Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Did you replace an all-in-one device with 3 devices to get pfSense awesomeness?

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 10 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      SquidproxE4thewin
      last edited by

      If that AC1200 did multiple, VLAN-tagged BSSIDs it'd look like a winner.

      Does such a device exist for under $200?  :D

      1 Reply Last reply Reply Quote 0
      • K Offline
        kejianshi
        last edited by

        Its true that generally speaking when you replace some cheap junk all in one walmart special modem/router/switch/wifi combo device with pfsense, you generally are looking at a bit of expense.  However, you are also getting generally better modem/router/switch/wifi performance by breaking apart those functions.

        If you don't really care to have or need to have really good network performance, functionality, configurability etc, then don't bother with pfsense.

        Pfsense, is generally speaking, for people who want more than a combo device provides.

        1 Reply Last reply Reply Quote 0
        • stan-qazS Offline
          stan-qaz
          last edited by

          For picking a modem go to your service providers forum (Cox Cable here: http://www.dslreports.com/forum/coxhsi) on DSL Reports and read up on what is working for others in your local area and on your service plan.

          I picked up an Asus RT-AC66U to use as an Access Point, way overkill but I got it dirt cheap and Asus is good about providing firmware updates. They are built into this one so I can open a page and click a link to see if I need to update. I have a couple DLink boxes that are far more hassle to check and updates are few and far between. A lot of small home WiFi routers have an option to be a router or an access point which lets you easily eliminate the NAT issue. Others you can fiddle to work as an AP even if they don't offer it as a configuration option.

          1 Reply Last reply Reply Quote 0
          • T Offline
            thermo
            last edited by

            No I went the other way, replacing several devices with 1 as I started paying UK prices for electricity again.
            An amd low power cpu and board which can do linux kvm virtualisation does the nas, dual band access point and firewall all in one.

            1 Reply Last reply Reply Quote 0
            • johnpozJ Online
              johnpoz LAYER 8 Global Moderator
              last edited by

              I am cable so have already had modem, bought my own years ago that his paid for itself multiple times over vs the $5 a month comcast wanted.  Have a sb6120, for a while I used old wifi routers as AP.  But when I figured it was time to pull the tigger from G, went with a unifi AC - because I wanted to play with AC even though don't really have any ac devices other than a pci card and usb dongle.

              Cheaper router would of been go with their N model that is only $70..

              Switch.. I have had smart switch at home for awhile - but move to sg300 and it freaking rocks for a home budget switch <$200

              I use to run router distro, ipcop before pfsense on old PC so have not been soho router for years and years.  When I when with a esxi box it was a consolidation for me, and allowed me to put my router in VM..  Which is really the only way to do it for home use if you ask me ;)  I can play with any router distro I want with a couple of clicks..  When running non stable code or want to play with pfsense somewhat - take a snap and click back to how it was, etc.

              Breaking out your devices is really just pure freedom and power..  Why would anyone want a crap soho box??  As to AP.. where your router is never really the best place for AP.. Get a real AP and mount it in the ceiling in the best location for your coverage - or get a few of them if you have large home, etc.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

              1 Reply Last reply Reply Quote 0
              • R Offline
                rjcrowder
                last edited by

                You should be able to setup the Netgear 600N as an access point - i.e. disable the routing functions.

                1 Reply Last reply Reply Quote 0
                • johnpozJ Online
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  ^ yeah you can setup any soho wifi router/gateway as just an AP.  Simple as turn off its dhcp server and connect to your network with one of its lan port = AP.

                  Using such a device normally is lacking lots of features that you would get in a real AP..  But sure it will bridge wifi to your wired segment you connect it to - good luck with any sort of vlans or guest networks, captive portals, etc.  You can use pfsense as captive portal but there are not many soho wifi routers that support vlans.  If you can use 3rd party firmware you might be able to get that sort of feature.

                  If your wanting all the goodness, I would look to a real AP or multiple ones to give you better solution.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

                  1 Reply Last reply Reply Quote 0
                  • S Offline
                    SquidproxE4thewin
                    last edited by

                    @johnpoz:

                    If your wanting all the goodness, I would look to a real AP or multiple ones to give you better solution.

                    Which AP would you consider?

