Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Home Router Recommendation

    Scheduled Pinned Locked Moved Hardware
    56 Posts 14 Posters 16.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      " especially at the additional cost."

      What the few bucks more a smart switch cost?  I don't quite yet have your 40 devices, but getting close with 29 that I can count off the top of my head.  Not counting guest wireless devices that might come on and off the network.

      But as more an more things get connected, iot as we now call it not segmenting your network seems pretty lack view of security.  Does that smart thermostat really need to be on the same network as computers?  Does the dvr made in china need to be on that same network?  What about the game console?  Segregation of your network becomes more and more important when you start adding more and more type devices that may or may not have the best security, and or maybe phone home, etc..

      Now if you had only devices that you control and put the OS on, etc. What about billy bobs laptop that comes over and wants to use your wifi - you sure that thing is not infected with something bad?  Why would you not want that isolated from all your other devices.  Devices that join my guest wifi, I will hand them an IP via dhcp.  And they can ping the gateway to validate they have connectivity.  But other than that they can not talk to any of my other segments, they don't even use my dns - they get handed the isp dns.

      I have another wifi network for my iot devices that do not support eap-tls, I then have my wifi network where I connect my devices via eap-tls.  But even this is restricted and does not have full access into my actual lan network where my workstation and servers and services run.  It has limited access to use my printer, hit my plex server on the plexserver port, etc.  I currently have 7 different segments/vlans on my home network.  This allows me to isolate and limit different types of devices to what they need access to and group them with like devices, etc.

      When it comes to vlan support, you don't need a 1000 $ enterprise class switch to do this.  I just picked up a 8 port gig netgear smart switch for $30 for my av cabinet to replace the aging switch that was in there that had been locking up on me, etc. Pretty disappointed with its feature set, but it does what I needed it to do was the ability to understand vlans.  So in that sense it is fine.  I would like to have been able to monitor it via snmp, etc.  But this works for vlans.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • W
        whosmatt
        last edited by

        @Iceman24:

        Regarding implementing the VLAN's; it wasn't something I planned on doing initially. I could, but I'd like to be setup for it anyways. Let me ask you this. Is there a reason you mentioned modem-to-switch-to-router as the way of connecting versus the more straightforward modem-to-router-to-switch direction? Is that way better for some reason?

        With VLAN's, would only the inter-VLAN traffic go through router? I believe that is yes, even with a layer 2 switch, just wanted clarification. Any other traffic that would stay off router?

        I wouldn't typically have Gigabit speed traffic going through network while I was doing anything else, at least not much else at all to the point of caring. Those high speed large file transfers almost only happen while I sleep.

        Even with VLAN's, there would hardly be any inter-VLAN traffic that I would need to travel at Gigabit speeds, at least none that I'm aware of at this time. Those transfers would be on same VLAN.

        Regarding the LAGG setup, where you'd have the modem connected to a switchport rather than directly to the router, that was just me rambling about ways to speed up inter VLAN traffic without using a Layer3 switch, which is a kind of router in its own right.  No need to implement that at all.  Just one of many options.

        With VLANs, traffic originating from a host in a VLAN will not hit the router unless it leaves that VLAN, either to go to another VLAN or to the internet.  In other words, a large file transfer between a workstation and a NAS will never hit the router unless the workstation is in a different VLAN than the NAS.

        With pfsense and a $30 smart switch you'll have all the hardware and software you need for a simple network, or a more advanced one.

        All that said, I'll go ahead and make an admission:  I have the hardware, software and knowledge to use multiple VLANs and even multiple wireless SSIDs in different VLANs for guest networks and the like at home.  But I don't, yet.  Why?  I live alone, for one.  I don't share my network with many guests at all, and those I do, I know well.  I have a few devices (my Airport Express devices that I use to stream audio around the house) that don't like to be on a different network than the devices they're receiving audio from.  But that's just my use case.  The post from johnpoz just below the one I'm replying to is a different use case, and a very good example of where network segmentation with VLANs in a home environment is desirable.

