MikroTik

Read our latest newsletter and learn more about: CCR2216-1G-12XS-2XQ – our new flagship, the long-awaited 802.11ay 60 GHz devices, the most affordable 25 Gigabit NIC and a fully-fledged router in a single PCIe device, CRS310-1G-5S-4S+IN for 10 Gigabit fibre and even some L3 routing on a budget, firewall tips and tricks, MikroTikTok, and more!

https://mt.lv/news104

Still no external units for LTE with GbE and m.2 :(
SXTR/LHGR/LDFR base on MIMO 4x4, m.2, 2,5GbE, IPSec acceleration would be perfect.

I've been looking forward to 802.11ay for a while so it's great to see devices starting to come out, though I had hoped for at least 10gbps. I hope higher speed links are on the roadmap.

Still no External /Outdoor 5G Device :(

Is the Cube 60Pro ac whether they would work at 7 km ?

Is the Cube 60Pro ac whether they would work at 7 km ?

If it worked at 7km then they wouldn't say 1km, would they? Or "as far as 2.4km" as it says in one of pictures...

Does this mean the CCR 1072s price is going to drop?

Seems unlikely, they stopped making Tile-GX 72 core in October 2021 with a suggested replacement part of "N/A". So price would be going up not down.

Just a note to avoid misunderstanding: the DROP rule added at 14:47 of the video "MikroTips: How to firewall" should be moved one line above otherwise that IP address will still have access to the network.

Since y'all mention...

The musicians needed to see and hear each other in perfect sync, so the lowest possible latency was crucial. Our friends at SPX used CRS309 and CRS328 devices to transmit NDI/DANTE (audio/ video) protocol data without delay.

NDI is a compressed video protocol, but got me curious if..

CCR2216-1G-12XS-2XQ – our new flagship

Can/could-even? act as PTPv2 boundary clock specifically, or other/any PTPv2/IEEE1588-2008 features generally? Not here: https://help.mikrotik.com/docs/display/ ... e+Protocol but thought I'd ask.

For stuff like ST2110 video or AES67 audio, a switch/router being "PTPv2 aware" is useful – e.g. just troubleshooting/monitoring of the PTP clocking by virtue of being able to "see" the PTPv2 data flowing even if directly interacting with the clock.

And agree with...

Still no External /Outdoor 5G Device :(

Still no external units for LTE with GbE and m.2 :(
SXTR/LHGR/LDFR base on MIMO 4x4, m.2, 2,5GbE, IPSec acceleration would be perfect.

@SiB, maybe you need to take your dancing panda/bear/snowman(?) to their "MikroTikTok" channel ;)

@SiB, maybe you need to take your dancing panda/bear/snowman(?) to their "MikroTikTok" channel ;)

My Panda Bear dance only for you and maybe we will see on MUM in future !

CCR2216 - Cant wait to get the first couple!

Hi,
short question because is not listed on product info page.
Can i use DAC Cable to connect CCR2004-1G-2XS-PCIe with other CCR2004-1G-2XS-PCIe and CRS?

Is the Cube 60Pro ac whether they would work at 7 km ?

If it worked at 7km then they wouldn't say 1km, would they? Or "as far as 2.4km" as it says in one of pictures...

In Newsletter say (write)"In our tests,the Cube 60Pro ac easily maintained a reliable connection over 2.4 km." Over means OVER 2,4 km. and not UNDER.

In that context, it means "over the distance of 2.4km". So basically, it worked at 2.4km "easily", but they didn't try beyond that.

Keep in mind 2.4 km using 5 ghz backup during bad weather

In Newsletter say (write)"In our tests,the Cube 60Pro ac easily maintained a reliable connection over 2.4 km." Over means OVER 2,4 km. and not UNDER.

Well it probably does mean "under", actually. I would be very surprised if it worked at 2.4km but not at 1.0km [although I wouldn't be suprised if it desensed at 10cm]. So I think if they say "over" [in the sense of "works at this distance" rather than "greater than this distance"] then "under" is implicit.
I also think that they wouldn't understate the capability of their product by 65%.

Does this mean the CCR 1072s price is going to drop?

No rather increase to $3350 vs $2795 for the 2216. All CCR1xxx have increased, but before anybody shouts foul it makes sense. In a climate of increased demand and not enough supply, why favour old technology. Were probably lucky they favour an enterprise roll out and dont deprecate the old items immediately.

Well, of course a CCR1xxx can still run RouterOS v6 whereas a CCR2xxx can run only RouterOS v7 rendering it unusable in the enterprise...

Well, of course a CCR1xxx can still run RouterOS v6 whereas a CCR2xxx can run only RouterOS v7 rendering it unusable in the enterprise...

My point exactly, you can still buy CCR1xxx to support enterprise, it will just cost you more now. Its not an adopt or die being ROS7, just you have to pay more to support the commitments while you adopt the new hardware and software. I cant say the old CCR1xxx chipsets cost more, or if Mikrotik is doing this deliberately to push people forward, or even they think the manufacturing volume will move over to the new products inflating old product costs. I can say the same thing is happening with 11n chipsets vs 11ac chipsets, and FE vs GE chipsets in all other markets. The price of a 11n AP has gone up way more than a 11ac, likewise a FE has increased way more than a GE chipset. 11n AP's and FE switches are becoming redundant with the shortages.

Just nobody cares as much when they are told there is only a GE switch on the shelf to buy vs a FE for a marginal difference.

Well, of course a CCR1xxx can still run RouterOS v6 whereas a CCR2xxx can run only RouterOS v7 rendering it unusable in the enterprise...

i agree with you, CCR2xxx have fancy hardware indeed but unusable "right now" in enterprise.
i think CC1xxx lifetime also not in very good experience regarding life with RouterOS v6 which is a lot of bugs and glitches.
specially advance dynamic routing and randomly watchdog reboot that can happen anytime.

thx

i agree with you, CCR2xxx have fancy hardware indeed but unusable "right now" in enterprise.
i think CC1xxx lifetime also not in very good experience regarding life with RouterOS v6 which is a lot of bugs and glitches.
specially advance dynamic routing and randomly watchdog reboot that can happen anytime.

For me, CCR1xxx e.g. CCR1009 is rock solid and does all what we need under RouterOS v6.
For CCR2xxx we have to wait until MikroTik get their act together and make RouterOS v7 a true replacement for v6, i.e. feature complete and with the same or fewer bugs.
Only then, an upgrade to RouterOS v7 for existing devices, or installation of new devices that require v7, can be considered.

I would be very surprised if it worked at 2.4km but not at 1.0km

It means it works reliably at the mentioned distance, it can possibly work even at longer distances, but it will depend on various environmental factors.
Of course it works for shorter distances too.

normis write:

Of course it works for shorter distances too.

Does with new wifi devices we still be see the "disconnected, extensive data loss" (This is like holy gral) and wonder why MikroTik cannot do a "stable wifi" ?
For me two points should be done to help users

• My point is that we should have some documentation like "HowTo Troubleshoot WiFI xxx " with steps what do when we have that and taht behavior in logs. Now we can read many forum post and maybe be a lucky.
• Briliant idea will be if we can use a separator/tag in logs, means like wifi/ipsec we have one big log and we not know what parts are to what "communication" - we cannot select easly a one client and see logs with only it.

I wonder how useful 5Ghz backup connection would be over 2.4km link...

I wonder how useful 5Ghz backup connection would be over 2.4km link...

Depends on local situation. Of course 60GHz requires perfect clear view so when there are not too many local APs polluting the band it will probably work OK on 5 GHz as a backup.
(slower but still a connection)

Depends on gain of these antennas, but probably not much... entire unit is smaller then SXT that had 16dBi antenna... so likely 10-12dBi maybe.
So not really usable on any longer distance, unless band is completely clean (ie. forget it in the city unless it's short hop like 200m).
Sure, it's possible to use 20MHz channel and only low modulations to get some more SNR and possibly more range, but can't fight interference like this.

Too bad it doesent have 4x 100G. Same with 2004s 25G - should be 4.
With 2 it can just become a passtrough and not mesh on the edges.

