Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Is a sg-3100 what I need?

    Official Netgate® Hardware
    6
    21
    309
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      syl last edited by syl

      I have a basic understanding of networking and not certain the 3100 is what I need. I’m looking to segregate my home network isolating 1 “work” pc that requires dhcp. It only needs internet access and nothing else, but it requires vpn connectivity to an external target.

      Currently I have the inside int of the modem to a Linksys wireless mesh(single internal port also serving dhcp I assume with some type of PAT). This is hooked into a 8 port unmanaged switch serving multiple home computers and one work computer.

      What I would like to have is inside int of the modem hooked to a 3100. 3100 opt1 port connected to work computer only. LAN port from the 3100 hooked to a 24 port unmanaged switch. The switch serving the linksys wireless and multiple other computers.

      My question is can the opt1 port serve a separate dhcp scope than the lan ports? Can it handle 2 dhcp scopes at all? I believe I could go another route and just use a managed switch, but I still need something serving addresses via dhcp and I like the idea of having a pfsense firewall in a small form factor appliance.

      I read through the guide and noticed dhcp could be configured on opt1, but it didnt speak to the lan ports or any type of pat/nat(regardless i never understood the claim of “nat” on soho wap since its not a 1 to 1 translation of ips)

      Any help would be appreciated.

      1 Reply Last reply Reply Quote 0
      • Rico
        Rico LAYER 8 Rebel Alliance last edited by

        Yes you can have one DHCP Server per LAN/OPT interface with no problem.
        If you only need 3 ports in total check out the SG-1100: https://store.netgate.com/pfSense/SG-1100.aspx

        -Rico

        2x Netgate XG-7100 | 11x Netgate SG-5100 | 6x Netgate SG-3100 | 2x Netgate SG-1100

        1 Reply Last reply Reply Quote 0
        • S
          syl last edited by syl

          Appreciate your response. 3 ports is really only what I need right now. I had noticed the 1100, but wasn’t sure if there would also be a performance decrease. If the 3100 vs the 1100 was simply an increase in port count then the 1100 may be the model for me. Sincerely appreciate your response.

          1 Reply Last reply Reply Quote 0
          • chrismacmahon
            chrismacmahon last edited by

            The difference from a SG-1100 to the SG-3100 will be the supported speeds, What is your WAN/Internet connection speed.

            Need help fast? Our support is available 24/7 https://www.netgate.com/support/

            Do Not PM For Help!

            1 Reply Last reply Reply Quote 0
            • Rico
              Rico LAYER 8 Rebel Alliance last edited by

              Well both can do 1 Gbps throughput. ☺
              Sure if you want to run lots of additional packages the SG-3100 would be a better choice.

              -Rico

              2x Netgate XG-7100 | 11x Netgate SG-5100 | 6x Netgate SG-3100 | 2x Netgate SG-1100

              1 Reply Last reply Reply Quote 0
              • johnpoz
                johnpoz LAYER 8 Global Moderator last edited by johnpoz

                @syl said in Is a sg-3100 what I need?:

                hooked to a 24 port unmanaged switch

                Who and the F makes a 24 dumb switch?? Never heard of such a thing.. Biggest dumb switch I have ever seen is 16 ports.

                Oh looks like trendnet makes one - what a F'ing waste ;)

                Oh looks like netgear does as well - who would be in the market for these? Wow... Do yourself a favor and get a "smart" version.. Get one off ebay or something if you have budget constraints.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                1 Reply Last reply Reply Quote 0
                • Rico
                  Rico LAYER 8 Rebel Alliance last edited by

                  HPE OfficeConnect 1420 24G 😌

                  -Rico

                  2x Netgate XG-7100 | 11x Netgate SG-5100 | 6x Netgate SG-3100 | 2x Netgate SG-1100

                  1 Reply Last reply Reply Quote 0
                  • S
                    syl last edited by syl

                    Internet speeds are like 250Mbs here so sounds like either the 1100 or the 3100 would work.

                    As far as the unmanaged switch it’s simply a cost factor for me. I do not need anything other than a “splitter” to multiple devices basically. More than likely most of the ports would be inactive, but my house has about 18 drops in various rooms that I would just rather have connected.

                    I’m not a networking guy so it’s possible I’m mixing up the terms. Amazon has numerous 24 port unmanaged switches..

                    1 Reply Last reply Reply Quote 0
                    • johnpoz
                      johnpoz LAYER 8 Global Moderator last edited by

                      And then tmrw your going to want to isolate X from Y, etc.

                      I can understand a budget issues - find yourself a nice "smart" switch off ebay for your budget.. You can for sure just use it as dumb switch today... But tmrw when you need to create a vlan you will be able to.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                      S 1 Reply Last reply Reply Quote 0
                      • S
                        syl @johnpoz last edited by

                        @johnpoz Yeah, I thought about that. I was just trying to cut cost. I need a new tv, an Apple TV, a generac to power my house as I have numerous outages, my kid needs braces, etc..etc..etc..etc

                        1 Reply Last reply Reply Quote 0
                        • johnpoz
                          johnpoz LAYER 8 Global Moderator last edited by johnpoz

                          We all know budgets... We Get it... But really just find a smart one of ebay if you have to save a few bucks..

