How-to Design and Configure a Home or Small Office Network
This video is the follow-up to my recent ASUS RT-AX89X Internet & Wireless Router router review, and my Tutorial on Subnetting (see the links at the end screen. The material covered in this content will fill in the linkage between the previous videos by showing how I’ve designed a moderately-sized Hone/Office networking schema and applied to my ASUS router configuration. Thanks for watching.
Video Time Codes for this Video (click to skip directly to a desired section of the Video)
0:00 Introduction to Designing and Configuring a Home or Small Office Network
1:09 Theory & Design of a Home or Small Office Network - Two Options
11:22 An Example of Address Organization for a Home or Small Office Network
17:32 Configuring an ASUS AX89X Router that Implements a Home / Small Office Network
19:12 Enabling the Gaming Features of the ASUS RT-AX89X Internet Router
20:04 Easily Establish more Addressing Space for Devices with an ASUS AX89X Router
Note: I have NOT received any sponsorship or commission for using the products shown in this video.
As an Amazon Associate I earn from qualifying purchases, when these links are used:
ASUS AX6000 WiFi 6 Gaming Router (RT-AX89X) - Dual Band 12-Stream Gigabit Wireless Internet Router, Dual 10G Ports, Gaming & Streaming, AiMesh Compatible, Included Lifetime Internet Security
amzn.to/3KdbYAS
Cat 8 Ethernet Cable 6 ft (2 Pack), High Speed 26AWG Internet Cable 40Gbps 2000Mhz, Shielded RJ45 Network Cable Computer Patch Cord,Indoor and Outdoor Rated LAN Cable for Gaming/Router/Xbox/PS4
by Dasook
amzn.to/3snK3Z5
10Gb SFP+ RJ45 Transceiver, 10Gbase-T SFP+ Ethernet Copper Module,Compatible with Cisco SFP-10G-T-S, Meraki, MikroTik, Ubiquiti, Unifi, Netgear, QNAP, D-Link, Supermicro and More, Cat6a/ Cat7, 30m
amzn.to/3JYzlOA
JMT 10Gb PCI-E X8 X16 Network Card 10 Gigabit SFP+ Port Ethernet Fiber NIC Card Support Windows Server, Win 7/8/10/Visa, Linux, VMware (Single SFP+ Port)
amzn.to/3C7v6h3
10G Multimode SFP+ LC Module, 10GBase-SR Fiber Transceiver for Cisco SFP-10G-SR, Meraki, Ubiquiti UF-MM-10G, Mikrotik, Netgear,D-Link,TP-Link and more (MMF,850nm,300m,DDM) 2 Pack
amzn.to/35vEn5X
LC to LC Fiber Patch Cable Multimode Duplex - 5m (16.4ft) - 50/125um OM3 10G LSZH - Beyondtech PureOptics Cable Series
amzn.to/3vkUoqw
Please consider subscribing to my Channel, and hitting ‘Like’, if you find this video useful. I will endeavor to answer any and all questions posted for any of my videos as quickly as I possibly can.
If you have any questions or suggestions, I can be reached on Email at: PE4Doers@gmail.com , or on Twitter @PE4Doers, or Instagram @PE4Doers. Or on a more professional basis, through LinkedIn at: / davidrrivera
I have been looking at KZhead videos for days now, learning about subnets, VLANs, managed switches, security and firewall rules, and bunch of other related details. I have to tell you - YOUR approach is top notch. You make a clear presentation, you make it understandable, and you never launched into unnecessary details. Your work gives me the confidence I needed in order to start making actual changes to improve my home network. Thank you!
Thank you so much for the great comment. I truly appreciate it and knowing I was able to help someone.
I am about to start a new job as a Junior Network Admin. Basically, I'll be learning on the job. I had been watching Pluralsight videos to get myself acquainted with networking and CCNA prep, but I find that I'm learning more useful information from your channel. I really appreciate the work you put into these videos.
