Submind YouTube summaries
Thumbnail for Full Lab Tour 2026: Firewalls, Switches, NAS, and More

Full Lab Tour 2026: Firewalls, Switches, NAS, and More

Watch on YouTube

Video summary

The video provides an extensive tour of a home laboratory setup located behind the walls of the creator's studio, focusing on the infrastructure that connects both sides of the room. The tour begins by explaining the network entry point where a standard cable modem feeds into two Ubiquiti UDM-Bast firewalls configured in a high-availability pair to ensure redundancy. Alongside these primary security devices, an older USG XG16 firewall is utilized for its numerous SFP and 10-gigabit ports, while the creator also showcases various servers running Proxmox and TrueNAS to handle virtualization and storage tasks. A significant portion of the discussion revolves around power management, highlighting the use of color-coded cords, independent UPS units for different network segments, and a dedicated battery backup for the Home Assistant instance to maintain functionality even if the main PoE drops. Storage solutions are a central theme, featuring a mix of high-performance 45 Drives systems with spinning discs and SSDs alongside Synology NAS devices that serve as primary backup targets for Google accounts and Windows PCs. The creator emphasizes the practicality of using lower-powered hardware to manage expensive equipment costs, demonstrating how a single device can run the entire lab environment efficiently. The physical organization of the rack is also detailed, with the use of rack studs for mounting, Velcro straps for cable management, and DAC cables connecting servers to switches for clean data transmission. Although some cables are left in service loops pending future upgrades, the overall layout prioritizes accessibility and function over strict aesthetic perfection, allowing for easy testing and deployment of new devices like Raspberry Pis or UniFi switches. Beyond the hardware itself, the video delves into the logical structure of the network through a detailed explanation of VLAN segmentation. The creator outlines specific networks for different purposes, including a CGNet internal network to avoid standard private IP ranges, separate IoT zones for smart home devices, and dedicated VLANs for labs, out-of-band management, and UniFi Protect cameras. This structured approach allows for isolated testing environments where third-party gateways can be simulated without affecting the main production network. The tour concludes by showcasing the extensive collection of stickers adorning the equipment, which serve as a personal history of the creator's career in IT and security, ranging from early retail repair days to current affiliations with various open-source and cybersecurity communities. Ultimately, the video serves as both a technical walkthrough of a robust home lab and a glimpse into the creator's philosophy of maintaining a flexible, well-documented, and personally meaningful network infrastructure.
Read the full video transcript
Now, we're not going to start the tour at the front of the racks. We'll get there. We got to go between the racks first because I actually use both sides of the racks. And this wall I'm standing against is actually the other side of the wall from my studio where my computer is. So, behind the racks is technically where it all begins cuz that's where the cable modem comes in and where my two UDMBBast firewalls are. Now, the two UDM beasts are set up in an HA pair. So, the bottom one is ready to take over if there's ever a problem. I've tested the takeover. I've done videos talking about how the failover works in the HA setup and it works the same in UDMB beast as it does in the older models as well quite well feeding that I have an older but still very viable USG XG16. This has got plenty of SFP and then four 10 gig ports. So this is the little connector that keeps them in sync and then each of these are feeding into this and you can see only one of them is on. It turns the other one off. Same thing with the two cables coming down just to my cable modem. The standard cable modem I'm fine with using from the supplier. I maybe one day will switch to the UniFi one. It's one of those ain't broke, don't fix it. So, simply using that. And then uh colorcoded power cords. I think these are important. So, you can put things like important power on the list here. Uh this feeds the beast going up above. You can see back there I got some blue cables. We'll talk about more of that when we get to the front. kind of swinging around back here though. This is storage for a little bit of extra wires. Uh these are some extra long HDMI cables at the top over here. Then kind of coming down, this is where my MacBook studio sits. Once again, behind the studio cuz this wall is the wall for the studio and this is sound deadening. So nothing comes in here. This is uh got drywall and board behind it. But kind of get you an idea of what it looks like. Now looking over here, this is the studio computer. It is also on this side of the wall. So, if you kind of look up, the camera's fading a little in the dark over here, but you can see the wires as they go through the wall. I put a wall plate on there. This is how the studio computer feeds the other side. And this is what ingest and records everything with all the cameras. I have a studio tour coming up soon, but for those wondering what the hardware looks like, it's just an older computer that runs OBS and pulls in via capture cards all the different feeds. Now, bringing it back around to the front, I'll pause at this. This is a device that I haven't fully reviewed. I've mentioned on a handful of live streams. This runs Proxbox right now. And pretty much most of the software that runs my lab or my home lab or however you want to describe it. This is what I'm using. And I'm going to do a dedicated video not about this as a product because yes, it was sent to me, but more about what CPU is on it and the fact that it doesn't take that much power to run your home lab. I know hardware is crazy expensive here in September of 2026. So, I moved everything to this lower powered hardware compared to many of the other things that I have in my rack here to show that it's very viable to functionally use a lower-end system. And these are just still dedicated to lab. Let's focus on rack one. This is how I turn everything on and off. Dead simple. Just one of these simple power switches that I can turn on different devices that are in there. Currently, the 6100 is on. Nothing's plugged into here. I have UniFi EFGs. I have these that I'm doing some testing on. This is for some upcoming videos talking about, well, this one's off right now, but talking about how to get started with UniFi. It really doesn't matter if you're using a high-end UniFi or a low-end UniFi. It's just a matter of setting them up and going through all the settings and showing you how they work. So, these are frequently reset or sometimes I test updated firmware cuz, you know, want to make sure I'm on the latest and finding any bugs with it and reporting them back to UniFi. The cables are somewhat organized here. And this may look strange how it feeds into the switch. That'll be later in the video. I'll just talk about all the VLAN splitting I do. And that's related to all of this. And that's because I just have a series of VLANs. And that's how I feed back out of the LAN on any of these firewalls, including the Netgate ones down here. And it feeds back into the network. Now, currently, I don't have a feedback for the LAN on this side. I just don't really need it right now. I have a pair of these. and I just move one down if I need to do some type of inter VLAN checking. That'll be later in the video kind of going over some of that setup. I have an older Cisco here. I've done some testing with some Alta Labs and it's usually off cuz not overly impressed. Uh leave comments if you want to hear my thoughts on some of the Alta Labs stuff down below or hit me up in the forums on that. But back over here, the one through eight and then these two over here, they all correspond to the cables I have over here. So cable six, cable five relates to any of those cables. This is what makes it easy for me when I'm setting something up for lab to be able to just plug something in or even plug a Raspberry Pi in with the AP PoE and power it up and test the device and stick it on whatever network I want. And maybe if I wanted number six here behind the network on this netgate, I would tag this VLAN to the same VLAN that's on number six here and it would be able to POE power it and I could put a device behind there, etc. It makes for some really easy network testing. Uh, I love rack studs. That's what's holding all of these in. This had a better holder. It broke. Uh, this one's not broke, but you just spin these in. If you haven't seen them, rack studs are great. I've been using them for things. little jet KVM and a little printed holder for it. It's uh not hooked up at the moment, but really handy when you have devices that maybe you want to hook up that are in your lab that well don't have a lights out management system. Speaking of labs, this what this is here and this is sometimes if you've seen it on my network logging into things called the ugly NAS and this is just an older free NAS, but it's actually running the latest true NAS but it's a really old system and I'm testing for an upcoming video these UniFi bridge switches. So I have it powering another switch here and I'm connected it. So, it's actually doing a series of backups cuz I'm load testing this switch because it does wireless bridging to put some real traffic over it over time to see if there's any issues. These are some of the lab scenarios I test. And then coming