Recommended Posts

Hi

Having spent a lot of the weekend playing with pfSense I am really keen to replace my router with it.

I am currently on BT Infinity which for those that are not in the UK is a FTTC service which comes with two devices: a VDSL modem and a wireless router. The router has an Ethernet WAN port where it connects to modem. As far as I know connectivity is via PPPoE.

OK, some complexity:

My home network consists of 4 rooms of networked devices. These are:

Living room/lounge

Telephone socket > Modem > Router

Router > Television

Router > Media streamer

Router > PlayStation 3

Router > PVR

Router > Home plug

Bedroom

Home plug > Media streamer

Study/office

Home plug > PC

Network Closet

Home plug > Switch

Switch > Microserver (running ESXi)

Switch > NAS

Switch > printer

Hope that was clear! Other stuff worth mentioning:

1) I want to run pfSense as a VM on the Microserver

2) The Microserver only has one NIC, it also has no free PCIe slots

3) running CAT 5/6 between rooms simply isn't possible, home plug is the only option for reliable connectivity between rooms.

4) can't move the modem

5) can't move the Microserver.

Any suggestions as to how best set this up?

Link to comment
https://www.neowin.net/forum/topic/1120516-home-network-setup/
Share on other sites

Not possible with one nic. Thanks for playing though.

Reason being: pfsense is a firewall. A firewall needs two nics. One for secure traffic, or the local LAN, and one for unsecure traffic, the Internet or dsl/cable modem.

Without two nics to seperate secure from unsecure it isn't going to work out too well. And you will constantly have issues with getting it to work.

"2) The Microserver only has one NIC, it also has no free PCIe slots"

What do you mean it has no free slots? What did you put in it? Let me guess a Raid card? For what reason - you don't need a raid card to be honest unless you had some reason to run raid 5 or higher and didn't want to do it in software. You can do 0 or 1 with the built in card. I have 3 disks in my NAS on the thing and I just use drive pooling. I might move to a parity drive at some point, etc. My more important files that I don't want to have to recover I let the pooling software store those on more than 1 disk in the pool. Click on folder you want to be on more than 1 drive, etc.

You could go with USB nic I guess. Do you have as smart/managed switch - you could do it with 1 nic and vlan tagging. But I would prob pull the card you have and go with 2nd nic. But as me an sc302 discussed the other day - for the internet side at 100mbit or less you could go with USB.

The slots are occupied by a RAID card which does RAID 5 across 8 1TB disks and a mSATA adaptor for OS booting.

The mSATA adaptor could go and be replaced with a NIC. If I went this route, how do I get the connection from the modem to the network closet and keep it separate from the other home plug network? Is it possible? My googling has not yielded anything useful.

I could get some managed switches (budget isn't really a concern, elegance is) but what would the topology look like and would I need one in every room? Could I put the PPPoE connection on a separate VLAN?

The internet connection is currently 40Mb but will but be upgraded to 80Mb in the nearish future.

Any advice is gratefully received.

"RAID 5 across 8 1TB disks"

Where you are you putting 8 disks in a N40L/N36L? Those are the 2 microservers I know -- It has bays for 4, and you could put to in the optical bay area - so your running 2 external? Do you have some other model number?

If your goal is "elegance" I wouldn't think 8 disks on a at max 6 drive system?? very elegant? Why don't you just bump the size up on the disks and have less disks and more space even if you got rid of raid card and just went software or jbod with pooling, etc.

In your drawing you show another NAS??

And why can you not move the microserver to where your router/modem is now?? The box is pretty tiny!!

I did a quick google but did not find any info about vlans over homeplugs - but from spec they are suppose to support 802.1q -- but might only be used for qos. But if they support 802.1q - you should be able to tag the different networks if you have smart switches connected to your homeplugs and keep the internet and local lans isolated via tagging.

But if you could move your microserver to where you router is now its much easier and you could use dumb switches still.

You can easily and elegantly fit 8 disks into a Microserver.

I have one of these (http://icydockuk.com/goods.php?id=142) in the optical bay slot holding 4x Seagate Constellation ES.2 ST91000640NS 1GB 2.5" SATA enterprise class drives and 4x WD 1TB RE4's in the regular slots.

The second NAS is there to back up important files from the server and is a single bay Qnap unit with a 4TB disk in it. In the longer term this may get replaced with a multibay unit.

Anyway, the unit is far too noisy to be put in my living room so no, that really is not an option. The size doesn't bother me - it's the noise.

If I go the smart switch route do I need smart switches in my bedroom and study despite there only being one device in each room? If not how do they know what VLAN they are on?

"1GB 2.5" SATA enterprise class drives and 4x WD 1TB RE4's in the regular slots."

Oh 2.5 inch disks - those are normally slower - but enterprise class are NOT cost effective!!! That 1TB drive lists for $229 your out of your freaking MIND to go with those ;)

http://www.newegg.co...N82E16822148710

But sure that works ;) Other than no sata slots for 8.. So yeah you would need card. Wouldn't it have been more cost effective to just put in some 2 or 3TB drives and be done with it with using less bays?

Noisy? Mine doesn't make a peep?? Is is currently sitting like 4 feet from me - other than the blue HP light and power light I would not know its on even.. You must have something wrong if its making any noise? You would have to change out all your switches with smart if your wanting to use tagging to isolate while running across your homeplugs.. I would really suggest you research that before doing it.. But from the homeplug 1.0 spec it says they support 802.1q (vlan tagging)

Its like what a $100 for the dock, when you could of just put in 2TB drives not needed more sata slots. And had same amount of space 4TB, or when with 3TB and had 2 more TB, etc..

So could of gone with these

http://www.newegg.com/Product/Product.aspx?Item=N82E16822148953

at $259 each x 2 = 518

or your 229 x4 = 916 for the same space? That makes NO sense, sorry!

Lol - it would be cheaper yes, if I paid full price for my configuration but let's just say I paid a fraction of that number ;-)

The noise comes from the drives, not the server itself, which I agree is very quiet (but not silent) - I have very sensitive hearing.

Anyway - I think I get it:

Option 1:

A single homeplug network with a smart switch attached to each homeplug, Microserver has one NIC.

Living Room:

Telephone Socket > Modem > Smart Switch (VLAN 1)

Smart Switch > PVR (VLAN 2)

Smart Switch > TV (VLAN 2)

Smart Switch > Media Streamer (VLAN 2)

Smart Switch > PS3 (VLAN 2)

Smart Switch > Homeplug (VLAN 1 & 2)

Network Closet:

Homeplug > Smart Switch (VLAN 1 & 2)

Smart Switch > Microserver (VLAN 1 & 2)

Smart Switch > NAS (VLAN 2)

Smart Switch > Printer (VLAN 2)

Bedroom:

Homeplug > Smart Switch (VLAN 2)

Smart Switch > Media Streamer (VLAN 2)

Study:

Homeplug > Smart Switch (VLAN 2)

Smart Switch > PC (VLAN 2)

Option 2:

A single homeplug network with a smart switch attached to each homeplug, Microserver has two NICs.

Living Room:

Telephone Socket > Modem > Smart Switch (VLAN 1)

Smart Switch > PVR (VLAN 2)

Smart Switch > TV (VLAN 2)

Smart Switch > Media Streamer (VLAN 2)

Smart Switch > PS3 (VLAN 2)

Smart Switch > Homeplug (VLAN 1 & 2)

Network Closet:

Homeplug > Smart Switch (VLAN 1 & 2)

Smart Switch > Microserver NIC 1 (VLAN 1) - WAN

Smart Switch > Microserver NIC 2 (VLAN 2) - LAN

Smart Switch > NAS (VLAN 2)

Smart Switch > Printer (VLAN 2)

Bedroom:

Homeplug > Smart Switch (VLAN 2)

Smart Switch > Media Streamer (VLAN 2)

Study:

Homeplug > Smart Switch (VLAN 2)

Smart Switch > PC (VLAN 2)

Option 3:

Two parallel homeplug networks, Microserver has two NICs.

Living Room:

Telephone Socket > Modem > Homeplug 1

Switch > PVR

Switch > TV

Switch > Media Streamer

Switch > PS3

Switch > Homeplug 2

Network Closet:

Homeplug 1 > Microserver NIC 1 - WAN

Homeplug 2 > Switch

Switch > Microserver NIC 2 - LAN

Switch > NAS

Switch > Printer

Bedroom:

Homeplug > Media Streamer

Study:

Homeplug > PC

Right now, option 3 is looking like the most likely...

