MikroTik 5x Gigabit Ethernet, Dual Core 880MHz CPU256MB RAM, RB750GR3 (880MHz CPU256MB RAM, USB, microSD, RouterOS L4)

★★★★★ (5/5) 𝐖𝐢𝐫𝐞𝐝 𝐭𝐡𝐫𝐨𝐮𝐠𝐡𝐩𝐮𝐭★★★★★ (5/5) 𝐖𝐢𝐫𝐞𝐝 𝐬𝐭𝐚𝐛𝐢𝐥𝐢𝐭𝐲★★★☆☆ (3/5) 𝐂𝐨𝐧𝐬𝐮𝐦𝐞𝐫 𝐮𝐭𝐢𝐥𝐢𝐭𝐲★★★★★ (5/5) 𝐒𝐎𝐇𝐎 𝐮𝐭𝐢𝐥𝐢𝐭𝐲𝐏𝐫𝐨𝐬:► Plug and Play as a basic home Internet router. Just four simple instructions that are on the underside of the box► symmetric Gigabit Ethernet on LAN even with realistic firewall rules, tested with router Bandwidth Test tool and free third-party iperf3 standard tool. Widespread user reports of symmetric Gigabit Internet speeds for those lucky enough to have fibre► minimal bufferbloat making it great for low latency applications (hello gamers!), tested with DSLReports Speed Test site and a cable modem in bridge mode► fanless and silent. Case is plastic but good quality► power efficient: maximum of 5W► externally secure by default configuration (zero ports accessible from WAN side except for ICMP). Tested with nmap tool► every port can be independently or collectively configured, i.e. no special WAN ports required► has almost every pure routing feature you can imagine for consumer, prosumer and small businesses, including software support for VLANs. Powered by the exact same software used in Mikrotik's ISP and enterprise products called RouterOS► great multi-document, highly responsive and "flat" (no deep drilldown menus) WinBox software for Windows PCs or Linux Wine or Windows VMs makes the router configuration very accessible. Can also be configured by http, https, and ssh► comes with exactly one QuickSet configuration ("Ethernet"). So, you cannot go wrong with the simplest default configuration► upgrading the router is a button click away or just dragging a file from your web browser directly into "Files" of WinBox► powerful stateful firewall similar to Linux's iptables, including Layer 7 (application) rules. The action of each rule can be logged► full size USB 2.0 port for storage, modems, usb host or other devices► hardware accelerated IPSEC support► trivial to backup to binary file or export whole configuration to text to share with others or for support► many bundled networking tools with RouterOS► even more powerful networking tools by adding microSD storage space or using a USB drive for Mikrotik's free Dude Server software► very configurable logging including to email, file or syslog server► mode button and LEDs can be configured to do/show arbitrary actions► real-time counters and statistics available everywhere, from interfaces to ports to firewall rules to bridges to router resource usage, etc.► temperature and other sensor information, but it never gets remotely hot (30 C / 86F) under temperate conditions► free firmware and unlimited RouterOS updates for life► 12 months hardware warranty► Level 4 RouterBOARD License comes with the device = 15 days free support, including over email► if you need it: command line interface and scripting is very powerful, flexible and easy to get used to► quick to boot, power cycle and reset► very stable in both uptime and performance𝐂𝐨𝐧𝐬:► outside of the basic QuickSet profile(s), far more complex to configure than a typical consumer or even technical enthusiast router. This is no exaggeration, plan for DAYS not minutes for anything harder than port forwarding or client VPN the very first time. But once you understand what you need, it's straightforward and even inviting► currently missing support for OpenVPN with UDP and other OpenVPN features. Can only use OpenVPN with TCP► currently no hardware acceleration for OpenVPN► no easy Content Filtering and no UTM services. Layer 7 rules are not trivial. Easiest and most performant way to content filter is by DNS, following the guidelines from OpenDNS and then redirecting all DNS network traffic to these settings► no consumer-friendly, centralized documentation► no port forwarding or UPnP wizard or other obvious task wizards. This would be helpful for retail customers since that's their number one reason to touch a router's configuration after initial setup and upgrades► for a tiny, plain looking white box, it activates a lot of big LEDs on the box cover, including blue ones, instead of the traditional embedded port LEDs. Be aware where you want to place it. The LEDs cannot all be disabled at this time on this specific Mikrotik device𝐀𝐝𝐯𝐚𝐧𝐜𝐞𝐝 𝐂𝐨𝐧𝐬:► no PoE out nor PoE pass-through (unlike the Ubiquiti Edgerouters)► Passive PoE in, not standard 802.3af or 802.3at PoE► no SFP cage► weaker switch chip than previous hEX (RB750Gr2), which had the powerful QCA8337 switch chip. This RB750Gr3 (using MT7621 SoC) does not have hardware support for VLANs on switch nor switch rules, despite having a more powerful CPU► no standard Linux or other unix support, despite Terminal support that looks like unix► currently MetaRouter (a type of "virtual router") cannot be used with devices using SPI flash in RouterOS► not easy to load up other operating systems, e.g. OpenWRT/LEDE, though it can