4 ms·

Look at MikroTik. 802.1x is supported in all products including SOHO ones. Also their wireless management solution (CAPsMAN) is decent.

oger 6y ago
+1 for MikroTik. Super good value IMO - especially in a home or small office environment.
DyslexicAtheist 6y ago
about MikroTik I'd be extremely worried about security - not exactly a good track record: MITRE/CVE's: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mikrotik https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mikrotik "Most MikroTik routers fail to get patched a month after severe security issues disclosed" https://portswigger.net/daily-swig/most-mikrotik-routers-fail-to-get-patched-a-month-after-severe-security-issues-disclosed https://portswigger.net/daily-swig/most-mikrotik-routers-fai... "Finding and exploiting CVE-2018–7445 (unauthenticated RCE in MikroTik’s RouterOS SMB)" https://movaxbx.ru/2020/01/29/finding-and-exploiting-cve-2018-7445-unauthenticated-rce-in-mikrotiks-routeros-smb/ https://movaxbx.ru/2020/01/29/finding-and-exploiting-cve-201... "Coinhive malware infects tens of thousands of MikroTik routers" https://searchsecurity.techtarget.com/news/252446369/Coinhive-malware-infects-tens-of-thousands-of-MikroTik-routers https://searchsecurity.techtarget.com/news/252446369/Coinhiv...
- iso1210 6y ago
  > "Coinhive malware infects tens of thousands of MikroTik routers" https://searchsecurity.techtarget.com/news/252446369/Coinhiv.. https://searchsecurity.techtarget.com/news/252446369/Coinhiv.... "Kenin said malicious actors were exploiting a vulnerability in the routers that MikroTik had patched in April -- just one day after the flaw was first discovered." So an exploit was found (it happens) and patched within 24 hours. From memory this was only vulnerable if you didn't block incoming winbox traffic on your wan port (which is of course good practice, and I believe the default configuration). Upgrading a mikrotik router is a matter of running "system package update install". You could stick that in a scheduled script if you wanted. Upgrading a cisco or juniper router requires things like support contracts, tac accounts, and other nonsense, then in many cases doing things like using tftp (!!) to copy a binary to the router, then ensuring you have a serial connection (!!) to the switch for when it breaks.
  - icedchai 6y ago
    Upgrades on Mikrotiks are so simple. I used them for over 10 years and never once had a problem. In my previous experience both from my ISP days and some time in a corporate IT "networks" department, almost nobody upgrades their "enterprise" (Cisco) routers or switches. It's too risky.
- iofiiiiiiiii 6y ago
  Sounds more like a track record of owners not patching their routers. Every brand of network devices has had serious security flaws. At least MikroTik is cheap and functional.

oger 6y ago

+1 for MikroTik. Super good value IMO - especially in a home or small office environment.

DyslexicAtheist 6y ago

about MikroTik I'd be extremely worried about security - not exactly a good track record: MITRE/CVE's: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mikrotik https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mikrotik "Most MikroTik routers fail to get patched a month after severe security issues disclosed" https://portswigger.net/daily-swig/most-mikrotik-routers-fail-to-get-patched-a-month-after-severe-security-issues-disclosed https://portswigger.net/daily-swig/most-mikrotik-routers-fai... "Finding and exploiting CVE-2018–7445 (unauthenticated RCE in MikroTik’s RouterOS SMB)" https://movaxbx.ru/2020/01/29/finding-and-exploiting-cve-2018-7445-unauthenticated-rce-in-mikrotiks-routeros-smb/ https://movaxbx.ru/2020/01/29/finding-and-exploiting-cve-201... "Coinhive malware infects tens of thousands of MikroTik routers" https://searchsecurity.techtarget.com/news/252446369/Coinhive-malware-infects-tens-of-thousands-of-MikroTik-routers https://searchsecurity.techtarget.com/news/252446369/Coinhiv...

iso1210 6y ago
> "Coinhive malware infects tens of thousands of MikroTik routers" https://searchsecurity.techtarget.com/news/252446369/Coinhiv.. https://searchsecurity.techtarget.com/news/252446369/Coinhiv.... "Kenin said malicious actors were exploiting a vulnerability in the routers that MikroTik had patched in April -- just one day after the flaw was first discovered." So an exploit was found (it happens) and patched within 24 hours. From memory this was only vulnerable if you didn't block incoming winbox traffic on your wan port (which is of course good practice, and I believe the default configuration). Upgrading a mikrotik router is a matter of running "system package update install". You could stick that in a scheduled script if you wanted. Upgrading a cisco or juniper router requires things like support contracts, tac accounts, and other nonsense, then in many cases doing things like using tftp (!!) to copy a binary to the router, then ensuring you have a serial connection (!!) to the switch for when it breaks.
- icedchai 6y ago
  Upgrades on Mikrotiks are so simple. I used them for over 10 years and never once had a problem. In my previous experience both from my ISP days and some time in a corporate IT "networks" department, almost nobody upgrades their "enterprise" (Cisco) routers or switches. It's too risky.
iofiiiiiiiii 6y ago
Sounds more like a track record of owners not patching their routers. Every brand of network devices has had serious security flaws. At least MikroTik is cheap and functional.