Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need router for security gates

    Scheduled Pinned Locked Moved Hardware
    20 Posts 5 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Stewart
      last edited by

      @stephenw10

      Yes, the SG-1000 was the one I was thinking of! Does the SG-1100 replace the SG-1000, the MBT-4220, and the MBT-2220? Man, I'd love for the SG-1100 to have options for 2GB or 4GB RAM to add more packages. Not for this situation but as an alternative to the APU2 line of boxes.

      The MBT-4220 was almost perfect at $249 with 2GB RAM, 32GB storage, and even more power than the SG-3100. We nearly switched except it only had 2 ports and we consistently use all 3 for either dual-wan or PCI compliance. (And now it isn't available anymore so I'm glad we didn't switch. They feel like short-lived products even if they are just boxed minnowboards.) The SG-1100 gives the ports and what looks like decent speeds but lacks the RAM to add packages. Maybe that's product differentiation but it leaves quite the gap between it and the SG-3100. Maybe there is an SG-2100 coming down the pike with more resources to fit in between the SG-1100 and the SG-3100? Historically, model names have been all over the place so it would be nice to have some consistency.

      @stephenw10

      I don't know the temps exactly but it sits in an enclosed plastic box with fans in direct sun with 2 modems. I'm guessing it gets up to 140-150 degrees Fahrenheit in there.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        The rated operating temperatures should be up on the store page shortly.

        Steve

        S 1 Reply Last reply Reply Quote 0
        • S
          Stewart @stephenw10
          last edited by

          @stephenw10 Thank you. I'll keep an eye on it. Is there someplace that the performance statistics of the Netgate units are saved? Something like this would make them extremely easy to compare and understand the differences. When I need to get a SonicWall, that's the first thing I look at to make my determination. Primarily the physical hardware and performance on IMIX and Full DPI.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            The closest equivalent is probably this: https://www.pfsense.org/products/ but it doesn't list performance details there.

            Probably best to ping sales direct, they may well have something like that.

            Steve

            1 Reply Last reply Reply Quote 0
            • P
              Phonebuff
              last edited by

              @Stewart

              Interesting needs. I think if this were mine to work I would use the MBT-4220 and a Comtrol ROCKETLINX ES8510-XT Ethernet switch. Let the MBT-220 open a VPN back to a host / proxy for your services and route your Voice (VoIP), data and video back through there.

              Eliminates the second Cable Modem, Eliminates the need for the Static IP and streamlines the whole thing from a support point of view.

              Good Luck -

              1 Reply Last reply Reply Quote 0
              • S
                Stewart
                last edited by

                The MBT-4220 is no longer in production. The second modem is just an analog line for the call box at the gate. It's not an actual extension tied into the system. We've had good success with the NetGear GS110TPv2 switches. They run hot but the temps don't seem to bother them even though they are rated at only up to 104 degrees. Only times they have gone down are because of lightning and it looks to be a few hundred dollars less than that Comtrol. I've had some people recommend BV-Tech as they have a $70 switch that would fit the bill, but I don't know them and don't know their reliability. It's worked for them but I don't know. Netgears have traditionally been great switches for me.

                How would it eliminate the static IP with the VPN? Both sides need to know the IP of the other to establish the link. Otherwise they can't communicate. How do you do that with DHCP?

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  Both sides need to know the IP of the other to establish the link. Otherwise they can't communicate. How do you do that with DHCP?

                  Dynamic DNS usually.

                  The dynamic side updates dynamic DNS when the address changes and the other side connects to that hostname.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  S 1 Reply Last reply Reply Quote 1
                  • P
                    Phonebuff
                    last edited by

                    @Stewart

                    As @Derelict stated you have one side with a static IP the servers / proxy and the other side with a dynamic address updating a service like dyndns or myip.    Sorry, maybe the MBT-2220 then.  The Comtrols are may for your environment the NetGear units are not.    Never heard of the BV-Tech switch either.   The Call Box can be IP as well as Analog, there are a number of people who make then such as Algo and Viking.  Or just use an ATA, but keeping a duplicate modem and service for one extension / phone line seems like trouble.   
                    

                    As the saying goes, Good / Reliable / Cheap... Pick any two.

                    1 Reply Last reply Reply Quote 0
                    • S
                      Stewart @Derelict
                      last edited by

                      @derelict
                      I've never tried DynDNS with with VPNs inside of pfSense. I've always used hard-coded IPs with statics. I can look at that.

                      @Phonebuff
                      I never really expected the NetGear switches to work but other than losing them to lightning strikes they've lasted years. I've got one that's at least 4 years strong at the moment. Initially it's just what we had on hand so we went with it. It's got a lifetime warranty so if it died we weren't out much but a shipping cost. We don't do the gates and call boxes (or the phone system at this particular client). So just giving them an analog line to call out on to ring back to the guard phone is cheap and simple. It's not an extension on a system. It's an outside line that calls in. Up until now it's all been good, reliable, and cheap. Spectrum is just changing that.

                      @stephenw10
                      Looks like it's only up to 113 degrees. Not sure if that would work.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Mmm, might be tight for an enclosed space with minimal airflow.

                        You could just use OpenVPN which doesn't require a remote IP to be set. The client end can connect from any IP if allowed.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • P
                          Phonebuff
                          last edited by

                          By the way, while the MBT-4220 is no longer in stock from Netgate, it is still available from some other sources..

                          Given your space and environmental issues, you might want to find a box with the Internal switch like the 3100 and combine the firewall router and switch to one frame.


                          S 1 Reply Last reply Reply Quote 0
                          • S
                            Stewart @Phonebuff
                            last edited by

                            @phonebuff There are currently 3 devices that connect, 2 cameras (POE) and the gate. We are building out to add LPR cameras so we will need 4 poe, 1 non-poe, and 1 to link to the modem. Any boxes provide 4 poe ports? If not I'd need to make room for 4 additional poe injectors.

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by

                              None of the Netgate devices supply PoE.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • P
                                Phonebuff
                                last edited by

                                You really need an "industrial" switch router for this -- Something like below..

                                You can also get an Industrial Embedded Computer Systems in this category that could run pfSense but you will need to do some research to find one --

                                https://www.trendnet.com/products/industrial-switches/TI-PG541

                                1 Reply Last reply Reply Quote 0
                                • P
                                  Phonebuff
                                  last edited by

                                  One more link --- Not sure this is POE --

                                  http://www.electronicnetwork.com/en/onrisc-baltos-ir5221.html

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.