Slashdot Mirror


DSL Hardware for Wiring Condos?

Condo-Netwerk asks: "I'm trying to prepare a proposal for my condo building to be our own DSL provider. With 160 units, we should be able to get a T1 and keep the price fairly low. But what's the up-front cost? Which hardware should we use? What do we need to know about Copper Mountain, Avidia, etc. to do our due diligence prior to selecting hardware? I'm also helping a friend spec cabling for a new 30-unit condo building he's putting up; he wants to pull cat5 and split a DSL line from the phone room to each unit. Caveats? Experiences? Is it better to use cat6 or fiber?"

416 comments

  1. Why DSL? by jackjumper · · Score: 4, Interesting

    Go wireless!

    1. Re:Why DSL? by raider_red · · Score: 4, Informative

      I'd agree with this comment. With DSL, you'd basically need to set up a telephone switching office on sight. As an alternative, you can set up an all ethernet system where everything is connected via router to the T1 line, or you can set up several wireless access points and hook them up to the same router, and save a lot of trouble running a CAT5 cable to every unit.

      --
      It's good to use your head, but not as a battering ram.
    2. Re:Why DSL? by Ron+Harwood · · Score: 5, Insightful

      Seriously. Wireless or wired ethernet... why add in the complexity of the DSL hardware?

      Unless you absolutely need to use the existing copper or something - in which case a DSL solution would work nicely... ...but since you're able to run wire - go with 100Mbps ethernet to each unit... and if you have to control access do it with a patch panel... ;)

    3. Re:Why DSL? by barnaclebarnes · · Score: 4, Insightful

      I would have agreed with this comment until a few weeks ago until I found out.

      - It is probably cheaper to go wired when you are in an apartment block or building a new housing development.
      - Wireless sucks when you have a lot of people on it. (Cebit this year was a mess).

      --
      [Please type your sig here.]
    4. Re:Why DSL? by AchilleTalon · · Score: 3, Insightful
      What can be added to this comment?

      Nothing, except to vote in favor of it.

      Best way would be wireless for the extra advantages it gives to users to work anywhere in their condos without the hassle of cables and plugs proximity.

      But, if you don't like it, go Ethernet you just need a router, a patch-panel and CAT5 cabling. No splitters, no DSL modems. However, you need to cable all the building.

      --
      Achille Talon
      Hop!
    5. Re:Why DSL? by praedor · · Score: 1

      I can think of a simple reason to use DSL instead of ethernet: wiring. Why run through each building and into multiple rooms running cat5, cutting holes, etc, when you can just use the outlets for phone that are already installed?


      DSL is plenty fast enough and easier to install after-the-fact.


      The other alternative is wireless. Perhaps no more labor-intensive than setting up DSL (remember, using the existing phonelines) and as easy as placing and firing up a few APs. Done.

      --
      In Bushworld, they struggle to keep church and state separate in Iraq as they increasingly merge the two in America.
    6. Re:Why DSL? by rxed · · Score: 1

      Go wireless only if you can setup VPN's for each connection -- otherwise you'll give connection to more than your apt complex...which is okay :-)

    7. Re:Why DSL? by Anonymous Coward · · Score: 1, Interesting

      or ethernet. Let the tenants do their own wireless. I can't think of any reason to do DSL. It will be *way* easier to run cable than jump through telco hoops to use their wire.

    8. Re:Why DSL? by Unkle · · Score: 2, Interesting
      I would aggree completely with this solution. This whole thing reminds me of how my college was wired up in the dorm rooms - plug a cable into an ethernet-size jack (their wiring was slightly different), and you have your connection. Just need to have someone turn it on, which I thinkw as done with some sort of patch panel or something, I never really saw. It was fast, painless, and oh-so nice.

      The only problem might be that it was just a large network - anyone could see all the other computers on the network, and access shared folders (like newer versions of Windows set up by default).

      --
      Against stupidity, the gods themselves contend in vain.
    9. Re:Why DSL? by hpavc · · Score: 1

      do you have any insightful hardware recomendations for his site?

      --
      members are seeing something, your seeing an ad
    10. Re:Why DSL? by PCBRefugee · · Score: 1

      Oh yeah, it's gotta be ethernet for sure. Think of a condo as a hotel where people stay a really long time. Now think of what a wired hotel provides - ethernet! Or maybe wireless these days 'cause it's groovy. But for sheer stupid-user compatibility that little RJ-whatzit jack with DHCP is hard to beat. Down in the closet you oughta run VLAN etc etc as other posters have suggested.

    11. Re:Why DSL? by Phroggy · · Score: 1

      Go wireless!

      This may not actually be such a bad idea. You'll have to look at the security implications. Each resident would need a WiFi card or router, but that's a lot cheaper than a DSL modem, especially since some residents will want to connect a WiFi router to their DSL modem anyway. Residents would have (sort of) 11Mbps connectivity amongst themselves (assuming IEEE802.11b), which neighbors who become friends (or friends who become neighbors) will appreciate.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    12. Re:Why DSL? by jdray · · Score: 5, Insightful

      Depending on the layout of the units, cable length may or may not be an issue. With 10/100 Ethernet, the max cable length is around 100m. I seem to remember that restricting the speed to 10 Mbit triples the max cable length, but that bit of data is suspect.

      Most commercial buildings have a wiring closet on each floor that houses switches for that floor. The switches from each floor are connected to a central (REALLY FAST) switch that typically has all the routing rules on it. Routers for Internet and other network connections are also connected in here, giving everyone on the whole network access (per permissions) to "the world."

      If your condos are distributed widely, I'd keep considering DSL but try and figure out a way to go with Ethernet. I'd avoid wireless for the time being, but consider other technologies like IP over power lines.

      There are other posts below that detail other considerations to be made when providing your own network service, such as developing a TOS and all that's encumbered there.

      --
      The Spoon
      Updated 6/28/2011
    13. Re:Why DSL? by schon · · Score: 2, Insightful

      The only problem might be that it was just a large network - anyone could see all the other computers on the network, and access shared folders (like newer versions of Windows set up by default).

      He'll have the same problem with DSL.

    14. Re:Why DSL? by tomhudson · · Score: 1

      And? Even with DSL, you can still access (most) other people's computers. Just takes a bit more work.

    15. Re:Why DSL? by envelope · · Score: 1

      Go wireless!

      Wireless is great for most stuff, but if you have any online gamers in the building, they're gonna want a wire. Wireless doesn't always keep up with the amount of traffic required for a realtime game.

      I have a Linksys wireless router in my home office which I'm hardwired to, but my kids' computer upstairs has a wireless NIC. When I'm playing BF1942 with the kids, I get frequent "connection problems" which cause me to crash my Spitfire (unless I have enough altitude to recover once the connection problem goes away).

      --

      appended to the end of comments you post, 120 chars
    16. Re:Why DSL? by macguys · · Score: 1

      I'm in a similar situation except that I am trying to connect about 150 households scattered over about 400 acres. We have some bucks set aside for community infrastructure and some strong interest in getting wired.

      Wireless can work in some limited areas but in general the terrain is too wooded for wireless to do much good.

      The cable provider stops a couple of miles away and wants megabucks to bring it to even one house.

      The local DSL folks say we are too far away from the CO to do any good.

      Getting a T-1 is doable. The cost is small enough that if we could get as few as 10 folks wired, it would work.

      I've been wondering about ethernet line drivers, shorth haul modems, other (than 802.11b) wireless options. Any suggestions welcome.

      --
      wherever I go, there I am.
    17. Re:Why DSL? by jonfelder · · Score: 1

      That is the exact thing that popped in my head as soon as I read the post.

      "Wouldn't wireless be a much better option here?"

    18. Re:Why DSL? by Archfeld · · Score: 1

      wifi cards have limited numbers of channels, and 80 people in a 2 block radius using wifi cards is going to be a FARKING NIGHTMARE. Wire each condo, townhouse or whatever, then provide wireless access for building level access. That way you have fewer frequencies to manage, you use dhcp so joe user needs to do no config, just click the radio button that says use dhcp and sit back. You can use mac verification to keep things secure or provide a public access point :) 802.11G Baby :)

      --
      errr....umm...*whooosh* *whoosh* Is this thing on ?
    19. Re:Why DSL? by Zebra_X · · Score: 2, Insightful

      Clearly you have not thought about the implications of such a proposition.

      First, you need a cable drop for every access point that you establish. This reduces the cost per unit, but doesn't really eliminate the problem.

      Second, each access point has a limited range some people will get a better signal than others. Realistically with a 54Mb access point you'll be able to support ~ 12 Users @ 200K/s the max of a T-1 or 1.5 Mbit DSL. The Pipe to the condos should provide at least this level of service at a price below market value for this project to even be justified. Also, the number of access points could be few or many depending on the building types. What this translates into is a lot of up front testing before a project plan is created for doing the cable pulls.

      Thrid, wireless on desktops isn't really a good deal unless you have a Mac. PC's have pretty whack PCI Wireless cards and the technology is much more cumbersome from an enduser and administrative point of view. I.E. a lot more can go wrong between the desktop and the AP.

      Fourth, security. It can be almost as secure as a wired network but the effort to accomplish this is much higher. Time = Money.

      All in all wireless is the last option the person should choose. In a situation such as this - it is a last resort for people who can't do a LAN the way it should be done.

    20. Re:Why DSL? by bryanp · · Score: 2, Informative

      With 10/100 Ethernet, the max cable length is around 100m. I seem to remember that restricting the speed to 10 Mbit triples the max cable length, but that bit of data is suspect.

      The 100 meter limit has nothing to do with ethernet. That's the limit for the Category 5 specification. If your cable run happens to be 10 meters longer than the spec allows then when you hook up a tester it could very well pass every single test except for cable length. It might very well be quite capable of running 100Mb ethernet with no problems whatsoever. It just can't be certified as Cat5.

      --
      "An unarmed man can only flee from evil, and evil is not overcome by fleeing from it." Col. Jeff Cooper
    21. Re:Why DSL? by funaho · · Score: 2, Informative

      Buy a decent Ethernet switch (like a Cisco Catalyst 3500 series) and set up VLANs. As a bonus with this setup you can also turn people's access on and off by just telnetting into the switch and doing a shut/no shut on the port. Plus you will be able to graph everybody's traffic and find that warez site set up on some poor person's hacked windows box that's sucking up the whole T1. :)

    22. Re:Why DSL? by bluethundr · · Score: 3, Insightful

      Best way would be wireless for the extra advantages it gives to users to work anywhere in their condos without the hassle of cables and plugs proximity.

      With the whole Condo on the same WiFi network, you're likely to have bandwidth and security issues. Personally, I would recommend going with the ehternet approach all going into a shared T-1.

      If people want Wireless connectivity, that's fine! Let them provide it themselves by suggesting they run out and buy a Linksys (or somesuch) at their local BestBuy or Fry's. Or perhaps, hook up a few pringles cans and provide it as an option in addition to the wired network. But having WiFi as the only solution would likely be more trouble than it's worth (IMO). Of the two options I present here, I'd prefer the former.

      --
      Quod scripsi, scripsi.
    23. Re:Why DSL? by Pii · · Score: 3, Informative
      I hope it's not too late to whore some karma... This is the first chance I've had to log in today.

      The answer to this problem is Layer-3 switching, and VLANs.

      Put every apartment unit on it's own VLAN, and at the Core, use access-lists to prevent each VLAN from accessing it's neighbors.

      The hardware costs are nominal, as you only need one Layer-3 enabled device at the core, and the access layer switches can be fairly modest. In Cisco-speak, each VLAN interface would look like this, and the attached access-list would prevent Inter-neighbor traffic:


      int vlan 51
      ip address 192.168.51.1 255.255.255.0
      ip helper-address 192.168.0.10 (Centralized DHCP Server)
      ip access-group 100 in
      !
      !
      access-list 100 remark ------------
      access-list 100 remark Inter-neighbor Filtering
      access-list 100 remark ------------
      access-list 100 remark Allow access to the Infrastructure Network DHCP-DNS-Mail-WWW
      access-list 100 permit ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.0.255 (Infrastructure Network)
      access-list 100 remark ------------
      access-list 100 remark Deny access between Neighbor VLANs
      access-list 100 deny ip any 192.168.0.0 0.0.255.255 (Denies all other Internal Routing)
      access-list 100 remark ------------
      access-list 100 remark Allow everything else...
      access-list 100 permit ip any any
      access-list 100 remark ------------

      Since I'm a Cisco bigot by trade, I'd recommend a Cataylst 3550 (w/the SMI image) as the core device, and Cat 2900XLs at the access layer. Use fiber between the closets as others have suggested.

      I'd also recommend giving each unit it's own static NAT/PAT translation outbound to the Internet, so that if something illegal should occur, you can determine that unit that originated the trouble. No sense getting everyone in trouble (Certainly not you!) for a single troublemaker.

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    24. Re:Why DSL? by KnightElite · · Score: 2, Informative

      Agreed. Run Cat5 Network cable and get 10/100 Base-T ethernet to all the rooms. The other thing I have noticed, is that a T1 will probably not be enough bandwidth.... unless you are very strict on monitoring usage of Kazaa and other file sharing applications. I'm the network admin of a 50 room residence at the University of Saskatchewan, and we're currently running the whole building off a 640kbit up/ 3Mbit down DSL line. It works quite well... as long as no one uploads excessively. Given that a T1 has less bandwidth, especially on the downstream, you might want to look into a slightly beefier connection, or the pings might shoot up rather hihg.

    25. Re:Why DSL? by Anonymous Coward · · Score: 0

      Seems like you're all thinking a bit overboard. A simple Layer 2 solution with some traffic shaping. In a switched environment you will not see other people traffic, except for broadcasts within your VLAN. In any event, you're providing access, shouldn't it be up to each customer to worry about securing there access? A Cisco 4000 with L3 capability would handle the core, and if there are buildings that are too far to run Cat-5 cabling to, place a smaller 2950 in that building with fiber running back to the 4000.

    26. Re:Why DSL? by Anonymous Coward · · Score: 0

      Cisco is nice but expensive. Get 2 Linksys L3 switch 24 ports VLAN capable for $700 each. Setup a Linux internet gateway/router/firewall/dns-cache/web cache with ACL for another $500 and you have a working/proven solution. If you want to add fault tolerance, there are plenty of cheap machine with dual motherboard, dual ethernet and setup software RAID. You can even setup 2 machines as a cluster for just the price of hardware.

      Then add SNMPv3 and MRGT and you can really impressed your friends with real time statistics.

      Linux rules :-)

      Regards

      Pascal

    27. Re:Why DSL? by cpthowdy · · Score: 1

      Last I checked, Cat5 is a type of cabling, not a certification that a cable could obtain...

    28. Re:Why DSL? by Anonymous Coward · · Score: 0

      Doh. I meant dual power supplies not dual motherboard.

      Also just cat 5 the building and for distance over 100m (300ft) just force down the speed to 10Mbps at the switch. The user will not see the difference as it is accessing the net at best at 1.5Mbps.

      Also add unison to the lot and have tenants backup their data on the server, or setup SAMBA on the server and have them store their data files there.

      Then setup your server with postfix or qmail and have each tenant have their own e-mail hosted in the building with their own mailbox and domain name.

      Then add Hylafax with a DID line (one line multiple phone numbers) and modem, and have each tenants with their own fax numbers get their incoming FAX routed to their e-mails.

      Add a couple of modems, and give them access to the net, their files (PPTP or IPsec) when they are on the road.

      etc ...

      Did I mention that OSS rules.

      regards

      -- Pascal

    29. Re:Why DSL? by mooman · · Score: 1

      Not quite so. There are various installation guidelines that have to be adhered to for cabling to retain its rating. "Cat5 cable" is cable designed for a certain rating and engineered to certain minimum quality specifications, but your actions will dictate whether it keeps that rating.

      Examples include no sharp bends, no more than 25 lbs of pulling force, certain distances from power lines, and so on.

      You can overengineer and use Cat6 certified cabling which gives you more leeway, but you still do best to properly handle whatever you purchase..

      --
      In the Portland, Ore area and like card games? Check out: http://groups.yahoo.com/group/portlandgames/
    30. Re:Why DSL? by robi2106 · · Score: 0, Troll

      Someone could easily move in and start whoring out your fat pipe for spam.

      Make sure TOS eliminate all server services. Serriously though, if a techie wanted to live their and host a web/ssh/ or whatever server, then charge them extra. Otherwise, eliminate almost all incomming traffic.

      That is just plain easier, safer, an egalitarian.

      robi

    31. Re:Why DSL? by Cramer · · Score: 2, Insightful
      • The only problem might be that it was just a large network - anyone could see all the other computers on the network, and access shared folders (like newer versions of Windows set up by default).

        He'll have the same problem with DSL.
      Not necessarily. Can you "browse" all the computers connected to your DSL line? Or dialup?

      This is an implementation issue. It has very little to do with the connecting technology.
    32. Re:Why DSL? by PatJensen · · Score: 1
      I would be inclined to agree with Pii's layer 3 assessment - but with all of the Layer 3 switching and filtering functionality being done at the Core. Keep the intelligence at the core and look at deploying Cisco's LRE solution to the individual units.

      I've had very good experience deploying Cisco LRE 2950 switches for campus dorm solutions. You can use Cisco's CPE and related provisioning solutions for access control.

      Ciao.

      -Pat

    33. Re:Why DSL? by Cramer · · Score: 1

      I'd have a serious problem with not being able to communicate with any other computer(s) in the entire complex. Without the provided system, there certainly wouldn't be anything preventing it. (ie. my dialup connection can talk to my neighbor's DSL connection.)

      DHCP and address translation can be a serious problem. No ISP is going to give you the address space to assign a single IP to every person, room, or apartment. The larger the allocation required, the harder and more expensive it will be to obtain. One could attempt to log the dynamic translations, but that is more of a mess. (I watched the xlate events of a PIX-525 for a company of ~750 people... for a few minutes. There no way anyone would keep logs long enough or spend the time to dig through the millions of records.)

    34. Re:Why DSL? by Pii · · Score: 1

      In my solution, the Layer-3 switching is in the core.

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    35. Re:Why DSL? by Pii · · Score: 1
      You could certainly alter the access-lists to allow traffic between VLANs, but most people probably have no desire for that. Better that friendly neighbors specifically request that kind of access.

      For most, this kind of separation is a value add.

      As for IP Address space, you can get additional IP space from *any* ISP. They may charge you an annual fee for a full /24, but it's pretty nominal, and certainly an expense that can be re-couped.

      The move is really to provide this kind of solution in a new building. Wire it during construction. Don't make the service an optional add-on... Build it into the rent, and everyone who moves in is a customer. Then it becomes a feature, rather than a service.

      You can add $50-$100 to the monthly rent, and now you're talking about 160 subscribers, with a monthly recurring revenue of $8000 to $16000 per month, depending on the building occupancy.

      You pay for the equipment outright in a couple of months (obviously, once the building is filled).

      Bandwidth isn't that expensive, especially if you're buying it in bulk. If you're smart, you buy it at a local colocation facility, and you install your own router there. Then you add individual T-1s as your bandwidth needs increase.

      This is a solution that scales, and pays. Ideally, you put a really fat external pipe into a building complex (Multiple apartment towers), and then rake it in. The monthly "cost" is hidden from the subscribes anyway.

      It's a license to print money.

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    36. Re:Why DSL? by Gumber · · Score: 1

      I think you are still a bit off. Its part of the 100BaseT (100MBit over Cat5 twisted pair) spec. 10BaseT (10MBit over Cat3 twisted pair) had longer length limits.

      I'm pretty sure that cat5 doesn't specify anything about cable length, though, because most deployments of cat5 are for 100BT, runs are going to be kept under 100m

    37. Re:Why DSL? by Pii · · Score: 1
      Hahaha...

      Stay out of the deep end, kid.

      You think a Cat 3550 is overboard, but you want to pony up for a Layer-3 capable Cat 4000? Priced one of those lately?

      Cat 3550-24-SMI runs about $3500 ($1800 if you go with a refurbished unit, and I know this because I have one downstairs right now).

      Plus, having a single switch dramatically complicates your wiring issues. You have to home run everything to s single location. With access layer switches, you need only run access layer connection in the horizontal. Then you simply tie the closets together in the riser.

      This statement, however, takes the cake:

      "A simple Layer 2 solution with some traffic shaping. In a switched environment you will not see other people traffic, except for broadcasts within your VLAN."
      What about their unicast traffic? What about the kid running Nmap? Not to mention all of the broadcasting that your Windows boxes, and their default Shared directories will be doing. Who wants the headache?
      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    38. Re:Why DSL? by Pii · · Score: 1

      And to clarify, I mean the unicast traffic directed at your machine...

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    39. Re:Why DSL? by sco08y · · Score: 1

      IANANE, but the 100 meter limit has everything to do with Ethernet. It's a collision detecting protocol, and the way it detects collisions is (effectively) by listening to the data it sends out. In short, the NIC sends a packet and listens for its own signal to ensure that the packet was sent correctly.

      Thus, if the cable is too long your NIC won't hear itself in time again. This is also the case if your packet is too small, which is why the packet size is related to maximum cable length.

      (Another side effect of this is that to keep the 100 M max cable length, 100base-T has to have a minimum packet size 10 times larger than 10base-T.)

    40. Re:Why DSL? by Anonymous Coward · · Score: 0

      With the added benefit that you can run a file-sharing network. Until the RIAA sues you for $150,000 per song... ;)

    41. Re:Why DSL? by sothenisaid · · Score: 1
      My mother owns/runs a wireless internet company and we do very well especially with apartment complexes with our proprietary equipment -- with T1 speeds no matter the case. Wireless is becoming a must have in many various markets and thus for new places to draw in more tenants wireless would be a big sell.

      Hummingbird Wireless is our company, we also do court systems and various other system types stemming from the original idea.

      --
      AHH! My Brain! *twitch twitch*
    42. Re:Why DSL? by Anonymous Coward · · Score: 0

      Why bother if you going to go with the expence of using a L3 switch pony up the cash for one that does PVlans it's much less complicated and allows for real IP addresses.

    43. Re:Why DSL? by palfreman · · Score: 1
      Right. This is to do with broadcasts, and the network segment up to the users host. On telephone modem or DSL, the last segment is usually a point to point link, in other words, a netowrk with only two hosts, this end and the other. That way broadcasts only go so far as the other end of the point to point link. Windows uses broadcasts to discover other nodes on the network, and the other end of the point to point link won't route them by default.

      With a traditional ethernet network everyone can see your smb broadcasts, so it feels less secure - people can see you "on the net". It isn't really less secure though, and as a network technology Ethernet is far superior. Explain the situation vis-a-vis the other tenents, and offer to sell them custom firewalls.

    44. Re:Why DSL? by Cramer · · Score: 2, Informative
      Ok, you are obviously talking out your left butt cheek...

      • As for IP Address space...
      IP address space isn't free (for anyone!) ISPs (subject to ARIN) MUST provide "detailed" justification for assignments of /24 or larger blocks to end users. I work for an ISP. I go through this shitty processes several times a year. I know very well what goes on w.r.t. address allocations. Yes, you get address space from your ISP. For a fee. As long as you can justify the allocation. (160 condos is far too small for a direct assignment from ARIN.)

      • You can add $50-$100 to the monthly rent...
      Any place tacking on an extra 50 to 100$ in rent for shared access to a T1 is not going to be my place of residence. There are better, faster solutions available (maybe not for these 160 condo's... I don't know where they are.) And it's not like people will not notice rent here is 100$ higher than down the street.

      • Bandwidth isn't that expensive...
      Oh good God. If you hold any form of network related certification, please return it. "Buy in bulk"? This ain't mayonnaise, boy. This isn't 1995 either. The cost of 1U of colo space for your router will run more than the T1 you want brought back to the condos. Gee, how does two routers + T1 between them + colo rack space + colo connectivity and bandwidth cost less than one router and a T1 to some ISP? (Answer: it doesn't, and never, ever will.)
    45. Re:Why DSL? by walt-sjc · · Score: 1

      The telco only owns the cable to the dmarc - the closet in the basement or wherever. The wire in the walls belongs to the condo. The sheer cost of running cable can kill this project. Unless enough people sign up, a T1 isn't cost effective either.

      DSL would be a GREAT answer - if the CO level equipment was affordable.

      An alternate is a cablemodem head end. A small unit goes for ~12K that would serve a complex just fine. Cable modems can be had for ~$50 each. Approx cost to retrofit wire each unit with one drop would be in the several hundreds of dollars each (~$30k+). With a cablemodem you would use the existing (again, condo owned) wire.

    46. Re:Why DSL? by bobbozzo · · Score: 1
      Can you "browse" all the computers connected to your DSL line? Or dialup?

      If they're all on the same subnet, then YES.

      I've done it on dialup, and on my cable modem.

      --
      Nothing to see here; Move along.
    47. Re:Why DSL? by Gumber · · Score: 1

      don't forget about electrical isolation if you go with wired. You don't wan't too much current flowing through that Cat5 (or 3).

      If there isn't allready a spare pair running to each unit you can also look at phone-line networking.

      Oh, and get more than a T1 if you can. I think if half the units subscribe, that T could seem overfull pretty easily. Consider that most DSL users with, say, a 640kbps connection from a decent provider can see full speed on 2-3MB files. Try and get something burstable.

    48. Re:Why DSL? by Cramer · · Score: 1

      That all depends... DSL often has a split-horizon problem where broadcasts aren't flooded to other ports. In such a case, without specific configuration otherwise, the other computers would not show up in the network neighborhood. They are still browsable by direct request (\\192.168.1.1)

      Dialup generally requires specific configuration to flood broadcasts (or even listen to them.) I've never known of any ISP to support this. (I configured a few netblazers to do it long ago, but that was just for grins.)

      Cable modem is a different animal... Think of it as an ethernet switch that's really, really far away. :-)

      And the rules for netbios neighbor lists require all the hosts in the broadcast domain to be in the same subnet (as the client believes... enter the wrong netmask and parts of the network can disappear.) I've had problems with customers wanting browsing across VPN tunnels -- it ain't gonna happen without a domain controller or wins server.

    49. Re:Why DSL? by DeputySpade · · Score: 3, Funny

      Why is there no mod option for -1 self-promoting?

      --


      This space intentionally left blank
    50. Re:Why DSL? by Pii · · Score: 3, Informative
      Wow!
      "I work for an ISP."
      So tell me... At this ISP where you work... Do you have to empty all of the wastebaskets every day, or do you just do certain "high-traffic" recepticles daily, and visit the individual cubes two or three times a week? Also, how long does it take?

      Let me explain some bandwidth math to you, since you haven't managed to pick any up at your day job.

      Obtaining a T-1 Internet connection to a Tier-1 ISP (Not some low rent ISP 6 AS hops away from MAE-East) costs in the neighborhood $1200 - $1500 per month.

      Now, obtaining a Point-to-point T-1, intra-lata, costs around $295 per month; maybe a little more or less depending on the carrier.

      If I purchase 100Mbps service at a co-lo, with no traffic metering, and a rack space, I pay a lot, but I can support 70 T-1 connections without any over subscription(!).

      So do some math...

      In my other posts, I specifically addressed using multiple T-1s, which again, is a lot more expensive when the other end of the circuit terminates at a Tier-1 ISP than when it terminates at your own equipment. So the equation is not "$100/month for 1/160th of 1.5Mbps." It's "$850/month for Rent" vs. "$950/month for Rent, and Free High-speed Internet."

      You, as the renter, have no idea what I'm charging you for the Internet access. It's a hidden cost...

      "Yes, you get address space from your ISP. For a fee. As long as you can justify the allocation. (160 condos is far too small for a direct assignment from ARIN.)"

      Who said anything about getting address space from ARIN? I'm talking about getting it from an upstream provider... And it's dirt fucking cheap, when you're turning around and collecting $1200/year for each address.

      Lastly...

      ""Buy in bulk"? This ain't mayonnaise, boy. This isn't 1995 either. The cost of 1U of colo space for your router will run more than the T1 you want brought back to the condos. Gee, how does two routers + T1 between them + colo rack space + colo connectivity and bandwidth cost less than one router and a T1 to some ISP? (Answer: it doesn't, and never, ever will.)"

      I'll try to remember that as I wander up and down the butt-empty co-location facilities here in the Northern Virginia/Dulles Corridor area...

      My co-lo rack can service a lot more than 1 T-1 connection... It's called economies of scale. You should read a book some time.

      You almost have a point... Yes, 1 rack at a co-lo, plus 1 T-1, to 1 remote locations would be far more expensive than a single T-1 connection to an ISP... And it may indeed always be that way...

      But 1 rack at a co-lo, plus 15 T-1s, split across 5 remote locations is a far cry cheaper than 15 T-1s to ISPs.

      And with the markup at the customer end, you can see why this would make money.

      Of course, with all of your "I work at an ISP" experience, you might not be aware that making money is the point of the business in the first place.

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    51. Re:Why DSL? by Thor+Ablestar · · Score: 1

      access-list 100 remark Deny access between Neighbor VLANs

      Why? As I understand, the local condo networks are created around some community that needs some internal traffic (P2p, game, local ftp, etc).

      In Ethernet networks, much bigger problem is theft of services by cloning a MAC and IP of legal user, and this problem may be resolved by VLANs, but I didn't see anybody addressing this problem. You will face this problem in any network where the tariff is not flat or where the Internet access is not equal to LAN access (Gamers without Internet, for instance).

      www.nag.ru for a lot of info about Russian LAN-builders (In Russian, sorry)

    52. Re:Why DSL? by Slack3r78 · · Score: 1
      If there isn't allready a spare pair running to each unit you can also look at phone-line networking.


      Eh, I'd be rather hesitant about that personally. PNA setups are fine for home setups, with just a few machines on an unmetered broadband line, but when you go up to THAT many units, I could see some major problems. I had a couple of machines on HPNA here just to kind of play with for a while, and one thing I noticed was that the internal packet error rate between my router and the HPNA machines generally hovered somewhere around 1%.


      A 1% rate really doesn't matter on an unmetered home broadband line with only a few systems, but when you're talking about 160+ systems on a T1 likely pushing hundreds of gigabytes of data per day where you're paying for your bandwidth based on usage, and suddenly a 1% internal error rate has the potential to bite you later in wasted bandwidth costs. A neat idea, but I think you'd end up losing more in extra bandwidth costs in the long run than you'd save in convenience in the here and now.
    53. Re:Why DSL? by Pii · · Score: 1
      I guess that would really depend on the nature of the community...

      It's not uncommon for people living in a condo or apartment building to not even have met their neighbors (Particularly in the Northeast:) ).

      I suspect that for most people, it's simply about obtaining Internet access, and by taking care of economies of scale, everyone can benefit.

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    54. Re:Why DSL? by Old+Uncle+Bill · · Score: 1

      How's this for a -1 mod point. Go to www.ip3networks.com and do it yourself.

