Jump to content

Just a general question :)


G+_Edvardas Rimkus
 Share

Recommended Posts

I have Mikrotik Routerboard RB2011UAS-2HnD-IN (5x 1gig ports, 5x 100mbit ports, and wifi). Not sure when i got it, but updates are still coming for it. I ran out of ports on it so dragged from a cupboard hp procurve 8 port 1 gig switch. After moving to a new place (multiple floors, and big yard) added 2 ubiquity unify mesh access points.

How wife is planning have a work space/office in the basement.

So I was thinking maybe to try to push a replacement of the old router/switch to the new ubiquity stuff, not sure if to go full unify route, or edgerouter and unify switches, or all edge stuff.

Link to comment
Share on other sites

Edvardas Rimkus I'd recommend the EdgeRouter line over the Unifi line of routers every time. The UNMS might still be in beta, but it works very well. The EdgeRouters just have many more features, and if something isn't available in the gui, then you can probably enable it in the command line. The Unifi routers just don't offer the same features for the price.

 

I have both the UNMS and Unifi (for access points) running in the same VM on my hosted server. Shouldn't have any issues running both pieces of software in the same place. Tho I am using the Docker image for the UNMS portion.

Link to comment
Share on other sites

Travis Hershberger I'm on the same boat as Travis - switched to Ubiquiti router a while ago and love the control it gives me. I'm quite security focused, so as long as security leaks are patched quickly Idon't expect to replace it soon. Am actually considering the edgerouter 4 as my router is acting as a firewall between 7 subnets - not just the internet traffic. I think the "4" will add enough power to increase the bandwidth for some of the connections.

Link to comment
Share on other sites

Marco van Laerhoven It's running as a KVM VM on a full server box that I rent. In theory, anything that can run a Docker image should be able to run UNMS. The one thing to be aware of is that it uses HTTP and not HTTPS. That isn't a problem for me because I'm using an Nginx reverse proxy in between that handles the HTTPS tunnel.

Link to comment
Share on other sites

Edvardas Rimkus I am using an edgeswitch, but use it only for layer 2 traffic. Routing is done in my router, fully using its firewall capabilities. Ive setup various vlans in the Edgeswitch too, working nicely. I think there should be no issue routing traffic too , if you don't need a full firewall, is there something specific you think is not supported

Link to comment
Share on other sites

Edvardas Rimkus Routing between vlans is assumed with vlan support, otherwise it'd be pointless.

 

Edgeswitches can have some speed issues when routing between switch ports. This is the one poor area where they're not great if you don't know about this particular quirk where ports 0 and 1 are full ASIC enhanced routing and ports 2,3, and 4 are all just switches with CPU powered routing. So if you overload the CPU, you can run into speed issues.

Link to comment
Share on other sites

Edvardas Rimkus I was thinking about this post, and it occurred to me that in addition to the recommended routers (ER-X, etc), you could buy routers that are known to be compatible with open source distributions. That way, when the manufacturer eventually abandons it, you have the possibility of installing DDWRT, Tomato, etc, and using that instead.

Link to comment
Share on other sites

I agree, get one that supports flashing with other firmware preferably open source. If you listen to Security Now with Steve Gibson there has been a rash of security holes in the home routers over the past couple of years, hard coded backdoor credentials, allowing WAN side management by default, being easily added to a botnet.

 

"Routers are really coming under attack. I don't know when we've had a week in this podcast when we haven't talked about one or more new or newly discovered or newly exploited or big problems with consumer routers." Steve Gibson, grc.com.

 

I still endorse PfSense.

Link to comment
Share on other sites

 Share

×
×
  • Create New...