Recommended Posts

Hi

Having spent a lot of the weekend playing with pfSense I am really keen to replace my router with it.

I am currently on BT Infinity which for those that are not in the UK is a FTTC service which comes with two devices: a VDSL modem and a wireless router. The router has an Ethernet WAN port where it connects to modem. As far as I know connectivity is via PPPoE.

OK, some complexity:

My home network consists of 4 rooms of networked devices. These are:

Living room/lounge

Telephone socket > Modem > Router

Router > Television

Router > Media streamer

Router > PlayStation 3

Router > PVR

Router > Home plug

Bedroom

Home plug > Media streamer

Study/office

Home plug > PC

Network Closet

Home plug > Switch

Switch > Microserver (running ESXi)

Switch > NAS

Switch > printer

Hope that was clear! Other stuff worth mentioning:

1) I want to run pfSense as a VM on the Microserver

2) The Microserver only has one NIC, it also has no free PCIe slots

3) running CAT 5/6 between rooms simply isn't possible, home plug is the only option for reliable connectivity between rooms.

4) can't move the modem

5) can't move the Microserver.

Any suggestions as to how best set this up?

Link to comment
https://www.neowin.net/forum/topic/1120516-home-network-setup/
Share on other sites

Not possible with one nic. Thanks for playing though.

Reason being: pfsense is a firewall. A firewall needs two nics. One for secure traffic, or the local LAN, and one for unsecure traffic, the Internet or dsl/cable modem.

Without two nics to seperate secure from unsecure it isn't going to work out too well. And you will constantly have issues with getting it to work.

"2) The Microserver only has one NIC, it also has no free PCIe slots"

What do you mean it has no free slots? What did you put in it? Let me guess a Raid card? For what reason - you don't need a raid card to be honest unless you had some reason to run raid 5 or higher and didn't want to do it in software. You can do 0 or 1 with the built in card. I have 3 disks in my NAS on the thing and I just use drive pooling. I might move to a parity drive at some point, etc. My more important files that I don't want to have to recover I let the pooling software store those on more than 1 disk in the pool. Click on folder you want to be on more than 1 drive, etc.

You could go with USB nic I guess. Do you have as smart/managed switch - you could do it with 1 nic and vlan tagging. But I would prob pull the card you have and go with 2nd nic. But as me an sc302 discussed the other day - for the internet side at 100mbit or less you could go with USB.

The slots are occupied by a RAID card which does RAID 5 across 8 1TB disks and a mSATA adaptor for OS booting.

The mSATA adaptor could go and be replaced with a NIC. If I went this route, how do I get the connection from the modem to the network closet and keep it separate from the other home plug network? Is it possible? My googling has not yielded anything useful.

I could get some managed switches (budget isn't really a concern, elegance is) but what would the topology look like and would I need one in every room? Could I put the PPPoE connection on a separate VLAN?

The internet connection is currently 40Mb but will but be upgraded to 80Mb in the nearish future.

Any advice is gratefully received.

"RAID 5 across 8 1TB disks"

Where you are you putting 8 disks in a N40L/N36L? Those are the 2 microservers I know -- It has bays for 4, and you could put to in the optical bay area - so your running 2 external? Do you have some other model number?

If your goal is "elegance" I wouldn't think 8 disks on a at max 6 drive system?? very elegant? Why don't you just bump the size up on the disks and have less disks and more space even if you got rid of raid card and just went software or jbod with pooling, etc.

In your drawing you show another NAS??

And why can you not move the microserver to where your router/modem is now?? The box is pretty tiny!!

I did a quick google but did not find any info about vlans over homeplugs - but from spec they are suppose to support 802.1q -- but might only be used for qos. But if they support 802.1q - you should be able to tag the different networks if you have smart switches connected to your homeplugs and keep the internet and local lans isolated via tagging.

But if you could move your microserver to where you router is now its much easier and you could use dumb switches still.

You can easily and elegantly fit 8 disks into a Microserver.

I have one of these (http://icydockuk.com/goods.php?id=142) in the optical bay slot holding 4x Seagate Constellation ES.2 ST91000640NS 1GB 2.5" SATA enterprise class drives and 4x WD 1TB RE4's in the regular slots.

