yup added mesh to the house, it's been a significant step up, the roaming is great!

I was wondering who else would get that. Then I thought of the target audience and figured everyone would get it. lol.

Glad it was helpful!

yup, this is often used in very large networks.

Thanks

A managed switch may or may not have layer 3 routing. Look at hpe 1920s it’s a layer 3 “lite” spec.

From the Cisco architecture playbook, the typical small-office architecture would be distributionaccess. At the distribution layer would be routing, connecting to the access layer with high-speed connections (typically gigabit fiber or faster). The access-layer would be layer 2 with multiple Vlans as needed. The individual access ports would either be single native Vlan (example, a single workstation) or trunking two Vlans (example, a voice-over-IP phone on its voice Vlan that has a switchport to connect a workstation on the data Vlan). The user access ports are typically copper, topping out at 1 gigabit. The fiber uplinks are at least one (and typically two or more) fiber links at 1 gigabit or 10 gigabit. Bottlenecking on the distributionaccess link? Add more physical ports to the uplink to the distribution (Link Aggregation Connection Protocol or Cisco's Etherchannel) or change out your uplinks from 1 gigabit to 10 gigabit. The overall topology would be a star, with the distribution layer in the center. In a larger environment (such as a multi-building campus), a core layer is added - core at the main building with connections to internet and other offices, distribution and access in all the other buildings.

sources: youtu.be/watch?v=iDbyYGrswtg

Layer 3 refers to Open Systems Interconnection or OSI Layer 3. Please do your own research on OSI layers and you'd know what layer 3 and 2 mean. For home setup layer 2 switches are good enough. Especially if you don't care to learn about network design, OSI layers and are looking for the most affordable switch in the market you're looking into an unmanaged layer 2 switch. These are often aptly advertised as ethernet splitters, they take an input (aka uplink) and dynamically splits that bandwidth into the output ports (aka downlinks). As this video states, if you have plans to upgrade your network later into a more complicated setup, these may not do the job as it's not guaranteed that they will pass-thru the VLAN tags etc. IMO now a days there are many affordable "smart managed" switch options, that work out of the box as "ethernet splitter" and allows you to do some configurations(management) including VLAN when you are ready for that. These can evolve with your networking needs. On the other hand, unmanaged layer 2 switches aka ethernet splitters also can be valuable at the inner-most segment of your network where you just want maybe your media centre equipment to have multiple ethernet ports to connect to, without needing to do any traffic shaping. In this case you would still be better off if these unmanaged switches do not strip off the VLAN tags setup by a parent switch.

Welcome!

Generally speaking yes. Unmanaged switches have no concept of VLAN tags, so in most cases it just expands the network and gives you extra ports on the native VLAN

Diagrams.net I have a video here kzfaq.info/get/bejne/hpmZmLubrp2-g58.html

@@LAWRENCESYSTEMS Thanks for answering my question!

We have an ISP that does pretty much the same thing here in Canada. The D-Link router uses a modified firmware (OpenWRT I believe?) and is only used to provide the static public IP address to customers. Maybe it’s the same thing with your ISPs?

Smart switches have a web interface so you can configure some things, but the features are often cut down/crippled to cut costs. A managed switch is usually made with more powerful processor and let's you get really, really fine grained in exactly how you control the network. Usually at the cost of a more expensive switch

It does not appear to be out of sync

@@LAWRENCESYSTEMS Its not a big deal but it is there on most of your videos, does not stop the excellent content though. I only mention it because I notice the video quality has improved a lot recently.

@@garethsnaim8174 are you watching at high speed? Some KZfaq videos go slightly out of sync when watching at 1.25 or higher.

@@hufforguk Hi, all standard here and I seem to watch you tube a lot. I dont see the same issue on many other channels. Its subtle on this video but after about 45seconds it does go out of sync, though not major. I am in the UK dont know if that makes a difference.