      --
      Yes, I am an agent of Satan, but my duties are largely ceremonial.
    55. Re:Why DSL? by markxz · · Score: 1

      In my uni halls there you could see all the computers in the same house, and acsess all the other computers on the network [through the IP address] As for the registration, this was done by submitting the MAC address of the computer [along with matric and room number] and it was set up remotely. The computer got an IP address from the server instantly, although nothing else worked untill it was activated.

    56. Re:Why DSL? by j-pimp · · Score: 1

      With the whole Condo on the same WiFi network, you're likely to have bandwidth and security issues. Personally, I would recommend going with the ehternet approach all going into a shared T-1.

      Well not neccesserally. Sure wep is laughable, but theres always IPSEC. Should be releatively easy to setup some kind of turnkey VPN insert cdrom and double click. Just make sure you offer some level of mac support, depending on the number of mac users it might be best just to say ok I'll set it up for you or give the info to your tech guy.

      You also might want to contact various wifi vendors see if you can get reseller status and make a few bucks on the wireless cards. Most people will buy what you tell thm to because they dont know or care that any 802.11 car should work. I'd stay away from symbol personally but I just don't liek the company the cards are decent but expensive. If you go with nortel firewalls you can use there vpn client that provides a turnkey solution. A client of our company has nortel firewalls and nortel made them a modified vpn vlient with all the setings hardwired in and the install program was completly automated. Of course I'd like it if I could only have there subnet routed through the VPN cleients virtual networking device so I dont need to use a seperate computer just to telnet into one cleints as/400s while I babysit all my other machines from my linux laptop.

      You know perhaps Rob should charge for ask slashdot submissions and give free subscriptions for good advice. I'm not neccesserally implying that my advice is particularly good but put togwether all of slashdot is definatly worth at lweast one good consultant.

      --
      --- Justin Dearing http://www.justaprogrammer.net/ We're just programmers.
    57. Re:Why DSL? by jarrell · · Score: 1

      Actually, if you hear your own traffic coming back, something is very wrong.

      The limit comes from the Collision Detect portion of CSMA/CD. A cable run in a collision domain is controlled by the the amount of time it takes for the minimum size packet to make it to the most distant station, be detected, and a collision signal to make it back, before said minimum sized packet has finished transmitting.

      Collisions happen because station a started transmitting, not hearing anything on the cable. (i.e. the cable voltage showed no other signal.) Meanwhile station a's injection of voltage, hurtling along at the speed of light in copper hasn't reached station b, who also starts transmitting, thinking the cable is unused. When they detect that the cable voltage has jumped to roughtly twice normal strength or more, that means there's a collision going on, and we need to jam the cable momentarily to indicate that, and start the backoff and retransmit process. If the cables too long, and the stations are too far apart, it's possible for the packets to cause a collision, but the station not be aware of it, because it finished transmitting before the collision arrived; that's a late collision, and it means you're going to be mysteriously dropping data.

      It's better and worse in the xBaseT world, because you only have two stations to worry about, not a coax full of them, but the stations are going to be at the extreme ends of the cable, so you can go from "working fine" to "screwed" very quickly as you add length...

      Minimum packet sizes and cable lengths in ethernet were set by doing a sort of dance between the two, balancing "reasonable size" vs. "reasonable length". If you make the minimum packet be, say, 20K, you can make the cables much much longer and still have no problems. But now you have all that other overhead of sending 20bytes of data requires 19980 bytes of useless crap wrapped around it, waiting for a packet gap takes longer, etc, etc.

    58. Re:Why DSL? by paganizer · · Score: 1

      Naaaa.....
      Go 10base5. Vampire taps. 500 meter limit, and they WILL have to pay you to hook them up, thereby getting additional $$$.

      But seriously folks...
      just use normal 10baseT hubs, strung together by 10base2; no reason to shell out bunches of $$$ for bandwidth you won't need if you are only going to supply off a T1.
      It's not a professional way to do it, but it would certainly be a CHEAP way to do it.

      skip the DSL though. pointless. I'd probably do wireless.

      --
      Why, yes, I AM a Pagan Libertarian.
    59. Re:Why DSL? by Anonymous Coward · · Score: 0

      IP address space isn't free (for anyone!)

      My organization has a /20 and a /19 from 1995 and 1996, respectively - pre ARIN. I have yet to see anyone claiming that we would have to pay for these.

      So either we're extremely lucky, or you're not telling the whole story.

    60. Re:Why DSL? by bryanp · · Score: 1

      I don't have time to go look it up and point you to a link, but I can assure you that length of cable is part of the Category 5 specification. In the past year my company had over 300 facilities recabled to Cat5 (Cat5e, actually, but it makes no difference in this case). My boss insisted that we could not exceed the Cat5 spec for any reason, so I have sites with fiber runs where a straight Cat5 run would have exceeded the distance limit by only 30 or 40 feet.

      If you hook up a pair of testers that will certify a run as Cat5 you will see it test the length of the cable. If it's over a certain distance (approx. 100m) it will FAIL the test, even if every other test (crosstalk, etc...) passes perfectly.

      --
      "An unarmed man can only flee from evil, and evil is not overcome by fleeing from it." Col. Jeff Cooper
    61. Re:Why DSL? by b1t+r0t · · Score: 1
      (160 condos is far too small for a direct assignment from ARIN.)

      Really? Then why does the /29 for my SBC DSL have an ARIN record? As did the /29 I had with my previous DSL provider.

      FWIW, these aren't independent assignments, but sub-assignments off of the ISP's address assignment. So it really isn't a "direct assignment". But I wouldn't expect any different for a condo with a /24.

      --

      --
      "Open source is good." - Steve Jobs
      "Open source is evil." - Microsoft
    62. Re:Why DSL? by Anonymous Coward · · Score: 0

      Actually I'm a Senior Network Engineer at one of world wide automaker, so you can keep the kid comments to yourself. I didn't personally attack you in anyway, why the negativity? And to answer your questions yes, I've priced out and installed 100s of 4000s and they're a great product. I don't try to spec out the cheapest, I try to work with a solution that will give you at least a few years worth of compatability and density. By the way, I don't know what rock you crawled out from under but Cisco discontinued the 2900XL models so hit the books tool.

    63. Re:Why DSL? by Anonymous Coward · · Score: 0

      By the way, perhaps you didn't read my post. I clearly stated that securing their connection should be the responsability of each user, not the provider. Of course unicast packets will be seen, that's obvious. I can't believe you felt the need to blurt that nonsense out. We're having a network discussion here, I wouldn't pipe up if I didn't have 10 years experience. Based on the way you get worked up you sound like a young punk who's just starting out and you think you're the world's answer to tomorrow's problems.

    64. Re:Why DSL? by Anonymous Coward · · Score: 0

      By the way, I hope you don't expect these people to be able to surf the Internet with your Access-List, if you deny ip any 192.168.0.0 0.0.255.255 they NOTHING MAKES IT IN BONER!!

    65. Re:Why DSL? by Cramer · · Score: 1

      Technically, that's not "pre ARIN". ARIN was handing out address space as far back as 1993 -- 199/8 was deligated to ARIN May '93. And if you are not currently paying for your address space, then it isn't your space. The space can be revoked and assigned to someone else.

      A friend of mine had a /16 (maybe even /8?) from way back -- long before anyone worried about running out of addresses. It was reclaimed because (a) he could not provide justification for such an allocation, and (b) there's no way he'd ever be able to pay for it.

      FWIW, domain names were free for many years as well. Internic was allowed to (and actually was supposed to) charge for domains, but they didn't for many years. Then, almost over night, they starting billing for them.

      Would you care to disclose the address blocks and/or organization o' anonymous coward? I guess not because you know you'll start being billed for them.

    66. Re:Why DSL? by Cramer · · Score: 1

      It doesn't have an "ARIN record". It has a whois record within the Shared WhoIs Project ("SWIP"). ARIN uses SWIP to account for utilization of a deligation and for building inverse DNS pointers (for a /24 to be aimed at a customer, a SWIP record for the /24 must exist.) When an ISP requests more space, ARIN will look at the SWIP records for their last allocation to determine the validity of the request.

      RWhois is an alternative to SWIP. The ISP maintains their own "SWIP" records. It's debatable as to which is more complicated. Many prefer to use rwhois because they have direct control over it (vs. the crazy rules and emailed templates for SWIP.)

    67. Re:Why DSL? by Cramer · · Score: 2, Informative
      • I'll try to remember that as I wander up and down the butt-empty co-location facilities here in the Northern Virginia/Dulles Corridor area.
      And while you're wander around there, tell me why it's so freakin' empty if your method is the most economical solution? I'll save you the time: it isn't the most economical solution. I see you've studied at the feet of RIAA and MPAA ("Statistics: How to Lie With Truth")

      • So do some math...
      Maybe you should. (Or maybe your calculator needs new batteries?) If you're willing to spend money you don't have to, you're not going to be in the ISP business very long (if at all.) You've provided ZERO costs for co-lo, but gleefully throw around T1 prices which are guesses and not valid 30 day quotes. (Tier-1 providers don't have set prices. They negotiate the price. As such, the price of my UUNet T1 may be very different from the cost of your UUNet T1 despite both of them going to the same office.)

      In the case of these condos, if they are out of range for DSL and cable modem service, then they are very likely a long way from a colo facility or tier-1 ISP. T1 pricing is distance based (among other things.) That 300$ p-t-p T1 is (a) very short (a few dozen miles), and (b) completely contained within a CLEC's network. RBOC's will charge every penny they are allowed by law (and sometimes more.) CLEC's have a very good record of ignoring the tariffs where possible to offer "cheap" solutions because it really doesn't cost as much as the tariff was built to cover.

      Co-lo space isn't cheap. Especially for the type of crap you're suggesting. RackSpace.com isn't going to be thrilled to know you're using them as the upstream ISP for your condos. A colo facility with good connectivity is not cheap (and you are adding 2 hops to get to that tier-1.) Unthrottled and unmetered connectivity is very much not cheap (read: fucking expensive.)

      BritSys lists 1U for 125$/month metered to 1Mbit/s. Bandwidth is 100$ per additional Mbit. Address space adds to that, but I didn't look for any numbers. That'll run $225+/month for one T1 plus the cost of the p-t-p T1 which, crossing a lata and maybe state line(s), will be twice your $295 figure or more. So, for around $800-900/month, you have a tier-2 or tier-3 internet connection that costs twice as much to setup and maintain. It's cheaper and easier to get an "internet T1" straight to a tier-2/3 provider. (If you're buying p-t-p connections from the cheapest source, why not be frugal in purchasing internet connectivity? After all, if "making money is the point" then needlessly spending money is a no-no.)

      (And for the record, our own p-t-p T1s ("private line") are priced as "ICB" -- individual case basis -- which is sales-speak for "how much ya' got?" Greater than T1 and colo are also "ICB", however "colo" doesn't include an ethernet port. Internet T1 via frame ranges from $600-800 or $300-500+loop (colo loop = zero.) An additional /24 is $85 with acceptable justification. We are a "tier-2" provider.)
    68. Re:Why DSL? by Anonymous Coward · · Score: 0

      Maybe if you'd learn to compose a sentence with proper spelling and so on, you might actualy have some credence.

      However-- your ideas are laughable. They're trying to set up a hands-off shared line, not start a new branch of the company as a systems integrator.

      'Tard.

    69. Re:Why DSL? by Pii · · Score: 1
      Look, if you'd like to just whip out our dicks, and measure, great...

      Yes, I'm providing ballpark pricing. I'm not going to get a valid price quote for a discussion on Slashdot.

      I'm no stranger to Telco. I currently work for one of the largest Verizon authorized agents in the Mid-Atlantic. We are also authorized agents for Qwest, and AT&T. Prior to working here, I worked for Sprint, and before that, AT&T.

      Just last Summer, I put in a WAN for a 30 campus University, with the head-end at an AT&T co-lo in Northern Virginia, and Internet access for the whole network is provided via the co-lo. My point is this: I know of which I speak. Just because you haven't done something, don't assume that it can't be done.

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    70. Re:Why DSL? by Pii · · Score: 1
      Hey BONER, that's an inbound access-list placed on the individual condo vlan interface, and has no affect on return traffic...

      Why is it that every Anonymous Coward thinks they know some shit? If you're gonna call people names, why don't you stand up while doing it? SlashdotIDs are free.

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    71. Re:Why DSL? by Pii · · Score: 1
      "Kid" was probably unnecessary... My apologies. I've stirred up a flamewar of USENET proportions, which is fun, but there are so many "Anonymous Cowards" involved (At least, I think there's more than one), it's hard to keep them straight. I was exceedingly harsh, but let's be honest... All you anonymous cowards look alike.

      I too like the 4000 chassis, and I don't mean to diminish it's capablilities. It's kick-ass, but expensive, and for this scenario, I think it ill suited because:

      • The solution doesn't require significant port density in any single location (In a multistory facility, best practice means connecting access-layer devices in the horizontal plane, not the vertical).
      • If port density were an issue at the core, a 48 port Cat 3550 would fit the bill pretty well, still be far less expensive than a Cat 4000.
      • The Cat 3550 provides all of the Layer-3 functionality necessary to act as the core layer device.
      • The Cat 3550 is vastly less expensive than even a minimally configured Cat 4000 providing the same features (The key feature being the Layer-3 capability as the Layer-3 enabled Supervisor will run in excess of $15,000, and that doesn't include the chassis, or the 48 port module).

      This application, as described, is not about providing a network drop for hundreds of users in an office cube farm. It's about providing one (or maybe two) drops per user dwelling, in a multistory apartment/condo building.

      As for the Cat 2900 series being discontinued, you're right... I don't sell them, I just integrate them, and I'm still deploying them while supplies last. I suppose they're pushing Cat 3500s at the access-layer platforms now, right?

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    72. Re:Why DSL? by chief-dot · · Score: 1

      A couple of things:

      1. 2900's are not available...2950's are available so the 3500 is not the logical replacement of the 2900. Regardless of this, the 3500 is also discontinued (see 3550). Then there is the 3750. Simple :)

      2. Putting a whole bunch of untrusted groups on the same VLAN thinking that it's safe because it's a switched network is a typical amateur mistake to make. I'd have expected that a senior network person for a large auto group would be on top of these problems but hey, you're probably just a little kid saying you're a big-shot to add emphasis to his/her argument. Why is it a big mistake? well...it's all about ARP cache poisoning and the ability for any machine on the vlan to mascarade as another person's gateway.

    73. Re:Why DSL? by Cramer · · Score: 1

      F'ing system integrators. Always dreaming up overly complex, expensive, big solutions to some of the simplest problems.

      The poster isn't building a "WAN for a 30 campus University". That is completely different from getting internet connectivity to an apartment community. The mere fact of asking slashdot how to best go about it is a clue to their lack of networking knowledge. They aren't aiming to be Earthlink. If people can plug their computer into the provided hole in the wall, fire up IE, and get to Yahoo!, then the job's done.

      People who have money to throw away generally find ways to throw it away by allowing others to over design solutions (and over charge for them.) In the real world, money is a precious commodity; spending where it's not necessary is wasteful and damaging to the bottom line.

      So, I'll ask again, why are the colo facilities empty?

    74. Re:Why DSL? by Pii · · Score: 1
      Wow, it's the thread that would not die...

      The point was not that a solution for a 30 Campus WAN would directly translate to a solution for a multi-story, multi-family dwelling.

      The point was that once you obtain the space in the co-lo, and the bandwidth, you can hang a lot of network behind it pretty inexpensively.

      The reason all of the co-los sit empty is two-fold:

      • There are a billion co-lo facilities that have been built, many of which had broken ground prior to the bursting of the bubble, and there's no longer the kind of demand that was anticipated 4 years ago, and
      • You idiot ISPs have done a piss poor job at articulating the advantages of co-location, and have failed to instill enough fear in your potential customers that they're ill-prepared to handle power, or circuit disruptions, and that every time they can't receive email, it's costing them money.

      While you continue to try to keep up, you've completely missed what I've outlined above, so let me break it down for you:

      In addition to presenting a pretty good solution for the "Ask Slashdot" topic at hand, I've shown how that same solution can be applied to multiple additional locations, and scaled it up to a working business model.

      Keep arguing with me about T-1 tarrifs.

      And for my final throw away smart-assed remark, you claim to work for a Tier-2 ISP.

      If everyone at your company has the same winning personality, and tunnel-vision, I have to conclude that "Tier-2", and "2nd Rate" are interchangable terms.

      Thank you, and Goodnight. Remember to tip your waitresses...

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    75. Re:Why DSL? by Cramer · · Score: 1
      (eh, I'm bored)

      • ...
      • you can hang a lot of network behind ...
      As long as what you're hanging behind it is reasonably local. There's an ecomony of scale here. Connecting one complex via a co-lo is arguablly more expensive, and much more to manage. The post isn't asking to network all the apartments in Dayton, OH. There's one, maybe two, to be networked with a managing staff of nearly zero. Your solution is over designed for the stated problem.

      There are not a billion co-lo facilities around. (yet an other number pulled out of the air.) I would submit there never was as much demand as business planners figured. As for power and stability, that one bites everyone (including you.) Any company so reliant on internet connectivity for their livelihood should have backup(s) and redundancy. The colo doesn't help much... when the T1 to the office fails, they cannot get anywhere. Depending on where they've placed the mail server, they either cannot get to their email or aren't receiving anything. If your business depends on something, you should plan accordingly. In this case, we're talking about an apartment complex; so the residents can't get to their pr0n right now, too bad. There's about a 100% chance the place is not zoned commercial or has some clause in the lease prohibiting running a business from the apartment.

      As for your last comment... I won't disagree with that. However, "2nd rate" isn't that far away from "1st rate" these days. As I say almost daily, "cheap is a very powerful motivator." Most people would run screaming from the room if they really knew what all goes on at their ISP.
  2. My advice by wowbagger · · Score: 5, Informative

    Here's my advice, for what it is worth:

    1) Don't put DSL to each unit - pull CAT-5 and run Ethernet. Your residents will have a much easier time getting hardware than with DSL, and your costs will be less.
    2) Pull the wire to a common router closet.
    3) One port per unit
    4) Lock down the ports that aren't being used.
    5) Use DHCP to assign addresses.
    6) Set up your own caching server. I would recommend using Squid.
    7) Force all outbound port 25 (SMTP) through your mail server.
    8) Run a virus scanner on your mail server. Scan all incoming AND outgoing mail.
    9) Don't route the Microsoft file sharing ports or Apple Rendezvous ports between units.
    10) Insist customers keep their machines virus free. Disconnect any who don't IMMEDIATELY.
    11) Write into your rental contracts that you ARE NOT RESPONSIBLE for maintaining your customer's machines or security - if they are scared let them run their own firewall.
    12) Offer your own space, accessible to your users, with virus scanner updates, MS patches, and so on. Encourage them to use that to save bandwidth.
    13) Routinely sniff around for WAPs. Handle them as you see fit - disconnect, or verify they are set up sanely. Don't ignore them.

    Many will disagree with some of my points (esp. 7 and 9). Ask yourself this: do I enjoy being blacklisted for spamming?

    1. Re:My advice by jandrese · · Score: 2, Insightful

      For the life of me I can't figure out how 9 prevents spamming.

      I'm a little confused by 10 too. Are you suggesting that he should disconnect anybody not running a virus scanner? Isn't this a little harsh for people running Linux/BSD/Amiga/etc...? IMHO, virus scanners are less important than Firewalls these days. You can avoid viruses with a little common sense, but you cannot avoid unknown remote exploits in your OS.

      Also, with 4 are you talking about the physical ports, or TCP/UDP ports?

      One final note. When you write up the rules for your tenants, I'd try to avoid the tone this guy has. While most of his suggestions are quite sane, the tone is very authoritarian, which will turn off some people. People will think you're some BOFH type and might start looking elsewhere for someplace with friendlier service. But I'm sure you know all of this already.

      --

      I read the internet for the articles.
    2. Re:My advice by Neophytus · · Score: 1

      If going with option #7 to prevent being blacklisted, then you should also protect your customers by using an aggressive DNSBL to block spam for them. I suggest spamcop as it's logic is designed so that there should be barly any false positives, except where users report mailing lists.

    3. Re:My advice by wowbagger · · Score: 2, Interesting

      Point #9 - prevention of viruses and prevention of Microsoft Messanger pop-up spam.

      Point #10: No, I'm not saying they have to run a virus scanner. I am saying that if they are infected, and if they refuse to correct the problem, you pull their connection.

      Point #4: Physical ports - in other words, if a unit isn't signed up for access the port is dead.

      Final point: I was making my points in a brief, straightforward fashion, so as to keep my message short and easily understood. OF COURSE when you present these points to the users, you tell them what's what and why it is in their own best interests to go along.

    4. Re:My advice by gleffler · · Score: 1

      Re: number 9, go ahead and route these ports between units. In fact, it would probably save you money. JUST DO NOT LET THEM GET OUTSIDE! Filter all incoming and outgoing traffic for Rendezvous and MS File Sharing at your border router. That way, people can use MS File Sharing/Rendezvous within the units and not go out onto your expensive metered pipe unless they have to.

    5. Re:My advice by Tyrdium · · Score: 1

      What about a firewall? If you charged them a buck extra a month, that'd be 160 bucks a month to keep them hack free. It may be cheaper than having one of them get hacked and have g*d knows what happen with their computer. I'm not sure, but you may end up taking some of the blame for what happens (e.g. they get a virus or something that downloads illegal stuff onto their comp, which would also use up a lot of bandwidth).

    6. Re:My advice by Meniconi,Nando · · Score: 5, Funny

      Additionally, be prepared to deal with "concerned parents" asking you to police their children activity over the net.

    7. Re:My advice by mahler3 · · Score: 1
      2) Pull the wire to a common router closet.

      I would add:

      2a) Make sure that the router closet is climate-controlled, unless you intend to test the environmental specs of your network equipment.

    8. Re:My advice by anonymous+loser · · Score: 1
      1) Don't put DSL to each unit - pull CAT-5 and run Ethernet. Your residents will have a much easier time getting hardware than with DSL, and your costs will be less.

      It's pretty hard to qualify yourself as a DSL provider if you don't actually provide DSL connections. I imagine that's why the original poster planned to run DSL lines in the first place.

    9. Re:My advice by wowbagger · · Score: 1

      It's a problem of legal liability - if you provide them a firewall, and something bad happens, then they can come back and sue you for not doing your job.

      If you put the onus on them, then you are safe.

      Much the same reason that it is very good to be certified by the Red Cross if you have to do CPR - it can protect you from being sued by the guy who's life you saved just because you broke his ribs doing CPR.

    10. Re:My advice by OmegaGeek · · Score: 1

      I think your suggestions are quite reasonable. I don't know why anyone would use a WAN technology (DSL) within a single building. I especially encourage #6 (use squid) to guard your pipe. Some additional suggestions: * use managed switches so that the tenants cannot access each other's computers except by going through your gateway router. * force everyone to use the cache by blocking TCP port 80 traffic except for traffic between the cache and your T1. * considering how rabid the RIAA seems to be getting, you may need to consider blocking ports used by p2p file-sharing programs. If you are providing the internet service, they may see you as a target. Sounds like a great project - good luck!

      --
      Even heroes have the right to dream
    11. Re:My advice by jemenake · · Score: 1
      1) Don't put DSL to each unit - pull CAT-5 and run Ethernet. Your residents will have a much easier time getting hardware than with DSL, and your costs will be less.
      2) Pull the wire to a common router closet.
      3) One port per unit
      4) Lock down the ports that aren't being used.
      5) Use DHCP to assign addresses.
      6) Set up your own caching server. I would recommend using Squid.
      7) Force all outbound port 25 (SMTP) through your mail server.
      8) Run a virus scanner on your mail server. Scan all incoming AND outgoing mail.
      9) Don't route the Microsoft file sharing ports or Apple Rendezvous ports between units.
      10) Insist customers keep their machines virus free. Disconnect any who don't IMMEDIATELY.
      11) Write into your rental contracts that you ARE NOT RESPONSIBLE for maintaining your customer's machines or security - if they are scared let them run their own firewall.
      12) Offer your own space, accessible to your users, with virus scanner updates, MS patches, and so on. Encourage them to use that to save bandwidth.
      13) Routinely sniff around for WAPs. Handle them as you see fit - disconnect, or verify they are set up sanely. Don't ignore them.
      I agree with juat about all of this. Ethernet hardware is going to be much cheaper (for the end-users and probably for you, too). Compare the price of an ethernet card with a DSL modem. Now, multiply that by 160....

      I'm not sure I'd use Squid for caching. Although it's a great cache, it requires that users take action on their end in order to use it... which means that it won't get used all that much and you're likely to get support calls from those people who *do* try to use it. Instead, if it's worth it to you, you might want to look at some of the routers that have transparent caching. Although I've never used one, I'm told that Cisco (and, if so, then the others like Ascend, etc. have them) has routers that magically detect port-80 traffic and do caching.... in a way that is: A) transparent and, B) non-optional.

      I'm not sure I'd block outbound SMTP... but it depends upon which set of hassles you like the most. There seems to be a slow (or, rather, glacial...) drift on the net toward authenticated SMTP for laptop users who move around a lot and who don't want to have to keep changing their outbound SMTP settings. If you block outbound SMTP, then those mobile users who *are* lucky enough to deal with a single, authenticated SMTP server out there... they'll be out of luck. With only 160 stations... and with them being stations with relatively low turnover (and high degree of being able to track down the "owner" of each station), you might get a lot of mileage out of a strict spam policy.

      Of course, the other alternative (to authenticated SMTP) that I've seen for laptop users is to support assignment of the SMTP server through DHCP. I'm not sure how many DHCP servers (or client OS's, DHCP clients, and mail clients) support this... but you may want to add something like this to your wishlist if you do decide to block outbound SMTP.

      Also, more than considering blocking outbound SMTP, consider blocking *inbound* port-80 web traffic.... and write a prohibition against web hosting into the agreement.
    12. Re:My advice by trazom28 · · Score: 1

      You assume too much.. that end users a> have common sense when it comes to PC use and b> that people have a clue how to maintain that beige box before them. I'd mandate a required firewall AND virus protection AND mandate that it be kept up, period. Anyone who doesn't get's yanked until they do. It's harsh.. but tough beans.. people gotta be shown how to protect themselves from the crap out there. They don't *know* it on their own.

      --
      {} ------ When I think of a good sig, I'll put it here
    13. Re:My advice by banzai51 · · Score: 1

      But does the condo owner really want to get into the IT business? That is another important question to ask. If you run ethernet, you will have to support your local LAN.

    14. Re:My advice by Angry+White+Guy · · Score: 1

      I'm not sure I'd use Squid for caching. Although it's a great cache, it requires that users take action on their end in order to use it.

      Squid can be set up to a transparent proxy.

      --
      You think that I'm crazy, you should see this guy!
    15. Re:My advice by etrnl · · Score: 1

      WCCP... I'm pretty sure Squid can handle it. If not, it's still viable to redirect without having the clients change their config.

      I don't see why they can't run webservers if they want to... if the person is using a T1 (which is better for the number of users than DSL), their aren't ISP TOS considerations like with a residential service.

      After all, if the onus is on them to protect their machines, they should be able to run whatever services they want. Just protect the interunit traffic and rate limit them. Let them use their bandwidth how they want.

      And ratelimiting is a good idea, because if they DO get trojan'd/infected, they can't pull the bandwidth of the other units into the toilet. Which leaves you with less hassle on your end of actually running the place.

      --etrnl--

    16. Re:My advice by gregmac · · Score: 1
      I'm not sure I'd block outbound SMTP... but it depends upon which set of hassles you like the most. There seems to be a slow (or, rather, glacial...) drift on the net toward authenticated SMTP for laptop users who move around a lot and who don't want to have to keep changing their outbound SMTP settings.

      This is a hard problem to get around. Traffic shaping on port 25 (with it open) might be the best option - if someone starts spamming, then you can find out, and take steps to block them, while at the same time knowing to specifically watch other actions of that tenant.

      But a nice option for laptop users, and even for [lazy] desktop users that don't like changing settings whenever they move, is to create a top-level DNS entry (or one in your domain suffix, if you provide one) called "mail" and/or "smtp", so that users can enter just "mail" as their outgoing smtp server name, and it will automagically resolve to your (the ISP's) mail server.

      I've had a couple ISPs that do this, and it's great. But then you switch to one that doesn't, and have to go fiddle with account settings. It would be nice if it was a more broadly-implemented setting.

      --
      Speak before you think
    17. Re:My advice by sweetooth · · Score: 1

      It's quite simple to setup squid to transparently cache the connections without user intervention. The same way that the cisco products work. I don't know if Ascend has a caching server at all, but even if they do you would want to look for it under the Lucent name as the last time I checked Lucent had not sold that particular property back off as part of thier current death spiral.

    18. Re:My advice by Anonymous Coward · · Score: 0

      I disagree with 6...I freaking hate proxies. In general they are of negligible benefit with the exception of huge user bases and they add a level of complexity therefore removing some basic support issue from teh level of the users and requiring more overhead in your support staff.

    19. Re:My advice by theedge318 · · Score: 1

      IANAL

      Actually being certified in Red Cross actually increases your liability. Most states have a "Good Samaritan" Law that protects you from law suits if you are acting to save someone's life (I know NJ). However if you have a Red Cross certification in CPR, and you DON'T administer CPR to a person in aid, not only are you a scumball, but you are liable.

      So if someone needs CPR ... give it to them ... if you break a rib (it just happens sometime) keep on going ... as long as you are trying to save their life, you are clear of any legal repercussions. (Unless you are a professional rescuer)

      --
      Sig Nazi- "No Sig for you, come back 1 year."
    20. Re:My advice by crgrace · · Score: 0, Offtopic

      You know what they say about absolute power... It results in a strictly positive number multiplied by itself

      About your sig... you should specify that the "strictly positive number" must be greater than one, otherwise it converges to 0 in the limit!

    21. Re:My advice by sweetooth · · Score: 1

      That's a really horrible idea. The reason you block those ports even internally is to stop the wasted traffic from browse requests and Joe Sixpack opening up his entire computer to his neighbors becuase he doesn't have a clue how MS File sharing works. I can't tell you the number of times I've gone to do support on a friends computer, or the family member of a friend and found they had the entire drive shared and connected to their ISP 24/7. If users were more cluefull or if this person wanted to do support for all 160 units then that would make sense. Otherwise the least amount of liability and hassle come from blocking those ports.

    22. Re:My advice by M-G · · Score: 1

      I'm not sure I'd block outbound SMTP... but it depends upon which set of hassles you like the most. There seems to be a slow (or, rather, glacial...) drift on the net toward authenticated SMTP for laptop users who move around a lot and who don't want to have to keep changing their outbound SMTP settings.

      Exactly. While blocking outgoing 25 has benefits, the person who carries around a work laptop that relies on authenticated SMTP will be calling you when it won't work.

    23. Re:My advice by Anonymous Coward · · Score: 2, Informative

      1. Do you have air conditioned closets in each building? (if there are multiple buildings, switched don't like the sweltering heat or biting cold, and they have a fairly low humidity tolerance.
      2. Do you (your apartment complex own the cabeling plant already within apartment? Lots of times the ILEC shows up at the building site and cables the whole complex at no cost to the apartment owners/builders. The drawback is that the ILEC then owns the cabling plant.
      3. How far are the runs between each building? Will you have to run fiber? If so, will you need to trench between buildings? Trenching is expensive.
      4. Will you be running cable into each apartment? Will you really? Think about this, are you bonded to handle the loss of property claims when someone complains that their property is damaged or stolen? What do yo think about wiring companies now? Ours took over a year to complete a three month job.
      5. Want to go wireless? Really? Plan to use that public 2.4 Ghz range? The 5.125 one? really? What Does a wireless access point for your type of application cost? (Hint: not the same as one from BestBuy!) Do you want to use licensed spectrum? Really? How much will that cost?
      6. Who will do the day-to-day administration? Really? Who is on-call at 3am when the T-1 goes down and bubba can't get to his p0rn, I mean, cnn.com? What other services will you need to provide? DNS, DHCP, Email? Outsourcing DNS? Really?
      7. What will you use as a Network operations center? that storage room in the main office? Is it cooled properly? DSL equipment generates a lot of heat, so do servers and switches. Is the room cooled? Will the room meet spec for firecode? Is there enough fire supression in the room?
      8. Who is going to buy this equipment? Is it a business partnership, or will you start an incorporated company? Who will reimburse you for your time?
      9. How much are your subscribers willing to pay? Will it be enough to cover the cost of the initial build out?
      10. How many of your neighbors own computers? How many of them subscribe to AOL and don't want to change? of the ones that are left, how many already have broadband connections? Of the ones that are left, who is sticking with dialup because it's cheaper? Can you continue to operate with the (really, 10-15%) who will be your subscriber base?

      Please don't do this. Don't think about doing it yourself. Get together with your neighbors and negotiate with your local cable provider to get better rates on cable access. Let them have the headaches and the late nights. It sounds like fun, it probably would be, but it will destroy you.

    24. Re:My advice by wowbagger · · Score: 0, Offtopic

      But if you DO perform CPR, and you DON'T have a certification, then you AREN'T protected under the Good Sam law.

      That point was drilled into me during my multiple certification sessions.

      So if you aren't certified and you break their ribs (and you will break their ribs if you are doing CPR right), you will not be protected.

    25. Re:My advice by dfn_deux · · Score: 1

      7) Force all outbound port 25 (SMTP) through your mail server. 8) Run a virus scanner on your mail server. Scan all incoming AND outgoing mail. This totally ridiculous. If you are going to provide internet and charge users for it and then you restrict their ability to use by not allowing them to use whatever mailserver they wish and to also filter their mail content based on what YOU think qualifies as a virus is totally and absolutely ridiculous. If you were giving away free internet access then these people should expect nothing more than what you want to give, but if they are paying you then you should just give them the pipe and leave their data alone. Big brother tactics are not the right way to run things. You can't police the stream. Some of the things which you suggest are the same restrictions on peoples freedoms that we routinely see posts on slashdot about when ISPs commit them. When you buy the pipe and resell the bandwidth you are becoming an ISP, you should run it with sane policies that allow users the latitude to use their service as they see fit.

      --
      -*The above statement is printed entirely on recycled electrons*-
    26. Re:My advice by Cramer · · Score: 1

      Ever heard of a WINS server? (one is included with samba) Using DHCP, it is very easy to maintain a windows client network.

      Next I suppose you'll suggest using layer 3 aware switches and block anything that isn't IP traffic? (protocol filtering in Cisco speak.)

    27. Re:My advice by Cramer · · Score: 1

      DSL uses a single pair, is far less distance limited (3352m (1.5M SDSL/CopperMountain) vs. 100m (ethernet)), and is much more forgiving of line conditions (RF, crosstalk, etc.) DSL hardware, by the fact that it's designed for connecting to the PSTN web of wires, has line isolation hardware -- a voltage spike on a single ethernet port can fry an entire switch vs. killing a single DSL port that's easily fixed by an experienced hobbiest.

      I'd recommend ethernet for the shear simplicity and speed. Hardware for either solution is cheap if purchased used/previously owned.

    28. Re:My advice by PetWolverine · · Score: 1

      Probably not. Well, maybe the moms would want him sniffing packets looking for porn...but the dads would be concerned about blowing their own cover.

      --
      I found the meaning of life the other day, but I had write-only access.
    29. Re:My advice by walt-sjc · · Score: 1

      So if you aren't certified and you break their ribs (and you will break their ribs if you are doing CPR right), you will not be protected.

      Getting a bit off topic arn't we?

      Anyway, my Scuba dive instructor put it this way. If someone needs CPR, they are dead. If you screw up, they are still dead, you didn't make them "deader". If you don't screw up, they may live. Which is better? I would suspect that the info you received during certification was specific to your state (which must be really fucked up considering...) or just plain wrong. It's not uncommon for instrutors to give out bogus legal info - they are not laywers or judges generally.

    30. Re:My advice by sweetooth · · Score: 1

      This still doesn't do anything to stop morons from sharing thier entire disk. That is the real problem. WINS gets rid of browse traffic assuming properly configured clients (easy with DHCP unlikely with staticly configured boxes).

    31. Re:My advice by Anonymous Coward · · Score: 0

      I'd consider getting either a site license for an AV package that covers the main platforms or striking a deal with the local computer shop to offer a discount on an AV solution to your tenants. Oh, and don't put one port per unit. Put one in each bedroom and one in the living area. Try to live up to at least some reflection of an existing wiring standard. At a minimum put one data jack along side every voice jack. I certainly don't mind 7 as long as you don't mandate the from domain like some unnamed ISPs do. As far as 9 goes I certainly understand shutting them down. Then again some of these tenants might be geeks and might actually what to utilize LAN traffic for whatever means. At the least put a process in place to lift the ACL on each unit's VLAN that restricts their access to a central WINS server (you are running a WINS server, aren't you?) if and only when the customer asks for it. That way these people that ask for it will be forced to understand the consequences of their choice.

    32. Re:My advice by Anonymous Coward · · Score: 0

      Except if you aren't certified, do CPR, and they live they can still sue you for breaking their ribs. Good samaritan laws only require you to do things for which you are trained for. Usually only if you identify yourself or are known to be certified (ie: you're chilling with your friends who know you are certified). If you are not trained in anything, you are required to get help (call 911, etc).

      For the record, I am speaking about the stae of Pennsylvania (YMMV), where I am almost an EMT (gotta take the written exam).

    33. Re:My advice by mpe · · Score: 1

      While blocking outgoing 25 has benefits, the person who carries around a work laptop that relies on authenticated SMTP will be calling you when it won't work.

      As well as anything which actually follows the RFCs and uses MX records to decide where to try and send mail. Transparent proxying won't break this, however it will break anything which expects to be able to talk to a specific third party relay. Which includes an authenticated relay.

  3. Why go DSL? by FortKnox · · Score: 1, Insightful

    If you can wire a T1 to you, why not just share that out?

    BTW - What's up with the lack of the ability for logged in people to post AC??

    --
    Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
    1. Re:Why go DSL? by buswolley · · Score: 1

      i was wondering about that myself.. i got a -2 mod too because of it.. stupid moderators

      --

      A Good Troll is better than a Bad Human.

    2. Re:Why go DSL? by Angry+White+Guy · · Score: 1

      One reason: No markup on equipment. You pick the Dslam, you sell the equipment. Aside from that, nothing much, really.

      --
      You think that I'm crazy, you should see this guy!
  4. Caches. by grub · · Score: 4, Funny


    Make sure you add a squid cache at the head end, you wouldn't want all your bandwidth being used up by constant goatse.cx reloads.

    --
    Trolling is a art,
    1. Re:Caches. by blincoln · · Score: 1

      If I were one of the residents, I'd probably turn down this access if they were using cached data, unless there's some way to override it that I'm not aware of.

      --
      "...always new atoms but always doing the same dance, remembering what the dance was yesterday." -Richard Feynman
    2. Re:Caches. by The_Sock · · Score: 1

      HTTP headers can tell a caching server not to cache the page. What's wrong with a cache? For data that doesn't change, it provides you with a better feed to it, and any pages that change often (cnn, msnbc, slashdot, etc) have put in the appropriate http headers to tell caching servers like squid to not cache the data.

      Using multiple hostnames to serve images and the like (which don't change, don't need the no cache header) and data (with the http headers in there) make it even better, you download the changing data only from the live site, and grab the images off of the squid server (though most big caching servers are actually by inktomi, not squid)

      Good caching makes sense.

      --
      For a good time call www.sawkie.com
    3. Re:Caches. by Hobophile · · Score: 1
      I run a Squid proxy for my personal use. Although it will (very rarely) serve me stale data, in Internet Explorer I have always been able to force a genuine refresh by pressing ctrl-F5. I think this works in Mozilla as well.

      Squid pays attention to this directive; other proxy software sometimes ignores it. YMMV.

    4. Re:Caches. by Anonymous Coward · · Score: 0

      Bullshit. You can always tell because they always cause non refresh problems at some point.

    5. Re:Caches. by GigsVT · · Score: 1

      When large files get into the cache in a corrupt form, it's very frustrating for the end user.

      As a Starband user, I frequently get corrupted downloads, that are always corrupted in the exact same way, which makes me think it's in an ISP side cache corrupted.

      I usually have to get someone else to download the same file from the same site, and put it on their server for me.

      "Transparent" caching is just another way to subtly fuck your users to save a little money.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
    6. Re:Caches. by GigsVT · · Score: 1

      Well, I guess if it actually worked 100% of the time I wouldn't complain, but of the two ISPs I have been on that have had it, I've had problems with both.

      One time one dial-in ISP I was on turned on content filtering somehow on the transparent proxy, and accidentally blocked every web site. It stayed that way for at least 6 hours. This ISP also had trouble with caching old content, doing web development on a remote host was a nightmare, because their proxy would not refresh changes until a few minutes later.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
  5. Think Future by Jimhotep · · Score: 2, Funny

    Fiber everywhere. Or do it later.

    1. Re:Think Future by BreadMan · · Score: 1

      Fiber is a pain in the butt to pull if the walls are already closed and termination can be expensive. You just can't crimp an end on a fiber cable like copper, you need a special sanding machine.

      Even after terminating the cables, you'd need to have each unit purchase equipment that could handle a fiber connection and these generally cost a lot more than a regular switch or NIC.

      Since it sounds like you want to use DSL to avoid the costs of rewiring the building, how about wireless? Still more expensive on the tenant, but I think that a bunch of 802.x access points would be less than the DSL equippment you'd have to put in the wiring closet for the building. Those DSLAMS soak up a lot of power and create a proportional amount of heat, so you just can't shove one in a closet that does not have enough ventilation and have it work for long. You'd need to factor in the cost of electricity and, depending on where you live, cooling as well.

    2. Re:Think Future by walt-sjc · · Score: 1

      Sanding machine? Oh you mean the puck that I put the cable in that I move in a figure 8 pattern on the sanding pads? It actually goes quite fast once you get used to it.

      Other than that though, you are right. Fiber is MUCH more expensive to work with on all angles. Cable installation into an existing building that isn't designed to allow for it (dropped ceilings) is a PITA. Wireless just sucks though. Even in a normal house I have dead areas or low-bit rate areas. Depending on the layout of the complex you would need a shitload of AP's. You are also sharing the 2.4G band with tons of other crap that in a high-density environment would make 802.x unworkable (and the newer faster stuff has even WORSE range.)

  6. DSL by s0l0m0n · · Score: 2, Insightful

    I'm not sure why you would want to use DSL specifically?

    If you are already going to be running cable through the complex, why not just build a 100bT network?

    1. Re:DSL by saintjab · · Score: 1

      Agreed.. There is no need for all the extra equipment and overhead. Plus, DSL can be a pain, and setting up the seperate routers at each resedence is going to require time and effort; not to mention becoming the defacto tech support person for the complex.

      Keep it simple.

      --
      "Reality is a crutch for people who can't handle drugs" - George Bernard Shaw (1856 - 1950)
  7. Why DSL? by Anonymous Coward · · Score: 0

    Why not just setup a bunch of wireless nodes?

  8. hmmm by fjordboy · · Score: 4, Insightful

    Actually, at the camp I work at, they're building a big new building and wiring it all for internet access. My first response would be go wireless, but since that isn 't always feasible, I'd just say go the simple and tried and true route w/ cat 5. I mean...come on, can you go wrong with cat5?

    1. Re:hmmm by kochsr · · Score: 1

      we use wireless in my house instead of cat5. while it is good for the laptop, i would much rather be tied in for my desktop. intermittent service drops and just overall flakiness drives me crazy.

  9. why DSL? by Anonymous Coward · · Score: 1, Redundant

    Why not just regular old 10/100 networking? Why would you force everyone to get at DSL modem? It just doesn't seem to make sense to me. I guess I could understand the desire to keep everyone separate, but is it worth the extra cost? I wouldn't think so.
    Oh, maybe first post?!?

  10. diesel by goats_in_boats · · Score: 1

    copper mountain dslams are nice and cheap on sleazebay, and the modems are straight out of 3compton...
    fo' scheezy...

    1. Re:diesel by irving47 · · Score: 1

      copper mountain dslams are nice and cheap on sleazebay
      True enough, but a LOT of people in the DSL/CLEC industry constantly joke about CuMTN going out of business "real soon now."
      So ask yourself if you enjoy using hardware you'll have difficulty getting support for.

      I hope we see updates on this. I was thinking about doing it for my Condo complex as well, but there is no central phone closet, so I'd be stuck burying Ethernet everywhere or setting up WAP's.

      --
      I had a sucky sig.
  11. Wireless? by duffbeer703 · · Score: 1, Redundant

    Why not implement a wireless network?

    Use IPsec or something similar to provide security and run a few drops to link the access points to wherever the telecom comes in the building.

    Wireless seems to be the next big thing, and as standards change, it's far cheaper to replace a few transmitters can run new cable through a building.

    --
    Conformity is the jailer of freedom and enemy of growth. -JFK
    1. Re:Wireless? by caudley · · Score: 1

      There's a building down the block from me that has wireless set up in the building for about 160 units. They have an outside company set it up and operate it and they get a cut of the revenue. You don't have to do any of the heavy lifting. I don't know the name of the company they are using, but a little googling should turn one up.

    2. Re:Wireless? by Jack+Greenbaum · · Score: 1
      Wireless doesn't scale well, that's why not. Furthermore it is subject to interference. For example my living room MP3 player dies while I'm popping popcorn.

      I wouldn't want wireless, at least not 802.11b, as my main access.

    3. Re:Wireless? by duffbeer703 · · Score: 1

      I'm not suggesting splitting one access point amoungst hundreds of people here.

      Get some high quality multimode 802.11a/b/g gear and put a bunch of access points (depending on the density of the users) connected with a wired backbone.

      We just rolled out the new 54mbps wireless network in a 16 story building and everything is extremely smooth. The money we are saving just in paying electricians to run cable paid for the infrastructure.

      --
      Conformity is the jailer of freedom and enemy of growth. -JFK
    4. Re:Wireless? by jdreed1024 · · Score: 1
      Use IPsec or something similar to provide security and run a few drops to link the access points to wherever the telecom comes in the building.

      That's fine for clueful types, but setting up IPsec is non-trivial for the most part. Unless you want to get into the user support business, this sounds like the wrong way.

      That and doing a good wireless network from scratch is hard. It's not a matter of throwing a couple of APs out there. You have to get a bunch of APs, figure out where dead spots are, fix those, but still design it so that the access points don't fight with each other, and so the user isn't in a location where the card is constantly swapping access points. Then you have people with poor cards that can't get good access (read: G4 powerbooks), but they're paying money for it. It's a big honking mess.

      --
      There is no sig, there is only Zuul.
    5. Re:Wireless? by Malc · · Score: 1

      If you go wireless, you're going to have to start banning people from using their crappy Panasonic phones due to interference... even if they don't use the internet connection.

  12. Cat 5 by Guspaz · · Score: 2, Interesting

    If you're going to be running Cat 5, why not use IT for the internet connection? It's much faster.

    I also seriously doubt that one 1.5mbit T1 will be enough for 160 DSL connections. It's not even fast enough to support one DSL connection where I live; my 3.5mbit DSL connection, which sets me back about 35$ US per month, would be horribly slow if piped through a T1.

    Now, I realize that most people don't have 3.5mbit. Everybody in eastern Canada (At least Quebec and Ontario) have access to 1mbit DSL (1.2mbit minus overhead). It'd only take two people to try to download at the same time to saturate your T1. What if 10 people tried to download? How much would YOU pay for a 150kbit internet connection?

    1. Re:Cat 5 by Demanche · · Score: 0

      Actually most of those 1mbit connections in Ontario and Quebec are limited to 5GB or 10GB of bandwidth monthly - afaik. Rogers is one of the only ones not currently in that loop (soon to come?).

      But... chances are more then a good share of the connection will be always in use, and some of the 160 residents will complain. So a 1.5mb T1 probably isn't the best connectivity solution.

      --
      Mod me down im a newf (wiki)
    2. Re:Cat 5 by Malc · · Score: 1

      Heh: I just upgraded to IStop.com's 3.5Mbs/800Kbs service. Nice.

    3. Re:Cat 5 by tomhudson · · Score: 1
      Why not just do the cat5 wiring for everyone to share as a local lan, and let individuals get/share their own DSL connections as they wish?

      This way, ppl playing games, trading isos locally,etc, get really fast times, while those who want to go outside pay ...

      BTW, this thread is a dupe ... this same question was asked and answered a month ago. And (maybe I'm being a prick here, but really ...) if you didn't/couldn't instinctively realize the parent posters' point regarding a T1 seriously lacking in bandwidth compared to a couple of 3mb dsl lines, you shouldn't be helping anybody spec anything concerning networking ...

    4. Re:Cat 5 by Anonymous Coward · · Score: 0

      Where do you live? I pay $89.95/mo for Speakeasy 1.2Mb/384Kb (Minneapolis).

      Granted I could get a cable modem through my cable company (Comcast) with higher d/l and slower u/l, but I couldn't A) run my company's web/email server and a web server for a couple friends B) have static IPs w/o a "business account" which actually costs more for less bandwidth. Speakeasy doesn't care how many local machines I have on NAT nor do they care that I run servers.

    5. Re:Cat 5 by Guspaz · · Score: 1

      I'm not saying 3mbit DSL lines should be used to provide internet service (Though, a 3.5mbit non-pppoe business DSL line is certainly resellable), I'm just trying to illustrate the point that while overselling a T1 is OK, overselling it by 32000% isn't a good idea. Even with slower 1mbit DSL lines, or even crippled 512kbit DSL lines, it wouldn't take very many simultaneous transfers before the network slowed to a crawl. I might not be a network engineer, but I know enough about networking to realize that massively overselling a pipe is a recipe for disaster; I've seen it happen many times.

    6. Re:Cat 5 by Guspaz · · Score: 1

      :) Same here, I dumped Sympatico for iStop's 3.5mbit line right after the Sympatico caps announcement was made.

    7. Re:Cat 5 by Guspaz · · Score: 1

      I live in Montreal. My ISP is iStop (http://www.istop.com), and I'm subscribed to their 3.5mbit/800kbit residential DSL service for 49.95$ canadian, which is roughly 35$ US (I just did x0.65)

      Service of late has been pretty good, and they have the cheapest bandwidth costs that I've ever seen on a residential line -- 2$/GB canadian if you go over your limit, and should you want to raise your monthly cap in advance, 10$/10GB canadian.

      They don't have any problems with servers, and while new clients don't get them anymore, I have a free static IP :)

      I'm actually considering THT or CUIC, the cost goes up to 70$ CDN, and I'd have to pay extra for the static IP, but neither of them have monthly caps.

    8. Re:Cat 5 by Malc · · Score: 1

      "while new clients don't get them anymore, I have a free static IP"

      And for those who don't get it for free, they get it for almost free: CAD$4/mo.

    9. Re:Cat 5 by Anonymous Coward · · Score: 0

      How much would YOU pay for a 150kbit internet connection?

      According to most dialup AOL users, somewhere over $19.95/month.

    10. Re:Cat 5 by PFAK · · Score: 1

      Thats totally incorrect, to an extent. Users in the states pay _way_ more for internet access in general than anyone in canada. I know of many people that pay $90/mo (USD) for 1.5mbps/128kbps in California in such areas.

      In Western Canada, my 2.5mbps/640kbps connection costs me $40/mo (CDN), and you can get a cable connection capped at 8mbps/512kbps for $45/mo. So it's a matter of where you live.

      In the states, to get away from Pacbell. I think people are willing to pay for something similar to that.

      --

      Free means no restrictions, ironic the FSF's GPL forces restrictions, isn't it? What's your definition of free?
    11. Re:Cat 5 by Jardine · · Score: 1

      Not to be nitpicky, but a lot of people in Ontario and Quebec do not have access to any DSL. There are still quite a few exchanges which haven't been upgraded. I'm about 700 metres (by road) from my local Bell building but there's no DSL here yet nor do I expect it anytime soon. Thankfully we do have Rogers Hi-spee...err half-speed cable (1.5/192, formerly 3/384)

    12. Re:Cat 5 by shepd · · Score: 1

      >Everybody in eastern Canada (At least Quebec and Ontario) have access to 1mbit DSL (1.2mbit minus overhead).

      If only. Bell hasn't even finished rolling it out in major Tech cities like Kitchener Waterloo yet.

      Perhaps in 2005 or 2006 it might be here. 'Till then I'm stuck with a choice of wireless or US satellite internet (sorry, I can't afford $600 a year for Canadian satellite internet).

      --
      If you could be told what you can see or read, then it follows that you could be told what to say or think - BoC
    13. Re:Cat 5 by Guspaz · · Score: 1

      Forgive me, I'm spoiled by Montreal's high coverage for DSL :) I do know for a fact though that 3.5mbit is available in parts of Waterloo, and 1mbit more widely. Perhaps you're in one of the pockets that don't have it yet?

    14. Re:Cat 5 by shepd · · Score: 1

      >Perhaps you're in one of the pockets that don't have it yet?

      Bingo! :-)

      Actually, I'm a little out of the way of there, but I still do know parts of KW don't have it, which is sorta inexcusable considering we have one of the premier CS universities in the world!

      Oh well... I'd rather it take less than 2 weeks to get my phone line fixed before I get high-speed internet on it.

      --
      If you could be told what you can see or read, then it follows that you could be told what to say or think - BoC
  13. Keep an eye out for auctions by jakedata · · Score: 1

    I just saw a stack of Copper Mountain and Cisco DSL gear sell for 20 cents on the dollar.

  14. Does everyone want it? by Rumbler · · Score: 5, Insightful

    Seriously - that's the first thing that came to mind.

    If only 25% of people in your complex want the service, depending on which provider you're getting with, installation and continued service could be a shaky proposition.

    --
    Sig master! Sig master! Sig... faster?!
    1. Re:Does everyone want it? by DDX_2002 · · Score: 5, Insightful
      Well, if it's a condo, unless 50% (or whatever your condo bylaws say) of the people at the meeting vote for it, it ain't happening in the first place.

      Man, I wouldn't trust a condo board with something like providing me internet connectivity for love nor money... I don't feel like putting network issues up for a popular vote or trusting the condo board to "get it" when it's time to allocate funds for equipment, maintenance, etc. Unless you're going to hire somebody to maintain it, or get yourself a contract, do you really want to be the free tech support guy for *160* users who know where you live.

      --
      MHO. YMMV. Any resemblance between this post and real persons, or reality in general, was accidental.
    2. Re:Does everyone want it? by genka · · Score: 1

      The only way for community ISP work without fiscal risk is to make the service fee a part of a condo fee, so no one could get out.

    3. Re:Does everyone want it? by cybermace5 · · Score: 1

      Yes. Consulting rates apply. Pays for your other, private T1 line + snacks.

      --
      ...
    4. Re:Does everyone want it? by Anonymous Coward · · Score: 0

      I've done technical support for 1 million+ users (of course not by myself) and let me tell you that I would 100% LOVE the opportunity to be the technical support person for 160 condo users for whom I could simply go to their house within 4 minutes, and fix 'em up!

    5. Re:Does everyone want it? by dracocat · · Score: 3, Informative

      You would be surprised. I lived in a 50 person condo that bought a 3Mbit DSL and ran Cat 5 to each apartment. There was NO tech support, just a one page pamplet telling you how to setup DHCP.

      cost per unit = $100 / 50 = $2 per UNIT.

      Downside: if it went down there was nobody to call, it would take the person in charge a day to figure out that it was down and get around to fixing it.

      Upside. Did I mention it was $2 a month? Well actually it was free. The condo board was able to do it without raising the HOA fees. So my out of pocket expense was $0 a month.

      If someone absolutely had to have an Internet connection I suppose they could have bought a cable modem. Then they would always have two options to connect to the Internet.

      What I don't understand is why you want to become a DSL "provider". Are you really planning on charging each tenant a monthly fee if they want this? You will be adding so many more expenses! Just buy the DSL and share it, don't make a business out of it!

      So my steps are:
      1) Buy DSL
      2) Share It with CAT 5, Wireless, whatever you want
      3) Pay a resident who will be using it a lot $100 a month to keep it up. (Not to support idiots, just to make sure the network stays up). If residents need help they can independently pay him money or another neighbor that is smart enough to set it up.
      4) Pay for it with HOA fees, don't add extra billing and other overhead. Just treat the DSL as your HOA probably treats Water, and Cable TV. (You DO have a bulk rate with the cable company, right?)
      5) Do not try and start a DSL provider company on the side of the HOA. The HOA's purpose is to serve the residents, not to start making money off of them.

    6. Re:Does everyone want it? by Anonymous Coward · · Score: 0

      If you don't go the DSL route (as everyone has already suggested) you just get a frame relay from an ISP and run CAT5. Apart from running the cable and plugging it into a router, there is *no* overhead. I think its silly to, as some suggest, become your own ISP with SPAM filtering, although a 486 for (conservative) caching and a 512K throttle might be a good idea.

  15. if it must be dsl by Digix · · Score: 1

    i would recommend looking into the Cisco 827 or SOHO 77 dsl routers. but if you just want to give the tenants access, then i would go with ethernet or wifi.

  16. why is everyone interested in doing hard? by Lumpy · · Score: 1

    cat5 to each unit. a 100 base switch in each unit each segment to a switch in yout NOC closet that has the T1, the single cache,dhcp,and simply using one of the authentication systems used for wireless access points (the web based one comes to mind) you can shut off accounts for non pay /etc... coupled with a good firewall to the net and you are done...

    make it web based administration and you are done.

    why waste time with DSL or other crap like that?

    --
    Do not look at laser with remaining good eye.
    1. Re:why is everyone interested in doing hard? by Anonymous Coward · · Score: 0

      Uh, because you'd have to RUN cat5 to all 160 units, while all of them already have a phone jack which can have DSL connectivity given to through a dslam. DUH...

    2. Re:why is everyone interested in doing hard? by Lumpy · · Score: 1

      so what, the price of the DSL providing equipment is more than the cost of running wire to all the units....

      DUH!

      I'd add the requirement that each user MUST use a smb barricade or other hardware firewall. if you live in a condo you can afford the $80.00 for one is nothing.

      --
      Do not look at laser with remaining good eye.
    3. Re:why is everyone interested in doing hard? by tomhudson · · Score: 1

      oh, come on, the SMB Barricade firewall is a piece of shit, plus they've been cracked/hacked. Bought one, not very configurable either, returned it the next day.

  17. Bandwidth sharing by isomeme · · Score: 4, Insightful

    Depending on the likely residents, I'd be a bit worried about sharing a T1 (1.5 Mbps) between 160 units. Even if you figure that at peak only 10% of the units are doing bandwidth-hungry operations (media streaming, large file downloads), that still leaves only around 100 kbps per unit, which is pretty bad. If 20% try for 'heavy' access at once, they'd be better off using dialup. In other words, 30 teenage kids or similarly high-bandwidth users could crater your entire scheme.

    --
    When all you have is a hammer, everything looks like a skull.
    1. Re:Bandwidth sharing by Lumpy · · Score: 1

      dont think so. a local cable company has 3 T-3 lines for 100,000 subscribers..

      do that math and 2400 BPS looks good.

      ISP bandwidth is not as simple as you think, basically take the number of people you can fit on it comfortably... Say 30 for a T-1 and multiply by 10 and that is your percieved saturation point.

      1 T1 for 160 units is more than plenty, yes at times it will be slow, but hey EVERYTHING can be slow at times.

      --
      Do not look at laser with remaining good eye.
    2. Re:Bandwidth sharing by SuiteSisterMary · · Score: 1

      Use a managed switch with per-port bandwidth caps, or use a good traffic-shaping capable router between the switches and the upstream connection.

      Then you either a) allow people to buy extra bandwidth, or b) simply put QoS directives onto the P2P and other bandwidth-hungry stuff.

      --
      Vintage computer games and RPG books available. Email me if you're interested.
    3. Re:Bandwidth sharing by Anonymous Coward · · Score: 0

      The above poster's math is right, but your results are correct. A T-1 would be plenty. Except for one thing. Your T-1 is going to have been resold about 4 or 5 times by the time it gets to you. So that cuts you to a half or even a third at peak times.
      (calculated using rule of thumb pulled out of highly educated ass guesstimate algorithm)

    4. Re:Bandwidth sharing by CrackersnSoup · · Score: 1

      Most ISP's get 50+ customers to a T1. I know of a few that can get 100(and NOT have bandwidth issue's). One thing no one has talked aobut yet is the speed being sold. Your obviously not going to sell 1meg access unless your going to sell bits. That is the best solution IMO. Get 3meg(frac DS3 or bonded T1(watch the bonding, there is per packet nad dound robin(per connection)) and sell 1meg line for $15/mo plus $10/gb.

      Crackers`n`Soup
      wISP Network Administrator

  18. I looked at this about a year ago... by eric2hill · · Score: 5, Interesting

    The costs involved with the hardware (tut systems) was pretty substantial. The owner of the property whent ahead with a MUCH simpler plan (I recommended) of putting a simple 24-port switch in the basement of each dwelling (24 room units) and daisy-chaining the switches together with 100MB fiber. We had to run CAT5 to each unit, but the costs of that (less than $100/drop) were cheaper than a TUT Systems client device (around $165) for each unit. In the end, we had one switch plugged into an upstream carrier. Turning on or off the units' internet access was as easy as telnetting to the switch and shutting down the port.

    The 100MB was MORE than enough for the 1.5MB internet pipe, and as an added bonus the dwellings could game with each other on a true 100MB LAN!

