A simulated enterprise network built on Proxmox, integrating routing, security, identity, wireless, and monitoring into a single cohesive architecture.
This project demonstrates a real-world enterprise network design, combining:
- π£οΈ Advanced routing (Multi-area OSPF)
- π High availability (VRRP)
- 𧩠VLAN segmentation
- π₯ Firewall & gateway (OPNsense)
- π Identity & AAA (Cisco ISE)
- π‘ Wireless infrastructure (Cisco WLC + AP)
- πͺ Directory services (Active Directory, DNS, NTP)
- π Monitoring (Zabbix)
All core services are deployed inside Proxmox, simulating a private cloud environment.
| Service | VLAN | Subnet |
|---|---|---|
| π Cisco ISE | VLAN 10 | 10.100.10.0/24 |
| π‘ Cisco WLC | VLAN 20 | 10.100.20.0/24 |
| πͺ AD / DNS / NTP | VLAN 30 | 10.100.30.0/24 |
| π Zabbix | VLAN 40 | 10.100.40.0/24 |
OPNsense acts as the central security and routing point:
- π₯ Firewall (NAT & policy control)
- π Inter-VLAN routing
- π Internet gateway
- Loopback:
12.12.12.12 - Uplink:
- π£οΈ VLAN 100 (Transit)
- π Trunk VLAN 10β40 (Services)
- WAN Network:
10.255.255.0/30 - Default Gateway:
- π Internet:
10.255.255.1
- π Internet:
- Internal routing via Layer 2 core switch
- Virtual IP:
192.168.100.254 - R1-A:
192.168.100.1(Active) - R1-B:
192.168.100.2(Standby)
- R1-A β
1.1.1.1 - R1-B β
11.11.11.11
- Connected to Layer 2 core via VLAN 100
Each branch router is dual-homed to the core for redundancy.
- Loopback:
2.2.2.2 - Networks:
- π οΈ MGMT β
10.2.2.0/24 - π» WIRED β
172.20.2.0/24 - πΆ WIRELESS β
172.19.2.0/24
- π οΈ MGMT β
- Loopback:
3.3.3.3 - Networks:
- π οΈ MGMT β
10.3.3.0/24 - π» WIRED β
172.20.3.0/24
- π οΈ MGMT β
- Loopback:
4.4.4.4 - Networks:
- π οΈ MGMT β
10.4.4.0/24 - π» WIRED β
172.20.4.0/24 - πΆ WIRELESS β
172.19.4.0/24
- π οΈ MGMT β
| Area | Purpose |
|---|---|
| π Area 0 | Core Transit |
| π°οΈ Area 2 | Branch R2 |
| π°οΈ Area 3 | Branch R3 |
| π°οΈ Area 4 | Branch R4 |
- Stub areas for scalability
- Reduced routing table size
- Faster convergence
| VLAN | Purpose |
|---|---|
| π 10 | Cisco ISE |
| π‘ 20 | WLC |
| πͺ 30 | AD / DNS / NTP |
| π 40 | Zabbix |
| π£οΈ 100 | Core Transit |
| π 999 | Internet |
User β WiFi β AP β WLC β Cisco ISE β Active Directory β VLAN Assignment β Internet
- πΆ Wireless β 802.1X (RADIUS via ISE)
- π₯οΈ Device Admin β TACACS+
- π€ Identity Source β Active Directory
- π‘ SNMP β Zabbix
- π Device health & performance monitoring
- β±οΈ NTP ensures log consistency
- π£οΈ Routing: OSPF (Multi-area)
- π Redundancy: VRRP
- π₯ Firewall: OPNsense
- π AAA: Cisco ISE (RADIUS + TACACS+)
- π‘ Wireless: Cisco WLC
- πͺ Directory: Active Directory (DNS + NTP)
- π Monitoring: Zabbix
- βοΈ Virtualization: Proxmox
- π Base Configuration
- ποΈ Infrastructure Setup
- π₯οΈ Proxmox Setup
- π₯ OPNsense Setup
- πͺ Windows AD Setup
- π Cisco ISE Setup
- π‘ Cisco WLC Setup
- π Zabbix Setup
This lab demonstrates:
- π§ Enterprise network architecture design
- π High availability implementation (VRRP)
- π§ Scalable routing (OSPF multi-area)
- 𧩠Network segmentation (VLANs)
- π Identity-based access control (ISE + AD)
- π‘ Secure wireless deployment (802.1X + WPA3)
- π Monitoring & observability