beersykins

Why are you trying to tag VLAN2 ? If nothing else tags on VLAN2 upstream, that's why you can't communicate outside of the box.

He means more that 'business' lines are sold at throughput targets and SLA. At least for enterprise, your loop and port speeds are determined literally months before you're handed off any inkling of a usable circuit. Can't really just phone them up and be like 'I'd like 5x the throughput, chief', usually there's other dependencies inherited via the design such as 'we cant provide you 10 gigabit access when our backhaul is less than that', as a single example. That's a reasonable productivity target. I've seen an office of 300 share a 100 mbit line. There's not really a single thing limited by that throughput target unless you have a specific use case like trying to real-time edit 4K footage from remote storage. At that point you're acutely aware of how much throughput you actually need.

Only a couple models of the 2960S had 10gig ports, most of them contained 4x1 GbE SFP cages or combo ports. The stacking ports are 10g/ea at least though. Pretty inexpensive to obtain second hand though, my stack of two 2960S-24PS were like $40 shipped in total. @ruxikdanub what is the 10 gig PFsense NIC? Seems like it would be easiest to swap it with a mgig SFP but that assumes it has a SFP cage instead of a 8P8C connector. I dunno fam, he could route at the access layer and ECMP between the switch and PFsense, then you could at least scale out single flows across additional active/active links. . 2960S has some basic L3 forwarding that isn't 'officially' supported. I remember doing that with a ERPro-8 and 3560-E via OSPFv3, fun times.

Gotta rep those mgig fiber people

If you get full speed directly connected to the modem then you can at least isolate the router as a slowly-forwarding-component. 23 isn't very much, I have 37 on my home network, although I would try to isolate IoT devices onto a separate wifi band than your main 'performance client' 5GHz SSID.

That doesn't really make any sense unless you're using an ancient relic like a WRT54G

Most of the concern is interference, the ISM (2.4 GHz) band only has three non-overlapping channels. If you have wifi neighbors then it gets congested quick. The UNII bands (5 GHz) have a lot more space for 20/40 MHz channels do you can have a more dense environment without being interfered with. There's also other non-wifi devices that contribute to interference in the 2.4GHz band. 5 GHz usually offers higher transfer rates, if there's no other wifi traffic around you, you probably won't notice a latency difference, although the throughput at 'normal' RSSI signal strength values will be higher on the 5 GHz band.

I assume it's some issue with your DNS service on the router, try statically assigning that to 1.1.1.1 or similar and see if that helps. Usually the 'no internet' notice is a failure to resolve DNS records. If you're just using the ISP ones sometimes they are pretty flaky.

As above you can't forward the same port to multiple destinations. UPNP usually resolves this by dynamically opening different ports for each PC but it largely depends on the game. You'd also want to make sure UPNP doesn't listen on the WAN interface by doing something similar to the 'GRC ShieldsUp UPNP Exposure Test'

You should be able to add your PPPoE credentials to the config of the device for the WAN side. After that it's all relatively synonymous with what you had before. The ATT box may have some weird dot1X features it's trying to use to join the network as well, as that provider forces client certificates on its devices.

What router and wireless NICs do you have? If you're on single band N gear then dual band or powerline would perform better from a latency perspective. AC wifi usually beats out powerline pretty easily from a bandwidth perspective, but it depends on a variety of factors (interference from neighboring APs, signal loss through walls, the standard you're using, powerline wise the circuitry of the outlets you're communicating between plays a large factor, as well as the standard of powerline adapters you're using).

The two eth0 entries are for different things. One is a next hop route to your ISP, and one contains the WAN subnet that interfaces with your ISP. If you're using the WAN interface of your second router then that's why you can't directly access it (also you're rolling double NAT behind router #2). The best solution is to assign it a static LAN address in the 192.168.1.0/24 space, disable DHCP specifically on router #2 and then connect to the LAN port instead on router #2.

You can change the route on the route table manually in command prompt, you'd just give the wired side a lesser-preferred value.

Those are all private addresses before the ICMP filter segments, totally an ISP problem from the results you're posting.

He's adding extra interference to his environment which will decrease performance. The OG PS4 only had a 2.4g adapter, your best bet is either wired or a 5ghz wifi bridge to wire your PS4 into that integrates into the rest of your network.