How to audit network as a noob (discuss.tchncs.de)

submitted 9 hours ago by Jean_le_Flambeur@discuss.tchncs.de to c/networking@sh.itjust.works

4 comments fedilink hide all child comments

Hey y'all, I have a small network with opnsense firewall, a unify ap, some client in different subnets, vpn, DNS and some servers.

As I am completely self thought, I got everything to run reading the docs and forums, but I have no idea how to test if what I build is safe and stable.

Are there good up to date tools, or checklists one could follow to audit the different parts of the network (most important the opnsense config)?

What do you check if looking for security issues?

The network mostly relies on client separation through different subnets on different vlans, but I fear I dont understand how for example the vpn and the nas work together in detail to be sure there is no security implication I oversee.

Also: how do you handle client authentication for devices on the same subnet? I know IP/mac-adress ARP entries are easily spoofed and therefore not secure, but I haven't seen how to do it correctly

you are viewing a single comment's thread
view the rest of the comments

[-] moonpiedumplings@programming.dev 2 points 4 hours ago

Okay I really want to write a longer post to this, but I don't have much time so I'll just jot down my thoughts real fast:

Are there good up to date tools, or checklists one could follow to audit the different parts of the network (most important the opnsense config)?

"Defenders think in lists. Attackers think in graphs. As long as this is true, attackers win."

But I did jot down some tools I found interesting: https://moonpiedumplings.github.io/blog/watched-software/#vulnerability-scanning-greenbone

Unfortunately I haven't compared them or found out which is the best yet.

how do you handle client authentication for devices on the same subnet? I know IP/mac-adress ARP entries are easily spoofed and therefore not secure, but I haven’t seen how to do it correctly

On wifi, client isolation, on ethernet, port isolation and private vlans.

this post was submitted on 12 Jul 2026

16 points (94.4% liked)

networking

3593 readers

24 users here now

Community for discussing enterprise networks and the ensuing chaos that comes after inheriting or building one.

founded 3 years ago

MODERATORS

manifex@sh.itjust.works