This topic is now closed to further replies.
  • Posts

    • Can you read? I've said I'm willing to pay more for a notchless (no notch) 3:2 screen.
    • Not even an OLED display on the laptops. Also it seems that the laptop design isn't the same as the Surface Ultra model. Looks like bargain bin at high prices.
    • make your own notch - it's not that hard
    • VirtualBox 7.2.10 by Razvan Serea VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. Targeted at server, desktop and embedded use, it is now the only professional-quality virtualization solution that is also Open Source Software. Presently, VirtualBox runs on Windows, Linux, macOS, and Solaris hosts and supports a large number of guest operating systems including but not limited to Windows (NT 4.0, 2000, XP, Server 2003, Vista, 7, 8, Windows 10 and Windows 11), DOS/Windows 3.x, Linux (2.4, 2.6, 3.x, 4.x, 5.x and 6.x), Solaris and OpenSolaris, OS/2, OpenBSD, NetBSD and FreeBSD. Some of the features of VirtualBox are: Modularity. VirtualBox has an extremely modular design with well-defined internal programming interfaces and a client/server design. This makes it easy to control it from several interfaces at once: for example, you can start a virtual machine in a typical virtual machine GUI and then control that machine from the command line, or possibly remotely. VirtualBox also comes with a full Software Development Kit: even though it is Open Source Software, you don't have to hack the source to write a new interface for VirtualBox. Virtual machine descriptions in XML. The configuration settings of virtual machines are stored entirely in XML and are independent of the local machines. Virtual machine definitions can therefore easily be ported to other computers. VirtualBox 7.2.10 changelog: VMM: Fixed issue when CentOS 10 VM was not booting due to the message "Fatal glibc error: CPU does not support x86-64-v3" (​github:gh-642) Devices/EFI: Fixed booting issue when ARM VM had less than 1024 MiB of RAM assigned (​github:gh-679) USB: Fixed issue when it was not possible to attach USB device to headless VM on Apple Silicon/macOS 26.4.1 (​github:gh-631) Storage: Fixed issue when VIRTIO-SCSI device was not recognized as SSD device by guest system (​github:gh-634) Network: Fixed issue in E1000 emulation code which triggered debug log creation (​github:gh-645) Network: Fixed issue in E1000 emulation code which prevented OS/2 guest from booting (​github:gh-683) Linux Host: Fixed issue when VMs could not be started due to kernel oops (​github:gh-639) Linux Host and Guest: Fixed issue when kernel modules were failing to build with openSUSE 16.0 kernel Linux Host and Guest: Added initial support for kernel 7.1 Linux Host and Guest: Added extra fixes for RHEL 9.8 kernel (​github:gh-676) Linux Host and Guest: Added possibility to build source code using NASM instead of YASM as the assembler (​github:gh-520) Linux Guest Additions: Added initial support for Extended Data Control Protocol for clipboard sharing with Plasma on Wayland guests (​github:gh-33) Linux Guest Additions: Added extra fixes for preventing vboxvideo kernel module build with kernel version 7.0 and newer (​github:gh-655) OS/2 Guest Additions: Fixed issue when Shared Folders automount and clipboard sharing stopped working (​github:gh-551) Download: VirtualBox 7.2.10 | 170.0 MB (Open Source) Download: VirtualBox 7.2.10 Extension Pack | 19.1 MB View: VirtualBox Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • OK, now ask yourself how are they going to enforce that law? By requiring every single adult to prove their age and provide their legal identity documents to an UNREGULATED 3rd party company that already has a long track record of multiple data breaches. Not to mention, parliament have voted AGAINST this ban, twice, and Starmer is going ahead anyway. So, where's the democracy here, because that looks like dictatorship to me. The solution here is parental responsibility, not government control. Run some public service announcements on TV and UK social media teaching parents how to setup parental controls. That's already been proven to actually work. But the, this is not and has NEVER been about keeping kids safe. It's about control and monitoring. Watching what you're doing online and controlling what you can see and what you can say.
  • Recent Achievements

    • Week One Done
      suprememobiles48 earned a badge
      Week One Done
    • One Month Later
      Windows Guy earned a badge
      One Month Later
    • One Month Later
      Prasann earned a badge
      One Month Later
    • Week One Done
      Prasann earned a badge
      Week One Done
    • First Post
      Dys Topia earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      510
    2. 2
      +Edouard
      174
    3. 3
      PsYcHoKiLLa
      102
    4. 4
      Steven P.
      88
    5. 5
      ATLien_0
      70
  • Tell a friend

    Love Neowin? Tell a friend!