I bought new hardware and it is finally all here. New pfsense hw is a lenovo tmm m720q with a dual sfp+ card, and two switches, a cisco sx550x-12f (got a really good deal on it) and a sg550x-24p.
That's it. If you had the opportunity to start over, what would you do different?
My old setup was (still is currently) router on a stick. A little aliexpress Intel Celeron 1037u dual-nic machine that was perfect for years and years (no aes-ni). It has a lacp link to a cisco sg300. WAN comes into the sg300 switch, both pfsense nics are lacp link to the switch.
I was planning for the new setup to be a similar router on a stick. The hardware (switches) are overkill but the sx550x was stupid-cheap. I'm seeing a lot about transit networks/links between pfsense and a l3 switch. It's been a REALLY LONG time since I studied for ccna: probably 15 years and I haven't used any of it in the last 10. I feel like I'm more dangerous now with what I have forgotten than if I was ignorant and blindly following a tutorial.
It's just a house, not an AWS DC... But I do work from home and 1.2-1.7gbe speeds would be nice at times. I'd be thrilled with 2.5gbe all the time and I don't need anywhere near 10gbe. Am I foolish for thinking I can keep everything in L2 mode and let pfsense deal with the heavy lifting?
That's it. If you had the opportunity to start over, what would you do different?
My old setup was (still is currently) router on a stick. A little aliexpress Intel Celeron 1037u dual-nic machine that was perfect for years and years (no aes-ni). It has a lacp link to a cisco sg300. WAN comes into the sg300 switch, both pfsense nics are lacp link to the switch.
I was planning for the new setup to be a similar router on a stick. The hardware (switches) are overkill but the sx550x was stupid-cheap. I'm seeing a lot about transit networks/links between pfsense and a l3 switch. It's been a REALLY LONG time since I studied for ccna: probably 15 years and I haven't used any of it in the last 10. I feel like I'm more dangerous now with what I have forgotten than if I was ignorant and blindly following a tutorial.
It's just a house, not an AWS DC... But I do work from home and 1.2-1.7gbe speeds would be nice at times. I'd be thrilled with 2.5gbe all the time and I don't need anywhere near 10gbe. Am I foolish for thinking I can keep everything in L2 mode and let pfsense deal with the heavy lifting?