DIR-655 died; Need new router - One with the lot please

I'm sure I posted something about this a while ago but I can't find it.

My DIR-655 has finally, and totally died. So it's time to replace it, and since I've had a bad run with DLink's I'm willing to look at other brands.

I can do my own research, so I'm not asking anyone to do that for me, but I thought I'd ask just in case any one has such a beast, or knows for sure a brand/model that supports everything I need.

DHCP reservations by MAC address
MAC address network filtering
DDNS, Virtial Server, Port forwarding rules
NAT, WPA2-PSK (TKIP and AES)
IP and port filtering rules
Web filtering by keyword and domain rules
SPI, DDos protection
DNS relay, DHCP server
Time schedules, internal clock (or at least configurable time servers)
QoS
Muticast stream support
N class wireless
PPPoE support (with static and Dymanic IP address configuration
Syslog support
Internal logging...

think that's about it..

I like the Cisco/Linksys routers. I currently have an E3200 model.
I have many devices both wired desktop PC's and wireless including an internet TV, laptop and iPad3. They all work without problems.

I have a cable ISP connection and the installer told me that they have fewer problems with users that have Cisco/Linksys routers than any other brand.

The Billion 7800N so far has almost everything - it seems to be missing the ability to add DHCP reservation by MAC address.

I have wireless for the kids ipods and a laptop that's used wirelessly 2 or 3 times a year. Not interested in how fast that is, fact it's disabled for 16 hours a day. Have a neighbour that keeps trying to get into my wireless network. Kept him out sof far, but the fool keeps trying.

However, the security features are a must for me.

I'm a big fan of Netgear products .... does what it says on the tin, easy to use affordable and great support (plus they meet all your requirements) ...

Netgear

PooMan UK said:

I'm a big fan of Netgear products .... does what it says on the tin, easy to use affordable and great support (plus they meet all your requirements) ...

Netgear

The netgear products that are available here (WNDR 4000, 4500), don't seem to support the independent schedules and ACL functionaility that the DIR-655 does.

I also recommend the Cisco products. The E series is pretty robust and I'm sure there's a model that would meet your needs.

Well, I've been through all the Linksys, Netgear, Billion, D-Link, Cisco, and even the low quality/cheapo TP-Link brands. There appears to be no one model that does everything (even the DIR655 and 855 models require a separate modem)

For the most part they are most commonly missing MAC address filtering and/or ACLs (that can use MAC addresses) and or DHCP reservations.

The feed back I've had from a couple of technicians is that MAC address filtering is not built in any more as it is a redundant feature.

So, if you need [want] to prevent people from circumventing security by changing their IP address (MAC filtering and DCHP reservations stopped them dead in their tracks), how would one achieve this in the products available these days?

MAC filtering is very easily spoofed, so I wouldn't rely on it at all to prevent access to a network. If someone wants access, all they have to do is packet sniff to get an authorized MAC address, then change their MAC to match it - viola, access granted. However, if you want it, the E3000 does DHCP reservation based on MAC address. Plus, if you get a router that supports Tomato or any other custom router firmware, you will definitely gain the ability to filter by MAC.

kegobeer said:

MAC filtering is very easily spoofed, so I wouldn't rely on it at all to prevent access to a network. If someone wants access, all they have to do is packet sniff to get an authorized MAC address, then change their MAC to match it - viola, access granted. However, if you want it, the E3000 does DHCP reservation based on MAC address. Plus, if you get a router that supports Tomato or any other custom router firmware, you will definitely gain the ability to filter by MAC.

Can they do that from outside my LAN?

Took a look at the E3000, it is missing other stuff I need.

If DCHP reservations and MAC address filtering are redundant technologies then ...

What can I use to limit access inside my LAN? How do I stop people plugging into my network and getting access to the internet?

And how do I stop people changing their IP addresses to get around any ACLs, schedules, QoS rules etc.. I may have configured?

ie. What are the replacement technologies?

Or is security inside a LAN considered irrelevant these days?