down a little further, I have the UPS Pro I've been testing. These are just really nice UPS's I bought a long while back, and I have one on each side of my network uh as a feed. Now, I'm not feeding this off of that. That's a not great idea to do. Each one's independent, but I wanted to test these. So, there's a review coming in the future on this. These have been very trouble-free UPS's. I really like them. I'll leave the specs down below for you those interested. They've held up over the years, but warning, they are expensive. Now, I have cable modem for internet, and it's actually quite reliable, but you still need a backup cuz, well, things go down. And I have the UniFi 5G here. I've got it hooked up with Google Fi. I've done a review of this already. I was going to put this outside. I have an outdoor one too that I've tested, but it's got all the bars and works great here in my basement. So, uh, one of those ain't broke, don't fix it. So, it's went from a temporary to a essentially permanently seems to live here. I also have a few extra cables once again for plugging and hooking things up. Uh, for convenience, little blower here, label maker. I've talked about the Nimbot label maker. This is a slightly newer model, but it works great. I like sticking labels on everything. And then some of you may wonder why I did this. And it comes down to convenience. So you can side mount a switch. And this is essentially where most of the wires come in throughout the house for things like cameras and networking. And once again, I'm big on labeling everything cuz I think everything should have a label on it. So I know where any of these wires came in. Put them across here. This is just much more accessible than having something in a rack like this cuz they all come in here. every time I wanted to change something, it'd be a little less convenient. So, having this here is well, I think quite convenient and doesn't bother me. Some people think everything should be only in the rack, etc. And that's fine. Uh, like I said, there's always opinions on how these things are set up, but I do try to follow a relatively reasonable color coding and setup of these. Occasionally, there's a extra odd wire because I'm testing another camera that's mounted to the ceiling. It's been there longer than I'd expect, but Eventually, I'll route it properly, and because it's a camera, it'll get the proper cable colors on it. Now, at the very top here is Home Assistant. I've done a whole video on Home Assistant. I have it currently running from the rack here. It's just one red cable, but uh eventually I'd want to put a UPS on it, which I mean like a battery dedicated to it. It's obviously tied to the UPS because this is powered from the UPS, but if I wanted a home assistant to kind of be more independent, I thought about putting another level of redundancy on it. So when it shuts down, if it loses network, it's not just going to drop because of the PoE. That would be the challenge it has right now. If the PoE drops, uh, it will just shut off. But maybe that'll get fixed later. I keep saying it, but it's been up there for several years and running along fine on a Raspberry Pi. Maybe I'll virtualize it in the future. Different discussion. Now, coming over here, we'll start with something that's turned off that I don't know what to do with at the moment. It's a DVA 1622 Synology. This used to be the cameras that I was using when I had Synology cameras. And I've mentioned this a few times since I moved over to the UniFi camera system. And Synology feels like they're at the same place they were when I started using them six or seven years ago. And it's not a bad system. It's just something I ended up really pulling out and not using anymore for just not having all the features I want. So, for now, that's off. I turn it on once in a while to update it to see if things have changed, but they haven't last time I checked. Ryzen 1, Ryzen 2, Ryzen 3. I'll throw the specs somewhere on the screen for these for those wondering. These are three lab servers currently to run XCPNG and one runs Proxmox, but that's dynamic and can be changed. Back to the little Harbor Innovations is the one I leave just running Proxmox right now. I go back and forth between these softwares because of different testing I'm going to do or understanding of things. Uh, so these ones can be reloaded. There's nothing particularly important. They're just labs. I still back my labs up and can convert them between the different hypervisors on a as needed basis. Most of that storage is happening here on the 45 drives HL15. This is my higher performance storage. It's got a series of spinning discs on one side and SSDs on the other. It's a great system. I did a little short recently talking about putting a new filter in this. I've also upgraded the fans. This thing is quiet. By the way, there's not a bunch of noise cancelling going