Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Did you replace an all-in-one device with 3 devices to get pfSense awesomeness?

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 10 Posters 4.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      SquidproxE4thewin
      last edited by

      So I built my pfSense router on a Netgate AUPD4 with a 30 GB SSD :D

      Now I feel I have to purchase at least two more pieces of hardware to completely replace my current router, a Netgear 600N shown here http://www.amazon.com/gp/product/B00IF0JAYE/ref=oh_aui_detailpage_o00_s00?ie=UTF8&psc=1

      First, a modem. I'm considering both of these but haven't picked one yet:
      Zoom 5341 http://www.amazon.com/dp/B0063K4NN6/ref=wl_it_dp_o_pC_S_ttl?_encoding=UTF8&colid=1QTKLV20NZG59&coliid=I2ODBGGQU57S5D
      ARRIS / Motorola SB6121 http://www.amazon.com/ARRIS-Motorola-SurfBoard-SB6121-DOCSIS/dp/B004XC6GJ0/ref=sr_1_1?ie=UTF8&qid=1423528691&sr=8-1&keywords=motorola+surfboard

      Second, I need an access point. Right now I'm eying this one:
      Dlink AC1200 http://www.amazon.com/dp/B00JFOP688/ref=wl_it_dp_o_pC_nS_ttl?_encoding=UTF8&colid=1QTKLV20NZG59&coliid=I28PP11FV87JAQ

      This is turning into an expensive endeavor! So my questions are: Is this the route that any of you went, leaving behind an all in one device to trade it in for 3 separate devices? Should I try and keep the Netgear 600N in the mix somehow? The Netgear is a router so I figured I'd need to ditch it as the research I've done so far makes it seem overly complicated to keep using it (double NAT).

      Any input would be helpful.

      1 Reply Last reply Reply Quote 0
      • DerelictD Offline
        Derelict LAYER 8 Netgate
        last edited by

        If that AC1200 did multiple, VLAN-tagged BSSIDs it'd look like a winner.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • S Offline
          SquidproxE4thewin
          last edited by

          If that AC1200 did multiple, VLAN-tagged BSSIDs it'd look like a winner.

          Does such a device exist for under $200?  :D

          1 Reply Last reply Reply Quote 0
          • K Offline
            kejianshi
            last edited by

            Its true that generally speaking when you replace some cheap junk all in one walmart special modem/router/switch/wifi combo device with pfsense, you generally are looking at a bit of expense.  However, you are also getting generally better modem/router/switch/wifi performance by breaking apart those functions.

            If you don't really care to have or need to have really good network performance, functionality, configurability etc, then don't bother with pfsense.

            Pfsense, is generally speaking, for people who want more than a combo device provides.

            1 Reply Last reply Reply Quote 0
            • stan-qazS Offline
              stan-qaz
              last edited by

              For picking a modem go to your service providers forum (Cox Cable here: http://www.dslreports.com/forum/coxhsi) on DSL Reports and read up on what is working for others in your local area and on your service plan.

              I picked up an Asus RT-AC66U to use as an Access Point, way overkill but I got it dirt cheap and Asus is good about providing firmware updates. They are built into this one so I can open a page and click a link to see if I need to update. I have a couple DLink boxes that are far more hassle to check and updates are few and far between. A lot of small home WiFi routers have an option to be a router or an access point which lets you easily eliminate the NAT issue. Others you can fiddle to work as an AP even if they don't offer it as a configuration option.

              1 Reply Last reply Reply Quote 0
              • T Offline
                thermo
                last edited by

                No I went the other way, replacing several devices with 1 as I started paying UK prices for electricity again.
                An amd low power cpu and board which can do linux kvm virtualisation does the nas, dual band access point and firewall all in one.

                1 Reply Last reply Reply Quote 0
                • johnpozJ Offline
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  I am cable so have already had modem, bought my own years ago that his paid for itself multiple times over vs the $5 a month comcast wanted.  Have a sb6120, for a while I used old wifi routers as AP.  But when I figured it was time to pull the tigger from G, went with a unifi AC - because I wanted to play with AC even though don't really have any ac devices other than a pci card and usb dongle.

                  Cheaper router would of been go with their N model that is only $70..

                  Switch.. I have had smart switch at home for awhile - but move to sg300 and it freaking rocks for a home budget switch <$200

                  I use to run router distro, ipcop before pfsense on old PC so have not been soho router for years and years.  When I when with a esxi box it was a consolidation for me, and allowed me to put my router in VM..  Which is really the only way to do it for home use if you ask me ;)  I can play with any router distro I want with a couple of clicks..  When running non stable code or want to play with pfsense somewhat - take a snap and click back to how it was, etc.

                  Breaking out your devices is really just pure freedom and power..  Why would anyone want a crap soho box??  As to AP.. where your router is never really the best place for AP.. Get a real AP and mount it in the ceiling in the best location for your coverage - or get a few of them if you have large home, etc.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • R Offline
                    rjcrowder
                    last edited by

                    You should be able to setup the Netgear 600N as an access point - i.e. disable the routing functions.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ Offline
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      ^ yeah you can setup any soho wifi router/gateway as just an AP.  Simple as turn off its dhcp server and connect to your network with one of its lan port = AP.

