Page 1 of 1
RB2011UiAS-2HnD-IN w/ IPSec?
Posted: Wed Nov 16, 2016 2:40 pm
by dschn
Hi everyone,
I'm currently searching for a router/wifi-AP thats capable of providing VLANs and an IPSec tunnel to it's LAN clients (wifi only local internet breakout). Is the RB2011UiAS-2HnD-IN suitable for this case? Does anyone know what max. performance I can expect throught the tunnel (will be using an LTE router as WAN connection)?
Also, I'm pretty new to MikroTik: is the license cost for the OS a one-timer or do I have to pay yearly for the license?
Re: RB2011UiAS-2HnD-IN w/ IPSec?
Posted: Wed Nov 16, 2016 2:45 pm
by mrz
For this board ~24Mbps of ipsec traffic is good result.
You can read all about licenses here
http://wiki.mikrotik.com/wiki/Manual:Li ... nse_Levels
Re: RB2011UiAS-2HnD-IN w/ IPSec?
Posted: Wed Nov 16, 2016 4:14 pm
by dschn
Thanks alot for the swift reply! 24Mbit is sufficient for my needs. So I can use this board as a router/ipsec router providing VLANs and and wifi?
Re: RB2011UiAS-2HnD-IN w/ IPSec?
Posted: Fri Nov 18, 2016 4:58 pm
by wimpy
Thanks alot for the swift reply! 24Mbit is sufficient for my needs. So I can use this board as a router/ipsec router providing VLANs and and wifi?
Definitely yes (and for many other tasks as well).
Re: RB2011UiAS-2HnD-IN w/ IPSec?
Posted: Mon Nov 21, 2016 10:43 am
by bedior
Thanks alot for the swift reply! 24Mbit is sufficient for my needs. So I can use this board as a router/ipsec router providing VLANs and and wifi?
Oh, it's very optimistically... Please, read:
http://forum.mikrotik.com/viewtopic.php?t=110714
Re: RB2011UiAS-2HnD-IN w/ IPSec?
Posted: Tue Nov 22, 2016 10:07 am
by dschn
Thanks for your answers bedior and wimpy!
@bedior did you try using AES128, whats the speed then? If I assume correctly AES256 was faster with an older firmware?
Re: RB2011UiAS-2HnD-IN w/ IPSec?
Posted: Thu Nov 24, 2016 9:03 am
by bedior
@bedior did you try using AES128, whats the speed then? If I assume correctly AES256 was faster with an older firmware?
I have tried AES128, but there are very little difference. So I forced to use old firmware.