Slightly out of sync .. watching at 720p ... love the channel

Sounds like the VPN is misconfigured

DIA

I was using DIA in that video, but now I use Diagrams net. I have a tutorial here: kzfaq.info/get/bejne/hpmZmLubrp2-g58.html

Yup!

dia ... "sudo apt install dia dia-shapes dia-rib-network"

It would work

@@LAWRENCESYSTEMSThanks you for the video! My current network is to only have one port（1Gb/s） to router, router did all of VLAN and firewall, and that doing up and down with, I want to using LACP and get good I Gb/s speed for upload from one network to another for LAN transmission speed.

Dia

kzfaq.info/get/bejne/hpmZmLubrp2-g58.html

kzfaq.info/get/bejne/o9Z2ZMxq2MypemQ.html

My guess would be ad cable in the wall.

Since this video managed switch prices have come down even more so if you need VLAN traffic then get a managed switch.

I've been looking hard for a 12"ish" port 2.5gb managed switch with POE+ and two 10g SFP+ ports for under $600, that isn't some no-name overseas unit, without luck. Even used. @@LAWRENCESYSTEMS

What's your budget? And what do you define as "security hardware"?

Neil Hanlon $3-500. Router/Firewall

@@AdamCohen95 Is that three dollars starting or three hundred? 'Cause if it's three dollars I'm right there with you. :)

Percy Blakeney lol 300-500 😅

Maybe one of these with SFP+ port and a SFP+ FC module? mikrotik.com/products/group/ethernet-routers?filter&s=c&f=[%22sfp%22]#!

Diagrams.net kzfaq.info/get/bejne/hpmZmLubrp2-g58.html

Because the firewall rules allow it to.

@@LAWRENCESYSTEMS Thanks for response. Lawrance, I have a quite rookie question to ask you. the firewall rule means the firewall software individually or is a firewall hardware like the switch?

Yep, get yourself a UniFi controller (either in the cloud, a cloudkey or setup on one of your devices), and any Ubiquiti UniFi AP. You'll be able to direct an AP to pair SSIDs with VLANs under "Wireless Networks" settings.

So its all done in software? Does the controller need to be running 24/7 or is it just an interface to setup and administer the AP on demand?

@@michaeljaques77 Well, it depands. If you want to run captive portal for guests, then controller is required 24/7, otherwise, no. The controller is not just an interface, but APs, switches and gateways from UniFi family can work without it, once they're set up. I personaly believe that on premisis controller is the best choice, but, controller software has trouble with power outages, so unless you're willing to buy Gen2 cloud key, or go cloud, you would need UPS to make sure, that nothing bad happens to the controller, while it is running. The biggest benefit of controller running 24/7 is that you see your network performance and thus can better handle your network better. Another benefit lies in automated updates of your APs. But, you can run it only when configuring new equipment and then turning it off too, in which case, Raspberry Pi would be the best choice for platform for the controller.

@@looseycanon I guess could just spin up a small VM on my xcp-ng to host the controller software :) thanks for your help, it clarifies things so much.

@@michaeljaques77 In that case, make sure you'll open/forward ports 80 and 8443 to that VM. Port 80 is to access the GUI, port 8443 is for managed devices

Yes, you can go from switch to switch.

@@LAWRENCESYSTEMS thank you so much!

kzfaq.info/get/bejne/o9Z2ZMxq2MypemQ.html

@@LAWRENCESYSTEMS thanks man. Nice video too!

Yes

@@LAWRENCESYSTEMS I'm new to vlan-ing and interested to setup vlans with unifi but most of their layer 2 switches are gone. I don't want to over complicated things since i'm new. Thanks for all the videos that you have posted in your channel. I learned a lots!

Do you have any video on your thoughts about the stability of unifi switches and access points since i've been hearing about them lately?

Yes, we find them very reliable kzfaq.info/get/bejne/jteWrZipqdexcnk.html

employee phishing training is very important here in 2020

man this is a loaded question

No, some don't know what to do with the extra bits so they through them out.