Solved DIR-655 died; Need new router - One with the lot please

[TanyaC]

I'm sure I posted something about this a while ago but I can't find it.

My DIR-655 has finally, and totally died. So it's time to replace it, and since I've had a bad run with DLink's I'm willing to look at other brands.

I can do my own research, so I'm not asking anyone to do that for me, but I thought I'd ask just in case any one has such a beast, or knows for sure a brand/model that supports everything I need.

DHCP reservations by MAC address
MAC address network filtering
DDNS, Virtial Server, Port forwarding rules
NAT, WPA2-PSK (TKIP and AES)
IP and port filtering rules
Web filtering by keyword and domain rules
SPI, DDos protection
DNS relay, DHCP server
Time schedules, internal clock (or at least configurable time servers)
QoS
Muticast stream support
N class wireless
PPPoE support (with static and Dymanic IP address configuration
Syslog support
Internal logging...

think that's about it..

 

[fireberd]

I like the Cisco/Linksys routers. I currently have an E3200 model.
I have many devices both wired desktop PC's and wireless including an internet TV, laptop and iPad3. They all work without problems.

I have a cable ISP connection and the installer told me that they have fewer problems with users that have Cisco/Linksys routers than any other brand.

 

[chev65]

It's too bad your 655 died as they are in fact one of the best on the market, I've had mine for 4 years or so and it's always been good for me.

If you can wait awhile the new standard 802.11ac is coming out soon which will be capable of 1gb/s.

 

[TanyaC]

The Billion 7800N so far has almost everything - it seems to be missing the ability to add DHCP reservation by MAC address.

I have wireless for the kids ipods and a laptop that's used wirelessly 2 or 3 times a year. Not interested in how fast that is, fact it's disabled for 16 hours a day. Have a neighbour that keeps trying to get into my wireless network. Kept him out sof far, but the fool keeps trying.

However, the security features are a must for me.

 

[PooMan UK]

I'm a big fan of Netgear products .... does what it says on the tin, easy to use affordable and great support (plus they meet all your requirements) ...

Netgear

 

[TanyaC]

I'm a big fan of Netgear products .... does what it says on the tin, easy to use affordable and great support (plus they meet all your requirements) ...

Netgear

The netgear products that are available here (WNDR 4000, 4500), don't seem to support the independent schedules and ACL functionaility that the DIR-655 does.

 

[kegobeer]

I also recommend the Cisco products. The E series is pretty robust and I'm sure there's a model that would meet your needs.

 

[TanyaC]

Well, I've been through all the Linksys, Netgear, Billion, D-Link, Cisco, and even the low quality/cheapo TP-Link brands. There appears to be no one model that does everything (even the DIR655 and 855 models require a separate modem)

For the most part they are most commonly missing MAC address filtering and/or ACLs (that can use MAC addresses) and or DHCP reservations.

The feed back I've had from a couple of technicians is that MAC address filtering is not built in any more as it is a redundant feature.

So, if you need [want] to prevent people from circumventing security by changing their IP address (MAC filtering and DCHP reservations stopped them dead in their tracks), how would one achieve this in the products available these days?

 

[kegobeer]

MAC filtering is very easily spoofed, so I wouldn't rely on it at all to prevent access to a network. If someone wants access, all they have to do is packet sniff to get an authorized MAC address, then change their MAC to match it - viola, access granted. However, if you want it, the E3000 does DHCP reservation based on MAC address. Plus, if you get a router that supports Tomato or any other custom router firmware, you will definitely gain the ability to filter by MAC.

 

[TanyaC]

MAC filtering is very easily spoofed, so I wouldn't rely on it at all to prevent access to a network. If someone wants access, all they have to do is packet sniff to get an authorized MAC address, then change their MAC to match it - viola, access granted. However, if you want it, the E3000 does DHCP reservation based on MAC address. Plus, if you get a router that supports Tomato or any other custom router firmware, you will definitely gain the ability to filter by MAC.

Can they do that from outside my LAN?

Took a look at the E3000, it is missing other stuff I need.

If DCHP reservations and MAC address filtering are redundant technologies then ...

What can I use to limit access inside my LAN? How do I stop people plugging into my network and getting access to the internet?

And how do I stop people changing their IP addresses to get around any ACLs, schedules, QoS rules etc.. I may have configured?

ie. What are the replacement technologies?

Or is security inside a LAN considered irrelevant these days?

 

[2xg]

My first D-Link router was a DIR-655 also, unfortunately it only worked for me for 2 weeks flawlessly, replaced it with a Netgear Dual-Band router, we've been using it for about 5 months now and it is working so great.

 

[TanyaC]

I think I have found one.... The Billion 7402NX.. So close to doing everything I need.

I might find that I can't fit all 22 of my devices in the MAC adddress filtering (16 wired, 16 wireless - 19 of my devices are wired). It uses ARP tables and in conjunction with the above seems it might do what I need.

The DHCP server looks like it is hard coded for addresses 100 to 199, but I guess I can live with that. Will have to make a few minor programming changes to some stuff, but that's a small price to pay...

Gosh... what an ordeal. My eyes have gone blurry from reading almost every modem/router guide in existence..

http://www.billion.com/product/3g/bipac7402nx-wireless-11n-3G-ADSL2-vpn-firewall-router.html

Priced at around $240 AUD.

 

[solarmystic]

Glad to know you've found a router that (almost) matches your Tinkerer's expectations!

I'm a bit of a cheapo meself when itcomes to Routers so i just went with a TP-Link 1043ND router that was cheapest gigabit/wifi-N one i could find that supports DD-WRT firmware

 

[F5ing]

That is a pretty cool router, and appears does a lot relative to its price.

Just curious though, solarmystic brought up dd-wrt, and there's tomato out there too. Did you evaluate those firmwares by any chance? They do add a ton of features (I think additional features available though are dependent on the router they're installed on). Really is surprising what can be added.

 

[TanyaC]

No, I haven't considering loading any different firmware on to a modem. But since we have broached the subject, what is the impact to the modem's warranty by doing that?

 

[solarmystic]

No, I haven't considering loading any different firmware on to a modem. But since we have broached the subject, what is the impact to the modem's warranty by doing that?

None, i'd presume, if you keep an orginal copy of the manufacturer's firmware backed up prior to flashing your preferred custom firmware. (else you're pretty much up a creek without a paddle )

You could always read the warranty's TnC which is specific to the manufacturer of the modem/router you're buying just to be on the safe side

 

[TanyaC]

Well, this is what my home network looks like now. :shock:

From this you can probably see why I look for so much from a router

And I've just recently removed 2 PC's, and I haven't shown the 2 Latops the boys use for school. Bit short on space.

I'll look into the DD-WRT thing over time. I had a quick read of the website and looks a little too much for me at this time, I really needed to get off this temporary router and onto something better ASAP.

As always, thanks for the advice, support and assistance.

Tanya

 

[solarmystic]

Oh my gosh...

That is like my dream home... Wired CAT 5-e/CAT 6 cabling through the walls, a business grade gigabit managed switch to handle all the connections from the the multitude of devices you've got on different floors no less plus all the additional wireless repeaters/routers for your different floors..

I tip my hat to you TanyaC, managing all that must be a full time job in itself...

 

[jeepmann4x4]

Well, this is what my home network looks like now. :shock:

From this you can probably see why I look for so much from a router

And I've just recently removed 2 PC's, and I haven't shown the 2 Latops the boys use for school. Bit short on space.

I'll look into the DD-WRT thing over time. I had a quick read of the website and looks a little too much for me at this time, I really needed to get off this temporary router and onto something better ASAP.

As always, thanks for the advice, support and assistance.

Tanya

So why didn't you just say it was for a small home network!! :sarc:

 

[TanyaC]

Actually, it's not that much work. I spent a lot of time automating things. The most work is when it doesn't work, and when the kids go on holidays from school. I let them have a little bit more time of the 'net, so I have to change a bunch of schedules for internet on/off time, and automated shutdowns. That's about it.

Who says girls don't get technology... It's that darn microwave oven that's got me stumped