Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Question about switchs to be used between WAN CARP and ISP's

    HA/CARP/VIPs
    3
    15
    159
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • SipriusPT
      SipriusPT last edited by SipriusPT

      Hello everyone,

      I am setting up two netgates XG-7100 to be used with High Availability, but I really dont know want kind (and even models or brands) of switchs I should use for WAN side, for this purpose, and the issues that I could encounter.

      I am looking for two desktop switches with 4 or 8 ports at maximum, with at least 2 SPF+ ports, and dont want to buy cheap (with possible weak hardware...) manageable switchs for 30โ‚ฌ used at home or small offices, to add in a system like this. I am looking for something around 100โ‚ฌ or a bit higher, with a good MTBF

      Thanks in advance!

      DaddyGo 1 Reply Last reply Reply Quote 0
      • DaddyGo
        DaddyGo @SipriusPT last edited by

        @sipriuspt said in Question about switchs to be used between WAN CARP and ISP's:

        I am looking for two desktop switches with 4 or 8 ports at maximum, and dont want to buy cheap

        Hi,

        maybe it won't disappoint you:
        https://mikrotik.com/product/css610_8g_2s_in

        johnpoz 1 Reply Last reply Reply Quote 1
        • johnpoz
          johnpoz LAYER 8 Global Moderator @DaddyGo last edited by johnpoz

          You don't find many higher end switches in such a low port density to be honest.

          10 ports is normally lowest they go.. You could look at the sg350-10 models, if budget is not a concern you could look to say the SG350X-8PMD model.. That give you poe and multigig ports.. plus two sfp+ ports..

          The sg300-10 are still available, they are not eos let. This is your 8 ports, with 2 combo ports as bonus.

          The 350x models are stackable - which is what i would think you would be looking for if your wanting to setup a HA configuration.

          DaddyGo SipriusPT 2 Replies Last reply Reply Quote 1
          • DaddyGo
            DaddyGo @johnpoz last edited by

            @johnpoz

            if we have so much money ๐Ÿ˜‰ , we prefer this instead of the SMB series Cisco:
            https://www.cisco.com/c/en/us/support/switches/catalyst-3560cx-12pc-s-switch/model.html

            johnpoz 1 Reply Last reply Reply Quote 1
            • johnpoz
              johnpoz LAYER 8 Global Moderator @DaddyGo last edited by

              Yeah those would work ;)

              DaddyGo 1 Reply Last reply Reply Quote 1
              • DaddyGo
                DaddyGo @johnpoz last edited by DaddyGo

                @johnpoz said in Question about switchs to be used between WAN CARP and ISP's:

                Yeah those would work ;)

                Iโ€™m not a MikroTik fan (Cisco is my love:)), but I got a switch like this in my hand....

                with this switch chip Marvell 88E6193X and it has serious performance in addition to simplicity

                I surprised...

                BTW:

                I replaced my "mobile" test switch which was a TP-Link TL-SG105E (because VLAN and port mirror, etc.) for this Mikrotik stuff

                1 Reply Last reply Reply Quote 1
                • SipriusPT
                  SipriusPT @johnpoz last edited by SipriusPT

                  @johnpoz I forgot to mention that my budget is an issue lol, in this case I am looking for something around 100โ‚ฌ or a bit higher, with a good MTBF (I have updated my previous post).

                  @DaddyGo I will check that mikrotik, it has a very small finger print, and good features such as 2 portas with SPF+ with 11 years of MTBF . Do you know if its possible to fix it well using only one support on rackmount? From what I am seeing its possible to have two aligned in just 1U.

                  Thank you both for the help!

                  DaddyGo SipriusPT 2 Replies Last reply Reply Quote 0
                  • DaddyGo
                    DaddyGo @SipriusPT last edited by

                    @sipriuspt said in Question about switchs to be used between WAN CARP and ISP's:

                    Do you know if its possible to fix it well using only one support on rackmount? From what I am seeing its possible to have two aligned in just 1U.

                    As I have just tried, it seems possible...

                    I hope not a little DIY is far from you ๐Ÿ˜‰ as the "rack ears" need to be redesigned,
                    and the two units must be connected from the inside, but there are holes for this with screw thread.

                    The two units next to each other are shorter 1 - 2 cm than the standard 19 ", therefore, the "ears" must be reshaped using a saw.
                    Overall, I say 20 minutes of work

                    046a05eb-d8bc-4c59-8e8b-a2bd7192bc3c-image.png

                    d342df86-2e4c-400e-8ffc-823d15139ffc-image.png

                    1 Reply Last reply Reply Quote 1
                    • SipriusPT
                      SipriusPT @SipriusPT last edited by SipriusPT

                      I've found one with 4 SPF+ ports,

                      https://mikrotik.com/product/crs305_1g_4s_in

                      with MTBF of 20 years. Seems like its dificult to found a small print to use just a few ports. I have read a review saying that can overheat when using both 4 ports, but since it will be on a server room with AC, it will not be a problem.

                      https://mikrotik.com/product/crs305_1g_4s_in
                      https://www.youtube.com/watch?v=bUmIzmuWtEs&ab_channel=LawrenceSystems

                      I've only used HP smartswitchs, but from what I have saw on Lawrence Systems channel, it seems to be easy.

                      I totally forgot that if needed, I would have to use 3 ports SPF+ ports at least, one from ISP, and the other two for firewalls WANs ...

                      What do you think about this unit @DaddyGo and @johnpoz ?

                      DaddyGo 1 Reply Last reply Reply Quote 0
                      • DaddyGo
                        DaddyGo @SipriusPT last edited by DaddyGo

                        @sipriuspt said in Question about switchs to be used between WAN CARP and ISP's:

                        I have read a review saying that can overheat when using both 4 ports, but since it will be on a server room with AC, it will not be a problem.

                        This is also good stuff.
                        We only use it as an optical form converter because it actually overheats with 4 x 10Gig SFP.

                        I do not recommend this to you as it is very sensitive to SFP modules and only accepts few SFP modules.
                        It works almost exclusively with Cisco and MikroTik compatible modules.

                        as you can see in the picture, we also leave empty slots next to each other due to warming up, the house (cassis) in which he lives ๐Ÿ˜‰ is too small, and poor ventilation due to few holes...

                        d672c16a-e6a7-46ae-8776-9497f8149a03-image.png

                        MOBO 37 celsius ๐Ÿ˜‰ with 2 pcs. SFP

                        39731ed4-2124-4485-bb59-d29f948c3cb5-image.png

                        +++edit:

                        jah and it is also in an air-conditioned room...

                        SipriusPT 1 Reply Last reply Reply Quote 1
                        • SipriusPT
                          SipriusPT @DaddyGo last edited by

                          @daddygo thank you a lot for those photos and screenshots!

                          I dont have an idea of expected temperatures per port. In this environment I dont have temperature sensors in SFP ports to have a reference.

                          Regarding that switch MOBO, seems a bit high under AC (assuming a AC running at the lowest temperature, ~17ยบC), with two devices, it was under what kind of traffic usage (almost idle, youtube, mails, web,...) ?

                          For now, I just need 1Gbp per port, but in future 10Gbps could be needed per port. On firewalls side, there are SPF+ free ports, to be used in the future, for both LAN and WAN. In terms of WAN usage, right now, I am using VPNs (one site-to-site, and two client-to-side), around 70 devices with internet access. There are backups being done through VPN site-to-site as well as to third party storages, so sometimes we have around 100Mbps for each backup being done in simultaneously for a couple of days per week.

                          When you also say that SFP modules are very sensitive, can you be more precise?

                          Thanks a lot for the help!!

