Home Network and Smart Home Setup: Comprehensive Guide
How to build a powerful and secure home network with Ubiquiti hardware
1Network Infrastructure Choice
Ubiquiti hardware offers a solution designed for power users without an overly steep learning curve. The Cloud Gateway Fiber router stands out with three 10 Gbps ports (one RJ45) and PoE+ support. Despite being reasonably priced compared to similar products, high demand makes it hard to find. This setup is more than sufficient for an average home user.
2WiFi 7 Support
The U7 Pro XG access point provides WiFi 7 and 6 GHz band support. Although it has a 10 Gbps uplink port, the router's PoE+ port is limited to 2.5 Gbps. However, WiFi 7 enabled devices (like new iPhones) can already benefit from this technology. The small price difference compared to the standard version makes it a logical choice for better performance.
3Switch and Connection Solutions
The Flex 2.5G switch establishes a fiber connection with the router, delivering 10 Gbps speeds. A smaller switch is placed at the opposite end of the apartment. Ethernet cables running through the ceiling connect all rooms. This setup maximizes the advantages of wired connections for high performance and reliability.
4DNS Solution: Pi-Hole
Pi-Hole running on a Raspberry Pi 3b serves as a personal DNS server. The system works with Unbound and updates the root DNS server list monthly. However, it's not enabled on all devices; only specific devices use this service. This prevents guests from experiencing internet access issues, as Pi-Hole might sometimes block more than necessary and break websites.
5VPN Integration
The router's native WireGuard support allows phones to connect to the home network when not on home WiFi. The primary use is accessing Pi-Hole from anywhere, automatically setting Pi-Hole as the DNS server for connected devices. It's also occasionally used to remotely access the router's admin console. No other traffic is routed through this VPN.
6IPv6 Support
IPv6 was configured to support both IPv4 and IPv6 on the network. Internal networks use SLAAC for prefix distribution and ULAs for easier IPv6 firewall rule writing. While this configuration takes advantage of IPv6 benefits, it doesn't currently make much practical difference.
7VLAN Configuration
The network has four different VLANs: Management VLAN contains only Ubiquiti hardware with full access. Trusted VLAN includes phones, computers, and local servers. IoT VLAN is completely isolated; devices can't communicate with each other or the internet. VPN VLAN powers the WireGuard integration with strict security rules.
8WiFi Networks
The access point broadcasts three SSIDs: 'Max' network offers WiFi 7 features on 5GHz/6GHz bands for modern devices. 'Legacy' network operates on 2.4GHz band for older devices. 'IoT' network connects to the isolated VLAN. The AP's radio scanning features optimize settings like channel selection and transmit power.
9Security Measures
IoT devices operate in a completely isolated VLAN with no inter-device communication (WiFi client isolation). Only specific IP+port exceptions allow certain devices to send information to Home Assistant. The VPN VLAN has minimal security rules permitting only phone access to Pi-Hole and admin console. This layered security approach maximizes network protection.
10Management Access
Only specific devices have gateway and admin console access. VLAN1 (Management) contains only Ubiquiti hardware with full access. Most VLAN10 (Trusted) devices have broad access but restricted admin console access. This layered access model enhances security while maintaining usability.
11Performance Optimization
Regular use of the AP's radio scanning features determines optimal channel selection and transmit power settings. The fiber connection ensures a clean 10 Gbps link between router and switch. Wired connections offer higher performance and reliability than wireless. These optimizations guarantee smooth network operation.
12Conclusion and Evaluation
While this setup is advanced for average home users, it offers an ideal solution for tech enthusiasts. Ubiquiti hardware features and flexibility meet complex network needs. VLANs and security measures provide high protection levels, while performance optimizations deliver seamless user experience. This setup showcases the cutting edge of home network technology.
Original article: Bruno Rocha — Ev Ağı ve Akıllı Ev Kurulumu: Detaylı Rehber