What's your home network look like?

Started by Ironman, February 25, 2015, 05:32:07 PM

Previous topic - Next topic

Ironman

Hi everyone! Always interested to hear what setups other Networking folks have at their houses.

My House:


  • Motorola Surfboard Modem
    Cisco 1941 Router
                   Running several IPsec/GRE tunnels to other people with BGP and EIGRP
                   Running a DMVPN (Spoke Site) to 2 other sites
    TP-LINK Wireless router plugged into the Cisco 1941 (Cisco runs DHCP and Default Gateway)
    WD MyBook Live for streaming media

Mother-in-Laws

  • Motorola Surfboard Modem
    Cisco 2821 Router
                   Running several IPsec/GRE tunnels to other people with BGP and EIGRP
                   Running a DMVPN (Hub Site) to 2 other sites
                   Running CME with a VoIP phone installed at this location and my house
    Netgear Wireless Router plugged into the Cisco 2821 (Cisco runs DHCP and Default Gateway)
:matrix:

I'm sure this is a "minor" setup compared to some of y'all. Whatchu got? :drama:

javentre

I just scored an ASA 5550 for my home firewall, for free. 
[url="http://networking.ventrefamily.com"]http://networking.ventrefamily.com[/url]

Ironman

Quote from: javentre on February 25, 2015, 05:50:00 PM
I just scored an ASA 5550 for my home firewall, for free. 


5550? Damn, that's awesome. I bought a 5505 for $75 and it should be here in another week or so.

javentre

It's loaded up with licenses too, AC Mobile, failover, 5K VPN Peers, etc.

I was just about to buy a 5506 too, this saved me a bit of money.


Where'd you get a 5505 for $75?
[url="http://networking.ventrefamily.com"]http://networking.ventrefamily.com[/url]

Ironman

Quote from: javentre on February 25, 2015, 06:21:46 PM
It's loaded up with licenses too, AC Mobile, failover, 5K VPN Peers, etc.

I was just about to buy a 5506 too, this saved me a bit of money.


Where'd you get a 5505 for $75?

My buddy works for a Cisco Gold Partner and gets refurbished equipment for about 80% off. All of my gear up until now has been free thanks to work. I have a 48 Port 3560 with POE as well. I need to get a small rack before I add that to the mix though.

Otanx

On the network side I have;
2 x 5510s full licenses one also has the IPS module in it.
4 x 2811s with assorted WICs. One of these has a dead power supply I need to fix.
2 x 3550 switches
1 x 1241 with the .a module installed
1 x no-name 5 port 1Gb switch

On the server side;
1 x white box FreeNAS server. 12TB storage using an external SATA enclosure
1 x Dell T310 server running ESXi 5.0
6 (I think) x Raspberry Pi systems doing a bunch of random stuff including console server, logging server, tac_plus, cacti, and other stuff.

Most of this sits in a 42U Dell rack in my home office.

-Otanx

Ironman


Reggle

Well, here goes mine:

Incoming a bridged modem from the provider, which goes to a 3560-8PC switch with 15.0(2) IP Services IOS. It's part of the "WAN" VLAN from there with direct public IP addresses. My provider hands out a public IP address to any DHCP-capable device on that VLAN, which is useful fo experimenting (I've had four public IP's at one point).
From there towards an Intel NUC with only one NIC that acts as a router. For that reason it's a trunk port with VLANs. The NUC runs Debian and I configured it from the ground up with BIND, Squid with SSL Inspection, ddclient, iptables and DNSCrypt. My little project that got me quite some experience in Linux :-)
The 3560-8PC has an internal VLAN which it shares with the NUC for routing towards the internet. All internal inter-VLAN routing is done in hardware in the 3560, together with GRE and BGP tunnels.
From that 3560 I have a Raspberry Pi which terminates the OpenVPN SSLVPN connections for when I want to connect remotely.
The 3560 also provides PoE towards a Cisco 7912 IP Phone which has an account with a voice provider, and PoE towards an AIR-LAP1142N-E-K9, which I converted to a standalone image and provides wireless.
The 3560 also links through to a 2940 switch on another floor with a trunk link. The 2940 connects television, game console and provider settop box which requires a direct internet connection. So it's in that "WAN" VLAN, which is useful because many other people in my country need to lay multiple cables towards their television: one for a game console or smart TV (behind the router) and one for the settop box (before the router).
Then there's a NAS connected somewhere, and everything else is wireless for the moment.

