I manage an architect firm of 30 persons.

I installed them a 'random' router from bestbuy (about $100). At the time they where 10 architects. Now they've grown to 30+ and are now experiencing a sluggish network connection (specially to access the Internet).

An enterprise grade router is way more expensive, how do I know this is what they need to solve there problem. Is there another way to tackle this?

TOPOLOGY: Everyone is plugged to a good switch, which is plugged to the router which is plugged to cable modem.

thank you


You will know that an enterprise grade router is what they need after you've:

  1. Analyzed ingress and egress traffic patterns and plotted them out over time.
  2. Taken sflow or netflow samplings and considered what the results mean for your organization
  3. Sampled data to determine who is using the network connection for what types of traffic.
  4. Implemented QOS to prioritize more important traffic and determine if that could solve the problem.
  5. Analyzed the latency of the network at all times of day to determine what could be an ISP issue and what is likely congestion on the local network.

Oh wait, a random router from bestbuy for $100 can't do those things. Ayup, it's time for an enterprise router. =)

In seriousness, you may be able to pull off a few of the above things with an off-the-shelf SOHO router. They're becoming increasingly advanced - but don't let that deceive you. Raw feature sets do not imply reliability or accuracy. I've seen more than my share of SOHO routers that touted a broad feature set but couldn't actually deliver the goods when it came crunch time.

Most importantly, you need traffic samples to determine who is doing what and when. You'll then likely want to use QOS as your first line of defense against congestion. Outright blocking of trouble sites could also be used depending on the leadership's backing. Finally, simply determine how much bandwidth they reasonably need to use and compare it to the available bandwidth on their ISP connection. If it's not enough, you'll need to discuss with them the possibility of upgrading their WAN connection.

Also consider rogue latency in the equation. I'd set up SmokePing and bounce ICMP off of several distant systems to get a long term understanding of the network's issues with latency.

One possibility is to get a cheap, low-cost connection and divert junk traffic over it. Then get a line that has an SLA and divert the most important traffic over that. As an example, at one organization I worked for we had two 20Mb Cable connections as our junk traffic connection for web browsing and other non-essential services. We had a leased T connection with an SLA as our pipe for important services like email, interfacing with our bank and etc. Most business class routers/firewalls can handle WAN failover for a reasonable price (less than $1,000).

You don't need to go bonkers and get an ASA 5510 or anything. SonicWall makes good firewalls for SMBs as well as large enterprises. You could roll your own edge device using a Linux Firewall distro like Pfsense or you could use a UTM distribution like Untangle or ClearOS. Another option is a UTM appliance like Endian. All of those devices can be done for well under $1,000 and have a litany of services you can offer your employer.

  • I installed DDWRT so I have much more stuff to work with. – code-gijoe Dec 16 '11 at 17:16
  • 3
    @code-gijoe I have the utmost contempt for DD-WRT and its unreliable, vicious, wicked, tarnished, horrifying ways. However, I wish you the best of luck and joy in your endeavors. =) – Wesley Dec 16 '11 at 17:34
  • @WesleyDavid - I second your contempt for DD-WRT. In my experience it barely works in a "home" environment. It is disastrous to use for any real work. – user62491 Dec 20 '11 at 21:31
  • There's a reason why enterprise grade routers aren't just home ones with a few more ports nailed on and an install of DD-WRT. – Rob Moir Dec 20 '11 at 23:01

Don't just assume that buying a new router is going to help. It doesn't sound like you have any usage statistics for the Internet connection. If your users are saturating the connection (downloads, Internet "radio", etc) then buying a new router won't help the problem. While a consumer-grade router may be a bottleneck it's far more likely that the Internet connection itself is the problem.

If your Ethernet switch is managed you should be able to, at the very least, get transfer counts on the port where the current router is connected. That could be helpful in determining how much of the slowness is due to exhausted bandwidth on your Internet connection (by showing the traffic flowing in and out of that port).

If your switch isn't managed you might consider using a disused PC with a couple of NICs and a Linux-based router distribution as a stopgap until you can gather data. As long a your Internet connection is less than 100Mb/sec a PC of even early 2000's vintage would be able to keep up.


Cable Modem? What kind of internet connection does the firm have? If it's a cable, there's a good chance it has slower upload, which can negatively impact user experience when surfing internet.

We were in a similar situation. Firm started out small and got by with a cheap DSL. As company grew, we started suffering slower connection. Of course when we tried to convince management to switch to faster connection, they just couldn't do it. Going from $50 - 70 a month to a few hundred (for bonded T1s, Metro Ethernet whatever) seemed just too much to them... Also the management got hung up on the 8-10MB speed (which is just DOWNLOAD) of Cable and didn't understand why they had to pay more for supposedly slower speed of 2 bonded T1's.

Btw, there are many WAN packages where more robust routers are included.

  • Thx, ISP can go up to 120Mbps but the company is kind of cheap on this so probably they wont get anything better. – code-gijoe Dec 20 '11 at 23:07

I've found that a great solution for a small office like that is:

ASA 5505 (unlimited license) - don't use for routing - just internet access Cisco SG300 Switches (support Layer 3 static routing, VLAN, etc) - do the routing here and segment into a few VLANS (accounting, servers, DMZ, etc)

This has worked great for my < 100 user clients. Of course - make sure you have a reliable ISP.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.