    --
    LOAD "SIG",8,1
    LOADING...
    READY.
    RUN
    1. Re:I looked at this about a year ago... by saintjab · · Score: 2, Funny

      60+ units could make for a helluva LAN party on the weekends!

      --
      "Reality is a crutch for people who can't handle drugs" - George Bernard Shaw (1856 - 1950)
    2. Re:I looked at this about a year ago... by ghunza · · Score: 1

      There's a strange elegance to this plan.

      But this does highlight an issue raised from a previous post. Is a T1 going to be enough? Oversubscribing is common business practice in the telco world, but even if you had a peak of 10% the residents on-line at the same time you could easily swamp a T1.

      [troll bait on] I'm sure you'd want to restrict the ability of the residents to add their own NAT as well... just to save bandwidth(sorry, couldn't resist) [troll bait off]

    3. Re:I looked at this about a year ago... by rjoiners · · Score: 1

      ...two cent addition...

      If running wire is a major cost issue for the building structure, the TUT solution might be competitive since you can use existing phone wire for the distribution of the service.

  19. Why not run ethernet? by danielgast · · Score: 5, Insightful

    DSL was invented to provide a solution to a single specific problem (lack of quantity and quality of copper for long distance runs from the CO to the home). DSL makes some tradeoffs, including very expensive hardware, in most cases low upstream, and in many cases interference in the audio portion of the line that has to be filtered at each extension. If you're wiring an apartment or even a small neighborhood, why not consider pulling a second cat5/6 and providing regular 100mbit ethernet? Your cost dissolves down to a managed switch (and that can be eliminated if you're willing to manually plug/unplug ports from the switch), and the customer end becomes whatever cheap ethernet card they'd have to have anyway to plug the DSL modem in. For the fortune you save in DSLAMs and other expensive telco grade hardware you could probably buy everyone who posts a comment in this article a pizza.

    -Dan

    1. Re:Why not run ethernet? by sharkman67 · · Score: 1

      I looked at this for a customer as well. If it is a new building cat5 to each condo is the way to go, Wired to a telco or utility closet into hubs/switches.

      If you can't rewire then go wireless, If that is not an option then using the second pair on the existing telco wiring with dsl will work fine. However you will need a dslam with many ports and each end will need a modem. The only problem is if the resident has more than 1 phone number. Then on a case by case basis you could pull another pair.

      Linux for the router with dhcp for the end point. Make sure your contract states no wireless or at least certified by you for proper setup.

  20. Think ahead by Jeffrey+Baker · · Score: 2, Insightful

    For new construction, run utp, fiber, and coax to each unit. This will reduce and future telco and catv headaches. Get the wiring done by qualified installers. Cat5 is not a type of cable, it is a standard, and few people know how to follow the standard. With 160 units you are going to need a lot bigger pipe than a T1. Also forget DSL, it's silly for on-premises connections. Just hook everyone up to the same 100 (or 1000) mbit ethernet segment.

    1. Re:Think ahead by Anonymous Coward · · Score: 0

      You're an id-10t. Category-5 is not a mere standard. Cat-5 is based on the EIA/TIA 568 Commercial Building Telecommunications Wiring Standard developed by the Electronics Industries Association as requested by the Computer Communications Industry Association in 1985. Short for Category 5, network cabling that consists of four twisted pairs of copper wire terminated by RJ45 connectors. Cat-5 cabling supports frequencies up to 100 MHz and speeds up to 1000 Mbps. It can be used for ATM, token ring, 1000Base-T, 100Base-T, and 10Base-T networking.
      Get it right next time.

    2. Re:Think ahead by Jeffrey+Baker · · Score: 1

      Did you just come along to prove my point? Category 5 is not a type of cable. A cable cannot be "Category 5" because Category 5 indicates a standard of signalling performance. Such a standard can only be met by an installation of cable, connectors, puchdowns, and so forth. Therefore there is no such thing as "Cat5 cable".

  21. Keep it simple by mao+che+minh · · Score: 1

    Keep it simple, going DSL will increase the cost and complexity needlessly. Just use the T1 and set up the condos like a standard network: manage your router right, use a good proxy (for the cache), consider going 100bT, and keep an eye on the WAPs.

  22. A T1 aint gonna cut it! by Anonymous Coward · · Score: 1, Insightful

    Do the maths.

    1.5 mbs / 512kbs = 3
    1.5 mbs/ 386kbs = 4
    1.5 mbs/ 256kbs = 6 users.

    And you wan't 160? Better get a T3 instead. more expensive, but 1500/160 is worse than a modem!

    --
    Go calculate something

    1. Re:A T1 aint gonna cut it! by warpSpeed · · Score: 1
      Do the maths.

      1.5 mbs / 512kbs = 3
      1.5 mbs/ 386kbs = 4
      1.5 mbs/ 256kbs = 6 users.

      And you wan't 160? Better get a T3 instead. more expensive, but 1500/160 is worse than a modem!

      Your assuming that everyone will be on all the time sucking all avaiable bandwidth. A T1 might be enough (proably not) but you have to get an idea of when the users are going to peak out. And you will most likley have a mix of users (advanced, intermediate and basic.) Some will just be checking email with some casual surfing. Others will be sharing their terrabyte of Nattlie Portman Pr0n over thier p2p connections.

      If the original poster is going to run this thing, the usage agreement should include bandwidth capping, and peak and non-peak usage hours, that will help distribute the load around a little.

    2. Re:A T1 aint gonna cut it! by Anonymous Coward · · Score: 0

      You're forgetting to factor in some sort of contention ratio. In the UK, the contention ratio for home ADSL is up to 50:1 and up to 20:1 for business ADSL. If you sign up 80, you could sell a 375kbps service at 20:1. Sign up more than that and you can probably afford more than a T1.

      It's a little bit tight, but it's not miles off.

    3. Re:A T1 aint gonna cut it! by Anonymous Coward · · Score: 0

      Get a clue and learn about capacity planning. A t1 might be tight but it's no where near as bad as you think as long as you don't have any bottlenecks behind the CSU/DSU in your own gear. At most you'd need maybe 2 T1s or if it's cheaper a T3 (massive overkill but hey I like overkill especially if it's economical). I got no idea what costs are these days.

    4. Re:A T1 aint gonna cut it! by gsiebrecht · · Score: 1

      www.amplify.net bandwidth manager, works perfect for this.

  23. Why DSL? by Pig+Hogger · · Score: 1
    Why DSL for the building?

    Just use plain old twisted-pair Ethernet...

  24. Idea.. by Anonymous Coward · · Score: 0

    You will need more then 1 T1 for 160 units. You should get Multiple t1s from vendors and use a Cluster from nexland.com for high availability.

    Don't use DSL, stay cat5 or Wireless.

  25. Alternatives to T1 by whoever57 · · Score: 0

    I would look for Wireless ISPs. THey can offer: 1. Low cost 2. More bandwidth than T1 3. Quick installation (no waiting for the telco to hook up the T1). We use a wireless ISP and it has been very reliable. They install line-of-site equipment and the have a base station about 1/2 mile from us. The cost is 1/2 that of T1 and they can almost instantly increase our bandwidth to 10Mb/s -- try getting that through T1!

    --
    The real "Libtards" are the Libertarians!
  26. A Powerline Comm possibility by buzban · · Score: 2, Informative

    I know the nice guy who runs Telkonet Communications, and I think they have a good product. If you're condo runs three-phase power, it's a good possibility.

  27. DSL? Why? by ianjk · · Score: 2, Funny

    When Token Ring is the buzz word these days.

    DSL doesn't seem like the best way, but then again, I have cat5 running throughout my house/duplex, down halls, stairs, under doors, to my room. I had to convince the gf that she just had to 'deal with it'. (she is a neat freak)

    1. Re:DSL? Why? by 1000101 · · Score: 1

      sounds like a perfect opportunity for her to buy you some new wireless equipment. if she doesn't like the wires, she foots the bill! you gotta work it man.

    2. Re:DSL? Why? by ianjk · · Score: 1

      Like she would ever do that. She can't even pay her share of the bills..

  28. T1 eh? by Anonymous Coward · · Score: 1, Funny

    Dear Sir or Madam,
    Installing a T1 are you? Sounds like you and your tenants will be downloading music that belongs to the corporations who pay my salary. That means you have to show me all the plans for installation and install network monitoring tools supplied by those same corporations that pay my salary and sue college students. Oh, and you can not have the source code.

    Listen or pay the price,
    Hillary Rosen

  29. Oh sweet jesus by Anonymous Coward · · Score: 0

    Stay away from the Avidia gear. What a nightmare. I thought they did an early EOL on it all by now, but if not then steer clear.

  30. connectivity through the power grid? by dwgranth · · Score: 2, Interesting

    well if those condo's are all on the same grid you can use powerline technology to connect all of em up to 14mbps... thats all you would need for everyone to share a T1...

    Here's the link

  31. Who does the CATV for the complex by Networkink*Man · · Score: 1

    Hell, if you can co-operate w/ the CATV folks, drop a CMTS in the CATV head-end and provide cable modems to residents. I'm sure the units are pre-wired w/ coax. Then you don't have to worry about pulling cat5.

    Bring in a T1 to begin with, possibly 2 from any given ISP. The CMTS can do your DHCP for you.

    Check e-bay out - you can find some cheap-o CMTS's.

    --
    "How am I supposed to remember you, when you won't let me forget?" --Bare Naked Ladies
    1. Re:Who does the CATV for the complex by Alien+Being · · Score: 1

      Speak up!

  32. Wiring for Ether Expensive by shylock0 · · Score: 4, Informative
    If I understand the original post, wiring for ethernet, at least in his 160 condo set-up, would be extremely expensive: depending on the geographical distribution of the condos, installing Ethernet could be on the scale of hundreds of thousands of dollars. I recently helped consult with a University who wanted to upgrade all two dorms from 10bT to 100bT, and rewire with Cat5e. Just rewiring -- conduits already dug and easily accessible, mind you -- was going to cost them $50,000-$80,000 for two hundred dorm rooms.

    Anyway, the advantages of DSL should be obvious: no new cable needs to be laid. You can just install the DSL equipment at the central phone switch of the condos, and then give each resident a DSL modem. Much simpler, much cheaper.

    But I agree -- a T1 isn't going to cut it for 160 heavy users. If you only expect moderate use, you might be able to squeak by. I'd combine multiple T1s (better redundency) or spring for a T3 (nominally cheaper per megabit). The choice is yours.

    -Shylock

    --
    Statistically speaking, there's a 99.998% chance that my IQ is higher than yours. Get over it.
    1. Re:Wiring for Ether Expensive by Anonymous Coward · · Score: 0

      Sorry - but they were ripped.

    2. Re:Wiring for Ether Expensive by philtre · · Score: 2, Informative

      As far as wiring goes, I do it when other business is slow and 200 dorm rooms with the setup you described should have been 20,000 dollars maximum. That university got ripped off really badly. I charge $100 a drop in an office environment and I'm only middle of the road for prices in my city. The lower cost companies do volume and have crews that only pull cable. They can sometimes underbid with $75-90 per hour. I think somebody was getting a huge kickback... -p

    3. Re:Wiring for Ether Expensive by afidel · · Score: 2, Informative

      They were getting ripped. Blackbox will typically charge ~$100 per drop. $100x200=$20,000 plus some additional costs, but still should be less than half what you quoted. With DSL bridges running around $100 and DSLAM's running several timer more per port then even managed switches and you will probably save by going Cat5. Also for 160 users I would say 2 T-1's would be a minimum, personally I would go with 3 burstable T-1's, most of the time they cost the same as 2 full T-1's but they bandwidth is there for peak usage.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    4. Re:Wiring for Ether Expensive by Sloppy · · Score: 1
      If I understand the original post, wiring for ethernet, at least in his 160 condo set-up, would be extremely expensive
      It doesn't look very expensive after you divide it by 160.
      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    5. Re:Wiring for Ether Expensive by ostiguy · · Score: 1

      You are right - furthermore, wiring guys are getting killed by this market - no one is signing commercial leases, so no wire needs to be run. for a job of that size/complexity (rewire is much more of a PITA than in a gutted building as it is going up), you probably could demand 75 or less a drop.

      ostiguy

    6. Re:Wiring for Ether Expensive by tHiNk411 · · Score: 1

      DSL modems are between $100-$200. This would be much crappier and much more expensive then running cat5. 160 units would be like $16,000-$32,000 for the whole complex. I am sure you could get a company to put a bid for much less then this. And with the argument about having the tenants paying for the modems, why not just have them pay for the cat5 drop? cat5 would be alot less hassle on the support side, it would be more reliable, take less equipment, cheaper, and faster. Why even think about DSL?

    7. Re:Wiring for Ether Expensive by ComputerSlicer23 · · Score: 2, Interesting
      Christ, if they had conduit, I could pull 200 cable runs personally in less then two weeks of full time work. The cable and ends aren't that expensive. Quote out $5,000 in parts, $1,000 in new wiring tools, and $5K for my shiney new Cat5 spectrometer (the tool that measures the attenuation on the copper, I might have the wrong name) so you can be absolutely sure somebody made a killing on two weeks work. The $5K on parts is probably too high. Buying them Female Lucent Cat5 ends 1 at a time, is about $6 * 200 * 2. Assuming they made all of the runs the maximum length ((200 * 300)/1000 * 60), that's roughly: $6,000, that's when I'm not buying in bulk, and negociating a discount. That's just me off the street buying parts as an individual.

      Okay, now I might have to get a several hubs. Lets assume I got HP Pro-Curve 80 port capable switch and filled them all the way to the gills, I'd need 3 for 200 drops, and they'd cost no more then $8K fully loaded if I remember correctly. Again that's MSRP, not a price I'd use if I did this for a living. I'd need probably another $3K in hardware (screws, face plates, Communication racks, and what not). Total cost for install, for a completely network that is ready to rock and roll:

      $6K (wires female ends) + $1K (tools) + $5K (spectrometer) + $8K (switches) + $3K (misc parts) =

      $23K of which, $6K are one time costs to get into the business. So for a stock install, the total cost is $17K + Plus 2man weeks. Assuming they couldn't negocaite a decent price. It'd take me 2 weeks to do all the work personally, and I'm not very speedy at it. I'd bid it at no more then $30K-$35K if I was doing it personally. In two weeks, that's roughly $13-$18K in my pocket. Not great for a contractor, but nothing to cry about either. What'd they do that I didn't price out, where'd I miss the price too badly. I intentionally over-estimated everything on price. I could do the job for parts in a lot less then $6K is my guess. Nobody runs that many 300 foot runs. If I'd gotten cheaper female jacks in the cabling closet, it's have been better. Oh, and my prices are about 3-4 years old. I believe everything is cheaper now.

      Heck, I'll bet I could run fiber to 200 rooms, and put copper to fiber transceivers in on both ends, or fiber on one end, and used fiber capable hubs they quoted, and still make a decent profit. The transceivers might be a little price, last time I read about it, I thought they ran, $45 a piece, but still 45 * 200 = $9K. So $80K is pretty expensive, assuming there really was conduit installed.

      Kirby

    8. Re:Wiring for Ether Expensive by PFAK · · Score: 1

      One T1 isnt going to cut it, and I dont even think 3 T1's would cut it. Your going to have to go for a DS3/T3, which is only 281kbps per user if each user is using the internet, so it'd probably be in your best interest to cap it.

      Me and my friends did a similar thing, only we used wireless, and our local DSL provider. Each of us has 2.5mbps/640kbps for $25/mo using 4 DSL connections, we have QoS, static IPs, etc. It's a really nice deal.

      --

      Free means no restrictions, ironic the FSF's GPL forces restrictions, isn't it? What's your definition of free?
    9. Re:Wiring for Ether Expensive by shylock0 · · Score: 1

      Yeah, I guess I neglected to make clear... it was an complete upgrade -- not just the wiring. Cat5e wiring + Cisco 10/100 routers/switches, with a gigabit backbone, which is basically what you'd want if you were assembling an industrial-strength netowkr.

      --
      Statistically speaking, there's a 99.998% chance that my IQ is higher than yours. Get over it.
    10. Re:Wiring for Ether Expensive by shylock0 · · Score: 1
      1) Union electricians. Labor costs skyrocket.

      2) It's enterprise-level and high quality. All Cisco equipment (for the university). 3) Geographically disparate dorm rooms. 200 rooms over 4 doors over a campus about 4 x 4 miles...

      --
      Statistically speaking, there's a 99.998% chance that my IQ is higher than yours. Get over it.
    11. Re:Wiring for Ether Expensive by philtre · · Score: 1

      Ahhh, no wonder it was that much more. heh. I was feeling bad for the school and wishing I could charge that much for cabling.

      -p

  33. Let someone in the business do it by jj_johny · · Score: 5, Insightful
    I researched this for a business proposal and found out that there were already a bunch of companies in my area that do this type of work. Although you might find it fun, interesting and cheaper, it will quickly escalate into lots of crap and no payback for you. Yeah, everyone else will be happy but you will be left with a lot of headaches and renewed respect for the phone company - imagine that. Yeah find a little ISP who wants to do it and don't get yourself in the thankless position of getting screwed by your neighbors.

    As for what I would do, don't go DSL unless you have to. DSL is only needed if you are really going over the limit of Ethernet and you want the rate limitiing built into most DSL boxes. It ain't like slapping in a Cisco router or your linux router in there.

    The sizing should be in the 20 to 40 users per T1 and then you have to do load balancing between them - more fun and games.

    And for your friend who is cabling his building project, he should put both CAT5+/6 and fiber. Only expect to use the copper for now but at only 50 bucks a unit to rough it in its worth it when you really want to do it.

  34. Wiring the building (DSL) by Anonymous Coward · · Score: 0

    CAT 5, not expensive, reliable. Fairly easy to run.
    Do not use wireless, you will have to encrypt, and you can bet that the people accross the street will somehow bribe/con the key so they can share your bandwidth for free. With wire access is physically limited to where there is wire. DHCP, Squid, and a DNS server and away you go. A decent Pentium box will do it with Linux.

    A T1 will probably be a bit slow during peak hours if you get enough people on it. You might start there but you will probably upgrade it later as more people sign on.

    Go for it, great idea!

  35. Non-technical aspects. by Jason1729 · · Score: 1

    There's a lot of suggestions here about how to set up the network, but nobody seems to be covering the more difficult aspects.

    How will you get the condo board to go for any such proposal. Chances are most people in your building don't know anything about networking and will be happy with their dial-ups...if they have internet access at all.

    I'm finding it hard enough to get my condo to start a DVD library.

    Jason
    ProfQuotes

    1. Re:Non-technical aspects. by MightyTribble · · Score: 1

      Obviously you need a slick PowerPoint presentation. :)

      Seriously, though - I'd suggest he first determine demand. Distribute a questionaire to all the condos asking them if
      a) they currently have high-speed service
      b) if yes, how much do they pay,
      c) if no, would they be interested in it if the price is right?
      d) how much would they be willing to pay for an Association-run broadband service.

      Gauge the market first. If the demand's there, you can use it as evidence to the Condo Board to support the plan. I think most folks would like to drop $10/mo or so off the cost of Cable/DSL for equivilent or better service, as well as adding value to their condos.

    2. Re:Non-technical aspects. by jbolden · · Score: 1

      Be on the condo board. If there is not someone on the board who wants this forget it.

  36. umm you're gonna need more than a T1 for 160 units by athen66 · · Score: 2, Informative

    Say you throttle each unit to 128/128, that's gonna require a 20.5mb/s pipe. So you're better off getting a frac DS3. A 20m DS3 is about $10k/mo. So divide that by 160 units and it's gonna break down to about $62.50/mo per unit. The last I checked, you could get a 128/128 DSL line for about $30/mo. Doesn't seem cost effective to me.

  37. T1? Is that all? by Malc · · Score: 1

    Shit, my DSL is 3.5Mbs/800Kbs. I just upgraded from 1.2Mbs/160Kbs. Isn't a T1 a mere 1.5Mbs? You have 160 units... can you spell "over-subscribed"?

  38. Re:Why DSL - Ethernet? by Fembot · · Score: 2, Insightful

    Why use DSL? Why not use ethernet? That way people within the building get 100mbit/sec connections to each other. Switches are dirt cheap these days (especialy compared to dslams) and if your building has good ducts it shouldnt be too hard pulling the cables.

  39. Coincidence? by Whatever+Fits · · Score: 1

    I'm working on the planning stage for this same type of thing in my 88 unit complex.

    An idea I have is to run wireless between the buildings in the complex and Cat5 inside each attic to drops for each unit. It wouldn't take very many wireless runs to connect all the buildings together. That would be nice. I would much rather run Cat5 to each building, but I doubt I can get the permission to do that kind of digging nor do I really want to dig. Hiring someone to do it would be too expensive.

    Anyone know a good, cheap way to load balance?

    --
    My name fits again.
    1. Re:Coincidence? by kfuq · · Score: 1

      Anyone know a good, cheap way to load balance? ----> a few older boxen, a quick download, and some RTFM and you're on your way.... |-)


      BSD: OpenBSD 3.3 Released

      Posted by timothy on Thursday May 01, @12:35AM from the darpa-funding-be-damned dept.
      An anonymous reader writes "OpenBSD 3.3 was released today, with many new features, including integration of the ProPolice stack protection technology, W^X ('write xor X') on sparc, alpha and hppa, privilege separated XFree86 and an incredible number of enhancements and stability improvements to the packet filter, pf, including address pools for reverse NAT/load balancing, ALTQ integration for network conditioning, and anchors/tables/spamd for spam tar-pitting. Information on the release can be found here and download sites are listed here...

      http://www.openbsd.org/33.html

      (Also, here's a handy way to speed up your DSL connection - prioritizing empty TCP ACKs and ToS low-delay traffic with OpenBSD 3.3's pf.)"

      ( Read More... | 182 of 309 comments )

      http://www.benzedrine.cx/ackpri.html

      hmm... was even still on the /. homepage..... |-)

      --
      iF yOu WAnT to C YOUr iP agaIn gAThEr tWO MilLIon dOLLArS IN Non - cONsEcuTivE TweNtY's AnD AWaiT FuRThER iNstrUctIoN
  40. DS1/T1 are cheap nowadays by MightyTribble · · Score: 1

    We're moving offices this month, and are having to change our DS1/T1 provider (Boston metro area). None of our quotes for a dedicated T1 (local loop + ISP charge) is higher than $960. Verizon is offering us $765/mo on a 3 year commitment. Our previous carrier offered us service for local loop charge + $150/mo. Our DS1 costs have halved in the last three years.

    Get a T1/DS1 service over DSL. Better QoS, better care from the Telco if something breaks. If you need more bandwidth, bond a pair of DS1 or get a fractional DS3.

  41. Hire a pro by semanticgap · · Score: 5, Insightful

    Wiring is the kind of thing best left to people who deal with it every day. I'd get a cabling company to give you a quote on running CAT5 to every unit and instaling a patch panel in some closet. They'll have the right tools to pull the cable, will be able to test it and will be responsible for fixing if anything isn't working.

    I really wouldn't recommend pulling the cable yourself unless you really know what you're doing. BTW, depending on where it's pulled, it might need to be plenum or riser rated, and there may additional fire/code regulations for your area. You may need a license for cabling - but the cabling people would know all that.

    1. Re:Hire a pro by GigsVT · · Score: 1

      I agree regarding the cabling.

      As far as the T1 equipment goes, it can be as simple as a single Linux box with Sangoma Wanpipe PCI card, the driver is well supported, in the main kernel, and rock solid. It acts as the CSU/DSU and the router.

      Get a Class C, assign addresses via DHCP with long leases, and don't fuck around with anything else. Don't packet filter, or traffic shape, or anything else, that's just asking for trouble.

      If people start hogging it, and other people complain about the slowness, then just start posting a list on the bulletin board showing a nice traffic graph by unit. :)

      Let your T1 ISP do your DNS for you, or set up that single machine as the primary DNS, and let your ISP run secondary for you (be careful with the glue!).

      As far as the political issues go, I'd include a small remuneration for yourself in the monthly fee.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
  42. Stop clueless posts by Anonymous Coward · · Score: 0

    As I understand it, the guy is talking about two different instances. in the fist, it's a 160 unit place that he doesn't want the expense, maintainence and overhead of running cat5 so he wants to use the existing phone lines and connect them to a dslam (being a DSL provider to tennants) then only pay for a dedicated pipeline. The other instance is another location all together that might run cat5.

    I would suggest Frame Relay - because it's a shared pipe it's easier to increase/decrease bandwitdh then a T1 (usually your connection to the frame cloud is through a T1). It's also much cheaper too because it's not dedicated bandwidth.

    Rather an innovative idea I think going the DSL route, especially looking on Ebay and seeing how cheap DSLAM's are...

  43. Condo Connectivity by Anonymous Coward · · Score: 0

    You could always go with a leased line solution that will let you ramp up based on demand, then cat5e to closets on each floor, and then one jack in each apartment. That way when someone doesn't want it you pull their jack at the end of the hall. Use some sort of network monitoring tool to meter out bandwidth and make heavy users pay more..Also you probably want to avoid doing any mail hosting, or perhaps contracting with your connectivity provider for POP boxes...block all incoming ports or at least heavily restrict them. Also some sort of trigger to notify those machines that are sending suspicious traffic

  44. too tight, ditch the extra M$ work. by twitter · · Score: 4, Informative
    Cat 5 is a good idea, but you might provide your neighbors with more than DHCP if you can. The single port - non routable address thing would suck for anyone who wants to use more than a single computer or serve content. "locking down unused ports" and forcing all outbound SMTP though your own mail server is equally obnoxious. What you would be providing is a faster browsing experience for a single user in each place rather than Internet Service. That's a terrible waste of a T1 or whatever your upstream service is.

    It's amazing how far out of their way people will go to support Microsoft's crap. More than half of your list is Microsoft specific. Realize also that #10, " Insist customers keep their machines virus free. Disconnect any who don't IMMEDIATELY." eliminates the need for most of the other M$ virus precations, especially the silly M$ patch server which could get you a BSA visit. Why bother when you could recomend Linux or a Mac?

    All small ISPs are going to be blacklisted by AOL/MSNBC regardless of how well or poorly you treat your users.

    --

    Friends don't help friends install M$ junk.

    1. Re:too tight, ditch the extra M$ work. by wowbagger · · Score: 2, Informative

      I never said "Only one IP address per port" - if they want to hang a hub off the port and hook up multiple machines they can.

      I never said "Non-routeable addresses" - I simply said filter certain ports that have no business going beyond one unit.

      By "locking down unused ports" I meant PHYSICAL ports, not IP ports - as in "If Joe hasn't signed up for it the RJ-45 in his place is dead."

    2. Re:too tight, ditch the extra M$ work. by freeweed · · Score: 4, Informative

      It's amazing how far out of their way people will go to support Microsoft's crap. More than half of your list is Microsoft specific.

      How'd you come up with this? Only one thing even mentioned Microsoft, and also mentioned Apple in the same breath. Let's see:

      1) Don't put DSL to each unit - pull CAT-5 and run Ethernet. Your residents will have a much easier time getting hardware than with DSL, and your costs will be less.

      OS independant.

      2) Pull the wire to a common router closet.

      OS independant.

      3) One port per unit

      OS independant.

      4) Lock down the ports that aren't being used.

      OS independant.

      5) Use DHCP to assign addresses.

      OS independant.

      6) Set up your own caching server. I would recommend using Squid.

      OS independant.

      7) Force all outbound port 25 (SMTP) through your mail server.

      OS independant.

      8) Run a virus scanner on your mail server. Scan all incoming AND outgoing mail.

      Ok, *most* viruses are Windows-based. Most != all, however.

      9) Don't route the Microsoft file sharing ports or Apple Rendezvous ports between units.

      Again, mostly a Microsoft issue.

      10) Insist customers keep their machines virus free. Disconnect any who don't IMMEDIATELY.

      Remember, there are viruses for every platform out there.

      11) Write into your rental contracts that you ARE NOT RESPONSIBLE for maintaining your customer's machines or security - if they are scared let them run their own firewall.

      OS independant.

      12) Offer your own space, accessible to your users, with virus scanner updates, MS patches, and so on. Encourage them to use that to save bandwidth.

      There have been an order of magnitude more patches for my RedHat box this past month than for all versions of Windows combined. And most Windows patches have little to do with viruses, although many of these vulnerabilities do end up being exploited by worms at some point.

      13) Routinely sniff around for WAPs. Handle them as you see fit - disconnect, or verify they are set up sanely. Don't ignore them.

      Has nothing to do with what OS people run.

      Of course, this doesn't even touch on the fact that the reason people spend so much time supporting Microsoft products is that Windows/Office/etc are 90%+ of their respective markets. Duh, you kind of have to. It's all fine and dandy to be an OSS zealot, but when you're trying to provide a service to people, it's rather impractical to just say 'run what I tell you to run'. That sort of thinking is why we hate Microsoft in the first place, remember? :)

      --
      Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
    3. Re:too tight, ditch the extra M$ work. by silverhalide · · Score: 2, Interesting

      At my school, we use a DHCP/Static IP combination. When you register with a network, your computer is assigned a permanent TCP/IP address that stays with your MAC address/Account (Which are linked on a database somewhere). Then, DHCP is used to configure your machine wherever you happen to be at. You get the ease of DHCP with the routability of a static IP. If the DHCP server ever messes up for some reason, you can simply put in your static IP and run with it. I'm not sure the hardware/software solution that's required to implement this, but on a campus of 5,000+ people, it surely cuts down on tech support calls.

    4. Re:too tight, ditch the extra M$ work. by Bendy+Chief · · Score: 1
      Come on man, put a little thought into your posts.

      He's talking about providing "communal" Internet access for his condominium. With affordable, professionally administered, tech-supported alternatives, such as telco DSL and cable, do you honestly think people are going to spend days (potentially weeks or months) learning a whole new style of computing, just so they can fit into his geek experiment?

      I'm a geek for crying out loud, and if getting in on a cool little deal like this meant learning Linux or buying a Mac, and ditching all my commercial software, I'd tell him to hit the road, hard.

    5. Re:too tight, ditch the extra M$ work. by Zathrus · · Score: 4, Informative

      but you might provide your neighbors with more than DHCP if you can

      Why? They can use NAT. You probably are... or are you actually going to get a class C subnet for your condo association? I wouldn't bother - it's not worth the time and money.

      It does screw anyone trying to serve content, but I'm not sure that I'd care that much.

      More than half of your list is Microsoft specific.

      Uh... no it wasn't. There were 3 points that could be considered MS specific (8, 10, 12), and I'd dispute #8. There are Mac and Linux viruses out there. If either becomes a significant user base then there will be far, far more.

      No, 7, 9, and 11 are not MS related. Number 7 deals specifically with spam. Number 9 is basic security and privacy. Number 11 is true regardless of OS -- or have you never heard of script kiddies and rootkits?

