This is my first post in this forum, I posted this in another stackexchange forum and was redirected here.

I am looking for a network switch that provides a few features:

1 - Manage multiple network ranges - I have 2 public /27 ranges, which I would like to manage from the switch, for example what IP addresses go to each server. I would also like the switch to be able to handle one or multiple private network ranges, and be able to tell the switch that public IP X.X.X.X should be mapped to a server which is using private IP Y.Y.Y.Y

2 - Web management - This is a must. The switch will be at a datacenter, so I need a way to manage it, like I would do with an IPMI interface on a server. I would like to do all configuration of the switch from that web interface. It would be great if the switch's web interface would allow me to see bandwidth and other useful information regarding network usage from each of the servers.

3 - Load balancing - I would like the switch to be able to balance traffic between multiple servers, for example round robin between 3 private IP addresses requests that come for a give public IP address. Level 2 load balancing would be best.

4 - Firewall - I would like to be able to forward all requests to a given IP to a specific server, but I would like to have the option to block everything or leave just a specific port open at the switch level. I would be able to manage individual server's firewalls but also have the ability to control this from the switch for a given server.

The idea is to be able to have the switch passthrough requests to public IP addresses if I want a server to have its network card configured with a public IP address, but also be able to configure a server with a private IP address and configure the switch to forward requests from one IP to another.

Is this even possible? Or should I be approaching this in a different way?

I am looking for any tips from people who have used equipments that do this, as I don't have experience with these sort of equipments. Even though I know this is not for opinion based answers, if anyone has experience with different brands and can shed some light into what works better, that would be great.

I am not looking for a specific brand, so Juniper, Cisco, FS, or any brand would be an option.

For example, I like this one but I am unsure if it has all the features I am looking for, still trying to determine from the documentation: https://www.fs.com/products/72945.html

  • It sounds like you're looking for an L3 Switch, which is really just a router with the ports/bandwidth of a large switch. Most "Managed Switches" provide the features you're looking for, except that a firewall is often its own device or implemented in the router. (Do you need to put a firewall between devices on your private network?)
    – Romen
    Dec 10 '19 at 19:00
  • @Romen I would like the ability to use the firewall for requests to some IPs or servers, and not others. If I could get the switch to do that, I would avoid a second physical device, wasting precious rack space :) Can you suggest a brand / model (if you know any) that checks all the points? Dec 11 '19 at 9:21
  • Can you be more specific about the topology, do you want to use the firewall in the usual way where it blocks incoming requests (from the WAN) to devices on your LAN? Or something else like blocking outgoing requests from your LAN or requests between devices on the same LAN? If you want a typical firewall that handles port forwarding and blocks other incoming requests from WAN, a switch wouldn't be used for that. Like I mentioned already, an "L3 switch" is actually a router with a bunch of ports, but they're often called switches because they look like a regular L2 switch.
    – Romen
    Dec 11 '19 at 14:28
  • @Romen I am more worried about incoming than outgoing traffic. Nonetheless, both would be better for future proofing things. Do you mean that a L2 switch would porbably have that builtin, while L3 wouldn't? In that case, I would rather get myself an L2 one. Or did I understand you incorrectly? Dec 11 '19 at 14:32
  • @Romen thank you very much about that link, it was an interesting read. I am not a network expert, and I was not aware of the Layer differences. From your last response, I understand that I should probably aim for a router instead of a switch, if I need load balancing and firewall features. Once again, and I know this is not made for suggestions, but can you point me to something that would fir these requirements? Dec 11 '19 at 15:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.