MikroTik

In this MikroTik newsletter:

- new RB4011 series
- CWDM products - combine up to eight fiber links into one
- new 2.4 GHz sector AP mANTBox 2 12s
- new 60 GHz CPE SXTsq Lite60
- new 6 GHz AP BaseBox 6
- new SFP 1.25 Gbps modules for 80 km links
- upcoming MUM events in 2018

Download newsletter:
https://download2.mikrotik.com/news/news_84.pdf

Have MikroTik ever had a discussion about the format of rackmounts. So to be able to mount TWO instead of only ONE RBx00x device in 1 rack-unit?

Would love to have the option of mounting 2 RBx00x devices in 1U instead of having to use 2U.

See this example from Juniper SRX100:

Very cool Normis.

RB4011iGS+5HacQ2HnD-IN will deffo make it to my home when it comes over here.Will be interesting to see how the switching will get done though.

Defintely picking up some CWDM gear from you guys.I've got tons of cruddy 4 and 12 core single mode links that have been exhausted due to expansions.

Some questions
1)Do you have any plans in the future you might be doing a EX or LUX version of the 4011 with USB+LCD ? I've got a slew of aging 1st gen 2011's I need to replace , though I don't really want to commit to anything as of yet.Currently use USB's on them to write out config to a usb stick for recovery and the LCD as a no-tool display for bandwidth being passed through the interfaces.

2)Any chance you might do DWDM in the future ?

Hello The RB4011 is an excellent product. RouterOS When 802.11ac will start to use all of the wave 2 features.
Like Mu-MiMo?

That would be nice but unfortunately RBx00x devices are just too big to be mounted side by side in a 19" rack
RB2011iL Dimensions
Desktop:230x90x25mm
Rackmount:443x92x44mm

Have MikroTik ever had a discussion about the format of rackmounts. So to be able to mount TWO instead of only ONE RBx00x device in 1 rack-unit?

Would love to have the option of mounting 2 RBx00x devices in 1U instead of having to use 2U.

See this example from Juniper SRX100:

Does the new RB4011 also has Hardware Acceleration for AES (OpenVPN protocol)? I am testing a file transfer using OVPN between 2 RB2011 and the transfer literally sucks (Less than 1 Mbps of throughput) when we have 25 Mbps total BW between the 2 endpoints. I understand that the new RB4011 has IPSec HW acceleration but I want to run OpenVPN tunnels instead of IPSec ones.

Pls advise.

The RouterOS implementation of OpenVPN will always have shitty throughput since it lacks UDP support.

http://sites.inka.de/bigred/devel/tcp-tcp.html

RB4011 looks like a beast of a device though!

Is it possible to do a license upgrade on the SXTsq Lite60 and connect two of them for a short link?
They look physically a bit more suitable for outdoor mast mounting than the wAP 60G AP.

Is it possible to do a license upgrade on the SXTsq Lite60 and connect two of them for a short link?
They look physically a bit more suitable for outdoor mast mounting than the wAP 60G AP.

That's always possible without an upgrade of the license. Just set the 'master' or AP in 'bridge' mode instead of AP-bridge. You only need an upgrade to make a client unit work as AP. Not the other way around...

Hardware Acceleration for AES (OpenVPN protocol)?

As I understand, RouterOS only supports in-kernel HW crypto acceleration, which means it works for IPsec phase2 only. OpenVPN is currently out of luck no matter what board you have.

Is it possible to do a license upgrade on the SXTsq Lite60 and connect two of them for a short link?
They look physically a bit more suitable for outdoor mast mounting than the wAP 60G AP.

That's always possible without an upgrade of the license. Just set the 'master' or AP in 'bridge' mode instead of AP-bridge. You only need an upgrade to make a client unit work as AP. Not the other way around...

I know that usually works on devices with license level 3 but this SXTsq Lite60 is explicitly listed as being only a CPE that is able to connect to wAP 60G AP (level 4 license).
It does not say that it can do a point-to-point with wAP 60G (level 3) or with another SXTsq Lite60.