      The patch server wouldn't get them a BSA visit either, you're allowed to redistribute patches.

      In any case, welcome to the Real World, where 95% of all systems will be Windows. If you don't take precautions against that then you're just an idiot.

      Less zealotry, more reality.

    6. Re:too tight, ditch the extra M$ work. by tmasman · · Score: 1

      The single port per unit would only mean that the resident would have to get a hub or switch to have multiple computers connected.

      If you want to serve content... Set up a deal to route it through a specific port for an extra fee.

      As far as supportting M$ crap... I don't like M$ any more than you, but M$ is what Joe Q. Public is using. regardless of what you recomend.

      as far as being blacklisted by AOL/MSNBC doens't that only apply to the dynamic addresses provided my the DSL providers? If you get a T1, make sure you get a static IP outside of that range & you shouldn't have to worry about it. (At least that's my nieve point of view on that issue)

      Just my 2.

      ~ tmasman

      --
      Oh! And this one time, at band camp...
    7. Re:too tight, ditch the extra M$ work. by joshuac · · Score: 1

      Ummm, you are just describing a plain ol' DHCP server, there is nothing special about that config.

      ---snip
      your computer is assigned a permanent TCP/IP address that stays with your MAC address/Account (Which are linked on a database somewhere)

      ---snip

      That "database somewhere" of IP address to MAC address is the DHCP client lease table on your DHCP server.

      Unless you are saying that you IP address follows your _user_ account rather than your NIC's MAC address, in which case your school would truly have something different.

      ---snip
      I'm not sure the hardware/software solution that's required to implement this, but on a campus of 5,000+ people, it surely cuts down on tech support calls.

      ---snip

      A 386, a NIC, and the OS of your choice (Hey, even NT 3.5x ran on 386's). If you have got more than 5 machines on your network, it is probably time for a DHCP server.

      Just set the lease time to longer than the likely longest period of time a user will have their machine disconnected from the network, and you are fine; the DHCP server will go out of it's way to make certain that MAC address gets the same address re-assigned to it.

    8. Re:too tight, ditch the extra M$ work. by addaon · · Score: 1

      I don't know of a single virus for colorForth. (Yet. Hmm... is that a challenge?)

      --

      I've had this sig for three days.
    9. Re:too tight, ditch the extra M$ work. by Anonymous Coward · · Score: 0


      3) One port per unit
      4) Lock down the ports that aren't being used.

      Perhaps he meant unused physical ports on the switch/router, rather then network ports.

    10. Re:too tight, ditch the extra M$ work. by gad_zuki! · · Score: 2, Interesting

      >In any case, welcome to the Real World, where 95% of all systems will be Windows.

      Exactly. I couldn't imagine how nasty the AT&T/Comcast network would be with ports 137-139 open for sniffing and cracking, especially now that XP defaults to a sharing folder. The determined will at least learn how to setup ftp, apache, IIS, etc.

      As for the patch/virus server. More power to them. Every ISP should have a link to some free AV (AVG comes to mind) and windowsupdate.com. Toss in a link to Ad Aware for good measure. Make this page their starting page on IE on install.

      Acting like your customers know what they are doing is probably the best way to destroy this little project or pretty much *any* project.

      Also you can meet people half-way, no need to be a nazi admin. If someone wants their netbios ports open and they ask nicely then do it (assuming your equipment allows it). Only those in the know would probably ask and you could nicely ask them to make sure they have a strong password.

    11. Re:too tight, ditch the extra M$ work. by CrackersnSoup · · Score: 1

      Why? They can use NAT. You probably are... or are you actually going to get a class C subnet for your condo association? I wouldn't bother - it's not worth the time and money

      a C is free with a T1. Just fill out the IP justifacation.

    12. Re:too tight, ditch the extra M$ work. by Exousia · · Score: 1

      DHCP is fine. If users want multiple devices they can get a SOHO, which they should do anyway for firewall protection.

      --

      --Slashdot: News for Turds. Stuff that Splatters.
    13. Re:too tight, ditch the extra M$ work. by Anonymous Coward · · Score: 0
      if they want to hang a hub off the port and hook up multiple machines they can.

      Oh now there is a brilliant idea. Lets let them hang an extra piece of misc network hardware off their one and only jack. Nevermind if it might cause issues for the upstream switch. Who cares about wiring standard. Reliable network? That's a thing of the past.

    14. Re:too tight, ditch the extra M$ work. by silverhalide · · Score: 1
      That "database somewhere" of IP address to MAC address is the DHCP client lease table on your DHCP server. Unless you are saying that you IP address follows your _user_ account rather than your NIC's MAC address, in which case your school would truly have something different.

      Sorry, I sounded like a newbie back there. The IP is tied to your *account*, not your MAC. So whenever your MAC changes, you gotta get on someone else's comp and update your MAC address in the database. The other use for this is port security -- the switches won't talk to you unless your MAC is registered with the database with an active user account. That way, your IP follows you throught your path through college. Pretty handy.

    15. Re:too tight, ditch the extra M$ work. by kesuki · · Score: 1

      It does screw anyone trying to serve content
      It also screws gamers. Offer static IPs at $x a month extra, DHCP works perfectly fine for assigning a static IP, though. I've been assigning static IPs over DHCP for my systems since I got sick of manually entering IPs everytime I reinstall.
      Locking down 'unused' ports will also often cause problems with games, especially if you haven't left known game ports (not listed in some distros /etc/services for unknown reasons) open.
      with 160 people more than one of them is going to have the same selection of games, and getting all those people on even a service like battle.net is going to be hard, and cause problems if they want to host a game/trade maps etc.
      And that's considering that battle.net is designed to work with nat'ed users -- some games won't even connect from behind a nat.

  45. Re:Why DSL - Ethernet? by cos(0) · · Score: 0

    Why use DSL? Why not use ethernet?

    You're comparing apples and baskets that hold them. DSL is a type of Internet connectivity, while Ethernet is a type of generic computer connectivity. DSL service is generally provided over Ethernet because today's networks are usually Ethernet. Ethernet can likewise be used for cable, printing, file-sharing, etc.

  46. Re:T1? Is that all? by SuiteSisterMary · · Score: 3, Informative

    Ah, but a T1 is guarenteed bandwidth, and will have service level agreements in place.

    --
    Vintage computer games and RPG books available. Email me if you're interested.
  47. My Apartment by Globe199 · · Score: 4, Informative

    My apartment complex is its own ISP. They installed ethernet in their buildings in 1996, starting with two T-1 lines.

    With approximately 1000 total residents for all the buildings, this setup worked fairly well at first because not very many people had computers that were network-ready.

    Around late 1999, the network began slowing down. A year later, streaming video was impossible, and by late 2001, I was better off using a dialup. It was BAD.

    About a year ago, they added two more T-1s, and it's been smooth sailing since. There are about 400 people in my building, maybe 500 in the next, and 100 or so in the other places. The network is almost always fast. Obviously this is due to adding the extra bandwidth. One can assume that the user-base has reached its saturation by now (almost everyone has a computer with a NIC, since it's a student-oriented place), so they probably won't have any more speed problems.

    They banned Kazaa and Morpheus, and apparently that helped. They don't give you an e-mail address or server space. They simply provide network connectivity. It's actually not a bad deal -- at $100/year, it's as fast an any cable modem or DSL connection.

    I think two T-1s would probably be alright for only 160 units. And I might recommend Cat-5E wiring. We just rewired my work's building with about 500 data ports, using 5E. Everything is gigabit ready. Sure, 100-base-T is fast, but are you gonna want to rewire the whole damn place in five years when you want gig? Probably not. It cost us $120,000 for those 500 data ports and about 300 voice ports. Plan ahead!

    Globe199

  48. Hidden costs / SLAs by MightyTribble · · Score: 4, Insightful

    What's your Outage / backup strategy?

    You could run the entire block off a low-end Cisco router, but are you budgeting for a Cisco service contract and / or a 'hot spare' router?

    How about line monitoring and alerts? Backups / service contracts for your switches? Environmental systems to keep your equipment closet nice and frosty? Factored in the electrical costs of that to your business plan?

    Who's going to support the system? What do you do if a switch craps out at 3am? Running a community ISP can be fun, but it's *less* fun if you've not thought of these things before you start. :)

  49. Squid by Phroggy · · Score: 1

    You may want to set up a Squid box as a caching proxy server. You can either tell everybody to use it, or set it up transparently - the former is simpler, but a few people may not use it, which makes it less effective for everybody. If you set it up transparently, some users might get annnoyed if they have any issues.

    Remind everybody to use Shift-Reload (Netscape/Mozilla), Ctrl-Refresh (MSIE for Windows) or Option-Refresh (MSIE for Mac) if they have problems getting the most recent version of a page.

    <plug type="shameless">Then you could install BannerFilter...</plug>

    --
    $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
    $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    1. Re:Squid by Fastolfe · · Score: 1

      There's a middle ground as well: set up a host named 'wpad' on your domain, put a web server on it, and have the web server serve up a /wpad.dat file containing JavaScript defining proxy definitions (use Google for details on proxy autoconfiguration). Many browsers (well, IE is all I'm sure of) will try to load http://wpad/wpad.dat to set up their proxy definitions when the browser is started up. They are free to turn this off or explicitly define their own proxy server if they want, but the fact that this is on by default is kind of nifty for these types of setups.

    2. Re:Squid by Phroggy · · Score: 1

      Aha! I wondered how that worked, thanks! I'll do that at home.

      IE is the only browser I'm aware of that tries to do this, and only on Windows.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  50. Why not HomePNA by Malc · · Score: 1

    I can understand why you'd want to use DSL - it saves pulling new wiring to each unit. Does HomePNA also work for you?

  51. Re:for the intl. folks: what is a "condo" ? by HermanZA · · Score: 1

    That's American for a flat...

  52. Another wireless solution by Afrosheen · · Score: 1

    I don't know where you live, but here in Dallas, you can get Airband for high speed internet to businesses, schools, condos, etc.

    Airband rocks. Their connection is never down and they have no wiring to you, it's all 100% wireless. They throw an antenna on your roof, you wire some ethernet to their box inside, and you've got their service.

    In this situation (in this town) I'd get Airband with a decent bandwidth plan. You can either go wired by doing ethernet to each unit or you can go wireless. Personally I'd choose ethernet just for flexibility (i.e. the cards are cheaper than donuts and everyone has one at this point). Wireless is a good concept but expensive to introduce. Not sure if the residents want to fuel the convenience of wireless AND buy their own hardware to boot.

    At any rate, if you can get Airband or a similar wireless service where you live, go for it. My friend and I were gaming with a 30 ping during a horrible thunderstorm that took out a power transformer a block away and cut the lights twice. Never dropped a packet. :)

  53. Capital is not the issue... by Bartlet · · Score: 1

    The Capital expenses are not the issue. The hard thing about building a co-op service like this is maintaining the level of service over a period of years. Look around and creat a good board of governance. When you talk to others who have done this kind of project, you will see that the high prices isp's charge are not all that far out of line. Especially given that you may very well fall under local regulatory issues.

    For what it's worth:
    0) You might find that pulling a pair of composit cables to each unit is very competative.
    These allow you to run CAT5, Coax, fiber, etc in one pull.
    For one example, see:
    http://www.broadbandutopia.com/composite.htm l
    1) Bridged Ethernet to each unit.
    2) Run with a CISCO bridging router and give each unit one dedicated port.
    3) Sign up with two ISP's and run a pair of fractional T1's (one from each ISP).
    4) Use OSPF well. (The hard part).

  54. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  55. Re:for the intl. folks: what is a "condo" ? by Rick.C · · Score: 1

    A condominium can be any sort of multi-family dwelling - a high-rise tower, five acres of two-unit side-by-sides or even an old remodeled warehouse. The thing that makes it a condo is that the units are purchased instead of rented.

    --
    You were 80% angel, 10% demon. The rest was hard to explain. - Over The Rhine
    "Math in a song is good."-Linford
  56. wired / cat 5 by dughutch · · Score: 1

    I have to agree with several of the other posters. Wired is the way to go (if we are talking pre-construction for the building) for serveral reasons. Bandwidth - 160 wireless / secure nodes will not be able to compete with wire. Versatility - wireless is really still young. The options, speeds, and prices are changing overnight. With wire you will avoid locking in your tenents with a particular wireless technology. Future - wire every room in the house with RJ-45 outlets leading back to the utility closet of each condo. This will allow tenents to have their own internal LAN or not, plus they can make any jack "hot" if needed. Run one line from each condo to the central "hub rooms" allowing 10/100/1000 Mbit connectivity. I'm sure you can find 10 Mbit switches for cheap, and 10 Mbit service is better than pretty much any broadband around. VLAN all the condos maybe... I like the earlier comment about telling tenents security is their concern. Run everything through at least a cache, host your own dns, plus provide email service if you like. (Use at least a fractional DS-3.) Avoid fiber. There is fiber installed to the desktop where I work and it's a mess. Fiber is great for long distance, but stay cheap and easy to fix / troubleshoot and use copper.

  57. Why T1? by Anonymous Coward · · Score: 0

    Our Coop had load balanced T1's (2) for ca 160 connected units in 5 buildings. each building had a switch and Cat5 cabling to the apartments. I think the worst feature were the T1's which proved to be quite unreliable. Back then I investigated biz grade cable modems and load balancing SW. Turns out that you get way better performance for the buck using these than expensive T1's.

  58. Bare IP service by jhines · · Score: 1

    A bare IP service, isn't going to satisfy anybody but the most uber geek, who can run his own server. Which brings up bandwidth, TOS, and other problems.

    Who is going deal with it when your netblock gets blackholed?

  59. Re:umm you're gonna need more than a T1 for 160 un by blenderfish · · Score: 1

    > Say you throttle each unit to 128/128,
    > that's gonna require a 20.5mb/s pipe.

    That's if you _guarantee_ 128kb/s per user.
    Good luck finding a DSL provider that
    *guarantees* 128/128 for anywhere near $30/mo.

    You assume that all users won't be using
    128kb/s simultaneously.

    I'll agree that 1.544mb/s (1xT1) is a bit low for
    160 units, but a 20mb/s DS3 is quite excessive.
    IMHO, a couple load balanced T1's would be fine.

    - blenderfish

  60. The Right Way by Anonymous Coward · · Score: 0

    You can run *THREE* Speakeasy 1.5M/386 ADSL
    lines into the Complex, feed those out through
    three wireless routers, and for a fraction of
    the cost of a T1 you get much more incoming
    bandwidth and the same outgoing.

    Running cable is ridiculous for these bandwidths.
    Not only is it expensive to install, it is expensive
    to maintain.

    1. Re:The Right Way by Anonymous Coward · · Score: 0

      The WRONG Way...Sorry cola lovers...That would be illegal. ADSL is for residential use only. SDSL is for commercial conserns. If he is going to charge for service, and that's what he's doing, even if it's included in the rent, he has to use SDSL if he's going to use DSL at all. Nice try...

  61. Combo 10/100/1000 + fiber by Charcharodon · · Score: 5, Informative

    Check out Dlink's site. You can wire the individual buildings with 10/100 and then use fiber to connect them to a central router for the T1. The prices are down in the range of reasonable for the switch that have 10/100 and a pair of fiber ports. You'd have plenty of speed and distance wouldn't be much of an issue.

    1. Re:Combo 10/100/1000 + fiber by luzrek · · Score: 3, Informative
      Also the limitations on ethernet (distance and number of hubs) are between switches and routers. If you get too far from the previous switch, just put another one in. Certainly, one switch per floor would do it.

      As a side note, if you are going to wire the whole building together with ethernet, you probably want to do some degree of electrical issolation between units. It would really suck if one power surge took out all the networking equiptment and all the computers in the building. Certainly the minimum should be fiber optics (instead of copper wires) between the switches.

      --

      Galium Arsenide is the material of the future, and always will be.

    2. Re:Combo 10/100/1000 + fiber by nolife · · Score: 1

      use fiber to connect them to a central router for the T1

      We are not talking about an office building here where most of the bandwidth is internal and there are central servers getting accessed. Do you really need fiber to provide a T1 line to the users? The distance would be useful but a 10mbit/FD connection should provide the distance and the 1.54mbits required bandwidth.

      Of course if they all start sharing files with each other then maybe.

      Not that fiber is not a good choice if available and within budget. Just a thought

      --
      Bad boys rape our young girls but Violet gives willingly.
    3. Re:Combo 10/100/1000 + fiber by abradsn · · Score: 1

      fibre is a good idea, dlink is a very bad idea, alo make sure to buy your cable pre-made or have a very good technician install it for you.

    4. Re:Combo 10/100/1000 + fiber by walt-sjc · · Score: 3, Insightful

      Well, who says you need the fiber running at 10Gb? Just use media converters. Fiber in, 10/100 ethernet out. If anything, fiber help future-proof things. If at some point 10 years from now they can get an OC12 to the complex, they can use it without a massive cost in upgrades. At this point in time, a bunch of media converters is a lot less expensive than a backbone switch that can handle 10 or so fiber ports (not knowing much about the layout of the complex, I'm assuming it is somewhat spread out.)

      Frankly, the biggest cost is going to be cabling the individual units. How many drops to each unit? One in each bedroom and living room? Even if it's just one, it can cost hundreds of dollars per unit just for the labor of installing the cable.

      I guess this is the reason for looking at cablemodem head ends (about 12K for a small one) or DSLAMS (no idea how much - assuming they are pretty pricey.) You can use existing wiring.

    5. Re:Combo 10/100/1000 + fiber by Anonymous Coward · · Score: 0

      I have to agree 100% with you on that. If nothing else, the tecnician will have good tools and know the ideal ways to identify cables at both ends (e.g. patch panel port 25 goes to condo A25). I learned the hard way once why a $45 RJ45 crimper costs less than a $90 RJ45 crimper. You get what you pay for, but trust me, you don't want to be untangling those messes and replacing cables when people expect their connection to be turned on as soon as they order it.

  62. Squid and proxying by wowbagger · · Score: 1

    I've always set Squid up as a transparent proxy, and used the firewall to redirect all port 80 through Squid (save for a few sites that don't like going throught a proxy).

  63. Re:T1? Is that all? by Malc · · Score: 1

    My ISP offers an SLA. I choose not to buy it though.

  64. Think convergence... by AlphaSys · · Score: 1

    I'll bet your condo already has cable run to all the rooms. DIY cable broadband might be much less trouble. For more info, try here

    --
    Can I bum a sig? I left mine at the office.
    1. Re:Think convergence... by Anonymous Coward · · Score: 0

      shut the fuck up newbie idiot.

    2. Re:Think convergence... by AlphaSys · · Score: 1

      Troll, I don't know what I did to piss in your cornflakes, but please tell me so I can script it and do it every ten minutes. Go away and if you come back, I dare you to post as yourself.

      Stop chasing my posts, fuckwad.

      --
      Can I bum a sig? I left mine at the office.
    3. Re:Think convergence... by Anonymous Coward · · Score: 0

      you shut your fucking mouth you digital hitler. you censoring threatbearing totalitarian mediocritomaton.

      you mother fucking cunt, what does it bother to have someone actually scrutinize your fucking FUD. you are a knownothing liar, a promulgator of mythology, and you will be exposed!

      dare me to post as myself? you little fucker, i wouldnt waste my time with a piece of fucking tripe like you

  65. IT business by wowbagger · · Score: 1

    If he provides DSL to each unit he is going to be in the IT business anyway.

    If he does it RIGHT, uses the RIGHT tool for the job (Ethernet and switches), rather than the WRONG tool (DSL and DSLAMS, which are more for WAN than LAN), then he has an easier job of it.

    (Y'know, this 2 minute between posts is a real drag when you have a lively conversation like this... But oh well, the assholes make the rest of us pay the price....)

    1. Re:IT business by Pii · · Score: 1
      I'm totally with you on the two minutes thing, by the way...

      Now, to address the parent of your comment, the savvy landlord doesn't get into the IT business... He resells.

      A third party handles the IT stuff, and the landlord gets a slice. Third party company offers to do it for $70 per unit. Landlord says, "Great!" He then adds $100 to the monthly rent on each unit.

      Landlords aren't dumb... How do you think they got to owning all of those apartment buildings? ;)

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
  66. Re:Why DSL - Ethernet? by pyite · · Score: 2, Informative

    Huh? You don't know what you're talking about. DSL is usually provided over an ATM connection for one thing. DSL is not a type of Internet connectivity. It is a type of network connectivity, the Internet never has to be involved. Ethernet is a layer 2 protocol that can run over a variety of layer 1 media. Ethernet over fiber is probably about as versatile as you can get in an environment like this. Copper will work just as well and cheaper if the condos are close enough together.

    --

    "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

  67. Hell YES! by LilGuy · · Score: 1

    The next Slashdot story will be ready soon, but subscribers can beat the rush and see it early!

    I'll pay good money to see a story 5 minutes before all you non-subscribers and post my trolls! YES!!

    no...

    --

    You're nothing; like me.
  68. totalitarian dick... by autopr0n · · Score: 1

    4) Lock down the ports that aren't being used.

    What do you mean "not being used"? Not being used by whome, you? I suppose if someone wants to try something 'new' that comes out, they'll need to wait for the BOFH to bless it?

    6) Set up your own caching server. I would recommend using Squid.

    This should be optional. It'll help speed things up, but cache operators can make mistakes that can be very annoying for web designers.

    7) Force all outbound port 25 (SMTP) through your mail server.
    8) Run a virus scanner on your mail server. Scan all incoming AND outgoing mail.

    I suppose simply filtering outbound mail won't cause any problems, but you shouldn't disallow incoming 25. People deserve to be able to run their own mail servers, as long as they aren't wide-open relays. A less totalitarian solution would be to use traffic shaping on 25 to prevent spamming.

    9) Don't route the Microsoft file sharing ports or Apple Rendezvous ports between units.

    Yeah, can't have file sharing between apartments! That would just be evil. LANs are not fun at all, and you wouldn't want to get in trouble with the RIAA!!!

    13) Routinely sniff around for WAPs. Handle them as you see fit - disconnect, or verify they are set up sanely. Don't ignore them.

    Yeah, just imagine if people used wifi to get around your file sharing restrictions!

    --
    autopr0n is like, down and stuff.
    1. Re:totalitarian dick... by Ruds · · Score: 1

      First, point by point:
      4) As he's mentioned before and I thought was clear from context, he meant physical ports. That is, if someone's not paying, they don't get service.

      6) Setting up a cache is kind of pointless if it's optional. Set up a transparent cache--there's plenty of caches-in-a-box out there that do the job nicely and work. If you make a cache optional, people won't use it, and you're wasting upstream bandwidth.

      7)/8) He doesn't say anything about blocking 25. He says scan incoming mail for viruses. This is reasonable and implemented in many ISPs, in particular many universities.

      9) I'm not sure why he does that. He mentions elsewhere that spam can come in on these ports, and someone else has suggested the better solution of blocking the ports at the border but allowing inter-unit sharing.

      13) Have you not been paying attention at all to wireless? It's wide open by default in most APs, and most users don't know enough to make it right. Allowing WAPs willy-nilly breaks a hole wide open in your network.

      On a holistic note, way to assume the worst and use "clever" and "biting" remarks to "refute" the original poster's arguments. He makes reasonable suggestions for the most part, and you jump on his case. Way to contribute to society.

      Matt

    2. Re:totalitarian dick... by swv3752 · · Score: 1

      I do not know why everyone is so up in arms about Samba (you do realize that is what 9 is about right?). It is a decent protocol for sharing files on a local lan but very open to abuse when open to the world.

      If someone wants to file share between apartments they can setup an ftp server or something. At least that is an intentional thing as opposed to what is probably going to happen regarding SMB.

      Scanning incoming mail is just a prevention technique. He is not saying disallow mail, just scrub it first. Do you really want the majority of your users to get hit with something like code red?

      --
      Just a Tuna in the Sea of Life
  69. Thing of the bigger picture by isotope23 · · Score: 4, Interesting

    Run cat5 if possible. Before you do that, I assume the condos have cat3 for phone? If so, how are they wired? It could be possible to use the existing cable to run on a 10 meg backbone, dirt cheap.

    You also need to think of other possible options.
    A big one, Voice over IP. With a 100 meg backbone in place, you could replace all the traditional phone service as well as providing internet.
    (some legal issues here to look at though).

    I'd implement it as follows :

    1. Do a SURVEY of interested tenants. Include VOIP as an option.
    2. check Cat3 option, use it if possible.
    3. Get some .11b wifi points for quick setup, rollouts to early adopters, and as backup gear
    when something fails... (it would really depend on how many IDF's you are going to place)
    4. Plan your IDF locations carefully. Remember environmental and power factors.
    5. Use the WIFI AP's to go from IDF to MDF on a temporary basis until you can rollout a fiber backbone.
    6. Monitor and then put Rate-limiting into effect for the people who abuse the service, i.e. mp3's and warez out to the outside world.
    7. Make clear service terms so the users know what to expect and what not to do.
    8. Someone will have to monitor/troubleshoot this service. If you don't have someone, an option would be contract out with a Local ISP, or
    perhaps a local computer consultant.

    Finally, for those not interested in paying a monthly fee, offer LAN access for free, (to get them hooked as it were)

    Without knowing more details the above is all I can give you. Hope it works out!

    --
    Service guarantees Citizenship! Questions Guarantee GITMO.... Amerika Uber Alles!
    1. Re:Thing of the bigger picture by toddestan · · Score: 1

      If you are going to survey the residents, I suggest you phrase things in English. 95% of the residents probably have no idea what CAT5, IDF, and WIFI are.

  70. DON'T DO IT by wmshub · · Score: 1

    You say you want your condo building to be its own ISP. This sounds like an awful idea. A good ISP spends a huge amount of time answering questions from users who can't connect/can't read their email/want you to get the email they accidentally deleted/etc. Do you really want to spend your whole day doing this? If you don't, then you're going to be a bad ISP - one that ignores its customers and fixes broken stuff when it is convienient for the ISP, not when the customers want it.

    So, either you are signing up to spend most of your day dealing with your neighbor's computer problems, or you are offering to give them a crappy ISP. Either way, I don't see much benefit. I'd say give it up, let the tenants choose their own ISP, and leave that work to somebody who is willing to do it as their full time job.

  71. Personal Experience by Iakona · · Score: 1

    I did a 160 unit student housing complex about a year and a half ago. The place was already built and the network was an after thought. Luckily each unit had a phone jack wired with cat 5. We used two of the pair for network and the other two for phone. We had to splice the end at the phone box and run it back into the complex (Which was a pain in the rear). For hardware we got some pretty nice stuff for the time. Essentially there were 7 buildings, each building had it's own 24 port switch with a gig uplink back to a central building. We were lucky enough that the distance was within our limits for doing copper, since fiber is considerably more expensive (about 6-10x more expensive than copper). My suggestion is to run copper as much as possible, unless price isn't a problem. For internet access we ran multiple t1s to the complex, and was natted / cached using linux nat, qos, and squid for a transparent proxy. The same box also provided dns, dhcp, and email. The setup works flawlessly, we've just had a few users who have caused problems (where a managed switch system would have come in handy, but is more expensive also.)

    --
    I'm not a real doctor, but I recommend beer.
  72. Don't forget the lawyers by tbase · · Score: 5, Insightful

    A lot of good posts about the hardware and connection, but don't forget your EULA. Some things to consider:

    1) Have a good privacy policy
    You may need to fall back on it if the authorities (or the RIAA) come knocking for your logs. If they badger you into turning them over without a court order, you could be in one of those stories about the criminals sueing because they got caught.

    2) Look at the big ISP's agreements for ideas
    You may see something you hadn't thought of.

    3) Lawyers are much more cost effective when used to prevent you from being sue, rather than defend you after the fact. Think about having one draft or review your agreement.

    Not trying to scare you, just make sure you're covered if the guy on the third floor turns out to be a pedophile, terrorist, or (gasp) file trader. :-)

    --

    666-607: 6th floor apartment of the beast
    1. Re:Don't forget the lawyers by Blain · · Score: 1
      Not trying to scare you, just make sure you're covered if the guy on the third floor turns out to be a pedophile, terrorist, or (gasp) file trader. :-)

      Ah. So you've noticed that guy on the third floor too? Good. I thought it was just me! I was kinda thinking terrorist, but he could be a file trader too.

      Now, do the voices talk to you too, or is that really just me?

  73. Try this company.. by Anonymous Coward · · Score: 0

    Check out www.travelnet.ca. They specialize in installing in installing DSL-like services in hotels and condos.

  74. Earthwave does my condo by FathomIT · · Score: 1

    A company just wired my building in Washington DC. They charge $19.95 per month for DSL. Not bad for 1.5/384. Think they only provide service in buildings around the DC metropolitan area.

  75. LOL! by isotope23 · · Score: 1

    I meant thinK not thing! LOL

    --
    Service guarantees Citizenship! Questions Guarantee GITMO.... Amerika Uber Alles!
  76. talk to your by geekoid · · Score: 1

    phone company about T1 pricing. Get the T1 to a head in point, shoot it wireless, put repeaters in peoples attic.

    You have now removed the wiring from trouble shooting issues.

    Be smart, keep controls in place to prevent war driving.
    Get an agreement people must sign that basically say "no spamming, you are responcible for what you do."

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    1. Re:talk to your by CrackersnSoup · · Score: 1

      You have now removed the wiring from trouble shooting issues

      BULLS#!T!!!!!! Wire is FAR easier to solve then wireless. Also, the wireles you sugest is what, .11a/b/g??? .16g? Any yo-yo with a linksys and a amp could(and would) take it down. Wire you install, crimp, test, it works or it doesnt. A cheap switch(say hub and die) or a VPN switch and a Mikrotik auth server/bw monitor, 1|2 T1's and your done. Crackers`n`Soup wISP Network Administrator

  77. Re:Why DSL - Ethernet? by schon · · Score: 1

    DSL is a type of Internet connectivity, while Ethernet is a type of generic computer connectivity.

    No, it's not.

    DSL is just as much "general computer connectivity" as ethernet. Just because most providers use it solely for IP, doesn't mean that's all it can do.

    DSL can be used to send anything - IP, IPX, Appletalk, whatever higher-level protocol you want.

  78. someone got it right... by The+Herbaliser · · Score: 1

    This reminds me of a condominium development I was looking at in Toronto with some seriously cool high-tech toys. My friend's dad was one of the architects. Here's to hoping the market crashes soon and I can pick up one of their units. I think the same developers might have done a cool project in Vancouver as well.

  79. use Cat-6 in the units by Archfeld · · Score: 1

    in standard wall plugs with ether connectors, rca jacks, and power plugs, use a wireless access point for each building group. The local wire prevents you from having bleed over when 8 people all turn on their wireless stuff at the same time, as well as covering you in case some other great technology starts using the same frequency, not to mention when the idiot in 2b chanegs frequencies and can't fix it :) With each large condo unit on a wireless point you can manage remotely and control access via mac verification.

