Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This a thousand times.

The very start of a strong network is a solid Dynamic DNS + DHCP setup. The only IPs that should be static are the router's.

In a small office, using your firewall/router is not a bad choice to DNS+DHCP. For companies < 100 and WAN connections <1gig pfsense is perfect.

Segment your APs and servers etc into different VLANs with distinct IP pools, bonus point for different subdomain. This allows your to firewall it off to prevent prying eyes. It also means that if something were to get into your VPC, and then over the VPN, they can't fiddle with your APs quite so easily.

As for ethernet always buy in cables, but get good sockets and patch panels. It is worth the money to hire a wireman/woman to do that for you. Unless you've been practising its a long boring slog, time you should be spending doing your real job....

Ubiquity again is a solid choice for wifi. I've deployed ~50 to cover 1800 person office. Beware, the non "pro" versions of the APs don't use proper PoE, so you'll be stuck either using their injectors(ok for small places) or buying their switches.

SOme of the pro APs have built in speakers (https://www.ubnt.com/unifi/unifi-ap-ac-edu/) which might be fun. They have proper PoE too, so you can use a real switch.



The UAP-AC-LITE used to be only 24V passive PoE but has supported real 802.3af PoE for a while now.


Looks like the UAP-AC-EDU is PoE+

I agree though, all my APs run on DHCP.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: