Advice on New Home Network Setup
Discussion
I'm out of the loop on home networking these days, and am currently moving to an older house which I'm having rewired in the next few months.
What's the best way of keeping things secure and segregated nowadays?
Throw any and all advice at me - setup, configuration, equipment etc etc etc
I want a network for personal devices obviously, and will want the likes of a Shield TV or Apple TV on that network for ease of casting images and video to the chosen device. Ditto a NAS for accessing locally stored stuff.
Presumably I'll have to keep smart home speakers on the same network to Cast to them too?
But when it comes to other devices such as WiFi security cameras, carbon monoxide detectors, smoke alarms, smart bulbs, smart outlets etc what is the best way of handling it all nowadays? I'm seeking to try and keep things as secure and private as possible.
What's the best way of keeping things secure and segregated nowadays?
Throw any and all advice at me - setup, configuration, equipment etc etc etc
I want a network for personal devices obviously, and will want the likes of a Shield TV or Apple TV on that network for ease of casting images and video to the chosen device. Ditto a NAS for accessing locally stored stuff.
Presumably I'll have to keep smart home speakers on the same network to Cast to them too?
But when it comes to other devices such as WiFi security cameras, carbon monoxide detectors, smoke alarms, smart bulbs, smart outlets etc what is the best way of handling it all nowadays? I'm seeking to try and keep things as secure and private as possible.
If you can afford it, look at Ubiquiti. They do routers/switches/Wifi stuff of various sizes, with near-Enterprise-level features, and a neat single application to manage it all from.
You certainly need kit that's capable of supporting VLANs over Wifi so you can segregate horribly insecure IOT stuff from your main network.
I use Ubiquiti but not the most recent stuff, Edgerouter, 3 WiFi access points plus a self hosted Unifi controller. IOT is on VLANs, and I used to have a time-based WiFi SSID that the kids' devices were on so I could turn off access at night... Very useful if you have younger kids.
Corso Marche said:
I'm out of the loop on home networking these days, and am currently moving to an older house which I'm having rewired in the next few months.
What's the best way of keeping things secure and segregated nowadays?
Throw any and all advice at me - setup, configuration, equipment etc etc etc
I want a network for personal devices obviously, and will want the likes of a Shield TV or Apple TV on that network for ease of casting images and video to the chosen device. Ditto a NAS for accessing locally stored stuff.
Presumably I'll have to keep smart home speakers on the same network to Cast to them too?
But when it comes to other devices such as WiFi security cameras, carbon monoxide detectors, smoke alarms, smart bulbs, smart outlets etc what is the best way of handling it all nowadays? I'm seeking to try and keep things as secure and private as possible.
Depends what you're comfortable with...What's the best way of keeping things secure and segregated nowadays?
Throw any and all advice at me - setup, configuration, equipment etc etc etc
I want a network for personal devices obviously, and will want the likes of a Shield TV or Apple TV on that network for ease of casting images and video to the chosen device. Ditto a NAS for accessing locally stored stuff.
Presumably I'll have to keep smart home speakers on the same network to Cast to them too?
But when it comes to other devices such as WiFi security cameras, carbon monoxide detectors, smoke alarms, smart bulbs, smart outlets etc what is the best way of handling it all nowadays? I'm seeking to try and keep things as secure and private as possible.
I have some old enterprise gear and a Mikrotik router. So I have VLANs.
Core switch configuration:
Pretty much the hub of the network. I have the router attached on port 1, which can firewall traffic between VLANs - so it should be possible to cast across too, with the right configuration. As it is, I think I'm missing some settings, as it seems a bit flaky to do it that way. So the bedroom TV is attached to the Wifi VLAN.
Port 5 is to the Wifi router, which is a Zyxel NWA50AX, and also supports VLANs.
Port 50 and 51 are 10 gigabit fibre uplinks to distribution switches, one for Hifi, one for the office. Port 49 is my server, connected with a 10 gigabit DAC.
So yeah, probably overkill, but VLANs are exactly what you're looking for. Same physical network, total virtual separation.
Another vote for Ubiquiti for a decent mix of price, performance and ease of setup.
I've a cloud gateway fiber, a couple of switches(one at the end of a single cable run to allow more devices at the far end), 3 access points and a camera, so pretty small in comparison to others, but it does all I need it to.
Re wifi cameras - if you want them for security, go wired.
I've a Qnap NAS running my PiHole, backups and file hosting for when I want to grab books (useful when I was at the Hospital last month.
I've a cloud gateway fiber, a couple of switches(one at the end of a single cable run to allow more devices at the far end), 3 access points and a camera, so pretty small in comparison to others, but it does all I need it to.
Re wifi cameras - if you want them for security, go wired.
I've a Qnap NAS running my PiHole, backups and file hosting for when I want to grab books (useful when I was at the Hospital last month.
wombleh said:
How network savvy are you OP, comfortable diving into command line and setting things up? Or prefer a solution that's a bit more "user friendly" and driven from a single graphical interface.
I'm a firm believer in keeping things as simple as possible.So yeah, if there's a simple solution with a GUI which offers decent value I'm all ears.
I also want to try and get this as right as possible out of the gate. I'd rather not be wasting more time making changes/upgrades in a few years time.
Edited by Corso Marche on Saturday 31st October 20:26
Camera definitely the hard wired poe route and smoke alarms and co2 alarms too. More expensive but secure.
The rest it depends on you want., I use Apple TV as quietly the best solution for streaming and if you have Apple phones it integrates nicely. Smart devices I use home assistant and that also integrates into the Tado smart thermostats. A mesh router and and two access points doesn’t job nicely. Hi yes and the ecoflow battery is into home assistant too.
I would not try and split the network up as it make it fiddly to get some devices to integrate.
The rest it depends on you want., I use Apple TV as quietly the best solution for streaming and if you have Apple phones it integrates nicely. Smart devices I use home assistant and that also integrates into the Tado smart thermostats. A mesh router and and two access points doesn’t job nicely. Hi yes and the ecoflow battery is into home assistant too.
I would not try and split the network up as it make it fiddly to get some devices to integrate.
Rule 1: anything that doesn’t move will be wired. You’re re-wiring the house, so add Cat 6 (or 5e) while you’re at it. Lots of it. More than you think you’ll need. That way, you’re a bit more future proofed as demand grows.
Then, as already mentioned, Unifi equipment. Pick your starting point - their range of gateways runs from “Light Home User” to “Medium Sized Business”. The CyberSecure add-on is good value if you feel the need (I certainly do).
Now add your chosen devices, VLANs, etc, and you should be good.
Be warned, Unifi is addictive- before you know it you’l have their cameras, access control, NAS……. But it’s stable, reliable, and effective without being hugely expensive.
Then, as already mentioned, Unifi equipment. Pick your starting point - their range of gateways runs from “Light Home User” to “Medium Sized Business”. The CyberSecure add-on is good value if you feel the need (I certainly do).
Now add your chosen devices, VLANs, etc, and you should be good.
Be warned, Unifi is addictive- before you know it you’l have their cameras, access control, NAS……. But it’s stable, reliable, and effective without being hugely expensive.
TP link omada platform is another one to consider, cheaper and I prefer it for a few reasons having moved from ubiquity. I was very much a TP link snob before as a network guy mainly using Cisco/aruba/etc but it’s good kit.
I’ve only got the wifi as my setup is similar to Solocies, so can’t say how well the gateway works.
Can play on emulated version to see features https://support.omadanetworks.com/uk/emulator/
I’ve only got the wifi as my setup is similar to Solocies, so can’t say how well the gateway works.
Can play on emulated version to see features https://support.omadanetworks.com/uk/emulator/
wombleh said:
TP link omada platform is another one to consider, cheaper and I prefer it for a few reasons having moved from ubiquity. I was very much a TP link snob before as a network guy mainly using Cisco/aruba/etc but it s good kit.
I ve only got the wifi as my setup is similar to Solocies, so can t say how well the gateway works.
Can play on emulated version to see features https://support.omadanetworks.com/uk/emulator/
I'm curious as to why you moved away from Ubiquiti?I ve only got the wifi as my setup is similar to Solocies, so can t say how well the gateway works.
Can play on emulated version to see features https://support.omadanetworks.com/uk/emulator/
The prices are broadly similar (Ubiquiti stuff is abput 10% more) but is much more polished.
Suspicious_user said:
I'm curious as to why you moved away from Ubiquiti?
The prices are broadly similar (Ubiquiti stuff is abput 10% more) but is much more polished.
Main issue for me was the APs rebooting every time there was a setting change, so problematic for test/dev or customer networks. Omada was about £60 per AP at that time where Unifi was more like £100+, so was cheap enough to take a punt on.The prices are broadly similar (Ubiquiti stuff is abput 10% more) but is much more polished.
wombleh said:
Suspicious_user said:
I'm curious as to why you moved away from Ubiquiti?
The prices are broadly similar (Ubiquiti stuff is abput 10% more) but is much more polished.
Main issue for me was the APs rebooting every time there was a setting change, so problematic for test/dev or customer networks. Omada was about £60 per AP at that time where Unifi was more like £100+, so was cheap enough to take a punt on.The prices are broadly similar (Ubiquiti stuff is abput 10% more) but is much more polished.
For £100 you get 4 streams, 2.5 gbps uplink and wifi 7 (U7 Lite) - a similar product on the Omada platform is the TP-Link EAP723 WiFi 7 Access Point(4 streams, 2.5 Gbps uplink and wifi 7), which costs £99.
Suspicious_user said:
How often are you making config changes to the wifi network? I can't remember the last time I made any changes.
For £100 you get 4 streams, 2.5 gbps uplink and wifi 7 (U7 Lite) - a similar product on the Omada platform is the TP-Link EAP723 WiFi 7 Access Point(4 streams, 2.5 Gbps uplink and wifi 7), which costs £99.
I do some test/dev on wifi connected stuff and networks so it happens occasionally, but suspect your average home user won't notice. I'm not sure if it still does it as last forum posts mentioning it were a few years ago and it's a pretty big flaw for business systems, so suspect they've sorted that behaviour now.For £100 you get 4 streams, 2.5 gbps uplink and wifi 7 (U7 Lite) - a similar product on the Omada platform is the TP-Link EAP723 WiFi 7 Access Point(4 streams, 2.5 Gbps uplink and wifi 7), which costs £99.
I'd look at both now, although would probably give Mikrotik gear a try next time I upgrade. Don't think that'd meet OPs use case though.
wombleh said:
I do some test/dev on wifi connected stuff and networks so it happens occasionally, but suspect your average home user won't notice. I'm not sure if it still does it as last forum posts mentioning it were a few years ago and it's a pretty big flaw for business systems, so suspect they've sorted that behaviour now.
I'd look at both now, although would probably give Mikrotik gear a try next time I upgrade. Don't think that'd meet OPs use case though.
Oh yes, I agree, If I was starting from scratch I would be looking at Mikrotik (but not for the Op I'd look at both now, although would probably give Mikrotik gear a try next time I upgrade. Don't think that'd meet OPs use case though.
)Call me old fashioned (and I'm ex-lifetime IT) but my network:
Three (Xytel) 5g router. - > Asus wifi router.
1 x 24 port Gb switch
Off that hangs
Orbi router, printer, Intel NUC (HA), Synology NAS, Hive base station, link (cables) to lounge and dining room (cat 5E) - off those, PC, 5 port switch for TV area (cinema hardware) plus one mains-lan adapter.
2 more orbis - one in conservatory, one in dining room.
Upstairs - other mains-lan adapter connected to long range CPE for garden wifi.
Then dotted around, loads of home automation sensors and the likes, (lights, doors, camera etc) all on wifi/Z-Wave/Zigbee)
That's it really - no VPNs or segregated lans. No special areas for my IOT devices.
My firewall is my Asus router.
Three (Xytel) 5g router. - > Asus wifi router.
1 x 24 port Gb switch
Off that hangs
Orbi router, printer, Intel NUC (HA), Synology NAS, Hive base station, link (cables) to lounge and dining room (cat 5E) - off those, PC, 5 port switch for TV area (cinema hardware) plus one mains-lan adapter.
2 more orbis - one in conservatory, one in dining room.
Upstairs - other mains-lan adapter connected to long range CPE for garden wifi.
Then dotted around, loads of home automation sensors and the likes, (lights, doors, camera etc) all on wifi/Z-Wave/Zigbee)
That's it really - no VPNs or segregated lans. No special areas for my IOT devices.
My firewall is my Asus router.
OP, I have a reasonably complex setup (Omada, all managed switches, Frigate, HA etc).
What makes a real difference is easy wiring and *space*. Think about where you can put some 19" cabinets, ideally more than one, so you have plenty of space to put your chosen kit in.
Clearly a floor-standing rack is better than a 10" telecoms cabinet, but they are all better than having fancy kit shoved in the dusty corner of a room!
What makes a real difference is easy wiring and *space*. Think about where you can put some 19" cabinets, ideally more than one, so you have plenty of space to put your chosen kit in.
Clearly a floor-standing rack is better than a 10" telecoms cabinet, but they are all better than having fancy kit shoved in the dusty corner of a room!
biggiles said:
OP, I have a reasonably complex setup (Omada, all managed switches, Frigate, HA etc).
What makes a real difference is easy wiring and *space*. Think about where you can put some 19" cabinets, ideally more than one, so you have plenty of space to put your chosen kit in.
Clearly a floor-standing rack is better than a 10" telecoms cabinet, but they are all better than having fancy kit shoved in the dusty corner of a room!
I really wish I'd bought a rack back in the day.What makes a real difference is easy wiring and *space*. Think about where you can put some 19" cabinets, ideally more than one, so you have plenty of space to put your chosen kit in.
Clearly a floor-standing rack is better than a 10" telecoms cabinet, but they are all better than having fancy kit shoved in the dusty corner of a room!
My switches are up in the garage loft, a complete rats nest of DIY-terminated ethernet cables. At least I labelled most of them...
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff