Hello,
In my home, I am running a flat network with no vlans. I have two rb962 acting as wireless access points attached to unmanaged swithes. They all are connected to OpnSense firewall. I am currently using radius server, dhcp and user manager on one of the rb262 to apply mac based access control in wifi network but also for dhcp ip assignments.
New appliances all come with wifi and are network capable. My children have pc, labtops, phones, tablets and some require their own domain. My son recently infested our network with a virus, I have spent great deal of time to deal with that. I would like to create vlans for each member of the family and isolate their traffic, create vlans for iot, cameras etc. The usual stuff.
I would like to limit the intervlan traffic. For example, I would like deny some iot vlans to access internet, only allow members of family vlans to access our nas devices and other services etc. I presume there will be around 10 vlans than these vlans have different set of rules to access each other.
I have bought CRS326-24G-2S+RM to be able to do that and to get rid of unmanaged switches. My Opnsense device is four core intel celeron device with 8gb of ram. I was hoping to do all intervlan routing in CRS326. I do not know if I am done a sensible thing in my purchase.
My questions are
- Is intervlan traffic as I described above CPU bound? Can it be done in CRS326? Can it be offloaded to hardware? Do I need to use separate router for that?
- If I need a router, what do you advice as an hardware.