Hello everyone i am currently doing my first Structured Cabling , at home and i would like your opinions of what is the best approach to create a multi-wan setup using a Mikrotik router as a Centralized Management Router. So firstly i would like to give you an idea of how it is currently set up and what my end-goal is. I live in a country where we use VDSL2+ with vectoring and ISP routers use PPoE for authentication to get access to the internet. The cable itself is just 1 pair , one for sending and one for receiving and is connected using a RJ11 clip on the DSL port of each router. To reach my goal of a multi-wan setup i centralized everything on a rack. The Rack includes the following:
Gear:
2x ISP routers (Both have bridge mode & IP Passthrough functionality) - (Modem/Routers)
1x Patch Panel-24
1x Mikrotik CRS326-24G-2S+(Router & Switch, but no modem)
1x N5105 Fanless Mini-PC(4 port gigabit) (Proxmox-pfsense)
Goal:
What i want to achieve is a load-balanced multi-wan configuration on the Mikrotik Router with CAKE as the QOS for better packet management. The Fanless Mini-pc with proxmox installation and a pFsense virtual firewall to protect the devices behind while also serving services for automation etc.
My current order is: ISP β R1/R2 β Mikrotik β Firewall β Clients.
My ideal order is: ISP β R1/R2 β Firewall β Mikrotik β Clients.
Tell me your thoughts and guidance if i need to change something or what would be the optimal setup-order for it to work better. Thanks!
Concur you have a switch not really a capable router.
What is the throughput on each of your WAN connections??
If its acting solely as a switch looks good. If you expect the swtich to route and do the multi-wan, you got the wrong gear. Replace the mini-pc with an MT router ( ax3 for cheap, 5009 if you have the budget )
Use the N5105 with pfSense as the router (pfSense has support for Multi-WAN), and use the MikroTik CRS as a switch. Don't expect the CRS to handle CAKE and QoS with high throughput (because no Hardware Offload and no Fasttrack would then be available).
The only concern about this was that i trust Mikrotik more than the mini-pc in terms of hardware. So i wanted to have the ability to check what is going on the mini-pc first before i switch to the mini-pc as the first in line device.