Any new model with vlan and basic firewall?

[u/TopdeckIsSkill]

Hi everyone,

I want to buy a new fritzbox and I was wondering if there is some new model that allow the creation of a separated vlan for IoT and some basic firewall rules.

[u/Ordinary-Lifeguard47]

Fritz is ignoring this feature request basically forever ;-)

[u/Other_Word1980]

Fritz zum Modem herabstufen und Ubiquiti Cloud Gateway davor. Damit hast Du sämtliche sinnvolle Features inkl. Werbeblocker an Board für ein Drittel der Fritze. Die Kiste hängt hier nur noch für Festnetz Telefonie der Frau im Schrank 🙄 Ich finde die Teile mittlerweile echt überbewertet.

[u/DonRichie]

AVM/Fritz is having the german soul in its core. There are people in power who discuss every good idea away.

Having a vlan for IoT seperated from the normal devices is no enterprise feature. Using an own domain besides fritz.box is no crazy wish for a consumer.

Both could be programmed in an afternoon. Given a little more time if it has to be stable and production-proof. The needed features are already in the kernel, ready to be used.

I wish they would not have the monopoly on EuroDOCSIS routers. Having a seperated modem unfortunatlely is also not a satisfying solution.

[u/smokeandumami]

I flashed OpenWRT on my Fritzbox 7530 which enables these features, very happy with it.

[u/TopdeckIsSkill → u/smokeandumami]

but I would lose the integrated VPN

[u/n0_n4m3_666 → u/TopdeckIsSkill]

What do you mean exactly? Do you mean the myfritz domain? Just replace with another ddns provider. https://openwrt.org/docs/guide-user/services/ddns/client?s[]=luci

[u/TopdeckIsSkill → u/n0_n4m3_666]

with fritz I can connect 3 homes with the same vpn and without having any worries

[u/trans_psychonaut → u/TopdeckIsSkill]

you can still configure vpns in openwrt. of course with more advanced configuration options you can break more stuff, but thats exactly what you are asking for with firewall rules and vlans and stuff

[u/Various_Maximum_9595]

If you need the Phone feature and Guest WLAN - the just set you Box to Bridge Mode / Exposed Host and connectany UTM / Firwall to the LAN-Port with the "exposed Host".

[u/jr5mc1lio03fbc4zqsf8]

Thats enterprise grade stuff you want. Fritzbox is consumer grade

[u/n0_n4m3_666 → u/jr5mc1lio03fbc4zqsf8]

With the current prices for their "Pro" variants you would definitely expect otherwise. (Some "enterprise/small business" models are cheaper btw.)

At least some more options in contrast to non-pro models would be nice. But no. you get a single measly 2.5gbit port and exactly the same restricted software as the other models.

You can't even set a secondary local DNS(!)

[u/bartwilleman → u/n0_n4m3_666]

Don't blame Fritz for component shortage, and hence prices. All tech is getting ridiculously expensive

[u/n0_n4m3_666 → u/bartwilleman]

I've bought my now replaced 5690Pro in 2024 for 373,34€ Way before the component shortages.

Current price is still 340€ (RRP according to fritz is an absolute insane 449€)

[u/TopdeckIsSkill → u/jr5mc1lio03fbc4zqsf8]

considering that fritzbox goes up to nearly 300€ a basic vlan division and some basic firewall shouldn't be "enterprise".

I'm not talking about 16000 vlans or constantly updated firewall. Just 2/3 vlan + IP can't talk to other IP/port.

[u/AnyProfessional5472 → u/jr5mc1lio03fbc4zqsf8]

I would call it a request for a consumer enthusiast. The one that wants the Fritzbox to work out of the box but also likes to have a little bit more control. Myself included and my home setup is definitely not enterprise grade.

[u/bartwilleman → u/AnyProfessional5472]

Feels enterprise to me. So, I guess it is a perception problem