Router and Network Setup¶

I started my foray into custom networking using DD-WRT running on a Linksys WRT3200ACM. This worked well for a while but I noticed performance issues as my network grew. In October 2019 I decided to go all in and setup a pfsense router.

Router¶

• HP EliteDesk 800 G2 SFF Desktop PC
• Intel Core i5-6600 (quad core @ 3.3 GHz)
• 8GB RAM
• 128GB SSD HDD

• Running pfsense: 2.5.2 (based on FreeBSD 12.2)

NOTE: be sure to enable powerd (System > Advanced > Miscellaneous). See: https://docs.netgate.com/pfsense/en/latest/book/config/advanced-misc.html#power-savings

Configuration¶

To run 10G LAN as a separate VLAN:

• Go to Interfaces > Interface Assignments > VLANs and define the VLAN (17) on `mlxen0`.
• Go back to Interface Assignments and create an interface for the 10G LAN if one doesn't already exist. For "Network port" select VLAN17 on mlxen0. (actually this doesn't work, just select `mxlen0`)
• Go to Firewall > Rules > 10G_LAN and create an "Allow all" rule for the interface:
  • ALLOW IPv4; protocol any; src 10G_LAN net port any to dest 10G_LAN net port any
• Also create rule to block LAN traffic on 10G net:
  • BLOCK IPv4; protocol any; src any to dest LAN net
  • Add similar rule to LAN to block 10G_LAN traffic

Main Switch¶

• 24 port 1000-BaseT POE ports
• 4 SFP+ (10G) ports

Reset Instructions¶

If switch configuration needs to be reset follow these instructions:

1. Power On and boot the Mobility Access Switch.
2. Connect a client device (such as a laptop) to the Mobility Access Switch using any Ethernet port in the front. Ensure that DHCP is enabled on the client device and that it is not connected to any other network.
3. For the S2500 and S3500 Mobility Access Switch, perform the following steps: # Press the LCD Menu button until Maintenance is selected. # Press the LCD Enter button to enter the Maintenance menu. # Press the LCD Menu button until GUI Quick Setup is selected. # Press the LCD Enter button to activate the GUI Quick Setup mode. Quick-setup invoked... appears on the LCD screen.
4. For the S1500 Mobility Access Switch, press and hold the MODE button for 10 seconds or until the four mode status LEDs turn solid green to activate the GUI Quick Setup mode.
5. Confirm that the client device has the IP address in the following range 172.16.0.[1-253] and the DHCP server has the IP address 172.16.0.254.
6. Open a web browser and enter 172.16.0.254 into the address bar to launch the WebUI Startup Wizard.
7. Follow the on-screen prompts to fill in the required fields to complete the configuration (see Table 1).

Disable Stack Ports¶

This is how you disable the stack ports so you can use them as regular ports.

1. Log into switch:
   

   $ ssh admin@192.168.1.2
   

2. Type enable and hit enter. Enter enable password when prompted.
3. Enter the commands below:
   

   (ArubaS3500-24-POE) #configure terminal
   
   (ArubaS3500-24-POE) (config) #delete stacking interface stack 1/2
   
   (ArubaS3500-24-POE) (config) #delete stacking interface stack 1/3
   
   (ArubaS3500-24-POE) (config) #write mem
   

Configuration¶

• If running the 10G network as a separate VLAN, under "Vlans" define VLAN 17 and give switch an unused IP: 10.250.1.10/255.255.255.0
• Next under "Ports" on the "Switching" tab define a profile for the 10G LAN and associate all 10G ports with it:

  Name	Switch Mode	Access VLAN	Native VLAN	Allowed VLANs	Association
  10G_LAN	access	17	1	1-4095	GE-0/1/0;GE-0/1/1;GE-0/1/2;GE-0/1/3

10G Supplemental Switch¶

MikroTik CRS305-1G-4S

NOTE: Switch has two operating system options. SWOS is much simpler and therefore preferred for this application. Note that holding the reset button while powering only resets the RouterOS configuration not the SWOS configuration. To reset SWOS boot into RouterOS and navigate to the terminal, then enter this command:

/system swos reset-config

Also to set the boot OS: System > Routerboard > Settings > Boot OS

Reset Instructions¶

• Disconnect all network ports. Disconnect power, using tip of mechanical pencil press reset button and hold. Reconnect power. When green light flashes several times release the reset button.
• Switch will reboot into RouterOS.
• To connect connect to MGMT (1G) port to laptop. Set static address on laptop to 192.168.88.2/255.255.255.0 with gateway 192.168.88.1. Open web browser and navigate to 192.168.88.1.
• Enter basic details, including DHCP setup.
• Click Terminal button in upper right corner.
  • Enter this command to reset SwOS:
    

    /system swos reset-config
    

• Next navigate back to Webconfig to change boot configuration: System > Routerboard > Settings > Boot OS and set SwOS.
• Finally click the Reboot option on the side menu.
• Disconnect from laptop and connect MGMT port back to regular network. After reboot switch should be accessible at DHCP reservation address: 192.168.100.2.
• Default credentials are: admin/<no password>

Configuration¶

To use 1G port as management port go to RSTP tab and uncheck the checkbox next to MGMT. In Port Isolation tab, isolate MGMT from other ports.

Wireless AP¶

• https://www.commscope.com/product-type/enterprise-networking/wireless-access-points/indoor/r710/

Wiresless Networks¶

• 57752d54616e67204c414e - legacy 5 GHz - WPA2
• 4162726168616d204c696e6b737973 - legacy 2.4 GHz - WPA2
• Weyland-Yutani Corporate - 5 GHz/2.4 GHz - WPA3/WPA2

DHCP Registrations¶

• MAC: dc:4a:3e:81:f5:49
• IP: 10.0.188 (reserved)

Switch¶

Wireless Clients¶

Wired Clients¶

Printer Clients¶

Camera Clients¶

House Clients¶

Work Clients¶

IPMI Interfaces¶

10G Network¶

The 10G network is setup as a VLAN (17) using `10.250.1.0/24` addressing. (I never could get the VLAN working).

Main Switch - Port Assignments¶

Copper ports:

Port assignments (SFP_ fiber):

Backup Switch¶

• TP-LINK TL-SG1016D - 24 port "dumb" switch

Resources¶

• DD-WRT Installation, Upgrade & Basic Setup–Cliff Notes
• DD-WRT Forum - primary WRT3200ACM topic