Netgate pfsense XG 7100 Review
HTML-код
- Опубликовано: 8 сен 2024
- Amazon Affiliate Store
➡️ www.amazon.com...
Gear we used on Kit (affiliate Links)
➡️ kit.co/lawrenc...
Try ITProTV free of charge and get 30% off!
➡️ go.itpro.tv/lts
Use OfferCode LTSERVICES to get 5% off your order at
➡️ lawrence.video...
Tesla Referral Program Offer
🚘 www.tesla.com/...
Lawrence Systems Shirts and Swag
👕 teespring.com/...
Digital Ocean Offer Code
➡️ m.do.co/c/85de...
HostiFi UniFi Cloud Hosting Service
➡️ hostifi.net/?v...
Protect you privacy with a VPN from Private Internet Access
➡️ www.privateint...
Google Fi Service Referral Code
📱g.co/fi/r/TA02XR
More Of Our Affiliates that help us out and can get you discounts!
➡️ www.lawrencesy...
Twitter
🐦 / tomlawrencetech
Patreon
🔗 / lawrencesystems
Our Forums
🔗 forums.lawrenc...
GitHub
🔗 github.com/law...
Discord
🔗 / discord
Our Web Site
🔗 www.lawrencesy...
PIA Internet Access Affiliates Link
www.privateint...
How to setup The Switch VLNAS on XG-7100
docs.netgate.c...
#pfsense #Firewalls
![Megan Thee Stallion - Neva Play (feat. RM) [Official Video]](http://i.ytimg.com/vi/TpYTyAaTRts/mqdefault.jpg)
10gbase T support usually ends up being a power problem as the standard SFP plus specification does not provide sufficient power to run most copper adapters
Wow, I didn’t know it came with it’s own council!
I had a roommate in college from the Midwest who, until college, thought Xbox, Playstations, Gamecube, whatever were called “councils” not “consoles”, because the Midwest accent tends to say them either identically or remarkably similarly. Many a chortle was had.
For a device that is $1000 I would expect a dual redundant power supplies in the box?
The reason behind a lack of 10G copper (Cat6, etc)support has to do with power dissipation. The copper SFP+ adapters draw more significantly power than DAC or fiber SFP+ transceivers. With additional power dissipation, you also have additional heat generation, which can cause additional issues, though it's usually just the power dissipation, which is the issue for copper SFP+ modules.
Please keep doing these video, helps a lot for basic understanding before buying this product.
Clear and good review. But what stuck out to me is: $914 to $1310 for a system without redundant power supply? The rest seems pretty standard. You'd have to add a card to get the copper support. At that point may as well build your own or buy a different model.
3:59 Whoever drilled the status and PWR holes was drunk
I bought a Supermicro 5018D-FN8T and I really like it so far with Untangle HomePro. It was much cheaper too which is nice.
Plus Intel nics!
@@TotallyNuss Excellent point that I completely forgot about.
A good alternative to this for high availability might be to use an older dell power edge with dual power supplies , raid and ECC ram. With their iDRAC I have been able to even install the OS remotely.
Yeah but the power draw will be huge, and it won't do 10 gig, and it won't be as reliable still as having two of these. For home users, you don't need to go with these, they'd be massive overkill. A couple of smaller desktop models from Netgate would get the job done.
@@lorcro2000 seeing as you can get 2 NEW PowerEdge T30 systems with 10GigE SFP+ and quad GigE cards added for less than the price of one of these, I'd say it's a better solution.
@@davel8116 Well, that's in the eye of the beholder. I wouldn't buy two tower servers personally. Also CPU's with 80 watt TDP, that's a lot of electricity to just throw away. The 7100 as a whole draws 20 watts at idle.
@@lorcro2000 You're an idiot. Buy one server. The Dell T30 idles around 30w. The cost savings will pay for the power cost delta for the life of the system several times over. And did you see the poor quality of that netgate POS? What a joke.
I have found old power edge servers for under 300 dollars online. That's with several gigs of ram (over 128), dual power supplies, and multiple drives. They usually have two socketed Xeon CPUs with multiple cores. They are rack mountable and sometimes come with quad Ethernet boards with Intel chips. They sound like an airplane taking off at boot time, but they usually go quiet and use much less power after they boot up. They are reliable and I have had no issues. I have been able to update pfsense remotely from an iso image you can upload to the iDRAC. It acts like a virtual cd-rom drive and you have access to the console and can even access the BIOS screen remotely.
