 Okay, so we're going to talk about getting started with PF Sense and building your own home router. And this is really ideally for like a budget build or home build or you just want to get started with PF Sense, you're not sure, you know, what to get, what to buy. Now for commercial installs, we buy the genuine decade hardware. If we need, you know, service level agreement support and something that is going to be professionally installed, we're going to go high end for when you want to build and do some testing and learning. This is a great way to start or if you're building your home network or something you have direct access to and support so you're not worried about troubleshooting it and nothing's mission critical, use motherboards and use cards definitely work well for that. Now let's talk about what parts we have here. This is an Intel Quad Core Q2E 2800. Would I highly recommend this? Not really, it's what I had laying around at the office here. So I also get it to prove a point. This is a 10-year-old motherboard and about a 10-year-old processor with it. I don't know the exact release date for this chip, but around a while. It's not highly powerful. Also does not support the AES and I encryption instructions, but that's only really going to affect VPN performance if you don't have that until version 2.5 of PF Sense, which will require it. I know that's down the road at some point. I just didn't have one of those chips laying around here, but you can find those even like the AMD FX chip support AES and those have been around for a number of years. So you can find other inexpensive ones. Now part of the point is also I want to show you that with a 10-year-old motherboard you can still route at gigabit. So this will route, even though it has 2 gigs of RAM in a 10-year-old processor, it will do gigabit. Part of the key to that though, having the right network interface card. Now there's a lot of network interface cards that are compatible with FreeBSD. I really prefer the Intel. They're kind of a great go-to card that you can just trust compatibility with. Now this is an Intel Pro 1000 ET quad port. Now this was a whole whopping $25 used on eBay. This card is about from 2012. So there's a bunch of them in the market. You can pick these up. Like I said, buy it now is $25. You can probably get lucky in buying for cheaper or buy a few of them. Now what's nice is they have 4 gigabit ports on here and they are fully supported in BSD. Now part of the trick to the way BSD and PF Sense and everything work together and how this entire thing is orchestrated, you don't need a lot of processing power for routing because BSD offloads that to the chip. That's why these heat sinks are on here. These chips get a little warm. This discard definitely pulls a little bit of juice. But the routing, PF Sense orchestrates and tells this how to route. That's why you'll watch and we'll do this in a demo when we set this up when we're doing speed test. You'll see the full gigabit speed going across here and you'll watch the processor move very little. That's because the chips here are doing that part of it. Now what do you need a fast processor for? Well if you want to do advanced intrusion detection and things that require the processor to look at the traffic that's passing and do some analysis on it, for example running N-top so you can watch all the traffic running or running Siracada, that's where you may want a little bit faster processor. But I will show with this, you can run those tools here without the processor getting way overburdened and it'll still route reasonably fast. That's going to vary a lot for processor to processor but I'm just going to give you the idea that yes you can. But for routing QOS and your basics, creating all the firewall rules to keep your network safe and to separate traffic, this works great. Now a couple things we're going to get in this video was first how to install PFCench, pretty straight forward but I'll still walk you through the process for the first timers here. Then we'll talk about creating WAN, LAN and a second LAN for maybe all your other things that you want to put on there and how to create those rules and how to create it so you have a secondary LAN that is a separate network so maybe those things you don't trust like you're plugging your Wi-Fi toaster in and things like that to that second LAN. In this demonstration today we're not going to use any smart switches. I'm assuming that you're maybe a home user or a first time and you don't have access to a lot of hardware which is why we chose some old hardware to build this with and a standard inexpensive neck gear 8 port gigabit switch as well. It's really nice and I'm going to do some other videos and I have done some videos on how to use VLANs and everything else and those are a lot of fun and you can buy some expensive hardware for that but we're going to start with this right here and then maybe later on I'll do some other videos but this is the goal is to download PF Sense which I'll leave the link where to get that. Download it, use whatever tool you want to image it to a thumb drive and we're going to load it on this computer and I'll walk you through the steps. I just happen to have old hard drive laying around yes this is in case anyone's learning well those old WD Velociraptor drives are kind of cool they're fast. Now a lot of people ask do I need an SSD for PF Sense as well. Not really I mean there's someone expensive you may as well buy one if you're building one but do you need a big one. Well how much do you plan on saving on here for logging information and things like that. If you look at the genuine neck gate hardware you'll see they frequently don't ship with large hard drives and the reason why is unless you plan to dump all kinds of logging data to the drive itself you don't really need a big hard drive. The other thing is if you're setting up something in a more professional environment it's you may have the logging turned on but you often dump everything to an external logging server once again means you don't need a big hard drive or a lot of right. But if you want to do a bunch of packet capture and I did