Mikrotik software definitely has a learning curve. It's rock solid and major bang for the buck when you figure it out though. I have two of their AP's at my parents house and they have been rock solid for a couple of years now. I didn't realize Mikrotik has AC access points now, might have to give them an upgrade!
Big fan of MIkrotik - been using the RouterOS since 2001 - got my Mikrotik certification in 2006. That being said, we find the Ubnt stuff to perform much better as APs then Mikrotik APs. Can't get the info we need to 'fix' the problem. All the MT APs seem to have a bandwidth issue - when you go on the forums, other people have same issue yet all the forum users say it's "interference" or some other issue and do not address the real problem
5 years later and I can share your pain. Good success with MikroTik's WAP AC BE, NetMetal AC2 and 60ghz Wireless Cube Pro. it took 5 days in the lab reading and testing my configs, but when all was done nice results. However the AUDIENCE Mesh (4) has been a royal nightmare. Winbox is the only way to go, but QuickSet is not my friend. I'm now an expert at RESETTING CONFIG and starting all over again. Only to have QuickSet "nuke" my config and brick the Audience. WPS works then disconnects again & again. Not sure why? Just when you think your Audience node is synced with WPS to your house router, it drops off. Wired work, but wireless is flaky. Ask for support and you may as well stand out on the highway with a cup in hand asking the vendors for help. Good luck unless you have a FIN in your hand. I agree 100% amazing hardware for the money, but 5 years later and I don't see much has changed in regards to your comments. :(
hello! we work a lot with both MT and UBQT in our company and i can boil down the use cases for you: for wireless: always go UBQT for wired: always go MT also a few more caveats: UBQT is a lot more novice friendly but it also comes at the cost of features, a lot of stuff simply cant be done on UBQT. UBQT is also considerably more expensive. MT has a _shit ton_ of features (BGP, OSPF, MPLS, VPN, iptables firewall, support for advanced scripts, you name it) but that means the experience of a novice user will be hellish. MT is more recommended towards people with more intermediate/advanced networking knowledge, or users that want/like to learn a lot of stuff about networking. MT is also very cost-effective and basically the cheapest router/switch with this feature set and performance. also like you said the web interface is an afterthought, management is really intended for a combination of CLI and winbox (winbox is honestly quite amazing and very underrated in the overall networking community, especially by people that are used to only working with CLI on the Cisco side)
Just setup edgerouter x. It is based on VyOS and has iptables, OSPF etc. Setup WireGuard interface and some modify rules to forward only traffic for certain IPs through it. No problems except some undocumented issue with firewall rule applied to switch interface. Works flawlessly so far... I have also found it has python2.7 built in and crone so it may be nice to use it for some scheduled jobs. So not sure MT is really that better. But maybe in some rare cases...whatever.
@@eco4tree on the side of VyOS, i agree but then i'd consider going the DYI route instead of pre-builts. neither UBNT nor MT can beat a good ol' x86 server in terms of performance.
BattousaiHBr sure, but x86 server is ~$250-$300 and er-x is $50 and it’s enough for home office use with 10 clients and a few custom routes. I am actually considering buying a server in a few years from now if I need more functionality and performance. As for now er-x seems to do the job.
Mikrotik gear is great, but it's REALLY not for your typical end users unless you want to learn the ins and outs of networking. I'm sure by now most of your questions have been answered by others here now though.
Agreed. My main job is in networking and servers and even I find it difficult. So I don't think it's just that it's advanced, I think the commands and UIs have been created in a way that only makes sense to the person/team that created it. Don't get me wrong, they make great devices at a great price, but the software has a steep learning curve.
I feel your pain. Work with mikrotik is not for beginners, like me, if you want to jump in you will need a lote of reading but no ask for help. I think it is like Debian community sadle. But as you say at the end you learn and you can be one of the good ones and share your knowledge.
Being in tech for almost 2 decades, I can say welcome to the IT community. I hate to say that but it's normal when first coming into the IT industry. There's sort of a hazing phase you go through, you humble yourself, learn through all the sarcasm and belittling along the way, and then it all sort of goes away once you've reached a certain amount of competency. You've now made it into this elite group, but you're still a newb just with basic knowledge that everyone kind of expects you to have. It's a hell of journey from that point. You're either ready for it or you're not. This is how people get weeded out of the industry. I can say once you've reached a certain amount of skill and mastery in a subsection of IT, you start to be more respected and it's much more fun that way. Don't get me wrong, I've seen some technical know it alls battle it out in the meeting room, it comes with the territory. You just need thick skin which gets developed over the years. Welcome and just have fun with it. Don't take criticism too personally. If you let it slide and look past it, you will learn a lot.
For my point of view: Microtik is for users that understand more then basic knowledge of LAN and want more control of traffic and etc.. Ubiquiti is for people that just want to plug and play device. Mikrotik is compered to Cisco device not to Ubi device :D. In my country community is very good but you should know basic if you not... well maybe you shouldn't buy Mikrotik :D My whole network is only Mikrotik devices because I can't afford for Cisco devices and I need VPN server, vlans (for tv, internet, ip phone etc) and multiwans also good firewall and QOS ,separates networks, virtualAPs, MESH, TFTP server... in one device. Also CLI is the best option for me then Winbox with wine on Linux
Sebastian Mostowik but you have to admit, that MikroTik devices provide a very poor configuration experience, as there is not really a "right way" to do something but rather everything feels like a workaround.
Yeep I admit :D Here is simple firewalls rules for you (I assume that your WAN is on the ether1 if you have PPoE then change it in firewall: /ip firewall filter add action=drop chain=forward dst-port=53 protocol=udp add action=drop chain=input dst-port=53 in-interface=ether1 protocol=udp add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 \ protocol=tcp src-address-list=ssh_blacklist add action=add-src-to-address-list address-list=ssh_blacklist \ address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \ protocol=tcp src-address-list=ssh_stage3 add action=add-src-to-address-list address-list=ssh_stage3 \ address-list-timeout=1m chain=input connection-state=new dst-port=22 \ protocol=tcp src-address-list=ssh_stage2 add action=add-src-to-address-list address-list=ssh_stage2 \ address-list-timeout=1m chain=input connection-state=new dst-port=22 \ protocol=tcp src-address-list=ssh_stage1 add action=add-src-to-address-list address-list=ssh_stage1 \ address-list-timeout=1m chain=input connection-state=new dst-port=22 \ protocol=tcp add action=drop chain=input comment="ftp brute forcers" dst-port=21 protocol=\ tcp src-address-list=ftp_blacklist add action=accept chain=output content="530 Login incorrect" dst-limit=\ 1/1m,9,dst-address/1m protocol=tcp add action=add-dst-to-address-list address-list=ftp_blacklist \ address-list-timeout=3h chain=output content="530 Login incorrect" \ protocol=tcp add action=drop chain=input comment="ssh brute forcers" dst-port=22 protocol=\ tcp src-address-list=ssh_blacklist add action=add-src-to-address-list address-list=ssh_blacklist \ address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \ protocol=tcp src-address-list=ssh_stage3 add action=add-src-to-address-list address-list=ssh_stage3 \ address-list-timeout=10m chain=input connection-state=new dst-port=22 \ protocol=tcp src-address-list=ssh_stage2 add action=add-src-to-address-list address-list=ssh_stage2 \ address-list-timeout=10m chain=input connection-state=new dst-port=22 \ protocol=tcp src-address-list=ssh_stage1 add action=add-src-to-address-list address-list=ssh_stage1 \ address-list-timeout=1m chain=input connection-state=new dst-port=22 \ protocol=tcp /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 /ip firewall service-port set ftp disabled=yes set tftp disabled=yes set irc disabled=yes set h323 disabled=yes set sip disabled=yes set udplite disabled=yes set dccp disabled=yes set sctp disabled=yes You must turn on after that your services like ftp, irc, etc.. You can attemp 3 time to logon on router or ftp if bad pass then your ip is going to black list for certain amount of time. Sry for my bad English :D
This is a very good description of their products, it is a very strange product very flexible but a bit cryptic and they have been this way for the past ten years for me.
Just prepared today to return my USG-Pro-4, ordered a CCR from Mikrotik. If you have once felt good using mikrotik you should be prepared to have a tough time with this Unifi GUI crap that doesn't work as expected. The first thing I hate is that the controller cannot run on an USG-Pro 4 . The even have *.debs on their page for Linux clients to be used! The simplest features are missing and stuff that you would 100% expect to be on board. I had also the hAP ac which work like a charm. Very robust and quick!
Thank you for your review of Mikrotik. I'm on Unifi now and was thinking about trying Mikrotik. But after seeing this, hearing you talk about its bad community and how hard it is to setup...I will stay with Unifi and try their UDM Pro ;-)
I had Orbi RBK50 a few months before this video was released(my experiences with Ubiquiti at the time was that wireless was very weak and unstable), I loved them so much, I bought after ~2 years RBK40 for my parents, for the same reasons basically. Recently got a Mikrotik from my father, to experiment with, opened a completely new world(or maybe rabbit hole) for me. I was looking at Ubiquiti before. Their Confluence documentation seems pretty good now but still a complicated(powerful?) system after so many years.
I know this is a bit late, but I am a die hard Linux guy, and only use it in my personal life. I use WinBox just fine in a stock wine prefix. Have for a good number of years. Now as for CAPSMAN management outside of that, cant say yet. Was looking to do what you did here, dump my old crap for all shiny new Mikrotik stuff, and I am now down to a couple AP's. Was curious how it panned out. Managing my routers and switches is fairly simple over the web gui or SSH as well as WinBox. I prefer the latter two as its just faster in most regards for ME. Plus I am very comfortable with ssh'ing in and dealing with things on my RHEL servers and such. If you are in need of hand with anything, I dont charge :D Unless its super hands on, I will do the basics always via email or voice chat. My tithing I suppose to those back from 956-2000 when I was a Linux noob.
The problem with your parents having limited upstream is one I’ve been dealing with constantly for a couple years now. The fix (a “real fix” that is) will require a box that can traffic shape with fq_codel (or cake or pie). Ubiquiti gear, like EdgeRouters, can do this shaping with their smart QoS (it uses fq_codel). For fairly modest connections, like say a 60/10Mbps, even an EdgeRouter X will perform wonderfully. For faster connections, plan on needing more grunt, like one of their newer, quad-core units. You can flash OpenWRT on a device and shape with fq_codel, cake, or pie. I’ve used the odd home brew pfSense (almost always with an Ivy Bridge i5) to shape traffic (fq_codel). You can roll your own router with a Linux distro to do all of this stuff too. IPFire works a treat, as well. Bufferbloat is nasty, but once you’ve solved for it, you don’t have to panic any longer when someone walks in the door and their phone starts backing up the day’s pictures and videos and whatnot to the cloud, thus bringing traffic to a damned near halt across the network. Google ‘bufferbloat and the ski shop’ and read the article from ‘Random Neurons Firing’ for a high-level glimpse at what bufferbloat is all about. The solution exists. Sadly, I don’t think MikroTik offers a solution for it.
Actually i started to getting my hands on Mikrotik after years of "traditional" Access Points placed everywhere in large houses. I followed a suggestion of a friend and i absolutely love Mikrotik, by the way, you maybe have to have some spare time to understand the way it works, and i think it's mandatory to have more than a basic understanding of what a LAN is... many things in a Mikrotik product are very high-level, because i learned that with Mikrotik you can expect to use a simple AP , but nothing holds you down to create a Mesh network, with a managed AP, sending packets over an Ethernet over IP encrypted tunnels... and the limit is how much powerfull is the machine you have bought ! After few days wandering around the Winbox interface i found everything, and i also use a Mac (wine) to use it and it has never lost a beat. About the community: i've read MANY MANY MANY posts, and the best answers i could get where from reddit, because they tend to be pretty maniacal about explaining things... so i get precious suggestions from there... starting from how to power a PoE router, and ending to solving more complicated tasks when my head-banging solution would not work. People of the community often try to help, but they get upset very quickly, maybe because they expect that your knowledge of how Mikrotik is a bit wider... With the theory of "in the bigger, even the smallest fit" (dont know how to say that in english ) i appreciate the perks of mikrotik.
I have used Hex at home and now bought Hex S for the SFP and PoE port. Absolutely perfect for my requirements. ISP provides fiber that can be connected to SFP, Mikrotik does NATing, gigabit forwarding and firewalling, keeps different subnets communicating from each other (eg phones can't access PC / server network) and wireless access point is powered from PoE. Before Hex S I had extra devices for PoE injection and ONT device for WAN connection both of which are now unnecessary due to the features of Hex S. And all this just for 60$. Only had one problem with Webfig where I could not reorder firewall rules with Chrome, but everything I needed has worked with Firefox. Plus, web access can be secured with TLS for straight-forward remote management.
Its not just connect adopt and its done for Unifi. That is not the case. Perhaps the problem you experiencing in Unifi is the proper handover from APs to APs. when your parents roam around. initially they are connected to AP1 then they roam and stand beside to AP2 they are still connected to AP1. if you have multiple APs, you need to set the minimum RSSI for smooth handover from APs to APs. (minimum signal strength for the AP to hold the connection). If the signal drops the minimum RSSI, the initial AP will disconnect you and the device will find another access point with a strongest signal with the same SSID. One thing is the setting up different channels per AP manually. help.ubnt.com/hc/en-us/articles/221321728-UniFi-Understanding-and-Implementing-minimum-RSSI
Tbh I have not setup multiple Ubnt APs, though I assumed they did that RSSI signal strength & cut off automatically. Mikrotik can do this, but I've yet to try it out blog.linitx.com/howto-improved-capsman-wireless-client-roaming/
You can try interface wireless access-list add interface=wlan1 mac-address=00:00:00:00:00:00 signal-range=-80 authentication=no forwarding=no for APs each :D
Mikrotik is hardcore bois. My opinion is do you work with networks every day of your life? if so then you would love mikrotik. If networking is not part of your daily job rather stick to the consumer products
I don't agree with that. That's like saying that Archlinux is only for the hardcore. I don't quite believe that. If you have a basic understanding, it should be simple enough to build up to what you want to do to.
Agreed. Mikrotik is powerful device, but you need to understand the basic. I went thru what you experienced. I had alot of reading and still havent figured everything out. I bought mikrotik knowing all the consequences so didn't complain. Now im trying to figuring out vlan on hybrid port etc. Because i want to separate guest & private wifi. It works with ubi but havent figured out the config for ap running on lede.
hi Kai, mikrotik is not user friendly that user can manage it well. But if u go through step by step, try and error, you will have a different world. For example wireless roaming you mentioned, i used Meru before for true seamless roaming and it costs too much comparing with Mikrotik. Mikrotik create a huge market value to me and i used them mostly on my projects.
Interesting... because of your video I googled a few "howto solve xyz problem" and it looks like you are right... so I guess hardware for the new office is still going to be UniFI.
I use Mikrotik alot, but I must agree, it's not easy to start. I don't know all the avanced features even now, but I know the basics and I know how to set the security features somewhat well so I'm good. I like Mikrotik because you have good equipment at a small price and they get updates pretty often so, instead of buying a Asus or TPlink equipment, I can buy Mikrotik for the same amount of money and spend a bit of time configuring them but at least I know I will have software updates for 5 years or more.