Thank you so much for this great comment 🙂 I am planning a number of new Network related videos this year as I make some major upgraded to my Home Lab/Network, so stay tuned, and good luck in your new role.
Thank you so much Sir for this great comment. As I mentioned in one of my recent videos, I am not trying to teach the in's and out's of passing a CCNA exam, but to give a "understandable'' foundation of Network knowledge to those who are starting from the beginning.
Hey quick question did you have previous experience like help desk or degree in IT?
@@JohnSmith-yr6je Actually, one of my earlier jobs what a product support engineer supporting our field engineers throughout the Country (and some international partners). Also, my Bachelor and 1st masters degree are IT related. Why do you ask?
@@PE4Doers just curious as to what to look out for and apply to. I am a signal officer (IT manager) in the army and was looking to make a transition to the civilian side and wanted to see where I could start out in. I have a BA in business so not IT. Thank you though
Kudos David! This video is so well done. You do a great job of breaking down complex networking concepts and make them easy to understand!
Thanks Tony🙂, I truly appreciate hearing feedback like that
I needed a quick overview on how to setup subnets and your video was perfect! Thanks a lot!
WOW, thank you so much Sir. That contribution will be reinvested into my future video content.🙂🙂🙂
Thank you for explaining and answering more technical questions about how networks work.
You are very welcome. Let me know if you would like to see something more in-depth or on a topic I did not mention.
Excellent technical tutorial on LAN configuration and set-up. Very informative and highly educational. Thank you David for the excellent video.
You are very welcome Sir. I am very happy to hear that you found it helpful.🙂
This helped me with my small home network that I setup for my flight simulator. Running the dedicated server and core program on my laptop and the VR system on my desktop PC. Learned a lot, thanks!
You are very welcome. Thank you for the great comment 🙂
Thanks so much for an information filled video with no nonsense and "filler" material. Well done! I feel I should subscribe, also.
Thank you Sir. I plan on making more practical network videos by the end of the year.
Best explanations I have ever seen on this topic. Bravo!! 🎉
Thank you. You nice comment is very appreciated.
Awesome, very clearly explained and with no deviations... I have seen other videos where they stop and take a lot of time to explain something else like the binary number system which to me is like someone teaching calculus and stopping to explain arithmetic.
Thank you 🙂
Very interesting! Excellent video and it helped me understand the concept of subnetting. Looks like you have a lot of great videos, so glad I found your channel today. Subscribed!
Thanks you so much for the great comment and for subscribing 🙂
Desea, thanks. After a couple hours looking for a good video about networking I founded it. Thanks. Excellent explanation and the things flow easily. Thanks
You are very welcome. I also plan on a follow-up video to this one in the next week or two, so stay tuned.
Brilliant Video :)) Very well explained. Hiding the Router is genius :)) Very well explained. Even for those who do not understand much about how networks or the setup thereof works. :))
Thanks Kathrin, I really do appreciate you saying that 🙂
It's interesting seeing how far the consumer/gaming routers have come. I made the move years ago to prosumer routers and separate access points. Still, this video is helpful for those times I need to make recommendations to home users.
Thank Jeremy, that is a great point. I will eventually make the same switch you have in the future - after all, everyone's network is continually evolving 🙂
I had a paper to write for my college class about setting up Network Switch Configurations, IP Addressing table and assignments / Subnetting strategy, and Routing Tables. I read the chapter twice and did the practice tests and I felt so lost. This video actually helped me so much. I just wanted to say thank you for the work you are doing here.
You are very welcome
very well explained and insightful
Thank you kindly for this great comment
these videos are really well made keep up the good work
Thank you. I really appreciate comments like this
again brilliant! please do more tutorials
Thank you for the great comment
Very good explanation ❤
Thanks for the nice feedback. Have you created your own Home/Office Network?
muchas gracias por explicar tantos conceptos en una manera simple y sencilla. buen dia don Rivera :)
You are very welcome Sir
You are super, unique, talented, humanitarian, current centaury philanthropist, than you, i can never stop appreciating watching this video. i urge more people should learn from from. thank you.
I am extremely flattered receiving this fantastic comment comment. Thank you so much.
@@PE4Doers thank you again boss
@@nasirumargwandu5900 You are again very welcome Sir
This is so good, I am saving this down! :)
I'm glad to hear that. Thanks for the nice comment
Excellent video!
Thank you Sir
Finished my first year of college and watching this video, I had a leg up from my networking classes. I’ll be starting Cisco systems soon and I just wanna say this all is really cool, I like seeing how this stuff is done, there isn’t much application in these classes
I've been there and know how it goes, so I am very glad it helped. By the Way, I will be releasing a follow-up video on this one going into DHCP in detail, and if there is enough interest I will continue with a series on the details for many more related tech.
Also, if I can help get you an 'A' would you consider sending me a letter saying that so I can Frame it and feature that (without personal info shown of course) in future videos?
@@PE4Doers sure, is there an email address I can forward it to when the time comes?
@@carsonbrooks Yes, I have a Channel GMAIL addy shown in the ABOUT Addy on my main KZhead Page. I think you need to answer some challenge for it to display. And I truly thank you for that consideration
Great explanation ..
Thank you Sir
clear expained. thank
You are very welcome.
thank you, good bless you
Thank you Sir for the fantastic comment 🙂
First time here, I'm hoping you'll cover best practices for enterprise type environments. I'm trying to build good habits. 😊
I don't have planned for that, but were there any specific questions you had for that?
Very informative and well explained. Quick question though, do you think it is still needed to place in a separate firewall unit in between the modem and router for better network security, or the built in router security feature is enough already for small to medium size offices?
That would depend on your router's capabilities. Some of the older or less expensive ones that I would not trust.
Private IP Range - the 10.0.0.0/8 can be used to hide all workstations within a range that has (as you show it) 16,777,214 possible IP addresses. This can be assigned to a second router connected to a main router that is set to 192.168.0.0/16. The two routers are partitioned from each other through their individual built-in firewalls. No one can even see that the 10.0.0.0/8 router is behind the 192.168.0.0/16 router. Using your topography (all wired): Cloud--->ISP Modem--->1st Router (192.168.0.0/16)--->2nd Router (10.0.0.0/8) Wired Port View: Cloud--->ISP Modem WAN port--->ISP Modem LAN port to 1st Router WAN port--->1st Router LAN port to 2nd Router WAN port.
I see your point. Great analysis.
I understand that you can free up network IPs by using variable length subnet masking. But it has to be only used when you need many private networks and less hosts within the private domain range. In the latter case, which is a SOHO application, you can use different subnets with the default masking. Then, you can route from one subnet to the other and configure ACLs.
That is true, however when you have a group of high-traffic devices that communicate mostly between themselves (that also use broadcast to all often), and you has some critical devices that you do not want to have to even see that traffic, then subnets are a great advantage.
You should mention IPv6 in networking discussions!
I do plan on making an IPv6-specific video in the near future.
Hi, what is the use case of using gaming router? BTW, I use OpenWRT on my TP-Link portable routers, and have a couple of MikroTiks. The amount of customization I have access to is simply amazing! I am now running routers as access points or wireless bridges. It's definitely fun to learn!
The Gaming Router usually have pre-configured optimization settings the cover specific games. On my latest ASUS Router, you actually choose the games you want in the gaming admin screen and the parameters are set to the best choices. There is a warning however on that screen that says you should pick too many at one time since some of the parameters contradict each other and the optimal settings may not be chosen.
qos is also most important, mainly for office networks, mikrotik is good router for this use ( office network ... ), some isps also use mikrotik devices.
I thought strongly about going with MicroTek, however I was not happy with their heavy dependence on SFP+ connectors and really loud Fans.
So I think if I wanna put a separate firewall in this network design, I should put it between the modem and router. Is this correct? It would be nice to have a tutorial on how to configure the firewall in the same network.
Thanks for the video Idea.
thanks for u
You are very welcome
Subnets is the only option if you have old routers. VLAN is preferred especially if you have managed switches.
