Hi!
We are a housing cooperative and would like to have a shared inetrnet connection for all inhabitants. We are based in Switzerland and able to get a 1000/1000 Mbit symmetrical fiber connection by Fiber7. Floors 1-5 of our building are inhabited by in average 5 people and there is a vertical cable box to pass ethernet cables which should house the routers as well. The ground floor does not need to be covered. Total budget should not surpass $500.
My idea (which might not be feasible, so could be simplified without 802.1x and just one network) would be:
- use 2 (or 3 id necessary) Asus RT-AC68u or RT-AC87u or Netgear R7000 (recommendations?) on floors 2 and 4 (or 1,3 and 5) as AP on the same SSID. Most likely Merlin firmware to allow hardware acceleration and extra features.
- one of the routers is connected to a media converter with SFT module and does the routing
- the other one provides a radius server for user authentication
- there is a second "legacy/easy" SSID for devices that do not support 802.1x and guests, secured by WPA2-PSK. This network only provides limited bandwidth (100Mbit?) if this is possible without compromising routing performance.
An alternative would be to drop in an edgerouter lite or X-SFT to do the routing, this would limit the budget to max 2 AP though...
Looking forward to your input!
We are a housing cooperative and would like to have a shared inetrnet connection for all inhabitants. We are based in Switzerland and able to get a 1000/1000 Mbit symmetrical fiber connection by Fiber7. Floors 1-5 of our building are inhabited by in average 5 people and there is a vertical cable box to pass ethernet cables which should house the routers as well. The ground floor does not need to be covered. Total budget should not surpass $500.
My idea (which might not be feasible, so could be simplified without 802.1x and just one network) would be:
- use 2 (or 3 id necessary) Asus RT-AC68u or RT-AC87u or Netgear R7000 (recommendations?) on floors 2 and 4 (or 1,3 and 5) as AP on the same SSID. Most likely Merlin firmware to allow hardware acceleration and extra features.
- one of the routers is connected to a media converter with SFT module and does the routing
- the other one provides a radius server for user authentication
- there is a second "legacy/easy" SSID for devices that do not support 802.1x and guests, secured by WPA2-PSK. This network only provides limited bandwidth (100Mbit?) if this is possible without compromising routing performance.
An alternative would be to drop in an edgerouter lite or X-SFT to do the routing, this would limit the budget to max 2 AP though...
Looking forward to your input!