on. This is the upgraded fans in that have uh provided a relatively quiet system. Hard to do that one-handed. It'll slide it out a little bit. If you can see hiding in there, they're just Noctua fans for those wondering. It's part of a kit that 45 Drives has to uh get this little quiet. And feel free to flame me in the comments. I I know I should put these somewhere, not just sitting like this, but it's convenient to do. And if you haven't seen the 45 HL15 air filter, it's actually really slick. That's why I wanted to pull this out. Uh, keeps the dust out. I don't have much dust in here, so the house is fairly new, but makes it pretty convenient. And then, uh, we'll try and slide this back on with one hand. Maybe have some success. We'll fix that. We'll fix that later. All right. This might be old. Still edits all my videos. This video is being edited on this little Trunass Mini R with 64 gigs of memory, which actually, I guess, is expensive now. It wasn't expensive back when I got this a number of years ago. Uh, this system's been just humming away. We have the UNAS Pro. I have actually a few Unass, but not all of them are here. I have a whole another location where uh I store some of the things and put them in production use. But this is the one here. I keep tabs on the Unash Pro. I do use this for sharing out videos with other people. I'm going to do some updated reviews. Once again, it my reviews I try to really base on heavier usage and my usage has been pretty solid on this and no complaints. And then the reviews are coming for the larger ENAS systems. We've been putting them through some productionheavy use. We actually got two of them now and uh they're really impressive. So, I'm really happy with the Unash Pros. Uh these other ones running True Ness, though. True NAS has been my go-to for a long time, but I'm really impressed, especially with the file sharing options you get with the Unash Pro series. And I still have this Synology. This Synology runs my backups. It runs backups for any Windows PC, which is down to really just one and maybe some virtual machines. I like the Synology backup software for that. And it's not just for that. The bigger task that this is doing is backing up everything I have in my Google account. So Synology has backups for that works really, really well and been using it for years. So being able to back up Google accounts without any extra licenses. Synology is still a solid option for that compared to the much more expensive cloud backup options because you can't just trust Google to have your backups. That's unfortunate, but uh that's not something I trust. If they have a accident or goof up the account, I want to make sure that I have backups of all my data. This is off at the moment. I just have it unplugged, but I plug it back in and set it up from time to time when I'm testing new cameras. This is the previous NVR Pro before I move to the newer NVR that they offer. And then down here at the bottom, we have the 45 Drives Home Lab. This is the HL8. I think this is a great little box. It's my media server. Okay, maybe there's a little bit of dust in this one. Not bad. It's been a while since I opened it. So, I could probably take and clean that out pretty soon. There's a little bit of little bit of dust on there. Little bit of dust from the uh stickers. I think I probably had on these at one point. I've done videos and talks about 45 hardware. It's just really nice. I can't really open this up all the way cuz it this part flips up. If you haven't seen how that works, it's rather clever. But the 45 drives is just been a solid performer. Both this home lab and of course than the uh HL15 unit. I still have more 45 drives. Many of them that we bought that are at clients. And then we have another one that I keep more off-site backups with, which is why it's not in these racks here. Wouldn't be offsite. Coming over here to the back of this rack, we have the USW Pro aggregation switch. And we have a another UniFi switch. So this feeds many of the IPMIs. Most everything else is DAC and a series of DAC cables that I try to keep reasonable. I'll pull the side off here in a moment to show, but these are the Ryzen 1, 2, and three systems. Once again, they're all connected with these DAC cables. This is for the IPMI lights out management. So, that's why we have one standard switch up here. And the cabling's reasonable as you can be for the back of the rack. And a lot of the stuff not really enterprisegrade with dual power supplies. So, it just has the one power cord and we have these in the rack here to make the power cords fit really nice. And uh yeah, it just all fits good. I I can't remember where we got this. I know it didn't come with the rack. It's kind of just a simple power plug system that bolted right in. I I really can't remember where we got it. I don't recall it coming with the rack, but uh turned out to work really well cuz we have these powers and of course same UPS all the way down here at the bottom. Now, even the 45 drives system is connected with DAC down here. So, these are able to hold one card. And I've talked about using DAC. It's just a lot more convenient to hook up as much as possible with DAC. The exception being the Synology. I do have it dual connected uh for some of the two networks that it was on at the time. It doesn't really need it now, but uh it doesn't have a DACK because it has a spot for a deck that has never got around to putting in. But even this right here was a half height. This older True NAS Mini and it's running wood deck. For those who want to see the rack from the side, we'll go ahead and pop this off. It actually makes the stickers easier to display as well. These cables are too long and I should replace them with shorter ones instead of putting them in a loop here. They were a bunch of older DAC cables that I had, but there was nothing wrong with them and I couldn't see replacing them. So, I kind of have a service loop cuz I could measure and buy the exact length, but you know, I didn't. So, that'll be one of those I'll fix it later, but it's later and it'll probably never get fixed. Then, we have here the Velcro usage. I try to do this everywhere, even the power cords. Velcro usage all the way around. You'll notice that kind of throughout the rack. Anywhere I have is as much Velcro as possible. And I'll point out the ceiling for those wondering. Yes, I do have little magnets that just hold everything to the ceiling. So, all of the cables that connect each of these switches to each other and go between the racks once again are all going there in the cleanest way possible, keeping them up over to make it functional. But yeah, I know it's not absolutely the prettiest, but this is a lab and it's really designed for function. Now, let's talk stickers. There's a lot of stickers on here because, well, you can only fit so many on your laptops. And I decided, hey, why not put these stickers on my rack? And it's been just slowly growing as I've got these cuz, you know, I didn't really like it just looking all plain. There are, of course, stories for me going to Wild West Hackingfest or uh my friends at Wayne State sending me stickers. Come in. We're open source. No idea where it came from. Probably someone sent it to me. If you send me stickers, my address is on my website. I end up sharing these. Uh I have no problem putting cool stickers. Not every sticker you send me will make it, but at least ones I think look cool, like where this one says hacker. Wire shark. Um, hack the planet after coffee. I I just have so many of them. Some Huntress stickers. I had these before I'd uh worked at Huntress cuz I was always a longtime Huntress user. More Girkcon Girkon Girkcon stickers. A Frack sticker that seems to be peeling off a little bit here. Uh, I thought this is funny. This is the old UniFi Protect stickers. So, I put it there. And not all of these. I I don't know why. I think one of my employees back at the time had come over here after I built this or gave it to me. Uh so yes, we have a high seafruit punch on there. So they may not all have purpose, but some of them, you know, are kind of cool. I don't remember where I got the loft heavy industry ones, but look up the history for loft. It's really cool. There's a whole book and you find a link to the book on my website talking about the some of the hacking history in Loft. It's it's pretty cool. And for those that have been following my channel for a long time may have recognized this. This was the former face plate to my old rack I had years and years ago at my old office. And uh I've kept the face plate. The rack was trash, but the face plate's cool. And I had a lot of stickers on it. And these are my favorite stickers. And I have some lights on it. So this is kind of the what is behind me from the studio. Uh this one, Planet Recycling, is something my friend had started a recycling company. That was actually one of the first stickers on here from like 10, maybe even 15 years ago. Uh, and PC Pickup is a company when I was doing PC retail repair. That was, uh, where this came from. These are like the first couple stickers to ever make it on to this. And just over the years, it's grown to different ones. And, uh, that's why these are here. And this particular one's always been a favorite. I try to keep everything in my lab relatively organized and broken down into some level of categories like power cords or PoE injectors or a handful of MVME and SSDs. Uh, I had a handful that have been pulled out. They're all older ones. They're not particularly great. They're just consumer drives, but when you want to do a demo or set something up, these are handy things to have. I have some box of random when I don't know where to put things, but somewhat organized here. And same thing with