Any recommendations for a small Silent POE switch to use at home?
Needs to be managed/smart (Vlan support as a minimum) and have 802.3af (or 802.3.at) which rules out the mikrotik switches
Was going to get an RB3011 at home to upgrade an aging RB450G, but starting to think a 850gx2 with the H/W crypto and a POE switch might be more useful.
I was facing the same problem myself a while back so I ordered a chinese model (Trying to go cheap) from aliexpress. You can read my review about it here, it has worked fine for me!
Unfortunately many cheap switches, including the Netgear and the MikroTik switches (also part of routers) make
the VLAN configuration unnecessarily complex. Probably their UI is a direct translation of the requirments of
the switch chips, I don’t know. But it is completely different from how a “normal” switch is configured.
It should be like this:
a number of VLANs is defined with VLAN number and a descriptive name (only for help during config).
usually there is an initial VLAN number 1 which is the default when no others are defined.
for each port, you configure what VLAN numbers it is to be member of. those are the VLAN numbers that
are ever going to go into and out of those ports.
for each port, optionally, you define an “untagged VLAN”. this is the VLAN number that enters/leaves the port
without VLAN tag.
With this setup, VLAN configuration is easy. Much easier than with all those low-level things like found in the
MikroTik and Netgear switches (where e.g. when you want a port to be untagged, you need to configure that
separately for output and input)
I agree. I “grew up” on Cisco gear, where the configs are interface-specific.
interface fast-ethernet0/1
switchport trunk native vlan 10
switchport trunk allowed vlan 10,20,30
switchport mode trunk
!
So easy.
Then I ran into gear where the VLAN is the focus, and not the interface (Dell, Allied Telesyn, etc). You add ports to VLANs as either tagged or untagged, and set a default VLAN (“pvid” - preferred vlan id). I always hated this because my brain was wired to see what all vlans were on a port, not what all ports were on a VLAN.
Then I figured out how to do VLANs using Mikrotik’s cpu-based bridging, and it made sense too…
The atheros switch configuration looked alien to me at first glance, and I haven’t bothered learning to use it beyond “dumb switch” mode.
Yes otherwise any device can just tag a packet with a VLAN tag and join that Vlan, which kind of defys the point of segmenting the network in the first place
A managed / Smart switch can be configured so the port will only allow the Vlans you want it to allow.
The TP-Link TL-SG2210P doesn’t look bad although the POE budget is a bit low on it.
Might also keep an eye on ebay as sometimes some nice HP/Cisco stuff pops up.