                          DaddyGo 1 Reply Last reply Reply Quote 0
                          • SipriusPT
                            SipriusPT last edited by

                            Seems like this model with 4 SFP+ ports, as a 8 port model with a hugh upgrade on heatsink:

                            https://mikrotik.com/product/crs309_1g_8s_in#fndtn-gallery

                            @DaddyGo have you ever used this one?

                            DaddyGo 2 Replies Last reply Reply Quote 0
                            • DaddyGo
                              DaddyGo @SipriusPT last edited by DaddyGo

                              @sipriuspt said in Question about switchs to be used between WAN CARP and ISP's:

                              I dont have an idea of expected temperatures per port. In this environment I dont have temperature sensors in SFP ports to have a reference.

                              if your switch can read DDM / DOM information and you buy DDM / DOM capable SFP modules you can see the temperature and other parameters:
                              https://en.wikipedia.org/wiki/Small_form-factor_pluggable_transceiver
                              and f.e.: https://community.fs.com/blog/how-to-view-the-ddm-information-of-optical-transceiver-via-snmp.html

                              @SipriusPT sirius "When you also say that SFP modules are very sensitive, can you be more precise?"

                              each manufacturer has a module compatibility chart...
                              https://wiki.mikrotik.com/wiki/MikroTik_SFP_module_compatibility_table

                              well, for this model (CRS305) of MikroTik, this allows very few other manufacturers
                              (many manufacturers limit these parameters / modules, to buy their branded MikroTik SFP module)

                              BTW:

                              on average, in a well-cooled switch, this value is between 35 and 45 (50) degrees Celsius

                              1 Reply Last reply Reply Quote 0
                              • DaddyGo
                                DaddyGo @SipriusPT last edited by DaddyGo

                                @sipriuspt said in Question about switchs to be used between WAN CARP and ISP's:

                                have you ever used this one?

                                Yes
                                it is a device with dual boot ability that can run both RouterOS and SwOS

                                RouterOS requires a lot of learning as it has a completely different philosophy than a standard SOHO device

                                I've been working with MikroTik devices for a long time and sometimes I still scratch my neck, but it's pretty professional stuff anyway ๐Ÿ˜‰

                                +++edit:
                                for an SMB (small office!) optical core switch, it can be an excellent choice

                                1 Reply Last reply Reply Quote 0
                                • DaddyGo
                                  DaddyGo @SipriusPT last edited by

                                  @sipriuspt said in Question about switchs to be used between WAN CARP and ISP's:

                                  Seems like this model with 4 SFP+ ports, as a 8 port model

                                  if you want a specifically "SFP" switch I recommend this: https://www.cisco.com/c/en/us/support/switches/sg350-10sfp-10-port-gigabit-managed-sfp-switch/model.html
                                  (stable reliable but no 10Gig option)

                                  and you can use such RJ45 copper modules too:
                                  https://www.fs.com/de-en/products/23681.html
                                  (there are plenty of SFP manf. codes available)

                                  5a61dd0b-dc90-4d9e-add4-91af54dd1d3c-image.png

                                  I can still recommend for 10Gig:

                                  https://www.ui.com/unifi-switching/unifi-switch-16-xg/
                                  (here you have to reach into your wallet, deep down)
                                  ๐Ÿ˜‰

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post

                                  Products

                                  • Platform Overview
                                  • TNSR
                                  • pfSense
                                  • Appliances

                                  Services

                                  • Training
                                  • Professional Services

                                  Support

                                  • Subscription Plans
                                  • Contact Support
                                  • Product Lifecycle
                                  • Documentation

                                  News

                                  • Media Coverage
                                  • Press
                                  • Events

                                  Resources

                                  • Blog
                                  • FAQ
                                  • Find a Partner
                                  • Resource Library
                                  • Security Information

                                  Company

                                  • About Us
                                  • Careers
                                  • Partners
                                  • Contact Us
                                  • Legal
                                  Our Mission

                                  We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                                  Subscribe to our Newsletter

                                  Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                                  © 2021 Rubicon Communications, LLC | Privacy Policy