Least expensive wired-only gigabit router? (TP-Link Festa FR205? Others?)

[Bill_Stewart]

For the curious, a brief overview:

---

               +----------------+    +-----------------+
               |   DSL Modem    |    |    L2 Switch    |
               | 192.168.0.1/24 |    | 192.168.1.3/24  |
               +-----------LAN--+    +--1--2--3--4--5--+
                            |           |           |
                            +--VLAN 10--+           |
                                                    |
                                 +----VLAN Trunk----+
                                 |
                                 +------------VLAN Trunk------------+
                                                                    |
    +-----------------------VLAN 10------------------------+        |
    |             +------------------+                     |        |
    |             |           +------|---------------------|--+     |
    |             |           |      |      +--VLAN 10--+  |  |     |
    |             |           |      |      |           |  |  |     |
+--WAN-----------LAN--+   +--LAN----LAN----WAN--+    +--1--2--3--4--5--+
|    Wired Router     |   |     WiFi Router*    |    |    L2 Switch    |
| LAN: 192.168.1.2/24 |   | LAN: 192.168.1.1/24 |    |  192.168.1.4/24 |
| WAN: 192.168.0.2/24 |   +---------------------+    +-----------------+
+---------------------+  *LAN static route: 192.168.0.0/24 -> 192.168.1.2

---

The DSL modem runs in "transparent bridging" mode, and it has an assignable LAN IP address. It is physically separated from the wifi router to optimize wifi coverage. Currently the connectivity between the two devices is a pair of powerline adapters. (The powerline adapters are not a bottleneck currently because their throughput exceeds the current Internet bandwidth.)

The goal is to be able to access the DSL modem's web-based configuration interface from the "main" (primarily wifi) network (192.168.1.0/24). The problem is that I can't assign the DSL modem an IP address on the same network ID as my main network (192.168.1.0/24), because this means the wifi router's WAN and LAN interfaces are on the same network (this doesn't work).

The fix was to create a separate VLAN and network ID for the WAN side of the wifi router and LAN side of the DSL modem (192.168.0.0/24 on VLAN 10). To reach the DSL modem's configuration interface (192.168.0.1), a static route is required as shown in the diagram. This configuration prevents the wifi router's LAN and WAN interfaces from being on the same network, and the static route and wired router provide access to the 192.168.0.0/24 network from the 192.168.1.0/24 network.

 

[Tech9]

I don’t see what’s the problem accessing the modem’s interface without all this complication.

 

[Bill_Stewart]

I don’t see what’s the problem accessing the modem’s interface without all this complication.

I can't connect both the wifi router's LAN and WAN interfaces to the same network ID. When I do that, the wifi router gets very confused; this causes all kinds of weird connectivity issues, and the DSL modem's LAN side is not accessible. The only way I was able to make it work was to put the wifi router's LAN and WAN interfaces on two different networks.

 

[Tech9]

I can't connect both the wifi router's LAN and WAN interfaces to the same network ID.

I’m a bit confused. Does the above mean your main Wi-Fi router has private WAN IP 192.168.0.x? If yes - what’s the transparent bridging on the modem for and what is stopping you from accessing 192.168.0.1 upstream? Perhaps I don’t know some modem related specifics.

 

[Bill_Stewart]

Does the above mean your main Wi-Fi router has private WAN IP 192.168.0.x?

The wifi router's WAN interface gets a public IP from the ISP (this is the purpose of the transparent bridging mode of the DSL modem (the DSL modem is not in "router" mode).

I see the confusion because I actually stated this somewhat imprecisely (but it shows in the diagram): The wifi router's WAN interface and the DSL modem's LAN interface are on a different VLAN than the rest of the network.

 

[Tech9]

Got it, still modem specifics. I have a few cable modems in bridge mode and they have accessible management interface on 192.168.100.1 with connected to them routers getting public WAN IP.

 

[Bill_Stewart]

I think it has something to do with how the wifi router handles things when its LAN and WAN interfaces are in the same broadcast domain. Things get weird when that's the case. When I segment the LAN and WAN interfaces onto separate VLANs and separate network IDs, things work perfectly.

 

[sfx2000]

I think it has something to do with how the wifi router handles things when its LAN and WAN interfaces are in the same broadcast domain. Things get weird when that's the case. When I segment the LAN and WAN interfaces onto separate VLANs and separate network IDs, things work perfectly.

On the WiFi router - remember that it can be a router or just an AP...

Depending on the router vendor/model, it might have "AP Mode" - which turns off the routing, firewall, and DHCP/DNS services, but keeps the ethernet and wireless interfaces active...

The internal switch inside the AP should honor the VLANID tags...

LIttle Tip here - when assigning VLAN ID's, use values above 100, as ones below that are sometimes used for internal VLAN's...

 

[Bill_Stewart]

On the WiFi router - remember that it can be a router or just an AP...

Since my DSL modem is running in transparent bridge mode (i.e., not as a router), my wifi router runs as a router rather than simply a wireless access point.

LIttle Tip here - when assigning VLAN ID's, use values above 100, as ones below that are sometimes used for internal VLAN's...

For my little home network, the secondary VLAN ID doesn't really matter. If it really does need to be changed at some point, that's simple enough to do.

 

[Tech9]

Interesting workaround and hey… if it does what you need it to do and with little expense - why not?

 

[drdedus]

hello
for wan fail over which one is suggested between fr205 and ER605 ?
Are those similar products exept the cloud on the fr205?

 

[Tech9]

for wan fail over which one is suggested between fr205 and ER605 ?

FR205 doesn't have stand-alone mode, so ER605.

 

[drdedus]

thank you for replying.
what do you mean stand alone mode?

 

[tgl]

I think what @Tech9 means is that there's no fully-local management method: you must buy into TP-Link's cloud management stuff. They're not the only consumer gear like that, but given TP-Link's well-publicized security issues, I don't think I'd trust them on this.

 

[drdedus]

sounds weird?
so what i can do if i buy this product without paying More?

 

[Tech9]

so what i can do if i buy this product without paying More?

This new product is intended to be used with the new free cloud controller. Did you read the description?

Gigabit VPN Router

Festa FR205 supports Gigabit Ethernet connections on both WAN and LAN ports and multiple VPN protocols, ideal for small business, home office, cafe, retail, and more.

www.tp-link.com

TP-Link

Omada Cloud Essentials offers a free and easy cloud-based management option for the Omada networking system, covering access points, switches, and gateways, ideal for surveillance networks and small businesses without the complexity needed for larger operations.

www.omadanetworks.com

but given TP-Link's well-publicized security issues

Yes, Cisco is much better. The backdoors discovered in their products in the past were not well-publicized.

 

[drdedus]

This new product is intended to be used with the new free cloud controller. Did you read the description?

Gigabit VPN Router

Festa FR205 supports Gigabit Ethernet connections on both WAN and LAN ports and multiple VPN protocols, ideal for small business, home office, cafe, retail, and more.

www.tp-link.com

yes and probably i can get wan backup feature.
it describes 3 wan and a 4g wan for load balancing.
i do not believe there will be not wan backup feature while i can have load balancing .
do i am wrong?

What i did not understand from the previous conversation is about paying a fee for enable the feature because there is no fully-local management to do it.

is this true?
is it written or did someone noticed a similar situation?

i saw only the below
"Festa currently offers free cloud access for centralized management and reserves the right to apply fees in the future."

also how likely is it to happen in the future?

 

[Tech9]

Currently the cloud controller managing this router is free. It's called Essentials and has limited set of features. Most likely it will remain free for the life of the product. Not sure why we even discuss this specific niche product (FR205) when something tested and working well for multi-WAN (ER605) is about $60 and readily available. FR205 is a product made for convenience. You configure the device in location A and ship it to location B. Your folks there receive it and just plug it in. You manage it remotely after and they do nothing. Good for parents home, if you run few hair salons small business or tire shops. Places you manage from home and don't expect any IT knowledge from people living/working there. This is what it is for. This is the reason it doesn't have local stand-alone operation mode. No one is expected to manage it locally. Specific product for specific use case, different than what you want.

So one more time the answer to your question in post #31 - you better get ER605 for local dual-WAN fail over/back purposes, not FR205. With ER605 you can do what you want without any local or online Omada controllers. Just plug it in and configure multi-WAN in its own stand-alone UI.

 

[drdedus]

thank you for all the answers.
i am asking about fr205 because i was thinking that are basically same products except the cloud which is a welcome need.
i did not knew that the fr205 didn't include local web interface.
so without internet you can not operate it?

 

[Tech9]

so without internet you can not operate it?

This product is not even available in my location and I don't know any details above the fact it requires Omada controller. It was designed to work with the new free Omada Cloud Essentials account. Will it work with local software or hardware Omada SDN Controller - I don't know.

There is TP-Link Emulators website online, you can check for yourself what is available in UI for different TP-Link products:

TP-Link Emulators | TP-Link

TP Link - TP-Link Emulators

www.tp-link.com

Good luck!