When you buy a Routerboard product it will be licensed with a certain level of RouterOS. Basically you would just want level 4 upwards. The limits are only on things like VPN or PPP tunnels etc. You would only buy a RouterOS license if you installed on x86 hardware.

Every single one of our customers (we are VoIP & broadband guys) get a Mikrotik router. The main reasoning was due to all the extra tools in RouterOS makes diagnosing faults remotely really easy - especially SIP issues with the built-in packet capture utility.

For basic sites we just stick with a RB951G-2HnD. Copes with 100Mbps over PPPoE, basic wireless, cheap as.

For a "head office" situations where you might have some site-to-site VPNs, remotes users, all that, the RB3011 is amazing. Then at the remote office, an RB750Gr3. That combo can easily cope with 80-90Mbps file transfers over L2TP/IPsec tunnels.

Mikrok hardware comes with the software.  You'd only buy the licence if you were installing it under a VM or on x86 hardware.

Asking "what it's like as a router" is a bit like asking how long a piece of string is. Like any router whether it's any good or not depends entirely on your requirements.

I've deployed a few hundred and think they're pretty good and there are certainly hundreds of threads on here discussing Mikrotik hardware. That doesn't mean they're a once size fits all solution and unless you want to commit to going down the path of learning RouterOS I'd honestly suggest you stay way from them.

chevrolux:

 

For a "head office" situations where you might have some site-to-site VPNs, remotes users, all that, the RB3011 is amazing. Then at the remote office, an RB750Gr3. That combo can easily cope with 80-90Mbps file transfers over L2TP/IPsec tunnels.

 

Thanks for that. The RB3011 is the one I have my eyes on. Looks like a lot of router for the money!

I'm looking for a decent router I can use in my own business - thinking of bridging to the internet via a VDSL modem - but also to deploy for others. 

Myself and one of my main customers use Cisco but I am starting to wonder if the Cisco thing is all worth it.

Does Mikrotik have any VPN accelerated hardware?

sbiddle:

 

I've deployed a few hundred and think they're pretty good and there are certainly hundreds of threads on here discussing Mikrotik hardware. That doesn't mean they're a once size fits all solution and unless you want to commit to going down the path of learning RouterOS I'd honestly suggest you stay way from them.

 

Thanks for that. In a nutshell, myself and my biggest customer are in the Cisco camp. As much as I like Cisco, I am really starting to wonder if it's worth it, and am looking for other options.

My requirements are basically - a generic business grade router box that can be conncted to the net via UFB or VDSL (bridged?) and can talk all the normal stuff as well as OSPF and BGP.

My most immediate need is something which will give me the gains from VDSL vectoring, but in the wider scheme I am getting cold feet on Cisco. I was quoted [far too much compared with other options] from the Cisco distributor for an 897, and even they can't tell me if it works in this application.

Decent VPN performace would be a bonus.

I hope this elaborates sufficiently.

Lowest end hardware with IPsec hardware support is https://mikrotik.com/product/RB750Gr3 but have a skim through https://mikrotik.com/products/group/ethernet-routers

After spending a bit of time comparing specs and ticking off features, I have narrowed it down to the CCR1009-7G-1C-1S+PC

https://mikrotik.com/product/CCR1009-7G-1C-1SplusPC

which seems to be a lot of router for the money.

Hi, I too can vouch for RouterOS as being a pretty fantastic setup, I would be very surprised if you ever regretted going down this route.

I have deployed a pretty large number in a wide variety of situations and have never met a new challenge that I could not solve with RouterOS in a reasonable time frame. This includes using all the basic routing features and includes dynamic routing (both OSPF and BGP) and lots and lots IPSec and GRE vpn's.

RouterOS can be a bit challenging for some at first, but as with most technology, if you understand the subject and underlying technology then assuming the tool is good for the job you will quickly make it work, and RouterOS is no exception, infact I would say its very easy to understand, maybe its better to say its like driving a 1970's Citroen compared to a similar age Corolla, all the controls are there somewhere, just in funny places and some you twist not pull, if you get my drift.  

One little gem I came across the other day was a VDSL SPF module that appears to work with RouterOS with no issues and is peddled by the NZ Mikrotik principal importer, this on a HeX PoE or 3011 would make a very smart solution, and far more professional than a Vigor or Huawei 630 in bridge.

Oh and thanks for the heads up on the 3011, had not noticed that one, my next "bigger" Mikrotik project was probably going to get a CRS, but the 3011 has a keener price and would seem sufficient for most needs.

Cyril

cyril7:

 

One little gem I came across the other day was a VDSL SPF module that appears to work with RouterOS with no issues and is peddled by the NZ Mikrotik principal importer, this on a HeX PoE or 3011 would make a very smart solution, and far more professional than a Vigor or Huawei 630 in bridge.

 

That is exactly what I am looking at. I have a Cisco 887VA at present and ideally would like to replace it with something of a similar level and price point. Cisco make some nice gear but their pricing and new model of licensing is increasingly looking like a taking the piss.

cyril7: [snip] One little gem I came across the other day was a VDSL SPF module that appears to work with RouterOS with no issues and is peddled by the NZ Mikrotik principal importer, this on a HeX PoE or 3011 would make a very smart solution, and far more professional than a Vigor or Huawei 630 in bridge.

I've seen them pop up for sale in a few places recently - may be a good option for the OP at xDSL sites. Curious as to how the config interface is accessed for them.

Hi, as for the SFP modem, cannot say I have used it, but if you google around you will find a few theads of those who say it works as advertised. I see Ascent have it as per the link below, so if anyone is game to give it a go then please report back.

https://www.ascent.co.nz/productspecification.aspx?itemID=448433

Cyril

Manufacturer's site.

From what I have read it simply appears as a GigE SFP interface you have no ability to see the modems status, however on the Gig interface simply tag v10 and PPPoE or whatever your ISP requires.

One user states he did not have a router with an SFP cage, so stuck it in his switch which did and it worked and he vlan'd it off on the switch to the WAN of his Router, so it seems its would work with anything.

Cyril

cyril7: ... on the ... interface simply tag v10 and PPPoE or whatever your ISP requires. ...

That's what we did and plugged the the other end straight into the ONT. Five months connection. No issues.

MichaelNZ: ... their pricing and new model of licensing is increasingly looking like a taking the piss. 

Heard this more than ten years ago and it still is true.