RouterOS for multi-tenant internet access

RouterOS General
1

I’ve been looking for a router setup to use in an office building with the specifications below. I’ve never worked with RouterOS/Routerboard before, but I’ve heard good things and wonder if it would be a good fit here.

[] 50 tenants, each on their own VLAN and with their own subnet
[] 14 available public IP’s

I’m looking for a router that allows me to create 50 VLAN interfaces and do various combinations of NAT, i.e. provide NAT for tenant 1 through 10 behind public IP A and provide NAT for tenant 11 using IP B exclusively (including some port mapping). Routing between VLANs would be nice, but is not required. It would be nice to create a site-to-site VPN between one tenant VLAN and a remote Juniper router, if that makes sense.

The router itself will simply be connected to a trunk port on the switch with all tenant VLANs on one side and the WAN on the other side. I see many ‘mid range’ routers that are limited to low numbers of VLAN interfaces. Is RouterOS limited in any way? Also, what would be the best choice for a setup like this with a 100mbit internet connection and max ~350 users? The CCR1036 and even RB1100AHx2 seem like they would handle that with no problem.

Also, I’m looking to add redundancy to the central switches + router. This is easily managed in RouterOS right?

2

All you have wrote is possible. :slight_smile:

Please frequent a MikroTik course or ask for a Professional worker. :confused:

I think the forum is not adequate to start from 0. :frowning:

3

Oh that’s unfortunate, the forum looked active so I assumed it would be helpful :smiley:

Currently we rely exclusively on Sonicwall and Juniper SSG products which is pretty easy to use. I guess RouterOS will involve quite a lot more command line so some training would be helpful indeed.

4

Decided to opt for a Juniper SRX since there is so much more information readily available. I haven’t even seen the device and already know for 90% what my config file will look like. I’ll give Mikrotik a try if I ever have more time on my hands :slight_smile: