Searching for a consumer-grade router that supports subnetting and firewall features.
Searching for a consumer-grade router that supports subnetting and firewall features.
I typically handle SMB to enterprise routers/switches/firewalls and need something budget-friendly for home use. I'm searching for a wireless router that meets these requirements: access control options, port subnetting capability, guest network setup, and a consumer price under 250 dollars. The communication paths should follow your outlined network structure, with specific ISP modem connections and designated trusted devices. You mentioned a few examples—do you have any particular models in mind or would you like me to suggest alternatives that fit this profile?
Are you looking for something basic? Most consumer items work well on a single L2 network. I’d recommend a device like a MikroTik or edge router—it offers all the necessary capabilities at a budget of under $100. Pair it with an access point such as a UniFi Nano HD, and you’ll have solid Wi-Fi plus those features for around $250.
What bandwidth do you require? Do you need IPS or a top-tier VPN? If you're not handling significant bandwidth (under roughly 500 Mbps) and don't use IDS or high-speed VPNs, this should suffice. Check out the Mikrotik RB750GR3 page or consider an edge router at ui.com/edgerouter-x.
It's quite a mistake not to mention the usage details. I wouldn't expect a device to reach 100Mbps at once, especially since most of the heavy load happens after that switch. There are no VPNs or IPS involved—just normal traffic moving through. I'm only looking at those inter-port ACLs to restrict access. I'm checking both Mikrotik and EdgeRouter options. Any suggestions would be appreciated?
Just sharing this for everyone's reference:
- I'll keep using my ISP's wireless router/modem combo instead of buying a new one.
- Chose an Ubiquiti EdgeRouter X and will set up rules as described in my first post.
- Configuring DHCP static MAPs for trusted network devices, including the smartphone.
- Setting up NATs/port forwards for specific items needing access from the wireless network behind the ISP.
- Creating a rule to restrict phone access to trusted network ports.
- Budget-friendly options: Edge Router X at $85 and cabling at $14.
- Thanks to Electronics Wizardry for all the assistance!
Based on the needs you've outlined, I recommend pfSense. The software is free to use, compatible with your hardware, or you can purchase ready-made kits. https://www.pfsense.org/products/ Adding a Raspberry Pi with Pi-hole provides a solid foundation. https://pi-hole.net Cheers!