reminder: everytime someone PMs me with switch questions instead of posting them in this thread, I waterboard the nearest innocent child
I'm new to L3 switches as well, knowing the concept for some time though.These two Amp devices start audio synced and get async by time. Is there any setting to avoid something like this? Or should I focus on the devices?
Inbox zero new year resolution!? :-D
I'm using Untangle - u50xw (although I don't use the wireless on it except guest network, have Ubi APs off of it)What Router is everyone pairing these monsters with?
I'm in-between routers at the moment, having used Mirotik, Unifi USG, EdgeRouter, and rolling my own Linux versions with VirtualSwitch... I'm going to build my own again using custom hardware and Xen for isolation (like QubesOS). But for right now, I need a stop gap until I have the time.
Was recently using AdvancedTomato but development seems to have stalled since 2017 with no more shibby releases. Looking for something to stay patched.
I no longer have the USG which would have been dirt easy to match the Unifi APs I have again with all the VLANs.
Was thinking of picking up a Mirotik RouterBoard but kind of don't want to spend a lot of time configuring it. And used USGs on ebay are too much $$$ IMO.
I am running a Dell R220 with Pfsence.What Router is everyone pairing these monsters with?
I'm in-between routers at the moment, having used Mirotik, Unifi USG, EdgeRouter, and rolling my own Linux versions with VirtualSwitch... I'm going to build my own again using custom hardware and Xen for isolation (like QubesOS). But for right now, I need a stop gap until I have the time.
Was recently using AdvancedTomato but development seems to have stalled since 2017 with no more shibby releases. Looking for something to stay patched.
I no longer have the USG which would have been dirt easy to match the Unifi APs I have again with all the VLANs.
I am running Pfsence on a Dell R220 with a Intel quad nic.
it been about a year since I installed it. it's a big upgrade from my consumer Asus router.
Was thinking of picking up a Mirotik RouterBoard but kind of don't want to spend a lot of time configuring it. And used USGs on ebay are too much $$$ IMO.
Yeah I've ran pfSense on my UP Board Squared SoCs for a while and they are great. I just feel dirty running something with that much PHP in it.I am running a Dell R220 with Pfsence.
it's been running great a huge upgrade from consumer router
I have just Add on card and that's for my intel quad gigabit card. I just wanted some thing better than the built in Broadcom nic. if I move to another system and move the intel nic I dont have reconfigure all the ports.Yeah I've ran pfSense on my UP Board Squared SoCs for a while and they are great. I just feel dirty running something with that much PHP in it.
I take it you have an add-in card for multiple 10 Gbps links? That was my plan for my next custom Linux build to have speed across the VLANs.
just handle inter-vlan routing in hardware on the switch, no reason your firewall should be seeing 10gbE trafficYeah I've ran pfSense on my UP Board Squared SoCs for a while and they are great. I just feel dirty running something with that much PHP in it.
I take it you have an add-in card for multiple 10 Gbps links? That was my plan for my next custom Linux build to have speed across the VLANs.
just handle inter-vlan routing in hardware on the switch, no reason your firewall should be seeing 10gbE traffic
But what if you are opening/restricting specific TCP ports across the VLANs? E.g., I want to limit VLAN20 to only access VLAN10 IPs over port 443 and nothing else. Isn't that a Layer4/router-level firewall rule outside of the switch?Yes. For basic firewalling and NAT you can use just about anything.
...
Assuming you do all of your inter-VLAN routing on the ICX switches, the Traffic never hits one of these devices unless it is to/from the Internet...
I use a pfSense box I built with an i7 and some i340-t4, i350-t2 and x550-t2 intel network cards.What Router is everyone pairing these monsters with?
I'm in-between routers at the moment, having used Mirotik, Unifi USG, EdgeRouter, and rolling my own Linux versions with VirtualSwitch... I'm going to build my own again using custom hardware and Xen for isolation (like QubesOS). But for right now, I need a stop gap until I have the time.
Was recently using AdvancedTomato but development seems to have stalled since 2017 with no more shibby releases. Looking for something to stay patched.
I no longer have the USG which would have been dirt easy to match the Unifi APs I have again with all the VLANs.
Was thinking of picking up a Mirotik RouterBoard but kind of don't want to spend a lot of time configuring it. And used USGs on ebay are too much $$$ IMO.
I haven't received my switch yet (7250-48P) so I can't explore the commands.
The best thing to look at for this will be the Security Configuration Guide. You can register and download for free on the Ruckus site. Look for "Extended ACL Lists", as those allow you to add L4 source/destination information. To say that the use of these ACLs is flexible is an understatement... and unlike a consumer router, applying many/complex ACLs has zero performance hit as it is all done in hardware.I haven't received my switch yet (7250-48P) so I can't explore the commands.
But in that link, it shows just IP permit/deny, no TCP Ports.
Are you saying TCP ports are another parameter?