Doing same here...set up a mini lab on the kitchen table (low on the WAF right now)....Note this is for use with Starlink and T-Mobile Internet which does not work with VPN at this time.
Current ISP connected PFSense box is running IPSec VPN, OpenVPN, L2TP and Wireguard VPN servers.
Using T-Mobile LTE modem as a failover today. (it has a built in WLAN, Network ports, RJ11 phone ports on it).
For phones and tablets directly connected to the Internet to call automated home (software / Hardware automation - HA and Homeseer and Leviton OmniPro 2 panel). Doing X10, UPB, Zigbee and ZWave and now testing converted iOT to Tasmota ESP devices.
Inside have managed Gb switches (now L2/L3) and managed POE switches. IE: multiple physical LANs and VLANs
Overview drawing:
1 - PFSense box connected to: (touchscreen Jetway AES-NI Celeron micro motherboard with dual Gb NICs and WLAN) - sort of a portable PFSense box.
2 - T-Mobile LTE combo modem (using LAN interface and cannot bridge LAN to WAN) with a 4 hour battery.
3 - laptop
4 - Oracle Account
