I'm on the hunt to get some DMZ switches deployed in locations that will have HA firewalls, some with dual ISPs. Most locations will not have any servers behind them.
What I'd like: A small, reliable managed switch on which I can throw a few VLANs on and call it a day. CLI is highly, highly sought after. I chose Juniper for our main switching because I can show the config with a "display-set" command and have the full working config ready to be sent to another device. I've since templatized this config so I can deploy core/distribution/access switching for a new site in minutes with standardized addresses and VLANs. I'd like to be able to do the same with these DMZ switches. Have a template where I can change the management IP address and ISP description, and apply the config quickly. Future automated management, with Infoblox NetMRI or the equivalent is desirable.
What I've looked at:
-
Aruba/HPE 1820-8G J9979A - Can't tell if SSH is an option. ~$100
-
Dell X1008 - SSH capable. ~$180
-
Cisco SG250-08 - SSH capable. A bit apprehensive of the SG line. Isn't it an offshoot from their Linksys ownership before the Belkin spinoff? ~$100
-
UniFi Switch 8 - We use UBNT for WiFi, so it's appealing, but research suggests that console access may not be persistent after reboot.
-
Juniper - Nothing small/cheap enough. 2200/2300-C are overpowered for requirements.
-
Netgear - A million options. Problem is I don't feel confident I could find the same switch after 6 months for consistency across the org.
-
Low-tech option - Just stick with 5-port off-the-shelf switches, one per ISP. Eliminates single-point-of-failure for multiple ISPs.
The top three are the front-runners because of the longer product lifecycle. However, it looks like they all use DC power blocks/wall warts, which concerns me slightly for longevity objectives. The Dell 2808 is what I would have probably looked at 4 years ago. I'm open to discussion of whether I should just carve off switchports on the main switch stack (Juniper EX3400 or 2300, depending on site), or any other architectural discussion.
No comments:
Post a Comment