I've searched the forum for choosing the right router but I am still unclear.

My condition:
1. I am deploying for a hotel of 200 rooms.
2. 5-ethernet interfaces on the router is sufficient (2 WAN (Main and Redundant) & 1 LAN).
3. Internet bandwidth is 100mbps (75 for guests, 25 for office). Commercial internet is expensive in my country.
4. Total AP count = 200 AP for guests, 15 AP for internal office.
5. Mikrotik will run hotspot & Radius (is this best practice? should I run this on a separate box?)
6. Roughly 15 VLANs (14 office, 1 guest)

Total client devices assumption:
Say up to 500 simultaneous wifi devices from guests, and 60 Office PCs (combined lan + wifi).

I have an eye on 4 units (from low to high). I don't know which cpu/ram combination is the right one for my use-case:
https://mikrotik.com/product/hex_s (and upgrade lic to 5 (or 6 if needed))
https://mikrotik.com/product/RB3011UiAS-RM (and upgrade lic to 6 if needed)
https://mikrotik.com/product/rb4011igs_rm (and upgrade lic to 6 if needed)
https://mikrotik.com/product/CCR1009-7G-1C-1Splus

What would you suggest.

I've been reading that QOS and Firewall consume the most CPU. What about RAM? Source: viewtopic.php?f=2&t=93518&hilit=ram

Just to add:
1. I foresee my firewall rules to be simple.
2. There will be no (or very little, less than 10) VPN connections inbound.
3. We are not running any servers in-house that need to be accessed from outside.

QOS:
1. Office VLANS limited to 25mbps (ul/dl limit per device, with some priority devices).
2. Guest VLAN limited to 75mbps and ul/dl limit per guest device.

----

I am leaning to https://mikrotik.com/product/rb4011igs_rm. My only worry is the hotspot feature for 500 users, will it run smooth on the rb4011.

RB4011 for you!

RB4011 for you!

Thank you. My experience with Mtik is only a week. It looks like the winbox interface and ROS code is the same across all devices.

The code sections (so far) that will be part of my deployment include interface, bridge, vlan, dhcp server, firewall, nat, mangle, queue trees.

I am testing/designing my mtik deployment on my hap-ac2. The hap-ac2 and rb4011 share the same arm-32-bit architecture. Does the code translate directly (copy and paste) to the RB4011?

Thank you

By "RoS code" do You mean scripts to run on the router's command line/scheduler? If yes, then they will run on every Mikrotik device. But remember that, as the hardware is different, You may have to adjust it a little. Things like number of internal switches, number of ports, name of ports (SPF vs ethernet), and so on.

It depends upon what You are doing and referencing.

I've been reading that QOS and Firewall consume the most CPU. What about RAM? Source: viewtopic.php?f=2&t=93518&hilit=ram

Just to add:
1. I foresee my firewall rules to be simple.
2. There will be no (or very little, less than 10) VPN connections inbound.
3. We are not running any servers in-house that need to be accessed from outside.

QOS:
1. Office VLANS limited to 25mbps (ul/dl limit per device, with some priority devices).
2. Guest VLAN limited to 75mbps and ul/dl limit per guest device.

----

I am leaning to https://mikrotik.com/product/rb4011igs_rm. My only worry is the hotspot feature for 500 users, will it run smooth on the rb4011.

I suggest RB1100AHx4, almost same hardware than RB4011, redundant PSU and RouterOS license level 6.

Enviado desde mi Alcatel_4060A mediante Tapatalk

I suggest RB1100AHx4, almost same hardware than RB4011, redundant PSU and RouterOS license level 6.

You are right. After upgrading ROS level 5 to 6 in the RB4011, it will cost more than the RB1100AHx4, and does not come with redundant PSU. I was going to order the RB4011 tomorrow, your advice is timely. Thank you.

By "RoS code" do You mean scripts to run on the router's command line/scheduler? If yes, then they will run on every Mikrotik device. But remember that, as the hardware is different, You may have to adjust it a little. Things like number of internal switches, number of ports, name of ports (SPF vs ethernet), and so on.

Yes that is what I mean. I am setting up my code for the deployment in my spare CAP-AC, and plan to copy and paste to the RB1100AHx4.

I use interface list WAN and LAN in my firewall rules so hopefully after adding the appropriate child interfaces of the RB1100AHx4 to the WAN & LAN interface list, my firewall rules shoult not need modifying.

Would the RB1100AHx4 be also sufficient for a 300mbps Uplink?

Would the RB1100AHx4 be also sufficient for a 300mbps Uplink?

If you go to its page, pick Test Results and you will see the throughput.
https://mikrotik.com/product/rb1100ahx4 ... estresults

I've attached it here to ease your search.


I don't quite know how to translate this to my scenario without committing to buying a unit.

Thanks for the Table I've also checked those and wasn't sure which of those values I should use for sizing.

I've found this analysis about the package size over Internet:
https://www.caida.org/research/traffic- ... graphs.xml

The last chart is the interesting one:
Using IPv4 most of the packets are under 100Kb (solid lines) but if you’re looking on the traffic (dotted lines) most of the traffic has a packet size over 1000Kb.

So i guess the best practise would be to calculate with an value between 512 byte and 64 byte ?