a video on troubleshooting with PF Sense and how you can do packet capture with this that does need a place to store all those packets so then you would want a bigger hard drive. So those are just some of the considerations on there but for the most part if you're not doing a pack capture you know I don't really care about all that logging I want to keep a couple days with the logs which don't take a whole lot. I just want it to do routing and security no problem so it'll handle that part in a packet filtering and QoS. Those things do not take up a lot of hard drive space so small hard drives definitely will work. All right let's get started with actually loading this now. I'm going to plug all this in and I'm so budget here we didn't bother getting a case and I just don't feel like mounting any of this in a case. So plug in this here oh this is my stand which is a hard drive box. Got a thermal take power supply sitting here so first thing you do is get into the BIOS of whatever machine and make sure you choose the USB drive as the boot drive. So we're going to go ahead and select that and this is going to vary so I'm not going to cover this much with every motherboard you have but the goal is to get it to boot from the USB that we have on here. You can see our USB blinking away right here. If you have a faster motherboard this goes a whole lot faster. First thing we're presented with is this we have to accept the license. Now you can install if you're recovering this actually does have a recovery and the other option too is recover config.xml. If you ever have a pf-sense crash that you forgot to back up which I highly recommend backing up your configuration it does have the option to try and find the recovery file which is config.xml. That is where your configuration is stored and that's all you need that's like the one file you need to get pf-sense set back up the way it was so do back that up. Install default keymap unless you have something custom. Now auto ufs manual shell auto zfs. Zfs is the newer option they added in the later versions and definitely go with zfs. This actually has the option too if you wanted to set up a mirror or radaray within pf-sense so you want it to run redundantly on a system you can do that it does have that option we only have one drive so we're just going to go ahead and use the defaults. It also has an option in here if you want to set up encryption that means you'd have to type a password each time it boots but if you're ever worried about someone physically taking a machine and actual trading the contents of your pf-sense config you know things like your special vpn rules or anything like that you can encrypt it and the only downside is every time you reboot you physically have to go to the machine to type in the password. Choose the disk we would be able to select each disk in there this is the usb that we're booting off of I'm only going to select this one here but if you had more drives you would just press the spacebar and select each drive that you want to make part of the array if that's what you wanted to do. Last chance we're going to destroy the data on this drive yep and now it loads. Installation is now finished if you want there's an option of course if you know some more custom things you want to do to it you can do that here but I was going to say no because we're done installing and we're going to reboot and we'll pop out the thumb drive. Now this is the first part where sometimes things can get confusing. Now I've actually disabled so you may notice that there's an onboard network card I went in a BIOS and this onboard one here is disabled then we have these ones here. Now it's going to vary from card to card but as you can see on the screen it says IGB0 and IGB1. The assignments on the Intel network cards are either top to bottom or bottom to top depends on the card depends on the configuration depends on if your machine's on its side then it's going to be left and right and if it's on its back like this it's going to be up and down. This sometimes is just a guessing game but good news is they help you out with this little bit so let's set up the interfaces and figure out which one of these is our LAN interface. So it's the LAN interface is either going to be because it's the LAN is assigned IGB1 so it's either going to be this one or this one it's because it's not the one of these is zero whether it's the top or the bottom we'll have the guess but I'm going to plug this into my laptop and we'll start doing the guessing and figuring out which one it is. Well that got me a link light but no IP address and plugging in this one both got me a link light and an IP address on my system. Now a couple things you can do here if you wanted to assign the interfaces differently than they are I'm going to show you how to do this real quick you go here it's one for a sign interface and you notice how it says valid interfaces and which one's up and down. This is a handy way to do this because if you plug it in this will let you know what the interface assignments are and as you said I only have one of these plugged in and you can see that's up so you can build it out that way you can also start building your VLANs this way in case your internet is provided off of a VLAN ID so you can set the tags on there but we're not going to get into all that but you can do it from this if you're not sure which one you don't want to just plug in and guess which one of these it is you can actually reassign them to be the ones you want them to be and you can see which ones are plugged in by doing this we're going to actually just going to cancel out of this and go back here so once we have that and signed and I figured out which one is iGB one which is my LAN and my laptop now has an IP address and we're going to log in here in a second the other thing we have is let's plug in our WAN so that's this one here so now we have a link light and we'll just show you real quick just to go in and show you that it's up so we have both of those up and after pressing enter and refreshing the screen we actually see we have an IP address assignment on the LAN out of the box pfSense on the WAN side is