    --
    errr....umm...*whooosh* *whoosh* Is this thing on ?
  80. Wiring Condo's - DSL or HPNA is the BEST way by Anonymous Coward · · Score: 3, Insightful

    Obviously the technofreaks out there don't have a clue about cost or project management. You need to run DSL or HPNA to each condo for management and liability reduction (yeah, lets run ethernet so we can all sniff what our neighbors are surfing). With DSL (or we've had great luck with existing infrastructure running HPNA) you get complete control over who gets what type of bandwidth. The need to get a DSL or HPNA end-device will keep most of the moochers off your network. Let the condo owner decide how much bandwidth they want to pay for. As to one T1 line not being enough for 160 condo's, I'd put one in and see what your subscriber base is, you can always add another and split your user base by IP (another great reason to use a mini-DSLAM or HPNA Switch for distribution). Most companies run around 100-150 desktops on a single T1, so clamp streaming media and FTP to a reasonable level and most people will be happy. Ignore the Slashdot regulars (cat 6, fiber, WiFi - get real), they live in their own (mostly imaginary) world.

  81. Don't listen to the naysayers by Anonymous Coward · · Score: 0

    When people say 'I get 3.5 mb from my DSL' and 'a T1 isn't going to be enough', ask your self, do they know what they're talking about? We have a T1 (which I'm on right now) and for 100 users, we use a whopping 5% of it. Double that and you're at 10% - whoopie!

    Sure you can get a line that rates at 3.5 mb, but what, besides P2P, does that really make go any faster? All my downloads max out well below the max rating for my line - both at home and at work.

    Before we get into an argument about what is and isn't broadband, let's all agree that some research needs to be done before anyone decides if a T1 will be enough...

  82. Internet Co-op at my condo by JimmytheGeek · · Score: 1

    We have around 25 units and share a T1 over 10baseT. It's fine for now. But I would have gone Cat6 if I'd spec'd the job. Condo rental property depreciates over 27.5 years. That means the IRS expect the building to still stand in 30 years. You might wish you had put Cat6 in. Fiber isn't that expensive to add while you are at it (labor will be the big expense).

    Since condos don't move around, I think wire will have a signalling advantage over wireless for the forseable future. If the laptops INSIDE the condos move around, let them go WAP, but link upstream over landline.

    This sounds like a much simpler, sensible situation than DSL to each condo. Cat 5 is cheap, cat 6 is not expensive.

  83. Been There, Done That by bigfatdonny · · Score: 2, Interesting

    The consulting firm I worked for did similar installs for a large real estate company. Here's what we did:

    1) Get a DS3 in a central building.
    2) Install a linux based traffic shaping and mrtg box.
    3) Split upload bandwidth evenly among tenants so nobody clogs up the pipe with porn servers.
    4) Prioritize http and pop3 download traffic
    5) Run fiber from the main building to each building in the complex.
    6) Run the fiber into a fiber module in a switch in a closet in each building. From there, run cat5 to every apartment in that building.
    7) Use DHCP to hand out a live class c.
    8) Label all the wires and unplug people from the switch in their building if they don't subscribe.(Our setup was part of rent, so we didn't have to deal with this.)
    9) Use MRTG to see who's using tons of upload and sniff their port. If they're doing anything horrible, have a talk with them. (You should make a comprehensive TOS agreement so you can disconnect spammers, kiddie porn servers, etc.)
    10) Prioritize and uncap all bandwidth to your apartment, and enjoy.

  84. DSLAM by Anonymous Coward · · Score: 0

    If you are set on implementing DSL, Zyxel (www.zyxel.com) offers some DSLAMs that are completely IP based and connect directly to ethernet on the backside. The models are the IES-2000 and 3000. I'm not sure of the price point but it might be worth a look if it will simplify your instalation.

  85. What a dumb idea by Dr.+Evil · · Score: 1

    You don't know how to run an ISP, so you're going to try to force a building into becoming your captive customer base?

    What's the advantage? Why would you want to raise everyone's condo fees? Don't you have an ISP around to do this stuff?

  86. Wireless would be more cost efficient by digitalgimpus · · Score: 1

    I would go with getting lots of WAP's. Run whatever cable/fiber you choose up the building in key places, and load the place with 802.11g WAP's.

    Then sell access to the wap's.

    The cards aren't that expensive... and if you buy in bulk, you can most likely get some sort of a discount.

    It's compatible with any computer, and cheaper in the long run to upgrade. The WAP's can be easily switched or upgraded. And the only cabling is rather limited in length. it only links the WAP's together.

  87. Installing a DSL system in your condo is hard, and I think it'll run you over $250k easily. That said, it's not impossible. We construct this stuff in our labs for test purposes. You need knowledge of ATM and IP routing. Unfortunately very few all IP systems exist, although that is certainly the future, unless your corporation is like mine and caters to telephone company monopolies (ILECs). server and to help your clients get configured. Given this, you need several pieces of equipment. We use a setup that looks basically like: add/drop mux for T1, to router, to DSLAM. You will want a "radius server" connected to that router I imagine, but I know nothing about those. You'll also need to make sure the line cards you get for the DSLAM are compatible with whatever CPE equipment (DSL modem) you plan to install. I recommend going with all ADSL (G.DMT) based stuff right now. Especially if you only have a single T1. Then you hook it all up, and spend a week or so learning how to configure the DSLAM and then the router. It's not easy, but not too hard if you know IP and ATM. Supporting this will be a little tricky... I'm legally bound not to discuss price, but this is a somewhat expensive solution that's going to cost you over $250k not to mention support. You might be able to get away with a standard ethernet installation and just forget DSL. Personally if I had the money you are planning to invest in DSL, I would instead think about fiber & ethernet. All my interaction with "new" data line installatinos indicates most people don't want the cost or mess of DSL, ATM, telco's and their vendors.

  88. Network fine, people not... by Anonymous Coward · · Score: 0
    Unless this particular condo complex has uniquely evolved to contain people of similar minds, I would predict doom for completely non-technical reasons.

    Consider that building this community network will inevitably place a few people within reach of information about their neighbors that they really shouldn't have, and will create a situation where the manager(s) of the network will be forced to perform some level of monitoring to further the common good (like traffic measurements by protocol).

    When problems happen, and you know they will, won't it be fun to run next door and ask neighbor Jones to please stop downloading DVD rips of Girls Gone Wild(tm) since neighbor Smith is having trouble hearing the streaming audio from Jimmy Swaggart. When it comes time to distribute the cost of a bigger upstream pipe, will everyone pay based on their actual usage or will some people be underwriting their neighbor's Internet access?

    I've noticed that most condo developments end up with about 10% freedom loving people, 80% sheep, and 10% neo-fascist busybodies that want to regulate what color flowers you grow in your kitchen window... which group do you think will volunteer for the "Network Usage Review Committee"???

    [posted as an AC so my neighbors don't find out and disconnect me!]

  89. It Must Be a Slow News Day by tarsi210 · · Score: 1
    In Other Ask Slashdot Posts:
    • How Should I Install a Harddrive, with or without a cable?
    • Should I Use a CRT or a LCD?
    • Can Floppy Disks be Used to Hold CDs?
    • Who is this CmdrTaco, anyway?
    Not to complain folks, but haven't we seen this before, or am I at the office of the Department for Redundancy Department?

    On Topic: Go wireless. Nothing to pull, 11Mbps transmission rate, and as secure as your grandma's dentures. Woo!
  90. ip addresses, nat, and accountability by tstoneman · · Score: 1

    One thing not mentioned is ip addresses and NAT. Are you going to use NAT or will each unit have their own ip address?

    If you go with NAT, how will this affect the users, especially the gamers? Will the hardware that you buy support multiple people using udp (ie. quake, counterstrike, etc) in a NAT configuration? I'm not a guru, but that would seem to be hard... not super-hard, but hard because you have 160 units connected. If several units are trying to play cs on the same server, can NAT actually solve this problem, since the traffic is udp? If it doesn't, will this generate a support call to you?

    What about VPN (ie, pptp, or ipsec)? Some firewalls can only support one pptp VPN connection out, so you would probably want something smarter.... or do you disallow VPN? Then people who wanted to work from home won't be able to.

    What about accountability? What if you are using NAT, and someone in a unit distributes kiddie porn, and the FBI comes knocking on your door. Will you be able to figure out who did it?

    Like many other people have mentioned, support is the key.... if you advertise this internet connection, and it goes down, will you be liable for any losses? If some people work at home, and the connection drops, will there be someone around to debug the issue? Will the people who work from home be SOL? Is there's a problem with the T1 connection, you will still get the phone call, and you would have to phone the ISP....

    I'm not saying this is a bad idea, but these are just some things to consider.

  91. One Cat5 caveat: Spring for "plenum" rated wire. by Ungrounded+Lightning · · Score: 3, Informative

    I'd just say go the simple and tried and true route w/ cat 5. I mean...come on, can you go wrong with cat5?

    I agree totally with those suggesting using 100 Mbps Ethernet over Cat5. That's definitely the way to go. (Use DSL only if your condo is a subdivision rather than a building.)

    One caveat: If the Cat5 is run in anything other than conduit - especially if it's run in an air duct - spring the extra bucks for "plenum" rated wire. In a fire the ordinary stuff may emit toxic gas. Plenum-rated wire is designed to retrofit old buildings by stringing it through the air ducts, and uses a more expensive plastic that does NOT emit toxic gas (or nowhere near as much) and also doesn't spread fire.

    One other item: Check what your building's phone system is already wired with. There may already BE a 4-pair cat5 or cat5e to each unit. And if the phone company's demark point is the phone closet rather than the unit's phone junction box you folk OWN the wire. So if a unit has any two pair free you can use 'em and not have to string new stuff.

    Note that 10/100 ethernet only uses two of the four pair in the bundle. Traditionally it's pair 2 (white/orange) and 3 (white/green), leaving 1 (white/blue) and 4 (white/brown) free for other things - such as a second ethernet drop, one or two phone lines, or power distribution to distant hubs and/or low-power equipment.

    But the pair are all the same (except for the color code). So you can use any two pair for the ethernet feed, and sort it out at a junction at the far end. You can generally splice 'em if you're careful to keep the lengths of the two conductors in the pair equal and twist 'em back together afterward. (Don't sweat getting the twist rate to match exactly. Just avoid having a big untwisted gap with the wires hanging apart.)

    Run one drop to the unit and have the unit's owner add a hub (or his own firewall machine) if he wants to run more than one box.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  92. DO NOT DO IT by Anonymous Coward · · Score: 0
    I work for a company that makes DSLAMs. I do low level software development for DSLAMs.

    BY GOD DO NOT DO IT.

    You do not want ATM anywhere near your neighbourhood. You don't want all the complexity and diversity of various encapsulation protocols, you don't want all the ATM VC control crap, you don't want to fuck with the drivers trying to get them to allocate the buffers PROPERLY GOD DAMNIT, you don't want to find out that Conexant based modems lose 50% of packets in 1483 bridged mode for no apparent reason, you don't want to spend nights looking at AFE graphs trying to figure out why DMT wouldn't enter show time, you don't want - and I mean you really don't want to look for a decent god damn ADSL router like we do - because they simply DONT MAKE THOSE anymore, you don't want to spend your smoking breaks thinking about how you'd correct Zyxel developers' heads with a fire axe, and wanting to strangle Virata for using an OS that crashes each time you try to modify a configuration created from the web interface through the console.

    You just don't want it.

    You don't want any of it.

    You don't want to be me.

    Seriously, go wireless.

  93. DSL support issues by brahms3 · · Score: 1

    Coming from a telco that has recentlt gone into DSL in South Africa, there may be problems down the road with respect to supporting DSL lines within the building. Even though the distances are short, there are often funnies where a copper pair needs to be swapped out if a problem is taking too long to resolve (usually water in a joint somewhere, or a parallel AC power cable, or someone decided to call the phone company to fix their phone, phone techie kows nothing about this DSL setup and wires get moved/unplugged/rerouted etc.) You also don't want to be doing extensive infrastructure support if you can help it. If you go this route I would suggest getting a company in the business to support the infrastructure. You need specialised test equipment and experience often to diagnose problems, and those tests can come in at a whole amount of dollars. The hassles of supporting your own DSLAM/mini-DSLAM (exchange equipment) may be worth avoiding. 100MB Ethernet if you have the option is much less fussy about external interference, and is probably easier to maintain. You save the costs of individual DSL modems per customer and the setup of those. No DSLAM, just a good reliable Ethernet switch or two. You also need to decide if you want your users to go PPPoE or static routed connections. Static connections DHCP'ed with a pool of IP addresses is a lot less hassle and would be the way to go I'd think. If you want open access for everybody, then this is the easiest way to go. Users just have to turn their machines on and they're connected to the internet. With an open Internet T1, PPPoE will require you to do the PPPoE server and internet connection sharing, username and password administration. Good luck, your users will with any luck love you either way!

  94. Another Proposal by Anonymous Coward · · Score: 0

    How about you give another proposal....to get someone that has a clue with networking. Using DSL for 160 apartments. I mean seriously.

  95. Posters missing the point? by Anonymous Coward · · Score: 0

    Correct me if I'm wrong, but part of the original plans for the existence of DSL involved -NOT- having to rewire.
    If you're putting up a new building.. good for you.. wire cat-5 until your heart's content.

    And yes, a T1 would be plenty for 160 units. Just ask your local telco what their overbooking ratios are.. probably similar.

    Talk of putting in a fractional DS3 or multiple T1's is ludicrous... unless all 160 residents are telecommuting and 100% bona-fide geeks.

  96. TrollKore 0wnz j00 by Anonymous Coward · · Score: 0

    -PENIS--PENIS--PENIS--PENIS-
    P_______________________8..P
    E__Bow down to the_____#~..E
    N__Lord's penis_______8.',-N
    I_____________________#',-.I
    S__Jesus wants your__8',-..S
    -__anus, and he_____#~',-..-
    P__wants it NOW! ___8_',-..P
    E__________________##',-',-E
    N__An original_____8',-',";N
    I__TrollKore(TM)_____##',-',";I
    S__work of art.___8',-',";.S
    -__By Dessimat0r ##',-',";.-
    P________________8',-',";,.P
    E_______________#'',-',";,.E
    N______________8(',-',";,..N
    I_____________#(',-',";,.,.I
    S__________#8#8_',-',";,.,.S
    -_________#',-.8',-',";,.,.-
    P________8~',-..#',-',";,..P
    E_______#'',-',";8_',-',";.E
    N_____8=',-',";.+#+',-',";.N
    I____#=',-',";,._8',-',";,.I
    S___#=',-',";,..(#',-',";.8S
    -__8(',-',YOUR,.(8',-',";s#-
    P_8(',-',MOTHER";#',-',-s8_P
    E_#z',-',LOVES,";8',-..s#__E
    N_8_.,#',"YOU',";~#,..88___N
    I_#.##',-DEARLY,";~8,.8#___I
    S_8##',-+~'',-',-~#'8______S
    -_#.,..-',-',";.'=8#_______-
    P_.8+_',-',";,.'88_________P
    E___888',-',";~8___________E
    N______8#888#88____________N
    I__________________________I
    S____.oO TrollKore Oo._____S
    -_At the head of the game._-
    P__________________________P
    E___irc.freedomirc.net_____E
    N_______#trollkore_________N
    I__________________________I
    S__________________________S
    -PENIS--PENIS--PENIS--PENIS-

    All you cock-loving fuckers out there, here is a special treat for you bastards, take a look at this knob. NOW SUCK IT, MOTHERFUCKERS!

    You are not logged in. You can log in now using the Important Stuff: Please try to keep posts on topic. Try to reply to other people's comments instead of starting new threads. Read other people's messages before posting your own to avoid simply duplicating what has already been said. Use a clear subject that describes what your message is about. Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page) If you want replies to your comments sent to you, consider logging in or creating an account. Problems regarding accounts or comment posting should be sent to CowboyNeal the convenient form below, or Important Stuff: Please try to keep posts on topic. Try to reply to other people's comments instead of starting new threads. Read other people's messages before posting your own to avoid simply duplicating what has already been said. Use a clear subject that describes what your message is about. Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page) If you want replies to your comments sent to you, consider logging in or creating an account. Problems regarding accounts or comment posting should be sent to CowboyNeal har

  97. What the hell? Why not go Ethernet? by Anonymous Coward · · Score: 0

    This is the dumbest thing I've ever heard. Just put 10/100 ports in each condo and connect them all to a central switch and router. My apartment complex does this. They even have DHCP set up so all a user has to do is plug in and turn on and they're wired.

  98. Options by isotope23 · · Score: 1

    I assume everyone in the area has wired phone service? If so, try to get a deal with the local telco to access cable coming off their terminal that feeds the area.

    The telco will fight you on this, but here is a way around it. Find a motivated salesperson with the telco. Point out to him that with access to the local loop you will be in a position to buy a T-1 from them (whereas they currently are not making any money from DSL etc) If you find the right guy/gal, they will help you through the process. You will still have to jump through hoops, but it wont be as bad with someone on your team. Then put your own DSLAM in place. This wont give you the bandwidth that fiber or 100mb ethernet would, but it will be cheap, and easy.

    The other option is do fiber between the homes. This can get messy though. I'd probably use a mix of wired/wireless as it sounds like a low density project.

    --
    Service guarantees Citizenship! Questions Guarantee GITMO.... Amerika Uber Alles!
  99. Re:Log files by tomhudson · · Score: 1
    So why not just delete old log files on a regular basis, as a cron job. Frees up disk space, and saves you the legal hassles as well. All you have to do is stall them until the job kicks in ...

    After all, why do you need log files from a year ago (or even 2 weeks ago). Either you've fixed any problems the logs show, in which case you don't need them, or you haven't in which case, they'll show up in the next batch of logs.

    Of course, you SHOULD save the entries that point out attacks on your system, but that's incoming traffic originating from outside, which should be dropped by your firewall anyway with a half-decent config file.

  100. DSL vs. Cat5 interenet by Anonymous Coward · · Score: 0

    I only scanned the posts quickly so this may be a repeat suggestion:

    The difference in costs between whether or not to use DSL or cat-5 ethernet will be determined by how easily you can purchase and run the cable.

    If these are high end dwellings, residents will be much more particular about not seeing cable stapled to the moldings and ceilings of all the hallways.

    HVAC units placed on the outside of the building sometimes provide plumbing chases that can be widened for extra cables

    If you absolutely cant run new cable, or the distances make it unattractive, and no one wants WIFI, then DSL is the way to go.

    The nice thing about DSL is that it will let you use all of the existing phone cable. The phone cable will need to all be brought to a single demark. At the telphone junction point the pairs are bridged to the DLSAM multiplexer. A modem will be required for each user to separate DSL from phone data. Phones in the DSL enabled dwellings will require filters on the telephones to remove the DSL noise and to keep the phones form killing the DSL carriers.

    Consider doing a DirectTV multi dwelling unit installation while your at it.

    Companies like Gatehouse http://www.gatehousenetworks.com/cable.html
    can deliver a package of DirectTV programming to each condo using a single dish and at lower prices than the local cable company likely can. They will also provide financing and engineering for both video and data services.

    Verizon also has Verizon Avenue that specializes in providing internet packages to condominiums.

  101. id do this by NoRemorse · · Score: 0

    id run fiber/cat5/6 to each unit and wire it up and those who dont want it or "forget" to pay get theyre cable unhooked from the office/phone room

  102. Re: Bad advice by Anonymous Coward · · Score: 0

    6) Set up your own caching server.
    For 160 units where less than half would probably even use the proposed internet access? Pointless waste of time.

    7/8) As for the mail... hmmm... depends on if he really needs to go through the trouble of offering onsite email services anyways. Seems like a lot of BS trouble for a 160 unit condo where less than half will probably even use it. I'd sub-contract that to another ISP or the ISP he gets the T1, etc, from.

  103. Re:umm you're gonna need more than a T1 for 160 un by afidel · · Score: 2, Insightful

    How do you think that DSL line costs $30/month for 128/128? The answer is they are oversubscribed by several times (typically ~5x for broadband, about 12x for dialup). No one does 1:1 badwidth, you could never make money on it and most of the time you would have huge amount of bandwidth sitting idle.

    --
    There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
  104. Suggestion by Anonymous Coward · · Score: 0

    If you set one up, post a webpage explaining what you did and how you did it with your new space when your finished!

    Thanks!

  105. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  106. DSL ideas by Mikeytsi · · Score: 1

    This is what I do for a living, so I think I'm qualified to answer for you.

    First, you need to know if you have a central demarc or not. If all the phone pairs in your complex don't go to one central location, DSL is going to be a bad idea. If you have a central demarc, the job is easy. Throw a TUT systems expresso chassis in the telco room, (if you hook up all 160 units, you'll need two), plug it in to a router, plug the router in to the T-1. TUT is built to run over POTS, so you just jumper the lines over the phone pairs.

    If you don't have a central demarc, things get more difficult. In that case, I'd suggest running a TUT mdu lite at each building (I'd need more information to know if this would be feasible or not), and then either trenching a cat5 backbone or running wireless shots to where you define your demarc for the T-1.

    I don't really recommend wireless to the desktop in MDU (multi-dwelling unit) applications, since it's such a pain in the ass to get wireless signals to go through buildings reliably, having that many transmitters will give you rather serious problems with overlap, lots of stuff interferes with it, and the amount of money you'd spend on parts and labor to get the kind of saturation you'd need gets pretty cost-prohibitive.

    If you want more information, feel free to e-mail me.

    --
    I've been called a "Fucking Dick" by better people than you.
  107. Don't forget billing !! by teambpsi · · Score: 1

    And someone has to be responsible for paying the ISP connect charges.

    Are you going to factor it into association fees?

    Or were you going to volunteer to handle it in GNUCash in your copious spare time ;)

    --

    Old age and treachery almost always overcome youth and skill.
  108. Re:T1? Is that all? by FattMattP · · Score: 1
    Ah, but a T1 is guarenteed bandwidth
    Until some asshole installs Kazaa and leaves it at the default setting of 'unlimited' for the bandwidth usage. That and they don't realize that when they close the window it just iconifies to the icon tray next to the clock. Then your outbound connection will be saturated and interactive sessions like ssh will suffer greatly.
    --
    Prevent email address forgery. Publish SPF records for y
  109. Our Condo Experience by sunbane · · Score: 2, Informative

    We have our condos all wired with cat 5e individually pulled to every room (enough to do two phone lines and your ethernet to every room). We went through a third party group that took care of the wiring as the units were built and manages the connection for us... we basically have 150 units and one shared T1 line. We have a little box on the outside of each condo building with a little hub (you don't have to worry too much about bandwidth so go cheap - T1 is not going to give you gigabit speed!) with a lock to keep people out.

    For the most part, it is quite adequate - downloading the latest Matrix trailer or a couple mp3s can't be beat... in non peak (evenings and weekends) periods the bandwidth is quite plentiful. You will get the occasional abuser though (you'll want the ability to sniff out who is doing major downloading) and you'll also run into people misconfiguring their hardware so you'll get a rogue dhcp server or two going you have to track down (have to admit, my little linksys box got carried away one time!)

    An added bonus is that with a T1 you usually get a bunch of static ip addresses available too, so those that have requested it in our complex have had their wish granted.

    Overall, we pay $15 a month on our HOA dues for this access - pretty good deal. We are actually requesting (and we'll probably get it down the road) a second T1 line as well - as the costs come down it is even more economical. We also get directtv services through the same 3rd party - those that don't pay their hoa dues get their net and tv turned off - good incentive to keep people paid up too! :) (And we get a discount on directtv for a large group as well)

  110. Look into a TUT system by Cranst0n · · Score: 1

    Where I work we have been doing this same sort of thing for Hotels. When we set them up we use a TUT system (http://www.tutsystems.com) for splitting it all up, a freebsd server, and a router. The nice thing about the tuts is you can internally enable or disable each individual port (apartment) on the tut system itself. With this sytem and how well it is working out, we keep getting more hotels as clients.

    --
    Just realise the reality of the situation..... There is no reality.
  111. liability? by Burnon · · Score: 1

    Do you really want your condo homeowners' association to be legally liable for the conduct of each of your subscribers? With all of the legal action we've heard about targetted at ISPs of late, I'd think this is an invitation to bankrupt your HOA. Personally, I wouldn't touch this proposal with a ten-foot pole...

  112. Long reach ethernet (no pulling cable!) by ahkbarr · · Score: 1

    Mine are very simple suggestions, and probably not exactly what you need, but I need to address some of the ideas being bongled about:

    On the physical aspects
    1. NO TO PULLING ETHERNET!
    2. Cisco Long Reach Ethernet switches allow ethernet signaling over phone wire. Can supply 15Mbps over up to 1500 meters.
    3. You can do DSL too

    On the logical aspects
    1. Only run a transparent proxy, and run it on openBSD
    2. Do not worry about viruses.
    3. Use a firewall. (You can make your own cisco PIX!) I can't find my links right now, but reply to this if you're interested and I'll find them and give them out.
    4. Only supply a connection, the only services you should try to supply are what saves bandwidth like a transparent proxy.
    5. How much do you want to spend on public IPv4? Would your tenants like rfc1918 privates?

    OK, did that help at all?

    --
    Compared to war, all other forms of human endeavor shrink to insignificance. God, how I love it. - Gen. George Patton
    1. Re:Long reach ethernet (no pulling cable!) by NerveGas · · Score: 1

      Do not worry about viruses

      Deciding you're not going to worry about them is one thing. Dealing with 160 irate customers that *think* you should is entirely another.

      How much do you want to spend on public IPv4?

      I don't spend *anything* on public IPv4. I justify the usage to my upstream provider, and get all that I need, for free.

      steve

      --
      Oh, you're not stuck, you're just unable to let go of the onion rings.
    2. Re:Long reach ethernet (no pulling cable!) by ahkbarr · · Score: 1

      My point about the virus thing is that you simply can't unless you're going to invest a lot of hours worrying about it.

      With 160 customers, and not 1600, you're mosre likely not going to be able to afford a nice fluffy customer support.

      Supply a disk with Kerio Personal Firewall, some documentation, and limited installation support, and off they go, they've been warned.

      --
      Compared to war, all other forms of human endeavor shrink to insignificance. God, how I love it. - Gen. George Patton
  113. Oversub by Anonymous Coward · · Score: 0

    I think your best bet would be to get a wholesale/low-SLA T1, a used Router, a few 48 port stacks and just drop the Cat5/faceplates in each condo. The price is minimal.. And really unless your DSL provider's AUP allows you to share, if they cut your dsl for AUP violation, your going to have a lot of pissed off people.

    Here in TX, you can get T1's for 150$/piece for the loop itself, then usually another 3-400$ for bandwith depending on who you go with. So let's say 600$/month for all you can eat wholesale T1.

    According to Bell's calculations, they put up to 200 subscribers onto a T1 for DSL. Which is way over-subscribed but doable. Start with a Burstable T1 and go from there. Also what are you charging for this? If you decided to include it as an Add-on, at let's say: $45/month to absorbe your montly bandwith costs you only really need about 20 users. By the time you hit 100 you could easily have a DS3/T3 in there no problem, as they are even cheap depending on where you live.

  114. A couple of ways to do it. by NerveGas · · Score: 2, Informative

    First, forget DSL. It simply isn't reliable enough. Being out of connectivity is bad enough, having 100+ people mad at YOU because they're out of connectivity is even worse. Use a t1, multiple t1's, or a t3.

    Here's the easy, cheap way to do it. Go over to ebay, buy yourself a Cisco 1720 with a Wic-1T-DSU card in it. Your t1 plugs into the WIC card, and ethernet port on the router plugs into your switch. You'll be able to do bandwidth limitting and port filtering as well.
    From there, the only question left is the distance involved to the condos, which would dictate the structure of the ethernet design.

    There are a few flaws with that design: First, with everyone on the same L2, there's no end to the mischief that someone can cause. Second, virii capable of exploiting the "network neighborhood" will spread like wildfire.

    If you want to do things a bit better, put a firewall/router in each building, and wire those back to your central distribution switch. The "router" can be a $40 machine from the thrift store, with a couple of 4-port ethernet cards in them. Each ethernet port can be on it's own subnet, with appropriate firewalling on a *per port* basis. That will help you prevent lots of accidental and intentional problems that can crop up.

    Of course, with 160 units, 1 t1 is pretty small. That only guarantees each unit about 10 kbits/second, which is lees than a 14.4 modem. Of course, not everyone is going to be on at the same time, but even if 1/10th of the people are on, that only guarantees them about 100 kbits/second.

    When you also look at the fact that some people will use as much bandwidth as possible, then it gets even harrier. Let's say that you can each individual's bandwidth at 256k, with bursts to 512k. That means that it only takes 6 people downloading ISO's, using their favorite P2P app, watching streaming porn, or anything else to really make the connection suck for everyone.

    Shop around, and see if you can get a good deal on a larger connection. Not long ago, I was offered a full DS3 (45 mbits/sec!) from Broadwing for $6k per month. While $40 per month might sound high on a per-unit basis, remember that would *guarantee* 768 kilobits per resident! There are very few places you can get that sort of *guaranteed* bandwidth for $40 per month *anywhere*.

    steve

    --
    Oh, you're not stuck, you're just unable to let go of the onion rings.
    1. Re:A couple of ways to do it. by citking · · Score: 1
      Some problems with your concept:

      First, not everyone is going to want to pay $40.00/month for internet, plain and simple. Unless the condo is designed specifically for high-end users, people will probably feel better and more secure paying $40.00/mo. for their own DSL instead of "sharing".

      Secondly, 1 T1 for 160 should be more than enough. Even if every unit was full and everyone was online, the chances of being limited to 10kb/sec is very small (unless that one instant came along where all 160 people were downloading at exactly the same time). Also, 10 kb/sec is not slower than a 14.4 modem...a 14.4 modem would only grab at most 3-4 kbps. Ask anyone running a 56k and they'll tell you that the max we can ever pull on a great day is around 10-15 kbps.

      Otherwise, except for wanting to "overdo" it technology-wise, your plan is pretty solid.

      --
      "This food is problematic."
    2. Re:A couple of ways to do it. by NerveGas · · Score: 1


      Yes, a t1 for 160 people is too small. I know people in codos with less than 100 users on a t1, and it *sucks*.

      Yes, 10 kbps is less than a 14.4 modem, as a 14.4 modem will reach up to.... 14.4 kbps. You're confusing bits with bytes. Here's a tip: You rarely, if EVER, see anything other than "bits" when talking about network equipment. 56k modem? 56 kiloBITS. T1? 1.544 megaBITS. T3? 45 megaBITS. Ethernet? 10 megaBITS. FE? 100 megaBITS. GE? 1 gigaBIT. I use a "56k" modem, I regularly get 35+ kbps.

      Here's the real problem with a t1 for 160 people: While it *can* be done, in order to keep the few bandwidth hogs from ruining it for everyone, you need to limit each user's bandwidth to the point where it's really not worth even $20 per month. Think about it. Where *one* single user with a P2P app can eeeeasily saturate a t1, what are you going to do when you have only *five* people with P2P apps? With 20, 50, or 100 connections each, the person next door trying to check his online banking (through one single connection) is going to have an awfully hard time trying to compete for bandwidth.

      So, what do you do? Let's say that you limit each person's bandwidth to 512k. No good, those five people still max out the line with ease. 256k? Well, they don't max it out, but they come awfully close. It won't take many people with legitimate traffic to fill the rest, and bam, things start to suffer. I won't even *touch* the subject of what happens when one person sets up an open relay/proxy.

      Given the choice of paying $15 per month for a connection I'm not sure of, and paying a measly $40 for a *guaranteed minimum* of 768k, I know which one I'll take.

      I also know which one MOST people will take. By the time they pay for a second phone line and an ISP, guess what! That's $40, and they're on a measly 56k connection. Give them the chance to spend it on a *real* connection, and you're in business.

      I'm not blowing smoke out of my bung hole here, I'm speaking from experience.

      steve

      --
      Oh, you're not stuck, you're just unable to let go of the onion rings.
  115. Why DSL? by emorrison · · Score: 1

    Why not use LRE (LAN DSL)? Drop a T-1 into the condo add a Cisco router, LRE Switch (24 ports), Pots splitter and the CPEs to provide the resident access (this will be modular, so not everyone has to be signed up and going at once and you reduce your implementation expense). You lose all the wire running, wireless insecurity, gigabit and fibre expense. People will get their data service off of the same pair of wires as their phone service, they'll have a network to share files (if they so chose albeit at a reduced speed 3 - 5 MB). Everyones happy. You collect a nice phat pay check and or you are the local hero.

  116. LRE might work by Bodhammer · · Score: 1
    If the cost of running cable or fiber is expensive, you may be able to use existing wiring. Cisco has what is called Long Range Ethernet (LRE). Supposedly you can run this stuff over barb wire...

    http://www.cisco.com/en/US/products/hw/switches/ps 4916/index.html

    --
    "I say we take off, nuke the site from orbit. It's the only way to be sure."
  117. Why DSL? Build a LAN! by jordandeamattson · · Score: 2, Interesting


    Why are you going DSL? This doesn't make sense to me. Rathe than DSL you should be looking at getting a T3 (forget a T1 it is puny) and then split that bandwidth among folks.



    Here is what I would do: I would get the T3 and drop it into your switch room. I would then have a primary switch with 1000 Base-T. I would then divide the complex into zones such that a single switch can service all of the units in that zone. I would then run connections to each and every unit from the zone switch.


    Of course, you want management in the switches, so that you can control how much bandwidth folks have. This would allow you to charge different rates based on the bandwidth allowance. For example, you could have a basic level of service built into the homeowner association dues, but let folk with a bigger appettite purchase more and more bandwidth. You will also want a firewall (I would look at the Netscreen) at your head-end to protect the whole thing.


    Of course, this assumes that you are able to run lines into folks houses - it might not be as expensive as you think. But if that is a big cost, replace the switches with wireless base stations and it looks about the same. In fact, going wireless would have a lot of advantages and you might want to consider it. Of course, build it secure.

  118. Check Out Tut Systems by davet2003 · · Score: 1

    If you can run pure ethernet at a cheap cheap price than go for it. But if you want to utilize the existing copper I recommend checking out TUT Systems (www.tutsystems.com). Their expresso product line has been deployed in hotels, college campus, apartments, shopping malls. Their solution is cheap and reliable. With the combination of the expresso and sms platform you can deliver a true turnkey solution to the condo. Give them a shot.. I guarantee that the products are the cheapest on the block.

  119. DO NOT DO IT!!! by Anonymous Coward · · Score: 0

    Who is gonna support/troubleshoot the computers/network for 160 apartments? Do you have that kind of time? Are they gonna pay for your time?

  120. Noooo, I no see no Microooosoft. by twitter · · Score: 1
    Setting up an open network and refusing to go out of your way to protect and aid your windoze users is not equivalent to telling people what OS to use. If windoze users fall on their face in such environment they can complain to Microsoft. That's what they paid for, remember?

    You have the chance to give yourself and your neighbors bandwith that does not suck. Instead you make it the equivalent of fast dial up plus custom M$ updater. You do this with DHCP (invented by M$?) and lock it up paranoid of M$ viruses. To do all this work, you need to buy filtering equipment to block ports and communications between units based on M$ usage of those ports. Bogus and all M$ inspired.

    I count Items 7 through 13 as M$ inspired or fearing. Normal OS have well configured mail serers and don't need to have their trafic bothering the building mailserver. Normal OS don't need virus scanners or filters screwing up their mail and I'm unaware of a filter that works for anything but M$ binaries and VB. Blocking ports because M$ uses them for file sharing is about as dumb as not letting your neighbors share files in anyway they can. We know what machines will be disconected out of all proportion. If M$ were not so buggy, people would not be so afraid of the internet and their neighbors and you would not need to put a clause into the contract denying responsibility anymore than the electric company denies responsibility for light bulbs. Only someone from Redmond would recomend disonecting people's WAPs.

    To configure your network in such a sucky M$ oriented way is an expensive, burdonsom endorsement of Microsoft crap. It wastes your money on equipment you don't need and it burdens reasonable users with restrictions. I'm not even going to imagine what kinds of calls you will get when M$ updater does not work, but I suppose you could bill to rebuild people's machines. I'd rather run a Debian mirror if anything. I don't mind billing time for software that works and respects it's users.

    Thanks for being such a good shill. I like pointing out the advantages of free software.

    --

    Friends don't help friends install M$ junk.

    1. Re:Noooo, I no see no Microooosoft. by Natalie's+Hot+Grits · · Score: 1

      Your an idiot by the simple fact that you think DHCP is a bad thing for either the provider, or users.

      No matter what OS you are using, if you use DHCP, it is about 500000 times easier to setup for your users, and for the provider, and for the tech support, and for the troubleshooting. What do you suggest to use besides DHCP? PPPoE? LOL, Static IP? of course not.

      Assigning static IP's to each user would be a nightmare to support. Using PPPoE just adds 30 extra steps to the setup process of each machine

      I have seen a few implementations of IP Nexus and packages like it. It seems to work well. We use it campus wide here to keep public access ports secure. It works great. (DHCP every MAC that wants to connect, but don't route their traffic, then authenticate via https)

      --
      Two infinite things: your stupidity and mine. But I'm not sure about the latter. If my sig offends you, I'm sorry.
    2. Re:Noooo, I no see no Microooosoft. by swv3752 · · Score: 1

      He might have been recomending zeroconf, but even that would be problematic for support.

      --
      Just a Tuna in the Sea of Life
  121. The cost for NEW DSLAMs is still pretty high by dougnaka · · Score: 1

    But on ebay you could snag a DSLAM for your 160 units for under a grand. That's a DEAL. ebay search for DSLAM

    --
    My Linux Command of the Day site : LCOD
  122. Re:umm you're gonna need more than a T1 for 160 un by Anonymous Coward · · Score: 0

    i get a decated 1:1 128:128 connection, on isdn, and it cost me a bucketload, meaning £30 a month for the lines and £99 a month for the connect...that £129 a MONTH for a dedicated connection, i would love a 128k:128k for $70 a month lol, you lot dont know wht a real connection can cos 128 garanteed for $70 a good value

  123. Individually owned apartments. by Blaede · · Score: 1

    It's basically an apartment complex, except each dwelling is owned by an individual (instead of a company owning the whole shebang), who either lives there, or contracts out to the condo management company to find a tenant. Each owner pays fees to the management company to maintain the outside.

  124. T1? by mlerner · · Score: 0

    You won't get very fast. You'll need a T3 plus the costs of getting a T-line installed is EXPENSIVE.

  125. True..... by isotope23 · · Score: 1

    But if the original poster has no idea what i'm talking about, then he either has no business doing the project, or needs to do research to figure it out.

    As for the residents, a simple survey question such as : "would you like high speed internet with the following terms of use?" would do the job.

    --
    Service guarantees Citizenship! Questions Guarantee GITMO.... Amerika Uber Alles!
  126. T1 Bad Idea by Falcon+213 · · Score: 1

    I wouldn't go T1 for a 160-unit condo. T1 is just simply much too slow, giving you only 1.5mbit downstream. I would go with a DS3, although much more expensive, or a single OC wire. Sure, they will cost much more than a T1, but it would be much better than having say 30 people on a single T1 downloading anything at the same time. Even websurfing would be rather slow if enough people were using it at the same time.

    --

    Those who watch their backs meet death from the front.
  127. Enabling MDU's by thaumat · · Score: 1

    Since I do this for a living I'll tell you the main things my company needs to look at (and we are technology agnostic... we want the best cheapest solution). Do all phone services for the building come into a single POE - Point of Entry, often called the M-POE? Is there riser cable from floor to floor? Is each condo home-runned? Do you have RJ12 (3 pair) cable or 4 pair cable (cat 3, 5 etc)? What's the distance from your wiring point to the furthest unit? Use a TDR test set. DSL ~15,000 feet. HPNA+ ~4000 feet. Ethernet ~300 feet. If you have 1 pair (free or not) and it is not a digital line you are pretty much stuck with DSL or HPNA+. DSL will be the most expensive (new). Check ebay for DSLAMs and modems. If you have 1 used pair and 1 free pair and the used pair is NOT a digital line you can use Ethernetsplit. If you have 2 free pairs you can use Ethernet tho you may see some interesting cross-talk. Even if you are bringing in a couple of DS-1's (MLPPP, IMA) use a managed 10bt Switch. For example the Nortel 310-24t ~$40.00/each. CPE Ethernet 10-50 HPNA+ 40-60 DSL 50-200 Installation Labor = $$$ Ethernet will require the most effort as you will have to terminate the in condo daisy chain (if that's how they did it which is likely) at the point you want to wire in the RJ45. HPNA+, DSL will be the quickest. Space and Power you'lled about 8U of rack space for that many units regardless of the solution. you *might* be able to wall mount if you distributed wiring points. Make sure you have good airflow in the locations you choose and limited or controlled access. Public or Private Addressing. You will have the least problems if you can do public addressing and then rely on the users to implement their own firewalls etc. Realize any computer directly connected to your network will in most cases be able to see any of the other computers directly connected (ie. not behind a firewall, or if you don't set up VLANS or use partitioning in your DSLAM. For 151 units you'll need a /24 or a /25 and a /26 with two different networks (multiple ethernet ports on your router). Management Make sure you set up ACL's for IP's that can manage your router or switches. SNMP and VLAN is good 'cause you can easily shut off service remotely for non-payment. If you need some additional info feel free to contact me.

  128. Composite Cable by vinn · · Score: 1

    We've been putting in some new hotel/condo buildings lately. Specifically we've built 8 new ones comprised of 500+ units. We made the decision to pull composite cable everywhere. We chose 2 RG-5, 2 Cat 5, and 2 strands of fiber in each cable. We used Siemen's "Home Cabling System" for all the terminations. Good stuff.

    As for your existing building, recabling will be expensive. If you're lucky there's riser closets on each floor where you could use the existing cable to pull with. You could also locate hubs there. But that's a lot of work. The idea of using some low bandwidth solution to the unit isn't too bad. Hardware costs will be really high, but you may be able to pass it along to the homeowner rather than eat it yourself. Yeah, it'd be nice to have ethernet everywhere but that just might not be possible.

    As far as Cat6 and fiber go, generally installation and material costs aren't worth it. We justified it in our composite cable because it's cost wasn't as much. We didn't terminate it yet because so far there's nothing that will use it.

    --
    ----- obSig
  129. Re:T1? Is that all? by lactose99 · · Score: 1

    This is EXACTLY what QoS and traffic shaping is for. Throttle all P2P traffic to ~10kbps during peak usage and you're fine.

    --
    Fully licensed blockchain psychiatrist
  130. One thing nobody is mentioning.. by Anonymous Coward · · Score: 0

    Distance is often a huge issue with MTUs. Remember that Cat5/Ethernet is great, but it can only go so far. If it's a larger building and your runs are going to exceed 100m, DSL may be the only option without installing switching closets everywhere.

  131. Been there, (nearly) did that... by realyendor · · Score: 1

    As long as no residential units are more than 500 cable feet from the phone closet, HPNA 1.1 concentrators are the way to go (search google for 'HPNA concentrator'). The consumer hardware can be acquired for cheap; I've bought PCI HPNA 2.0 cards for $12 (searcn buy.com for 'phoneline')--and yes, I hear they work fine under Linux.

    For new condo construction, stick with CAT5e (or CAT6). Fiber converters are clumsy, expensive, and unnecessary for consumer applications. If you want to add extras, go for a centralized patch panel in each unit so that residents can install a hub/switch/whatever.

    As for the uplink, you'll probably want a business DSL contract (since that's sure to be cheaper than a T1) and make sure that they allow reselling of bandwidth. Alternatively, find someone who can supply you with bandwidth wirelessly. Make sure you establish a service level agreement with your ISP, especially if you are charging residents for the service.

    I put together a similar plan for the 200-unit condo building I recently lived in, but the homeowners board wasn't very interested--probably because they were recently stung by a similar venture which burned thru about $50M in 2 years under the name 'Reflex Communications' before leaving their customers in the cold--so you can imagine that they were quite skeptical of a 20-something walking in the door saying he could do it for relatively cheap. Reflex supplied DSL-like service internally using Tut Systems equipment, and then used a wireless connection (probably an early form of 802.11) to link to a tall building several blocks away. They grew too fast, and seemed to have a knack for using the most expensive equipment they could find. Furthermore, I think they should have moved more quickly towards providing a ubiquitous always-on service instead of targeting the sexy high-bandwidth applications (like video-on-demand). For many homeowners boards, the thought of letting a unlicensed/unbonded hacker poke around in their phone closet is a little scary.

  132. The Future by rippleone · · Score: 1

    I have been wiring homes for high speed internet for about a year now and let me give a few bits of advice. First, you should wire everything with Cat6. Reason being is that a DSL or Cable connection today will be considered dialup in about 5 years with everyone having offsite storage, full frame rate video conferencing every where and highly networked lives. Verizon is starting a wireless service in Washington and San Diago later this year that should rival cabel speeds. My usual setup in a home is an 8port Gigabit router with a seperate firewall box and cat6 everywhere. Most home owners agree with the overkill setup because they also understand what it takes to rewire a house and this overkill also adds more to the appreciation of the home. The setup you are describing shouldn't be a problem. You should just realise that a T1 servicing 160 units will probably not be enough bandwidth i.e.:Downloads, streaming audio, gamers and outright bandwidth abusers. Which brings up another situation, you should track usage and charge more for those that like to download just a bit to much. Lets say that each resident pays $20 per month and everyone signs on - that's $3,200 which should easily pay for 4 T1 lines. Of course this doesn't account for the intitial install and, I don't think I have to remind you, your profit margin. Nobody likes working for free. Remember a few rules of intallation: make sure everyone understands fully what they are getting into and the possible problems that you may incounter also adding 5% to 10% onto the bid isn't a bad idea either. Good Luck.

  133. My building by Z4rd0Z · · Score: 1

    The building where I live has 6 floors with 70 apartments. Every apartment has an ethernet jack. Each jack is wired straight to the main(only) network closet, where it goes through a hub, which connects to a dhcp server, and finally to a dsl modem. 1.5 Mbits, not too shabby, and it's free!

    --
    You had me at "dicks fuck assholes".
  134. Re: Max distances by jdray · · Score: 1

    Ah, yes, you're right. I've been out of the networking field long enough that the finer details are starting to slip... (no pun intended)

    Still, depending on the layout of the condo site, I suspect that CAT5 or even CAT6 (though I don't really know what the CAT6 limits are) would be insufficient. A friend of mine just bought a condo in a large complex that's probably 20 acres in size with about ten units in each building. Wiring that with CAT5 only would be a nightmare.

    In that situation, if you were going to stick with Ethernet (probably the best option), 10 or 100BASEFL between buildings would probably be the best bet.

    --
    The Spoon
    Updated 6/28/2011
  135. Marginally Off-topic Suggestions by suwain_2 · · Score: 3, Informative

    This doesn't pertain to whether you should use DSL or Ethernet, but rather is a few things I've always thought ISPs should do. (I've had this almost life-long goal of starting an ISP for some reason...)

    I own a domain, and use it primarily for the unlimited mail aliases. Every site I go to gets sitename@mydomain.com, which just forwards to my main address. If they start spamming, I can tell exactly who it is, and redirect (or block entirely) the mail. Why not give each customer a subdomain (customer.condo.com) where they get, say, 5 POP boxes, but unlimited aliases? Used effectively, this could *really* fight spam. (This is venturing more offtopic, but Cpanel seems to be the most popular web-based control panel; you could provide customers with some webspace and e-mail access. It's easy to use, but even great for geeks. You can get licenses for like $40/month, or possibly less.)

    Another thing I've always thought ISPs should offer was NAT access. Rather than getting an external IP, they'd get an internal one and use your proxy. It'd save you from needing as many IPs, and it gives them great security -- unless you go out of your way to set it up, no one can connect to them. Of course you shouldn't force this upon people, but some people might *want* NAT. Offer it as a 'privacy' plan. (Heh, you could probably even charge extra, lol)

    Something like Squid could really speed things up, especially if you only have a T1.

    The last "If I ran an ISP..." item regards DNS. Maybe it's because Adelphia is so crappy (they have like 5 DNS servers, and whatever you have as primary ALWAYS goes down, so you're re-ordering the nameservers several times a week to make it work at all...), but I ended up using OpenNIC, which essentially is a 'democratic' TLD assigner; they have a lot of new TLDs not supported by 'real' DNS. (And, of course, lookups for regular TLDs work, too.) Not sure if you want to make it standard, but I'd be way impressed if an ISP gave me the choice of 'regular' DNS or OpenNIC DNS servers to use.

    Oh! Don't forget to do your part and setup a good firewall. Another seemingly uncommon thing I've always thought ISPs should do was to do *good* egress filtering: filter traffic *leaving* your network too. I start to rant about this idea every time I read about a big DoS attack; if ISPs were more careful about what leaves their network, a lot of DoS attacks would simply get dropped at the attacker's ISP.

    --
    ________________________________________________
    suwain_2 :: quality slashdot p
  136. Forget all this "wireless or ethernet" crap... by demonbug · · Score: 2, Funny

    Just hire a guy to run around with a wheelbarrow full of CDs. The bandwidth is way higher.

  137. DSL might be the right thing here by zorander · · Score: 1

    Lots of reeplies are touting ethernet and wireless. Here's a few issues there--

    First of all, ethernet wiring the entire building is expensive. There may already be an extra set of phone wires to each unit (my house happens to have seven pairs back to the nearest telco box, though it's a house) , and ADSL can share with phones. Distance wouldn't be an issue with the dsl hardware in the basement so speeds would be good and use existing wiring. DSL also gives a much better way to charge the users of the service. Disconnecting an ethernet jack could be made easy, sure, but DSL was made for this purpose and again, it uses existing wiring.

    Wireless is messy with a lot of people and definitely subject to freeloading in a huge way. Remember the people have to *pay* for the T1 through their usage. 60 people might only work out to $10-20 a month which isn't bad at all, but still it needs to be enforced.

    DSL could be the right choice here...

    Brian

  138. Bridged DSL by Anonymous Coward · · Score: 0

    If you want to do DSL, it's cheaper and easier to do bridged DSL. Look up the Dexter device line. We use them. However we're moving away from DSL and migrating towards Cable. As an ISP, the telephone company, and cable TV company we found that it was cheaper by far to use the cable TV infrastructure to provide Internet access than it was for us to resell DSL. The AFC hardware is extremely expensive. You might also just consider putting in good ole Ethernet. It is very cheap and extremely easy to work with. You make each condo unit be its own VLAN and security issues are no more. You can use ACLs to classify and rate limit VLAN traffic at the border with ease. Every single Build-To-Order computer provider has Ethernet options, if they aren't already built in. The Ethernet standards are very well set in place. You no longer have vendor issues to deal with like you do every 5 seconds with wireless solutions. Even if you use the DSL or cable TV infrastructure to offer Internet access, the clients will still connect to the modem via Ethernet. It's cheaper, better, easier to work with, etc... Consider it. Fiber between buildings. Cat5e (6 if you can afford it) internally. Multiple jacks per residence. It's easy. Oh, and repair is extremely quick and easy to boot.

  139. DSLAMs are cheap and plentiful! by isdnip · · Score: 4, Informative

    First off, I do this type of thing for a living, as a consultant to the CLEC and ISP trades, so I know a thing or two about the DSL market. Please, please, ignore the consensus of the Slashdot crowd who want you to pull Ethernet! They imagine that they'd want the better speed, but as a provider, you have to face reality. DSL has real advantages:

    1) It lets you control the top speed. I suggest that the top speed to a user be less than half of your feed speed. A company I work very closely with has almost 200 DSL lines in a luxury condominium. They feed it with only two T1s. That's quite adequate! They have to pay for that bandwidth -- backbone ISP service isn't cheap, and the T1 loops into the condo aren't free either. Of course they only provide 700 kbps service. Sure, people might like more, but the competition is dial-up, and price matters.

    2) DSL tolerates long wire. It can go a few miles, after all -- even a sprawling condo complex is a short hop for DSL. Ethernet tends to be pickier.

    3) ADSL can share wire with telephone. You might be able to piggyback onto the phone wire. (A CLEC can; whether you can is a different issue.)

    4) DSL is cheap! Lots of providers tanked, leaving good working gear on the secondary market. A 500-line Lucent Stinger can be had for $12k; a 200-line ADSL DSLAM is maybe half that. SDSL needs its own wire pair (can't share phone like ADSL) but the DSLAMs are a glut on the market, much cheaper than even that. Check eBay, telephone.com, etc.

    I'd be happy to talk more about this offline (isdnip at netscape dot net)....

  140. Fractional T3 by Anonymous Coward · · Score: 0

    DSL requires expensive hardware. T1 is too slow. T3 is too expensive.

    So? Go for fractional T3. Same thing as T3, minus a couple of your 28 T1 lines.

  141. Re:Why DSL? -- One reason against wireless by bigox · · Score: 1

    Most condos that I have seen are built with concrete or have many walls between rooms. This is necessary since condos need to be space efficient. Without an antenna, I can't reliably pick up a signal through a two layer brick wall or a concrete floor. Maybe access points can do better, but I doubt that they can go through more than two floors of concrete. Wood and drywall are much friendlier to wifi.

  142. +375$ / apartment by knowledgepeacewi · · Score: 1

    Sounds like a 60,000$ position. Benefits: working from home.

    60,000/160 = 375$/year/apartment

    versus $600/year for cable or dsl (at 50$/mo).

    This doesn't include the cost of the initial setup or the outside connection, or rewiring, and upgrading the place in 10 years.

    I'd probably avoid the mess. Its hard to compete with nationwide ISPs on price.

  143. This is what I did, suggestions appreciated. by Anonymous Coward · · Score: 0
    We're about half way through renovating some apartments. All three bedrooms. We stripped them down to the studs, and don't plan on redoing this anytime in the next 20 years or so.

    I looked at what jacks were available on my relative's suggestion, and settled on the six jack outlets (leviton? can't remember right now) for all the rooms except the kitchen. So in the bedrooms, the living room, and the dining room, we ran:

    two cat 5e lines per jack for ethernet

    two rg6 coax lines per jack for video/whatever

    one cat 5e for two/two line phone jacks

    for a total of 6 jacks, to opposite corners of each room.

    The kitchen just got the phone/ethernet without the video (or maybe one video and one ethernet, two phone if I remember correctly) for a total of one 4 jack termination.

    After going through tons of wire, we cut the dining room and kitchen from two/one to one/none on the coax, and several of the other rooms have one less ethernet line (for a total of one on each opposite corner, or one/two on each opposite corner).

    After running all this wire, I was informed that having a patch panel wasn't enough, that a switch had to be centrally located. Bang! Since all the wiring terminates in the attic, and placing an electrical powered device in an attic that the tenants don't have access to is a no-no, this caused a problem. So extra wire was left for each run in the attic, and when tenants move in, they can have the option of which room to terminate all the wires in.

    btw, having entered hundreds of other people's homes for my job, I've seen power strip, plugged into power strip, plugged into the wall outlet, due to a lack of outlets for today's electrical requirements. This was rectified immediately in the apartment renovations. The master bedroom alone has about 28 outlets, and other rooms are similarly equipped. A 24 breaker panel was installed in the apartments, with 18 breakers being used, and 6 pre-wired spares for future growth. This is in addition to the main panel in the basement that can handle another 4 breakers to spare.

    Any suggestions on how to terminate the cat 5e wiring without installing a switch in the attic would be appreciated. The coax and cat 5e for telephone is already planned out.

    How much wire? About 1900 feet of cat 5e, and about 1500 feet of coax per apartment.

  144. Please don't talk out of your ass by lemox · · Score: 1

    DHCP was "invented" by the IETF. The whole "Microsoft invented DHCP" is a net.legend about as viable as Microsoft buying Redhat or Bill Gates sending you money to forward an email.

    --

    "We obviously need a new moderation category: (-1, Woo-fucking-hoo)" --Mr. AC

  145. duh by Anonymous Coward · · Score: 0

    Man, did that question suck.

    Doesnt he know how to set up a ethernet or wireless network and configure nat/proxies?

  146. Re: Max distances by DeputySpade · · Score: 1

    Ah, yes, you're right. I've been out of the networking field long enough that the finer details are starting to slip... (no pun intended)

    Wow. That was subtle. I almost missed it.

    --


    This space intentionally left blank
  147. the price of wiring is in the labour by Anonymous Coward · · Score: 0

    If you're going to pay to have wire run then run cat6. The additional cost of the cable over cat5 is negligable compared to the cost of actually running it. Pull at least 2 pairs (in case one gets damaged) and have them certified at cat5. You may want to consider pulling unterminated multimode fiber at the same time for the same reason. Keep your runs reasonably short and terminate them in switch closets every couple of floors. Connect the switch closets by fiber. Pick a central switch closet (ideally right beside the telco's demark) and drop fiber to there, this will be your demark.

    For uplinks, the first thing you need to know is how close you are to your telco's CO. If you live in an urban center (which I assume you do), then you might have some nice options available to you. For example, my home uplink is a G.shdsl connection (2.3Mbps symmetric), but I live 900 line meters from the telco. You might be able to save yourself substantial amounts of money this way.

    Finally, you need to pick an ISP since you do not want to be doing all the ISP stuff yourself.

  148. DHCP is not as good as fixed. by twitter · · Score: 1
    What do you suggest to use besides DHCP? PPPoE? LOL, Static IP? of course not. Assigning static IP's to each user would be a nightmare to support. Using PPPoE just adds 30 extra steps to the setup process of each machine

    What makes you think static IPs are a nightmare? Making your interfaces static is easy stuff for most OS, even M$. Some of your neighbors might like help unclicking the DHCP box their dial up or cable modem stuck them with, but most people can figure it out with reasonable instructions. It's not hard to run a DHCP server, but why deny your neighbors the blessings of permanent addresses to avoid a few set up issues? Call me an idiot, but I'd rather give my clients the best available.

    People will surprise you if you give them the chance.

    --

    Friends don't help friends install M$ junk.

    1. Re:DHCP is not as good as fixed. by Natalie's+Hot+Grits · · Score: 1

      Or you could just assign IP's via DHCP according to MAC address if you wanted to give them static IPs...

      --
      Two infinite things: your stupidity and mine. But I'm not sure about the latter. If my sig offends you, I'm sorry.
    2. Re:DHCP is not as good as fixed. by b1t+r0t · · Score: 1
      That's what I do at home. I have a static IP range in my "internal" network, and my DHCP server is configured to give fixed IP addresses to the MAC addresses of my main computers. Visitors using either my Ethernet or wireless get a dynamic IP, and also any new computers (actually Ethernet cards) that I'm still tinkering with.

      The few times I want to hook up a really old box that doesn't support DHCP, I can still manually configure an address for it.

      There's no reason (other than a higher expected bandwidth usage) that this couldn't be done in an apartment/condo environment for users who want fixed IPs.

      --

      --
      "Open source is good." - Steve Jobs
      "Open source is evil." - Microsoft
  149. Use The Existing Phone Lines for 10 BaseT by BassettHound · · Score: 1

    I live in a condo. It was wired for the phone lines using CAT3. They were using 4 of the 8 wires (two twisted pairs) for two-phone line. Guess what? Ethernet only uses 4 wires; the other two twisted pairs in my CAT3 worked great. I put the cable modem in my utility closet and wired the ethernet from there. I just had to put the jacks everywhere there was a phone jack. Not elegant, but you would not have to do any wiring....

  150. My Two Cents by Ugmo · · Score: 2, Interesting

    This is probably late and no one will read it.

    I worked for a company that wired commercial and residential buildings in NYC. This is what I learned there:

    RUNNING CABLE:
    Contract the running of the cable to a good company.

    If you are running new cable the cost of making the drops is way more than the cost of the cable itself. This means there is little difference between running CAT5,or CAT3 the adavantage of using DSL is that you can use existing phone wire and so avoid the cost of running new wire.

    If you are running new wire go with Ethernet over CAT5 (5e,6 whatever the best you can get) Think about possibly running fiber. Again, the cost of the fiber itself isn't that much.
    Fiber is a little less flexible and takes more skill to run and splice than CAT5 but over long distances you may not have a choice. Also media converters are costly. You could run the fiber alongside the CAT5 and not put any equipment on it at the ends. The cost will be less than deciding to run new fiber 5 years from now.

    EQUIPMENT CLOSET
    Try to keep your switches(other equipment) in one place, don't daisy chain them. You only will have to provide power, security and cooling to one location. Having switches (or DSLAMS) all over the place is not a good idea. You need to get access to the various places for maintenance etc. Costs go up too when you spread out: you might need UPS and Cooling for each location. If you don't then yo have to run to different places (and get access to different places) to fix them.

    T1 LINES:
    Depending on usage you may be able to get away with 1 T1. If I lived there I would like 2 or 4 or 8 sure, you can never have enough bandwidth but 1 might be enough. See how much they cost.

    If you can afford it do get at least 2 though for redundancy. If you are unlucky enough to get a crappy set of lines from the phone company (this is probably more common on antique NYC Verizon lines) that T1 may be up and down for weeks or months and the phone company will take hours or days to fix it. Sure they will give you refunds off your bill or whatever the law says they have to do, but meanwhile 160 families are screaming for their Internet. If you have 2 T1's they'll notice things have gotten slower but they won't complain as much.

