My Home Network
My homenetwork is similar to one you might find in a medium sized office building. This is mainly because I'm a network nerd but also because I work from home and have 5 acres and love to be able to have WiFi anywhere on my property since cell coverage is spotty. Most of this information is a high level overview. I plan to write more detailed tutorials later in case any of the pieces stick out but not sure where to begin.
Internet Connection
I am provided a gigabit fiber connection straight to the house. ONT on the side of the house converts the fiber to ethernet and connects to my router. I've got a block of static IPs. Unfortunately, my ISP is an old DSL provider so they still use PPPoE authentication which let to an interesting series of issues when configuring my router. No modem is rewuired, just a router to connect to the PPPoE auth protocol.
Router
I don't use a typical router. I tried the Ubiquiti Security Gateway Pro 4 for a while, but they never got basic NAT routing into their controller software and the latest version of the controller this year doesn't allow NAT routing in JSON configs. So I had begin my full transition away to be able to continue to use my block of Static IPs appropriately.
I took an older i3 desktop that I had laying around, threw a 4 port ethernet card in it, installed debian, and used ipTables. Yes, this is often considered old school but IP tables gives me an easy interfae that I love working with using a basic set of scripts. You can find this in my serverscripts repo. All my firewall scripts live inside of the firewall folder. With ipTables I can easily define which IPs computers talk to the world on as well as control where incoming traffic goes based on IP and port. ipTables also makes for a super easy interface for a basic firewall for blocking unwanted traffic.
I use dnsmasq for the DHCP server and have really good luck with it. I haven't encountered any issues yet and love the ease of managing DHCP reservations in a single file.
My router also runs wireguard. A VPN that I use when on public WiFi away from home or when I need to access my NAS, desktop, etc.. I don't believe my wireguard config is in my serverscripts repo but I will write up a seperate article on that at a later time. Wireguard is super fast, and I never notice when I am on it away from home since my phone and computer auto connect.
Switches
I have a lot of POE devices, so I have a UniFi 24 port 500W switch that connects directly to the router and handles most POE devices. I then have a fiber link to an unmanaged dell switch for the servers and other misc devices.
Ethernet
My house is wired with cat6A ethernet. Most of the devices connected (cameras) don't even use the 1Gbps yet, but I wanted to future proof once 10G becomes more affordable.
WiFi
All of my access points are UniFi based. The indoor WiFi APs as well as the shop are all AC Pros hardwired directly to the UniFi POE switch. Creates a decent mesh network with mostly reliable roaming. Outdoor APs are UniFi Mesh APs however they are all hardwired directly to the switch for now.
Home Automation
For home automation, the brains of the entire house are powered by Home Assistant (open source project) running on a Raspberry pi. To aid in connecting everything, I also have a Lutron hub for the light switches, myQ hub for the garage and shop doors, and a smart things hub for the z-wave devices. I'm hoping to phase away from z-wave as much as possible and buying mostly WiFi based plugs. My home automation is actually pretty extensive so this will have to be another article for another day.
Security Cameras
I run all UniFi G3 bullets. I currently have 12 of them all reporting back to the unifi-video software running on a VM and storing data to a 2TB partition on the NAS.