firewall to allow connection to the Nintendo services...LOL And yes, a 1900 series router would likely be overkill for home use. But if you're going that way... might as well swing for the fence.

Windows computers usually discover each other using netbeui or netbios, neither of which are usually routed. Netbeui over TCP/IP helps but netbios name resolution is the usual way windows identifies other computers on the LAN network. Once you cross a VLAN or subnet barrier a lot of the windows services go away and only limited connectivity is available. A WINS server was often the way to provide the name resolution across VLANs or subnets. Once the computers in question are on the same IP subnet or VLAN or have a WINS server for the computers on the other subnet the issue should resolve itself. Since the issue was DHCP based with different subnet addresses being used it sounds like you had 2 different networks on the same LAN. Once all the addresses are the same the issue goes away. DHCP race conditions are a different matter, but they may not occur on a small enough LAN.

Actually most smartphones are sporting 2x2 MIMO or MU-MIMO antennas nowadays. Samsung has had 2x2 MU-MIMO from the S5 to current s7 models.Microsoft, Google OPPO, ZTE and LG also have it on their phones to name a few. (Some phones even sport 4x4 MU-MIMO antennas.) Not sure about spatial streams but assuming 2 that would mean 2x2x2. Ac1750 should be able, assuming MCS-9 (modulation and coding scheme 9= 256QAM and 5/6 coding rate, with channels 40,80 or 160MHz wide and a 800 or 400ns guard interval) and 2 spatial streams (possible with MU-MIMO 2x2) to provide between 360 and 1733 Mbps. (Halve those numbers for one spatial stream at MCS-9) Now that won't speed up your WAN connection....so 30Mbps or about 3.4MB per second should be your speed limit when downloading from the internet. This does not take into account any interference due to neighbors lousy old 802.11a wifi router, interference due to radar or non-802.11 5GHz devices or other wifi channel congestion or interference or physical interference (walls, stucco, concrete, trees etc) and the throughput is the theoretical maximum. Suffice to say it's unlikely your wifi will be the bottleneck in your network. More likely your internet connection will be your bottleneck.

Small Form-factor Pluggable GigaBit Interface Card or SFP GBIC SFP Fibrechannel or SFP-FC basically a small network port module that can plug into a SFP slot on a router/switch/firewall/storage array or anything that has an SFP slot and supports an SFP "Card" Usually they have a dual LC, RJ45, or TwinAx physical connector

Keep in mind monitoring does not mean that the software will necessarily fix the problem either. There are a lot of technologies that allow for traffic characterization and monitoring of the traffic. Netflow and packet sniffing and SNMP can do a lot. If you are looking into monitoring what is being used from your computer. Traffic monitoring, analysis, and mitigation on a HOST level (as opposed to the network level) is little more involved and space consuming. At a consumer level, most people go high level and stick with content filtering and blocking. websense, fortiguard, trend micro are good for this. Wireshark will get your traffic but the cost in storage for the packet captures can be prohibitive and analysis is fairly rudimentary Glass wire sounds great... at least on paper. I've never used it so I don't know.

Ouch! That hurts my brain! I was going to mention some more stuff and whip out the configuration guide from cisco.com. Then I looked at it and wow! Can they make it any MORE confusing and awful?!?! 255.255.255.0 is a subnet mask. it defines what portion of the IP address is the network portion and which is the host portion. The 255.255.255.0 means that 192.168.1 is the network portion and the .1 is the host portion Oh BTW, www.cisco.com/go/1800 gets you to the main page for the 1800 series of routers of which the 1811 is a fixed configuration model with 2 WAN ports and 8 switch ports, wireless 802.11a/b/g, and a v.92 dial up modem backup. I could tell you how to configure it and what commands to use as I had a cisco871W that could be configured using the same commands as the 1811, but it would take WAY too long and WAY too much explanation on paper. And besides Droidrzrlover already volunteered. Suffice to say, an 1811 router is not like a linksys or netgear or ubiquiti wireless router. If you don't have a copy of Router Device Manager 1.0 or 2.0 or it's not on the flash then forget a graphical user setup. You will be using the Cisco IOS command line to configure it.......... which seems like you would require a CCNA to translate the configuration guide on cisco.com anymore. LOL

So you're trying to use your wireless connections like a double barrel shotgun. I get that. But consider this: how does windows determine which connection to use? how would it decide which link would be better to send the traffic down? How would it decide which DNS settings to use to resolve your web address? How would it account for the disparity in speed if you are using both 2.4GHz and 5GHz bands and they associate at different speeds? There are routing and switching NIGHTMARES involved in what you're doing here and even a possibility of causing broadcast storms on your network if it's all in the same IP space. That being said it seems windows is detecting the connections and choosing the best connection and relegating the other as a failover or backup connection. With increased visibility into wireless networks windows 10 may be able to measure speed and latency of the 2 wifi connections. A speed change or disparity in one adapter could easily account for this behavior. In win7/win8 you could adjust the "metric" of each adapter on the Advanced TCP/IP properties tab to be equal. Win7/8 probably used the connection as if it was a wired connection. This forced windows to load balance the connections. Something like this may work in windows 10 or it may not. It depends on the WiFi intelligence that has been built in. I'll have to take a deeper dive later when I have access to my win 10 computer. Keep in mind drivers should be current and you might have issues if you had VPN software on the computer before you upgraded it to Win10.

you should verify your network drivers are not faulted in device manager. Check the link lights on your network interface and your switch. Make sure you have an IP address that does not begin with 169.254. Check the cable and then verify that you specified your network as a work or home network.