set to DHCP so if you're plugging it into a cable modem or whatever you're plugging it into you're going to get an IP address provided by whatever device goes on the WAN side the LAN side by default out of the box is 192.168.11 slash 24 when we walk through the wizard here in a second it'll let you customize that but this is the out of the box configuration the other out of the box configuration we're covering in a second is its admin and pfSense is going to be the default login now someone's going to comment that 192.168.3.118 is a private IP address that's because this for demonstration purposes is running inside of my network so it was assigned a private IP address you should get a public IP address if you're plugging this into a bridged cable modem device by the way if you want this to work properly whatever device you're plugging into if you're running at home you want to make sure device is in a bridge mode so you get the public IP address if you plug this directly in for example to a Comcast device it's going to be handed a private IP address unless that device is in bridge mode goes beyond the scope of this talk but that's the term you're looking for a lot of people what do i need to search for to get this plugged in and set up bridge mode that's the important part all right so open up firefox and i already clicked through the security warning of you know this is an insecure connection because it does use a self sign certificate and SSL right out of the box default passwords admin and pfSense now if you notice it lets you know that i logged in you notice that over here on the pfSense machine itself and now we're just going to walk through the wizard which is really straightforward next pfSense local domain this is obviously some debate pick whatever dns server you think is the right one uh this is where if you want to override the dns that was assigned by the network interface you can customize this later this is just some default options out of the box and i'm not going to debate which one's the best that's very subjective make your choices uh here choose your time zone we're going to choose where i'm at which is detroit configure wan interface like i said as you seem to default interface is decided by dhcp but you can statically assign it at this point if that's what you want we're going to leave it at dhcp not because you have to but because we are for this demo we are going to turn off this block private networks and we're doing that because we don't want anything added to blocks now what this does is blocks like your private ip ranges but because we're using private ip ranges internally for demonstration instead of a public ip range we're turning it off not something you necessarily need to do this is where you can customize the land ip address for purposes of demonstration we're going to leave it 192 1681 but if you're going to set up vpns and things like that a side note is you may want to choose a different address and the reason for this is if two networks the one you want to get to and your network happen to have the same range you're going to have problems because you suddenly have a competition if i have 192 1681.10 is a device i want to get to over a vpn and my network has something at that same address you then have to play with the routing to make sure which one of those you actually want to get to when you're connected to the vpn so you may want to assign something other than this but that kind of depends don't assign it the same as your corporate network that you want to connect to or whatever network because that would then cause a problem so this is just a thoughts on assignment subnet mask once again depends on many devices if you're not familiar with site or notation slash 24 is the same as 255 255 255.0 next admin password set your password up here now good news is by default pfsense does not have external access turned on so if you do set a week password i recommend a good password it's only accessible inside your network unless you open it up externally but choose a good password then we hit reload and we're in and now you can click here to learn about support you can click here to continue to pfsense web configurator we're going to go ahead and log into the configuration here accept the terms and licenses yes you can get global support and everything else they have community support global support they have other support options you can buy support contracts and things like that with them so we're going to go ahead and just close that i will pull up here and add service status i just like seeing that here so we can see the things that are running and we can also do traffic graphs if we want so we can see how much traffic is going across here now we only have two interfaces right now there is an update i'll load that later but uh you just load the updates by clicking here and hit confirm so we're not going to worry about that at the moment let's get this going through here now a lot of people stop here and this is like how do i secure everything how do i lock it all down good news we're going to go to firewall rules notice the lack of rules on the wan by default pfsense lets data go out it does not have any rules opened up for your devices so kind of out of the box it's secure it is not opening ports it's not letting things in it's not allowing stuff go on there things like upnp those are turned off as well so you right here is your upnp and that's all turned off as well and if you aren't familiar with what upnp is it is a method by which devices can request that they open ports to your network this is obviously a little bit of a security challenge because if that device is on your network and it is asking for ports to be open and your firewall goes hey you're on the land side no problem i'll open it up obviously this has been abused by certain nefarious tools and things like that so that's just something to think about and that pfsense does have it off by default but a question i get a lot is i got all these gaming systems that want to do that how do i turn it on we're going to cover that we're going to cover how to put that on a separate network so interfaces assignments we have