Buying advice + need help understanding performance / Test Results

Hi guys,

Moving to a new house soon with 1Gbps fiber. Looking very much forward to that off course and I’m looking for a Mikrotik router/firewall device that can handle that.

How do I best read the Test Results page on the product website? Is the “25 ip filter rules” routing numbers in the 512 byte column the most representative for a normal household / small business use case?

I have a few cAP AC’s on the shelf already for covering the new house in Wi-Fi but will also need a new PoE switch to connect everything: A couple of small servers/NAS’s, some workstation desktops, a few laptops and off course mobile phones and tablets. IoT devices are starting to pop up as well.

Any recommendations for firewall/router/switch combo is highly appreciated.

Thanks in advance and stay safe out there

Many forum members tend to think this way.


Device, closest to your requirements, would be RB4011 … which is very decent router and fair switch (as long as VLANs are not in the picture). But: it doesn’t support (standard) PoE. It only supports passive PoE out on single ethernet port (ether10) which would be fine to power one (or two if they were daisy-chained) of your cAP acs. Mikrotik devices, which do support PoE out on multiple ports and supporting standard (802.3 af/at), are not routers … so even if they can route, they are not up to 1Gbps WAN.

So I guess if you want to go with Mikrotik, you’ll have to settle for 2 “core” devices: a router (RB4011 is good, there are a few cheaper devices which would “just make it” at 1Gbps or slightly lower) and a switch (look at CRS3xx line).

Hi @mkx,

Thanks for your answer - unfortunately the notification system did not tell me you replied. Need to investigate that.

Anyways: I don’t mind at all to split this into several devices. I was just looking for inspiration a good combination. :slight_smile:

So I also was tuning in to the RB4011 as the router/firewall device.

And then on the hunt for a good switch. PoE kinda messed up the choices… :slight_smile:

Thanks again

It seems more accurate to use 25 simple queues or something in between 25 firewall rules and 25 simple queues, but yes 512 Mbps…is the closest Ive found to being accurate.
The RB450Gx4 will also handle 1gig but for a future router investment you cant go wrong with the RB4011.
Instead of the capacs, I would recommend the TP link eap245 model ( that is if you want happy homeusers - and trust me their wrath is worse than customers lol).

Hi @anav,

Thanks for the inputs on how to read router performance.

I have been looking at TP-Link EAP 245’s for sure. As alternatives to the offerings from Ubiquiti that I have used in the past. By the way the Omada controller seems to be a complete copy of the Unifi controller - I have found that a little strange…

I’m just strangely drawn to the Mikrotik universe of detailed control and just happened to have the cAP AC’s just sitting in boxes on the shelf never used… But I guess the level of detailed control is both the strong- and weak side of the products depending on who you ask and the use case.

Thanks :slight_smile:

By all means give them (capacs) a go, I enjoy tinkering with them and using them has helped me setup vlans etc.
I dont use any omeda controller, I just configure via PC or my iphone omeda app.

@henrik27, maybe you can take a look at CRS328-24P-4S+. I have 7 cAP ac and 8 IP camera which are powered by this POE switch. I have used it for about a couple of years and it is pretty good.

@brg3466 - yeah; that switch is nice for sure. Thanks for the suggestion.

The problem is my future house is not wired up (yet) and I’m not sure I will be able to truly wire everything out from a central location. So most likely I’m going to build a more de-centralized solution with 3 locations that need a small switch each. Imagine a core-switch with 8-12 ports and 2 distribution switches with 4-5 ports at each. So very small scale :slight_smile:

At these 3 locations I would like to be able to connect AP’s and Camera’s with PoE and also serve a few wired computers, servers and NAS’s etc.

@anav: I was thinking to just try them out and also learn to use CAPsMAN in the process. Having the TP-Link or Unifi AP’s as an out if the need arise :slight_smile:

Thanks both for your time and reply’s. Much appreciated.

Great idea Henrik. I would suggest learning how to setup and tweak the capac first, and then learn capsman.