                          I would love to have 10ge everywhere - but "budget" doesn't allow :( But just because you need "ports" doesn't mean you should get dumb ports. If your moving into the power of a real router like pfsense, at some not too future point your going to wish you had spend the couple of extra bucks and gotten a smart switch.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                          S 1 Reply Last reply Reply Quote 0
                          • S
                            syl @johnpoz last edited by

                            @johnpoz I’ll give it a look. I really just have that one device I need to isolate though. The only reason I’m even doing that is because that is a dedicated work machine. I can’t think of any reason I would isolate anything else.

                            Crap... ok.. you’re starting to convince me..

                            1 Reply Last reply Reply Quote 0
                            • chrismacmahon
                              chrismacmahon last edited by

                              If a geek gets a vlan capable router, he's going to want a vlan capable switch.

                              Need help fast? Our support is available 24/7 https://www.netgate.com/support/

                              Do Not PM For Help!

                              1 Reply Last reply Reply Quote 0
                              • johnpoz
                                johnpoz LAYER 8 Global Moderator last edited by

                                So you have all these devices - are any of them IOT? Do you really trust them? You have anything that floods the network with multicast - pretty much any off the shelf soho shit ;) etc. etc.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  syl @johnpoz last edited by syl

                                  Not really. Most devices run off wireless. Cabled I have 2 pcs for home .. a printer.. and the one work computer i want isolated. I also have a steam appliance, a smart home hub(homeseer) and prob a few other odds and ends. I was already debating buying a managed switch however. But it was 200 more than a non managed one.

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    syl last edited by

                                    I had to look up IOT and I’m not certain really. The only unusual thing i have going on is the smart home and I don’t like the fact that the amazon echo has to go out to the internet to talk to my internal hub sitting 20’ from it. I have various light switches all connected to homeseer that is controlled via Alexa.

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      syl last edited by

                                      I will prob end up with the managed switch route. You guys are right in that I don’t really have a need for it now(that I’m aware of at least), but I might as well fork over the cash than having to buy one in the future. I was holding out as I figured if i installed cameras too then I would need a separate more expensive switch supporting POE. All of my smart home devices are wireless at this time except the hub and echo. I just can;t think of anything I would want to isolate other than that one computer since all the other devices are isolated to some degree being served over WiFi. Obviously I’m not a network admin however..

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10
                                        stephenw10 Netgate Administrator last edited by stephenw10

                                        For $200 (US?) total I expect to be able to get a pretty decent 24 port managed switch second hand. Maybe even with PoE.

                                        What you probably will get with that though is higher power consumption. But you'd probably have to run a new switch for decades to make that back.

                                        5mins on ebay brings up stuff that.... I'm actually considering buying. 😉

                                        Steve

                                        1 Reply Last reply Reply Quote 0
                                        • johnpoz
                                          johnpoz LAYER 8 Global Moderator last edited by johnpoz

                                          For $200 you could get a cisco sg350.. 28 ports.. Its on amazon for like $180 currently NEW!

                                          On ebay your in the $50 budget for 24 port smart switch, etc.

                                          If all your devices are wireless - WTF you need a 24 port switch for? ;)

                                          If your going to put in lots of cameras and multiple AP then ok poe switch might make sense... But if your talking a handful of them, then you can just use poe injectors.. Especially if your on a budget - because poe switches going to cost you more.

                                          BTW - now as stated that you have a vlan capable router, your going to want vlan capable switch - and goes along with that vlan capable APs ;)

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10
                                            stephenw10 Netgate Administrator last edited by

                                            @johnpoz said in Is a sg-3100 what I need?:

                                            BTW - now as stated that you have a vlan capable router, your going to want vlan capable switch - and goes along with that vlan capable APs ;)

                                            Ha. It's a slippery slope! 😉

                                            Not in any way vouching for this device or seller but I'm told I'm not allowed to buy any more second hand switches so...

                                            Steve

                                            Derelict 1 Reply Last reply Reply Quote 0
                                            • Derelict
                                              Derelict LAYER 8 Netgate @stephenw10 last edited by Derelict

                                              That is a good, stackable, PoE, gigabit switch.

                                              Beware that I believe the fact that it is PoE means it is not fanless.

                                              The ICX6430-24 (non-PoE) is fanless.

                                              You also want to confirm if it is a 6430 or a 6450. The item description says 6430 - the description says 6450 which is a base layer 3 switch. The 6430 is not.

                                              Chattanooga, Tennessee, USA
                                              The pfSense Book is free of charge!
                                              DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
                                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                              1 Reply Last reply Reply Quote 0
                                              • First post
                                                Last post