That would be nice but unfortunately RBx00x devices are just too big to be mounted side by side in a 19" rack
RB2011iL Dimensions
Desktop:230x90x25mm

There are rack cases that fit two RB2011 boards (bare boards without cases) inside.
https://www.cyberteam.pl/produkt/1997_p ... b2011ls-1u

Hey all,
Excited to see the 4011 series!
Question about the switch chip: Does it natively support VLAN switching? In the specification, it says switching chip is RTL8367SB. In the wiki I only find information about RTL8367, which has no VLAN features (https://wiki.mikrotik.com/wiki/Manual:S ... p_Features). Does this mean no VLAN support by the switching chip? Or is SB different to the non-SB version?
Regards, P.

Is it possible to do a license upgrade on the SXTsq Lite60 and connect two of them for a short link?
They look physically a bit more suitable for outdoor mast mounting than the wAP 60G AP.

That's always possible without an upgrade of the license. Just set the 'master' or AP in 'bridge' mode instead of AP-bridge. You only need an upgrade to make a client unit work as AP. Not the other way around...

I know that usually works on devices with license level 3 but this SXTsq Lite60 is explicitly listed as being only a CPE that is able to connect to wAP 60G AP (level 4 license).
It does not say that it can do a point-to-point with wAP 60G (level 3) or with another SXTsq Lite60.

I was wondering this same thing, can these new SXTsq Lite60 be used in Bridge to Bridge mode? (ie SXTsq Lite60 to SXTsq Lite60 ). My guess is NO , as MT would have stated this in the documentation or sales info. Normally Level 3 ros can do wifi br to br, but as we have all seen the new 60ghz mt stuff does have alot of special, non-standard ros options / settings (which is why im thinking these cant be used in a br to br like a normal 5g or 2g MT devices). I hope im wrong though, anyone from MT chime in?

(also what would the range look like on SXTsq Lite60 to SXTsq Lite60 if you can use them as a ptp bridge? i would think a tiny bit more than the 200m stated for MP to P)

Look this integrators:
https://mikrotik.com/mfm/integrators

That would be nice but unfortunately RBx00x devices are just too big to be mounted side by side in a 19" rack
RB2011iL Dimensions
Desktop:230x90x25mm

There are rack cases that fit two RB2011 boards (bare boards without cases) inside.
https://www.cyberteam.pl/produkt/1997_p ... b2011ls-1u

The exponential growth of MikroTik is always suprising me. You are all doing an excellent job there and I am very excited to see these products launch. I wonder what else is in the works...

Huge thanks to you all at MikroTik!

The exponential growth of MikroTik is always suprising me. You are all doing an excellent job there and I am very excited to see these products launch. I wonder what else is in the works...

Huge thanks to you all at MikroTik!

You must be kidding, no?
Mikrotik is a very slow grower. They have been bypassed by its biggest competitor 10 times....
They might have a slow increase in absolute sales, I'll bet their market share in the WISP industry today is much smaller then it was 10 years ago.

When I started with internet by Wifi early this century apart from the un-affordable Cisco, Motorola and some other high end brands offering slow Wifi or Wimax there was Airbridges and Mikrotik that at least made the Wifi a breakthrough system for WISPS
Only a couple of years late came Ubiquity with their Nanostations. In the beginning absolute crap devices but cheap...

Now Ubiquity sort of dominates the low and medium segment of the market with several other brands trying to pick from the same market. On the high end we have several players and even here we can now find Ubiquity and others and an occasional Mikrotik router.

Mikrotik lost many opportunities to become market leader in the WISP world. They had too many times serious problems with new ROS versions. They were too late with really good antennas, they came with tdma months after their biggest competitor these days and in the beginning it was almost a disaster.

New products sometimes take more then a year after first presentation to finally hit the market.

I'll know for a fact that in the years 2012-2017 many switched away from Mikrotik to go to other Wifi platforms because there was hardly any improvements from MT and problems kept emerging in ROS. Many new players came in the market too with good products that outdo Mikrotik stuff.