I never felt Mikrotik complicated. Maybe because I had past experience using Linux as a firewall/router, and I used to dive deep into all sorts of things, including networking. So I claim, that if you have the fundamental understanding of networking concepts, and you are motivated to self-educate yourself, then Mikrotik is not difficult at all. I rarely use any forums or chats, becasue the at time I would get answer (if I even get one, and if it even solves my problem) I could have already found the solution using search and documentations. If you just want a plug and play solution, and not really interested in understanding how it works, probably Mikrotik (or any sort of enterprise device) is not your way to go. By the way, if you just want to use a Mikrotik router as an AP, probably they are preconfigured as such, but you could do it according to many howtos. You don't need any sort of magic, including CAPsMAN. As you said, "set the SSID and walk away". It can be done. Bridge a LAN and the WLAN interface and you are done. Rougly... You don't even have to care with DHCP if you already have one in the network. As a configuration interface, I think WinBox is the cleanest for start. Despite the name, there is a Winbox4Mac version, and the windows version just works fine in Wine on Linux. I am using all the three right now, it just works.
Nice video. I've used an rb450g mikrotik for my home router for the past five years or so, but it can't keep up with my new fiber connection. Trying to decide between the UBNT EdgeRouter4 and the Mikrotik RB4011 as a replacement.
@@kaihendry Yeah the EdgeOS looks interesting, something new to play with that I'm unfamiliar with, the traffic monitor looks nice. I have an UAP-AC that's been good to me, and my rb450g has lasted a long time. The RB4011 has a more powerful CPU and builtin switch, though I think both will route gigabit without QoS, the mikrotik looks like the better option. Yeah I guess UI is the only reason I had been considering UBNT.
I personally found the CloudKey requirement insane. MikroTik’s inbuilt CapsManager whilst not easy to use, is pretty sweet when configured properly. Nonetheless I guess EdgeOS does more.
I have two Mikrotik devices and they offer a massive amount of control. I agree that the way that certain things are implemented may not be easy for people who may be familiar with other devices. My experience in the Forum has been OK. I've received a reply to my question on the second time (not the first). The responder made some assumptions about how well I understood but someone had eventually replied. The quickstart page isn't too bad. The first major issue I had with my RB750g-2hnd was the very long key I had generated with wpa_passphrase; it turned out that the 64 characters it generated wasn't accepted by the Mikrotik to I had to remove the last character and then it worked. I racked may brain for a long time to get this one because I didn't expect it to work like that. It is a Linux based DSL that's fairy cool but it's the implemented logic that can be disconcerting. Like the three way to build a VLAN based on hardware, bridge and switch chip and which will lead to interactions with the CPU. Took me a while to grasp it because I was operating in function of Linux, in a sense. There's a new page of documentation which helped (help.mikrotik.com/docs/display/UM/User+Manuals, help.mikrotik.com/docs/ and the wiki wiki.mikrotik.com/wiki/Main_Page). I will also agree that it's seems to be oriented toward individuals who want to have a business in providing solutions and I can definitely see how effective that can be. On a trip to a remote island, the guest house used a few of them and the individual who had installed them ran a local internet provider/networking service. Also I found that wireless tuning does help since I've remember the default performance and what happened after I read an article and followed another video on youtube, it was way better than what I had started with. I find this individual's videos to also be helpful: ruclips.net/channel/UC_vCR9AyLDxOlexICys6z4w And this one too ruclips.net/video/JRbAqie1_AM/видео.html (a bit condescending maybe but good). It takes a while to kind of understand the logic behind how they have decided to organize and implement things. ServeTheHome has a lot of information about the switches of which I have the CRS125 rackmount version. I haven't yet tackled the VLAN config on them yet, but I will soon. Overall, i don't think that it's easy to beat them in terms of price/feature wise but it takes a bit of learned to go beyond the basics.
You want a seemless experience use Aruba instant on its low cost has a community for and Aruba will help you set it up within 90 days if you run into issues. And its simple.
Hello Hendry I am currently learning mikrotik and usually use it for multiple network setup. I maybe can help you in some cases but cannot promise all. This is a way for me also to at least to learn more in actual or hands on.
Thanks for for offer, my config is here: www.reddit.com/r/mikrotik/comments/6rq85t/aa_hap_lite_configuration_for_home/ Two questions 1) my firewall doesn't drop invalid packets. Is that a big problem? 2) How to do QoS?
I was so curious why you chose Mikrotik over Ubiquiti. They’re both great companies with excellent products. But Mikrotik is a lot more complicated than configuring Unifi products.
Well I tried to tell my reasons. natalian.org/2017/08/20/Choosing_Mikrotik_over_Ubiquiti/ I think the Ubnt controller software is a bit ... buggy and crap. Especially their IOS app.
Look you are looking at Mikrotik wrong. You are supposed to use it like Cisco, but more open. You don't just buy a Cisco business switch, AP, router, firewall and then expect to just be able to configure it without already know a bunch about networking and have a certification of some sort. It's not really meant to be used by home users (unless it comes preconfigured by your ISP or network administrator)
Thanks for sharing your experiences in detail. Considering that this was almost three years ago, do you have a quick update on how Mikrotik has evolved (or not) since then? I'm awfully frustrated with the Ubiquiti Dream Machine (UDM) because it has all kinds of issues with third party Switches and APs on the network. I'm hesitating whether I should replace those with Unifi devices, hoping that the network will become more reliable, or throw out the UDM and go for something like Mikrotik. Listening to you, I can see my self wasting heaps of time learning stuff that I don't really want to learn (though, surely, once you know it, you're probably happy about it), so my excitement for Mikrotik didn't last so long (although you kinda of recommend it). But maybe things have changed a bit since 2017?
Well.. you started at wrong foot. Mikrotik is not Apple. It is not a consumer oriented company. They have integration partners, consultants, academy, certification, much like Cisco. If you have problem, you look for your consultant, not Mikrotik. And it is not meant running by webfig, nor even winbox. You'll get a lot of problem when you try it that way. The preferred way is using command line, much like cisco or other enterprise router. So, yes.. Mikrotik is not for beginner. You have to have network knowledge to operate it. But when you know your way around network, Mikrotik is pretty easy, easier than Cisco Routers. Well, I am not talking about Cisco Linksys, but Cisco ISR like router. I set up a link of 10 remote places easily to join them in a big network with Mikrotik. Very easy, and working flawlessly for 10 years straight. My suggestion is, if you keep learning your way in Mikrotik, you are not going to look back. Not many router at this price, can work as reliably as Mikrotik.
My point it, Mikrotik should be a consumer orientated company. There are no good reasons not to be. Tbh, my Mikrotiks are configured and working. My major concern is their inability to publish their source code. They obviously hack Linux.
@@kaihendry well, the reason is that it is not unify. It is more like edgerouter. You need to dig into its command line. And frankly, I haven't met an average Joe who can casually fire up ssh, connect to Cisco ISR and set up NAT. They will have a hard time understanding how to write routing commands. The reason why mikrotik is not consumer oriented, is because the amount of knowledge and education you need to have before operating these routers, despite its price. There is no reason to be consumer device, if not everyone can buy and configure this thing. Average Joe only knows how to press a few buttons, whole enterprise need many things. Some knowledge that the average Joe takes for granted. When you click those buttons, the GUI sends a few commands to do what your one press button tells. Of course, the commands may or may not suit your needs, but that's the problem with wizards. That's why you can never rely on GUI on those devices. Sure GUI is nice, and can help for your most basic need. But it is not what mikrotik meant to be. I contacted Microsoft last month. Asking about azure. Sure, it was fast. They reply promptly. In a few minutes. But after they realized that I need help with azure, they asked my phone number, my company, and what time I can be available. Just yesterday, someone from anabatic called me. I was thinking, who the hell was anabatic? Then the person on other side explained to me, that he heard that I need azure service help. He called me to help. And I need to setup video conference by Monday to explain my problem. It was the same with Oracle. You see, enterprise service are always the same for every company. Microsoft doesn't help me, but then I contacted by anabatic. Same goes to mikrotik. They just won't help you. You need to find some company like anabatic, in your city, who can cater your need. That's the way enterprise service works. That's also the way mikrotik works. Unless you want to take it into your own hand.
