NETWORKING / SECURITY / February 9, 2023
Segmented home network.
UniFi routing, DNS filtering, and LTE failover.
Scroll horizontally to view the full diagram →
Internet The primary ISP connection provides internet access through the Dream Machine Pro.
PROJECT OVERVIEW
Purpose and implementation
I built this network to apply routing, subnetting, and security concepts in a working environment. The project included making CAT5e cables, configuring UniFi infrastructure, adding DNS filtering, and setting up an LTE backup connection.
Routing, segmentation, and failover
The core of the network is a UniFi Dream Machine Pro, paired with a long-range access point for wireless devices. A 4G LTE backup connection provides an alternative when the primary internet connection is unavailable.
I configured subnetting and network segmentation and worked with the gateway’s threat detection features. The diagram shows the logical relationships between the gateway, wireless access, clients, and DNS service.
DNS filtering
A Raspberry Pi running Pi-hole handles DNS filtering. This adds a configurable layer for blocking unwanted domains, including advertising and known malicious destinations covered by its blocklists.
Separating DNS filtering into a dedicated service made its configuration and blocklists independently manageable within the network.
PROJECT DOCUMENTATION
Images and demonstrations