our LAN and WAN so these are set up and you can see that the same interface names apply here IGP0, IGP1, IGP0 is the top interface and IGP1 is the second one down as we've seen when we plug in our network cards that makes IGP2 and IGP3 the next two interfaces down for setting things up okay we have pfsense and it's set up and up and running here it's on the 192.168.3.118 network and if you follow along with their videos you'll realize that my computer is at 192.168.3.9 so we're going to connect to my computer with IPERF and IPERF is my handy dandy go-to tool for testing network speed now there's lies damn lies and then benchmarks i've heard this said many times this is just a general raw connection to the system so this is not a in-depth full network speed test where someone will say you got this much jitter this much buffer below this is just a raw speed test to show you that this is capable of running at gigabit speeds so we're going to run IPERF client 192.168.3.9 like i said this is the same network there so there's nothing there's no routing in between these devices they're connected via switch so go ahead and here and we see that we're running at a full essentially the full bandwidth capable of a gigabit connection now something else to note here so this is running perfectly fine we got the full transfer rate within reason uh there's obviously there's actually three switches in between so maybe i lost us just about two or three percent over if i would have plugged in directly but it's still gigabit connection and one of the things i want to show is you notice the cpu usage is still sitting here like at nothing so here's our big spike of data that we pulled across but we didn't really do much in cpu usage and this is why i wanted to talk about with having the network interfaces they just don't pull a lot of cpu horsepower to do your routing now one of the things you may notice here is the state table sizes the state table sizes not many states here because my computer is not doing much over the internet now this is a limitation on an older system is number of state tables that you can have in the amount of memory it tells and the state table is basically the state of a connection between any computer on the land side through land through the network onto the land side uh but that being said this supports enough that even this board here i could trust putting you know a few dozen computers on without a problem so for your home network once again you're not likely to increase this over what this build is you see we're not using much memory and we're going to do a couple tests here to try to increase the number of states that we have for example i'm going to open up facebook and a couple other things in the background here now just by opening a couple things you see immediately we've jumped up from 30 to 430 state tables so it does require as you open up a lot of things a lot of state tables but we have this maximum of 120 uh thousand available so that being said like i said we're not likely to overrun this router with that but you do see obviously they went up a little bit just so you know and then of course here's the data spikes that come with running all those things in the background but that's still not a problem for this to handle and we'll run the test one more time here and make sure even with those extra state tables you can see we're still getting the full there now our cpu usage goes up just that little bit that's pulling full gigabit we're with all the state tables we managed to peak it out what here 12 percent now we'll run one more test to show you how the routing works and we'll get into the actual networking side so here's hyper for running through that same address p100 means parallel 100 so we want to create 100 simultaneous connections uh and a t20 is for 20 seconds just so i don't have to sit here as long and keep pressing it so this is running away we're still getting that full speed you can watch it here and the cpu now because of running parallel we're up to 20 percent but once again we're still pulling full gigabit from that network so this 10 year old cpu is able to route a gigabit and pull that much data now obviously what happens if we assign something oh by the way as you notice we're running that in the background here and while that's running in a background pf sense is still completely usable so let me run it again we'll just run it continuously for 200 seconds and we'll go ahead and uh install something here so we're going to go here to the package manager available packages and for those of you wondering whoops yes it's still running in the background i'm going to close i don't need this open so we're still pulling full data right through here and we're going to go ahead and load suricata and this is still running and this has no problem down here so it really doesn't tax the system and make it even while it's doing all this high-end routing so now we're seeing the cpu usage going up and i shouldn't have switched away from the screen that the package manager was installing but it finished anyways that's not recommended there we go all right suricata is successfully installed services suricata and we'll just turn this on really basic real quick now i did just a basic suricata setup and have it enabled here i have an entire video that goes a lot more in-depth with suricata if you want to know how to configure it and how to get it all set up but i just want to show you that it is running on the system and one thing we're going to comment here is watch the cpu usage now that we're running suricata because suricata is inspecting that traffic this went up from like 20 to 46 percent so it is still able to run this it is still able to run suricata we have not completely maxed out this system but i will you know this is where you're going to see a little bit of a taxing on the processor but you can't run it so once again for a home lab this setup works really well and the same thing if we want to enable that end top this would tax a little bit more on the cpu but once again you can do that so even with suricata running like i said we're not completely maxed out the system all right