I really don’t like how cheap it feels. Edges are really sharp also
Thanks for the review. We have to replace some firewalls soon and I'll probably buy a couple of pairs of these in HA.
sorry to be so offtopic but does anyone know a tool to log back into an instagram account..?
I was stupid lost the account password. I would appreciate any help you can offer me.
@Briar Damon instablaster ;)
Your explanation on the lagg0 is better than the official docs. I have another question. Is the fan supposed to be loud all the time despite the load? Thanks.
Intel blocks most aftermarket SFP+ modules, 'for user safety' and board safety in linux, you have to manually enable it with modprobe arguments, if you use an offspec adapter(which most 10gbase-t modules are due to clones) so if nothing else it could be that
plz do a video on setting up dual wan on XG-7100 .. I've purchased this unit and stuck when when tried to configure secondary wan connection
Thanks for the review, good stuff
@ 2:00, noticing that your saying this model does not support SFP to 10g RJ45, and say it might be an driver issue or something. If a dac, is Direct Attached Copper sfp connectors. then somewhere along the line it tells me that the DAC cable is a passive cable and not a split pair configuration. If you ever have time on your hands and have one of those units laying around, i would encourage you to give it a try and wire an passive configuration with an RJ 45 cable thats capable of passing the 10gigabit speeds. Maybe it can work! not sure, but thinking logically on this situation i think it could work.
Didn't talk about the M.2 SATA port on the other side of the motherboard.
eth starts at 1, instant letdown
Love your content. Great you stick to the same products - build your business around them and can provide consistent results.
I have my opinion over netgate/PFsense for the price....... MikroTik is much better (in my opinion) for routing. Or for clients requiring VPN + all the enterprise features -- Fortigates would be much better solution. Forigates + Unifi.
However, I'm lately finding the TPLink EAP WAP's are much better than the Unifi's for indoor solutions. Dislike the Unifi cloud controller + the call new home logging 'feature'. Dislike Unifi Switches and that it all is with Unifi cloud. Put perhaps for an MSP such as yourself it works as easy to train your staff, its repeatable.
Why would anyone with 10Gbit Internet not take 10Gbit in and route 10Gbit out via DAC to a 10Gbit switch? I guess the other ports are for more reasonable connections like 1Gbit and lower
If you guys are setting up the a VLAN on a single port and can't figure out why it's not working. Make sure both port 9 and 10 are tagged or your VLAN will not work.
yes it's a driver problem - 2:20
I think I connected a 10g RJ45 on such a thing for a customer more than a year ago. 10tek was the brand I believe ..
Hello Tom, tanks for the vídeo. How can i create a interface group betwen Ethernet ports and sfp+ ports? And then create the vlans on top? Thanks in avance
Please please please do a SG-5100.
SG-5100 runs at 200 Mb/s with any kind of firewall rules.. why would you need a review for a $600 paperweight?
@@CookieManCookies Because Tom is never that negative or dismissive in his reviews and I value his opinion and insights.
A+. Thank you
How to set up VLANS in SFP+ Ports
Nice box. Still no ecc it seems :( Thanks for sharing. Saves me buying one and taking it apart :D
Let me ask you this simple question. I want to setup a lagg between two switch ports ETH7+ETH8. I kinda suspect I'm not able to do that. Is the only possible lagg between the virtual ports 9+10?
I wonder if you could do a Video on OPNSense? To highlight other Open Source Router solutions. :-)
I don't have a use case for it
@@LAWRENCESYSTEMS
Ah fair enough 🙂
Hey tom i have a question, might be a dumb one but ill give it a try.
Why would anyone need this kind of speed? 10GB/S???
From my understanding, most companies dont even have these kind of internet speed in there corporete office.
i understand this is more a datacenter product, but still, why 10GB? Examples please.
it would be nice USG pro hardware loaded with ofsense
Just to make sure I understand the switching speed, if I'm just using the two SFP+ ports (ix0 to ix1) I will get 10g passthrough speeds?
Yes
Crappy proprietary power supply. Warranty doesn't prevent downtime. "Yes sir your device is under warranty. We'll ship out your RMA in 6 to 8 weeks. Thank you."
It looks like a Flex ATX power supply. Not proprietary, but a redundant supply would be nice at a price point of $1000
Lol powers out and ya boi over here ran an extinction chord upstairs just to watch a review
What do you recomend on this system, in the other side of the mainboard there are some expansion ports I know one is for M.2 SSD, Netgate sells 250Gb could it be more... or better to put Regular HDD system using SATA interfaces for hard I/O operations? Are current SSD better than one comment I saw on netgate forum about SSD usage?
