<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Damien,<div><br></div><div>I agree with going green.. with the rising cost of power and all, it makes sense from an economical perspective.</div><div><br></div><div>Recently I've deployed a ubiquity router station pro at home for my routing needs. Cheap to buy, cheap to run, does PoE, 4x Gig ports, SD card slot, USB etc etc. I'm using OpenWRT on mine installed to the built in flash, and it works great. A friend of mine told me if you really want to you can run fully fledged Debian MIPS on it.</div><div><br></div><div><a href="http://www.ubnt.com/rspro">http://www.ubnt.com/rspro</a></div><div><br></div><div>Cheers!</div><div>-Shaun</div><div> </div><div><div><div>On 19/05/2011, at 1:55 PM, Damien Morris wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div>Trying to:</div><div><br></div><ol><li>Be Green.. Old machines draw more power and real estate than they deserve and have spinning disks..</li><li>Focus on efficiency, and come up with solutions that could be shared/benefit others</li><li>See how far you can push some of these consumer devices that have all the hardware in the box just waiting to be exploited..</li></ol><div>Maybe have some fun along the way :)</div><div><br></div><div>Thanks,</div><div>Damien.</div><div><br></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div><div>On 19/05/11 3:46 PM, "Eric Pinkerton" <<a href="mailto:Eric.Pinkerton@stratsec.net">Eric.Pinkerton@stratsec.net</a>> wrote:</div></div><div><br></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;" type="cite"><div xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div lang="EN-AU" link="blue" vlink="purple"><div class="WordSection1"><div class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; ">Why not just put Vyatta on an old machine with multiple nic’s, and use it to segregate your AP’s from said crown jewels?<o:p></o:p></span></div><div class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><o:p> </o:p></span></div><div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"><div class="MsoNormal"><b><span lang="EN-US" style="font-size: 10pt; font-family: Tahoma, sans-serif; ">From:</span></b><span lang="EN-US" style="font-size: 10pt; font-family: Tahoma, sans-serif; "> <a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a> [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Damien Morris<br><b>Sent:</b> Thursday, 19 May 2011 1:35 PM<br><b>To:</b> <a href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a><br><b>Subject:</b> [AusNOG] Enterprise Protection for the Consumer<o:p></o:p></span></div></div></div><div class="MsoNormal"><o:p> </o:p></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">Hey NOGers,<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; min-height: 14px; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">Maybe a bit OT - but what devices have people heard of or had experience with that give the enterprise-grade feature experience with consumer-grade gear?<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; min-height: 14px; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">Note I said 'experience' and not 'quality' - so you wouldn't run your business on it but you could set up your home DMZ, walled garden, VPN concentrator, RADIUS, 802.1x, etc.<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; min-height: 14px; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">The thought occurred as I was experimenting running multiple APs off a single LAN segment at home to test the performance of each and realised I was creating a large attack surface area with no protection beyond WPA2. Break through an AP and you get the crown jewels.<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; min-height: 14px; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">The most obvious example I can think of is the Asus N-16 which seems ridiculously overpowered compared to its contemporaries, and can run the seminal DD-WRT for some enterprise features (and a more-or-less full featured linux distribution with iptables and at least three discrete interfaces, albeit one of them wireless. You can add a USB drive to it too if you need more). For the record, I'm not a fan of Linux but I can't see IOS or a BSD-able device coming cheap.<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; min-height: 14px; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">Soekris, Mikrotik, Guruplug et al all seem a little too cost-heavy after you add the necessary extras to get them going, and the fact you'd need more than one device to realistically built enterprise-class network topology.<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; min-height: 14px; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">Love to hear anyone's feedback. E.g. has anyone ever hacked Vyatta onto a $50 consumer grade box and powered it with a PoE injector..? :)<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; min-height: 14px; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">Thanks,<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 9pt; color: black; font-family: Helvetica, sans-serif; ">Damien.<o:p></o:p></span></div></div><div class="MsoNormal"><o:p> </o:p></div><div>Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering.<br><a href="http://www.mailguard.com.au/mg">http://www.mailguard.com.au/mg</a><o:p></o:p></div><div class="MsoNormal"><br><a href="https://login.mailguard.com.au/report/1CkO94rp0N/3SMAfR37nQheKo3nhixPfq/0.004">Report this message as spam</a> <br> <o:p></o:p></div></div></div></div><br><div>Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering.<br><a href="http://www.mailguard.com.au/mg">http://www.mailguard.com.au/mg</a></div><!-- MailGuard Message ID: 4dd4aef24c5764 - use this number for reporting -->
<br> <br></blockquote></span></div>
_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>http://lists.ausnog.net/mailman/listinfo/ausnog<br></blockquote></div><br></div></body></html>