        1 Reply Last reply Reply Quote 0
        • I
          Iceman24
          last edited by

          Okay further careful consideration, I'm going to go with a powerful enough pfSense router that will be capable of handling VLAN's and the inter-VLAN traffic at high speed when it comes up, whether sooner or later. I'll go with Layer 2 Switches.

          I'm going to build my own. I'm getting something mostly comparable to the SG-4860. I'll have great power to handle anything I'll throw at it, future proof with the AES-NI and QuickAssist as well. I wasn't opposed to official hardware when I was thinking maybe Layer 3 Switch, but I can't spend over $700 for the router, but I can build a solid equivalent for $375-400 it seems.

          Supermicro Mini ITX A1SRI-2558F: $243
          4GB ECC RAM: $33
          120GB SSD: $30 (Already had one, probably no other use for it until now)
          M350 Case with 80w Pico PSU/60w Pico Power Adapter: $69
          =$375

          I am missing anything else I'd need, besides a SATA cable? I have a number of those.

          1 Reply Last reply Reply Quote 0
          • ?
            Guest
            last edited by

            Supermicro Mini ITX A1SRI-2558F: $243
            4GB ECC RAM: $33
            120GB SSD: $30 (Already had one, probably no other use for it until now)
            M350 Case with 80w Pico PSU/60w Pico Power Adapter: $69
            =$375

            Cisco SG300-10PP-K9-NA ~$199

            or

            Cisco SG300-10-SRW2008-K9-NA ~$189

            $375 + $189 = $564

            1 Reply Last reply Reply Quote 0
            • JailerJ
              Jailer
              last edited by

              @Iceman24:

              Okay further careful consideration, I'm going to go with a powerful enough pfSense router that will be capable of handling VLAN's and the inter-VLAN traffic at high speed when it comes up, whether sooner or later. I'll go with Layer 2 Switches.

              I'm going to build my own. I'm getting something mostly comparable to the SG-4860. I'll have great power to handle anything I'll throw at it, future proof with the AES-NI and QuickAssist as well. I wasn't opposed to official hardware when I was thinking maybe Layer 3 Switch, but I can't spend over $700 for the router, but I can build a solid equivalent for $375-400 it seems.

              Supermicro Mini ITX A1SRI-2558F: $243
              4GB ECC RAM: $33
              120GB SSD: $30 (Already had one, probably no other use for it until now)
              M350 Case with 80w Pico PSU/60w Pico Power Adapter: $69
              =$375

              I am missing anything else I'd need, besides a SATA cable? I have a number of those.

              That motherboard will run off a 12 volt input. Skip the pico psu and get an adapter cable and 12 volt power brick.

              1 Reply Last reply Reply Quote 0
              • W
                whosmatt
                last edited by

                @Iceman24:

                Okay further careful consideration, I'm going to go with a powerful enough pfSense router that will be capable of handling VLAN's and the inter-VLAN traffic at high speed when it comes up, whether sooner or later. I'll go with Layer 2 Switches.

                I'm going to build my own. I'm getting something mostly comparable to the SG-4860. I'll have great power to handle anything I'll throw at it, future proof with the AES-NI and QuickAssist as well. I wasn't opposed to official hardware when I was thinking maybe Layer 3 Switch, but I can't spend over $700 for the router, but I can build a solid equivalent for $375-400 it seems.

                Supermicro Mini ITX A1SRI-2558F: $243
                4GB ECC RAM: $33
                120GB SSD: $30 (Already had one, probably no other use for it until now)
                M350 Case with 80w Pico PSU/60w Pico Power Adapter: $69
                =$375

                I am missing anything else I'd need, besides a SATA cable? I have a number of those.

                Sounds like a good build to me.  I like the idea of running off a 12V brick as well, but be careful with that purchase.  In other words, read reviews and get a good one.  Those things always seem to fail on me, and can do really funny things when they do, like causing issues that are really difficult to pin down unless you have another one lying around. Actually I guess that sounds like power supplies in general.

