SMB 1600/1800 rumours ?

[Martin_Stolz]

First off all - Happy New Year 2021 to Check Mates!

Interesting finding in 

• sk153152:  
  R80.30 Jumbo Hotfix AccumulatorTake 227 supports the new SMB 1600/1800 appliances
  LSM and Security Management for EA purpose.
• sk165456:
  NEW: Added 1600, 1800 and 1570R appliances to SmartConsole Hardware list.
  

Are there new devices coming?

Does anyone have any technical details?

Ciao Martin

[HristoGrigorov]

I saw them mentioned briefly on some SMB roadmap but no details. I want to believe these will be Quantum series SMBs. 

[G_W_Albrecht]

This is a slide from CPX 2020 SMB Presentation:

Hope it is ok to show it as it is soon 1 year old 8)

[G_W_Albrecht]

This really had been discussed once, a sales collegue told me - the 910 pimped with 10GbE WAN port for Maestro. For me, SMB is an appliance best positioned on the admin desk - no fan, LEDs and console port at hand 8).

[HristoGrigorov]

SMB in a Maestro configuration!??!

I nearly died laughing man 🤣

[G_W_Albrecht]

You must think of this in a sales context 🤠 But yes, makes no sense at all, of course...

[Magnus-Holmberg]

The datasheet and faq has been on the site for a few days. 🙂
Dated from the 15th.

[G_W_Albrecht]

Also available since December 10th: 1600 / 1800 Appliance R80.20.XX Getting Started Guide

1600: Two WAN ports, one DMZ port, each of which is a combo port of SFP and RJ45 (on the right). Only one can operate a time when plugged in and connected. RJ45 - supports 10/100/1000MbE / SFP - supports 1000MbE. LAN ports 1-16 - support 10/100/1000MbE, LAN 1 and LAN 2 (Sync) also support 2.5GbE.

1800: Two WAN ports, each of which is a combo port of SFP and RJ45 (on the right). Only one can operate a time when plugged in and connected. RJ45 - supports 10/100/1000MbE / SFP - supports 1000MbE. One DMZ port, also  a combo port of SFP and RJ45, RJ45 - supports 10/100/1000/2500/5000MbE and 10GbE, SFP - supports 10GbE. One Management port - supports 10/100/1000MbE. LAN ports 1-18 - support 10/100/1000MbE, LAN 1 and LAN 2 (Sync) also support 2.5GbE. The 1800 also has two PSUs and SSD storage memory.

[PhoneBoy]

The appliances are now in EA, so I think it’s safe to say they’re coming. 🙂
I presume a formal announcement will be made during CPX, but that’s just a guess.

[G_W_Albrecht]

The complete list:

sk165456: Jumbo Hotfix Accumulator for R80.40 (R80_40_jumbo_hf)

sk165473: R80.40 SmartConsole Releases

sk153152: Jumbo Hotfix Accumulator for R80.30 (R80_30_jumbo_hf)

sk153153: R80.30 SmartConsole Releases

As an internal note (invisible but searchable) maybe also mentioned in :

sk170534: R80.20.20 for Small and Medium Business Appliances

sk171181: How to control a Gaia Embedded Security Gateway's global kernel parameters from the Securi...

[John_Fleming]

Are they going to do something about the poor visibility to the built in switch?

[PhoneBoy]

Define "poor visibility"

[John_Fleming]

Last time I looked you can't see what physical port a given mac address is attached to on the switch. That seems like pretty poor visibility to me. Basically just have to shutdown random ports to stop local attack.

[PhoneBoy]

That is still the case, yes, and now I remember the conversation we had on this 🙂

[G_W_Albrecht]

sk166552 All LAN ports/switches and their associated VLANs share the same MAC address in 700/900/1200R/1400/1500 SMB appliances explains that for all SMB platforms excluding the 1200R, it is possible to override the default MAC address with any other MAC configured manually.This should add the visibility you want, i assume, as both port and client MAC should be visible then.

[John_Fleming]

I don't think we're talking about the same thing. I'm talking about the MAC address of a client that is connected to a given port, not what MAC the firewall has attached to a given layer 3 interface. 

For example on a cisco switch

NotTheLab# show mac address-table address b8:ca:3a:67:41:a4
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports
---- ----------- -------- -----
14 b8ca.3a67.41a4 DYNAMIC Gi2/0/21
101 b8ca.3a67.41a4 DYNAMIC Gi2/0/21
Total Mac Addresses for this criterion: 2
NotTheLab# 

Note: This is not the arp table. 

[G_W_Albrecht]

I understand what you mean. Yes, this is no Cisco Switch 8)

[John_Fleming]

Its also not a d-link or netgear or like.. any managed switch really. Its a pretty basic feature of a managed switch.

[G_W_Albrecht]

These appliances never have been equipped with manageable switches, and the large GAiA appliances also get connected to a stack of manageable switches instead of featuring them. I do not remember that other companies SOHO firewalls have that included...

[John_Fleming]

Every SMB firewall does in fact have a built in switch. This is why traffic going from LAN1 to LAN2 (by default) doesn't pass through the firewall. If it did you would get terrible performance and the CPU would go nuts. And it is indeed a managed switch as you can very easily segment the switch into multiple vlans. This is unique to the SMB devices. If that isn't enough proof even the driver used is called a switch. Oh I don't know if this is still the case but l found on the 1400 there was also no layer 2 loop detection.  

[Expert@500]# ethtool -i LAN1
driver: marvell switch port
version: 1.0
firmware-version:
bus-info: switch SMI bus
supports-statistics: yes
supports-test: no
supports-eeprom-access: no
supports-register-dump: no
supports-priv-flags: no
[Expert@1500]#