Grandstream Home Network Design & Remote Config Quote
Budget: $30 – $250 USD
1. Project Overview
This project requires a comprehensive high-level design (HLD) and remote configuration for a multi-ISP, multi-floor network. The goal is to establish a robust, failover-capable environment utilizing Grandstream and TP-Link hardware.
2. Hardware Inventory
The following hardware has been procured and will be physically installed prior to configuration:
Router: 1x Grandstream GWN7003
Switches: 2x Grandstream GWN7801P (Managed PoE+)
Access Points: * 1x Grandstream GWN7661E (In-wall)
3x TP-Link Deco Mesh Nodes (Operating in AP mode)
3. Physical Topology
The site is divided into four main logical zones:
Location A: Ground Floor
Hardware: Switch A
ISP Connection: Primary high-capacity feed (600 Mb/s).
Cabling: Two existing CAT5 runs connecting Location A to Location B.
Constraint: The WAN feed from Location A must be back-fed to the Router at Location B.
Location B: First Floor (MDF)
Hardware: GWN7003 Router, Switch B.
ISP Connections: * Secondary feed (350 Mb/s).
Starlink (Satellite failover).
Role: This is the Main Distribution Frame (MDF) where all routing logic resides.
Location C: Remote Wired
Hardware: GWN7661E In-wall AP.
Connectivity: Hardwired directly back to Switch A.
Location D: Remote Wireless
Hardware: TP-Link Deco Node.
Connectivity: Wireless mesh backhaul only (No Ethernet available).
4. Technical Requirements
Multi-WAN & Failover
The engineer must configure the GWN7003 to handle three WAN sources:
WAN 1: Back-fed from Location A (Priority 1).
WAN 2: Local at Location B (Priority 2).
WAN 3: Starlink at Location B (Failover/Tertiary).
Logic: Weighted load balancing between WAN 1 and WAN 2 based on capacity, with automated failover to WAN 3.
VLAN Segmentation
The network must be segmented into three distinct VLANs:
VLAN 10 (Home): Trusted devices, full access, inter-VLAN routing allowed.
VLAN 20 (IoT): IP Cameras and smart home devices. Isolated from VLAN 10.
VLAN 30 (Guest): Internet-only access, client isolation enabled.
Layer 2 Engineering
Establish 802.1Q trunks between Switch A and Switch B or similar or better solution.
Configure a WAN-specific VLAN to transport the ISP feed from Location A to the Router at Location B.
Ensure the TP-Link Deco system respects VLAN tagging for the Guest and IoT SSIDs.
5. Deliverables
Logical Network Map: Documentation of IP schemes, VLAN tags, and port assignments.
Remote Configuration: Deployment via Grandstream GDMS or secure remote session.
Validation Report: Proof of failover testing and VLAN isolation.
6. Submission Guidelines
Please provide a price quote and an estimated timeline for completion. Specify any requirements for remote access to the hardware.
This project requires a comprehensive high-level design (HLD) and remote configuration for a multi-ISP, multi-floor network. The goal is to establish a robust, failover-capable environment utilizing Grandstream and TP-Link hardware.
2. Hardware Inventory
The following hardware has been procured and will be physically installed prior to configuration:
Router: 1x Grandstream GWN7003
Switches: 2x Grandstream GWN7801P (Managed PoE+)
Access Points: * 1x Grandstream GWN7661E (In-wall)
3x TP-Link Deco Mesh Nodes (Operating in AP mode)
3. Physical Topology
The site is divided into four main logical zones:
Location A: Ground Floor
Hardware: Switch A
ISP Connection: Primary high-capacity feed (600 Mb/s).
Cabling: Two existing CAT5 runs connecting Location A to Location B.
Constraint: The WAN feed from Location A must be back-fed to the Router at Location B.
Location B: First Floor (MDF)
Hardware: GWN7003 Router, Switch B.
ISP Connections: * Secondary feed (350 Mb/s).
Starlink (Satellite failover).
Role: This is the Main Distribution Frame (MDF) where all routing logic resides.
Location C: Remote Wired
Hardware: GWN7661E In-wall AP.
Connectivity: Hardwired directly back to Switch A.
Location D: Remote Wireless
Hardware: TP-Link Deco Node.
Connectivity: Wireless mesh backhaul only (No Ethernet available).
4. Technical Requirements
Multi-WAN & Failover
The engineer must configure the GWN7003 to handle three WAN sources:
WAN 1: Back-fed from Location A (Priority 1).
WAN 2: Local at Location B (Priority 2).
WAN 3: Starlink at Location B (Failover/Tertiary).
Logic: Weighted load balancing between WAN 1 and WAN 2 based on capacity, with automated failover to WAN 3.
VLAN Segmentation
The network must be segmented into three distinct VLANs:
VLAN 10 (Home): Trusted devices, full access, inter-VLAN routing allowed.
VLAN 20 (IoT): IP Cameras and smart home devices. Isolated from VLAN 10.
VLAN 30 (Guest): Internet-only access, client isolation enabled.
Layer 2 Engineering
Establish 802.1Q trunks between Switch A and Switch B or similar or better solution.
Configure a WAN-specific VLAN to transport the ISP feed from Location A to the Router at Location B.
Ensure the TP-Link Deco system respects VLAN tagging for the Guest and IoT SSIDs.
5. Deliverables
Logical Network Map: Documentation of IP schemes, VLAN tags, and port assignments.
Remote Configuration: Deployment via Grandstream GDMS or secure remote session.
Validation Report: Proof of failover testing and VLAN isolation.
6. Submission Guidelines
Please provide a price quote and an estimated timeline for completion. Specify any requirements for remote access to the hardware.