    WIRELESS
    Wireless is not as easy as people think it is. If you have clean lines of sight, are fairly isolated from other Wireless equipment or other sources of interference, and have buildings mostly made of wood, you might be OK. I wouldn't know. I was setting up wireless equipment in downtown Manhattan and Brooklyn and the Spectrum was lit up like a christmas tree. There's interference all over the place and the steel and concrete of the buildings blocked and bounced signals left and right. Someone with good testing equipment and lots of experience could do a better job than me. I was an amateur at wireles but I guess you are too.

    Wireless is not magic. You just don't plug in an AP and everyone within 5 miles has 100Mb access. Maybe in the Suburbs conditions are better.

    Wireless also has security problems unless you do it right. If I had a choice I'd do Ethernet over CAT5 or better.

    That's it. Document everything and post your experiences. Good luck

  151. Support, NAT and the Future by AndyBarrow · · Score: 5, Informative

    Here are my 2 cents worth. I've been in and around this stuff for 26 years (and yes, I do have, what used to be prematurely, grey hair):

    1. Put in CAT5, or even CAT6 if you can afford it. Put in twice as much as you think is reasonable. Get it certified and tested. Next time you think you need just those couple of extra pair, you won't regret it. The big hit in any infrastructure installation is labor - you are going to spend about as much for labor to have two CAT6 cables pulled in to a jack as you would pay to have one CAT5.

    2. NAT would be a pain in the ass for your users if they want to do anything more complex than web browsing and mail. This sounds like a multi-year project - what do you think people are going to be doing with the Internet in two years? Doing SIP telephony, H.323 multimedia, etc. etc. through a NAT connection borders on impossible for an average user.

    3. No matter what you think the skill level is of your users, cut it in half. People seem to get dumber than dirt when they get home at night. I have personal experience - I'm living in a residential compound in Kazakhstan right now. I spend my days working for the Man, nights dealing with residents who stuck floppy disks to their fridges with magnets.

    4. All the cool stuff like web cache, proxy servers, even community web sites are very nice. With every single item, just think about who is going to support those things after you make your fortune and move to a grass hut in Tonga? KISS in all things.

    5. On the subject of support - residents are 24/7/365. When the Smith family can't have that video conference with Grandma on Christmas morning, who they gonna call? Set up a well understood service level agreement that every resident signs. Make it simple, but clear. The rule of thumb is that if it can be explained in an elevator between floors, it's about right.

    6. Fiber isn't that expensive, and there are some cool devices available now for doing lots of fun things with it. Investigate using it for house distribution. In 5 years when those 2mb DSL connections become passe', and folks start wanting those 10-20mb connections, they will look at your portrait on their mantle and smile.

    7. Here's a turnaround for you: Have you thought about cable modems? Not only can you do a few channels for high speed data, you can also do digital TV distribution, and telephone distribution. What if the folks had a TV channel for the community front gate, so they could see when the mother-in-law is coming?

    Have fun - this if obviously a passion for you. On those all-nighters when you are trying to solve some stupid routing problem, remember it was YOUR idea.

    Andy

    --
    "You can't have everything. Where would you keep it?" -- Steven Wright
    1. Re:Support, NAT and the Future by lunchman · · Score: 1

      24/7/365? maybe 24/365 or 24/7/52 (sorry just one of my pet peeves)

  152. Wiring for Condo suggestions by Anonymous Coward · · Score: 0

    I was an ISP for over 8 years till I sold out to the local Telco. My suggestion would be to pull Cat5e to each condo from a central location.

    Next you have to determine whether you want to allow each user to see the other person's traffic or not. If you want to create one large network and allow local gaming for instance...you may want this capability. If you are concerned about privacy from others within your building, you may want to prevent it. You may want to be able to configure it either way. The least expensive way to accomplish this is probably little hardware routers - you could put static routes in for each condo and still allow the local networking for those that want it. If you just use standard hubs/switches, then anyone could sniff anyone else's line - which like I said may or may not be a problem.

    I would suggest not bothering with a T1 line - In my experience you won't really get a full T1 in most cases. I would call up your local cable provider and ask them for a special rate for one high speed connection - Shaw in Canada here sells one for less than $500 CDN a month and gives you more than a T1 in bandwidth - over 400K/s( T1 is about 1.5 megabits or 180K/s).

    Anyway...my nickel's worth.

    jim.nickel@softhome.net

  153. How about cable? by zerofoo · · Score: 2, Interesting

    Have you thought about providing television and internet over coaxial cable? Cisco makes some nice cable gear here. As far as content, you can set up some c-band satellite dishes and distribute content via the same wire and get multiple revenues over one network....and it's capable of faster speeds than non-shielded/twisted copper.

    -ted

  154. Check out Binarywave by helleman · · Score: 1

    Binarywave makes a very small DSLAM which uses an ethernet backhaul. Very inexpensive. Check it out! BinaryWave

  155. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  156. Happy to help by nukedesign · · Score: 2, Informative

    Check out Ciscos Long Range Ethernet (LRE) products also look into tutsystems, these two solutions will help get you started. if you are planning to do this make sure the phone company terminates in a phone room and you will be responsible for all phone lines to the condo's shoot me an e-mail and I will be glad to help in any wau I can, I designed a system for a 3500 space RV park (funding did not work out) but then again the ISP business is pure hell. any one out there who would like my take on these systems may e-mail me at nukedesign@hotmail.com if i get /. ed my mailbox may overflow.

  157. Go Wireless by Anonymous Coward · · Score: 0

    Wireless is the way to go. No running cables. You can be anywhere in the complex and use your laptop, PDA, or whatever. A reasonable amount of security (probably restricting by mac address) should be fairly easy.

    1. Re:Go Wireless by pair-a-noyd · · Score: 1

      hack city..
      HUGE abuse potential.

  158. that's funny. by twitter · · Score: 1
    I'm a geek for crying out loud, and if getting in on a cool little deal like this meant learning Linux or buying a Mac, and ditching all my commercial software, I'd tell him to hit the road, hard.

    You don't have to do all that to connect your computer to the internet with a fixed IP. Many users did just that to their Windoze boxes in the much better early days of cable modems and competitive DSL service. They learned to their cost about Windoze. The same can be said for dial up and windoze, it's just a little harder to notice poor performance that way, until the poor thing dies which joe six-packs think is normal.

    He's talking about providing "communal" Internet access for his condominium. With affordable, professionally administered, tech-supported alternatives, such as telco DSL and cable, do you honestly think people are going to spend days ... learning a whole new style of computing, just so they can fit into his geek experiment?

    Nice flame, ass. I honestly think better appartments or condos would have fixed IP internet service through available as part of the rent. Keep your comerical software, you deserve it.

    --

    Friends don't help friends install M$ junk.

    1. Re:that's funny. by Bendy+Chief · · Score: 1
      My post wasn't meant to be a flame, it was meant to point out the obvious flaws in the parent's suggestions, particularly those pertaining to moving away from MS software. I'm well aware of the ramifications of the story's concept, for example, that you don't need Linux or a Mac to connect to the Internet with a fixed IP. (Holy mother of God the complexity of it all)

      However, I maintain that no one is going to listen to someone recommending an alternative computer make or operating system just for simple internet security. If you doubt it, go proselytize your "Switch" doctrine down on the street corners and watch the crowds congregate. (Or not) Windows is in very few ways superior to its alternatives, but as absolutely anyone with any grasp of the computing industry should know by now, people are locked into Windows because of "killer apps".

      I'd appreciate if you didn't insist on promulgating the myth that Windows is so terribly insecure and unfit for the Internet. By far the most common ailment, as I understand it, is end-user stupidity; deploying unnecessary services, not firewalling, and clicking on any shiny attachment that ends up in Outlook. What say we wait and see how many Wal-Mart patronizing Lindows users get owned by remote-root exploits before we start slinging accusations?

      By the way, in future, I'd appreciate it if anyone deciding to call me an "ass" would be so kind as to refrain from using childish terms like "Windoze", "M$", and their ilk; they really don't reflect level-headed thought.

  159. KISS - keep it simple (and cheap) by Anonymous Coward · · Score: 2, Interesting

    Just do this - a 24 or 32port ethernet switch, then you run cat5 out to "groups" of say 7 units which have a el-cheapo 8 port switch which provides 1 port for each of thoes 7 units. This way hardware costs are much lower, much less cable is used and performance is still fine.

    Then as someone else sugguested a linux/bsd box with squid & traffic shaping. PLus an archive, smtp & mail server. Then connect the box to a T1 or 2x DSL lines - whatever has good bandwith and is fairly cheap. The end result should be an internet thats much better than dialup and probably cheaper. If anyone in the condo's dosent like it then they can pay for their own direct DSL line or whatever.

  160. Re:Moderators on drugs by Pii · · Score: 1
    It should be a +5 by now, but I posted it late.

    Layer-3 switching, Anonymous Jackass, is a switch that is also capable of making forwarding decisions based on Layer-3 (Network) information.

    Examples of Layer-3 switches are numerous, but since I'm a Cisco guy, allow me to direct you to:

    • Cisco Catalyst 3550 Series (w/either the SMI or EMI Images)
    • Cisco Catalyst 4000 Series (w/the Supervisor 3 or Supervisor 4)
    • Cisco Catalyst 5000 Series (w/the Route Switch Module)
    • Cisco Catalyst 6000 Series (w/the Multi-layer Switching Module, or MSFC I or II (Multi-layer Switching Feature Card))
    There are plenty of others in Cisco's lineup, and from a wide range of other manufactures.

    The key is that any of these platforms can perform inter-Vlan routing without the need of an external router. The routing feature has been integrated into the switch. (And is typically performed in hardware, through the use of ASICs)

    Get yourself a SlashdotID... They're free.

    --
    For those that would die defending it, Freedom
    has a sweet taste that the protected will never know.
  161. Stay away from DSL! by pair-a-noyd · · Score: 1

    Get a fat pipe broadband in and route it into a Linux box, then set a rack of switches for as many connects as you need.

    Be your own ISP, sort of. You can admin the router and shape traffic, etc... With a good Linux package you can keep the peeps safe from hackers and if you see someone abusing the system from inside you can throttle them down, block ports, what ever. You make the rules.

    DSL is just trash. Besides, this way the users only have to have cheap ethernet cards, can choose the OS they please, no special hardware or software required. It will work for everyone and all platforms.

    Easy and cheap to install, maintain, setup, expand... Just like in an office...

  162. Re:Moderators on drugs by Anonymous Coward · · Score: 0

    > making forwarding decisions based on Layer-3

    Wow, he embarrasses himself again. If it's layer 3, then it's routing. You really need to do some reading before posting publicly on something dealing with networking.

    > these platforms can perform inter-Vlan routing

    Then why not tell the truth and call it what it is? It's a very fast router with very few features.

  163. Easy HOWTO by nrohyarts · · Score: 1

    This link shows the website of a community that put together a coop so they could provide DSL service to the people living in their subdivision. I think the tricky part are the government regulations involved.

  164. Been doing this very thing by Anonymous Coward · · Score: 1

    I've been advising my landlord and apt manager on doing just this in our 32-unit complex. Here's the low-down:
    - Bonded cable (2 x CAT-5e, 2 x fiber, 2 x coax) from each unit to one of two muxing locations in the attic. One coax for satellite dishes, one CAT-5 for ethernet, the rest for phone line replacement and future expandability.
    - The CAT-5 runs to two patch panels, each sitting next to a 24-port VLAN-capable switch. Patch cords are used for manual activation/deactivation/static IP address assignment (only 16 static IPs are available from the ISP.)
    - The switches connect to one diskless linux router that boots from a CD. VLAN's are used to keep users from broadcasting to and impersonating one another. The router box has 6 NICs: two to the switches and four out to four 1.5m/768k DSL lines, which are TCP load-balanced.
    - Users who are assigned a static IP have two overlayed subnets on their VLAN segment: one with the static IP, whose bandwidth maxes out at the speed of the DSL line on which that IP resides, and one with dynamic IP, which is NAT'ted over all the DSL lines at once. Therefore, there can be three 1.5m downloads at once before anyone is likely to notice any degradation, and web pages in particular load really quickly since every image can go on a different line (TCP connection reuse is not always performance-improving ;-)

    1. Re:Been doing this very thing by bjjohnson · · Score: 1
      The only thing I would worry about is the Fiber. There is a certain bank compnay in the area that ran fiber to the desktop "because that is what is going to be the future". Then in walked gig over copper. Voice, Digi cable, data, and more can all travel over copper. I doubt that anyone will be running Any kind of application that wil require over a Gig of transfer on one wire. I do aplaud the multiple runs of each bread. This will help prevent the "Sawzaw of death syndrome". I would further suggest routing the sets of cable on opposite sides of each appartment unit. Just remember, cable modems to Most houses are capped at 256-400Kbps. (yeh the pipe is bigger to the modem but remember that that is over our old friend Coax!) VoIP is suported over a 56kps connection (although you sound like you are on analog mode on a cell phone) and Cable, well, I doubt that in the lifetime of your project that that cable companies will abanden the miles and miles of upgraded coax that they installed for Digi-cable.

      Good luck! You are definately on the right track!

      Regards,

      Brad

      p.s. I can't spell and I stink at html - if you don't like it... to bad! ;-)

      --
      Hmmm... Technology... anyone have a match?
  165. DSL is easy by The+Cyberwolfe · · Score: 1

    I actually work for a company that does this type of thing. What we have on our properties is a mix of proprietary equipment and DSLAMs splitting one or more T1 lines. First, the proprietary:

    TUT Systems (http://www.tutsys.com/) builds an expandable rackmount unit that transmits over any twisted pair line. While it can be run on top of dial tone (DT), it can cause problems to both services, so it's better to run it on a dry pair. This also eliminates the need for the resident to purchase a landline, since cell prices can be cheaper in some areas. It uses a very simple modem that requires no software and has no settings - you just plug it in and it works. The whole system can handle something along the lines of 136 subscribers.

    The other systems we have run on typical DSLAMs spliting the T1(s). This method works better than TUT over DT, but we still run on a dry pair whenever possible. It uses just about any type of DSL modem, but you can run into configuration issues there. The ones we have been using must be configured in a Windows environment before they can be used on a Linux or Mac box, but they also have a 4-port hub built into them vs. the TUT's single RJ45 output.

    The main disadvantage of the DSLAM system is the DSLAMs themselves can get spendy, depending on how many units you need to feed. You may be able to offset this initial cost buy grabbing used gear from ebay.

    In both setups, the path is: T1(s)-->router-->DSLAM or TUT-->phone pair-->modem. There is no need for multiple switch arrangements, and we have easily pushed signal a quarter mile through multiple connect points and across 40-yr-old copper with no hiccups.

    Happy networking!
    The Cyberwolfe

    --
    Ahh, I see you've decided to go psycho. Godspeed.
  166. Yeah, but... by smartfart · · Score: 1
    If you were wiring a large office, sure. But the poster is asking about wiring up an apartment/condo for broadband. The most you're ever going to get out of a T1 is 1.5mbps. Running cat5 with a few 10-base switches is all that's needed.

    Since each user is in his own apartment, he isn't going to want his neighbors across the hall browsing his hard drive. Security is going to be a problem, methinks, and needs to be addressed and signed off on by each subscribed user. That's what I would do if it were my project. Hence, bandwidth between the nodes isn't an issue, unless a group of tenants get together and start throwing LAN parties (quake? I don't game, but you get the idea).

    Broadcasts and other garbage on the wire might be an issue, but I still maintain that the outbound pipe is the whole point to this excercise. The switches will cut down on the broadcasts, running firewalls on each host will cut down on some of the other junk (I'd make this a part of the installation fee). If the LAN gets a worm, that'll kill your bandwidth, but in that case the admin will have more problems to worry about than the slow network.

    Hmm... I'm starting to like this idea :-) I wonder if I could sell apartment networking here in New Orleans?

  167. Hello people, get real!!! by bjjohnson · · Score: 1

    First of all, Wireless is VERY insecure, even when properly configured, and I am guessing the comunity doesn't want to hire a full time wireless security employee. So, I would suggest the LRE solution from Cisco. I am usually not very proprietary when it comes to solutions, but Cisco has the market share and the rep with this kind of aplications. For those who are scratching there heads, LRE or Long Reach Ethernet is 10baseT over borrowed cat3 pairs. Setting this up would tie all of the MAIN phone lines to each appartment to a box at central locations and those boxes are then connected using a standard Network Backbone. The user side would have an LRE translater (similar to a DSL line filter) that provides the with an RJ45 jack. I would suggest using a simple Linux DHCP server on the network. For the new instalations, Use Cat5e. The Cat5e will suport Gig over coper. This could be a possible selling point to potential buyers, especially if there are any tech related companies in the area. In the new units, run ALL phone, signal, and network wires as Cat5e, seperate runs for each terminating at a simple patch pannel. This will provide the greatest flexability for everyone and reduce the headaches that can be caused by messy splicing and aid in trouble shooting as well as provide greater flexability to the user. This is a HUGE project. I would suggest getting ahold of an integrater in the area or a good national one. I know of one company that would be perfect to help you. Let me know if you need help! bjjohnson@wi.rr.com Also, if anyone else is interested in dicussing this topic outside of /., send me an email. Cheers and happy connecting! BJ

    --
    Hmmm... Technology... anyone have a match?
  168. Re:Moderators on drugs by bjjohnson · · Score: 1
    Ok, well, let me tell you something...

    Layer 3 switching is the application of Routing ideals and practices at the switch level. It is not a router. And as if that wasn't enough, guess what they are already out with... LAYER 4 SWITCHES. they allow blocking services at the port level... ie. DHCP, DNS (servers), ping... Here is a link for you to chew on...

    http://www.cisco.com/warp/public/cc/so/neso/lnso/c pso/l3c85_wp.htm

    That should demistify it for you.

    Any ?'s let me know.

    Brad

    p.s. I am bad at html and spelling. If you don't like it... too bad. ;-)

    --
    Hmmm... Technology... anyone have a match?
  169. why these questions piss me off... by PhreakOfTime · · Score: 1

    Some guy gets an 'idea' that he can do something without ever doing it before and puts out an article like this on slashdot...about once a week now it seems.

    I begin to wonder if some of these arent simply college psych class assignments to see exactly what the state of the industry is. Im all for information sharing, but the level of insight most of these project will require will NEVER appear on any of these slashdot boards.

    I can see the next one already; Im thinking about sending an orbiter to Neptune, and I was wondering if anyone has ever had any success doing this. Can you give me some ideas of problems I might face? Which solution worked best for you?

    Im not criticizing the spirit to attain a new goal, just the expectation that any real use can be had by posing such questions in this type of format.

    I dont need to know it all, I just need to know more than you.

  170. Bandwidth by dotwaffle · · Score: 1

    And what's wrong with ISDN? With ISDN you can keep bundling lines as and when they are needed - and you can single handedly resurrect the failing economy!

  171. Cogent Communications by Anonymous Coward · · Score: 1

    I am surprised no one has mentioned the this before - CogentCo. If you don't already have an upstream provider or bandwidth don't bother with multiple T1s or other more expensive means. This is the main business that Cogent is in - providing large connections to offices and multiple dwelling properties. The run the line to your central office and provide the hardware to translate it. When it's all said and done they hand you a cat 5 cable and you can plug it into any kind of equipment you want.

    Last I checked they offer a 1000 MBs (about 66 T1's!) for $1000US a month. Some people say their piering isn't great but for the money and serving residential consumers I think it is more than adequate.

    Wireless is foolish, fiber is perhaps overkill. Throttled 10/100 cat 5/6 should be more then enough for the next few years and you can always allow them to have full speed transfers between units and just throttle the up/down stream to the internet. Best of luck. Don't try to make this more complex than it has to be.

    Sam Cooke

    [note: I do NOT work for Cogent or any affliated companies, but I have used them for a few installations similar to what the author is doing.]

  172. s/wiring condos/wireless for neighborhood/ by eludom · · Score: 1

    What are the best current options (wireless?)
    for sharing a network connection (T1, etc.)
    in a small area/neighborhood ?

    ---eludom

  173. faster faster by anythings-possible-b · · Score: 1

    18:41 2/5/2546

    Topic:Condo.network

    Hi!

    i saw on a trade show internet over TV-cable. (is this cat5?)

    the tv-signal and the network-data can co-exist.
    no hassle with re-cableing the building, even though it is great fun : )
    max. (i'm guessing from memory) 2Mbit/s.

    jack the "cable-modem" into the Tv-signal outlet.
    ground-floor: one "cable modem", i suppose
    they sell "cable-modem-say-router" which then connects to the internet.

    security in the condo might be a issue. Hacking the local intranet
    and see what P0rn your hairy-neigbhour's got installed ...
    there are some sec. solutions (say software) for cable-modems.
    but then again that shouldn't be your problem. you're just providing the
    infrastructure, yes? unless your neigbhour might be *cute*.
    bring a pizza *yawn*.

    ***
    Google.search:"cable-modem"
    ->http://www.c ablemodem.com/ (?)
    Defines interfaces for cable modems involved in high speed data distribution over cable television networks
    ***

    good luck!

    1. Re:faster faster by anythings-possible-b · · Score: 1

      and a link i forgot to add:

      http://computer.howstuffworks.com/cable-modem.ht m
      -
      greetings.
      and i don't have silly reply for "what's a condo?"

  174. Re:Moderators on drugs by Anonymous Coward · · Score: 0

    LAYER 4 SWITCHES

    Your lack of clue is showing. I followed this thread with some interest, because I'm one of the many that is sick and tired of clueless idiots using the word switch to describe a router. If the router is looking at the port # in the packet, it is working with the transport layer. That is two layers above the data link layer. It is not switching, just as the process of looking at the network layer(IP addrs) isn't switching either. If it's above the data-link layer, it is not switching.

    Why don't you pick-up a text book and read-up on the 7-layer ISO network model. It doesn't completely apply to TCP/IP, or any other widely used network protocol, but it will teach you the basics.

  175. Re:T1? Is that all? by SuiteSisterMary · · Score: 1

    Not the point. As the other fellow says, traffic shaping.

    The point behind a T1 is that you get 1.544 megabytes of bandwidth. Period. Not 'peak of 1.544,' not '1.544 theoretical,' 1.544. Done.

    --
    Vintage computer games and RPG books available. Email me if you're interested.
  176. Sounds a bit like my condo but.. by tcoady · · Score: 1
    We have only 120 units which have already been wired by the local cable company with cable grade coax/BNC/10Base2 which should enable both TV/Radio/Phone/1mps broadband but because we have CCTV on a channel that conflicts with broadband we are forced to stick with the providers analog with does not permit broadband.

    I have been trying to find out how to replace this with some cisco type gear to enable both broadband and about 30 TV channels fed from a satellite over the same cable network without rewiring with 10BaseT. I can't find any company that knows how to do this but there must be a few who can since what I want is quite similar to what (some) hotels provide.

  177. Re:Moderators on drugs by Anonymous Coward · · Score: 0

    And you've just shown your lack of knowledge. There are Layer 4 Switches, and they're called just that. They're load balancers or anything that makes a switching decision based on port. You should probably call ALL NETWORK COMPANIES and tell them that they're advertising their products wrong. Damn Cisco, this isn't a Layer 3 Switch, some bonehead told me it's a router. Ever hear of a 6509???? Layer-3 Switch, and guess what you can now apply a load balancing card... Guess what!!!! LAYER 4 DECISIONS!!! I love people who flame people and don't know themselves what they're talking about.

  178. The choice between fiber, Cat 5, and DSL by bs_02_06_02 · · Score: 1

    Fiber changes. Single mode fiber from 5 years ago won't handle the newer services today. It'll handle some of them, but not all. If you really want to gamble, be my guest. It could be a really expensive proposition. Gig-E is plenty cheap over copper. If you have the budget, and want to install new cable to each apartment, consider putting in conduit. That way, you can put in a run of Cat 5 today (or 5E, or 6,) and fiber in the future. Ethernet access has drawbacks. You need a router, and you need to secure it. If you partner w/ a local ISP, fine. They can share responsibility. I've dealt with users. It's not pretty. Trust me. You want someone else answering those phone calls at 2am. As far as DSL is concerned, you can buy a fully carded Cisco 6100 chassis $500 and set it up over whatever in-house wiring is in the building. A basic 6100 with 2-port CAP cards will serve up to 64 apartments with ADSL at line rates up to 7meg. I'd approach a local ISP about administering the user base, and providing internet access. Then, call the local telco and price out T1 and T3 access, decide what you want for bandwidth and cost, and place your order. Bolt in a 7' Hendry or Newton rack, bolt in the DSLAM, some patch panels, a $500 POTS splitter, wait for the T1/T3 to get installed, and tell the users to go down to Best Buy or Ebay and buy modems. If they need help with their mail passwords, they can call the ISP. The ISP will provide IPs. The users provide their own security. I would negotiate price with the ISP-- you're providing them with 30 customers, no advertising. Drop me a message, I can answer more questions. There big decision is whether to go with T1 or T3. T1 won't be enough bandwidth, T3 would be great, but really expensive. You might find an ISP willing to try wireless T3. I've seen some line-of-sight DS3's that would allow you to forget the local Telco. Some of them are line-of-sight, some are not. Range is as high as 15 miles. Again, send me a message and I'll provide you with more info.

    --
    -- No sig for you!
  179. Wiring for yuppie scumdogs by Anonymous Coward · · Score: 0

    I work for a *cough* anonymous broadband provider who wires apt. complexes in a similar manner to what has been described here. I.E. Dslam to fourth pair on the phone lines.

    That will be unfortunately the most cost effective in initial installation. Its advanatages being greater distance without a repeater. No need for patch panel to fiber eq. And acess from every phone jack.

    Disadvantages being higher maintenance. A need for dsl transfer adapters (modems). Greater chance of lightning damage.

    So high cost up front or high cost later those are your options. Expect to have to have techs to trouble shoot if you go with the dsl option.

    Also to be cost effective dhcp via mac address and nat to have only one ip addy will be your only options.

    Which means dun dun dun more tech support for people swapping mac addies.

    Oh and wireless? hmm most places dont like looks of correct line of sight placement. They want to hide the dishes. Then you have the security issues oi vey. I dont care what anyone says wireless is not and never will be as secure. Wep is a joke. Sure properly implemented on a smaller scale its possible to have a modicum of security but.. Apt complex wide it is a nightmare.

  180. Why bother with 10-base by Charcharodon · · Score: 1
    There is no price justification for going with 10-base. You can get 10/100 for the same or slightly more. Oh wait a minute, there is actually there is a price difference when we start talking about the big hubs/switchs, I'm still thinking of the 24-port or less types. Of course I'm assuming that people would actually want to LAN party or share files with one another. Most people will want to if they are ever shown how to do it. File sharing will be the big killer, LAN gaming doesn't take much in the way of bandwidth to work.

    I didn't think about bugs. That could be a pain. If he does go the ethernet route he's going to have to have someone manage the network and help people set up their equipment. Maybe he'll need to get a site license for firewalls and antivirus to ensure that his renters have the minimum proper protection.

    Another problem he will run into is bandwidth hogs. A guy here in town set up a wireless internet service, and has to put the smack down almost weekly on someone trying to act as a Kaza node. It's pretty funny he cuts their bandwidth down to 5k each direction. Normally everyone has full access to the T1. It's usually someone who doesn't know any better, but after a week or so they call to find out why their connection became so slow.

  181. Re:Moderators on drugs by bjjohnson · · Score: 1
    Well, I see you didn't bother to follow the link before you opened you yapper. I might not spell well, but I do know the OSI model. You should also see the corresponding TCP/IP 4 layer model. You will see the parralels. The person who responded onle level below your post is correct. If you know SO MUCH MORE than everyone at Cisco, then why don't you show who you really are and STOP hiding behind anonymous coward. YOU need to check your facts. Good luck, I have a fealing you are going to need it!

    Regards,

    Brad

    --
    Hmmm... Technology... anyone have a match?
  182. Re:One Cat5 caveat: Spring for "plenum" rated wire by johnmearns · · Score: 1

    Plenum is good but the rest of the post scares me man. :D Wiring a building is an investment and there is absolutely no reason to half-ass the job. The standard is to use 2 pairs and have 2 unused, not run another signal, or god forbid, even power over. If you do that your cable probably isn't going to qualify over 10Mbs if you put it on a certifier. As far as splicing....just dont. Even with an actual connector meant for this it still kills the signal so quick, I can't even imagine what some hand done rigged splice would do. It doesn't sound like he needs a high performance lan, but just be aware such techniques are bad if you do.... I've never used this product before but alot of WISP running friends have. http://www.ethersplit.com/ They shoot service to the house via wireless then use it to share it out. Maybe it would help you out. A business class dsl account might be more suited or at least make a nice addition. Seriously consider more backbone, thats sure not much for that many people.

    --
    "I may disagree with what you have to say, but I shall defend, to the death, your right to say it." -Voltaire
  183. 160+ users sharing T1? by Anonymous Coward · · Score: 0

    I'd rather go back to 14,4K modem, thanks. And what happens when your 160 users start sharing their connections between rooms? And for the cost this will add to your residents' maintenance fees they'll be better off writing out each packet's contents on paper and hopping on an airplane with it.

  184. Re:Moderators on drugs by Pii · · Score: 2, Funny
    You're a funny guy...

    You haven't even provided a name, much less any kind of credential, testifying to your level of expertise.

    You have a cursory understanding of the OSI model, which is great in preparing for th Net+ exam, I suppose, but really doesn't qualify you to sift through postings on Slashdot, and determine who does, and does not, know what they are talking about.

    I've been working exclusively in the network space for the past 13 years, primarily with Cisco routers and switches for the past 9. I've built networks for Fortune 10 companies, and Government agencies.

    • When your bank uploads its financial transaction information to the Federal Reserve every night, that data goes across a network that I built.
    • When you filled out your application for a US Passport, a scanned image of that document traversed a network at the State Department that I built.
    • When a Telco switch in Saudi Arabia experiences some kind of difficulty, error messages and telemetry data ride back to the central montitoring center in Riyadh across a network that I built.
    • When government offices in remote villages in Afghanistan place their VoIP or Video conferenceing calls back to Kabul, that data rides over a network that I built.

    Ever build a campus network for a 70 building, 10,000 user Marine Base? I have.

    Ever build a network for a 30 Campus University? I have.

    Ever configured a 1500+ site frame relay network? I have.

    Tell me something about BGP community settings, or Multi-Exit Descriminators? Tell me something about IS-IS, the only interior routing protocol that is capable of handling the entire BGP table when redistributed into it. Tell me about Type-7 LSAs, or the trouble with OSPF in NMBA environments. Tell me about tuning Spanning-tree in my campus. Tell me about NBAR, CBAC, and Reflexive access-lists.

    Last but not least... Please, Sir, tell me more about how there's no such thing as a Layer-3 switch... I so much want to learn.

    --
    For those that would die defending it, Freedom
    has a sweet taste that the protected will never know.
  185. set up on sight by Anonymous Coward · · Score: 0
    That means you set it up as soon as you see it. "On sight" is a legit. term. You meant "on site".
    HTH,

    Enby in Waltham