rack ears, keystones, all those extra rack nuts are in here. Uh, extra deck cables, patch cables, etc. And this is the other area that is kind of still my lab because it does have some connections that go over to the other side. There's just one switch there. Two ports hooked up to that 10 gig XG16 switch. Uh this is where I work on things and other projects that might need to be filmed. Might put the camera top down. I've got some mounts up above and plenty of lighting. Uh keeps it nice and bright on here. And if you flip all the way around, we're back into the studio where I sit. So, from this view here, this is the kind of more like the view that you're used to seeing is kind of from this angle, but if you kept it going around, you'd be back over to this side here. And I am working on a full tour of everything in my studio space and covering how it's all set up. That'll be coming at a later date. I mentioned when I was talking about the switches, all the different VLANs I have. I'm not going to get too in-d depth on this cuz I already have an older lab video. I'm going to do a newer one because, well, the UniFi interface has changed quite a bit for setting up VLANs. They've made it, I think, a lot easier, but that of course means it's different than it was before. But for what networks I have, I have the CGNet one. This one seems to cause controversy in the comments occasionally. Yes, you can run internal CGET. I do this just because I like seeing the 16869 IP range on a firewalls WAN instead of a RFC1918 address. Uh, my favorite YouTube comment though is the person who told me it is illegal for me to do that internally. Uh anyways, then I have home things which is pretty self-explanatory. I think it's where all the things that uh my wife puts on the network and anything she buys. This is the IoT network of things I would prefer not to have, but at least I'll quarantine them off separately. Uh then I have labs 101 through 105. These are the ones because it says third party gateway I assign to the LAN side of any firewall I'm testing. So I can take and group things into lab 101 to create a virtual lab environment where I might be testing a bunch of other network devices I want behind a different firewall that's not mine. So that firewall will have a WAN and the CGET a LAN that is thirdparty gateway and I'll get more in depth on how that works in a future video. Then I have a few others like my out ofband management things essentially where lights out or management control planes go with a particular lockdown rules. Shared lab is uh that's a different story. It's not set up right now, but it was for sharing a lab with a friend. Don't route your storage. So storage is this VLAN 20. It says third party gateway. And UniFi Protect gets its own network as well. That is where the NVR lives along with all the cameras. Now, here's a full list of all the devices. I have the E7 and the U7 outdoor and the U7 Pro wall that gives me full coverage at my house inside and out. I'm going to do a separate Wi-Fi video because I've been using this outdoor one for a while and the range on it is really impressive. And for indoor, one indoor one in my basement's enough to cover well the square footage I have for my house. And that's going to be a separate video I do just talking about some of the Wi-Fi and the setup. But this is also a full list of all the different hardware that I have connected for those wondering. I like that they now have this little topology view or even better an infrastructure view. So you can see the LTS studio, which is interesting to me that it only shows one, but I guess this is just the primary one all the time. I might look a little funny if they stack two together, but it is in an HA setup. Then it goes to that USGXG16. One wire heads over to the 24 port rack, and I have them labeled in terms of where they're located. So some are in rack one, some are in rack two. And you can see how it all tears down as it goes through. And speaking of rack one or rack two, I think this is a nice feature they added, which is device tags. So I can filter for things are in rack one or things that are in rack two pretty quickly here. It's a nice little quality of life feature, but does become quite handy if you have large networks with lots of devices and you want to sort them by tags. Well, thanks for hanging around to the end of this lab tour. Tell me if you loved it or if you hated it. If you loved it, give it a thumbs up. If you hated it, give it two thumbs up. Hit that button twice is what I'm trying to say. Uh like and subscribe and all those fun things. Please hit me up on the socials at laurrensystems.com or go to my forums at forums.lorsystems.com to have a more in-depth discussion about this or any other topics or let me know what I left out or what I missed or what you would like to know more about. All right, and thanks. Back to editing. [music]