VLAN Confusion

[newgeneral10]

Hello,

 

I am relatively new to networking but I was thinking about redoing my home network.  This probably won't be done anytime soon as I want to make sure of everything before I get going with it.  I've built a personal PC, I've built a File Server, and I plan on building a router (probably pfSense).  I want to have a main network for my PC, Nas, etc., and I also want to have a separate guest network.

 

This is what's confusing me.  Am I correct in saying that my only options are to buy a managed switch and set ups VLANs or have two unmanaged (or I guess they could be managed) switches, one for guest and one for main, plugged into two separate ports on the router?

 

Also, as this will my first time doing any networking, I am open to any advice you can offer.  Thank you!

[Oshino Shinobu]

Are guests going to be connecting to your network via hardwire? I'd imagine the vast majority of guest network use would be over WiFi. In that case, just get yourself an AP that supports a guest network and use that. 

 

To be honest, unless you have a lot of people you don't trust coming onto your network, I wouldn't be too concerned with have a separated guest network. What is your reasoning for wanting a guest network? 

[newgeneral10]

Just now, Oshino Shinobu said:

Are guests going to be connecting to your network via hardwire? I'd imagine the vast majority of guest network use would be over WiFi. In that case, just get yourself an AP that supports a guest network and use that. 

 

To be honest, unless you have a lot of people you don't trust coming onto your network, I wouldn't be too concerned with have a separated guest network. What is your reasoning for wanting a guest network? 

I honestly don't have a good reason for doing this other than wanting to learn how its done.  My plan would be to use APs plugged into a switch, and that switch would be plugged into a different port in the router than my main network switch.   Would that be similar to setting up VLANs on one switch?

[Falconevo]

To mange VLAN's effectively you will require a managed or smart switch (cheaper) which will allow you to tag certain switch ports with a VLAN ID or multiple (trunk).  

 

If you are using pfSense as a router it does give you an additional option and save on cost;

 

WAN > pfSense > LAN > Normal LAN Switch / AP > Devices
                   \ OPT1 > Guest Network > Alternate LAN Switch / AP > Devices

 

You can separate the networks via different subnets if you wanted to do it 'cheaper' which would put them on separate subnets without the need for managed switching investment.  Although managed and smart switches aren't that expensive it all comes down to budget and complexity.  The above config requires no VLANs but will provide you with the same separation.  You can use pfSense later to allow ports or communication between the Guest and LAN networks if you really wanted to.

[Oshino Shinobu]

1 minute ago, newgeneral10 said:

I honestly don't have a good reason for doing this other than wanting to learn how its done.  My plan would be to use APs plugged into a switch, and that switch would be plugged into a different port in the router than my main network switch.   Would that be similar to setting up VLANs on one switch?

If your router supports vLANs, then you could set it up that way, having one switch on a vLAN and the other on a different vLAN. That way you could do it with unmanaged switches. 

 

It would kind of make more sense to just get a single managed switch and configure all the vLANs through there. For guest WiFi use, you can just get an AP with guest network support. That would remove the need for multiple APs or switches.

[newgeneral10]

Just now, Oshino Shinobu said:

If your router supports vLANs, then you could set it up that way, having one switch on a vLAN and the other on a different vLAN. That way you could do it with unmanaged switches. 

 

It would kind of make more sense to just get a single managed switch and configure all the vLANs through there. For guest WiFi use, you can just get an AP with guest network support. That would remove the need for multiple APs or switches.

I was trying to save some money by using the small 5 port switch I have for my guest network and getting some cheap unmanaged switch, but I think i'll just suck it up and get a managed switch and do it right.  Thank you.

 

Also, do most APs have an option for guest networks or is that a bit of a rarity?  Any recommendations?

[Oshino Shinobu]

1 minute ago, newgeneral10 said:

I was trying to save some money by using the small 5 port switch I have for my guest network and getting some cheap unmanaged switch, but I think i'll just suck it up and get a managed switch and do it right.  Thank you.

 

Also, do most APs have an option for guest networks or is that a bit of a rarity?  Any recommendations?

After a certain price point, it becomes pretty much standard. I would personally recommend Ubiquiti's UniFi AP AC Pro. They're fantastic. 

[newgeneral10]

Just now, Oshino Shinobu said:

After a certain price point, it becomes pretty much standard. I would personally recommend Ubiquiti's UniFi AP AC Pro. They're fantastic. 

Ok, I'll look into that.  Thank you for all the help!