Access home network how-to guide

src/components/NavigationDocs.jsx

@@ -121,6 +121,7 @@ export const docsNavigation = [
                   { title: 'Routing traffic to multiple IP resources', href: '/how-to/routing-traffic-to-multiple-resources' },
                   { title: 'Accessing restricted website domain resources', href: '/how-to/accessing-restricted-domain-resources' },
                   { title: 'Accessing entire domains within networks', href: '/how-to/accessing-entire-domains-within-networks' },
+                  { title: 'Accessing your home network', href: '/how-to/access-home-network' },
               ]
          },
          {

src/pages/how-to/access-home-network.mdx

@@ -0,0 +1,115 @@
+import {Note} from "@/components/mdx";
+
+# How to Set up NetBird to Access Your Home Network
+
+This step-by-step guide describes how to quickly get started with NetBird and access your home network remotely.
+You will achieve a secure connection between your entire home network and NetBird, enabling remote devices to access
+local network resources through a routing peer using the [NetBird Networks feature](/how-to/access-home-network).
+
+## Download and Install NetBird
+<br/>
+
+<Button href="https://app.netbird.io/install" arrow="right" children="Download NetBird" />
+
+## Connect Your Laptop
+
+NetBird comes with a Desktop UI application that can be found in the systray. If it hasn't automatically started, look for `NetBird` in the application list, run it, and click `Connect`:
+
+<p>
+    <img src="/docs-static/img/getting-started/systray.png" alt="login-to-netbird" className="imagewrapper"/>
+</p>
+
+<Note>
+    Alternatively, you can run the `netbird up` command in the terminal.
+</Note>
+
+At this point a browser window pops up starting an interactive SSO login session that will register your laptop. You will be prompt to sign up and confirm your device registration:
+
+<p>
+    <img src="/docs-static/img/how-to-guides/access-home-network/login-screen-dark.png" alt="login-to-netbird" className="imagewrapper"/>
+</p>
+
+After the registration is complete, proceed to the [**NetBird dashboard**](https://app.netbird.io/) to confirm that your laptop is in the network. You will see it in the `Peers` view.
+
+## Create a New NetBird Network
+1. Go to the **Networks** tab in the side bar
+2. Click **Add Network** and give it a name such as “Home LAN", and optionally add a description.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/access-home-network/add-network-home-lan.png" alt="add-network-home-lan" className="imagewrapper"/>
+</p>
+
+## Define Your LAN as a Network Resource
+1. Click **Add Resource**.
+2. Enter a name like "Home Subnet" and the CIDR of your home network into the Address field (e.g., 192.168.1.0/24).
+3. Assign it to a Destination Group, create one called "home-lan" so you can write access policies using this group.
+4. Click **Add Resource**.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/access-home-network/add-resource-home-network.png" alt="add-resource-home-network" className="imagewrapper"/>
+</p>
+
+<Note>
+    Alternatively, if you do not want to allow access your entire home subnet, you can get more granular by only
+    allowing
+    access to a single static IP address for your added resource (e.g., 192.168.1.50/32).
+</Note>
+
+## Create an Access Control Policy
+
+To allow access to resources in your home network, you need to create an access control policy that defines which
+peers can access the network.
+
+1. After adding your resource, click **Create Policy**.
+2. Set Source to the group of NetBird peers you want to allow access (e.g., "All Users" or a specific group like "Home Users").
+3. Set **Destination** to the "home-lan" group you made.
+4. For **Protocol**, choose All.
+5. Name it "Home LAN Access" and click **Add Policy**.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/access-home-network/add-policy-home-lan.png" alt="add-policy-home-lan" className="imagewrapper"/>
+</p>
+
+## Add Your User to the Home User Group
+
+In order to access your home network, you need to add your users to a group that is used in the access control policy,
+you've previously created.
+
+1. Go to the **Team** tab in the side bar.
+2. Find your user row and click on the **GROUPS** column in the table.
+3. Add "Home Users" by typing it in the input box and pressing Enter.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/access-home-network/add-user-group.png" alt="add-network-home-lan" className="imagewrapper"/>
+</p>
+
+## Choose or Add a Routing Peer in Your LAN
+
+1. Click **Add Routing Peer**.
+2. Pick any always-on machine on your home network (Windows, Linux, Mac, Docker, Raspberry Pi).
+3. Install the NetBird agent on it using a [one-off setup key](/how-to/register-machines-using-setup-keys#types-of-setup-keys) using the CLI installer.
+4. Ensure this machine has access to both the internet and your LAN subnet.
+5. Choose this machine as your routing peer and click **Continue** and **Add Routing Peer**.
+
+<p>
+    <img src="/docs-static/img/how-to-guides/access-home-network/add-routing-peer-home-network.png" alt="add-routing-peer-home-network"
+         className="imagewrapper"/>
+</p>
+
+<p>
+    <img src="/docs-static/img/how-to-guides/access-home-network/add-routing-peer.png" alt="add-routing-peer-home-network"
+         className="imagewrapper"/>
+</p>
+
+## Test the Connection
+
+1. Pick any IP within your Home LAN, such as the IP of your NAS, printer, or another service and run:
+
+    ```bash
+      ping 192.168.x.x
+    ```
+
+2. A successful ping response confirms that your routing peer is correctly routing traffic to resources in your home network.
+
+That’s it! You’ve successfully mapped your entire home LAN into a NetBird Network. Any peer included in your access policy
+can now securely access resources in your home subnet via your designated routing peer, without the need to open router ports or install software on every device.