SG-2100 supports AES-NI??

Beard

Hello everyone!!

I want to improve my security in my home network at home, so I'm thinking to buy a Netgate SG-2100.

My network is actually tuneling to ExpressVPN with a Linksys 1900ACS on DD-WRT.

I would like to know if I can replicate in a netgate SG-2100 plus pf sense firewall, 3 VLAN.
Does anyone knows if Marvell Armada 3720 (88F3720) CPU support AES-NI?

Thanks

Beard

JKnott

@beard

My understanding is that, with an ARM CPU, it doesn't support AES-NI. I recently bought a Qotom Q350G4 4200U with i5 CPU, 4 GB of memory, 32 GB SSD and 4 Ethernet ports. It's apparently a very popular computer for use with pfsense and works well. It supports those instructions.

jimp

The SG-2100 has a SafeXcel cryptographic accelerator, which is different than AES-NI, but it does accelerate AES cryptography.

Beard

@jknott said in SG-2100 supports AES-NI??:

Qotom Q350G4 4200U

Thank you very much @jknott
I looked at it on amazon, I see its a mini pc, I'm very far
to be a well trained on this matters. I guess I should install PF sense in it and creating a boot command to work as a router

I appreciate your comments

Beard

Thank you @jimp for your comments

Do you have experience with ExpressVPN tunneling?

On website they say:
"If your router does not support AES-NI, you may experience occasional speed issues while using the OpenVPN manual configuration"

I have read some forum members complaining about losing connectivity after seconds or minutes, I wonder if that could be the reason.

Sadly, cause I'm live in a not free speech country I need to be tunneling all my traffic

Thanks again Jim

JKnott

@beard

You just download pfsense and install it from a USB stick. You then have pfsense, just as you would with Netgate gear. There's no need for any boot command. Just turn it on and go. When you install from the USB stick, press F11 to cause it to boot from it. Also, you can use the Del key to get into the BIOS, where you may want to change the power restore setting. The choices are off, on and previous state. Since mine is on a UPS, with APCUSD running, I picked on.

There are different sources for the Qotom. I got mine from AliExpress and it was shipped from Hong Kong. It's also available under other names. It's also cheaper than the SG-3100, but provides better performance.