Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm looking for product recommendations for a wired router/firewall for a Medium sized company. We have a couple of 48 port GbE switches, so all I need is the router/firewall to connect to our transport (100Mbps ethernet). We have two or three consumer-level WiFi APs and are considering consolidating them into a different topology although that's neither here nor there.

Have used the NetGear Pro line in the past.

Required:

  • DHCP/router for ~50 devices
  • Basic firewall (nothing fancy, just provide some inbound attack protection)
  • Can support up to 100Mbps to the WAN (we've got 80Mbps now, burstable to 100Mbps)

Nice to have:

  • Supports teaming for failover
  • WLAN built-in, or can operate within same vendor's WLAN ecosystem
  • Expandable as our network continues to grow, or at least some sort of upgrade path to bigger networks
share|improve this question

closed as off topic by John Gardeniers, Bryan, Mark Henderson Jan 19 '12 at 20:50

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
Shopping questions are not for SF. Please read the faq –  t1nt1n Jan 19 '12 at 20:28
    
Shopping Questions are Off-Topic on any of the Stack Exchange sites because of their very limited lifespan. See Q and A is hard, lets go Shopping and the FAQ for more details. –  Mark Henderson Jan 19 '12 at 20:50

1 Answer 1

My favourite router is pfSense - it can be used for:

  • DHCP
  • Basic Firewall (as well as more detailed firewalling options) - the snort package may be desireable for extra protection
  • 100Mb no problem, can even fit gig NIC's for more throughput to future proof against WAN upgrade

  • Supports failover using CARP

  • WLAN isn't brilliant, just add access points as needed
  • If you use a reasonable box and decent NIC's, it will probably suit your needs well into the future.

It can do a whole heap more, but I thought I would stick to your requirements.

Only catch is that you need to find a pc to run it on. Where I last worked, we repurposed an old Dell Poweredge 2800 as it was going to be scrapped, and for the backup box I set up an old Dell Precision 370. I never had any problem with the boxes except myself a handful of user errors by myself - never needed to reboot them ever.

Size of these boxes may be undesireable, I personally would have preferred a 1U server, although some people use ALIX boards which are small and drain low power (but they also have puny CPU's that would have done what I needed for VPN encryption).

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.