¿ªÔÆÌåÓý

ctrl + shift + ? for shortcuts
© 2025 Groups.io

Preference for Mini PC for "jump" box


 

I like to leave behind a small PC that I can run all Crestron software as well as have access to all physical devices on the local LAN.? The ones I have been using are too old and slow so looking for any best practices.? I am looking at an entry level NUC ($270) or some of the generic brands (like Minis Forum) for $170 or so...

Thanks for any advice.


 

Have you checked out the OVRC Hub?


 

Out of curiosity are you using OVRC with commercial or resi clients?


 

¿ªÔÆÌåÓý

We have OVRC on residential and commercial jobs. While it does provide some level of remote access and monitoring it is not the same as having a VPN to the site or a computer on the local network.?

Ryan Cunningham?

On Jan 29, 2020, at 9:45 PM, Michael Fletcher <fletcher@...> wrote:

?Out of curiosity are you using OVRC with commercial or resi clients?


 

We've been using Superlogics machines. ?Nice thing is you can get them in a clean 1RU rack mount and build it to spec. ?Often we spec with 2-4 NICs as well so the computer can be physically attached to multiple networks (i.e. Corporate, Dante/NVX, QLan). ?Its a lifesaver to have the remote machine directly connected to each network/VLAN we have devices on.

Those certainly aren't as cheap as a base level Nuc but you can build them to spec for you're price range. ?The most expensive one we typically spec is about $1200.

Thanks!
Kyle Goyer


 
Edited

Lately, i'm placing a mikrotik box for vpn ($30). This gaves me access to the clients network as if my computer was directly wired there.
As it is an outbound connection, unless there is a very restrictive firewall in place, it works fine and there's nothing to configure at the client's network..

How much does an OvrC pro hub costs?

Cheers


Mike Slattery
 

¿ªÔÆÌåÓý

We have been using a dual NIC pc running Widows IoT. For some application we use anydesk or VNC to access it and we can view video, access touch panels and other devices.

?

TekTouchView Classroom Audio Video System Administrator

?

?

From: [email protected] [mailto:[email protected]] On Behalf Of Kyle Goyer via Groups.Io
Sent: Thursday, 30 January, 2020 8:25 AM
To: [email protected]
Subject: Re: [crestron] Preference for Mini PC for "jump" box

?

We've been using Superlogics machines. ?Nice thing is you can get them in a clean 1RU rack mount and build it to spec. ?Often we spec with 2-4 NICs as well so the computer can be physically attached to multiple networks (i.e. Corporate, Dante/NVX, QLan). ?Its a lifesaver to have the remote machine directly connected to each network/VLAN we have devices on.

Those certainly aren't as cheap as a base level Nuc but you can build them to spec for you're price range. ?The most expensive one we typically spec is about $1200.

Thanks!
Kyle Goyer


 

¿ªÔÆÌåÓý

The OvrC Pro Hub is about $400 msrp, which includes lifetime support from SnapAV.?

Ryan Cunningham?

On Jan 30, 2020, at 6:50 AM, Martin Szmulewicz via Groups.Io <crestron.uruguay@...> wrote:

?

[Edited Message Follows]

Lately, i'm placing a mikrotik box for vpn ($30). This gaves me access to the clients network as if my computer was directly wired there.
As it is an outbound connection, unless there is a very restrictive firewall in place, it works fine and there's nothing to configure at the client's network..

How much does an OvrC pro hub costs?

Cheers


 

Why would you need a VPN out of curiosity? And I use in a commercial enviroment as well.


 

Hm, well, to get secure network access?

Am 01.02.2020 04:53:21 schrieb michael.orona@... <michael.orona@...>:

Why would you need a VPN out of curiosity? And I use in a commercial enviroment as well.


 

¿ªÔÆÌåÓý

Why wouldn¡¯t you use a VPN?

?

The vast majority of my projects don¡¯t have any form or permanent remote connectivity for various reasons but the handful of large projects where the end user (vs. integrator) is our customer I have client-issued / administered VPN access and it¡¯s glorious ¨C direct access to any of the hundreds or thousands of AV endpoints (Crestron, Biamp, Ross, ¡­) , access to in-room monitoring cameras so we can see if the room is in use/vacant/what the room is actually doing rather than ¡°it¡¯s broken¡±

?

But the best part is because the VPN accounts are adminned by IT Security *±õ¡¯³¾* not punching a hole in their defenses, if something gets screwed up in the configuration and allows undesirable activity to occur, it¡¯s not my fault. They have complete visibility into what¡¯s going on/what¡¯s being accessed and can react accordingly rather than trying to backdoor something unsanctioned through their defenses.

?

--

Lincoln King-Cliby, CTS, DMC-E-4K/T/D
Commercial Market Director
Sr. Systems Architect | Crestron Certified Master Programmer (Platinum)
ControlWorks Consulting, LLC |
D: (+1)440.771.4807 | O: (+1)440.449.1100? | F: (+1)440.449.1106
Crestron Services Provider | Biamp Authorized Independent Programmers | Extron Qualified Independent Programmer

?

From: [email protected] <[email protected]> On Behalf Of michael.orona@...
Sent: Friday, January 31, 2020 10:53 PM
To: [email protected]
Subject: Re: [crestron] Preference for Mini PC for "jump" box

?

Why would you need a VPN out of curiosity? And I use in a commercial enviroment as well.


