MikroTik RB4011 Ethernet 10-Port Gigabit Router (RB4011iGS+RM)

I primarily purchased this firewall router because I needed reliable IPSEC tunnels to my home office and this router has hardware acceleration. File transfers that used to take overnight now complete in minutes. Having 10 completely configurable gigabit ethernet ports over a pair of 2.5 GB switches is a definite plus. There is a learning curve though and most of the available information on the web is out dated having been posted about previous versions of routerOS. If youre up to the research this firewall router should be everything you will ever need in a home / small office firewall router.

Small, light and powerful

limited feature on openvpn, ddns my router come with messed up config, all open firewall setting, i need to update and reset the router

Runs my Gigabit internet over 900Mbps

Greatly improved the performance and security of our home/small business network. The GUI allows me to easily setup what I want and dont want. I was a little intimidated by other reviews, but it was straight forward. I had all the ports set up and doing what was needed in less than 20 minutes.

I migrated our system from Ubiquiti. I had an Edgerouter Lite and 2 APLite access points. I became sick of the promise of Ubiquiti equipment. What killed it in our house was WIFI calling from cell phones that kept dropping calls which I was able to trace to the Edge-router Lite. Their APLite access points were also unreliable. Adoptions half the time failed, and Ubiquiti software is poor and unreliable and for whatever reason doesnt integrate the Edgerouter Lite with the APs. IP addresses were obviously being assigned by the Edge-router, but half the time didnt show in the list. So, out went the APLites in favor of TP-Link Omada AC1750s, and this, the MikroTik RB4011 Ethernet 10-Port Gigabit Router. From a speed performance, no drop off from the Edge-router, and also runs cooler. reboot times much faster. Upgraded firmware without a hitch, and all equipment works without a hitch. Best of all, NO DROPPED WIFI CALLS from the cell phones. I dont know if there was a setting in the Edge-router that defaults to a protocol that needed to be changed and I just didnt see it, or if it is a defect in router software. Either way, it solved my problem. Of interest, I port forwarded the address for my Plex Server on the MicroTik which allows me access to my media from outside of my network. Plex shows the network as unavailable, but it all works outside my home network. Dont know what the setting on the router is that would fix that (or if it is the router at all), but it works.

I bought this to replace a working Mikrotik Hex S in order to increase the VPN performance. The performance increase was in line with what I was hoping for based on reviews. The only thing I did not like but I knew about purchasing the unit was this unit does not have a micro SD card slot to use for Dude and other uses. The interface is not for those used to a Linksys or Netgear unit but once you understand the syntax of the various commands whichever method you use to manage the router, it is a powerful unit for controlling the border of your network. I use this with the Mikrotik cAP Dual-Band 802.11 AC RBcAPGi-5acD2nD-US access point to provide wireless access on my network managed by CAPsMAN from the router.

Great

If you know Mikrotik, youll love the power of this device for the money - youd have to pay double or more for a Cloud Core class or 1100ah class to get the same grunt of this device. Nice to see SFP+ for a 10 gig link as well. Why would you need this? If you want to custom program complex firewall rules, most routers slow way doing doing complex things where this unit will blaze forward with low latency. For example, I have all my IoT devices on a a couple different and segmented VLANd SSD networks. Then, I have THOSE devices operating on a nailed-up VPN that presents their traffic as if they exist in another city for complete isolation. This router does all of that without any noticeable impact to CPU. These devices have a separate DHCP server on this router with their own IP subnet. Another scenario - I have a foreign country block list that simply black lists any incoming traffic from bad-actor nations - to just cut down on any attack surfaces. Heres another one - I use port-knocking to open up certain ports so I can access things like RDP using a port-knocking app on my phone. Heres another one - this router (a Mikrotik feature) has built in DDNS - which I use to connect to another similar unit at my folks house to create a site-to-site IPSEC secure tunnel so I can reach their local LAN to help out with network administration. No problem for this router - the encryption is done by a dedicated chip that does not affect CPU load. Heres another one - can organize your ports anyway you want - can group any combination of ports into separate Switch groups for hardware line-speed switching or use the CPU to create Bridges that can then do packet inpsection to look for keywords or patterns. Heres another one, this device not only has a DNS server that can cache DNS requests for more speed, but you can add static entries to redirect traffic to IP addresses of your choosing - sort of like a hosts file but for your entire network. If you dont know Mikrotik, there are plenty of tutorials out there (search for Greg Sowell Mikrotik to get started). Features you come to love are the rich built in tools that can capture traffic, can do in-gui sniffing to see where traffic is flowing (called Torch), IP-scanning, ARP analysis, bandwidth testing, and my favorite - this device can operate on Layer-2 using a Layer-2 telnet protocol, which means that even if IP addressing is not configured, you can still get to these devices to configure them. For super power users, can do BGP, OSPF, full SNMP and more.

Since Covid we have been working with WIFI and Ethernet cables running on the floor across the house. I converted a closet to hold the Router, Modem and battery backup. It runs 4 tvs and 3 work stations with no problem. This unit does not have WIFI. Label the cables and see how fast the teenager comes from there room when you disconnect them from the router. This router is fast but the teenager might be faster...... This is a good buy for a secure home office.