Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Web Managed Switch Recommendations? (USED)

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    24 Posts 6 Posters 4.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      " lot >1% of "Bad Rx Packets" on VLAN tagged ports"

      And why are you blaming that on the switch?  Where are you seeing this exactly?

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • P
        pfBasic Banned
        last edited by

        I'm guessing it's the switch but could certainly be wrong.

        When I enable 802.1Q VLANs I see bad Rx Packets on the ports using VLANs, if I disable them then no more bad Rx Packets.

        I'm seeing this on the switch WebGUI. It's inter-LAN traffic so (as I understand it) isn't even being seen by pfSense.

        1 Reply Last reply Reply Quote 0
        • P
          pfBasic Banned
          last edited by

          So far what looks like the best used switch in the price range is the Zyxel GS1900-8HP using RTL8380M-CG.

          https://www.smallnetbuilder.com/lanwan/lanwan-reviews/32408-zyxel-gs1900-8hp-8-port-gbe-smart-managed-poe-switch-reviewed

          http://www.realtek.com/products/productsView.aspx?Langid=2&PNid=18&PFid=45&Level=5&Conn=4&ProdID=334

          Anyone have any experience or thoughts on these?

          EDIT: I also could not get LACP LAG working on this switch, it's very possible I screwed it up but it doesn't seem very complicated?

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Per your other thread.. I ordered that same switch - and will be able to duplicate your config in a couple of days.  I really doubt your issues are related to that switch.. But will see for myself in a few days once the switch shows up.

            But if your looking for a higher end switch to get.. I love my cisco sg300, and would highly recommend it.  Or you could go with their new 350 line..  Or if your using unifi AP, why not get their switches.. You can get a 8 port for $99 NEW from from unifi..

            Or poe for 110$
            https://store.ubnt.com/collections/routing-switching/products/unifi-switch-8-60w-beta

            Or for 200$ you can get the 16 porter that does full poe, even their 24 volt passive
            https://store.ubnt.com/collections/routing-switching/products/unifi-switch-8-150w

            I have their switches on my list of new toys to buy ;)

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • H
              Harvy66
              last edited by

              I wouldn't be surprised if his NICs are sending baby giant frames. I have Intel NICs and HP switch and I never had to set jumbo-frames when enabling VLAN tagging and still able to send 1500byte IP datagrams without fragmentation, which was unexpected. Anyway, if the NICs are sending 1508 byte frames and the switch is not expecting anything past 1500, frame errors.

              1 Reply Last reply Reply Quote 0
              • P
                pfBasic Banned
                last edited by

                Thank you for the recommendations!

                I'm looking to get something used for <$75.

                Anyone know anything about these?

                https://luxul.com/xms-1008p

                There are some available in my area for $50-60.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  how many ports do you want/need for your $75 price point?  You can get a brand unifi 8 port gig for 100$

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • P
                    pfBasic Banned
                    last edited by

                    Ideally 8 gigabit ports, web gui  managed with at least some Poe.

                    1 Reply Last reply Reply Quote 0
                    • occamsrazorO
                      occamsrazor
                      last edited by

                      I'm not entirely sure if it meets your requirements but I (a humble home user) use these:

                      Netgear GS110TP and GS108Tv2

                      http://www.netgear.com/business/products/switches/smart/standalone-smart-switch.aspx#tab-models

                      pfSense CE on Qotom Q355G4 8GB RAM/60GB SSD
                      Ubiquiti Unifi wired and wireless network, APC UPSs
                      Mac OSX and IOS devices, QNAP NAS

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        I got my tplink switch last night, plugged it in this morning..  Not seeing any rx bad packets, but have not connected my AP to it yet.  I put it on my wlan 20, but it is a bit concerning that you can not remove vlan 1 from ports.  I don't think its anything you can not work around - but I think it means that the management IP is listening on any vlan that is untagged.  So while if you change the pvid of a port you would be able to hit the management IP from any port on the switch.. Not really a security concern in a home or smb, etc. but would be an issue in a enterprise setup for sure.

                        I want to make sure there is no cross traffic being seen on other ports, etc.  I changed the pvid of each port to 20.. So even if I send vlan 1 traffic to the switch it should not be seen on any of the ports since their pvid is 20.  So it should not send say vlan 1 broadcast traffic to those ports even though its according to the web gui in vlan 1 untagged and vlan 20 untagged.

                        I have a theory that the rxbadpkts your seeing my be tagged packets for a vlan that is not setup on the switch - be easy enough to test once I hook up a AP to it tonight.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • P
                          pfBasic Banned
                          last edited by

                          Interesting, I found other users posting on forums that they had issues with the switch and VLANs.

                          The only VLANs I have configured on my AP are the two VLANs I configured on the switch?

                          1 Reply Last reply Reply Quote 0
                          • P
                            pfBasic Banned
                            last edited by

                            Any thoughts on this?

                            http://www.ebay.com/itm/XMS-1008P-Web-Managed-Switch-8-Ports-Gigabit-RJ45-120W-PoE-2-Ports-Gigabit-SFP-/292104784519?hash=item4402cd4a87:g:~OgAAOSwt0FZCWjV

                            a lot of PoE and seems pretty cheap.

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              So just moved one of my AP to the tplink switch.. And yeah showing bad pkts on both the uplink to my other switch (port 1) and the AP port 4..

                              Hmmm.. Now to figure out what it is marking as the bad packets..

                              tplinkbadpkts.png
                              tplinkbadpkts.png_thumb

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • N
                                n3by
                                last edited by

                                TL-SG108E used now just as dumb switch without VLANs:

                                Screenshot_2017-05-04_17-21-14.png
                                Screenshot_2017-05-04_17-21-14.png_thumb

                                1 Reply Last reply Reply Quote 0
                                • P
                                  pfBasic Banned
                                  last edited by

                                  @johnpoz:

                                  So just moved one of my AP to the tplink switch.. And yeah showing bad pkts on both the uplink to my other switch (port 1) and the AP port 4..

                                  Hmmm.. Now to figure out what it is marking as the bad packets..

                                  Very interesting, thank you again for taking your time to check this out!

                                  1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by

                                    I did not see any issues with any of my traffic on this switch.. It just seems to be cosmetic.. I think its marking tagged packets as bad or something but just passing them on anyway.

                                    Seems to have been a cosmetic issue going all the way back to 2015.. V1 of the hardware.
                                    http://forum.tp-link.com/showthread.php?83046-High-RxBadPkt-on-TL-SG108E

                                    This weekend I can do some more testing, the lack of being able to remove vlan 1 from a port just seems wrong.  But not like you can't work with it.  vlan 1 is nothing but an untagged vlan, doesn't really matter what the ID of that vlan is if untagged ;)  So in your network it could be any other vlan ID since its untagged.

                                    I will connect a device to one of the ports and generate a specific number of tagged packets and see if matches up to the counter for rxbadpkt..

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • P
                                      pfBasic Banned
                                      last edited by

                                      Well, I ultimately ended up spending a bit more and replacing my TPlink with a Zyxel GS1900-8HP (rev. B1). It was at the top of several review lists, has a lot of features and seems to be regularly maintained by zyxel.
                                      https://www.amazon.com/ZyXEL-8-Port-Gigabit-Ethernet-Managed/dp/B00GU1KULM
                                      Youtube Video

                                      $99 got me
                                      70W PoE over all 8 ports
                                      Fanless
                                      A whole lot more management options than the TPlink (apparently it even supports CLI if you prefer that).
                                      No more errors with VLANs and AP's
                                      Port security features
                                      (haven't tried LACP yet but will tonight or tomorrow, that didn't work on the TPlink but might just have been my fault.)

                                      As far as packet errors go, it doesn't seem to have any errors although it does show a LOT more info about packets and I haven't found a list defining all of these things yet.

                                      
                                      Port 3 Interface mib Counters
                                      ifInOctets		193064453
                                      ifInUcastPkts		1040622
                                      ifInNUcastPkts		25277
                                      ifInDiscards		0
                                      ifOutOctets		3580667467
                                      ifOutUcastPkts		2662483
                                      ifOutNUcastPkts		42464
                                      ifOutDiscards		0
                                      ifInMulticastPkts		13033
                                      ifInBroadcastPkts		12244
                                      ifOutMulticastPkts		40423
                                      ifOutBroadcastPkts		2041
                                      
                                      Port 3 Etherlike mib Counters
                                      dot3StatsAlignmentErrors		0
                                      dot3StatsFCSErrors		0
                                      dot3StatsSingleCollisionFrames		0
                                      dot3StatsMultipleCollisionFrames		0
                                      dot3StatsDeferredTransmissions		0
                                      dot3StatsLateCollisions		0
                                      dot3StatsExcessiveCollisions		0
                                      dot3StatsFrameTooLongs		0
                                      dot3StatsSymbolErrors		0
                                      dot3ControlInUnknownOpcodes		0
                                      dot3InPauseFrames		0
                                      dot3OutPauseFrames		0
                                      
                                      Port 3 RMON mib Counters
                                      etherStatsDropEvents		0
                                      etherStatsOctets		193064453
                                      etherStatsPkts		1065899
                                      etherStatsBroadcastPkts		12244
                                      etherStatsMulticastPkts		13033
                                      etherStatsCRCAlignErrors		0
                                      etherStatsUnderSizePkts		0
                                      etherStatsOverSizePkts		913897
                                      etherStatsFragments		0
                                      etherStatsJabbers		0
                                      etherStatsCollisions		0
                                      etherStatsPkts64Octets		87730
                                      etherStatsPkts65to127Octets		851661
                                      etherStatsPkts128to255Octets		18500
                                      etherStatsPkts256to511Octets		21092
                                      etherStatsPkts512to1023Octets		18395
                                      
                                      
                                      1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator
                                        last edited by

                                        If your going to spend 100$ and you have unifi AP why would you not just have gotten the unifi switch?  Even though looks like nice price point and way more features than the tplink stuff, looks to support syslog and snmp and lldp.. Nice..

                                        This is weekend was Derby - so didn't get to do anything on the switch.. But sure just looks to be cosmetic errors is all.. Have seen zero issue with anything..

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          MontTech
                                          last edited by

                                          I'll second the Cisco SG300/500 line…..Have several hundred of them in our network and little to no issues.

                                          1 Reply Last reply Reply Quote 0
                                          • P
                                            pfBasic Banned
                                            last edited by

                                            The ubiquiti switch looks great, the reason I went with the zyxel is it looked like it offered the most features at the lowest price point.

                                            The ubiquiti switch looked to me like it offered:

                                            • Less PoE budget
                                            • Less PoE ports
                                            • Excellent customer support
                                            • Better GUI
                                            • Better brand name

                                            Ultimately I was already going over what I wanted to spend by getting the Zyxel so I didn't want to spend $10 more.

                                            It seems like the zyxel checks a lot of the boxes and offers a lot at a great price point. Right now I only "need" the one PoE port, but I'll be moving relatively soon and probably adding another AP, and in the future probably 1-2 IP cams and possibly VOIP. My network will eventually outgrow 8 ports but for now I thought having >4 ports of PoE might last me longer. And even when I outgrow the 8 ports I'm thinking I could just connect to a larger switch and use up to 7 of the ports as PoE?

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.