



Netgate 2100 BASE pfSense+ Security Gateway
RM 1.00
Pound-for-pound, the Netgate® 2100 security gateway appliance with pfSense® Plus software delivers unbeatable performance and flexibility in its class.
Key Highlights:
- Dual-core ARM Cortex-A53 1.2 GHz CPU
- 1x 1 GbE WAN port (RJ45/SFP combo)
- 4x 1 GbE Marvell switch ports
- 4 GB DDR4 RAM
- Up to 2.20 Gbps routing throughput
- Expandable storage (M.2 SSD support)
Configure Your Device
Included with Purchase:
- 1 Year Hardware Warranty
- TAC Lite Support (24x7 zero-to-ping)
- pfSense+ Software License
- Automatic Configuration Backup Service
- Console Cable (MiniUSB)
Product Overview
Ideal for home, remote worker, and small business deployments that require more compute resources to support the use of multiple pfSense add-on packages and VPN performance to support multiple user- and site-to-site connections.
Featuring a Dual core ARM Cortex A53 1.2 GHz CPU, a dedicated 1 GbE WAN port (RJ45/SFP combo), (4) 1 GbE Marvell switch ports, 4GB of DDR4 RAM, and upgradeable storage. The 2100 has additional expansion slots available for DIY LTE, Wi-Fi or M.2 SSD expansion.
The Netgate 2100 is a compact and powerful desktop device. Leveraging a Dual core ARM Cortex A53 processor @ 1.2GHz and 4GB of DDR4 RAM, the Netgate 2100 shines as a 2.20 Gbps router, 964 Mbps firewall, or 254 Mbps IPsec VPN solution.
Best For:
- Consumers & Home Users
- Remote Workers
- Small to Medium-Sized Business Networks
- Small to Medium-Sized Branch Office
- Managed Service Providers (MSP/MSSP) On-Premises Appliance
Product Features:
Low Total Cost of Ownership
No artificial limits or add-ons required. Unlimited users, firewall rules, IPsec tunnels, dual WAN. Low power requirements with no moving parts.
Grows With You
From firewall to multi-function security gateway. Flexible configuration supporting multi-WAN, HA, VPN, load balancing. Maximum 1 million active connections.
Easy GUI Management
Manage pfSense Plus settings through our web-based GUI. No fumbling with command line interface or typing arcane commands.
Secure Remote Access
Connect via encrypted VPNs between offices, mobile workers, or cloud. Built-in Amazon VPC Wizard for easy EC2 cloud connections.
Why Choose KF Legacy?
- Official Netgate Partner
- pfSense Certified Engineers
- Local Support (MY/EN)
- Professional Deployment
- Competitive Pricing
Contact:
enquiry@kflegacyresources.com
Expansion Options
- M.2 'B' key socket (SSD, LTE)
- miniPCIe slot (WiFi)
- microSIM slot
- Optional 128 GB M.2 SATA 2242 SSD
Technical Specifications
| CPU | Marvell Armada 3720 (88F3720) ARMv8-A 64-bit Cortex A53 @ 1.2GHz with NEON SIMD and FPU |
|---|---|
| CPU Cores | Dual Core |
| Networking | One 1 Gigabit Ethernet WAN port (RJ45 / SFP Combo) Four 1 Gigabit Ethernet LAN ports (Marvell 88E6141 switch) LAN ports can be repurposed for additional WAN ports |
| Storage | 10.6 GB eMMC (upgradable) |
| Memory | 4 GB DDR4 (not expandable) |
| Expansion | 1x M.2 'B' key sockets (SSD, LTE) 1x miniPCIe (WiFi) microSIM slot |
| Console Port | MiniUSB (console cable included) |
| USB Ports | 1x USB 2.0 port |
| LED | 3 full color RGB LEDs |
| Enclosure | Desktop 1.7" (42.2 mm) tall x 4.25" (108 mm) deep x 6.8" (172.7 mm) wide with integrated keyholes for wall mount |
| Cooling | Passive (Fanless) |
| Power | External ITE P/S AC/DC 100-240V, 50-60 Hz, 12V 2.0A, threaded barrel connector AC Inlet: IEC320-C7 (2 PIN) |
| Environmental | 32°F (0°C) to 122°F (50°C) |
| Certifications | CE, FCC (Class B), RoHS, UL, RCM, VCCI, UKCA |
Performance Metrics
Netgate 2100 performance tests conducted with pfSense Plus software version 22.01
L3 Forwarding
Firewall (10k ACLs)
IPsec VPN
(AES-GCM-128 / AES-NI w/ SafeXcel)Performance Note
Maximum Active Connections: 1 million. The Dual core ARM v8 Cortex-A53 1.2 GHz delivers exceptional performance for common workloads. Performance may vary based on configuration, enabled features, and network conditions.
pfSense Plus Software Features
Router
- Policy-based routing
- Multiple IP addresses per interface
- Multiple WAN connections (with load balancing and failover)
- Complex NAT mapping (outbound and inbound)
- Concurrent IPv4 and IPv6 support
- Optional multi-node High Availability (HA) clustering
- Dynamic routing protocol support [w/pkg]
Firewall & Security
- Extensive firewall rules
- Stateful filtering & packet inspection
- Per-interface configuration
- Ethernet (layer 2) rule-based packet filtering
- IP/DNS-based filtering and blacklisting [w/pkg]
- IDS/IPS with Snort-based packet analyzer [w/pkg]
- Layer 7 application detection and blocking [w/pkg]
- Geo/country blocking, IP block lists [w/pkg]
VPN
- Site-to-site and remote access VPNs
- IPsec, OpenVPN, WireGuard®
- Split tunneling
- IPsec policy-based and route-based protocol support
- OpenVPN Data Channel Offload (DCO)
User Authentication
- User and group-based privileges
- LDAP authentication
- Automatic lockout after repeated attempts
- Optional key-based SSH access
- Traffic and bandwidth shaping
- Captive portal with user data transfer quotas
- External RADIUS authentication [w/pkg]
Configuration
- Setup wizard for initial configuration
- Encrypted automatic backup to Netgate server
- Easy configuration backup/restore
- Multi-language support
- Web-based GUI management
Monitoring & Reporting
- Customizable dashboard with widgets
- Local monitoring graphs
- Remote logging
- Network usage monitoring [w/pkg]
- Network diagnostics [w/pkg]
Support Information
- TAC Lite included with purchase
- 24x7x365 zero-to-ping support
- Access to pfSense+ online documentation
- TAC Pro and Enterprise SLA available
Warranty Information
- 1 year manufacturer's hardware warranty
- Extended warranties available
- Standard 30 day return policy
- All specifications subject to change
Additional Information
- Not PoE Compatible
- Console cable (MiniUSB) included
- Wall mount keyholes integrated
- Quick Start Guide included
