                      Using such a device normally is lacking lots of features that you would get in a real AP..  But sure it will bridge wifi to your wired segment you connect it to - good luck with any sort of vlans or guest networks, captive portals, etc.  You can use pfsense as captive portal but there are not many soho wifi routers that support vlans.  If you can use 3rd party firmware you might be able to get that sort of feature.

                      If your wanting all the goodness, I would look to a real AP or multiple ones to give you better solution.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • S Offline
                        SquidproxE4thewin
                        last edited by

                        @johnpoz:

                        If your wanting all the goodness, I would look to a real AP or multiple ones to give you better solution.

                        Which AP would you consider?

                        1 Reply Last reply Reply Quote 0
                        • stan-qazS Offline
                          stan-qaz
                          last edited by

                          Ubiquity has some really nice gear and I understand they have control software that doesn't need Windows now. That was the reason I passed on them for doing the WiFi here a while back.

                          http://www.ubnt.com/products/#enterprise/wireless

                          From the 3.25 readme, it looks like Unixes aren't well supported:

                          This is UniFi build for Linux/Unix-like system. It is not officially
                          supported / regularly tested.

                          It's basically a package that strips all of the native components

                          Limitations

                          • Auto update (of UniFi controller) does not work
                          • Backup/Restore does not work (see FAQ)
                          1 Reply Last reply Reply Quote 0
                          • DerelictD Offline
                            Derelict LAYER 8 Netgate
                            last edited by

                            Yeah.

                            A downside to the Ubiquiti is you need a controller on Windows/Mac/Linux.

                            An upside to the Ubiquiti is there's a free controller available.

                            The controller doesn't have to run all the time…

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • A Offline
                              asayler
                              last edited by

                              @SquidproxE4thewin:

                              If that AC1200 did multiple, VLAN-tagged BSSIDs it'd look like a winner.

                              Does such a device exist for under $200?  :D

                              If you get a router that supports OpenWRT and includes a vlan-capable switch, you should be able to leverage VLANs and multiple SSIDs on consumer-level gear. That's what I do using one of these: http://wiki.openwrt.org/toh/tp-link/tl-wdr7500. $100 on Amazon: http://amzn.com/B00BUSDVBQ. But you'll need flash and configure OpenWRT to make it do all the interesting stuff. See http://synack.me/blog/openwrt-and-vlans for an idea of what's possible.

                              1 Reply Last reply Reply Quote 0
                              • V Offline
                                Visseroth
                                last edited by

                                I'm using the EnGenious EAP600 and it works great and does VLAN tagging on SSIDs.

                                http://www.amazon.com/EnGenius-Technologies-High-powered-Distribution-EAP600/dp/B009V17BYC/ref=sr_1_sc_3?ie=UTF8&qid=1423648338&sr=8-3-spell&keywords=enginious+access+point

                                1 Reply Last reply Reply Quote 0
                                • DerelictD Offline
                                  Derelict LAYER 8 Netgate
                                  last edited by

                                  Engenius can suck it.

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  1 Reply Last reply Reply Quote 0
                                  • M Offline
                                    mikeisfly
                                    last edited by

                                    @Visseroth:

                                    I'm using the EnGenious EAP600 and it works great and does VLAN tagging on SSIDs.

                                    http://www.amazon.com/EnGenius-Technologies-High-powered-Distribution-EAP600/dp/B009V17BYC/ref=sr_1_sc_3?ie=UTF8&qid=1423648338&sr=8-3-spell&keywords=enginious+access+point

                                    I use the same access point at home, I'm pretty satisfied with it. As far as buying my own modem, I wouldn't buy any modem right now unless it supported minimum 16 downstream channels and minimum 4 upstream channels. You never mentioned who your cable provider is but You want to get a DOCSIS 3.1 modem / EMTA (If you have phone service). Broadcom and others have announced the chips in January and I would expect to see devices on the market by the end of the third quarter. I don't want to put to much proprietary information out there yet but Comcast is working hard to provide a true, not ~700-900 Mbpsgigabit per second internet service tier by the end of 2015 on our Coaxial network.

                                    For those who are on cable please do some research in DOCSIS 3.1 I know a .1 update doesn't sound like a big deal but Cable Labs should have really called it DOCSIS 4.0 there are many many many performance benefits. As a side note we are attacking high speeds from both sides, meaning we are making the coaxial network faster but at the same time we are using other technologies too which I will not go into here but I'm sure other MSOs are doing as well.

                                    1 Reply Last reply Reply Quote 0
                                    • V Offline
                                      Visseroth
                                      last edited by

                                      Outch!

                                      Might I ask why?

                                      1 Reply Last reply Reply Quote 0
                                      • DerelictD Offline
                                        Derelict LAYER 8 Netgate
                                        last edited by

                                        Are you talking to me?

                                        There's a saying about only getting one chance to make a first impression.

                                        I deployed about a half-dozen engenius CPEs a few years ago.  Constant lockups. Resetting them by disabling and enabling PoE, utter lack of support.  The software in these bridges absolutely sucked.

                                        Switched them out for Ubiquiti Nano M5s and have barely touched them since.  The software in the Ubiquitis blew the enidiot crap out of the water - and at a comparable price point.

                                        Never looked back.  Maybe they got better or bought another wireless company that could write code.

                                        Chattanooga, Tennessee, USA
                                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.