I'm setting up a new communication closet and would like to secure my network better. I have DSL at this time but may switch to cable.

What is the best way to setup network?

Is there much difference between routers?

Managed or unmanaged switches?


VPN or not and if yes How??

I did similar in my home for my xmas present

I put a 9u rackmount in my closet, with a keystone panel and rackmount switch. Then a shelf for my modem, router, and NAS. Then a shelf for a power strip.

Most consumer routers are absolute garbage. They never get security updates. I dont think a managed switch would be needed. Maybe if you had a tenant in the building with ethernet.

VPN is probably unnecessary too. If you get a nice router you can do load balancing and of your first connection is a load balancing VPN you can increase your maximum soeed.

I got a ubiquiti edge gateway router and a wifi ap and have been really impressed with their stuff. I went with a tplink gigabit switch though. The edge gateway can do load balancing, like if you have cable and dsl, it will spread out on both.

I have an Apple AirPort at home, been running solid for several years.
Ubiquiti makes some good stuff but it's not always straight forward to configure.

I keep things simple at home and use a Netgear wndr3400v3 wireless router connected to a DSL modem (telco provided) 5GHz for our cell phones and 2.4Ghz for laptops, printer (further distance from router) and tablets. Roku, TV, Blu-Ray et cetera are wired connections.

Configuring and Firmware updates are easy.

Local telco offered to rent me a wireless modem for an additional $6.00 per month.

I also keep things fairly simple. Despite being a consumer grade unit, I use a Linksys WRT 1900AC in my bedroom. 2.4G for my mobile phone and 5.0G for my Microsoft Surface devices. 75M up & down.

I also placed various Linksys routers and a few Range Extenders around my church. No complaints other than Verizon won't give us FiOS, forcing us to make due with 7M down 768K up DSL service.

Our complex is surrounded by fiber however according to our telco website fiber build out projects schedule up to 2025...we're not on the list. So we're stuck with 17.6⬇ & 0.9⬆ DSL.

Your down is twice as fast as ours.

The only possible way I can see the church getting high speed data is if Verizon Core decides to install a 5G transmitter on one of the concrete streetlight poles near the building. I doubt that Comcast and RCN will open their wallets, install conduits and trench the property line.

That's pretty good for dsl, you must be right next to a fiber fed dslam. You could order another dsl, you might need a new name, account, or tell them theres a new sublocation like main or unit b.

Then plug it into a load balancing router and it's almost the same as having 17.6x2.

The ubiquity does it like I said, just takes a few clicks. If you're a brave linux nerd you can also get most routers with a dd-wrt distro to do it

I would just ask if bonded DSL is an option. They would just wire up a 2nd DSL circuit to another pair into the building and swap out your modem with a bonded modem.
Or ask if VDSL is available, bonded or traditional.

I may give Verizon another call to see what, if any, options exist.

The bar I do maintenance for was sick of paying Comcast so we switched to bonded DSL. Average speeds are 40m down and 2m up. Aside from the gateway defaulting itself once and losing all the pppoe credentials, service has been really solid. Saving over $200 a month isn't half bad either.

It really depends on what you are trying to accomplish. Better wireless range? Better security? Faster speeds?

I have found that ISP/telco provided "all-in-one" modem/router/gateways are low quality crap. They usually have low quality wireless radios, crappy built in antennas, and just overall aren't reliable. Plus, the user interfaces are rudimentary and locked down most of the time. My ISP is Atlantic Broadband and I specifically requested a basic modem only on my original new service order. I got an Arris DOCSIS 3.1 modem with two Ethernet ports. It does nothing more than serve as a media converter between Ethernet and coax to the CMTS, honestly.

My network consists of:

- Two Nortel Baystack 5520-24T-PWR managed PoE switches (one "core switch" upstairs and one in the crawl space)
- Fortinet Fortigate 60D router (DHCP/NAT/firewall/VPN)
- Lenovo ThinkServer (Windows Server 2016, network storage, active directory services, DNS, Plex Media server, Ubiquiti UniFi controller, Ubiquiti CCTV NVR)
- One Ubiquiti AirCam (IP CCTV)
- One Ubiquiti AP-AC-LR 802.11ac MIMO dual band access points (covers living room and kitchen)
- One Ubiquiti AP-AC 802.11.ac dual band access point (covers my bedroom, guest bedroom, and bathroom)
- One Ubiquiti AP-AC Outdoor 802.11ac MIMO dual band access point (covers side yard and driveway)

I don't really ever have problems. I can pull about 360Mbps average on wireless, and am always able to hit peak upload speed. I can stream video to the Chromecast from my laptop or phone without buffering and do other things on other devices simultaneously without the network even showing any remote signs of slowness or dropouts.

I do not use any VLANs or anything all that complicated. Everything runs on the 10.0.0.X/24 subnet.

I have nearly no neighboring access points due to the location of my house, so wireless interference is non existent. I'm running 80MHz bandwidth on 5GHz on the living room AP. I can freely use 2.4GHz channels 1, 6, and 11.

Of course, I am a huge network geek (and now a network engineer by profession) so this is overkill by most people's standards.

But it works.

I never would have figure that out from your post...🤣

Your final comment is the most important.

Scott has come a long way since he signed on almost a decade ago!

I like the Ubiquiti UniFi line of gear, especially in a home/home-office environment. Nearly enterprise grade without the price tag. Fairly easy to setup. All web driven (can also use an app on your phone). Get yourself a USG router, UniFi switch, and UAP-AC-PRO accesspoint. The AP would probably cover your garage and your home. (I drove by there a couple weeks back)

Agreed. I have a USG and 3 access points at my eye doctor's office and they just work!
My buddy has basically everything Ubiquiti makes on his network...NVRs, cameras, APs, switches...