I 'sort of' agree, since it it not really "Old" Routers as much as it is Consumer Routers rather than Pro-Sumer equipment. VLANS are fantastic for the larger implementations of a Home/Home-Office setup, and I will soon be implementing one my self in the very near future. However, the concept is not very user-friendly to non-network engineers trying to implement a fully featured configuration for Home/Home-Office configurations. It take a fairly knowledgeable individual to set one up who has not al least studied for a Network Admin credential. When I make the transition to Pro-Sumer equipment I plan on carefully crafting my video series so that other would have a chance of mimicking what I have done. It is VERY frustrating for someone outside our tight niche of advanced networking to buy equipment that is very difficult (if not impossible) to get working without hiring someone to fix everything for them. Even then, the network security of a third-party configured network setup would always be subject to security issues.
excellent video. But I'll nit pic one thing since no one has mentioned this; at 13:14 shouldn't that be 15 for the printers address count. Thanks Great videos.
and 454 for dhcp range🤨I could be wrong...working these numbers can make head hurt
You are absolutely right Sir. Thanks you for pointing that out. I am planning a follow-up video on that, so I will make sure I correct that error. Thanks for the heads-up 🙂
Thanks for these videos. You mention a prior video but don't provide a link (that I can find). I have subscribed to your channel and found 4 network related videos. I have them in the following date order (subnets, asus roter review, design and config - this vid and DHCP info). I am looking to upgrade my router, set up a few vlans (voip, plex streaming, maybe IoT, everything else) ... do you have any other videos that would help me understand what I am doing / trying to do? I started with this one but will go back and watch the subnet one ... octu-a-math is fine by me :)
The video I was referring to was: kzhead.info/sun/lrNueMebhoSVe30/bejne.html However, I have an entire Playlist that talks about various Network products and technology (52 videos currently): kzhead.info/channel/PLBP4QXQvniTf7d9gLqaVhXn-FgD2rTYLG.html Also, I sincerely that you for subscribing, and I do plan of talking about VLANs in more detail with future videos.
@@PE4Doers 52 vids ... slightly more than I was expecting. Thanks for the link - I will (try to) cherry pick the ones I need.
@@ruffhi You could probably skip most of the product review, which exceeds about half of the Playlist. Thanks for watching 🙂
@@PE4Doers yeah - I culled it down to 8. That said, I will be cycling back to those server builds and 'building the rack' vids
@@ruffhi Those are great selections. I watch many video like that myself. I hope to have more time in the coming months to create more of that content. I hate to admit that I already have the new equipment in-house and have been holding back the installs since I want to make good video content showing how I install and test that equipment. It's one of those strange periods in my overall career (have two other 'paying' endeavors beside KZhead that require my time and thereby limit my ability to meet demand. Hopefully that will change within the next year when I retire from the one that uses so much time but delivers so little fulfillment to me personally. I do sincerely thank you for watching my content.
Thank you for the excellent video. I did not understand the process of set up a fixed ip address of the wired device, like your switch ip to 192.168.31.201 or the pc/server to 192.168.31.202. Is there a way to do it? Thank you
That is totally dependent on the make/model of the switch. They all seem to do it differently. Do you already have one up and running? Or are you looking to design one.
Could you please do a video the same setup but via Wi-Fi connections between the devices. No hardwiring? Is it even pssible?
Fir the transient PC's and the moil devices that would be no problem. However, when you have ANY servers or network equipment all Wireless, that tends to be more error prone unless it is an extremely simple network. It may work 98% of the time, but when you run into a problem it will drive you crazy - especially if the main router is only accessed witlessly.
Would adding another router ahead of this router to separate it from the static address and give a place for IOT things to live make thing more secure?