I did order several anyway for testing, but would be great with 4 as minimum "big" ports.

Depends on gain of these antennas, but probably not much... entire unit is smaller then SXT that had 16dBi antenna... so likely 10-12dBi maybe.

Yeah I sure would like to see such a device with antenna size similar to the existing "Wireless Wire Dish" (and LHG5).
It looks like they were going for "small and unobtrusive" for this device, but unfortunately there is no replacement for physical size when achieving antenna gain.

Can you fix your front web page newsletter date. Its set to 2021 !
Cheers

Too bad it doesent have 4x 100G. Same with 2004s 25G - should be 4.
With 2 it can just become a passtrough and not mesh on the edges.

I did order several anyway for testing, but would be great with 4 as minimum "big" ports.

I agree with @mhugo.

In the case of 2 operators we need 3 high capacity ports, being:

Operator 1
Operator 2
Internal network

----------------------------------

I have questions regarding CCR2216-1G-12XS-2XQ:

1° - 25G 12XS ports, also support 10G SFP+?

2° - 100G 2XQ ports, also support 40G QSFP?

Buy two?

It's still a 10th of Cisco/Juniper 100G stuff.

Buy two?

It's still a 10th of Cisco/Juniper 100G stuff.

You obviously dident get the problem which is that 2 interfaces only allows chaining.

....

I have questions regarding CCR2216-1G-12XS-2XQ:

1° - 25G 12XS ports, also support 10G SFP+?

2° - 100G 2XQ ports, also support 40G QSFP?

Question answered.

As per the interface compatibility link below:
https://wiki.mikrotik.com/wiki/MikroTik ... patibility

CCR2216-1G-12XS-2XQ supports:
SFP (1Gb)
SFP+ (10Gb)
SFP28 (25Gb)
QSFP (40Gb)
QSFP28 (100Gb) *

Only the last (*) mikrotik postponed not released the Transceiver, but we should have news later.

@SiB, maybe you need to take your dancing panda/bear/snowman(?) to their "MikroTikTok" channel ;)

My Panda Bear dance only for you and maybe we will see on MUM in future !

@sib (from anav), My hats off and huge respect, to you and your country for opening up your arms and hearts to the brave Ukranian people!!

Thank you on behalf of all good-natured Poles. Remember that normal people are in everywhere, in Russia too. Dictators are different idea, but good that they not destroy a LTE BTS and we can see what's doing on proper places.
We route the "Peace to all".

Still no External /Outdoor 5G Device :(

Even CAT12 SXT/LHG :(

Is the Cube 60Pro ac whether they would work at 7 km ?

Remember the gold formula: take the data published by MikroTik and divide by 2.5.

P.S.
The data I mentioned is for a stable connection. I'm not a lab worker or couch expert. All results have been tested in practice. There are, of course, manufacturers who provide real data.

Any chance to see a new version of the hEX (RB750Gr3) with hardware similar to RouterBoard RB450Gx4 ?
- More RAM
- More flash
- Better CPU

Basically, a new budget router with Gigabit capabilities without having to enable Fast Track

Maybe get a RB450 and case?

Maybe get a RB450 and case?

RB450Gx4 with case and power supply has MSRP of 119$ ... hEX is half of that price. And @Marc66FR was asking about budget device. Of course it's up to budgetary constrains what is budget price for capacity and capability asked for, hEX price is probably below any realistic retail price for that kind of performance.

Maybe get a RB450 and case?

I thought about that but I don't need the RS-232 port (which also takes some space) + the case is not so good looking + I prefer a bit smaller device due to space constraint.

RB450Gx4 with case and power supply has MSRP of 119$ ... hEX is half of that price. And @Marc66FR was asking about budget device. Of course it's up to budgetary constrains what is budget price for capacity and capability asked for, hEX price is probably below any realistic retail price for that kind of performance.

That's exactly my point. Although 120$ for such a device should be fine, it could be "too expensive" for some people

Maybe get a RB450 and case?

RB450Gx4 with case and power supply has MSRP of 119$ ... hEX is half of that price. And @Marc66FR was asking about budget device.

