I'd go with something like the RB5009.

on paper it will do gig, but soon as you throw PPPoE, small packets or any rules that trigger connection tracking the RB960PGS will suffer heavily.

Fasttracked they do OK at passing 1G.

I used to use one as a wireguard termination router for management tunnels, they are great for that sort of thing.

Also remember it's passive PoE ;)

I am assuming you want an all in one router with POE out while the RB960PGS supports 802.3AF/AT it will only allow full 802.3AT on2 ports and 802.3af on four ports, and requires a separate power adapter.

The RB5009UPr+S+IN will support 4x 802.3AT at 30w draw or 8x with 16w or a mix to 130W total draw.

And like @hio77 said it will route at 1gbps with PPPoE just fine where as the RB960 will struggle.

Side Note: I bench tested the PPPoE client on the non PoE version of the rb5009 and go circa 2.2gbps iperf tests. Having said that in a real world environment you would be an idiot to use PPPoE on HyperFibre

nztim:

 

Side Note: I bench tested the PPPoE client on the non PoE version of the rb5009 and go circa 2.2gbps iperf tests. Having said that in a real world environment you would be an idiot to use PPPoE on HyperFibre

 

Try contracking with CAKE and mangle rules, brings it to its knees!

These will run at full gig rate on both pppoe and dhcp https://www.pbtech.co.nz/search?sf=mikrotik+chateau&search_type=prediction

noroad:

 

These will run at full gig rate on both pppoe and dhcp https://www.pbtech.co.nz/search?sf=mikrotik+chateau&search_type=prediction

 

You can disable the wifi and LTE if you want to just run it as an Ethernet router. This is the cheapest Mikrotik that will do full gig rate - https://www.pbtech.co.nz/product/NETMKT1527/MikroTik-Chateau-LTE7-Cat7-3G4GLTE-Gigabit-Cellula

What are your actual needs here?

Cheap, cheerful, does VLAN's and more advanced things: https://www.gowifi.co.nz/grandstreamnetworks/gwn7001.html 

Mikrotik that can do more than Gigabit: https://www.gowifi.co.nz/mikrotik/e60iugs.html << @noroad

Just note - the Mikrotik has a steep learning curve. I wouldn't recommend it if you're not into that sort of thing.

michaelmurfy:

 

Mikrotik that can do more than Gigabit: https://www.gowifi.co.nz/mikrotik/e60iugs.html << @noroad

 

Oh, clearly I'm behind on the product line. Thanks

michaelmurfy:

 

What are your actual needs here?

 

My guess is Router + PoE Switch in one device

michaelmurfy:

 

What are your actual needs here?

 

Cheap, cheerful, does VLAN's and more advanced things: https://www.gowifi.co.nz/grandstreamnetworks/gwn7001.html 

 

Mikrotik that can do more than Gigabit: https://www.gowifi.co.nz/mikrotik/e60iugs.html << @noroad

 

Just note - the Mikrotik has a steep learning curve. I wouldn't recommend it if you're not into that sort of thing.

 

All wants, no needs here😃.

Basically, I want a compact* gigabit ethernet router that will provide POE to three WAPs and a Pi and supports VLANs.  A steep learning curve is fine.  If I have to, I can get the POE from a switch, but that's another piece of kit cluttering and heating up the cabinet.  I don't need WiFi at the router.  The WAPs handle that.

The mikrotic unit you linked to is out of stock, but I found this at the same supplier: MikroTik E50UG hEX Refresh 5 Port Gigabit Router | Gigabit Routers, all types including Hyperfibre| Go Wireless NZ

(*) = fits within the inwall network cabinet in our garage.

nztim:

 

michaelmurfy:

 

What are your actual needs here?

 

 

My guess is Router + PoE Switch in one device

 

That's the main factors.  Mainly because right now I need a compact setup, within a20" within wall cabinet so fewer component is better.  I need to sort out garage storage and bunch of other things before I can put time into getting a proper rack setup.  Minimum liveable is getting three WAPs and the PiHole up and running on POE.

MikeAqua:

 

Basically, I want a compact* gigabit ethernet router that will provide POE to three WAPs and a Pi and supports VLANs.  A steep learning curve is fine.  If I have to, I can get the POE from a switch, but that's another piece of kit cluttering and heating up the cabinet.  I don't need WiFi at the router.  The WAPs handle that.

I would wait for stock of the E60iUGS instead of the older Mikrotik Hex Refresh if you're wanting a Mikrotik. It's a hell of a lot more powerful. You'll still however need a PoE switch (the grandstream switch below will suit you fine).

I don't think that other Mikrotik will work how you want it to with powering stuff over PoE - it's passive PoE and just outputs the same voltage you provide which will work fine with Mikrotik, but it won't power up a normal AP.

Personally, what I would do:

Router: https://www.gowifi.co.nz/grandstreamnetworks/gwn7001.html 
Switch: https://www.gowifi.co.nz/grandstreamnetworks/gwn7700p.html (these generate basically no heat)
Switch (Managed alternative): https://www.gowifi.co.nz/grandstreamnetworks/gwn7711p.html 

That should be a pretty solid and those switches will power any AP you plug into them. The managed one has a web interface if you wanted to do more advanced things otherwise that basic switch will work well.

I know they're 2 separate devices but they're both small and will work well for your needs. I rate Grandstream pretty highly.

michaelmurfy:

 

I don't think that other Mikrotik will work how you want it to with powering stuff over PoE - it's passive PoE and just outputs the same voltage you provide which will work fine with Mikrotik, but it won't power up a normal AP.

 

RB5009UPr+S+IN and RB960PGS (with the right PSU) are both 802.3AF/AT rather than passive POE with the limitations I outlined above

Not compact, but fits your other requirements

https://www.pbtech.co.nz/product/NETMKT1522/MikroTik-CRS418-8P-8G-2SRM-16-Port-Gigabit-Switch 

RunningMan:

 

Not compact, but fits your other requirements

 

https://www.pbtech.co.nz/product/NETMKT1522/MikroTik-CRS418-8P-8G-2SRM-16-Port-Gigabit-Switch 

 

This device will tank when used as a router, and has more ports than the OP needs

OP just get a RB5009UPr+S+IN and job done, as others have said Mikrotik does take some skill to properly secure though

michaelmurfy:

 

Personally, what I would do:

 

Router: https://www.gowifi.co.nz/grandstreamnetworks/gwn7001.html 
Switch: https://www.gowifi.co.nz/grandstreamnetworks/gwn7700p.html (these generate basically no heat)
Switch (Managed alternative): https://www.gowifi.co.nz/grandstreamnetworks/gwn7711p.html 

 

That should be a pretty solid and those switches will power any AP you plug into them. The managed one has a web interface if you wanted to do more advanced things otherwise that basic switch will work well.

 

I know they're 2 separate devices but they're both small and will work well for your needs. I rate Grandstream pretty highly.

 

Thanks for the advice.

How easy/hard is the Grandstream management software to use?

Eventually .... in a universe where I've pulled my finger out and built a rack .... the router ends up in system where the main switch is a Cisco 350 Series SG350X-24P L3, that someone gave me for free.  At that point the router can just rout.  It won't need to do any management