Community discussions

MUM Europe 2020
 
xcom
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 80
Joined: Sat Jul 05, 2014 8:59 pm

Help me decide

Wed Mar 28, 2018 8:28 pm

I need to have OpenVPN and Proxy capabilities. About 60 Devices and 5 Users. This will be in a Home Office environment with link to work with openvpn.
There will be Two asterisk servers behind it.

Which should I go with:

CCR1009-7G-1C-1S+

or

RB1100AHx4 Dude Edition
 
sindy
Forum Guru
Forum Guru
Posts: 4189
Joined: Mon Dec 04, 2017 9:19 pm

Re: Help me decide

Wed Mar 28, 2018 11:25 pm

I need to have OpenVPN and Proxy capabilities. About 60 Devices and 5 Users. This will be in a Home Office environment with link to work with openvpn.
There will be Two asterisk servers behind it.

Which should I go with:

CCR1009-7G-1C-1S+

or

RB1100AHx4 Dude Edition
If the asterisks should send and receive media streams via the OpenVPN as well, the answer is none of the two unless you have an excellent connection to the head office with no packet drops at all. The Mikrotik OpenVPN only supports TCP transport and tunneling RTP (voice packets) using a TCP transport makes the call quality unacceptable as soon as the TCP starts retransmitting packets.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
xcom
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 80
Joined: Sat Jul 05, 2014 8:59 pm

Re: Help me decide

Wed Mar 28, 2018 11:35 pm

Thanks for letting me know!
Regards,
 
nortonsupport
just joined
Posts: 1
Joined: Wed Mar 28, 2018 11:58 pm

Re: Help me decide

Thu Mar 29, 2018 12:07 am

We know that there are many issues in that mode because of their actions you can get help McAfee support to provide a more creative way to promote every time then you decide to help everyone.
 
User avatar
jspool
Member
Member
Posts: 399
Joined: Sun Oct 04, 2009 4:06 am
Location: Oregon

Re: Help me decide

Thu Mar 29, 2018 2:17 am

Why do you have to use OpenVPN? Are you connecting site to site?
 
xcom
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 80
Joined: Sat Jul 05, 2014 8:59 pm

Re: Help me decide

Thu Mar 29, 2018 2:22 am

Why do you have to use OpenVPN? Are you connecting site to site?
1- This is not my decision. Its my job.
2- Yes.
 
HzMeister
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Sun Jan 28, 2018 9:48 pm

Re: Help me decide

Thu Mar 29, 2018 4:34 am

How much bandwidth are you going to be pushing?

the ccr1009 is a lot more powerful than the rb1100ahx4. even though the rb1100 will most likely be enough for your needs, might as well get the fastest one within your budget.

also, since this in a home environment I'd suggest you get the CCR1009-7G-1C-PC instead. it's the same one but passively cooled - the little fans that are used in all actively cooled 1u rackmount units(not just mikrotik) are pretty loud, and you'll hear it from all corners of your house.

but if you decide to get the rb1100 i'd suggest getting the none dude version unless you have a very compelling reason need it.
 
squeeze
Member Candidate
Member Candidate
Posts: 146
Joined: Thu Mar 22, 2018 7:53 pm

Re: Help me decide

Thu Mar 29, 2018 6:49 am

I would have loved to hear sindy's suggestions for an alternative.

At this price point, you could consider building your own pfSense box or even get an RT-AC86U as an edge VPN router, if you care about OpenVPN performance at all. Both of those have fast enough CPUs with hardware acceleration (AES-NI) that can hit the bandwidth limit of any OpenVPN provider.

Then from the remaining budget, get the most appropriate Mikrotik switch or router you can afford for management.
 
User avatar
jspool
Member
Member
Posts: 399
Joined: Sun Oct 04, 2009 4:06 am
Location: Oregon

Re: Help me decide

Thu Mar 29, 2018 7:07 am

You could use an ASUS router as the OpenVPN client and either use it as router or just route your traffic to the ASUS from the Mikrotik. When Mikrotik finally makes the jump to UDP it will be a milestone. Hopefully UDP will still be around then.
 
sindy
Forum Guru
Forum Guru
Posts: 4189
Joined: Mon Dec 04, 2017 9:19 pm

Re: Help me decide

Thu Mar 29, 2018 4:27 pm

I would have loved to hear sindy's suggestions for an alternative.
Well, I've only reacted because my trouble detector has triggered on the combination of keywords "Mikrotik", "OpenVPN" and a word on VoIP_keyword_list{}. As the OP has stated he needs to use OpenVPN, I didn't suggest alternative VPN solutions (which, in case of Mikrotik, would only mean IPsec as all the rest is insecure or uses TCP as transport).
And I am not a specialist on Mikrotik hardware models so I don't feel competent to offer any advice on that.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
User avatar
CZFan
Forum Guru
Forum Guru
Posts: 1457
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Randburg
Contact:

Re: Help me decide

Thu Mar 29, 2018 7:02 pm

...
And I am not a specialist on Mikrotik hardware models so I don't feel competent to offer any advice on that.

@sindy Don't sell yourself short, your knowledge is way up there. I always enjoy reading your posts, very helpful and informative
MTCNA, MTCTCE, MTCRE & MTCINE
 
sindy
Forum Guru
Forum Guru
Posts: 4189
Joined: Mon Dec 04, 2017 9:19 pm

Re: Help me decide

Thu Mar 29, 2018 8:31 pm

...
And I am not a specialist on Mikrotik hardware models so I don't feel competent to offer any advice on that.
@sindy Don't sell yourself short, your knowledge is way up there. I always enjoy reading your posts, very helpful and informative
Thank you for the compliment, but I am nothing but realistic here - I've never seen a CCR alive, I just enjoy the (price*form factor)/performance ratio of the "plastic" product line. If I would have had anything more to say to the topic, I wouldn't have hesitated to do so ;-)
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.

Who is online

Users browsing this forum: No registered users and 101 guests