*_"Mikrotik is not for beginner. You have to have network knowledge to operate it."_* Such a nonsense. You only have to be an expert if you want to use all the features. Who "operates" a router anyway, it's only supposed to be set up.
@@samc1176 first, mikrotik is the real "router", not just some "natbox slapped into access points and call them router" router. Second, configuring a router needs specific knowledge. People are learning these knowledge for years, before getting their certification, and getting paid for it. That is where network administrator comes from. It is also true for every single enterprise router out there. You need basic knowledge that you should obtain from a college major. Natbox are just a very, very tiny part of routing. Mikrotik is capable of maintaining a network spanning across the globe, and holding it together. There are lots of protocols involved, lots of routes involved, lots of programming also involved. What to do when a route goes dark, how much tolerance is perfect for your network, what if someone abusing your bandwidth and taking out your data, what if someone trying to access some network part that they are not supposed to access, which port open, how many connection per second, how to stop ddos, what kind of content you want to filter, what kind of traffic report you like to get, and so on and so on. That's a router.
Agreed the community is a bit bad ‘mikrotik is not for the weak’ , however as a brand and company they’ve built something awesome .. it’s not their fault
Nice Video and a good point. I was also about to get MikroTik hardware. What a pain. I really have to rethink the investment. One point, you mean that the coverage is not good with Unifi at your parents and that one from MikroTik is better? By the way,. your Unifi controller is mounted vertically. If you want better coverage you need to mount it horizontally.
Actually, in enterprise-solutions the AP/controller is heavily involved in the roaming process, this is called "fast roaming" or "fast BSS" (IEEE 802.11r-2008).
Kai Hendry I can only speak for a Cisco solution which needs a dedicated controller unit and some sort of RADIUS in place, but yes it does work like a charm.
Im a mikrotik, Ruijie and ubiquiti user. Mikrotik is really powerful device. The one thing I dislike mikrotik is the firewall. Someone always try to break in or attempt to hack the device. Updates are frequent but they seemed not to anticipate the problem. Pros: PCQ and Mangles are the best! you will only see these features on paid competitor devices in medium enterprise level. While Ubiquiti, 8/10 wireless Signal especially Unifi. But I dont like the unifi controller . They are making Money out of it. While Ruijie... DOES IT ALL. 10/10.
Picks something because 'its Half the Price of Ubiquiti' which is half the Price of the big boys Aruba, Cisco, etc and then says he expects Apple levels of Support and for it to 'just work.'... hmmm
Interesting thoughts and comments you have, Im about to start a similar journey, but yet to purchase MicroTik (supplier out of stock for HAP AC Lite) or Ubiquiti. The point you make about license is, from what I have read at least, that the boxes come with different level licences, but should you wish to use RouterOS and their stuff on other hardware or installs such as VM's, you have to purchase different levels of license depending on how and what its doing things. On a recent MUM vid from July they were saying you can now have a 60 day trial. Should your box get zapped you have to re-license it, so probably best to keep a record of hardware ID and licence etc.
Licence level depends on your needs, there is a table that explains the capacity of each license level, some license levels do not manage certain packages (that is why they do not come by default) so you can customize license and packages to your needs. I am not familiar with politics on publishing linux sources...
Could you suggest me some physical stores in Singapore to buy mikrotik? Or it's available online only? Though based in India I will be travelling to Singapore for about a week next month. Thank you.
All my home equipment is Mikrotik. i sw for ubiquity because after last firmare update a have a lot of problems ( device distonecting form lan and wifi issue) and also form time to time i need to reset it and reconfigure. so mikrotik is working fine and you don't need tons of sw to do it. But to use miktorik you need to have advance network knowledge. so to you don't have this use a user freandly interface for other device, is you know what you are doing the use mikrotik. PS my router also manage 3 VPN with my friends and all in on the same device :)
Mikrotik wireless is years behind Unifi in features, there is no roaming support as in 802.11r nor do they have any proprietary solution for it. They also have no bandsteering support. It is a feature they announced for ROSv7. Routing on the other hand is night and day difference, USG quite frankly blows. And ultimately the main difference between the two is that you need solid networking fundamentals to make Mikrotik stuff work properly, whereas with Unifi you don't. I'm not quite sure why you rant about user interface options. WinBox is visually the best and most powerful tool in the industry. WebFig should not only be avoided, but disabled altogether. On communities and vendor support, Mikrotik is an ecosystem for advanced users that can be tweaked with in a very granular fasion whereas Unifi can be set up by anyone but you're basicly stuck with the WYSIWYG experience. Very little can be done through CLI. Community forums reflect that fact. If you make some beginner mistake in your Mikrotik configuration such as creating an IP pool for DHCP server outside your network range, the folk there won't take you seriously. Do I agree with that kind of behaviour? Absolutely not, but it is what it is. It's a big boys club so to speak. I'm a certified MTCRE/UEWA and work with both vendors on a daily basis, and I'd hate it very much if suddenly I had to replace either one of them. Mikrotik is incredibly rich feature-wise when it comes to routing options for a laughable price and Unifi is incredible for the money as well in the wireless world. 3x3 outdoor AP for $200? Count me in! I kinda hope they'll come out with UAP-AC-M-HD sometime soon for some 4x4 outdoor goodness.
Soda88 nice comment. Just want to say that Linux users like myself, winbox sucks quite a bit. I do find Unifi controller to be a bit of an elephant in the room compared to Capsman. It’s a train wreck and I don’t feel it’s offering much value. Maybe I need the gateway or something..
I choose MT, because i simply hate the UBNT Controller. I do like their products, but I am not buying anything from them anymore as long as this stupid Java Server is needed.
Have a look at Cambium. Love mtk gear but their non 60 GHz gear kinda sucks.Still suck on wave 1 AC with no beamforming etc. Also full support for 802.11r and 802.k for faster roaming support as well as OKC support.
IMHO "Initial review of Mikrotik platform" I liked your review of the product, its community, and your issues. Being new to Mikrotik myself your video really helped me look deeper into the platform. The reason I started looking into Mikrotik is because I am not finding Ubiquiti a plug and play and then some platform. In fact I am having a lot of issues with Ubiquiti that seem to have existed for some time, according to my forum searches. So I am looking for an alternative. I got the impression that you didn't really start to compare the two products until the very end of the video. I truly appreciate your time and sharing of information. Thank you.
For WiF/wireless, should go for UniFi,becoz UniFi Wireless is more stable, user friendly configuration. for Mikrotik should act as Core or distibute coz it's had more feature and customise , my experience with Mikrotik make me speechless. They call me idiot when I asked on Mikrotik Reddit community. The community isnt helpful. And to be honest, I would never read Mikrotik wiki, unless I cannot find the info elsewhere. I hope Mikrotik improve a bit more.
So far I like unifi ap's but there switches I will never use again I'll pay the overkill price and stick with Cisco ios switches and pfsence for routing/firewall
I've had 2 Unifi POE switches fail this year alone - and just out of the 1 year (!) warranty. Big headache at the clients site and embarrassing too as I recommended a Ubiquiti stack to get the business. With the service calls and loss of reputation it hurts! You're almost better off buying used HP switches or for a VIP customer buy new HP and try and make back the cost somewhere else in the installation package. The rest of the Ubiquiti gear seems fine.....
