Network pics thread

Anyone ever look at this thread and consider it a security risk for the posters?
:p Come on dude, anyone with a NAT box(and thats the majority of the internet) is safe from outside attacks. Unless you punch holes in your network to allow for outside services. Posting network diagrams poses NO remote security risks for the most part.

Glad to see I'm not the only one running something this complex at home. It's great for testing and learning for work. I need to get another ESX box so I can enable HA/DRS for my VMWare ESX cluster. It's sad with a single server in it right now.

Hey now! You forgot about me there budday! Or have you not seen my network, lol :p
 
Hey now! You forgot about me there budday! Or have you not seen my network, lol :p

LOL, I have seen your network so I did forget about you! I remember you saying my 10GbE NIC's were a waste in which I had to bring up your home gear for a come back.
 
LOL, I have seen your network so I did forget about you! I remember you saying my 10GbE NIC's were a waste in which I had to bring up your home gear for a come back.
hahaha, yep. But you said that you had the "hookup" so I had to retract my statement. My network has actually changed once again(a bit more overkill obviously) so I will have to post up a diagram eventually. Have a lot of plans. Got another server running esx3i.
 
hahaha, yep. But you said that you had the "hookup" so I had to retract my statement. My network has actually changed once again(a bit more overkill obviously) so I will have to post up a diagram eventually. Have a lot of plans. Got another server running esx3i.

LOL, I do have the "hookup". Those 10GbE NIC's cost me nothing. I'm looking to get another ESX server to complete my setup. I've got 1 ESX box (dual-2.66Ghz Quad Core's w/ 16GB of memory) but have the license for 1 more with Virtual Center. Then I can throw up a HA/DRS cluster for here at home.
 
:p Come on dude, anyone with a NAT box(and thats the majority of the internet) is safe from outside attacks. Unless you punch holes in your network to allow for outside services. Posting network diagrams poses NO remote security risks for the most part.

Firewalls are only one layer of security. Would you bet your network on one layer?

Most of you have a valid argument in that you don't have anything worth stealing. The most valuable part of my network (and probably yours) is my bandwidth and processors.

How are those items being compromised on the net? Spyware. How do firewalls prevent that? They don't. So now your one layer of security is useless.

I'm not saying it's a big risk, just thought it would be an interesting discussion. It is my job to be paranoid :)
 
Firewalls are only one layer of security. Would you bet your network on one layer?
Actually, I 100% would. And since we sound like we're getting technical, a NAT box is NOT a firewall. NAT is sufficient for most home users, or users that would post up network diagrams here. period.

Modern day firewalls are NOT on layer of security either, think IP inspection. No spyware on obscure ports will be getting out of my network anytime soon. If they like to masquerade then you always have DSPI.

The most valuable part of my network (and probably yours) is my bandwidth and processors.
heh, have you seen my network? Page 14, half way down. 'Nuff said.

How are those items being compromised on the net? Spyware. How do firewalls prevent that? They don't. So now your one layer of security is useless.
Are you serious? Clearly you have never heard of DSPI firewalls or UTMs for that matter;). UTMs are so common among the users here.

I'm not saying it's a big risk, just thought it would be an interesting discussion. It is my job to be paranoid :)
Indeed it is interesting, but I think that you are a bit too paranoid. lol :p Im curious, why is it your job to be paranoid? (I know it definitely part of my job).
 
Hola, saludos desde buenos aires, argentina. Este es muy pequeño datacenter que fui armando de apoco a través de los años. Un saludos a todos y disculpen por mi mal ingles.

Hello, greetings from Buenos Aires, Argentina. This is a very small datacenter that I was bulding of Rev over the years. A greetings to all and sorry for my bad English.


Mas adelante fotos nuevas/ later new photos:

HPIM5144.jpg

HPIM4508.sized.jpg

HPIM4599_001.sized.jpg


Enlace WLAN punto a punto y multipunto/Link WLAN point to point and multipoint.

