I replaced my ISP router with used enterprise gear because the hardware was cheap

Published Sep 13, 2026, 8:00 AM EDT Shivansh began his tech journey as an avid reader of tech publications, which inspired him to launch his career in video media at Sillycorns. He has led content across multiple tech YouTube channels and Instagram accounts, crafted go-to-market (GTM) strategies for Vivo, and consulted on digital growth. Coming full circle to his roots in written media, he now delivers deep-dive tech journalism. Outside of his professional work, Shivansh loves watching movies, riding bikes, and playing cricket. For six weeks, I left my ISP’s gateway in a drawer and used a white, dinner-plate-sized Cisco Aironet 2802i instead. It cost less than a large pizza. Like many home lab enthusiasts point out, old enterprise hardware can be ridiculously capable for very little money. The catch is that it’s built differently. Think of a commercial kitchen range: cheap, powerful, but it needs the right setup. My Cisco was no different, and two hours with Cisco’s documentation told me an extremely important fact. Thanks to me, you will know this fact in just five minutes of reading. The listing price buys the range, not the gas line Nothing in the box plugs into a wall outlet Open a used enterprise access point, and you get an access point. No power brick, no wall wart, no cable. The Cisco datasheet lists exactly two ways to feed it: an 802.3at PoE+ port, or Cisco's own AIR-PWRINJ6 injector. It wants 22.5W at the source, or 26.5W with the USB port switched on. Note the "at" in 802.3at. Hand this thing an ordinary 802.3af port at 15.4W, and it does something worse than failing. It boots. It pulls an IP. The status LED cycles red, green, and blue, the controller reports it at medium power, and both radios stay off. You get a fully working device that broadcasts no Wi-Fi. Then there's the part I'd skipped entirely. This is an access point. Two Ethernet ports, a console port, and not one of them is a WAN port. No modem, no NAT, no firewall. It replaces the Wi-Fi half of your gateway and leaves the other half as your problem. Six burners, and nowhere to plug in the toaster. So the gas line was the first surprise. The second was who Cisco assumed would be standing at the range. Access Point assumes somebody else runs the kitchen Cisco says controller-based, and it means that literally Look at how Cisco writes the part number in its own end-of-life bulletin: dual-band controller-based. That isn't marketing. In its default mode, the 2802i boots, scans for a wireless LAN controller, and waits. No controller, no SSID. The radios are fine. Nobody has told them what to broadcast. There is a second flavor, the C-suffix part numbers, which ship with Mobility Express: a controller running on the access point itself. Same plastic, same photograph, completely different Saturday. Listings rarely say which you're getting, and the seller often doesn't know. That's the bit the home lab threads undersell. Thirty dollars buys you the burners. It doesn't buy the line cook who knows the range, and at home, that cook is you. Fine, I thought. I'll flash it to Mobility Express and be my own crew. Then I opened Cisco's download page. The parts counter closed years before I bought the range And Cisco can't sell me a seat at it now Cisco's software downloads FAQ is direct: you need a valid service contract to download software updates. Hit the download page for a 2800 series access point without one, and you get a login wall telling you to attach a contract to your profile. So I went to buy one. I can't, and neither can you. The end-of-life bulletin lists an End of New Service Attachment Date of October 31, 2023, the last day anyone could order a support contract for this hardware. It's a door that is closed and locked. Before you buy used enterprise hardware, find its end-of-life (EOL) bulletin and read the End of New Service Attachment Date. Once that date passes, no amount of money buys you a support contract, and for most vendors that means no firmware. There would be very little behind it anyway. The same bulletin puts End of Software Maintenance Releases at May 1, 2024. AireOS, the code Mobility Express runs on, got security fixes only until January 30, 2025. After that, Cisco says it will publish no new AireOS releases at all. The advisories keep arriving regardless. Cisco's page for this series still lists new security notices, including one from August 2026. Then there's field notice FN63942, on access points whose manufacturer-installed certificates have expired. Once they do, the access point can no longer join a controller. Cisco puts the likelihood at 100 percent for units built before 2017. The 2800 series shipped on February 9, 2016. Cisco's recommended remedy for the certificate problem is a software upgrade. You already know how that ends. This is where I'm supposed to say I wasted my money. Thankfully, something surprised me (and in a good way). The range sears better, but that was never the argument I just wasn't the cook it was built for Everything the enthusiasts say about this hardware is true. It's a 4x4 Wave 2 radio with three spatial streams and a flexible radio that can put both chains on 5GHz. It does spectrum analysis, real VLAN tagging, and 802.1X, on a limited lifetime hardware warranty. Nothing at thirty dollars does any of that. It's also Wi-Fi 5. Wave 2 is the top of the 802.11ac ladder. No 6GHz band, nothing newer. The box I'd exiled to the drawer was a Wi-Fi 6E gateway, and Comcast's current XB10 pairs DOCSIS 4.0 with Wi-Fi 7. I had replaced a 2026 kitchen with a 2016 one and called it an upgrade. Used Cisco Aironet 2802i The Gateway in the Driver Wi-Fi Generation Wi-Fi 5, 802.11ac Wave 2 Wi-Fi 6E or Wi-Fi 7 Power 802.3at PoE+ only, up to 26.5W Wall outlet Firmware Contract you can no longer buy Pushed by the ISP VLANs, 802.1X, spectrum analysis Yes Rarely What it costs you About $30, plus an injector Usually nothing extra The fix is to buy those features from a vendor that still opens the parts counter. Ubiquiti publishes dated firmware for every current UniFi access point on a public page. No login, no contract. TP-Link Omada and MikroTik are the same. And if coverage was all you wanted, a decent mesh kit gets you there with less reading. Check the support dates first. The price is the easy part. So the gateway came out of the drawer The white disc is still on my bookshelf, running as a plain access point on the last firmware it will ever have. At that one narrow job, it is excellent. The gateway sits under it, using the modem, the routing, and the firewall it was always meant for. Old enterprise gear isn't a scam, and it isn't a shortcut. It's a working kitchen someone else has already paid to install, and the listing price only ever covers the range. Before you buy, open the end-of-life bulletin and find the service attachment date. If it has passed, you aren't buying supported hardware. You're buying hardware, and you're the support.