Hello Kai: As far as I know Mikrotik does not support roaming in AC mode, so try to stick to B mode or G mode only, try to upgrade all 3 units to the same software version and try to install the package "wireles-cm2" without the quotes.
Joaquin Nunez why doesn’t Mikrotik use that package by default? Guess I need to install the package on each AP I have ? Bit worried about testing things on my parents ! 😅
@Joaquin Nunez - could you point me to what the fast handoff feature is called, or where to initialize it? wireless-cm2 has been discontinued as of RouterOS v6.37
I think also, I have seen vids about MicroTik's hotspots that enable bandwidth limiting, so I would think you could borrow some techniques from those to define and maybe even QOS type rules, so that low level cloud file pushes could get a lower priority of bandwidth to avoid saturation and delayed hand shake issues to the frontside ISP
Use this for your network but only for upload and for your network its perfect (change lesses for your network to 2 min max it helps you a lot with this q):D : ruclips.net/video/MPxVWlqmWOI/видео.html and here is explain how works QoS with PCQ (don't mind mangle rules it's not important for q above): ruclips.net/video/RK-1mRgTEPg/видео.html If you need help I;ll explain more about it my e-mail: smostowik(at)gmail.com
they apparently live in a farm, so not quite the kind of "large house" you would expect haha
6 лет назад
Wao dude the Title of your video said Choosing Mikrotik over Unifi for wireless but you talk more bad of Mikrotik than a comparison why to do what you said on your title
Longstory short - Ubiquity is for network amateurs and Mikrotik is for people that knows what they're doing. Problem with people is that they expect to buy Mikrotik and have this plug and play experience. I've achieved things that I could never do on Ubiquity (either at all or not efficiently) for a fraction of cost of Ubiquity. As for your experience with community I've never seen anything like it on their forum, but I do have to say that you are certain age and maybe you are not used to do a little bit of research and self education. CAPsMAN is like one of the easiest things that you can configure on any Mikrotik device and there are *detailed* manuals on Mirkotik Wiki or here on YT. I guess my point is that you obviously doesn't know more than basics about LAN and probably didn't work with devices from Cisco and Alcatel and things like that so maybe you should be better of with Ubiquity or some TP-Link, but for users that actually knows something about networking (knows exactly what they want to achieve) then you should definitely go with Mikrotik or Cisco
Don't blame the device because you don't know how to setup any network hardware, there is a reason hand holding device get popular among people who are not technical. That said learning to do it and do it correctly will change the experience allowing you to get so much more from your network. That said, so many red flags in his rant about poor setup or misinformation. Good on you for trying and continuing to learn.
This is what I find infuriating: Mikrotik people (like you) saying to me "don't know how to setup any network hardware". I have set up plenty of networks and Mikrotik has the most painful UI I have ever seen. So much potential, so many pitfalls. I'm trying to point out the failures, yet it is me who doesn't know how to setup any network hardware? Get my point?
Kai Hendry if that's how you are about constructive criticism, then I guess you learned nothing from actual people who where trying to take advantage of you. You clearly made mistakes like putting your parents computers on the public internet, not changing default passwords, and trashing on the configuration tools because you do not understand them. What is worse about your bad attitude towards me is that I have a partial email I was going to send to you from your website, in it I was going to offer to help you out if you needed someone such as myself who has experience with MikroTik devices. What ever have fun stumbling through stuff.
Sorry, how is it constructive to say to me that I don't know how to "setup any network hardware"? You are effectively (in my eyes) blaming the user for poor software decisions. For example when in CAP mode, IIRC I had to login to each device to change the default blank password. How is that a sane UX? I'm super grateful for any feedback. Is it a "bad attitude" asking not to be branded an idiot? Thanks!
Mr. Hendry, I have been there too, but what kept me going with mikrotik (and other systems which are not one click friendly) was to conquer step by step and finding out that maybe my way or point of view to do something was already learned the wrong way, in other words, simple UI make us lazy, so we expect everything to be like that, we get used to simplicity and routine, try changing from IOS to Android or vice versa, people go crazy. What I did was to take out my old college books when I learned Cisco´s basics, OSI Model, static routing, etc, back in those days labs where pure comanda line interface, and behind the UI of a ubiquiti, or any SOHO device there is the same CLI as in mikrotik, once you learn and achieve what you first wanted to achieve, believe me the dark side will take control and you will be fascinated by the power of routerOS (actually Mikrotik is the RouterOS, you can buy mikrotik hardware or routerboards that come with certain license level of routerOS or you can use any x86 PC, buy or try free license and flash it into that piece of junk and voila you have a working router). Remember, buttons and scroll down menus on a UI get you locked into half the possibilities of a hardware, remember that linksys old router 54wrt that we used to flash with dd-wrt, result was a 54wrt on steroids. Please dont get me wrong, I do not feel like an expert, I am still learning, people who call you idiot are just ignorants, because once they knew nothing just like everybody else, just keep in mind that what you are trying to acomplish is some how medium to advanced skill in terms of mikrotik.
MikroTik support & the forums are incredibly poor, legendary in fact, they have spread this culture and perpetuated it. UniFi isn't plug and play BTW, not configured properly anyway. MikroTik should never be configured using the web interface, its not a good option, WinBox is the way to go. The target market for Tik is WISPs and infrastructure projects, never home users! Idiotic use of IPs by the ISP in the UK...
Kai Hendry Is this the way they normally configure their network or have you paid extra? IPv4 IPs should not be wasted like this if they are being used thus. As you found out a network router left in default mode without properly defined firewall rules will be taken over in minutes no matter who makes it. Not talking about consumer grade stuff as they come preconfigured but are so inflexible they are mostly useless. Keep up the videos!
some ppl just try to find excuses to cry over stuff. powerfull things happen by hand dude. buy tp-link if you like to be pressing buttons. beauty is on the imperfections
![MISSING: SLIM SHADY [Expanded Mourner’s Edition Trailer]](http://i.ytimg.com/vi/xh8qgHrOO1g/mqdefault.jpg)
Mikrotik software definitely has a learning curve. It's rock solid and major bang for the buck when you figure it out though. I have two of their AP's at my parents house and they have been rock solid for a couple of years now. I didn't realize Mikrotik has AC access points now, might have to give them an upgrade!
Big fan of MIkrotik - been using the RouterOS since 2001 - got my Mikrotik certification in 2006. That being said, we find the Ubnt stuff to perform much better as APs then Mikrotik APs. Can't get the info we need to 'fix' the problem. All the MT APs seem to have a bandwidth issue - when you go on the forums, other people have same issue yet all the forum users say it's "interference" or some other issue and do not address the real problem
5 years later and I can share your pain. Good success with MikroTik's WAP AC BE, NetMetal AC2 and 60ghz Wireless Cube Pro. it took 5 days in the lab reading and testing my configs, but when all was done nice results. However the AUDIENCE Mesh (4) has been a royal nightmare. Winbox is the only way to go, but QuickSet is not my friend. I'm now an expert at RESETTING CONFIG and starting all over again. Only to have QuickSet "nuke" my config and brick the Audience. WPS works then disconnects again & again. Not sure why? Just when you think your Audience node is synced with WPS to your house router, it drops off. Wired work, but wireless is flaky. Ask for support and you may as well stand out on the highway with a cup in hand asking the vendors for help. Good luck unless you have a FIN in your hand. I agree 100% amazing hardware for the money, but 5 years later and I don't see much has changed in regards to your comments. :(
hello! we work a lot with both MT and UBQT in our company and i can boil down the use cases for you:
for wireless: always go UBQT
for wired: always go MT
also a few more caveats:
UBQT is a lot more novice friendly but it also comes at the cost of features, a lot of stuff simply cant be done on UBQT. UBQT is also considerably more expensive.
