[ale] So, who do we like for a new 4 port gigabit LAN/WAN Firewall Routers these days?

[Raylynn Knight]

The Linksys, D-Link and NETGEAR devices are all likely running ancient versions of Linux with known vulnerabilities.   The D-Link unit uses a SOC that is no longer supported by its vendor.  

A better choice in the Ubiquiti line is the EdgeRouter 6P, but it is more than double the cost of the EdgeRouter 10X.  The 10X and the ER-X both use the same MediaTek MT7621A Dual Core MIPS processor used in a lot of wireless routers.  

Ubiquiti has a better track record of updating there firmware than any of the other 3 vendors by a large margin.

Ray

> On Feb 24, 2021, at 8:57 PM, Neal Rhodes via Ale <ale at ale.org> wrote:
> 
> Thanks for all the replies.   Not sure how to justify the cost of pfSense.   some people might get scared off by a .org in a vendor's name.
> 
> Independently, my quick shopping list was:
> 
> Linksys - Router - Black/Blue Model:LRT214 BestBuy $129.00
> https://www.bestbuy.com/site/linksys-router-black-blue/5577457.p?skuId=5577457
> Linksys - Dual WAN Gigabit VPN Router Model:LRT224 SKU:5155908 $189
> 
> D-Link Unified Services Router AC1000Ethernet (DSR-250) $153.99
> https://www.staples.com/D-Link-DSR-250-Service-Router/product_IM1PF8312?ci_src=17588969&ci_sku=IM1PF8312&KPID=IM1PF8312&cid=PS:GS:SBD:PLA:Paper&gclid=Cj0KCQiAj9iBBhCJARIsAE9qRtBduxsKHo0KUP0VkamKupjb-4n6RpRz3xkmvRKiI2zN1Q8cUFs-mwIaAoe9EALw_wcB
> 
> NETGEAR Insight Managed VPN Business Router (BR200) $110.99
> https://www.amazon.com/NETGEAR-Insight-Managed-Business-Router/dp/B08GL497XL/ref=asc_df_B08GL497XL/?tag=hyprod-20&linkCode=df0&hvadid=459641872450&hvpos=&hvnetw=g&hvrand=8791842045526538736&hvpone=&hvptwo=&hvqmt=&hvdev=c&hvdvcmdl=&hvlocint=&hvlocphy=9010783&hvtargid=pla-979199789173&psc=1
> 
> I guess the Ubiquiti Networks EdgeRouter 10X ($109) and Ubiquiti Networks® ER-X EdgeRouter™ X 5-Port Advanced Gigabit Ethernet Router ($59) could go on that list.
> 
> - For both of those, do you just pick one of the ports to be the WAN port?
> - Can you pick one to be a DMZ port?
> 
> Since we're already using all 4 LAN ports on the Cisco, seems like more than 4 would make some sense if the cost isn't too high.
> 
> regards,
> 
> Neal
> 
> On 2021-02-24 14:42, Raj Wurttemberg via Ale wrote:
>> Agreed on the Ubiquity stuff.  After my pfSense dies I'll probably switch to
>> Ubiquity.  My internal network is all Ubiquity (managed switch, Wi-Fi
>> controller, APs) and it runs beautifully.
>> VPN and IPSec is easy to setup as well.
>> /Raj
>>> -----Original Message-----
>>> From: Ale <ale-bounces at ale.org> On Behalf Of DJ-Pfulio via Ale
>>> Sent: Wednesday, February 24, 2021 2:27 PM
>> <snip>
>>> Ubiquiti - Less nerdy, but with support and enterprise capabilities.
>>> Ubiquiti routers and switches. Good 1-button patching. I'd go this way
>>> if I needed PoE or integrated wifi controls in a dashboard. GigE isn't any
>>> issue. Don't know about built-in VPN support.
>> <snip>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> https://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> https://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo