PF-Sense Netgate

Pfsense XG-7100-1U

Netgate XG-7100-1U

For securing and optimizing my own network,
I decided to buy a new Router – Netgate XG-7100-1U – and I haven’t regret it at all.

The hardware is:
CPU: Intel “Denverton” Atom C3558 2.2 GHz with QuickAssis – 4 Core
Memory: 8GB DDR4 Non ECC  – Storage: 32GB eMMC Flash
Network: 2x 10GbE Intel x553 SFP+ Ports
8-port 1Gbps Marvell 88E6190 switch uplinked at 5 Gbps to Intel SoC (2x 2.5 Gbps) for LAN

So for getting the best knowledge – I startet out here in the Documentations and there’s many hours of reading – and well – you can always learn some more.
But had some whishes to my Solution:

  • Managing several Subnets
  • Managing several IP
  • Move external Administration to OpenVPN access.

My zone setup would like something like this:

  • ADMIN –> administration interface – access to switch,IPMI,Router and others
  • LAN –> All LAN klients, printers, Accesspoints, TV etc
  • Private DMZ –> Access for private DMZ for customers
  • Public DMZ –> DMZ zone for Mail, spam and Webserversw
  • WAN –> Public IP as /29 subnet.