Equipment upgrade for VSDL2 -> cityfibre

CityFibre has finally arrived and I can move to something faster than 45Mbps. We both work from home and while some ISPs provide a router I've avoided them in the past as not being up to scratch.

My current setup is:

• ECI B-Focus modem
• Draytek Vigor 2820Vn router (all ports in use)
• TP-Link PoE TL-SG1008P in loft
• Unifi AP x2

The Draytek needs to go as it's got a single 1G port. Plus it's 15 years old and while it works flawlessly it's going to fail sometime. It doesn't need built-in WiFi, I have a separate server for VPN termination, and I can add another switch downstairs for extra ports if needed.

What's a good router or modem/router combination that will handle a 1Gbit+ connection, IPv6 and provide a decent firewall?
And does anything else look like a weak link in my setup?

Look at the UI UDM range Pro, SE or ProMax

10GbE WAN and 1/2.5 GbE LAN - 8 ports
SE has PoE+/PoE on LAN

If you need more ports - such as in Loft, add in a USW-ULTRA - 8 port with 7 PoE/PoE+

You then have control of the APs through the UDM too.

In reply to a post by reywob:

The Draytek needs to go as it's got a single 1G port. Plus it's 15 years old and while it works flawlessly it's going to fail sometime

Hopefully you don't have any of the management interfaces exposed to the outside as it has been end-of-life for some time, so will not have had the last couple of critical (remote unauthenticated) vulnerabilities addressed.

If you don't want a rack mount form-factor the newer UniFi Cloud Gateway Ultra or Cloud Gateway Max are probably sufficient. If you want to keep the UniFi network controller functionality separate (you may have one for managing the UniFi APs) Gateway Lite or Gateway Max could be used instead.

I've just bought an Archer BE550 in Amazon's Black Friday sale. It has 5x 2.5Gig ports + Wi-Fi 7, and seems a decent replacement for my current Fritz!Box, in hopeful anticipation of symmetric 2.5G arriving this decade.

In reply to a post by tdw42:

Hopefully you don't have any of the management interfaces exposed to the outside as it has been end-of-life for some time, so will not have had the last couple of critical (remote unauthenticated) vulnerabilities addressed.

No, nothing exposed to the internet, it's as locked down as I can get it.

In reply to a post by tdw42:

If you don't want a rack mount form-factor the newer UniFi Cloud Gateway Ultra or Cloud Gateway Max are probably sufficient. If you want to keep the UniFi network controller functionality separate (you may have one for managing the UniFi APs) Gateway Lite or Gateway Max could be used instead.

Good shout, I'd not seen the UCG Ultra before and missed there was something between the Express (underpowered) and UDM Pro which is more than I want to spend. Hosting the controller means one fewer container I need to run and I'm up for simplifying things. There's a few reports it can't handle the full 900/900 (Link 1, Link 2) which would be a shame.

In reply to a post by reywob:

Good shout, I'd not seen the UCG Ultra before and missed there was something between the Express (underpowered) and UDM Pro which is more than I want to spend. Hosting the controller means one fewer container I need to run and I'm up for simplifying things. There's a few reports it can't handle the full 900/900 (Link 1, Link 2) which would be a shame.

The Ultra is probably slightly underpowered if you want full IDS/IPS but what about the UCG Max? And as I mentioned before the USW-Ultra 8 port switches.