|
new setup across vlans/subnets
|
|
29-03-2021, 18:02
Post: #12
|
|||
|
|||
RE: new setup across vlans/subnets
(29-03-2021 16:26)simbun Wrote:(29-03-2021 14:27)Neo Wrote: Thanks for the tipsI don't know what NAS you have, but if it just offers redundancy (RAID) then that's not a backup at all, what if you accidentally delete a folder or another malicious process does, redundancy isn't going to help you there as it'll just be mirrored across :-) I don't have another server to back to. But I have a few spare internal hardrives - i can use a usb-sata connector, power them up, backup and stick em back in storage. It'll have to do for now. I'm trying not to buy any more goodies. I still have one windows device in the house running 10. I thought it might be prudent seeing as I'm doing searches most of the time to work out what the hell I'm doing on Linux lol - it's the backup in case I break it all xD (29-03-2021 16:26)simbun Wrote:(29-03-2021 14:27)Neo Wrote: I attached a basic layout of the network. Each colour is a different subnet/vlan. Grey is trunk and they are all isolated unless I've set specific rules for something I need.Wow you've gone very granular, I resisted the urge to split it out too much and just have: It used to be all on one LAN lol. Oh happy simpler times. I think you've done something similar, maybe I've gone a step further. Once the rules are setup, it functions really well and the switch ports can be allocated to any vlan. The problem for me is the NAS being accessible externally. It was going to be on a vlan with much more equipment, but as I planned all this rework, some choices were forced on me. Burglar alarm had to be isolated for its own protection IOT stuff had to be isolated. They can't really be configured and rarely get firmware updates. Security doorbell + cameras had to be isolated. Guest had to be isolated. Network services (like switches) had to be isolated. A lan for family mobile devices that can leave the house seemed sensible and then semi-smart devices like tvs or volumio (which isn't that secure) seemed to merit their own too... they most likely arent as problematic as the iot things, but I'm not sure I fully trust everything our smart tvs get up to. (29-03-2021 16:26)simbun Wrote:(29-03-2021 14:27)Neo Wrote: Can I ask a question about minimserver.MinimServer doesn't touch your music at all, it's just a presentation layer (it's not JUST that but that's 80% of it). If you don't have a DLNA/UPnP server for your music then you can only browse by folder; if you know where everything is then that's fine, but if you're in the mood for some Reggae, or want to look at all the songs from a particular artist, be them on their own album or from a compilation then that's not really possible. That clears alot up. Thanks. Just on the free trial right now, will upgrade when it expires. 1) for the extra functions and 2) as way of thanks to the work and provision of the software. (29-03-2021 16:26)simbun Wrote:(29-03-2021 14:27)Neo Wrote: I'm just thinking that if the music directory is in a good state, nicely organised and meta data all accurate, I think I could just settle with an nfs share for volumio and use firewall rules to allow my mobile to have a http connection to the volumio and control it that way. Seems like a lot less work although will that mean I'll need to have volumio specific playlists created?As you say, anything that isn't in your tags will be siloed if you have devices on each vlan. Yep I could. Or at the very least move the volumio to the NAS vlan. It's just that my NAS is accessible from the internet and I feel that I need to exercise as much caution as possible. Maybe when I can afford another NAS thats capable of HD streaming, I'll reconfigure the network so theres a media vlan and put all the devices together and then make the older NAS an external service only NAS and lock it down even more. |
|||
|
« Next Oldest | Next Newest »
|
User(s) browsing this thread: 2 Guest(s)

Search
Member List
Calendar
Help