MT has a _shit ton_ of features (BGP, OSPF, MPLS, VPN, iptables firewall, support for advanced scripts, you name it) but that means the experience of a novice user will be hellish. MT is more recommended towards people with more intermediate/advanced networking knowledge, or users that want/like to learn a lot of stuff about networking. MT is also very cost-effective and basically the cheapest router/switch with this feature set and performance. also like you said the web interface is an afterthought, management is really intended for a combination of CLI and winbox (winbox is honestly quite amazing and very underrated in the overall networking community, especially by people that are used to only working with CLI on the Cisco side)
Just setup edgerouter x. It is based on VyOS and has iptables, OSPF etc. Setup WireGuard interface and some modify rules to forward only traffic for certain IPs through it. No problems except some undocumented issue with firewall rule applied to switch interface. Works flawlessly so far... I have also found it has python2.7 built in and crone so it may be nice to use it for some scheduled jobs. So not sure MT is really that better. But maybe in some rare cases...whatever.
@@eco4tree on the side of VyOS, i agree but then i'd consider going the DYI route instead of pre-builts. neither UBNT nor MT can beat a good ol' x86 server in terms of performance.
BattousaiHBr sure, but x86 server is ~$250-$300 and er-x is $50 and it’s enough for home office use with 10 clients and a few custom routes. I am actually considering buying a server in a few years from now if I need more functionality and performance. As for now er-x seems to do the job.
Correct 100%
Mikrotik gear is great, but it's REALLY not for your typical end users unless you want to learn the ins and outs of networking.
I'm sure by now most of your questions have been answered by others here now though.
Agreed. My main job is in networking and servers and even I find it difficult. So I don't think it's just that it's advanced, I think the commands and UIs have been created in a way that only makes sense to the person/team that created it. Don't get me wrong, they make great devices at a great price, but the software has a steep learning curve.
I feel your pain. Work with mikrotik is not for beginners, like me, if you want to jump in you will need a lote of reading but no ask for help. I think it is like Debian community sadle. But as you say at the end you learn and you can be one of the good ones and share your knowledge.
Being in tech for almost 2 decades, I can say welcome to the IT community. I hate to say that but it's normal when first coming into the IT industry. There's sort of a hazing phase you go through, you humble yourself, learn through all the sarcasm and belittling along the way, and then it all sort of goes away once you've reached a certain amount of competency. You've now made it into this elite group, but you're still a newb just with basic knowledge that everyone kind of expects you to have. It's a hell of journey from that point. You're either ready for it or you're not. This is how people get weeded out of the industry. I can say once you've reached a certain amount of skill and mastery in a subsection of IT, you start to be more respected and it's much more fun that way. Don't get me wrong, I've seen some technical know it alls battle it out in the meeting room, it comes with the territory. You just need thick skin which gets developed over the years. Welcome and just have fun with it. Don't take criticism too personally. If you let it slide and look past it, you will learn a lot.
For my point of view: Microtik is for users that understand more then basic knowledge of LAN and want more control of traffic and etc.. Ubiquiti is for people that just want to plug and play device. Mikrotik is compered to Cisco device not to Ubi device :D. In my country community is very good but you should know basic if you not... well maybe you shouldn't buy Mikrotik :D My whole network is only Mikrotik devices because I can't afford for Cisco devices and I need VPN server, vlans (for tv, internet, ip phone etc) and multiwans also good firewall and QOS ,separates networks, virtualAPs, MESH, TFTP server... in one device. Also CLI is the best option for me then Winbox with wine on Linux
Sebastian Mostowik but you have to admit, that MikroTik devices provide a very poor configuration experience, as there is not really a "right way" to do something but rather everything feels like a workaround.
+The Random Linux Guy well said
Yeep I admit :D Here is simple firewalls rules for you (I assume that your WAN is on the ether1 if you have PPoE then change it in firewall:
/ip firewall filter
add action=drop chain=forward dst-port=53 protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether1 protocol=udp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 \
protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp
add action=drop chain=input comment="ftp brute forcers" dst-port=21 protocol=\
tcp src-address-list=ftp_blacklist
add action=accept chain=output content="530 Login incorrect" dst-limit=\
1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist \
address-list-timeout=3h chain=output content="530 Login incorrect" \
protocol=tcp
add action=drop chain=input comment="ssh brute forcers" dst-port=22 protocol=\
tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=10m chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
address-list-timeout=10m chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
You must turn on after that your services like ftp, irc, etc.. You can attemp 3 time to logon on router or ftp if bad pass then your ip is going to black list for certain amount of time. Sry for my bad English :D
This is a very good description of their products, it is a very strange product very flexible but a bit cryptic and they have been this way for the past ten years for me.
Well said and explained !
Just prepared today to return my USG-Pro-4, ordered a CCR from Mikrotik. If you have once felt good using mikrotik you should be prepared to have a tough time with this Unifi GUI crap that doesn't work as expected. The first thing I hate is that the controller cannot run on an USG-Pro 4 . The even have *.debs on their page for Linux clients to be used! The simplest features are missing and stuff that you would 100% expect to be on board. I had also the hAP ac which work like a charm. Very robust and quick!
Thank you for your review of Mikrotik. I'm on Unifi now and was thinking about trying Mikrotik.
But after seeing this, hearing you talk about its bad community and how hard it is to setup...I will stay with Unifi and try their UDM Pro ;-)
Agreed the community on Reddit is like ‘mikrorik is not for the weak’
@@inityo agree. They have good products, but they need to work on their documents and user experience 🙂
@@kenneth_jensen yeah
I had Orbi RBK50 a few months before this video was released(my experiences with Ubiquiti at the time was that wireless was very weak and unstable), I loved them so much, I bought after ~2 years RBK40 for my parents, for the same reasons basically.
Recently got a Mikrotik from my father, to experiment with, opened a completely new world(or maybe rabbit hole) for me. I was looking at Ubiquiti before. Their Confluence documentation seems pretty good now but still a complicated(powerful?) system after so many years.
I know this is a bit late, but I am a die hard Linux guy, and only use it in my personal life. I use WinBox just fine in a stock wine prefix. Have for a good number of years. Now as for CAPSMAN management outside of that, cant say yet. Was looking to do what you did here, dump my old crap for all shiny new Mikrotik stuff, and I am now down to a couple AP's. Was curious how it panned out.
Managing my routers and switches is fairly simple over the web gui or SSH as well as WinBox. I prefer the latter two as its just faster in most regards for ME. Plus I am very comfortable with ssh'ing in and dealing with things on my RHEL servers and such.
If you are in need of hand with anything, I dont charge :D Unless its super hands on, I will do the basics always via email or voice chat. My tithing I suppose to those back from 956-2000 when I was a Linux noob.
The problem with your parents having limited upstream is one I’ve been dealing with constantly for a couple years now. The fix (a “real fix” that is) will require a box that can traffic shape with fq_codel (or cake or pie).
Ubiquiti gear, like EdgeRouters, can do this shaping with their smart QoS (it uses fq_codel). For fairly modest connections, like say a 60/10Mbps, even an EdgeRouter X will perform wonderfully. For faster connections, plan on needing more grunt, like one of their newer, quad-core units. You can flash OpenWRT on a device and shape with fq_codel, cake, or pie. I’ve used the odd home brew pfSense (almost always with an Ivy Bridge i5) to shape traffic (fq_codel). You can roll your own router with a Linux distro to do all of this stuff too. IPFire works a treat, as well.
Bufferbloat is nasty, but once you’ve solved for it, you don’t have to panic any longer when someone walks in the door and their phone starts backing up the day’s pictures and videos and whatnot to the cloud, thus bringing traffic to a damned near halt across the network. Google ‘bufferbloat and the ski shop’ and read the article from ‘Random Neurons Firing’ for a high-level glimpse at what bufferbloat is all about. The solution exists. Sadly, I don’t think MikroTik offers a solution for it.