I really like the RB750Gr3. It has good performance for encrypted VPN tunnels. But it looks like we have been spoilt now.
Considering that the newly announced devices again have more flash it probably is the new policy of MikroTik (likely after a lot of discussion about the troubles caused by too little flash space).

How about the hAP ac3 for a budget router? Or maybe a variant of that without the WiFi?

How about the hAP ac3 for a budget router? Or maybe a variant of that without the WiFi?

I don't think omitting wireless from hAP ac3 would drive price down ... wireless is part of SoC, only price cut would be price of external antennae, which I guess is minor.

IMO hAP ac2 is a great device and I'd be prepared to pay a little extra if it came with decent flash size (e.g. 64MB instead of miserable 16MB) and 256MB RAM. That woudl make a great budget router and wireless would be a bonus (with 64MB flash and 256MB RAM it would be possible to use wifiwave2 drivers). MSRP around 85$ would be fine I guess.

Marc was looking for a small box and it could be that omitting antennas from the hAP ac3 would enable a much smaller box (I did not check the PCB layout).
I have a hAP ac2 as an AP for the bedroom and it works fine, yes. My main router is a 4011. I should probably have chosen the hAP ac3 as AP because it would allow wifiwave2.
But well, in the 4011 router this is not usable either even though it has lots of flash. Fortunately high-performance WiFi is not so much of a priority for me, I connect things with cable as much as possible (the hAP ac2 serves as a switch for the bedroom TV too).
If it was different, of course I would not use MikroTik.

I agree, I have 2x hap ac3, but Im using them as router. You can not put this ugly big big router with big big ugly antenas into interier.... guys wake up check asus how should device look like...hap ac3 is even bigger than 5009 which is really ridicilus...

Still no NGFW functions... this is causes serious client drift to Sophos/pfSense/Fortigate....
Can this be fixed???

Still no NGFW functions... this is causes serious client drift to Sophos/pfSense/Fortigate....
Can this be fixed???

Why would that have to be fixed?
MikroTik makes routers, not (NGFW) firewalls. They appear to be overworked with completing RouterOS v7. Do you want them to embark on another new adventure?
Better make some good products than try to cover everything the others do.

Still no NGFW functions... this is causes serious client drift to Sophos/pfSense/Fortigate....
Can this be fixed???

Why would that have to be fixed?
MikroTik makes routers, not (NGFW) firewalls. They appear to be overworked with completing RouterOS v7. Do you want them to embark on another new adventure?
Better make some good products than try to cover everything the others do.

sin, because it would have good potential.

sin, because it would have good potential.

Sin would be if Mikrotik would focus away from routing ... which is where they excell. NGFW is a new field for Mikrotik (where there are a few established players) and going there means big effort ... or else it wouldn't make any sense. In worst case, Mikrotik would fail to settle in NGFW field and loose ground in routing (much like they did in WiFi and will take quite some effort to win back position they used to have).

sin, because it would have good potential.

The potential of the current hardware is not even exploited because of software backlog. And you propose to embark a new project?

Still no NGFW functions... this is causes serious client drift to Sophos/pfSense/Fortigate....
Can this be fixed???

What I like about Mikrotik is they don't follow buzzwords. Just the IETF, IEEE, & ISO. The whole point of the 7 layer model is separation. Mikrotik focuses on Layer 2 and 3, that seem to bring enough problems as it is.

If your problem is lost sales, sell a good client security software and/or MDM with a Mikrotik, better security approach IMO. If you wait for containers, there be a lot more approaches possible on the right hardware to load a Docker image with "NGFW features". This post was encouraging that container support is coming back soon: viewtopic.php?t=184351#p920870

Yeah, imo ngfw is pure marketing bs since you almost always need a mix of different services like sdn/ips/ids/id-mgmt/anti-malware/etc/ in a real-world scenario that is very hard (or sometime imposlble) to squeeze into a single "firewall box".

I agree, NGFW is a stupid term. Also, it starting to fade out since everything moving to the cloud and you use local firewalls and (H)IDS software on all nodes instead.