Build With SDS
HOMELAB

CORE_LAB

VLAN-segmented production network built for real work and exam prep. MikroTik hAP ac² router, Grandstream GWN7711P managed switch, Synology DS425+ NAS, HP ProDesk server, 3× TP-Link HX510 Wi-Fi 6E mesh — all wired, monitored, and automated.

A dedicated VLAN 40 lab segment runs a CCR1009 gateway and three hAP ac² routers for hands-on OSPF, BGP, and WireGuard practice. MTCNA certified — currently working toward CCNA.

0
VLANs
0+
Services
0+
Devices
0.0%
Uptime
MikroTik hAP ac²Synology DS425+HP ProDesk i73× TP-Link HX510MTCNACCNA prepWireGuard VPNCloudflare Tunnel
Router / routing
Switch
NAS / storage
Compute / servers
Wireless APs
IoT · VLAN 30
Lab · VLAN 40

← swipe to explore · tap nodes for details →

LAB NETWORK · VLAN 40CCR1009 · GWN7710 · 3× hAP ac²CCR1009-8G-1S-PCLab gateway · 192.168.40.101G trunkGWN7710 (unmanaged)Lab switch · flat L2 · no VLANshAP ac² #1192.168.40.11hAP ac² #2192.168.40.12hAP ac² #3192.168.40.13LAB USE CASES▸ MTCNA exam prep — real RouterOS config▸ OSPF multi-area (3 routers + CCR1009)▸ eBGP peering between CCR + hAP units▸ WireGuard site-to-site VPN practice▸ VLAN + inter-VLAN routing labs▸ CAPsMAN wireless controller setup▸ Firewall rule testing (chains)▸ STP / spanning tree practice▸ Wireshark packet capture on interfaces▸ EVE-NG on ProDesk for Cisco IOS/Junos▸ CCNA ACL, EtherChannel, NAT practiceVLAN 40 port on GWN7711PManaged via SSH from VLAN 20 (port 22)EVE-NG VM on ProDesk for Cisco/Junos topologiesCCR1009 CLI via WinBox or SSHINTERNET / ISP WANPPPoE · Public IP · no CG-NAT1G ether1 (WAN)MikroTik hAP ac²192.168.99.1 · VLAN router · WireGuard · firewall · NATWireGuard VPN192.168.177.0/241G copper (LAN trunk)Grandstream GWN7711P192.168.99.2 · managed · 2.5G · SFP+ · 802.1Q · PoE+VLAN 20 HOME · VLAN 30 IOT · VLAN 40 LAB · VLAN 50 GUEST · VLAN 99 MGMT2.5G2.5G1GVLAN 30Synology DS425+192.168.99.3 · VLAN 99SERVICESCloudflare tunnelSMB shares · NUT UPSDSM · Slack alertsEcoFlow River 3 PlusUPS · NUT · Slack alertsHP ProDesk i7 32GBProduction server · 2.5GDOCKER SERVICESPlex · Sonarr · RadarrTdarr · Prowlarr · OverseerrFlareSolverr · Uptime KumaHome AssistantHomepage · FrigateAdGuard Home · NPMThe Dude (CHR VM)Watchtower · EVE-NG (VM)TP-Link HX510 #1 (main)Wi-Fi 6E · wired · VLAN trunkSSIDSHome → VLAN 20IoT → VLAN 30Guest→ VLAN 50Wireless meshTP-Link HX510 #2 (node)Wireless mesh · backhaulWireless meshTP-Link HX510 #3 (node)Wireless mesh · backhaulIOT · VLAN 30Tapo C211 cameraTapo C201 cameraTapo P110M plugs ×2Tapo P110 plug ×1Tapo L530 bulbs ×2Tapo H110 hub + IRTapo L900 LED stripTapo temp/humidityEcho Pop ×2Samsung TVAC (via IR blaster)blocked → Home/Lab/MgmtHA controls intra-VLAN onlyFrigate RTSP stream onlyREMOTE ACCESSPlex port forwarddstnat → ProDeskCloudflare tunnelHTTPS · NAS / ProDeskThe Dude (CHR VM)SNMP · Slack · Better StackAdGuard HomeDNS blocking · all VLANs