Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 Nov 2001 01:26:47 -0800
From:      "Ted Mittelstaedt" <tedm@toybox.placo.com>
To:        "Anthony Atkielski" <anthony@atkielski.com>, "Andrew C. Hornback" <achornback@worldnet.att.net>, "FreeBSD Questions" <freebsd-questions@FreeBSD.ORG>
Subject:   RE: DSL PPPoE with 2 NICs
Message-ID:  <002701c16e80$d0b0c700$1401a8c0@tedm.placo.com>
In-Reply-To: <006601c16dbe$d666ce00$0a00000a@atkielski.com>

next in thread | previous in thread | raw e-mail | index | archive | help
>-----Original Message-----
>From: owner-freebsd-questions@FreeBSD.ORG
>[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Anthony
>Atkielski
>Sent: Thursday, November 15, 2001 2:18 AM
>To: Andrew C. Hornback; FreeBSD Questions

>Additionally, routers are far less likely to _need_
>security updates, since their function is so simple to begin with.
>If they need
>them, uploading new firmware is usually pretty easy.
>

Not for the real cheapos.  Crap like the LinkSys router requires that you
be on the same physical network when you do your firmware upgrading because
the router generally won't allow remote firmware updates and even if it
does it blows away it's config after update.  You cannot run any kind of
an enterprise with that sort of thing.

For a REAL router like a Cisco 1605-R, firmware updates can be done remotely
quite easily.  But the cost is much higher for the device.

>It is not clear to me what advantage I would gain by using the
>FreeBSD system as
>the gateway,

For starters you can terminate remote VPN links on a FreeBSD system, how
many $100 routers can you do that on?

You can also run a proxy server on your FreeBSD system, and force all your
inside clients to use that, so you can spy on where they are surfing.  (some
environments do legitimately need to do that)

You can set your router up as a network monitoring device and if the link to
the Internet goes down your BSD system can send you a page.

In short, there's lots of things that you can do with your FreeBSD system that
a hardware router cannot do.

>
>Building an efficient IT infrastructure requires avoiding any emotional
>attachment to any particular software, hardware, or configuration.
>

Nobody building any network large enough to deserve the label "IT
infrastructure"
is going to be fooling around with $100 cheapie routers.  They will be using
Cisco devices.


Ted Mittelstaedt                                       tedm@toybox.placo.com
Author of:                           The FreeBSD Corporate Networker's Guide
Book website:                          http://www.freebsd-corp-net-guide.com



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002701c16e80$d0b0c700$1401a8c0>