                When you're picking out a switch, it might be best to ask around, since the terminology can be confusing.  There's the "managed switch" which can be L2 or L3, and generally comes will a full set of features including SSH access and a command line (which many people, myself included, who have worked with them find much better than a web interface), and then there's the "smart switches" with perhaps just a web interface,  and now "easy smart" with a Java management app, which is what I have at home.  Any of them can do what you want to do in a home network, but the differences in terminology for the various features can be infuriating sometimes.

                Build on. Enjoy.  And keep us updated.

                Matt

                1 Reply Last reply Reply Quote 0
                • I
                  Iceman24
                  last edited by

                  Thanks, guys. It seems like the most popular one I found that's being used in similar builds is here. http://www.mini-box.com/12v-12-5A-AC-DC-Power-Adapter

                  That combo is actually more costly, but seems better, so minor difference in cost is fine. Revised parts list. I added more RAM, too, to be safe and have the interleave benefit, as minor as that may be.

                  Supermicro Mini ITX A1SRI-2558F: $243
                  8GB Kit of ECC RAM: $62
                  128GB SSD: $30 (Refurb Crucial M4, that I've had sitting around way too long)
                  M350 Case: $40
                  EDAC 12v 12.5a 150w Power Adapter with needed adapter: $44.50
                  Female to Female Molex to SATA Cable: ?
                  P4 Power Extender Cable: ?
                  =$419.50+

                  I don't offhand remember pricing on the last 2 cables, too late to lookup. Would this be all and sound good then?

                  1 Reply Last reply Reply Quote 0
                  • W
                    whosmatt
                    last edited by

                    @Iceman24:

                    Thanks, guys. It seems like the most popular one I found that's being used in similar builds is here. http://www.mini-box.com/12v-12-5A-AC-DC-Power-Adapter

                    That combo is actually more costly, but seems better, so minor difference in cost is fine. Revised parts list. I added more RAM, too, to be safe and have the interleave benefit, as minor as that may be.

                    Supermicro Mini ITX A1SRI-2558F: $243
                    8GB Kit of ECC RAM: $62
                    128GB SSD: $30 (Refurb Crucial M4, that I've had sitting around way too long)
                    M350 Case: $40
                    EDAC 12v 12.5a 150w Power Adapter with needed adapter: $44.50
                    Female to Female Molex to SATA Cable: ?
                    P4 Power Extender Cable: ?
                    =$419.50+

                    I don't offhand remember pricing on the last 2 cables, too late to lookup. Would this be all and sound good then?

                    I wouldn't worry about the extra RAM.  4GB is more than enough for a home build.  But it's cheap, so no harm if you want to double up.  The cables are super cheap.  All sounds robust for a home build.  Maybe just being paranoid but perhaps put the refurb SSD into a system where you can test it before a build.

                    1 Reply Last reply Reply Quote 0
                    • W
                      whosmatt
                      last edited by

                      @BlueKobold:

                      Cisco SG300-10PP-K9-NA ~$199

                      or

                      Cisco SG300-10-SRW2008-K9-NA ~$189

                      $375 + $189 = $564

                      Sorry to go off topic here, but is there a thread you could point me to that discusses the nuts and bolts of these devices? They seem compelling, but my experience with Cisco branded SOHO hardware has been abysmal over the last 10 years or so.  Basically my opinion is that anything branded Cisco that isn't in at least a 1U rack config, painted green, and doesn't  have fans that make it unpalatable in a home or small office environment is not worth buying.  Glad to take it to another thread.  Just curious.

                      1 Reply Last reply Reply Quote 0
                      • JailerJ
                        Jailer
                        last edited by

                        @Iceman24:

                        P4 Power Extender Cable: ?

                        P4 to DC Jack Cable

                        @Iceman24:

                        Female to Female Molex to SATA Cable: ?

                        C2G / Cables To Go 10150 15-Pin Serial ATA Female to LP4 Female Power Cable (6 Inch)

                        And 150 watt power brick is serious overkill. Save some cash and get a smaller one.

                        84w (12v/7A) AC-DC Power Adapter with Power Cord

                        1 Reply Last reply Reply Quote 0
                        • I
                          Iceman24
                          last edited by

                          @Jailer:

                          @Iceman24:

                          P4 Power Extender Cable: ?

                          P4 to DC Jack Cable

                          @Iceman24:

                          Female to Female Molex to SATA Cable: ?

                          C2G / Cables To Go 10150 15-Pin Serial ATA Female to LP4 Female Power Cable (6 Inch)

                          And 150 watt power brick is serious overkill. Save some cash and get a smaller one.

                          84w (12v/7A) AC-DC Power Adapter with Power Cord

                          Thanks. I thought it was overkill, too. I didn't understand why that was the go-to option. Is there some reason that it is?

                          If that 84w one is okay, how would the 60w be? Plenty of power support it has, plus perhaps more efficient with the power draw not being so incredibly low.

                          1 Reply Last reply Reply Quote 0
                          • jahonixJ
                            jahonix
                            last edited by

                            @Iceman24:

                            …my dream of an advanced smart home...

                            That are surely devices you want separated from your LAN.

                            1 Reply Last reply Reply Quote 0
                            • W
                              whosmatt
                              last edited by

                              @Iceman24:

                              Thanks. I thought it was overkill, too. I didn't understand why that was the go-to option. Is there some reason that it is?

                              If that 84w one is okay, how would the 60w be? Plenty of power support it has, plus perhaps more efficient with the power draw not being so incredibly low.

                              I'm no electrical engineer, but my understanding is that commodity power supplies are more efficient when not running near their rated capacity.  For example, I've had an 800W PSU draw ~1100 watts from the wall while delivering its rated output, and around 900 watts when the load was reduced just a bit.  I suspect heat is a big factor.  I doubt a few watts really matters here though.  My instinct says to figure your system's draw and size your power supply to deliver that with a 33% margin or so.

                              1 Reply Last reply Reply Quote 0
                              • E
                                edwardwong
                                last edited by

                                PSU we used nowadays mostly "switching regulator" (at least for PC PSUs), conversion efficiency will be higher when you are getting close to the specified rating, if you are consuming power far below the spec, the conversion efficiency will be relatively low.

                                @whosmatt:

                                @Iceman24:

                                Thanks. I thought it was overkill, too. I didn't understand why that was the go-to option. Is there some reason that it is?

                                If that 84w one is okay, how would the 60w be? Plenty of power support it has, plus perhaps more efficient with the power draw not being so incredibly low.

                                I'm no electrical engineer, but my understanding is that commodity power supplies are more efficient when not running near their rated capacity.  For example, I've had an 800W PSU draw ~1100 watts from the wall while delivering its rated output, and around 900 watts when the load was reduced just a bit.  I suspect heat is a big factor.  I doubt a few watts really matters here though.  My instinct says to figure your system's draw and size your power supply to deliver that with a 33% margin or so.

                                1 Reply Last reply Reply Quote 0
                                • W
                                  whosmatt
                                  last edited by

                                  @edwardwong:

                                  PSU we used nowadays mostly "switching regulator" (at least for PC PSUs), conversion efficiency will be higher when you are getting close to the specified rating, if you are consuming power far below the spec, the conversion efficiency will be relatively low.

                                  That's good to know. My limited (but documented) experience was with cheaper hardware.  I've been told that the particular PSU I was using is not truly capable of delivering the stated output, but it did for me, at the expense of a lot of heat and very high power draw from the wall.

                                  I suppose the takeaway from this is that quality matters, and that you can't take manufacturers ratings for granted.

                                  1 Reply Last reply Reply Quote 0
                                  • I
                                    Iceman24
                                    last edited by

                                    Well, I'm only figuring a 15-20 watt usage of power. I couldn't see it ever getting about 30w, really, at max, from what I can gather. So the 60w seemed like more than enough and I didn't want to waste any power or money on something that was still overkill.

                                    1 Reply Last reply Reply Quote 0
                                    • H
                                      Hakker
                                      last edited by

                                      Just a heads up it seems that the 2558 boards are running EOL possibly the 2758 also now that the xeons 15x8 are there.
                                      I tried to buy one and after 3 weeks my delivery status went from 2-3 days to 10+ days to unknown and no other stores selling the 2558.

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        dreamslacker
                                        last edited by

                                        @whosmatt:

                                        I'm no electrical engineer, but my understanding is that commodity power supplies are more efficient when not running near their rated capacity.  For example, I've had an 800W PSU draw ~1100 watts from the wall while delivering its rated output, and around 900 watts when the load was reduced just a bit.  I suspect heat is a big factor.  I doubt a few watts really matters here though.  My instinct says to figure your system's draw and size your power supply to deliver that with a 33% margin or so.

                                        PSUs when certified for power efficiency only need to meet certain targets at 20%, 50%, and 100% capacity loading.
                                        A regular core i5 (or Xeon equivalent), with 1 mechanical drive typically draws about 40-50W at near idle (which is what you'd expect from a pfSense box without much going on). So in theory, you'd want a PSU rated at 250W or lower when you power a rig like this.

                                        When your power draw is below 20% of the PSU rating, that's where you find the greatest impact - mostly because the base power draw to run the components factor in significantly at that kind of loading.

                                        Your best bet, if it's that important to reduce the power losses, is actually to run a DC-DC PSU like a PicoPSU and a high efficiency 12V adapter.

                                        1 Reply Last reply Reply Quote 0
                                        • E
                                          edwardwong
                                          last edited by

                                          I don't think so, DC-DC PicoPSU is also a kind of switching regulator, just like what I mentioned before, the efficiency will be somewhat lower when your output is far below from the designated load.

                                          @dreamslacker:

                                          @whosmatt:

                                          I'm no electrical engineer, but my understanding is that commodity power supplies are more efficient when not running near their rated capacity.  For example, I've had an 800W PSU draw ~1100 watts from the wall while delivering its rated output, and around 900 watts when the load was reduced just a bit.  I suspect heat is a big factor.  I doubt a few watts really matters here though.  My instinct says to figure your system's draw and size your power supply to deliver that with a 33% margin or so.

                                          PSUs when certified for power efficiency only need to meet certain targets at 20%, 50%, and 100% capacity loading.
                                          A regular core i5 (or Xeon equivalent), with 1 mechanical drive typically draws about 40-50W at near idle (which is what you'd expect from a pfSense box without much going on). So in theory, you'd want a PSU rated at 250W or lower when you power a rig like this.

                                          When your power draw is below 20% of the PSU rating, that's where you find the greatest impact - mostly because the base power draw to run the components factor in significantly at that kind of loading.

                                          Your best bet, if it's that important to reduce the power losses, is actually to run a DC-DC PSU like a PicoPSU and a high efficiency 12V adapter.

                                          1 Reply Last reply Reply Quote 0
                                          • I
                                            Iceman24
                                            last edited by

                                            Not that it makes much of a difference, but I'm going to go with the Kingston Technology ValueRAM 4GB 1333MHz DDR3L PC3-10600 ECC CL9 SR x8 1.35V SODIMM Notebook Memory KVR13LSE9S8/4 instead of the CL11 1600MHz variety. Seems CL9 1333MHz would be faster anyways, plus it's cheaper.

                                            Will do the EDAC 60w as well, since I won't go near 60w at full load.

                                            Supermicro Mini ITX A1SRI-2558F: $243 (http://www.superbiiz.com/detail.php?name=MB-A1RI25)
                                            8GB Kit of ECC RAM: $48 (https://www.amazon.com/Kingston-Technology-ValueRAM-PC3-10600-KVR13LSE9S8/dp/B00CLBJOQW)
                                            128GB Crucial M4 SSD: $30
                                            M350 Case: $40
                                            EDAC 12v 5a 60w Power Adapter: $15 (http://www.mini-box.com/60w-12v-5A-AC-DC-Power-Adapter)
                                            Female to Female Molex to SATA Cable: $6 (https://www.amazon.com/dp/B001CSIPA6/ref=cm_sw_su_dp)
                                            P4 to DC Jack Cable: $5 (http://www.mini-box.com/P4-DC-Jack-Cable)
                                            =$387

                                            Ordering time probably not that far off. :-)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.