Update: this is what I ended up with.
Route based VPN using this guide as a template.

Master site: 1x ER 12 + 1x ER 4
Sites A, B, C & D :1x ER4 each location
Colo: 1x ER4 & 1x pfSense (SM x10SDV-TLN4F+)

@JaredBusch said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@scottalanmiller said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@JaredBusch said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@scottalanmiller said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@Pete-S said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@scottalanmiller said in Setup: EdgeRouter 4 + co-lo + infrastructure:

@Pete-S said in Setup: EdgeRouter 4 + co-lo + infrastructure:

Can't edgerouter do
failover?

As in a live/live cluster? That uses VRRP and yes, they can.

https://help.ubnt.com/hc/en-us/articles/204962174-EdgeMAX-Virtual-Router-Redundancy-Protocol-VRRP-

Then that is the way to go.

I would agree.

It is the best thing to do. Sadly I have never had the leisure to actually test it. I have a pair of ERL in colo but they were put in place long before this feature was added.

Yeah, but I have been authorized to make some upgrades that will free up an ERL for us, and we have an ERL in our colo. So maybe I'll ship one out there to do this soon. That would be an awesome project.

Don't think I would try and live test in colo.

085260da739d5f8723a626ab23a0da4623be9458998bfc91b38c57cdffec16d4.jpg

@scottalanmiller said in IT legal resources?:

We have an attorney, but he's not specific to IT.

He does know IT?
Best way to proceed?

@jaredbusch said in IT Support: $ fee's charged:

Is there a minimum time increment that is billed?

15 minutes.

I'm assuming this is remote work. We were always 1 hour minimum for onsite, 15 minutes for a remote.

@wirestyle22 said:

I'm probably going to go for state jobs. I'm paid in bread and water currently so it's a big step up for me and a pretty secure job from what I'm told. I also miss working on a team.

My take on that is, as a general thing...

The more secure a "job" is, the less secure the "career" is.

I like it.