I have more Cisco gear but all of this is running 24/7 so I tried keeping it low-power (hence the NUC and the Raspberry).

To do's: I want an Asterisk somewhere for better control of the voice calls + hooking it up to friend's Asterisks for free calls. Everything is 100 Mbps, gigabit would be nice but I don't want to give up layer 3 IP Services and PoE for it. I want to work out some kind of monitoring solution, and IPv6 would be nice too but my provider promised that a long time already.

SimonV

Home network: SRX100B (used to be a 1841 ZBFW until last week) running OSPF towards a 3550-24-SMI which is running a couple of VLANs. Wireless on a Cisco 1142N access point, on which basically all my devices hang due to lack of cabling. All my data is on a FreeNAS with ZFS mirroring. DNS, DHCP and NTP server on a Raspberry.

Because the 3550 doesn't support IPv6 I'm thinking of ditching the VLAN thing and go flat network with prefix delegation  on the SRX. Another option I am considering is buying a passive 3560 or Juniper EX2200 because the 3550 is too noisy for my office.

Lab hardware laying around: around 5 x 1841s, 1 x 2811, 1 x 2621XM, 4 x 3550, 1 x 3560, 2 x 2950, 2 x SRX100B and an ASA5505. Then I also have bluecoat proxy which I will test on the gf one day :)

deanwebb

Right now, I just SSH to the machines at work and that's lab enough for me for now.
:matrix:
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

javentre

Quote from: deanwebb on February 26, 2015, 07:30:37 AM
Right now, I just SSH to the machines at work and that's lab enough for me for now.
:matrix:

That's what I do for lab gear too.  I have a lab with dozens of 6500/6800s, Nexus 6K/5600s, ONS 15454s, ACE, ASAs and a lot of other gear.  There's no reason for me to keep a home lab with quality/current gear available for my use, without almost no restrictions.
[url="http://networking.ventrefamily.com"]http://networking.ventrefamily.com[/url]

Nerm

My home network is pretty basic. Mikrotik 951 and I remotely access lab environment at the office.

hizzo3

For home I use a surfboard modem, a Asus ac56 with custom firmware, and a gs108t. Surprisingly, the netgear CLI isnt drastically different than IOS. For my gf's apt in the next building over, I'm using the 5ghz band as a backhaul into my network.
I have my home lab and servers all at home, with VPN access so I can access network shares/equipment remotely. Gotta love IP switched PDU's :)

Seittit

#13
WAN - ASA 5505
LAN - NETGEAR ProSAFE JGS524E 24-Port Gigabit Rackmount Plus Switch 10/100/1000Mbps (silent gigabit switch)
Hosts and NAS connect to this switch

My lab rack is in a dedicated bedroom, I use an Apple Airport Extreme to extend the Layer 2 network to the room to an Airport Express, which connects to an Cisco IE-3000 switch.

The IE-3000 connects to three branch sites and two ESX workstations within my rack:

Branch 1

  • ASA 5505
  • 3750 (4x stacked) switches
  • Raspberry Pi host
Branch 2

  • SRX 210 firewall
  • Juniper EX 3200
  • HP switches (one dumb and one smart)
  • Raspberry Pi host
Branch 3

  • Cisco IPS 4420
  • 3560 switches (2x)
  • 3550 switch
  • Kali Linux host
ESX hosts:
  • 20 CSR 1000v routers
  • 4 ASAv firewalls
  • 2 vWAAS appliances
  • 2 Juniper Firefly firewalls
  • Solarwinds NPM 11.5
  • Observium
  • SQL server
  • Active Directory environment
  • IOU server
  • Unix hosts
I also have two 3825 routers, a PIX, a 3524 switch, and other random gear that I haven't fired up in over a year. Rarely do I light up the rack, most of my work is done via ESX and GNS3/IOU. So sad, but I need to start selling my gear before it loses all value.

Ironman

Some of you guys have some very impressive setups! Definitely taking some notes. I want to get a raspberry Pi soon and have it do some cool stuff. Also, I'd love to get some Juniper gear but it's super pricey. Id also love to get a small block of public IPs like Reggle, but again, it's too pricey for me.