HPIM9690.sized.jpg


Mi pequeño bebe bautizado WOPR en honor a la computadora de la película Juegos de guerra/ My little baby named in honor of the WOPR computer in the movie War Games

Lolocom_Cabrillo_Intel_Xeon_Dual_440GX_01.jpg


Mi familia 3COM/ My Family 3COM.
Los 3com fueron jubilados por dos Cisco Catalyst XL2924 y una Avaya Cajun P333/ The 3com been retired for two Cisco Catalyst XL2924 and an Avaya Cajun P333

Hub_3COM_mellizos_chicos_y_hermano_del_medio_02.sized.jpg


Hub_3COM_mellizos_mayores.sized.jpg


Un poco de historia de las telco de mi pais/ A bit of history of my country Telco (aprox. 1986)

Entel_Acceso_a_Bancos_De_Datos.sized.jpg


Lolocom_Plano_281108_hoja1_retocado.jpg
 
Quite the project there.

We need CONTENT in here.

Here is my office at work, I have since downgraded and was forced to move from a private office into the engineering lab. :rolleyes:
Telcom Rack
photo3.jpg


I have 3 shifts running 24/7, I cant take anything down to fix the nasty wiring. :(
photo.jpg

Server rack
photo2.jpg


Desk :(
photo4.jpg


Titanium spill casting I am hoping to take with me when I leave....

photo5.jpg
 
Actually, I 100% would. And since we sound like we're getting technical, a NAT box is NOT a firewall. NAT is sufficient for most home users, or users that would post up network diagrams here. period.

Wow, thanks for pointing that out, I almost forgot. Yes, I know the difference between NAT and a firewall. But for the purposes of this discussion it seems silly to me to get all technical. In home networks NAT and Firewalls as typically implemented by the same device, and they work together, so it seems pointless to get technical about it.

But by layers of security, I am referring to authentication, authorization, encryption, and firewalls. Firewalls are just one of many layers. And what I meant by asking if you are okay with one layer, is also to say you are okay without having strong authentication protocols established (username/password), and without good authorization decisions (anybody who authenticates is allowed to access everything), and without strong encryption for sensitive information (all your passwords are transmitted cleartext)? I don't think you would really bet your system on a firewall alone, these other layers I am referring too. But this is the Internet, and I suppose I should have expected such a mis-understanding of my verbiage.

I'm not saying I am good enough to get into your network. Maybe I could if I tried really hard, but probably not. But I am saying that I think I am good enough to know that someone out there could, if you just had a firewall and no other protection besides a firewall.

I don't bring these points up to cause irritation or arguments. More to educate people, who don't typically understand the fundamentals of protecting your network. A firewall is not a silver bullet that solves all network security problems. Far from the truth. They are great, but there is much more to protecting networks than firewalls.

Probably too off topic for this thread though, so I'm done. Thank you for participating!
 
I have 3 shifts running 24/7, I cant take anything down to fix the nasty wiring. :(
photo.jpg

Is that a BitLeap LeapServ in there or just a Shuttle SFF box? If it is a LeapServ how do you like it? I saw they got bought by Barracuda and the service is being renamed Barracuda Backup. :(

You should probably get that ASA5505 off it's side so it doesn't over-heat unless you have some cooling in that room. Doesn't it get awfully hot with half the venting blocked?
 
Its a XPC/ Untangle UTM for my 30 users. The asa was just set like that for some cleanup. My rack shelf isnt here yet.

Room is kept exactly at 68 degrees 24/7 365. We deal in precision measurement/machining and everything has to be kept at a steady temp.
 
But by layers of security, I am referring to authentication, authorization, encryption, and firewalls. Firewalls are just one of many layers. And what I meant by asking if you are okay with one layer, is also to say you are okay without having strong authentication protocols established (username/password), and without good authorization decisions (anybody who authenticates is allowed to access everything), and without strong encryption for sensitive information (all your passwords are transmitted cleartext)? I don't think you would really bet your system on a firewall alone, these other layers I am referring too. But this is the Internet, and I suppose I should have expected such a mis-understanding of my verbiage.
I couldn't agree more with you that AAA is part of network security, but for the purposes of this original argument its a moot point. You don't use verbiage that people don't understand, you cloud the discussion with buzz words that have no relevance. Lets get back to the original argument, firewalls alone.. weather they are hardware based or software based alone is enough to protect home user assets, the same assets that you argue is a security risk to post up on the internet. Like I stated, I couldn't agree with you more that encryption, authentication(weather it be one or two factor), authorization are an integral part of overall security(not just YOUR network) for the purposes of this argument they are irrelevant.

I'm not saying I am good enough to get into your network. Maybe I could if I tried really hard, but probably not. But I am saying that I think I am good enough to know that someone out there could, if you just had a firewall and no other protection besides a firewall.
So let me get this straight, removing all kinds of web related attacks(MiM, strong arm SSL, password phishing, etc, etc) someone can break into a privately addressed assets without any kind of port translations? Lets go one step further, all remote access into the edge device is disabled. Stop clouding the argument with crap.

I don't bring these points up to cause irritation or arguments. More to educate people, who don't typically understand the fundamentals of protecting your network. A firewall is not a silver bullet that solves all network security problems. Far from the truth. They are great, but there is much more to protecting networks than firewalls.

Probably too off topic for this thread though, so I'm done. Thank you for participating!
Wow dude, you definitely know how to shovel bullshit. You educate people on misinformation and cloud the facts. This entire discussion has turned into securing both your internal assets as well as external assets that are not part of your network. I understand security, quite well infact(as its an integral part of my job) but you're not making vaild points to your original argument.


::indian accent:: Thank you, please come again


The Spyder,
Ouch, nice wiring you got there budday! :p So you have to sit in there when its 68?

as for some content, since I went so off topic ill post up some updates... nothing spectacular. The network diagram(full) will be coming soon.

DSC_0174.jpg

a few sunrays, waiting to be setup(again). Vida is nesessary

DSC_0175.jpg

Deracked the IE pod, am now running dynamips on the virtual server which has 14 real interfaces trunked out to each switch to support the IE topology. Cat6k has been moved in place and am waiting on the 6548-GE-POE module so I can remove the 3745 + 2970. Black 4u box against the wall will be running sol10U5 with sun ray software.
 
Its a XPC/ Untangle UTM for my 30 users. The asa was just set like that for some cleanup. My rack shelf isnt here yet.

Room is kept exactly at 68 degrees 24/7 365. We deal in precision measurement/machining and everything has to be kept at a steady temp.

Poop, I was hoping it was a LeapServer. :D Untangle is a nice UTM though, I run it at home. Considering going back to Astaro Security Gateway software, though, or trying out ClarkConnect again. I like to play around with my firewall at home . . . .
 
I am running pf sense at home due to the awesome QOS.
However this LeapServer sounds cool...
 
As long as you don't show internal or external IPs this thread should be safe.
 
Here is a diagram of the whitebox ESXi box I'm putting together.

Home.LAN%20Network.jpg


My next upgrade will be 4GB additional DDR2.
 
Here is a diagram of the whitebox ESXi box I'm putting together.

Home.LAN%20Network.jpg


My next upgrade will be 4GB additional DDR2.

Not entirely sure I like the idea of an trust/untrust dual home on an XP box!. Also not sure what loads you are running but for that amount of VM's that box looks a little underpowered. The memory allocations to the VM's especially for the DB servers is too low they will be swapping to disk far too much. A dual proc dual core XEON system @ 2.4GHz I have (admittedy not ESXi but a windows 2003 box with vmware server running on top - hosting 4 VM servers can struggle at times (and only the host is running a DB service).
 
Not entirely sure I like the idea of an trust/untrust dual home on an XP box!. Also not sure what loads you are running but for that amount of VM's that box looks a little underpowered. The memory allocations to the VM's especially for the DB servers is too low they will be swapping to disk far too much. A dual proc dual core XEON system @ 2.4GHz I have (admittedy not ESXi but a windows 2003 box with vmware server running on top - hosting 4 VM servers can struggle at times (and only the host is running a DB service).

Thanks for your input. VLAN2 is my guest wireless network and although it is untrusted it is still secured with WPA2. Most of the clients are BlackBerry/Smart Phones or guests with laptops. The XP box is usually powered off or has the VLAN2 interface disabled. I use this workstation to test firewall changes to either network.

I put together the cheapest ESXi home lab that would support RAID1 and have 1TB storage. It can be slow at times, but works fine for lab situations. Like I said, I will be upgrading the RAM shortly and increasing the memory allocation to the starved VMs.
 