It might, however it could have the reverse affect due to increased complexity. For example, wearing a second pair of socks on your boot-covered feet might keep more of the chill out, however, it could reduce the friction of the boot to your feet and you could lose a boot in heavy snow. I only mean to say that the extra layers of complexity could have unforeseen consequences. In your scenario, it might lead to someone being able to more easily attain Admin access to both devices if you use the same password for both, then, after they penetrate the first they can gain insight into how the second is configured, and that is one of many things to consider. I like keep things simple and easy to monitor, so I would always use one and monitor it very carefully. The trick will always be to limit any connections being allowed into your network. Maybe in a follow-up video I can show some secure ways to transfer information between your internal network and a device on the internet - if I get enough interest in that.
So when you're setting up a static IP address, do you also use the subnet mask of 255.255.254.0 on the electronic component? Such as another computer or switch? I see that you're not setting up static IP address through the router.
That subnet mask needs to be set on 'all' equipment within your network. If not, some strange problems will occur depending on the specific address of a device on the network.
@@PE4Doers Thanks for the reply! Didn't know if you would respond. The setup you explained is for the 192.168.0.0 topology? Your explanation wouldn't work for the private IP addresses of 10.0.0.0 or 172.16.0.0. If I'm assuming correctly. Those would get a subnet mask of either 254.0.0.0 or 255.254.0.0 if I'm thinking this through correctly. So one more question. On the octet you used the number 30, can this be any number between 1 and 255?
@@PE4Doers Sorry for all the questions, just trying to understand how the whole process works. I won't bother you no more.
@@jimvalim1567 Jim, no problem at all on asking the questions. Please do not hesitate to ask if you need to know anything else. I apologize if I gave you the idea you were asking too much, really.
@@jimvalim1567 You can use any subnet mask on say 172.16.0.0 as long as it does not exceed the scope of the 172.16.0.0/12 mask. I.e. it's perfectly fine to use 255.255.255.0, 255.255.254.0, 255.255.255.128 ,etc Just size it according to your needs. The way demonstrated in this video is demonstrates how one could configure a larger subnet using a typical home router setup. Personally, I'd rather use VLAN's /different subnets and a more standard layout for the subnets. But to each their own. For example, most home subnets typically won't have 30 servers, 400+ clients, 14 printers, etc sitting behind a consumer gaming router on a single subnet. Some might think that obscuring the router IP by choosing an odd assignment for it is security; reality is that every client in the network will have that particular setting in the settings, whether it's dhcp or manually assigned ( gateway address ). This is not meant to be a critique of this video; to each their own; there are literally an almost infinite number of ways to configure one's home network or small business network. Worse, as time goes by, it will undoubtedly become necessary to re-architect the network, to either expand it or completely rehash the network as it is. Times change; so do the needs of the network; 15 years ago, IOT devices weren't common; nowadays IOT devices are; same thing with smart phones, tablets, and other such devices. 15 years ago, I only needed basic wi-fi, and a single /24 subnet ( could use something smaller, but conserving private IP's makes no sense to me ) . Also, I would never have needed more than say a dozen devices on my network, but that does not mean I would configure my network with a /28 subnet ( 255.255.255.240 ) mask either.
each bit you take from the network address doubles the number of host address with the first and last reserved for the network address and broadcast address.
Yes, that is the magic of Binary, and the designed of those masks.
10:09 can you explain more how you got .31? It doesnt make sense 😢
As I show in the bit map. the 24th bit flips the second half of the 512 address octet from .30 to .31 when that bit is set to one. What is important to follow there is that the 3rd octet is split, with the first 7 bits being part of the network address range and the 8th bit being part of the host address range. It is something only encountered in a home/small office environment (like mine) where 510 addresses are needed rather than the usual 254 provide by a Class-C range.
Can I simulate this setup in virtual box?
Yes, however that would only be to test it I assume.
Don't get me wrong though, it would take quite a complicated configuration of VB, using more than one instance.
Yeah, year-old video, but you might reply… 🖖 I noticed you did NOT have ‘Jumbo Frames’ enable on the router set-up. What is your reasoning for this? I was taught to enable Jumbos for maximum throughput. Pro’s/con’s?
