Physical Network Devices
We all know when we sign up for an internet plan we get a router. That is doing multiple jobs at the same time. On top of that it is sending a bunch of data towards our ISP. If you are trying to have some privacy, then this is a no go. Some will get a random router that has VPN and custom DNS functionality and while that is okay. We can do a lot better.
• ISP Router in Bridge Mode.
• Protectli Firewall with pfSense installed.
• Slate 7 (GL-BE3600) in Access Point Mode.
Bridge Mode
Bridge Mode is a network configuration that allows two or more network segments. It effectively turns a router into a bridge. What this does is disabling its routing functions and allowing it to pass data between the segments directly. Basically it is just a LAN device that gives other devices internet through cable.
Access Point Mode
Access Point Mode is a network configuration that allows a device, a router or any dedicated access point, to act as a hub for wireless devices to connect to a wired network.
pfSense
pfSense is a highly customizable, open-source firewall and router software that offers a wide range of networking features, including advanced security, VPN services, custom DNS, traffic management and so on. This really makes pfSense our ideal choice for Protectli Vault. You can also use a pre-installed software on your Vault that is called OpnSense, this is essentially much the same, both are pretty stable. I have pfSense so we will be going with that.
Network Device Order
1. We want to make our ISP router do as little as possible, only allowing it to provide us internet.
2. We our firewall to be a lan only device as well but not the same way. I will explain this after.
3. We want our router to be just an access point. This will relief the firewall but also improve security and performance overall.
Important Before Buying
We want our firewall not to have a Wi-Fi adapter at all, we want it just guard our data and protect our network. Our firewall will not be bridge but it will be LAN only, where a bridge is a dummy which just basically pass internet to other devices, the firewall is a highly intelligent component of a network.
Purchasing
I will now give you links to the places where you can find the devices. For anyone who don’t like links, just go write on any search engine and search.
Slate Travel Router:
Amazon.
EU Official Store.
US Official Store.
I personally run with Vault V1410 – Intel N5105 with 4 ports but I am pretty sure Vault V1210 – Intel N5105 with 2 ports will do. The important thing with this is that you must order it with coreboot. Anyways, Protectli Vaults should be ordered on their own website.
Buy Protectli.
