MikroTik

Provably you guys see questions like these every day.

I am looking for a device that can support up to 300 tunnels with low traffic. What Mikrotik would you guys recommend and why? Is mostly to remote manage stores from our head office

My apologies if I broke any rule by making this my first post. Thanks in advance for your help.

What kind of tunnels?
What kind of reliability do you require?
What budget do you have?

I would say for any kind of enterprise use in a scenario like this, I would recommend at least something
like a RB1100AHx4 or a CCR1009-7G-1C-1S+ as they have dual power supplies, rack mounting, etc.
They also come with enough memory and CPU power to handle loads like this very easily.

What do you think is a safe capacity for RB 2011UiAS-2HnD?

rb2011, 20Mbps encrypted traffic. as to number of tunnels, someone would have to try it and see. The CPU in the 2011s are not exactly super powerful.

I have tried the RB2011. The most I would do is 2 tunnels.

If you are doing the hub and spoke VPN method, then the 2011 would be fine for the spokes. However, The CCR1009-7G blows the absolute doors off the RB2011. There really is no comparison. It can handle your loads without an issue.

I run a slightly larger network, and I use a pair of CCR1036-12G4S-EM as the hub. My spokes are a mix of RB2011 and CCR1009-7G. Basically if any one site has more than 30 clients, they get the CCR with a Ubiquti Unifi AP-Pro for wireless.

Hi! I believe that the best option for using VPN is with router that support IPSec hardware encryption (RB750Gr3 for example) that one seems to be a small router but it it's a most powerfull one than the Rb2011.