As I’m in the beginning steps of sorting out my homelab, I’m starting to ask questions I haven’t asked before and come across conundrums I hadn’t considered previously. One of which is how to sort out pi-hole given that my ISP has locked down the router tighter than a tight thing.
As I had been reading about and watching YouTube videos, I had stumbled across Tailscale and the idea of VLANs is a nice one. That coupled with wanting to block ads and a new router seemed to the optimal choice.
Another thing is that I eventually want to get a Reolink POE video doorbell and Reolink E1 outdoor camera for my garden and so I’m trying to think somewhat ahead as the last thing I want is a server rack in my house. Aesthetically speaking.
So I stumbled across all the recommendations for Mikrotik and they’re really reasonably priced, especially compared to the Netgear Nighthawk thing I was looking at for ten times the price.
The Mikrotik HAP AX Lite is reasonably priced, does all the cool new stuff, let’s me set up virtual local area networks, has room for growth and has PoE capabilities. It seems to be the perfect choice. But is it? Because it seems almost too good to be true.
Consider a micro pc running opnsense (or Pfsense) instead.
Just look on amazon for “micro firewall pc” and you’ll see what I mean. Then you can look into separate APs.
It’ll cost more, but it’s a better step for your home lab.
When you say separate access points, what do you mean? I’m probably not understanding you correctly, because I’m interpreting it as you’re saying that I should buy separate devices for WiFi?
To me that pretty much defeats the point completely. Most of my house runs on WiFi and I also don’t want a server rack or loads of different pieces of equipment strewn around the place, hence why the Mikrotik is so appealing, as it can route, firewall and do POE all at an incredibly reasonable price. That said, reading some comments online, it’s got a steep learning curve and it’s really hands-on.
Mikrotik HAP AX Lite
Looks like it’s 2.4ghz only, which is really odd. Mikrotik is also really difficult to configure in my experience.
Typically a better setup is a dedicated router, and at least 1 dedicated WiFi AP, that way you’ve separated the 2 and can upgrade one without the other as technology evolves. TP-Link Omada APs are decent, as are Unifi.
One of which is how to sort out pi-hole given that my ISP has locked down the router tighter than a tight thing.
Easy way in that case is use Pihole for DHCP and DNS together. Assuming you can disable DHCP on your router.
Oops meant the AC Lite. I think I was obsessed for multiple reasons, including intimidation, but I’m now coming around to the idea of trying something new. I guess I won’t get to do it as cheaply as I wanted to.
pfSense either virtualized or on almost any cheap mini pc with more than one nic
But then what do I do about WiFi? Sorry if it’s a stupid question.
Naw not dumb but thats kinda your call, I just put my old WiFi router in Access Point mode and hooked it up to the machine I’m using and it works great. I’m sure it’s possible to use a pcs internal radio to broadcast but I’ve never researched that myself
So here’s a random related question, given that you’re using your old router, does that mean you have nothing connected at 5GHz?
So I said “old” but it’s still relatively new and broadcasts on both 2.4 and 5 ghz
That makes more sense.
I actually missed that you mentioned the nighthawk in your post somehow, I bought one in 2020 so I wouldn’t have to rent Comcast’s but that’s what I’m currently using. If you have your own wireless router that broadcasts on the frequencies you need with the SSIDs that are already in your various devices you can almost certainly just throw that into AP mode and then just connect it to pfsense once it’s configured and not miss a beat.
I’d also recommend getting your own modem(arris surfboard s33 is my recommendation) if your ISP allows it
Since you mentioned Tailwind, you should check out Tailscale too. I believe it to be better suited for personal Homelab use over tailwind, I could be wrong though.
Tailscale was totally what I meant.
Be aware that some Reolink cameras (B800 for certain) require a reolink DVR. The alternative is neolink, a program that reverse engineers the protocol.
Thanks. I’ve been keeping an eye on the E1
I run Reolink cameras with frigate, but I use “only” the video streams. But yeah, you have to have a close look at the model you buy if this works.
I don’t know about Mikrotik, but it might also be interesting to buy something, that is running on OpenWRT, an open source router OS. That way you would have maximal configurability. I recently purchases a GL.iNet AXT1800 for my own home lab (though I’m currently only using it for the isolated homelab, not for the rest of the house). You can even host stuff directly on the router with OpenWRT. I currently have Centos 9 repos hosted there and DHCP/TFTP for network installation of VMs via PXE boot.
After digesting everything people have been recommending, I’m now looking at this an Intel N100 Celeron N5105 Soft Router Fanless Mini PC 4x Intel i226 i225 2.5G LAN HDMI pfSense Firewall Appliance ESXI AES-NI
Peotectli makes a small appliance.
Dell thin 1050 or 5010 extended has PCI slot.