let's go on to actually getting some other things set up and i mentioned setting up a lot of people go okay i want to separate my computer versus the rest of the insecure devices and things that get plugged in and we're not doing this with vlands like i said for this demonstration we're going to set up another network port and we're going to expect that you have a different switch that that plugs into than the one that your lands plugged into so this is a two switch setup so we're going to go over here and go here to interfaces assignments and we're going to pick just the next one down igb2 click add and it called it opt one i'm going to hit save here we're going to click on opt one enable crap network so here's our crap network this is where all the junk goes all the insecure devices go the iot's and all that fun stuff configuration type static now this is where some people might make a mistake don't put in the same as you had for your land so if you did this this one dot one you would end up with a problem of you wouldn't be able to route between them so you want to assign it separately we're going to go 30 dot one i'm going to make this a slash 24 and we're going to click save and we're going to apply okay for the rest of this video i've now got this set up with a crap network and i'm recording it from my office externally from the outside ip address now what i did to enable that just because i don't want to skip anything uh this is 192 1683 dot 118 which is the external interface of our pf sense right here and we go to firewall rules wan and all i'm doing is opening up port 443 so i can access it from the wan side we have our network built we have our interface our crap network we have it statically assigned now there's a couple more steps we need to do first step is services dhcp server for every extra interface you add whether it's a physical interface or a vlan interface you get another tab here the dhcp server so we're going to go over here to crap network go ahead and enable dhcp interface on crap network and you can choose the ranges looks like you can with any of the other dhcp or create a series of ranges uh pools as they're called if you need to do that we're just going to do the basic and just enable dhcp save all right so now we have that next step is going over here rules crap network now there's no rules which means by default this network does no routing so anything you plug into it it will get an ip address but it can't go anywhere until there's a rule like i said before pf sense airs on the side of caution when you're loading it it's going to create rules for land but none for wan and it's going to create for each subsequent network you create whether they say physical network or a vlan interface and you get another tab here in the firewall rules there are no rules created by default for them which is good because that means by default they won't start routing traffic or network until you create the rules to do so so first thing we're going to do is just create kind of a wide open rule and we'll call this one wide open and what we're doing is we're allowing action pass interface to trap network address family and protocol any by default it does tcp and some people will sometimes get stuck on this because they'll let it at the default tcp well that means all these other things don't work so make sure you change it to protocol any or you'll only be able to run tcp protocols through this network now here we go this network is ready to go with wide open it can go anywhere it wants apply changes and i have a computer on the crap network so this is our studio computer it's on that network and here it has the gateway as 192.1630.1 and it's 30.100 it got the first ip in that range i have my laptop still turned on and i can ping it so this can get to the laptop let's go over here and ping google.com and i can get out to the internet and ping google but this isn't exactly what we want obviously we want the crap network to not mess with our regular land so let's go ahead and move this all the way and like i said this is a wide open rule so we're going to go ahead and edit this rule now this is a really simple way to match this we're going to say land that invert match so what we're doing here by adding this piece here anywhere but land so the traffic comes in it's allowed to pass comes in on a crap network it's allowed to go out which actually we should filter this for coming from the crap network so coming out of the crap net cannot go here it's an inverted match so that means i can go out to the internet but if it destination is a land that then it won't work now if you have a series of networks on there and you want one network that you want to be only the internet but not any local networks you can create an alias so you don't have to create too many rules for grouping all those networks together i'd watch my alias video if you know how to do that but in short for your home network maybe you want one thing you stick all the crap on and the other one's your land so now we're going to do invert match and we're going to hit save here and you see how it does here in the rules so we have the port exclamation port land which means do not go to land and now we're going to do the same thing and bring it over here and ping i can ping google but i can't ping dot 100 anymore so it no longer can get to things on the land network it's that simple to put the block in so there's only one rule and that rule allows it to get out to the internet but doesn't like going out so now you can get more advanced and move things around and play with this this is the one to get you started to create a network that is limited in the fact that it can't get to your other things on your land your important things on there and things on the crap network are separate next thing i mentioned was the upnp so we're going to go over here to services upnp choose crap network choose allow these things or whichever ones you need so we're going to enable enable upnp port packing net pmp return all these and we're only going to enable it for this interface and we're going to hit save now what this does is allow those devices on that network so all your wi-fi toasters and refrigerators and random things you want to plug into that network are now attached to the crap network and they are allowed to use upnp on that network without risking opening ports up on your land side so it's still going to open up by default the external interface is when so it still opens up the firewall and lands on devices in there but now you have narrowed them down and this is also handy for things like when you want to do any traffic filtering or figure out what devices are doing you can go look at that network separately and have all your other things not interfering with them on there because it's one network so this would get you started on how to start building out your network and getting things set up so they're separated so you have a network where you put everything else that isn't important to you on your land because this like it says a common use for pfSense and like i said kind of the point of this video is to show you that it does not take a lot of hardware to make this happen so we're able to route those gigabit speeds we're able to do things really fast and we're able to you know separate the networks so we have two of them and all you need now is a switch plugged into land and this is where your protected land devices are and a switch plugged into crap network and that's where you plug in all the other devices okay one thing to show you here on the last note will be that yes it can route a gigabit speed this is on the crap network it's that same machine running IPerf just like we did before just like we did on my laptop earlier so yes it has full gigabit access is plugged into the switch but maybe that's something you really want to limit is how much bandwidth the crap network gets so we're going to go ahead and see that this ran at 948 here and move this out of the way go to firewall traffic shaper now you can run the wizard which is great it's you can build all kinds of cues and you can just has a lot of fine tuning things in there but we're just going to cover something really simple really quick so we're going to create a couple limiters just to limit the speed of it so we need a limit in and we're going to set the bandwidth at five megabits and hit save now you can tweak it and play with all these other things and create nested limiters we're not going to really cover all of that so here's our limit in and we can call it whatever you want we're going to call this one limit in and we're going to make another one limit out and you'll see why we need two of them just a second here and this one same thing we're going to save five megabit now it also has a scheduling option there's a schedule built in pf sense so you can say limit like after a certain time we're not going to get into all those little details so we'll save now we've created limit in limit out and we're both set to five and we're going to apply the changes then we're going to firewall rules go to our crap network rule go here now i want to show something real quick you notice how it just says ipv4 crap network as long as it doesn't go to land that it's allowed to do anywhere but land so there's our network we're going to edit this scroll down display advanced the in the out so here's our pipe limits so this is down towards the bottom when you hit display advance there's obviously a lot of more stuff you can do here uh tagging and and sorting it's an amazing the amount of uh details you can get into here but the short is the in and out pipe is the limiters we're going to hit save we're going to hit apply now this little gear got added and if i notice how i mouse over any gear it pops up and tells me so what that's doing is advanced settings limiter and limiter out tells me that a limiter has been applied so any of the advanced settings add this little gear so you know that there's more settings to this network than just the rules that are being displayed here it has a more advanced setup now let's go here into our test again so here's the test it was 948 let's see what should be now and we're limited so now this network doesn't get gigabit it can only have a maximum bandwidth of that so that's an easy way to do that just to say debt network only gets this much bandwidth because how much bandwidth does a toaster on the network really need probably not a lot so this is a way to like filter that down and say these things only get that much or maybe you want to set it on a schedule and the traffic goes down over time at whatever time you pre-define so that's it for getting started with pf sense hopefully this was helpful and it'll get you playing with this firewall it's amazing i mean this is an enterprise-level tool that you can just download and using your home network it's a great way to learn networking and advanced networking and firewalling and all the other fun stuff and this like i said i've got a lot of other videos if you want to go more in depth or you want to look at any particular things like you know how seracada works or some of the other services we've talked about thanks for watching if you like this video go ahead and click the thumbs up leave us some feedback below to let us know any details what you like and didn't like as well because we love hearing the feedback or if you just want to say thanks leave a comment if you want to be notified of new videos as they come out go ahead and subscribe and the bell icon that lets youtube know that you're interested in notifications hopefully they send them as we've learned with youtube anyways if you want to contract us for consulting services you go ahead and hit laurancesystems.com and you can reach out to us for all the projects that we can do and help you we work with a lot of small businesses it companies even some large companies and you can farm different work out to us or just hire us as a consultant to help design your network also if you want to help the channel in other ways we have a patreon we have affiliate links you'll find them in the description you'll also find recommendations to other affiliate links and things you can sign up for on laurancesystems.com once again thanks for watching and i'll see you in the next video