Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cisco vs. pfSense

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 4 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O
      orcape
      last edited by

      Re: CISCO VS PFSENSE

      Hi guys,
      the previous thread is already 5 years old, but I would still like to use it again to clarify a question for myself that I have actually almost secretly answered myself.
      I've been using pfSense for years.
      Initially on an ALIX board, then on an APU2C4 and recently I've been running 2.6.0 CE on a SophosSG105.
      The device is connected to a VDSL2 connection, VLANs are used, OpenVPN and IPSec tunnels.
      Although I don't count myself among the professionals, I think my level of knowledge on the subject is pretty good.
      Now I got a Cisco887vaw from a friend, actually only meant to play, or to get to know the 'professional league'. ;-)
      Logically, the part is now getting quite old, there is no longer any support, the GUI can be installed, but it probably only works with ancient Java software that I don't even want to install.
      There's a lot of reading material on the net about Cisco, and I've also done some research on the console, which actually has little to do with the Linux and FreeBSD worlds I know.
      Theoretically, I could use the device on my VDSL2 connection, but I would have to exchange an OpenVPN connection for an IPSec. Unfortunately, the remote station is then on an LTE connection with a private IP range from the provider, where I expect problems again.
      Does that even make any sense other than keeping a 69 year old's brain fit? ;-)
      The effort for relearning Cisco 'Consolisch' seems to me at least not insignificant, especially since the overall structure of the network cannot simply be implemented 1:1.
      Thank you for your opinions.
      Greetings orcape

      johnpozJ JKnottJ 2 Replies Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @orcape
        last edited by johnpoz

        @orcape said in Cisco vs. pfSense:

        Cisco887

        what would you expect to learn from such old gear - it was what end of life like 2016, with end of sale in what 2011. Got 10/100 ports, you have a wireless model that was what N?

        You prob have much more fun using brain with something current.. There is much more interesting new stuff to play with other than old cisco tech.. Its not like your needing to polish up your cisco to rejoin the job market ;) heheh

        Next time friends want to pawn off their trash on you - just say no.. they they can figure out how to proper dispose of old electronics..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        stephenw10S 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @orcape
          last edited by

          @orcape

          I also have an old Cisco router, which I got when I was working on my CCNA. However, beyond trying stuff, I wouldn't use it for my Internet connection. PfSense does a lot that Cisco does, including routing protocols such as OSPF and BGP. My Cisco router is connected, but only to it's own interface on my pfSense box.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator @johnpoz
            last edited by

            @johnpoz said in Cisco vs. pfSense:

            Next time friends want to pawn off their trash on you - just say no

            Ha, I have yet to learn that skill. ๐Ÿ˜‰

            1 Reply Last reply Reply Quote 1
            • O
              orcape
              last edited by

              @johnpoz said in Cisco vs. pfSense:

              Next time friends want to pawn off their trash on you - just say no.

              @stephenw10 said in Cisco vs. pfSense:
              Ha, I have yet to learn that skill.

              He certainly didn't mean that in a bad way and you don't always have to necessarily assume something bad, especially since there was also an AP as a side dish, which I can use quite well. 'You don't look a gift horse in the mouth.'
              Since I don't come from the IT industry and therefore don't have the opportunity to deal with the technology that Cisco builds, it was at least a new experience.
              For home use, I would probably not want to use something like this, even as a current new device.
              Greetings orcape

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @orcape
                last edited by johnpoz

                @orcape that was a joke ;)

                That equipment is so old it has no place in a modern network, its wired is 100 at best, and wifi is N - didn't bother to look up how many streams - can assume SLOW..

                Its best use case would be in some village hut where they have a couple of car batteries in the corner for electric that they charge by riding a bicycle..

                I could buy a 20$ wifi put openwrt or ddwrt on it and blow away anything that box could do..

                They stop selling that device back in 2011.. If not in a villagers hut then it should just be in a landfill somewhere.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                JKnottJ 1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  I would argue it has value in experiencing a Cisco interface if you've never used one. I have a bunch of old hardware I use only occasionally for testing. It does become less valid over time of course.

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @stephenw10
                    last edited by johnpoz

                    @stephenw10 pick up some gig cisco switch and off ebay for 20$ and use that to play with cisco ios..

                    That would have some use being gig.. I am all for using equipment til its no longer useful - but 10/100 with N for wifi - its junk for any current home network even. Unless you live in some hut in the middle of the jungle or something. And your internet is frame relay speeds hehe

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    O 1 Reply Last reply Reply Quote 0
                    • O
                      orcape @johnpoz
                      last edited by

                      @johnpoz said in Cisco vs. pfSense:

                      That would have some use being gig.. I am all for using equipment til its no longer useful - but 10/100 with N for wifi - its junk for any current home network even. Unless you live in some hut in the middle of the jungle or something. And your internet is frame relay speeds hehe

                      The reason for my post is to hear multiple opinions.
                      On the one hand it is a fact that the device is no longer up to date, on the other hand the learning effort is too high for me to be able to use it.
                      It's perfectly clear to me that that would be a technical step backwards and no, I don't live in the jungle here, I'm in the fortunate position of having a VDSL2 connection.

                      stephenw10S 1 Reply Last reply Reply Quote 0
                      • JKnottJ
                        JKnott @johnpoz
                        last edited by

                        @johnpoz

                        That old gear is fine for learning. I bought mine when I was working on my CCNA. However, I would never put it on the Internet, as it hasn't seen an update in many years. Also, it only has 100 Mb interfaces and I currently get over 900 Mb down from my ISP.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator @orcape
                          last edited by

                          @orcape said in Cisco vs. pfSense:

                          I'm in the fortunate position of having a VDSL2 connection.

                          It's all relative. Not that long ago that I got an ADSL2 connection at ~20Mbps and thought that was incredibly fast. ๐Ÿ˜‰

                          If you have the hardware already and find it interesting or fun to investigate it then why not.

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @stephenw10
                            last edited by

                            @stephenw10 said in Cisco vs. pfSense:

                            It's all relative.

                            agree - if I was living in a hut in the jungle that thing would be a rocketship most likely.. Here living in the modern world, I can find a better faster piece of gear for 20$ on amazon that does AC for wifi and 4 gig ports.. And uses a fraction of the juice.. Throw ddwrt or openwrt on that 20$ box and he would have cool stuff to play with for days and days.. Vs trying to get 15 year old hardware trying to do something actually productive.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                            O 1 Reply Last reply Reply Quote 1
                            • O
                              orcape @johnpoz
                              last edited by

                              @johnpoz said in Cisco vs. pfSense:

                              Throw ddwrt or openwrt on that 20$ box and he would have cool stuff to play with for days and days.. Vs trying to get 15 year old hardware trying to do something actually productive.

                              I know both DD-WRT and OpenWRT very well and I also use them.
                              But even then, the differences lie in the hardware.
                              Just as I wouldn't buy a PC with water cooling if I only use it for writing programs and the Internet, I don't have to invest expensive hardware for an AP if I don't use it in a productive environment.
                              As @stephenw10 said so beautifully.....

                              @stephenw10 said in Cisco vs. pfSense:

                              It's all relative.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.