Mikrotik can do just that with packet/connection marking and queues.
@@laszu7137 Yup! RouterOS v7 can now do fq_codel or cake!
Mikrotik all the way. Had major issues with Ubiquiti. Our entire wireless network is running on Mikrotik. Don't disconnects at all.
Actually i started to getting my hands on Mikrotik after years of "traditional" Access Points placed everywhere in large houses. I followed a suggestion of a friend and i absolutely love Mikrotik, by the way, you maybe have to have some spare time to understand the way it works, and i think it's mandatory to have more than a basic understanding of what a LAN is... many things in a Mikrotik product are very high-level, because i learned that with Mikrotik you can expect to use a simple AP , but nothing holds you down to create a Mesh network, with a managed AP, sending packets over an Ethernet over IP encrypted tunnels... and the limit is how much powerfull is the machine you have bought !
After few days wandering around the Winbox interface i found everything, and i also use a Mac (wine) to use it and it has never lost a beat.
About the community: i've read MANY MANY MANY posts, and the best answers i could get where from reddit, because they tend to be pretty maniacal about explaining things... so i get precious suggestions from there... starting from how to power a PoE router, and ending to solving more complicated tasks when my head-banging solution would not work. People of the community often try to help, but they get upset very quickly, maybe because they expect that your knowledge of how Mikrotik is a bit wider...
With the theory of "in the bigger, even the smallest fit" (dont know how to say that in english ) i appreciate the perks of mikrotik.
Great video, thank you! This mirrors my experience too... the MT community is constantly shooting themselves in the foot.
I have used Hex at home and now bought Hex S for the SFP and PoE port. Absolutely perfect for my requirements. ISP provides fiber that can be connected to SFP, Mikrotik does NATing, gigabit forwarding and firewalling, keeps different subnets communicating from each other (eg phones can't access PC / server network) and wireless access point is powered from PoE. Before Hex S I had extra devices for PoE injection and ONT device for WAN connection both of which are now unnecessary due to the features of Hex S. And all this just for 60$.
Only had one problem with Webfig where I could not reorder firewall rules with Chrome, but everything I needed has worked with Firefox. Plus, web access can be secured with TLS for straight-forward remote management.
deafno ISPs that offer SFP is pretty rare. Where are you ? 😆
Its not just connect adopt and its done for Unifi. That is not the case. Perhaps the problem you experiencing in Unifi is the proper handover from APs to APs. when your parents roam around. initially they are connected to AP1 then they roam and stand beside to AP2 they are still connected to AP1. if you have multiple APs, you need to set the minimum RSSI for smooth handover from APs to APs. (minimum signal strength for the AP to hold the connection). If the signal drops the minimum RSSI, the initial AP will disconnect you and the device will find another access point with a strongest signal with the same SSID. One thing is the setting up different channels per AP manually.
help.ubnt.com/hc/en-us/articles/221321728-UniFi-Understanding-and-Implementing-minimum-RSSI
Tbh I have not setup multiple Ubnt APs, though I assumed they did that RSSI signal strength & cut off automatically.
Mikrotik can do this, but I've yet to try it out blog.linitx.com/howto-improved-capsman-wireless-client-roaming/
You can try
interface wireless access-list add interface=wlan1 mac-address=00:00:00:00:00:00 signal-range=-80 authentication=no forwarding=no for APs each :D
But I use caps manager, so I can't adjust wireless setting there!
Mikrotik is hardcore bois. My opinion is do you work with networks every day of your life? if so then you would love mikrotik. If networking is not part of your daily job rather stick to the consumer products
I don't agree with that. That's like saying that Archlinux is only for the hardcore. I don't quite believe that. If you have a basic understanding, it should be simple enough to build up to what you want to do to.
Agreed. Mikrotik is powerful device, but you need to understand the basic. I went thru what you experienced. I had alot of reading and still havent figured everything out. I bought mikrotik knowing all the consequences so didn't complain. Now im trying to figuring out vlan on hybrid port etc. Because i want to separate guest & private wifi. It works with ubi but havent figured out the config for ap running on lede.
@@vinceho8559 i know this is 1 year later but do you still have any questions regarding VLANs? maybe i can help you out.
*_"Mikrotik is hardcore bois."_*
Nonsense, it all depends on your needs.
From what I hear I completely understand that you had a hard time in irc. Thank you for spending me a good laugh. :-)
hi Kai, mikrotik is not user friendly that user can manage it well. But if u go through step by step, try and error, you will have a different world. For example wireless roaming you mentioned, i used Meru before for true seamless roaming and it costs too much comparing with Mikrotik. Mikrotik create a huge market value to me and i used them mostly on my projects.
Interesting... because of your video I googled a few "howto solve xyz problem" and it looks like you are right... so I guess hardware for the new office is still going to be UniFI.
I use Mikrotik alot, but I must agree, it's not easy to start. I don't know all the avanced features even now, but I know the basics and I know how to set the security features somewhat well so I'm good. I like Mikrotik because you have good equipment at a small price and they get updates pretty often so, instead of buying a Asus or TPlink equipment, I can buy Mikrotik for the same amount of money and spend a bit of time configuring them but at least I know I will have software updates for 5 years or more.
I never felt Mikrotik complicated. Maybe because I had past experience using Linux as a firewall/router, and I used to dive deep into all sorts of things, including networking.
So I claim, that if you have the fundamental understanding of networking concepts, and you are motivated to self-educate yourself, then Mikrotik is not difficult at all.
I rarely use any forums or chats, becasue the at time I would get answer (if I even get one, and if it even solves my problem) I could have already found the solution using search and documentations.
If you just want a plug and play solution, and not really interested in understanding how it works, probably Mikrotik (or any sort of enterprise device) is not your way to go.
By the way, if you just want to use a Mikrotik router as an AP, probably they are preconfigured as such, but you could do it according to many howtos. You don't need any sort of magic, including CAPsMAN. As you said, "set the SSID and walk away". It can be done. Bridge a LAN and the WLAN interface and you are done. Rougly... You don't even have to care with DHCP if you already have one in the network.
As a configuration interface, I think WinBox is the cleanest for start. Despite the name, there is a Winbox4Mac version, and the windows version just works fine in Wine on Linux. I am using all the three right now, it just works.
Nice video. I've used an rb450g mikrotik for my home router for the past five years or so, but it can't keep up with my new fiber connection. Trying to decide between the UBNT EdgeRouter4 and the Mikrotik RB4011 as a replacement.
I understand that UBNT might have better performing APs, but I don't see their value for core routing. Better UI?
@@kaihendry
Yeah the EdgeOS looks interesting, something new to play with that I'm unfamiliar with, the traffic monitor looks nice. I have an UAP-AC that's been good to me, and my rb450g has lasted a long time. The RB4011 has a more powerful CPU and builtin switch, though I think both will route gigabit without QoS, the mikrotik looks like the better option.
Yeah I guess UI is the only reason I had been considering UBNT.
I personally found the CloudKey requirement insane. MikroTik’s inbuilt CapsManager whilst not easy to use, is pretty sweet when configured properly. Nonetheless I guess EdgeOS does more.
I have two Mikrotik devices and they offer a massive amount of control. I agree that the way that certain things are implemented may not be easy for people who may be familiar with other devices. My experience in the Forum has been OK. I've received a reply to my question on the second time (not the first). The responder made some assumptions about how well I understood but someone had eventually replied.
