Hi, I need some help in setting up a small home network
I am trying to secure and setup a basic secured home network to learn. It
would really be greatly appreciated for any help on this.
I have been reading these forums which seem to be a good source
besides youtube, etc but have been struggling in setting up the config via CLI.
I am looking to basically configure the Setup of the Cisco SG300 and what commands to use.
I have the following network devices:
1 cable modem
1 Cisco SG300 10 port managed switch
1 home built IP Fire device (4 NICS) (Intel NUC I3 4 ports)
1 unmanaged POE switch
1 WiFI ISP router
IPFire Device whitebox setup ( to be connected to the CIsco SG300)
Red port- To internet -> ISP Router
Green port- to private network
Blue port - to WAP(ISP Router)
DMZ- Orange port to Regular pc
Here is how I was thinking to set it up.
Basically, I want to have the IPfire device as my firewall connected to my ISP cable modem to(Red Port), than coming in from the IPfire device green port(Private lan) going to a port on my Cisco SG300 .
I want to than have a port on my Cisco SG300 that connects to my
unmanaged poe switch that hosts my IP Cams. Than configure a few ports for 2 VMware ESXI hosts, and 1 or 2 pc's on that switch.
Example of what i was thinking
Cisco SG300
VLAN 10(Management IP of CISCO SG300) 192.168.1.2 int gi0/10
VLAN 20(ESXI) 10.10.70.1 int gi0/1 gi0/2
VLAN 30(storage) 10.10.80.1 int gi0/3
VLAN 40(IP CAM) 10.10.90.1 int gi0/5 going to unmanaged POE switch that hosts 5 ports of CAMS on unmanaged device
I have 5 cameras on the unmanaged POE switch.
I basically am looking to make my home network more secure by implementing the firewall to be the IDS, and than have my Cisco Sg300 behind that and my WAP router behind the Cisco SG300 and the unmanaged POE switch for my cams connected to my Cisco SG300 as well.
My Questions:
It is said with the IPfire firewall device should be connected from the NIC(Green port) to be the link to connect your Private LAN. If that is the case, if the port that connects from the IPfire devices green port that connects to the CiscoSG300 say port 1, does that have to be configured as a trunk port or does that act as an uplink port to all the ports on the CIsco SG300? This is where some of my confusion is?
Can i have 2 interface ports in the same vlan? Say Interface gi01 & gi02 in vlan 20?
Does VLAN's get assigned an IP, but if thats the case and you want 2 interfaces in that same vlan how is that configured?
Another question: If port 3 on the cisco SG300 is connected to the unmanaged switch would that be configured as an access port or trunk? Or does that server as an uplink? How is that configured?
Will I need to setup my Cisco SG300 as a L2 or L3 device, because I will need static routes going to the IPfire device since I will have multiple VLAN's setup on my CIsco SG300 switch.?
Any help would be appreciated on how to configure this, or someone type out a mock up of the commands to get to this configuration and I will take it from there.
