The OpnSense Series: 1. Home Lab Network Design

Hi, I hope you're doing well, so I'll be working on a

series

about

network

ing and firewalls and starting our lab at

home

. What would you need and what would you do before I can start the

series

? I think the first thing I need to explain and go over is what

network

we are actually going to create. To start, I just want to give three main requirements that I think you'll need in a lab, so the first requirement is, I think. It is very important to have two ports or connections, almost all medium and large companies use two or more Internet connections, so it is very important to start learning how to use them, manage them and what can be done with two ports, the second requirement It is an administration.

Network I think it's also very important to start learning how to have all the important devices and management software on a management network where it's easier to maintain those devices and maintain security on that network. You can block it much easier. The third and final requirement is to have some type of trunk port, so this will be a port that you can use to send many VLANs and there we can create multiple networks so we can create, for example, a network for guests, a network for network office for

home

, etc., so using those three requirements that will practically be the basis of our laboratory network because my server has two 1 gigabyte Nicks and four ports, I will use four of them, since you already know the open. sense for the router and then the other four ports that I can use for things like virtual machines or containers um and yeah, we'll use that to connect them to whatever network we want, so for example, if we create new networks here we can then join these machines together. virtual or specific containers to different networks as we need, yes, so I want to explain how we can only create two networks of a portal in our home lab, so what I'm going to do is from my main route here.

I've created two VLANs, so one will be network 17216 and then the other will be a network 1727 and then I'll give them a mask of 29, so that will give me six hosts on each. although we will probably only use one of each Network in case for some reason we need more from there, these two will be on a trunk connection or from a Trunk Port, so the two lands will pass through here to Port 24 so we will enter as tagged from there, we will untag them on their specific ports, so in this case this is VLAN one4, it will be V 105, so from here I will untag it as 104 and this will be untag as 105, so By doing that, we can take a cable and then split it into two w connections for our home lab to use.

The next thing is to create a management network so that one of the ports is dedicated to the management network which will only be 10.0. .0.0, so from there it won't be a VLAN, it's just a standard network and then it will go to port 23 and then on the switch itself. I have set ports 19 to 23 as UNT labeled and then the default. VLAN ID: I set it to 103, so any data that is on those ports coming in or going out will be part of VLAN 103 by default, so I have this management network coming in and then it splits. itself for the uplink if you want to call it that then I have proxmox which is on the same network and then I have an access point which will have the management network so whenever I want to work in my home lab I can connect to over Wi-Fi and then we have the trunk port, so that will be used for any new networks that we need to create in the future, for example, if we want to create a guest network, an office network, any other type of network. new network, we can use this as a trunk to bring those networks to a new management switch where we can then split them where they need to be okay, so I know this is just a quick video of how to go over this.

Leave a link in the description below for a little more detail and if you want to download the diagram, jpeg format, in the next video I'll probably go over installing open sense as a virtual machine and then we'll look at how to set up networking, how to do multi war and it will be an ongoing series so how do you do things like set up firewall rules, how to block websites and open sense, set up VPN, that kind of stuff so thanks for watching and see you next time