Gigatown Router/Firewall suggestions

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Gigatown Router/Firewall suggestions

mdooher

Hmm, what to write...
1425 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#180697 18-Sep-2015 10:56

With the advent of Gigatown I find myself in need of a new router. My Draytek is an excellent router but the throughput is simply way to slow.
I can't use the Vodafone supplied router because it is limited to a class C subnet and in any case can't act as a VPN endpoint.

I am hoping someone can suggest a firewall or router with all of the following properties:

1. At least 700mbs WAN to LAN throughput
2. Must be able to act as a VPN endpoint (preferably PPTP L2TP etc, not just open VPN)
3. No Fan
4. Under $1000
5. Must do VLAN tagging on the WAN connection

anyone got any suggestions?

Matthew

lxsw20

3556 posts

Uber Geek

Subscriber

#1389703 18-Sep-2015 14:05

Is it to be your WiFi AP too? Fritzbox 7490 can do all that.

timbosan

2160 posts

Uber Geek

#1389705 18-Sep-2015 14:07

What about Untangle or PFSense?

lxsw20

3556 posts

Uber Geek

Subscriber

#1389720 18-Sep-2015 14:26

timbosan: What about Untangle or PFSense?

What fanless hardware would you recommend with dual NICs?

timbosan

2160 posts

Uber Geek

#1389731 18-Sep-2015 14:45

I run an AMD PC with a dual Intel-NIC card and Untangle, its an old Athlon X2 255, and whilst it has a fan it is silent. But yes true it doesn't fit the "fanless" part. However I would recommend this:

http://techreport.com/news/28300/braswell-quad-powers-passively-cooled-asrock-mini-itx-board

Or if you want more power, the Intel Avaton's are excellent low-power 8-core processors that can run passively:

http://www.anandtech.com/show/7970/asrock-rack-c2750d4i-review-a-storage-motherboard-with-management
http://www.supermicro.com/products/motherboard/Atom/X10/A1SAi-2750F.cfm

The Supermicro board has the advantage of IPMI for remote management and QUAD gigabit Ethernet ports!

mdooher

Hmm, what to write...
1425 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1389796 18-Sep-2015 16:22

lxsw20: Is it to be your WiFi AP too? Fritzbox 7490 can do all that.

I'm not too bothered if it is the access point or not. Handy if it is but since I have multiple access points already it is no big deal.

Matthew

mdooher

Hmm, what to write...
1425 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1389802 18-Sep-2015 16:25

timbosan: What about Untangle or PFSense?

If I really had to I guess I could, but I would like to avoid the whole PC based thing

Matthew

michaelmurfy

meow
13271 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1389832 18-Sep-2015 18:00

Edgerouter Lite - just bought one and will be setting it up tonight.

With a Xclaim XI-3 (made by Ruckus) for WiFi.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1389859 18-Sep-2015 18:24

Mikrotik or Edgerouter.

Aredwood

3885 posts

Uber Geek

#1389876 18-Sep-2015 19:04

Edge router will easily do gigabit pppoe with vlan. But can't do it over IPV6. Also I don't know if the VPN is able to be offloaded. (Edge router uses hardware acceleration for some functions). So check this first if you need the full speed of your fibre connection over a VPN.

using an edge router on my own connection. Works really well.

mdooher

Hmm, what to write...
1425 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1390109 19-Sep-2015 09:44

Ok, I've had a look at some of those suggestions (well looked through the manuals specs etc)

So without having actually used any of these can anyone tell me if right/wrong about the following?

Fritzbox, appears to only do IPsec VPN tunnels (will it work with the MS VPN client?)
edgerouter, appears it needs a radius server for VPN authentication
Mikrotik 2011, the WAN-LAN throughput is not that great.

I'd be very happy to be corrected

thanks

Matthew

chevrolux

4962 posts

Uber Geek
Inactive user

#1390117 19-Sep-2015 10:16

Go for the smallest Mikrotik CCR router.

Rb2011 is really only good for 100Mbps.

Mikrotik's routeros is far far more mature than edgerouter's software. To do anything decent on an edgerouter you will be working on the cli which is just annoying.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1390121 19-Sep-2015 10:26

The RB2011 will handle that sort of speed fine if you use 6.29 or higher and the new Fasttrack feature. It'll struggle otherwise. Any of the higher spec hardware will support it fine. As you'd mentioned a budget of up to $1000 I would have assumed you would have looked at higher spec kit.

Mikrotik hardware beats an Edgerouter hands down in terms of capabilities (unless you like a simple GUI) but has a learning curve to go with it - but to take advantage of most of many of the Edgerouter features you need to go into the CLI anyway since it's just a fork of Vyatta.