Well, after coming to some realizations about my plans, I changed them :p This is the plan I'm now going for, and I'm about half-done building the rack to house the components in our guest bedroom (a.k.a. computer room). The PS3, when I get it in April or May, will be in our basement to act as an HTPC and gaming console for our big-screen TV. The rest of the computers are upstairs. Zeus is my laptop, Hera is my gaming computer/family computer, and Poseidon is my sister's computer.

 
Horrible quick home pics.

APC 1400USB + Dell 2708 + Netgear GS108+ Tomato WRT54
WHS (6tb ATM, atom 1.6, 2gigs) + Dell Precision 690 Dual Quad 2.33, 20gigs ESXi.



I still have not finished wiring/ect.
 
Actually use this as my wallpaper on my WHS box.

the trendnet blew up and the ps3 is wireless now.

networkoverview.jpg
 
Well, after coming to some realizations about my plans, I changed them :p This is the plan I'm now going for, and I'm about half-done building the rack to house the components in our guest bedroom (a.k.a. computer room). The PS3, when I get it in April or May, will be in our basement to act as an HTPC and gaming console for our big-screen TV. The rest of the computers are upstairs. Zeus is my laptop, Hera is my gaming computer/family computer, and Poseidon is my sister's computer.


Quick question for you. On your rack diagram there you have a router, modem, and switch rackmounted. I am curious on how you attached those to your rack. Any chance for a pic?
 
Found these pics I took at work a while back. Enjoy!
Photo0114.jpg

Photo0115.jpg

Photo0116.jpg

Photo0117.jpg

Photo0118.jpg

It appeared to be NIB, at any rate it got put to use for a while till we centralized out router and switches to one spot. It was used to extend a drop 10 feet (we didn't have any couplers on hand and the boss needed to pay some bills, so it did the job.)
 
Quick question for you. On your rack diagram there you have a router, modem, and switch rackmounted. I am curious on how you attached those to your rack. Any chance for a pic?

Just a tray then I put them on it. Nothing fancy :p

Ninja: The rack isn't 100% done yet; I'll be posting pics when it is ;)
 
What's the point of a 2 port switch? :S

That's got a single 10/100 port, so if you had a computer that only did 10Mbps and the other that only did 100Mbps (no auto-negotiation), you could use it for that. But that has to be waaaaaaay old.
 
I read the manual (OMFG!!!) and it was designed to bridge 10mbps and 100mbps networks (this is back when hubs were common and switches were rare or way too expensive) without slowing down the 100mbps side. It also makes a great repeater.
 
1001-1.jpg

Here is a recent picture of the top of my network rack. I got rid of my Dell 2016 switch and got a 3024 from a buddy. Moved a few things/cleaned up.
 
I did this around a year ago for a client. 62 hours of work. Complete, studs up job. Wall was bare, ran all the phone/network/alarm/ ect wiring. Then made it all work :)
071807123401ta4.jpg
 
Found these pics I took at work a while back. Enjoy!
*Images Snipped*
It appeared to be NIB, at any rate it got put to use for a while till we centralized out router and switches to one spot. It was used to extend a drop 10 feet (we didn't have any couplers on hand and the boss needed to pay some bills, so it did the job.)

I could have sworn I have something like that in my Aircraft! lol

Anyhow, I am readying my network for posting - wires are too hideous at the moment :eek:
 
Nice Job The_Spyder,

As for that surveillance camera up near the top - Is that one of those omni-directional, wireless fed cameras? With a networked receiver to every room?
 
http://i35.photobucket.com/albums/d151/jeffmoss26/1001-1.jpg[/IMG]
Here is a recent picture of the top of my network rack. I got rid of my Dell 2016 switch and got a 3024 from a buddy. Moved a few things/cleaned up.

I recently ditched a 2324 for a 3024, its very nice, I love the webinterface.
 
http://i35.photobucket.com/albums/d151/jeffmoss26/1001-1.jpg
Here is a recent picture of the top of my network rack. I got rid of my Dell 2016 switch and got a 3024 from a buddy. Moved a few things/cleaned up.

I remember seeing the older version of your setup "I Have no Friends Because I Run a Server in My Closet" facebook group.
 
House audio system. Touchscreens in each room let you select it and play using Niles controls.
 
Back
Top