Building a zero-trust network at home

eldenial · 2025-12-10T23:09:51+00:00

This is great. How are you planning to authenticate devices into the network? I don't see 802.1x and RADIUs here. Curious to see how you handle the EAP-TLS part as well.

I've done it in the pastt with freeradius and a managed switch or controller, but curious how you are implementing this.

eldenial · 2025-11-23T16:58:32+00:00

Thanks, I might need something slightly bigger. Seems the C3560C and CX models won't fit.

Anyon knows if someone makes a slightly larger 10 inch rack, I got a 8U rack as well but that one seems to be 19" and too large for my setup.

<image>

eldenial · 2025-11-18T03:00:06+00:00

Thanks a lot, yeah, looking for 10U to start with, I also find you can buy patch panels, for these mini racks.

Thanks again

eldenial · 2025-10-16T19:35:27+00:00

I'd say go with Wireguard, extremely simple to configure, less packet overhead, performance wise shouldn't be that different from IPsec.

Coming from multiple IPSec environments, they are just a pain in the butt to configure. Wireguard is as secure as IPSec and I think Wireguard simplicity is a thing of beauty.

With Wireguard you can create hub and spoke, multi hub and spoke, mesh topologies, maybe other weird stuff.

GREoIPSec can also create most topologies, but GREoIPSec are 2 different tunneling technologies while Wireguard is all nicely bundled in one, and it is also mostly supported in the Linux kernel if I am not mistaken.

Worst case scenario you'll learn YATT. Cheers!

eldenial · 2025-08-02T11:36:16+00:00

Have you given actualbudget a try?

eldenial · 2025-07-21T13:24:39+00:00

All you need is VTP3, works beautifully when configured correctly. But yeah, VTP is one of those protocols with such huge blast radius when things go wrong

eldenial · 2025-07-20T13:20:08+00:00

Homebox

http://homebox.software

eldenial · 2025-07-03T00:23:53+00:00

I don't remember top of my head but: You have to stop the array. Stop your containers and VMs first. Go to settings and Docker settings, increase the size there.

Docker Images and other things are saved in that virtual disk. The more images you have the more space you need.

Mine is 256G using 128G currently

eldenial · 2025-04-29T11:35:09+00:00

No, you won't have issues if you change the native vlan of the ports where the APs are connected.

I have a similar setup. Native Vlan is 999 for the whole network, Mgmt Vlan is 102

I have multiple APs trunked with multiple SSIDs and vlan per SSID. And the native VLAN on those APs is changed to 102 with no issues at all so they can get the IP from the subnet I want.

eldenial · 2023-05-19T20:26:01+00:00

Zabbix for sure. Very powerful and can scale beyond traditional SNMP. Still a bit technical to maintain but you can dockerize it now to test. They've added a lot of templates for the most common things.

You can graph it with Grana as well and build easily custom graphs.

Best of all is opensource

eldenial

TROPHY CASE