be done► despite a comprehensive command line interface (everything a user can do in RouterOS can be done by a command and almost all also by GUI), there is no logging of changes as commands. This is poor for enterprise audit reasons𝐓𝐢𝐩𝐬:► upgrade your RouterOS and firmware ASAP. Just like any other router, you need security updates and may get useful new features and performance improvements. There are Bugfix/Stable, Current/Release and Beta/Release Candidate update options. Unless it is for business use, just get the Current update► change your Router password, just like on any other router. It is empty by default► the router is not in stealth by default. It still allows ping responses from the entire Internet. If you don't need pings/ICMP from the Internet (extremely unlikely), you should consider disabling this Accept rule in the IP Firewall Filter Rules section. You can test with the famous Shields Up! GRC Security site, which advises the same► if you want help configuring anything, the online Mikrotik Wiki can be very useful, or consult the Mikrotik forums or Reddit /r/mikrotik. Youtube should also have the very basic, e.g. port forwarding, and some advanced configurations (it's in-between where it is less useful)► many things are easier or just a copy & paste away using commands in the Terminal, e.g. based on the default factory configuration, port forwarding is just "/ip firewall nat add chain=dst-nat action=dst-nat protocol=tcp dst-port=1234 to-address=192.168.1.234 to-port=1234" (change the ports, change the to-address, DONE)► you can use the "/export hide-sensitive" command to share your configuration with others without sharing passwords.In short, you won't find any more value in a wired-only router at this price point. Mikrotik appear to have it on lockdown with the feature set of the hEX RB750Gr3.

I bought this because it was cheap among the many other options. I needed something that could do port forwarding better than the Virgin Media 'superhub' as the options on there are: Open to the world, or closed.I stumbled across Mikrotik in a YouTube comments section about a UniFi USG. I own two UniFi AP lites and it was the obvious choice. But I saw the price of this and did some reading about the functionality it gives for it and thought I'd give it a shot. Hardware wise, this has more to offer than the USG, so I took that as better value.Little did I know that this unassuming plastic box can do pretty much any kind of packet pass-through you can dream of, even if the configuration is totally wrong. This is networking without the stabilisers; consider it a challenge, and a very rewarding one at that. If you want something simple with a plain web UI and simple options, this is not the router for you. The kind of person who buys a Mikrotik product for the home is one who is sad enough to list networking as a hobby.I hope by now you've decided whether this sounds like the sort of thing you'd like to get into. My theory on Mikrotik after using it for a few months is: if you learn the Mikrotik way, everything in networking is easier after that point. It is recommended that you download the Winbox software and interact with the settings that way, it is quick to use and reliable.My first goal was to get this hooked up to my modem mode 'superhub' and get internet access. This can be done using the quick set options within the interface, and within 20 mins of unboxing it for the first time I at least had internet access. The default Firewall rules are sensible, but I looked online at various guides of how I can secure it down a bit, of which there are a few decent YouTube videos that actually describe why you are clicking certain check boxes and what the impact of it is - much of the RouterOS terminology is largely unique to Mikrotik and best practice networking manuals. Even in the age of the internet, there are few easy to follow guides that properly explain RouterOS, so having a strong networking background would be advantageous as you watch the odd how-to guide.I struggled a bit trying to set up a NAT port forward from a specific IP into my home, but after some research and creating an account on the Mikrotik forum I got the advice I needed and the rule is now working. Rather handily you also get a little indication how how much data tx/tx the rule has had going through it.So with the internet up and running everything was good. I had my access points hooked up to it, DNS/DHCP policies were configured and it all just worked. The Routerboard didn't cut out, LAN latency was minimal, and packet loss when playing games was gone! I've had this running for 4 months and not had a single problem with my home internet.If you want a cheap, reliable router for home or a small business packed full of enterprise grade features. This is the most cost effective choice... That is if you don't value the time you spend learning how to configure it!I'll be making a few more Mikrotik purchases soon I think.