5 ms·
Over the summer I upgraded to gigabit symmetric fibre and wanted something a bit more 'enterprise' at home that wouldn't have any issues keeping up (compared to
by lucaspiller 9y ago
Over the summer I upgraded to gigabit symmetric fibre and wanted something a bit more 'enterprise' at home that wouldn't have any issues keeping up (compared to consumer wifi router running OpenWRT I'd used before). I bought a Mikrotik RB750Gr3 "hEX" and Unifi UAP-AC-Lite - it was around €180, so the same as buying a good consumer router.
I admit I haven't had any performance issues with the router (although I'm not running any complicated routing rules), and out of the box it was setup to run as a NAT router, so it was just plug and play. However once I started digging into it I started reaching the limitations. As others have said the documentation is pretty bad, and the only way to tell if something is supported by your hardware is usually to try it and see what happens (or read a 40 page thread in the forums). Here are a few things I had issues with:
- Using a USB LTE dongle as a backup WAN connection. At first the device wasn't recognised, I then connected it through a powered USB hub and it worked, but then after rebooting it wasn't recognised again, but if I physically reconnected it then it worked - but for a 'backup' that kind of sucked (this was later fixed in a software update).
- VLANs. I wanted some ports to be tagged on a certain vlan, no matter what the device was sending (I want to have a 'media' VLAN), after I while I found out the hardware doesn't support that though, so I gave up on that idea. I setup the AP to have a guest network running on a separate vlan, and wanted that to have no access to my network, after trying for a few hours (and usually locking myself and having to factory reset the router each time) I gave up. This was only a stop-gap anyway, as I'd planned to get a managed PoE switch.
- VPNs. I wanted to setup an outgoing OpenVPN client, and route some traffic through it based on IP (Netflix). I also wanted to setup an incoming OpenVPN server, so I could access my network from the outside. RouterOS has built in support for OpenVPN, but the features are somewhat limited, for example as a client it doesn't support certificate authentication (but as a server it does).
The Unifi was a breeze in comparison, like the Apple of networking gear, but in the same way the options are somewhat limited (and having to install an application to configure networking gear feels weird). To be honest I liked OpenWRT better than both of these... the documentation, ease of use, and being a developer I feel right at home editing configuration files. I assume PFSense would be a good choice too.
- colanderman 9y ago> I setup the AP to have a guest network running on a separate vlan, and wanted that to have no access to my network, after trying for a few hours (and usually locking myself and having to factory reset the router each time) I gave up. It probably took me weeks to get a working guest network setup on my MT. That is one thing I wish they'd automate. I don't regret it, as I'm partly into MT so I can learn more about networking, but it makes it hard to recommend to others who want a basic home router. (CAPsMAN helps a little, in that you can direct it to isolate all clients on a given SSID from each other, even across APs, but that still leaves you with configuring routing. It also has a packet fragmentation problem in that mode…) I had my own VLAN fun when I tried to configure VLANs through the switch menu. Turns out that doing so overrides port master/slave configuration with no warning. I ended up bridging my WAN and LAN ports for a few days… (Now MT is thankfully starting to move away from direct configuration of the switch chip and instead using it to transparently accelerate bridges.)