Hey guys, I'm hoping for some insight into how to set up my network. Feel free to let me know if this would be better in r/HomeNetworking!
Current setup
Currently, we have a very simply network setup - just a cheap modem/router/wifi combo that servers all of my roommates devices wirelessly, in addition to a line that I ran to a switch in my room.
Work in progress
I have a small homelab set up with a backup server and some raspberry pis, but I want to experiment with selfhosting a website just to build my knowledge.
To this end, I've looked into setting up a pfSense box. Right now I have pfSense installed on a protectli device, which is connected to the Arris router in a LAN-to-WAN configuration:
Ultimately, I'm trying to figure out the best way to set up the network for someone who is relatively new to networking. Ultimately I want
- To make sure I'm not interrupting my roommates' internet
- To be able to access the self hosted website
- To do this all securely
Proposed network
The pfSense box has multiple NICs, so if my understanding is correct I can completely segment my devices from my roommates'. Additionally, I have a smart switch, so I'm hoping to set up separate VLANs for my devices accessible from outside the network, as well as IoT devices
Questions
I'm new to networking so any advice is much appreciated. I have a few specific questions, but I'm not sure if they cover all considerations I should be taking! In particular:
- Does my proposed network layout make more sense than just putting all my devices on the current LAN-to-WAN subnetwork I have? What needs to be done for this current setup to work - I can think only of port forwarding.
- Is one option better than the other for DDNS which I intend to setup with cloudflare?
- Is one option safer for my roommates' devcies (I presume my proposed one is)
If relevant, no roommate devices will need to be able to talk to any of my devices (I think that's what this pfSense Block RFC1918 Private Networks`option relates to?)
Thank you so much!
1st. Let your roommate use the ISP modem/router as his main network. You don't want to support him whenever he has internet issues, trust me.
2nd. Props to you for having a good planning and documentation habbit, this is awesome, trust me.
3rd. To have your own network with your Pfsense facing internet while still having your room mate on the modem/router, depending on your external interface, i'd either enter the PPPOE Information in your external interface or, if possible with your modem/router, add your pfense mac in the advanced DMZ.
4th. As for your VLANS, I myself like to have the following VLANS.
Getting late here hope I make sense and help you with your setup. And again, keep documenting. Awesome to see this as a Senior Sysadmin.
Cheers