I've been tasked with setting up a network to support our new apartment building. Our current plan is to provide internet to the residents, hotspots for outside areas and community rooms, and internet to the leasing office. I'm very new to the networking side of things, but I've been slowly learning about the basics(I'm the web design guy). Sorry if I leave something out!
As for the technical side, we're using mikrotik routers and switches. We're using hap ac2 routers for the residents. We have a cloud core router and cloud smart switch. We will most likely be getting an additional core router for the second phase of the building.
We are getting the internet wholesale and splitting it between all the residents. We are currently getting 1 gig. We have intentions of getting a 2nd line from a different provider to ensure uptime, but we're still in the process of figuring out that part.
The issue I'm trying to figure out is how do I have the internet ready on move-in and still be secure. I want to prevent access to the internet through a static IP assignment? For example, if they disconnected the router we've provided, and plugged in their own. I have been able to do this with a random router and connect to the internet. ( I do know what to look for, but someone with that intent would be able to find the proper addresses and make it work) We are currently using PPPOE for the resident's router. We are also using a RADIUS server which I believe is used to manage the user's internet speeds.
I've seen VLAN as a possible solution, but my understanding of that is if you want to have different segments of your network talk to each other and not the ones outside of that specific VLAN. The example I've seen is an office with different departments. So, I don't know if that would necessarily work for my situation. I believe there are multiple ways to accomplish what I'm trying to do, I'm just trying to find the most efficient and secure way to do it.
Thanks for any information! If I left out any crucial information, please let me know!
No comments:
Post a Comment