I have found through testing that it really did not change performance for most interfaces. There was an older PCIe card I have in my original NAS that would only reach 1.8G without it enabled however. So I would still check that if my testing showed a performance issue.
@@PE4Doers ..thank you for your thoughts on Jumbo Frames.
@@ernestgalvan9037 No problem at all. I only found I needed it on older dual-port cards that I bought on Ebay.
Thank you so much sir very useful information in this video I am muthu working with system admin please help me open source Linux project sir 😊
I am not sure what you are asking me to do for you Sir.
@@PE4Doers
liunx basic video and open source project sir how can i improve my skills and experience i am 2 years experience in systems administrator
@@SakthiVel-oj1dc I would highly recommend you adding this Channel to your view/subscription list: www.youtube.com/@Practical-IT Jeremy keeps up on everything Linux and is about to start a Course for the beginners. If you attend one of his Live Streams I will be probably be on, and I would appreciate you mentioning that I suggested watching his content. 🙂
so wait because i am a bit confused, i am able to make my own network at home without having to pay a provider since technically i would be my own provider correct? if so what exactly do i need?
You won't get access to the internet unless you have a contract with a provider
is it possible to get more internet then the service offers? here in malta we only get 1000MBPS would i be able to increase that in any way
@@TazOnYt I have not heard of that, however some Countries may provide Free wireless internet
Sir good day, umm i have a question what is outside address?
That is a 'Routable' address that is not part of your internal Network. It is usually automatically set by your Internet Service Provider (ISP).
sorry, what's the purpose of setting up this network? For a normal family use, won't every device connecting to one single router through WiFi work?
It is meant for those who want to expand their network to one that would be found in a small company, which my network evolved to over 20-years. I suppose you would need a Business case for do so, such ac creating a Tech-Based KZhead Channel, or one where an an advanced network would improve productivity - such as one with multiple creators and editors all working together, such as a Web Service provider.
@@PE4Doers I guess this video is more about HOW, but not about WHY, which is what I am interested in, so apparently I am not your target audience.
@@jiayilei9256 There are many who could use this information, if not today then sometime in the near future. My goal here was to primarily inform people on how a larger than average network can be connected and what terminology applies I did not expect anyone to create exactly what I have, but know how to expand if the future necessitates doing that - and without having to hire someone else to set it up for them (at a high) cost, and very likely having to hire someone to maintain it (at an even higher cost. I never imagined that my network would be as complicated as it is today looking back 25-years ago, but it is. Although some of the technology has changed and improved (in many cases, but not all), things still works essentially the same. In addition to computers, my other two hobbies are woodworking and metal working. So I took the time to learn how to most effectively do those two endeavors. I had a blast learning how to do Mig Welding, and have only been hampers on learning Tig welding due to the cost. But once I retire I may learn that as well. Just an analogy that came to mind as I replied to your comment. Good luck in whatever you do Sir.
That ASUS AX89X Router has 11% One Stars on Amazon. To me that is a no starter for a purchase.
So far it's done well for me. The biggest gripe I have is that lack of 'True' VLAN support. I will be replacing it late next year with a Pro-Summer unit to correct that.
I think the token start tumbling down, as we say in swedish when we start understanding something, about subnets and stuff.
Understanding subnets is a VERY useful piece of knowledge when you are into computers and networking technologies. I can still recall more that 35 years ago when I did not understand what a netmask really was, or how it could be modified to improve and expand a local area network. Not to say I was useless, however I was VERY embarrassed a couple of years after setting up an Ethernet network for a rather large software development team in a mid-sized New York Bank. It works, but was quirky.
Is this still your latest video? Lol just messing around
There is another: kzhead.info/sun/lrNueMebhoSVe30/bejne.html
I got to maybe 2:40 and I am bailing out. Why? Well, I was curious as to that you were going to say. Why? Because there's a lot of bad advise on FB these days regarding setting up networks. So, was yours going to be better then the rest of the bad stuff? Sadly, no. Why do I say this? As a now retired network from 1981 through 2017) , and a home/small business network user now, I have seen a great deal of poorly designed systems. In less than three minutes, you made three problems with bad assumption and bad advise, would it get worse going forward? How could it not? Example #1: in most locales in the world these days, though at times the ISP's tech might call what they are providing you with as a modem, most often is is a router. Is it possible that you will have a modem? Sure, but not as likely. Example #2: A modem will provide only one IP address, and that is why the customer needs a router... but if the customer was given a router, would they need one based on your assumption? Or are you hawking a product? Maybe that router? Example #3. Is a commercial 'all-in-one router / WiFi your best design? No. For many reasons: (a) the software on the router will likely never get updates and is therefore a security problem; (b) the processor in these devices, and the internal switch fabric can't handle robust LAN traffic and at the same time the huge number of small SIP/VoIP packets; Adding firewall, port forwarding and other rules will likely exceed the memory space inside the type of device you are pushing. While home user *might* not have these needs, a home office should consider: (1) can/will the ISP provide a device in bridging mode? Running PPPoE to a CPE is better that having IP on the ISP supplied device (2) a FreeBSD or Linux router/firewall such as pfSense or OPNSense or like device -- without WiFi should sit behind the ISP device and ONLY be connected to a low cost managed switch. The switch can connects to WiFi APs placed where the office and users need them. That is then very basic a proper designed home office without considering CCTV and Iot, with can add far more complexity.
I do appreciate you details comment Sir. However I wish you would have more than 10% of the video. The only part of your comment I take serious issue with is that I may be trying to sell a product. I do believe if you watched further, you would have seen that it is a purely educational video that is using a specific product I happened to have purchased on-sale - in other words I am not getting paid to show that product, nor did I receive it free from a vendor or distributor. My background is in computer technology, covering Systems (software and hardware), networking, and information (today called Cyber) security. Many of the addressing suggestions I make later in the video are to optimize the security of a home network. I am a Licensed Professional Engineer in the specific category of Electrical Engineering and sub-category of Computers. I take that credential seriously, along with my CISSP credential. Please make sure you know the security risks of some of the marketing (and insecure) technologies you mentioned in this comment.
@@PE4Doers, OK, so let’s start with you last comment first. “Please make sure you know the security risks of some of the marketing (and insecure) technologies you mentioned in this comment Are you kidding me? You are recommending a product that is 100% assured to have major security holes if only because the manufacturer will stop issuing software updates within 24 months (if not far fewer) of the product no longer being sold in favor of a newer product. Do all devices connected to the Internet have security risks? Well, duh, that’s why we are constantly needing to apply security update and limit exposure. To that end, (and I speak as having started and owned two ISPs [one of which, started in 1994 still exists]) no ISP providing residential connection devices does a good job of upgrading the software on the end equipment. Part of the reason is that the eproms in most of these devices barely hold enough for the instruction set of the device when manufactured. For that reason, turning the device into a bridge is the safest bet as you are leaving level 3 and moving to level 2. That means the ISP can maintain the security issues on its CO or remote hut equipment and you maintain your side. Do you know the specs of the processor in your chosen router? It is optimized for WiFi. It has limited switch fabric and can’t properly support a fully loaded set of 1G wired connections to its switch ports. Did you bother to test what happens to even moderately heavy switch traffic does to the quality of VoIP traffic, especially if that VoIP traffic is coming over a wired device? That router you were holding up makes a great AP for a small office setup. That means no public IP exposure. It means you can block its private IP from exiting the gateway. Using a dedicated router/firewall that can get regular updates from ONPSense or pfSense along with OS security updates is far safer than the type of device you were showing and so I am literally bewildered by your comment about the security risks of my recommendations. What is it that has you all hot and bothered? Are you afraid someone will hack FreeBSD but not a OpenWrt device? Or maybe you are worried about the managed switch? Or is it an AP, which could be the very device you were holding up? WHat the f*ck are you talking about? As to not watching the rest. Well now, why bother? Your beginning was so wrong, what migt you say that would make it better, other than to say next... “just kidding, that was all BS, and now for the real advice.” But you didn’t right? You may well be all you way. Could be. I have over the many years not hired many who come with like credentials. For reference, I got my first POC handle from the Internic, long before there were RIRs. And so, when ARIN was formed, my handle changed from ML84 to ML84-ARIN. (My POC handle was retired from the database when I transfered my last IPv4 assignment and released my IPv6 allocation.) Have you looked at any current POC handle? How many digits follow the initials? I got my first allocation of IPv4 from what was later called, the swamp. And I have had to manage security for an entire ISP. I sold, programmed routers, switches, PIX units and later their ASA Cisco devices commercial for three decades, {Fun fact, did you know that in 1995, the entire worldwide BGP tale could he held in a fully loaded Cisco 2501 switch? That was in the day when T1’s were considered fast, and an OC3 was really cool.] So when I say you are wrong, well, Sir, you are very wrong.