 

The vpn would allow me to connect to any device in the network as if my computer was wired to the same network switch.
I do not have to open any ports, set up any dynamic ip, etc. I have to change nothing on the clients network but plug in my mikrotik box.
If the question is why i need this? Well, remote upgrades with small changes, support and troubleshooting, etc.


 

What response have y¡¯all received from corporate IT about setting up a personal vpn to their network? Sounds like a red flag for most


 

I've done it on residential only.
On commercial only momentarily. One of the technicians/installers might have one of these boxes on his toolbox, so he just plugs it in when needed.


pearce.bruce
 

Hi All

I¡¯ve been following this conversation and I usually install a rack mounted pc in my residential systems however costs don¡¯t always allow this .
I am Interested In this mikrotik box . Is this a plug in box that I can use for a vpn ? That will bypass all router configuration.
What is the model as I can¡¯t find anything on their website


Regards

Bruce

On 2 Feb 2020, at 17:50, Martin Szmulewicz via Groups.Io <crestron.uruguay@...> wrote:

mikrotik box.


 

If there are concerns about externals being able to connect to the network 24x7, it?s common practice that you have to request IT to open up the tunnel for a limited amount of time.
That can become quite cumbersome because some IT dep. want to have some amout (even days) of lead time for such a request, but better than nothing.
In addition, you can narrow down the vpn access to just the few box/subnets you need access to.

Am 02.02.2020 19:15:08 schrieb davedunaway1@... <davedunaway1@...>:

What response have y¡¯all received from corporate IT about setting up a personal vpn to their network? Sounds like a red flag for most


Mike Slattery
 

Since we went to a Mini IoT Pc with dual NIC and Video streaming, our large Distance Learning rooms went to only about 2-4 hours of setup time without the programmer leaving the office. This is due to going to only 1 network drop in the classroom and being able to see video sources in the room. We used to wait days for IT to get the drops configured on the correct VLAN and reserve IPs, and if the programmer went onsite this was very expensive to wait around for networks. Being able to see the video in the room makes a huge difference as well. The programmer is able to view devices and ensure they are working. Most of the time spent is on updating firmware on devices like Tesira and its mics.

Mike

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of pearce.bruce
Sent: Sunday, 2 February, 2020 1:18 PM
To: [email protected]
Subject: Re: [crestron] Preference for Mini PC for "jump" box

Hi All

I¡¯ve been following this conversation and I usually install a rack mounted pc in my residential systems however costs don¡¯t always allow this .
I am Interested In this mikrotik box . Is this a plug in box that I can use for a vpn ? That will bypass all router configuration.
What is the model as I can¡¯t find anything on their website


Regards

Bruce

On 2 Feb 2020, at 17:50, Martin Szmulewicz via Groups.Io <crestron.uruguay@...> wrote:

mikrotik box.


 

Martin,

I've been wanting to put a Mikrotik on my corporate clients' network. If you do this, do you need IT to forward a port? Or do you have specific configuration on the Mikrotik that initiates a connection out?


 

I've been following this as well.? I do a lot of followup and punch item remote work with all the integrators I work with, and I usually use TeamViewer (or the like) to connect to tech's computers onsite and work off their machine, but I'm interested in a solution like this that is not expensive.? The TeamViewer method requires their computer to have some of the software suite installed, and to transfer the files over and then load.? This seems better in some cases.

I'm familiar with Routers that have VPN built-in, but I'm not familiar with Microtik.? Is that what these are?? If so, how do you get past the client firewall to connect to the VPN on it?? Do these call out, or have a different connection method?? I'm assuming they use OpenVPN or something standard protocol-wise?

Which box are you using for this?? Will this also get on to a wifi hotspot and connect to the site switch, to allow for remote access to isolated networks not on the client network and without direct internet access.? This seems to be the most common for me, and tech has to plug into our AV switch, and then have his wifi on client guest wifi (or hotspot to phone) so their PC spans 2 networks in order for me to get into their PC remotely, and still be connected to the AV switch.? If this box can do that too, I'm sold, I'll buy a couple of them.

--
Jason Mussetter

Control Systems Designer

Mussetter Programming Services
www.mpsav.com


 

@mike Slattery?
for video streaming you mean a couple of webcams so the programmer can see what's going on on the place? or what video do you stream?

To the rest, actually i've developed that solution and i'm comercializing it, at least here around to a couple of clients and other companies. Yet is a mouth to mouth solution for which i haven't done any website, brochure, etc.

Basically it is a device that has a wan port, which you connect to the same network that your device is connected to.
If that network has internet, then we're done. If not, you can give internet to the box with your own cellphone, creating an access point with a predefined ssid and pwd.
(it also has lan ports in case there is no router or dhcp server and create a network on the go).
As it creates an outbound connection (vpn client), nothing has to be set on the network. The only exception is where a strong firewall is in place that won't allow outbound vpn connections (L2TP/Ipsec).
I have a VPN server that handles all the connections and the tunneling.
Then you just connect ("dial"?) your computer to this vpn server with certain credentials. Those credentials are the ones that identifies to which client you get connected.
Afterwards, you just can ping/connect/telnet/toolbox/http/etc whichever device IP you want at your clients networks as if your computer was wired there.
The only thing i haven't tried yet is network discovery or so, i'm not sure about that. But if you know its ip or you can specify the ip range to query, then its done.
I can just open a web at 192.168.0.240 or connect toolbox to 192.168.10.50, or whatever service on whatever ip.


Cheers ;)

?