The second NAS is there to back up important files from the server and is a single bay Qnap unit with a 4TB disk in it. In the longer term this may get replaced with a multibay unit.

Anyway, the unit is far too noisy to be put in my living room so no, that really is not an option. The size doesn't bother me - it's the noise.

If I go the smart switch route do I need smart switches in my bedroom and study despite there only being one device in each room? If not how do they know what VLAN they are on?

"1GB 2.5" SATA enterprise class drives and 4x WD 1TB RE4's in the regular slots."

Oh 2.5 inch disks - those are normally slower - but enterprise class are NOT cost effective!!! That 1TB drive lists for $229 your out of your freaking MIND to go with those ;)

http://www.newegg.co...N82E16822148710

But sure that works ;) Other than no sata slots for 8.. So yeah you would need card. Wouldn't it have been more cost effective to just put in some 2 or 3TB drives and be done with it with using less bays?

Noisy? Mine doesn't make a peep?? Is is currently sitting like 4 feet from me - other than the blue HP light and power light I would not know its on even.. You must have something wrong if its making any noise? You would have to change out all your switches with smart if your wanting to use tagging to isolate while running across your homeplugs.. I would really suggest you research that before doing it.. But from the homeplug 1.0 spec it says they support 802.1q (vlan tagging)

Its like what a $100 for the dock, when you could of just put in 2TB drives not needed more sata slots. And had same amount of space 4TB, or when with 3TB and had 2 more TB, etc..

So could of gone with these

http://www.newegg.com/Product/Product.aspx?Item=N82E16822148953

at $259 each x 2 = 518

or your 229 x4 = 916 for the same space? That makes NO sense, sorry!

Lol - it would be cheaper yes, if I paid full price for my configuration but let's just say I paid a fraction of that number ;-)

The noise comes from the drives, not the server itself, which I agree is very quiet (but not silent) - I have very sensitive hearing.

Anyway - I think I get it:

Option 1:

A single homeplug network with a smart switch attached to each homeplug, Microserver has one NIC.

Living Room:

Telephone Socket > Modem > Smart Switch (VLAN 1)

Smart Switch > PVR (VLAN 2)

Smart Switch > TV (VLAN 2)

Smart Switch > Media Streamer (VLAN 2)

Smart Switch > PS3 (VLAN 2)

Smart Switch > Homeplug (VLAN 1 & 2)

Network Closet:

Homeplug > Smart Switch (VLAN 1 & 2)

Smart Switch > Microserver (VLAN 1 & 2)

Smart Switch > NAS (VLAN 2)

Smart Switch > Printer (VLAN 2)

Bedroom:

Homeplug > Smart Switch (VLAN 2)

Smart Switch > Media Streamer (VLAN 2)

Study:

Homeplug > Smart Switch (VLAN 2)

Smart Switch > PC (VLAN 2)

Option 2:

A single homeplug network with a smart switch attached to each homeplug, Microserver has two NICs.

Living Room:

Telephone Socket > Modem > Smart Switch (VLAN 1)

Smart Switch > PVR (VLAN 2)

Smart Switch > TV (VLAN 2)

Smart Switch > Media Streamer (VLAN 2)

Smart Switch > PS3 (VLAN 2)

Smart Switch > Homeplug (VLAN 1 & 2)

Network Closet:

Homeplug > Smart Switch (VLAN 1 & 2)

Smart Switch > Microserver NIC 1 (VLAN 1) - WAN

Smart Switch > Microserver NIC 2 (VLAN 2) - LAN

Smart Switch > NAS (VLAN 2)

Smart Switch > Printer (VLAN 2)

Bedroom:

Homeplug > Smart Switch (VLAN 2)

Smart Switch > Media Streamer (VLAN 2)

Study:

Homeplug > Smart Switch (VLAN 2)

Smart Switch > PC (VLAN 2)

Option 3:

Two parallel homeplug networks, Microserver has two NICs.

Living Room:

Telephone Socket > Modem > Homeplug 1

Switch > PVR

Switch > TV

Switch > Media Streamer

Switch > PS3

Switch > Homeplug 2

Network Closet:

Homeplug 1 > Microserver NIC 1 - WAN

Homeplug 2 > Switch

Switch > Microserver NIC 2 - LAN

Switch > NAS

Switch > Printer

Bedroom:

Homeplug > Media Streamer

Study:

Homeplug > PC

Right now, option 3 is looking like the most likely...

This topic is now closed to further replies.
  • Posts

    • Rufus alternative Ventoy now supports Windows 11's mandatory update, fixes major boot bug by Sayan Sen While Microsoft has its own official Media Creation Tool used for making bootable USB media, there are some popular third-party utilities as well which offer additional options like bypassing system requirements, Microsoft Account creation, and more. One of these is Ventoy, and the software has received its latest update today. In fact, the app actually got a slew of updates over the last couple of days, three version releases in total, to be specific. The first release, version 1.1.13, was pulled as there was some unspecified error in the update, and as such, the corrected version 1.1.14 was pushed out. Following that on very short notice, 1.1.15 was published as well. For those unfamiliar, Ventoy is an open-source utility that lets users create a bootable USB drive once and then simply copy ISO, WIM, IMG, VHD, or EFI files onto it without repeatedly formatting the drive. It supports both legacy BIOS and UEFI boot modes, Secure Boot, and a wide range of operating systems, making it one of the most versatile tools in the category. The biggest change in version 1.1.14 is an updated Secure Boot shim file aimed at resolving the UEFI CA 2023 issue, which is basically a compatibility problem that has affected Secure Boot environments on some systems. If you recall, we reported about severe boot issues on HP devices following the release of updated Secure Boot 2023 keys. For anyone who may not be aware, back in early 2024, Microsoft announced that it was updating Secure Boot keys as they were going to become 15 years old in 2026, which is also when they are set to expire. As such, the new 2023 certificates have been rolling out with the newest Windows 11 updates. Updated boot manager and Secure Boot certificates are crucial for protection against malware like bootkits. These are mandatory updates. Alongside that, the VentoyPlugson graphical plugin configurator was updated in sync with the release. The update also introduces a new VTOY_SECURE_BOOT_POLICY option within the Global Control plugin, giving users more flexibility in managing Secure Boot behavior. Ventoy has also received a fix for a startup issue when Secure Boot was disabled. Microsoft does officially allow users to boot systems without Secure Boot as long as the PC is Secure Boot capable. The full changelog is given below: Update secure boot shim file to solve the UEFI CA 2023 issue. The new release use a new CA, so you need to enroll the new key for the first boot time. VentoyPlugson update synchronously. Global control plugin add a VTOY_SECURE_BOOT_POLICY option. Fix the boot issue when Secure Boot is disabled in the UEFI firmware. You can download the latest version of the app here on Ventoy's official GitHub repo or from Neowin software stories.
    • Windows 11 is fine, no issues on any of the machines I've run it on since release. The stricter security requirements are a good thing, sometimes the baseline needs to change and people will winge, but it is what it is. Happened with the move from 9x to NT - broke compatability Happened with XP SP2 when security started to become a serious consideration Certainly happend with Vista that brought in UAC, the concept of not running as admin (something that has been the norm in Linux/Unix from pretty much the start) and a completely new driver stack. Windows 11 will probably get looked back at as the point where even consumer and SMB IT was dragged kicking and screaming into a somewhat secure by default configuration.
    • Bluestacks has been emulating Android on Windows for fifteen years. It's janky and riddled with ads though, so WSA looked like it was going to be a huge improvement over the emulator experience. Too bad Microsoft dropped the ball on that.
    • Classic. China would be nothing without Western, Japanese, and South Korean technology.
    • The world is larger then your small viewpoint. Plenty of scientists care about this, especially those involved in space.
  • Recent Achievements

    • Rookie
      krychek57 went up a rank
      Rookie
    • Grand Master
      Jaybonaut went up a rank
      Grand Master
    • One Year In
      Philsl earned a badge
      One Year In
    • Dedicated
      Scoobystu earned a badge
      Dedicated
    • First Post
      Tom Schmidt earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      441
    2. 2
      +Edouard
      172
    3. 3
      PsYcHoKiLLa
      134
    4. 4
      Michael Scrip
      78
    5. 5
      Xenon
      77
  • Tell a friend

    Love Neowin? Tell a friend!