Private and secured managed switch?

Hardware Questions and Recommendations
1

It seems like the vast majority of hardware topics are about routers and access points. What about switches? Given the lack of threads, can the router mitigate any privacy and security concerns of a switch?

Can OpenWRT turn a router into a managed switch?

2

Yes, you can use OpenWrt to make a supported router with a built in switch into a managed switch.

What is your concern re: security and switches?

2 Likes
3

And yes, there are quite a few realtek based switches supported by OpenWrt as well, ranging from 8-52 ports (1 GBit/s switches are easy and well supported, >>1 GBit/s switches need a bit more attention and are still under rapid development).

1 Like
4

It's just a general statement. I'm sure most people here are concerned about privacy and security. Supposedly Asus and TP-Link have had security issues. I think Asus needs an account for certain features. Total privacy mess.

It seems like all other vendors with managed layer 2 switches need a controller. How do I do that with OpenWRT? Will this OpenWRT switch be capable of applying VLANs on a per-port basis?

What's the best hardware to get to turn into a switch? GL.iNet Flint 2?

5

Which ones? I'm also interested in PoE if possible.

Ideally, it'll be a small 4-5 port switch.

Are there any privacy concerns using an OpenWRT router with Ubiquiti UniFi access points? I will need a controller though.

6

How is the switch OS an issue, but the access point OS and controller is not?

Look at OpenSOHO to manage APs that put multiple VLANs on separate SSIDs. Then you can replace AP OS and controller, too.

7

ZyXEL GS1900-8HP, among others.

4 Likes
8

I never said it's not. I'm worried about them all! So what are you guys doing about it?

9

If your setup is basic router + switch + some wired access points, that you all want to run OpenWRT to keep it simply, then look at https://github.com/rubenbe/opensoho from @rubenbe

Manually configure router+switch for now. Fire up OpenSOHO, configure your VLAN + SSID then join the APs and have them all configured automatically.

The documentation is still lacking. I tested automatically joining freshly flashed OpenWRT APs with a custom uci-defaults defaults script added via the firmware selector => https://github.com/rubenbe/opensoho/discussions/1#discussioncomment-14169880

A writeup of your journey would be appreciated.

3 Likes