New Ubiquiti setup! Still a work in progress.

[Farish]

Doesn't that switch only have gigabit ports? Seems a waste with 2gbps internet

Mine is the multi-network solution from ViewQwest, comes with 2 x 1gbps links.

 

[dryteletubby]

Mine is the multi-network solution from ViewQwest, comes with 2 x 1gbps links.

Its still overall 2Gbps, you will only effectively get 1Gbps throughput with your setup.Ubiquiti 10Gigabit (XG series) will be more suitable for you.

 

[Farish]

Its still overall 2Gbps, you will only effectively get 1Gbps throughput with your setup.Ubiquiti 10Gigabit (XG series) will be more suitable for you.

Sorry, I don't quite understand what u mean.. The Pro4 can handle up to 2.5Gbps throughput.. Am I missing an important piece of information?

 

[dryteletubby]

Sorry, I don't quite understand what u mean.. The Pro4 can handle up to 2.5Gbps throughput.. Am I missing an important piece of information?

If I remember correctly the usg pro 4 or any unifi gateway for the matter doesn't support hardware lacp (link agregation to get above gigabit speeds from combining 2 ports) it does this by software which is much slower (less than gigabit speeds) the mode I assuming you are using is policy based routing (to let certain services or devices use it own network) also will not be hardware offloaded and has to be done by software (slower). Don't quote me on this my knowledge on unifi equipment is not exactly up to date. Maybe you should ask on ubiquiti forum for confirmation.

 

[mrkiasu]

little cute NAS

That's a cute little NAS.

Till date, no LACP support for USG-PRO4, only load balancing and fail-over.

The LACP would be at the switch, Mr Farish could setup LACP on his Synology NAS with the Unifi switch.

Mr Farish's next target would be the USG-XG, coming soon. 10Gbe USG.

 

[hawthorne]

I'm in the process of moving from my Asus RT-AC78U to ubiquiti. Now waiting for all the different hardware to be delivered.

I've noticed that the USG only has a basic firewall and not those more complex vulnerability protections like the Aiprotect implementated in Asus routers.

My friend recommended me the Sophos UTM, which has a free home license (for up to 50 devices) Only thing is u need to buy a PC (fanless?) and install it yourself. Surfed ard and seems like fanless PC chassis is not commonly available in SG.

Would like to check TS and fellow bros if u have other recommendations.

 

[dryteletubby]

I'm in the process of moving from my Asus RT-AC78U to ubiquiti. Now waiting for all the different hardware to be delivered.

I've noticed that the USG only has a basic firewall and not those more complex vulnerability protections like the Aiprotect implementated in Asus routers.

My friend recommended me the Sophos UTM, which has a free home license (for up to 50 devices) Only thing is u need to buy a PC (fanless?) and install it yourself. Surfed ard and seems like fanless PC chassis is not commonly available in SG.

Would like to check TS and fellow bros if u have other recommendations.

The Asus firewall is sort of a cloud based system that checks your network traffic with trend micro. The usg probably have a more flexible rule based firewall system.

I personally use pfsense and it has a IDS/IPS (snort)and plenty of other add-ons.

For the hardware any old desktop around an i3 will do. get a pci network card if your motherboard only has one LAN port.

 

[ridney]

I'm in the process of moving from my Asus RT-AC78U to ubiquiti. Now waiting for all the different hardware to be delivered.

I've noticed that the USG only has a basic firewall and not those more complex vulnerability protections like the Aiprotect implementated in Asus routers.

My friend recommended me the Sophos UTM, which has a free home license (for up to 50 devices) Only thing is u need to buy a PC (fanless?) and install it yourself. Surfed ard and seems like fanless PC chassis is not commonly available in SG.

Would like to check TS and fellow bros if u have other recommendations.

Any reason why it has to be fanless? I would prefer to have active cooling on devices running 24/7

 

[-Grift-]

Any reason why it has to be fanless? I would prefer to have active cooling on devices running 24/7

If it’s Low powered enough like a NUC I don’t see why not

 

[Farish]

The Asus firewall is sort of a cloud based system that checks your network traffic with trend micro. The usg probably have a more flexible rule based firewall system.

I personally use pfsense and it has a IDS/IPS (snort)and plenty of other add-ons.

For the hardware any old desktop around an i3 will do. get a pci network card if your motherboard only has one LAN port.

The upcoming Hades Canyon NUC will have dual ethernet ports...

 

[dryteletubby]

The upcoming Hades Canyon NUC will have dual ethernet ports...

There are plenty of NUC sized pcs with multiple ethernet ports. Even netgate the makers of pfsense appliances have systems similar to a nuc in size. Intel mostly offer premium offerings that are quite expensive. Hopefully they have lower priced options.

 

[hawthorne]

Any reason why it has to be fanless? I would prefer to have active cooling on devices running 24/7

For quiet and low powered, cos will need to on it 24/7

If it’s Low powered enough like a NUC I don’t see why not

I have a couple of NUC and they dun have dual NIC

The upcoming Hades Canyon NUC will have dual ethernet ports... Dun like the idea of using a USB NIC too

Dun want to spend too much on it lar. Lol. For a rig, I dun mind Hades Canyon. But a bit too overkill for this purpose

 

[zuoom]

Intel nuc usually single port no?

 

[dryteletubby]

For quiet and low powered, cos will need to on it 24/7

I have a couple of NUC and they dun have dual NIC

Dun want to spend too much on it lar. Lol. For a rig, I dun mind Hades Canyon. But a bit too overkill for this purpose

maybe get one of these?

 

[hawthorne]

maybe get one of these?

Thanks. I was considering that too

 

[Mach3.2]

maybe get one of these?

I have the i5 5250U version running pfsense on ESXi, for the price you really can't beat it.

 

[dryteletubby]

I had the i5 5250U version running pfsense on ESXi, for the price you really can't beat it.

what other VMs you run on it since it only has a dual core cpu?

 

[moron+genius]

Wats advantage pfsense have over consumer router? Speed?

 

[-Grift-]

Wats advantage pfsense have over consumer router? Speed?

Probably for the flexibility and compared to a consumer router a significantly higher performance cpu for better routing, qos etc

 

[dryteletubby]

Wats advantage pfsense have over consumer router? Speed?

Ubiquiti,mikrotik and other consumer routers depend on specialised hardware for most simple routing functions. Enabling more advanced routing, firewall and VPN will force the router to use its (slower) CPU.

Pfsense has add on support in the form of packages. Most popular are the intrusion detection firewall, web filter, and cache server etc.

More advanced routing like ospf and rip routing are probably not available on consumer routers but I believe the edgerouter line has it.

There is a list of features on pfsense website