Home Network Planning!

[lotharamious]

Hey all,

So I've fallen into a some $$ recently and am about to move into a new house with a few friends of mine at school. I plan on building a new gaming rig and turning my current rig into a firewall/server. Being the way that I am, I want this to be an over-the-top project. So here's what I want to do...

internet
|
modem
|
firewall/server
|
switch --- LAN --- computer boxes
|
router --- WLAN --- lappys

I want to get a 16-port gigE switch that costs no more than $500. I would like it to be managed if at all possible... though at this price it is not likely to get a good one. I would also like my server to be a backup and ftp server and a firewall, possibly more if I can think of anything else.

The house will have 4-8 people. The server, at the very least, needs to be used for backup.

So I have several questions for you all.

1. What 16-port gigE switches do you recommend? I would really like suggestions from those of you that has some experience with >$100 switches. I'm looking for smart or managed switches. (At work I use Cisco 3560s and 3750s, which is ideally what I would like to get, but they're a whole order of magnitude outside my price range).

2. What do you guys recommend I do with the server? I would like to keep it linux-based if possible, but Windows would work fine, too. I would like to know of some cool firewall software (think IPCop) and backup software (think rsync). Also, are there any kind of internet caching-type programs that I should look into that cache frequently used websites, e.g. google?

3. Anything else I'm forgetting?

I want this to be a sweet project so please give me your input!! Feel free to ask questions or leave comments.

Thanks!

 

[Jamsan]

1) You won't get anything too too great out of a <$500 gigabit switch with atleast 16 ports. I'd recommend an HP ProCurve (1800 series are web maanged I believe). CDW has a 24 port Gig switch for about $400.

2) IPCop and rsync - For a caching server, give Squid a shot (http://www.squid-cache.org)

 

[bobdole369]

I would like it to be managed if at all possible...

Why?

At my office - with 25 people browsing one 6mbit dsl line - its not even close to saturated. The only reason my switches are even managed is to prevent a numbskull user from making a loopback. If its just to learn then fine, but for your size network you probably don't need it.

squid works well as a transparent proxy, but again if you have a decent broadband setup you don't need it- rsync is your friend for backup.

Your diagram won't work very well that way - try this:


internet
|
modium
|
firewall/router --- WLAN ----lappys (note that this branch is actually the same as if it were on LAN)
|
switch --- LAN--- computer boxes and server


SMC Websmart switches aren't TOO bad on price, but they are a bit convoluted. Nothing like a cisco.


Or if you want to obfuscate things -

internet
|
modium
|
dual NIC PC acting as a router and firewall (iptables still in use?) squid
|
gbit switch - LAN - WAP - laptops/wired PC's

 

[lotharamious]

bobdole, first, I must say that I have had a really weird obsession with THE Bob Dole since I've been in college. So it's ironic I'm talking to a bob dole.

Anyway, I don't really want to buy a hardware firewall, I just want to make one with a pc like you have in your obfuscated version. Isn't that version also just like the version I suggested?

I will definitely take a look at squid, never heard of it before. Can you guys think of any other cool things I can do with the server?

I appreciate your help so far!

 

[bobdole369]

Well you have a router on the LAN side of the network, you really only need a WAP (access point). If you went with a hardware firewall, you may as well get the WiFi included on it as well.

For your info - my name comes from working at a donut factory owned by a Cambodian refuge family (owners named Fey and Li) - during the 96 election. I tripped spilling a whole tray of donuts and eating floor - at the same time that Fey was watching Mr. Bob Dole take his spill off the stage. Fey screamed out "HAHAHA! BOB (my real first name) - YOU FALL JUST LIKE PRESIDENT!!!! YOU BOB DOLE!" My buddies were in line getting donuts - and well I was in high school - so you can imagine the rest.

email server - host a domain/website. Host your own ventrilo server?

 

[lotharamious]

awesome story... thanks for making my day. To be honest, my friend always had an obsession with saying "BOB DOLE!!!", just like "BOB SAGET!!!". Then I was thinking of screennames one day, and I went with bobdole once. It's turned into a cult thing ever since with close friends of mine and me.

 

[Jamsan]

Since this seems to be mostly for learning, you can also setup Snort and Open VPN

 

[DisgruntledVirus]

I fail to see why a 16 port managed switch is needed for this.

If you want a 16 port managed gig switch, Newegg has a Netgear model for $550. You won't be able to get a Cisco one for that price (unless you find an end of life from a company or something).

 

[n0cmonkey]

I've heard decent things about both bacula and amanda for backups. Don't do the rsync thing. I think everyone writes an rsync script for backups at least once. It's not worth it.