Recently I was describing my home network to someone and decided to document it for posterity. Below is the main network design.

The Router

My Router is a TP-Link BE800, which is a decent router, theatrics aside. I got a good deal on a used unit and am quite happy with it. I am using the following features on the router

1. PPPoE (IPv4 and IPv6) for WAN authentication and negotiation
2. IPv4 NAT (with ALG) & Firewall
3. IPv6 Access Lists
4. DNS Proxy
5. On the LAN
   • IPv6 SLAAC
   • DHCP server with DHCP Bindings
   • Layer 2 multicast for mDNS

The router is capable of connecting to TP-Link’s cloud, which means you can manage it remotely using their app without having/knowing a public IPv4.

Local Area Network

I have my LAN set up as shown above. Everything is one /25 subnet.

Wired (Main)

All devices that need guaranteed high throughout and low latency connect to the router via 1/10Gbps ethernet port. The devices include, but are not limited to

1. Playstation
2. Apple TV
3. Syology NAS

Obviously this puts constraints on where I can place these devices especially the ugly NAS, which I am not too happy having on the living room shelf.

Wireless

I have different SSIDs on the wireless network depending on the requirements of each device.

SSID1: 5/6Ghz (Main)

All high throughput, low latency requiring wireless devices connect to this SSID and the router automatically switches the clients between 6Ghz (WiFi 7 and WiFi 6e) and 5Ghz (WiFi 6). This includes the below family devices

1. iPhones
2. iPads
3. MacBooks and work Windows Laptops

SSID2: 2.4/5Ghz (Guest)

All devices which don’t belong to our family, go into this network. This includes friends, helpers, workers’ devices etc.

This network is isolated from the main networks, only has access to the internet.

SSID3: 2.4Ghz (Main)

All low throughput, but trusted wireless devices connect to this SSID. This includes

1. Apple Watches
2. HomePods
3. Kindles

SSID4: 2.4Ghz (IoT)

All low throughput, un-trusted wireless devices connect to this SSID. This includes

1. Air Purifiers
2. Washing machine
3. HomeKit cameras

This network is isolated from the main networks, only has access to the internet, with the exception of a specific port allowed to the Apple TV (Which is the HomeKit Home hub).

Apple Freeform

Special shout out to Apple Freeform, which is now my go-to tool for making diagrams. I was on the lookout for something similar to Microsoft Visio for personal use. Freeform not only meets expectations, but surpasses Visio in terms of usability.