0:51 You can keep that Hentai Router. I'll be sticking with Good ol' Netgear. Thank you very much.
Understood. I will be replacing that in about a year with a Pro-Summer model that supports actual VLANs.
Frozen mouse, But using your mouse ? This is no HELP!
I'm really not sure what you mean. Can you explain a little more?
I must commend you @PE4Doers I've just leaned a whole lot, I had to skip a lot of videos online to get to yours, I just got stickled and watched till the end, so so helpful to me on my new job as IT Manager, Please share more links of your videos on IP Addressing. Thank you
Thank you Sir. Can you let me know more in the links you are looking to get?
So your double natting
Where do you see that? I believe it is only Natted at the initial router/switch.
@@PE4DoersWhat's a natted?
@@keylanoslokj1806 Natted is when an edge router changes the internal LAN address of a system to one that looks like the external address. It means 'Network Address Translation', and is the best security feature of modern routers
If you want to design anything "robust", just ask Fujitsu and the UK Post Office.🤣🤣🤣 Sorry! Brits will understand that joke.
I would guess that is similar to our New York land-line phone company and the services here that pick up the trash (whenever they get around to it).
@PE4Doers Oh no, worse than that. Google post office scandal. A combination of poor software (Horizon), rubbish security and corrupt management leading to the biggest miscarriage of justice in UK history...and it's still going on. If you can find it online, check out the ITV mini series "Mr. Bates Versus The Post Office". Probably the most true to life show ever.
That router looks riduclous
I sort of agree, however I can't complain about it's reach, features and dependability.
Wow the moment I saw professional engineer I was put off, networking does not have engineers. Let's be real here, you're good, but engineers need to be licensed by the state
I am licensed by the State of New York as a Professional Engineer. The category of the test I took was Electrical and Computer Engineering, one of the 20-somewhat of those tests offered by NCEES. My specific testing sequence started with the Fundamentals of Engineering exam in Electronics & Computers, which required that I have a Bachelors Degree approved by ABET (which I do). If you look at my video Playlists, you will see a Playlist on preparing for that Exam. Then I earned my Master of Science Degree in Computer Science that gave me one year of Engineering experience credit, then I worked another 9 years of experience as a Software Engineer which enabled me to sit for the Part 2 exam called the Professional Engineer exam (in my specific case 'Computer Engineering'). Which I passed on April 13, 2018. That exam covered 40% Computer Engineering Hardware, 40% Computer Engineering Software, and 30% Computer Security. Networking was a part of all three sections, so I know how the circuit logic, Firmware, and security are all designed at the engineering level. Also, I passed both exams in my first attempts, and I have my Professional Engineer Seal which I have used several times in the State of New York.
so if my subnet mask is 255.255.255.224 how many usable addresses do I get?
Is this a quiz? 🙂Well, that would be a binary number of 11111, which allows for 32 addresses, however since the 1st and last are reserved you will only have 30 usable.
Excellent technical tutorial on LAN configuration and set-up. Very informative and highly educational. Thank you David for the excellent video.
That you for the great comment 🙂
That you for the great comment 🙂