Consider I do not have a syslog server.
@Chris MacMahon Sales Team on a Technical question?
@Chris MacMahon ok thanks :)
Regular hard drives fail easily. Consider SSDs or enterprise grade HDDs, which have longer MTBF.
can you add mSATA drives as well as m.2?
2:00 maybe because such modules overheat the unit?
How is the fan noise on the rack and desktop models?
very quiet
is that a sim card holder on the motherboard? it looks like it would either be a sim or micro sd card.
What are thoughts in regards to the constant 15-16% cpu utilization? None of our other earlier netgate devices idle that high at the dashboard. I noticed yours does the same in the review.
Doesn't bother me.
@Chris MacMahon The only problem with this is that on our earlier model units do not show a hint of this utilization at the web ui. And this is a higher spec'd unit. I've just come to accept it as base utilization with the dashboard. Whenever we navigate around the dashboard page there are delays on leaving and loading the page. Jumping around the navigation from other tabs we do not see this issue. But its only this model. Just was an odd thing we noted when we got our model. Seeing it elsewhere just lets us write it off as a quirk that they maybe fix at some point.
Wow, why build with 10Gb but unable to do linespeed, typically Cisco style of business that is. Build a supermicro instead and it would be better hardware wise then virtualise pfsense to have higher faulttolerance.
It can do line speed at 10gb
@@LAWRENCESYSTEMS But not really, as you describe in the video. Its not wirespeed/linespeed on all interfaces "8-port 1Gbps Marvell 88E6190 switch, uplinked at 5 Gbps (2x 2.5 Gbps) to Intel SoC for LAN " so your limited in "backplane". So you are limited to 5 Gbit from WAN to LAN. Hopefully you do have Wirespeed switching on the LAN side without asic limitations.
You can define the 10gb ports as want/lan and get 10gb in and out. Or define on 10gb as wan and use 5 of the 8 1gb ports as lan
@@LAWRENCESYSTEMS OK, so if you need to use both sfp+ slots you need a real 10Gbe switch for lan. Still it seems quite American to not have proper capacity inbetween LAN/WAN to avoid congestion and offer what it should have in the first place :)
@@JoelBergmark I have no idea what "seems quite American" means, but clearly this product is not for you and you should chooses a product that has full logical ports instead of SOC shared back plane.
So for home networking would the USG be enough of a firewall or would you still recommend pfSense
Or the EdgeRouter series (models: ER-Lite/ER-X/ER-X SFP). Those are smaller than these Netgate boxes, consumes less power and routes more packets (better Mpps).
how many VPNs can i creater with netgate pfsense XG 7100?
Thanks for your Nice review , can you pls share who is the manufacturer of this Hardware appliance, is it from axiomtek
So using the xg7100 is it possible to use 4 wan on the rj45 ports and load balance and out put to the network using the 10gb sfp+ port?
Load balance yes, aggregate not exactly.
If i pair it up with a 10g fiber switch via dac cable, will it then support the total 10G? kind of disappointed it only supports 5g via ethernet ports... at least give me 8g
The 10G ports can do in and out at 10G
anyone installed memory RAM with out issues?? ddr4?
any limitations to know about?
Netgate prices are TOO EXPENSIVE regarding what we get...
agreed!!! I really want to buy the XG-7100 DT Netgate Appliance but they want $900 for it. that's ridiculous, it should be $450 max
Very Cute , me like :-) , Thanks Tom
*10G interface serving 8 ports at 5G max combined backplane* what a stupidly gimped interface, I can't believe they thought that was a good solution.
Wow, what a rip off. You could easily make a system multitudes more powerful and capable than this one and still spend less than $1000 per device. Thanks for the review, I'll certainly be passing on this firewall/router for my network.
XG? sounds like Sophos...lol
is that a sim slot above the stata ports?
It is a microSD card slot.
Why doesn't netgate put vga ports on their products?
They are unnecessary
This thing is chincy AF is why. This piece of garbage isn't even worth $300, let alone $1000.
Who uses this and for what??.?
Lots of people
@@LAWRENCESYSTEMS what home situations?
We use these in business, but I am sure there are some that have it at home.
Your audio still wonky in second part. Like vox not reacting quickly enough. This is the second video where this has happened.
Piece of crap hardware.