                    1 Reply Last reply Reply Quote 0
                    • stan-qazS Offline
                      stan-qaz
                      last edited by

                      Ubiquity has some really nice gear and I understand they have control software that doesn't need Windows now. That was the reason I passed on them for doing the WiFi here a while back.

                      http://www.ubnt.com/products/#enterprise/wireless

                      From the 3.25 readme, it looks like Unixes aren't well supported:

                      This is UniFi build for Linux/Unix-like system. It is not officially
                      supported / regularly tested.

                      It's basically a package that strips all of the native components

                      Limitations

                      • Auto update (of UniFi controller) does not work
                      • Backup/Restore does not work (see FAQ)
                      1 Reply Last reply Reply Quote 0
                      • DerelictD Offline
                        Derelict LAYER 8 Netgate
                        last edited by

                        Yeah.

                        A downside to the Ubiquiti is you need a controller on Windows/Mac/Linux.

                        An upside to the Ubiquiti is there's a free controller available.

                        The controller doesn't have to run all the time…

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • A Offline
                          asayler
                          last edited by

                          @SquidproxE4thewin:

                          If that AC1200 did multiple, VLAN-tagged BSSIDs it'd look like a winner.

                          Does such a device exist for under $200?  :D

                          If you get a router that supports OpenWRT and includes a vlan-capable switch, you should be able to leverage VLANs and multiple SSIDs on consumer-level gear. That's what I do using one of these: http://wiki.openwrt.org/toh/tp-link/tl-wdr7500. $100 on Amazon: http://amzn.com/B00BUSDVBQ. But you'll need flash and configure OpenWRT to make it do all the interesting stuff. See http://synack.me/blog/openwrt-and-vlans for an idea of what's possible.

                          1 Reply Last reply Reply Quote 0
                          • V Offline
                            Visseroth
                            last edited by

                            I'm using the EnGenious EAP600 and it works great and does VLAN tagging on SSIDs.

                            http://www.amazon.com/EnGenius-Technologies-High-powered-Distribution-EAP600/dp/B009V17BYC/ref=sr_1_sc_3?ie=UTF8&qid=1423648338&sr=8-3-spell&keywords=enginious+access+point

                            1 Reply Last reply Reply Quote 0
                            • DerelictD Offline
                              Derelict LAYER 8 Netgate
                              last edited by

                              Engenius can suck it.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • M Offline
                                mikeisfly
                                last edited by

                                @Visseroth:

                                I'm using the EnGenious EAP600 and it works great and does VLAN tagging on SSIDs.

                                http://www.amazon.com/EnGenius-Technologies-High-powered-Distribution-EAP600/dp/B009V17BYC/ref=sr_1_sc_3?ie=UTF8&qid=1423648338&sr=8-3-spell&keywords=enginious+access+point

                                I use the same access point at home, I'm pretty satisfied with it. As far as buying my own modem, I wouldn't buy any modem right now unless it supported minimum 16 downstream channels and minimum 4 upstream channels. You never mentioned who your cable provider is but You want to get a DOCSIS 3.1 modem / EMTA (If you have phone service). Broadcom and others have announced the chips in January and I would expect to see devices on the market by the end of the third quarter. I don't want to put to much proprietary information out there yet but Comcast is working hard to provide a true, not ~700-900 Mbpsgigabit per second internet service tier by the end of 2015 on our Coaxial network.

                                For those who are on cable please do some research in DOCSIS 3.1 I know a .1 update doesn't sound like a big deal but Cable Labs should have really called it DOCSIS 4.0 there are many many many performance benefits. As a side note we are attacking high speeds from both sides, meaning we are making the coaxial network faster but at the same time we are using other technologies too which I will not go into here but I'm sure other MSOs are doing as well.

                                1 Reply Last reply Reply Quote 0
                                • V Offline
                                  Visseroth
                                  last edited by

                                  Outch!

                                  Might I ask why?

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD Offline
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    Are you talking to me?

                                    There's a saying about only getting one chance to make a first impression.

                                    I deployed about a half-dozen engenius CPEs a few years ago.  Constant lockups. Resetting them by disabling and enabling PoE, utter lack of support.  The software in these bridges absolutely sucked.

                                    Switched them out for Ubiquiti Nano M5s and have barely touched them since.  The software in the Ubiquitis blew the enidiot crap out of the water - and at a comparable price point.

                                    Never looked back.  Maybe they got better or bought another wireless company that could write code.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.