Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




8 posts

Wannabe Geek
+1 received by user: 2


Topic # 129439 16-Sep-2013 10:29
Send private message

Hello,

I just got Telecom UFB installed. I was hoping to use my TP-LINK W8970 router but have discovered it doesn't support VLAN tagging.

Does anyone have any suggestions on a router/switch capable of handling two or more IPSEC VPNs? 

WiFi is a nice-to-have. I could reuse my existing router for that.

Lastly, I'm hoping to spend under $500. 

I saw this related post but that was over a year ago. Something like the Draytek 2130 sounds good. Networking isn't my strong suit so I'm concerned pfSense and other software will be over my head. I also want to avoid having to build anything.

Any suggestions would be much appreciated. 

Create new topic
27568 posts

Uber Geek
+1 received by user: 7026

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 896240 16-Sep-2013 10:57
Send private message

I guess the question if whether you're wanting a replacement for your router or wanting a $50 fix to get your TP-Link going. For $500 you'll get something that's a million times more powerful that a TP-Link but it depends exactly what your requirements are.

My favorite router right now is the Mikrotik RB2011 but if you have no technical knowledge you're going to struggle to configure it.

3445 posts

Uber Geek
+1 received by user: 441

Trusted

  Reply # 896254 16-Sep-2013 11:06
Send private message

My only concern with using a Mikrotik for IPSEC is whether it has the CPU power to handle it. Lots of them have 400mhz CPU so your not going to get much throughput.... Using something that runs on x86 hardware with higher CPU speeds or an offload board would give you better performance perhaps?

We use PFsense and can get 200mbps IPSEC comfortably.





 
 
 
 




8 posts

Wannabe Geek
+1 received by user: 2


  Reply # 896258 16-Sep-2013 11:15
Send private message

I've got one main IPSEC connection I need working. I have two more but I use them seldomly. I'm fine using SSL VPN software for those other two, in the rare occasions I need it.

I would like to replace the TP-LINK. I've had a steady stream of problems/annoyances. 

I'm not planning on doing anything advanced with the device. Assuming it has an easy to use web interface, I should be able to setup the PPPoE, VLAN 10 and IPSEC connection(s) I need. I'm not planning on doing anything more with it, aside from setting up WiFi if it came with it.

3837 posts

Uber Geek
+1 received by user: 1552

Subscriber

  Reply # 896276 16-Sep-2013 11:20
Send private message

I personally run a virtual instance of pfsense at home and that works really well. Don't use IPSEC but everything is relatively easy to set up as the GUI is quite nice and presents everything nicely.

If it was for a business I would just use Cisco gear. Probably 800 series for small business seeing as the 500 series is EOL. Like sbiddle says though, start at $500 and work your way up.



8 posts

Wannabe Geek
+1 received by user: 2


  Reply # 896298 16-Sep-2013 11:48
Send private message

Thank you everyone.

I think I'll try the Mikrotek. Appears the RB2011UAS-2HnD-IN would do the job for me.

27568 posts

Uber Geek
+1 received by user: 7026

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 896304 16-Sep-2013 11:58
Send private message

bluestreak: Thank you everyone.

I think I'll try the Mikrotek. Appears the RB2011UAS-2HnD-IN would do the job for me.


What is your network knowledge like? If it's basic you're not going to be able to configure a Mikrotik without a steep learning curve.



8 posts

Wannabe Geek
+1 received by user: 2


  Reply # 896310 16-Sep-2013 12:10
Send private message

sbiddle:
bluestreak: Thank you everyone.

I think I'll try the Mikrotek. Appears the RB2011UAS-2HnD-IN would do the job for me.


What is your network knowledge like? If it's basic you're not going to be able to configure a Mikrotik without a steep learning curve.


My networking knowledge is moderate. It's not basic but I wouldn't say I'm an expert.

I had a look at a demo site for the RouterOS software and it looked straightforward. 

791 posts

Ultimate Geek
+1 received by user: 79

Trusted

  Reply # 896328 16-Sep-2013 12:26
Send private message

Juniper SRX110
- is a cow to setup tho.But works great.






8 posts

Wannabe Geek
+1 received by user: 2


  Reply # 897062 17-Sep-2013 16:09
Send private message

I got the RB2011UAS-2HnD-IN last night. I was able to setup it for the internet and WiFi relatively quickly. I even managed to change the IP address of the device and local subnet. All my devices work - wired and wireless.

I was fighting with the IPSEC this morning until I realized I made a simple mistake in the config. 

It's an amazing unit, especially for the price, but you are right sbiddle that you need to know what you're doing! I got a local company that sells the units to review my config and help me lock it down.

Create new topic


Donate via Givealittle


Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

A call from the companies providing internet access for the great majority of New Zealanders, to the companies with the greatest influence over social media content
Posted 19-Mar-2019 15:21


Two e-scooter companies selected for Wellington trial
Posted 15-Mar-2019 17:33


GeForce GTX 1660 available now
Posted 15-Mar-2019 08:47


Artificial Intelligence to double the rate of innovation in New Zealand by 2021
Posted 13-Mar-2019 14:47


LG demonstrates smart home concepts at LG InnoFest
Posted 13-Mar-2019 14:45


New Zealanders buying more expensive smartphones
Posted 11-Mar-2019 09:52


2degrees Offers Amazon Prime Video to Broadband Customers
Posted 8-Mar-2019 14:10


D-Link ANZ launches D-Fend AC2600 Wi-Fi Router Protected by McAfee
Posted 7-Mar-2019 11:09


Slingshot commissions celebrities to design new modems
Posted 5-Mar-2019 08:58


Symantec Annual Threat Report reveals more ambitious, destructive and stealthy attacks
Posted 28-Feb-2019 10:14


FUJIFILM launches high performing X-T30
Posted 28-Feb-2019 09:40


Netflix is killing content piracy says research
Posted 28-Feb-2019 09:33


Trend Micro finds shifting threats require kiwis to rethink security priorities
Posted 28-Feb-2019 09:27


Mainfreight uses Spark IoT Asset Tracking service
Posted 28-Feb-2019 09:25


Spark IoT network now covers 98% of New Zealand population
Posted 19-Feb-2019 09:28



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.