My Home Network

What network engineer can live without their own home network? Especially one that looks nice, has way more bandwidth and ports than should ever be necessary and demonstrates your true geekiness? That would be like a Professional Landscaper without any Landscaping of their own or a home builder who lives in an apartment.

If the average computer user can build their own home network, then we network engineers deserve to have one that theirs pales in comparison to. ūüėČ

So without further ado, here is the rundown on my home network.

My most recent AT&T U-Verse VDSL Speed Test Results

AT&T U-verse HSIA 75 Speed Test

AT&T U-verse HSIA 75 Speed Test

AT&T just released the new VDSL pair bonded HSIA 75 tier in the Southwest at 75 Meg down and 8 Meg up. I ordered the upgrade and had it installed today. It seems that you can actually sustain rates 5-6 Meg higher than expected. I am pretty happy with it, so far. The upgraded service still leverages the Motorola NVG589 RG router that I have already been using with my previous package. The upgrade was soft provisioned over night. The only reason a tech had to visit was to install the new AT&T branded jack which has a smart loopback plug built into it that gives AT&T more visibility into the state of your service. This service switched me from the old 8MHz 8d profile to the new 17MHz 17a profile which currently supports 90 Meg down and 8 Meg up.

Equipment Details

Home Network RackHome Network
  • Chatsworth 19″ equipment rack
  • Cisco AP-1220B 802.11a/b/g wireless access point
  • Ortronics CAT5e 48 port patch panel
  • Panduit Horizontal wire management
  • Cisco Catalyst 3524-PWR-XL switch 24 10/100 and 2 GBIC slots w/ Inline Power
  • Cisco Catalyst 3550-SMI switch 24 10/100 and 2 GBIC slots
  • Cisco 3825 router (2GE, WIC-1AM, 1GB DRAM, 2GB Flash)
    IOS 15.1.4-M6 Advanced IP Services. This router sits behind my U-verse Motorola gateway, acts as a NAT device, Firewall using Zone Based Firewall segmenting internal network, and terminates IPv6 6RD tunnel to AT&T
  • Motorola NVG589 U-verse gateway router
  • AT&T U-verse HSIA 75/8 VDSL service
  • Motorola VIP1200 U-verse Set Top Box (Shared) Remote control via iPhone
  • Cisco 2621XM (2FE, NM-2V, VIC-2FXO-M1, VIC-2FXS)¬†128MB DRAM, 64MB Flash) runs Call Manager Express
  • Cisco ATA188 Analog Telephone Adapter
  • 3 x Cisco 7960G IP Phones inline powered from switch
  • Compaq TFT 450 14.5″ rack mount flat panel display
  • Compaq rack mount keyboard with trackball mouse
  • Compaq 8 port EO1004B KVM switch
  • QNAP TS-670 Pro-16Gig 16 TeraByte RAID 5 NAS Storage with 2 x 1Gig portchannel and 4 x 4TB Western Digital 5400RPM Red drives.
  • APC MasterSwitch¬†AP9225 w/AP9606 SmartCard 8 port rack mount PDU
  • APC SmartUPS 1500 RM2U 1440 VA Uninterruptible Power Supply
  • APC BackUPS-Pro 1100 Uninterruptible Power Supply


MacBook Pro with Cinema Display My MacBook Pro

  • Apple MacBook Pro 15″ 2009 model
  • Intel Core2Duo 2.8Ghz
  • 8GB DDR3 RAM
  • 320GB HD
  • 8x DVD/CD Burner
  • NVIDIA GeForce 9400M integrated video
  • NVIDIA 9600M GT discrete video
  • 10/100/1000 NIC
  • Airport 802.11 b/g/n Wireless NIC
  • Apple 24″ LED Cinema Display
  • Epson Perfection 1640SU Flatbed Scanner
  • Epson Stylus Photo R300 printer
  • HP Laserjet 1200 printer
  • OSX Yosemite¬†10.10.1
thunderbolt_display_mac_mini My Mac Mini

  • Apple Mac Mini 2014 model
  • Dual-core Intel Core i7 3.0Ghz
  • 250GB SSD HD
  • Intel Iris graphics
  • 10/100/1000 NIC
  • Airport 802.11 a/b/g/n/ac Wireless NIC
  • Dell 24″ Display
  • OSX Yosemite¬†10.10.1
MacBook Pro 15 inch My Work Macbook Pro

  • Apple MacBook Pro 15″ Late 2013 model
  • Intel 2.3Ghz quad-Core i7
  • 16GB DDR3 RAM
  • 512GB SSD HD
  • 2880×1800 Retina LED display
  • Intel Iris 5200 Pro¬†GPU 128MB DRAM integrated video
  • NVIDIA GeForce GT 750M 2048MB GDDR5 discrete video
  • 10/100/1000 Thunderbolt2 NIC
  • Airport 802.11 a/b/g/n/ac Wireless NIC
  • OSX Mavericks 10.9.5


  1. Do you have any issues connecting net switch boxes to the Motorola NVG589?
    My net was working. AT&T swapped my 2Wire for the Motorola. Now, switch connects printers cannot interact with the hosts, hosts cannot interact with “servers” — and, set top boxes won’t acquire connections.


    • Everything works identically from a switching perspective. I haven’t had any issues. I assume your hosts and printers are connected to 2 different switches that are connected to your 589? They must all be on the same logical IP subnet. Are all devices using DHCP from the 589? Did you reboot anything after AT&T swapped out your RG? If not, I would reboot the 589 and all your switches and then reboot each host and printer after that.


  2. I already have a VPN router with a address. The NVG589 would have to do IP Passthrough or DMZ to that router, as we will keep it in service. Any tips or experience with it. The earlier NVG510 could be quite buggy with IP passthrough.


    • Unless you change the network defaults on the 589, you will have to change the network range you use behind your personal router to something other than It isn’t a huge deal, but anytime the RG has to be reset to defaults, everything will break until you manually readdress it.

      IP Passthrough does work pretty well on the 589 and it has a lot more memory for its forwarding table. Ive had it running for a year without running into any issues.


  3. I have recently switched to uverse and am trying to setup a Cisco 2821 behind the 589. I have enabled ip passthrough and my 2821 is handing out addresses to it’s clients. The 2821 is successfully getting the public IP address from the 589 and from the 2821 I can ping through to the default gateway of the 589, but can get no further. From external I cannot seem to reach the 2821 at all via multiple ports. The 2821 was previously successfully connected with the same configuration to Cox cable and to Verizon FIOS.
    Broadband IPv4 Address x.x.13.52
    Gateway IPv4 Address x.x.12.1


  4. See the FAQ I helped put together on IP Passthrough on the 589. Practically anything you want to know about U-verse and how its built and works in all its gory detail is out there on DSLReports. Hopefully this helps.

    Additionally, not that you aren’t already doing this, if you are trying to open specific ports inbound you have to make sure your NAT and ACLs are setup on the 2821 to support access, as well. Did you also add a dynamic default route on your 2821 tied to your DHCP lease like this…? ip route dhcp 5


  5. I just got a new service with an 5268ac from AT&T. I have a netgear fvs318n that I’ve used for years now for some site-to-site ipsec vpn tunnels.

    I’ve set the ‘dmzplus’ mode as well as turned off everything in the firewalls on the 5268ac, and my tunnels come up but traffic will not pass across them (not even ping). Any ideas?


    • Did you disable the other handful of security features? I think there is one that specifically can cause AH or ESP to fail on receive.


  6. Thank you for the reply. I disabled all the security items on that page (3 on top and 7 at the bottom). Do you know specifically which security setting might cause it to fail, or anything else I could try?


  7. Unfortunately I haven’t had the service in over a year and can’t recall all the details off hand. Your IPSec tunnels need to support NAT traversal even in DMZPlus mode I believe.


  8. On my Netgear FVS318N connected to the AT&T in the dmz+ it doesn’t have a nat traversal feature. But the other endpoint (a watchguard) does and it is activated. But wouldn’t the tunnel not even come up if nat traversal is required?


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: