Moving to 2Gbps internet connection -what router

[Westy1]

One of my clients is a charter school that just signed up for a 2Gbps internet connection, versus the 1Gbps connection they've had the last 3 years. I'm struggling to find a router that can handle that bandwidth, as well as do other functions we need such as vlans with dhcp service, etc. does anyone have any suggestions? the school has no internal servers, heavy reliance on cloud based services such as Google Workspace, hosted SIS, etc.

[ZeroHour]

Is it a straight DHCP allocated IP address?

[Westy1]

No, they have a static public IP

[CrootUK]

Are you also meaning your firewall? What is currently installed? What does the ISP have installed and what connection type do they provide to you as the customer?

 

Is there an expectation for this same box to have web-filtering etc on it or is that managed separately? Would need more info to offer a solution.

[localzuk]

I think we may need a little more info about the network setup. In the UK, ISPs generally provide a router which terminates on your network, and then, depending on the ISP, the connection either goes into the core switch (this is how it works for us, we have an fibre connection from our ISP router to our HPE Aruba core), the ISP router handles the lan routing (usually smaller schools and more education focused ISPs), or we put our own router in between the switch and the ISP router (basically the first setup, split into 2 devices).

 

How is your connection terminated?

[Westy1]

what the school currently has is a 1Gbps ethernet handoff from the ISP to a Zyxel router/firewall, which also handles web filtering, etc. and dhcp services for several vlans. on the LAN side, the router connects to 1Gbps switches.

 

what the ISP is now offering is a 2Gbps fibre handoff. I am struggling to find a suitable firewall/router that will handle the 2Gbps fibre handoff. I thought a new Xyxel router with SPF ports would do the trick, but they only handle 1Gbps traffic.

[Jcx500]

I know companies have used some super micro boxes with opnsense or pfsense for 2gb + connections

[XiJ]

Would a Mikrotik cloud router do the job? They have sfp+ ports.

[Westy1]

Have to be honest- I have no idea what your response means.

 

- - - Updated - - -

 

I will research that. thanks.

[Tefters]

Sonicwall NSA series will do the job of your firewall, DHCP, vLans and VPN.

Your ISP will provide the modem.

[Davit2005]

DHCP and vlans, should not be a big ask for a router/firewall. When it comes to intervlan routing, notably IDS/IPS that is when you are likely to see the impact.

 

I'd too look at a some sort of solution that uses pfsense either a Netgate with pfsense installed or a third party appliance with pfsense installed with enough ports to satisfy your needs.

 

MikroTik is an option but they can be quite complex but they are cheap for what you get, I've had many versions at home but always found the firewall side a bit hard to grasp so only use them for their 10Gb switches these days or core routers.

Edited August 23, 2023 by Davit2005

[localzuk]

I the key thing you need to know is the format the connection your ISP is giving you - if it is a fibre link, you'll need a router with a SFP+ port, so you can then get a suitable optical transceiver module to fit it.

 

Zyxel appear to make one device that can handle it, the USG2200, but its a £8800 box. You can 100% get a cheaper solution than that. As you appear to want filtering, firewalling and inter-vlan routing, you're going to want to speak to companies like Sophos, Sonicwall etc... You're looking for some form of USG rather than specifically a router.

[Westy1]

Thanks for all the responses. I think collectively you've given me the direction I need to go.

[MisterTechMan]

If the ISP are supplying the modem, I would reccomend Watchguard firewall - we use different models accross our sites.

 

The technical support has always been great.

[Wave9_Lee]

One of my clients is a charter school that just signed up for a 2Gbps internet connection, versus the 1Gbps connection they've had the last 3 years. I'm struggling to find a router that can handle that bandwidth, as well as do other functions we need such as vlans with dhcp service, etc. does anyone have any suggestions? the school has no internal servers, heavy reliance on cloud based services such as Google Workspace, hosted SIS, etc.

Sophos XGS firewall is cost effective for this - you get the bonus of included features such as VPN, traffic-shaping, multi-WAN failover, and basic firewall for no extra cost. You can add web filtering and advanced threat protection for a reasonable price if needed. https://assets.sophos.com/X24WTUEQ/at/7wf85vbnnqf939bbhtxgfk/sophos-firewall-br.pdf

[Westy1]

thanks I'll take a look

[Wave9_Lee]

Sophos XGS firewall is cost effective for this - you get the bonus of included features such as VPN, traffic-shaping, multi-WAN failover, and basic firewall for no extra cost. You can add web filtering and advanced threat protection for a reasonable price if needed. https://assets.sophos.com/X24WTUEQ/at/7wf85vbnnqf939bbhtxgfk/sophos-firewall-br.pdf

Should have said, no router required with this. Base spec models will do the throughput with an SFP - If you want to turn on the advanced protections/features, you just need to be conscious of load and think about a beefier box - let me know if this is the plan and I can help you with sizing, cheers