It's only the last 2 years it seems they are on the way back up in the wireless. The 60Ghz line is very good, better then what is already in the market. And it seems ROS is getting better and better too although there are still fields where they could do better.

Don't mistake me. I am a loyal fan of Mikrotik from the early days. It still appeals to me and is both economic, reliable and good. But due all the problems I did have to try new line of products from other vendors in fields where Mikrotik just can't deliver.
So they still get my support and I am still buying 90% of my stuff with them. But to praise them into heaven is just a bit too much..

I'll bet their market share in the WISP industry today is much smaller then it was 10 years ago.

There are lots of other markets other then WISP...

Am I correct in assuming the RB4011iGS+RM is a fanless model? That would be awesome!

Am I correct in assuming the RB4011iGS+RM is a fanless model? That would be awesome!

Yes, both models are fanless, and have a very big heatsink (half of the body itself is the heatsink). A thing to note, is that the tested ambient temperature level is up to +70C on the Ethernet only model, and +45C on the WiFi model.

So any kind of test results? What it`s the WIFI speed in 5GHZ?

Does the new RB4011 support HW acceleration for OpenVPN tunnels aside of IPSec acceleration?

Ovpn question was already responded above.

My concern is that 4011 is missing usb3 port and sd card slot. Without it it is unusable for the dude. Otherwise it looks pretty good, LCD may help too and I am really looking forward to get it in hands...

Having just bought the RB450Gx4 board (with an enclosure), I am curious as to comparisons with the RB4011 without wifi.
They seem to have similar RAM/nand but the RB4011 processor has a higher freq and A15 (vice A9) so it appears to have much more oomph??
Perhaps I should have waited LOL.

Any specs on number of sessions, throughput with firewall applied, throughput with VPN enabled etc..........

Perhaps I should have waited LOL.

Nah. MT will happily accept more of your money.

Anav, specs are already published including the vpn throughput.

Am I correct in assuming the RB4011iGS+RM is a fanless model? That would be awesome!

Yes, both models are fanless, and have a very big heatsink (half of the body itself is the heatsink). A thing to note, is that the tested ambient temperature level is up to +70C on the Ethernet only model, and +45C on the WiFi model.

Thnx, great answer! Good that the non-wifi version is rated higher so it can be used in patch cabinets and such! Tempting to replace my CCR1009 running at home, I'd love to make a review again, hmm....

Looking at the Ethernet test results of RB4011 vs RB1100AHx4 - How is the RB4011 pulling better numbers? Where's the difference?

I wish the LCD panel still there for the 4011 and the antenna is detachable, then I can just carry that around....

Looking at the Ethernet test results of RB4011 vs RB1100AHx4 - How is the RB4011 pulling better numbers? Where's the difference?

The test results seem to be a sum of all ports, so with 4011 having 10gbit sfp+ with its own 10gbit lane to cpu (according to the block diagram) the aggregate throughout is higher.

As I understand it rb1100ahx4 has 3 switch chips not 2, and uses the “bypass ports” for some internal routing? (Think I saw that in a mum presentation somewhere).

I am testing a file transfer using OVPN between 2 RB2011 and the transfer literally sucks (Less than 1 Mbps of throughput) when we have 25 Mbps total BW between the 2 endpoints. I understand that the new RB4011 has IPSec HW acceleration but I want to run OpenVPN tunnels instead of IPSec ones.

Pls advise.

I think you should keep the RB2011 and get 2 Asus Tinker boards for better OpenVPN. CPU is likely faster than RB4011 and you could also use OpenVPN over UDP, compression and all the goodies that are not available on ROS.

Just wanted to drop a line and congratulate Mikrotik on carrying CWDM products. Having low cost optical MUX/DEMUX will help the community. We've been using CWDM for about 5 years now in the data centre - it has saved us tens of thousands of dollars. One of the co-lo facilities we are in charges $295/month for a cross connect. We have saved at least 6 cross connects because of CWDM.

Sure, we can install a switch at each end of an optical loop and avoid CWDM, however less can 'go wrong' with CWDM. If you're not sure of CWDM, take a good look at it.

The RouterOS implementation of OpenVPN will always have shitty throughput since it lacks UDP support.

http://sites.inka.de/bigred/devel/tcp-tcp.html

RB4011 looks like a beast of a device though!

Thanks for sharing R1CH! I don't disagree with you but even using UDP I want to confirm if Mikrotik has enabled in the RouterOS to leverage the HW encryption / decryption for AES algorithm used in IPSec Acceleration also applied to OpenVPN Acceleration (aside the issue that only TCP is supported and is slower).

I did a test between 2 sites using OVPN, one with 25 Mbps symmetric and the other one with 70 Mbps Download / 30 Mbps Upload using 2 RB2011 and I never got a higher throughput of 2 Mbps. Even using TCP only it shouldn't be that slow and my rationale here is that has something to do with the HW offload for Encryption / Decryption here. The fun part I never saw the CPU hit high spikes in the tests and I want to know if the new RB4011 will solve this problem or not.

I do know the limitations and speed will never be to use the full throughput of the circuits but not to the point that is almost useless with just 2 Mbps of throughput. If the RB4011 and RouterOS solves this I am all in with this new beast!

I want to confirm if Mikrotik has enabled in the RouterOS to leverage the HW encryption / decryption for AES algorithm used in IPSec Acceleration also applied to OpenVPN Acceleration (aside the issue that only TCP is supported and is slower).

What's the point in asking the same question again and again? Especially the one that's already been answered.

Wow, you can now just use the model name as the WiFi key!

This is a Friday question I don't expect anyone to answer but will there be T-Shirts at the UK MuM in Birmingham?
I really hope so.
I love t-shirts.

The 4011 does not make much sense as a home router because it has only one 10G port.

This is a Friday question I don't expect anyone to answer but will there be T-Shirts at the UK MuM in Birmingham?
I really hope so.
I love t-shirts.

Yes. T-shirts, stickers and free routers

Yes. T-shirts, stickers and free routers

Wondering what routers will surprise us this time...

This is a Friday question I don't expect anyone to answer but will there be T-Shirts at the UK MuM in Birmingham?
I really hope so.
I love t-shirts.

Yes. T-shirts, stickers and free routers

Awesome on all counts.

For the RB4011 it will be nice to have at least 2 x SFP+ ports instead of one and be able to support natively to have HA routers (not just VRRP but other services) that today can be achieved by custom made scripts.

Ideally to have 4 x SFP+ and 10 1 GbE ports!. so if down stream switches can get 10 Gbps speeds.

Ideally to have 4 x SFP+ and 10 1 GbE ports!. so if down stream switches can get 10 Gbps speeds.

I'm almost sure something like this is to be released in a foreseeable future.
And you can even guess a price for it looking at the price of current CCR1036.
I think you got my point

It would not be a 4011 if it routed at 10Gbps, so it would not cost as much as a CCR.

But I am not interested in a 10GbE NAS anymore.

Now it should be 2C+2Q+ at least.

Recent MUM introduction talks have announcements of fast switches with interfaces like that, but they are only "news from the development team", not actual products that are (nearly) ready for release. Watch the MUM recordings on the YouTube channel or join a live transmission (at the start of the event).

Did i miss a newsletter for October or are they put out every two months?

Have MikroTik ever had a discussion about the format of rackmounts. So to be able to mount TWO instead of only ONE RBx00x device in 1 rack-unit?

Would love to have the option of mounting 2 RBx00x devices in 1U instead of having to use 2U.

See this example from Juniper SRX100:

+1 for two devices in 1U. please consider this for the future.

Did i miss a newsletter for October or are they put out every two months?

I think they are released when there is news. I.e. irregularly.

Thanks!
I was hoping for some Black Friday specials, 1/2 off all products for Canadian customers.