The quickstart page isn't too bad. The first major issue I had with my RB750g-2hnd was the very long key I had generated with wpa_passphrase; it turned out that the 64 characters it generated wasn't accepted by the Mikrotik to I had to remove the last character and then it worked. I racked may brain for a long time to get this one because I didn't expect it to work like that. It is a Linux based DSL that's fairy cool but it's the implemented logic that can be disconcerting. Like the three way to build a VLAN based on hardware, bridge and switch chip and which will lead to interactions with the CPU. Took me a while to grasp it because I was operating in function of Linux, in a sense.
There's a new page of documentation which helped (help.mikrotik.com/docs/display/UM/User+Manuals, help.mikrotik.com/docs/ and the wiki wiki.mikrotik.com/wiki/Main_Page). I will also agree that it's seems to be oriented toward individuals who want to have a business in providing solutions and I can definitely see how effective that can be. On a trip to a remote island, the guest house used a few of them and the individual who had installed them ran a local internet provider/networking service.
Also I found that wireless tuning does help since I've remember the default performance and what happened after I read an article and followed another video on youtube, it was way better than what I had started with. I find this individual's videos to also be helpful: ruclips.net/channel/UC_vCR9AyLDxOlexICys6z4w
And this one too ruclips.net/video/JRbAqie1_AM/видео.html (a bit condescending maybe but good).
It takes a while to kind of understand the logic behind how they have decided to organize and implement things.
ServeTheHome has a lot of information about the switches of which I have the CRS125 rackmount version. I haven't yet tackled the VLAN config on them yet, but I will soon.
Overall, i don't think that it's easy to beat them in terms of price/feature wise but it takes a bit of learned to go beyond the basics.
You want a seemless experience use Aruba instant on its low cost has a community for and Aruba will help you set it up within 90 days if you run into issues. And its simple.
Thanks for the tip. I need to try it! The standard Aruba is like 2k and Instant on is ~100 USD. Awesome.
Hello Hendry I am currently learning mikrotik and usually use it for multiple network setup. I maybe can help you in some cases but cannot promise all. This is a way for me also to at least to learn more in actual or hands on.
Thanks for for offer, my config is here: www.reddit.com/r/mikrotik/comments/6rq85t/aa_hap_lite_configuration_for_home/ Two questions 1) my firewall doesn't drop invalid packets. Is that a big problem? 2) How to do QoS?
@@kaihendry are you still looking for help regarding your MT configuration?
@@BattousaiHBr Just the usual ones like counting the bandwidth across IPs.. =)
@@kaihendry just add all of them in the simple queue target :)
I was so curious why you chose Mikrotik over Ubiquiti. They’re both great companies with excellent products. But Mikrotik is a lot more complicated than configuring Unifi products.
Well I tried to tell my reasons. natalian.org/2017/08/20/Choosing_Mikrotik_over_Ubiquiti/ I think the Ubnt controller software is a bit ... buggy and crap. Especially their IOS app.
Look you are looking at Mikrotik wrong. You are supposed to use it like Cisco, but more open.
You don't just buy a Cisco business switch, AP, router, firewall and then expect to just be able to configure it without already know a bunch about networking and have a certification of some sort.
It's not really meant to be used by home users (unless it comes preconfigured by your ISP or network administrator)
Thanks for sharing your experiences in detail. Considering that this was almost three years ago, do you have a quick update on how Mikrotik has evolved (or not) since then? I'm awfully frustrated with the Ubiquiti Dream Machine (UDM) because it has all kinds of issues with third party Switches and APs on the network. I'm hesitating whether I should replace those with Unifi devices, hoping that the network will become more reliable, or throw out the UDM and go for something like Mikrotik. Listening to you, I can see my self wasting heaps of time learning stuff that I don't really want to learn (though, surely, once you know it, you're probably happy about it), so my excitement for Mikrotik didn't last so long (although you kinda of recommend it). But maybe things have changed a bit since 2017?
Why not experiment with a couple of Mikrotiks to see if you like it? hAPs are cheap...
@@kaihendry The experimenting is already part of that time consuming learning process... But which device would you recommend I use for experimenting?
Well.. you started at wrong foot. Mikrotik is not Apple. It is not a consumer oriented company. They have integration partners, consultants, academy, certification, much like Cisco. If you have problem, you look for your consultant, not Mikrotik. And it is not meant running by webfig, nor even winbox. You'll get a lot of problem when you try it that way. The preferred way is using command line, much like cisco or other enterprise router.
So, yes.. Mikrotik is not for beginner. You have to have network knowledge to operate it. But when you know your way around network, Mikrotik is pretty easy, easier than Cisco Routers. Well, I am not talking about Cisco Linksys, but Cisco ISR like router. I set up a link of 10 remote places easily to join them in a big network with Mikrotik. Very easy, and working flawlessly for 10 years straight.
My suggestion is, if you keep learning your way in Mikrotik, you are not going to look back. Not many router at this price, can work as reliably as Mikrotik.
My point it, Mikrotik should be a consumer orientated company. There are no good reasons not to be.
Tbh, my Mikrotiks are configured and working. My major concern is their inability to publish their source code. They obviously hack Linux.
@@kaihendry well, the reason is that it is not unify. It is more like edgerouter. You need to dig into its command line. And frankly, I haven't met an average Joe who can casually fire up ssh, connect to Cisco ISR and set up NAT. They will have a hard time understanding how to write routing commands. The reason why mikrotik is not consumer oriented, is because the amount of knowledge and education you need to have before operating these routers, despite its price. There is no reason to be consumer device, if not everyone can buy and configure this thing. Average Joe only knows how to press a few buttons, whole enterprise need many things. Some knowledge that the average Joe takes for granted. When you click those buttons, the GUI sends a few commands to do what your one press button tells. Of course, the commands may or may not suit your needs, but that's the problem with wizards. That's why you can never rely on GUI on those devices. Sure GUI is nice, and can help for your most basic need. But it is not what mikrotik meant to be.
I contacted Microsoft last month. Asking about azure. Sure, it was fast. They reply promptly. In a few minutes. But after they realized that I need help with azure, they asked my phone number, my company, and what time I can be available. Just yesterday, someone from anabatic called me. I was thinking, who the hell was anabatic? Then the person on other side explained to me, that he heard that I need azure service help. He called me to help. And I need to setup video conference by Monday to explain my problem. It was the same with Oracle. You see, enterprise service are always the same for every company. Microsoft doesn't help me, but then I contacted by anabatic. Same goes to mikrotik. They just won't help you. You need to find some company like anabatic, in your city, who can cater your need. That's the way enterprise service works. That's also the way mikrotik works. Unless you want to take it into your own hand.
prd x Try AWS next to see how a customer orientated company operates.
*_"Mikrotik is not for beginner. You have to have network knowledge to operate it."_*
Such a nonsense. You only have to be an expert if you want to use all the features. Who "operates" a router anyway, it's only supposed to be set up.
@@samc1176 first, mikrotik is the real "router", not just some "natbox slapped into access points and call them router" router. Second, configuring a router needs specific knowledge. People are learning these knowledge for years, before getting their certification, and getting paid for it. That is where network administrator comes from. It is also true for every single enterprise router out there. You need basic knowledge that you should obtain from a college major. Natbox are just a very, very tiny part of routing. Mikrotik is capable of maintaining a network spanning across the globe, and holding it together. There are lots of protocols involved, lots of routes involved, lots of programming also involved. What to do when a route goes dark, how much tolerance is perfect for your network, what if someone abusing your bandwidth and taking out your data, what if someone trying to access some network part that they are not supposed to access, which port open, how many connection per second, how to stop ddos, what kind of content you want to filter, what kind of traffic report you like to get, and so on and so on. That's a router.
Agreed the community is a bit bad ‘mikrotik is not for the weak’ , however as a brand and company they’ve built something awesome .. it’s not their fault
Well their standard reply of talk to a consultant for the answer doesn’t help!
Nice Video and a good point. I was also about to get MikroTik hardware. What a pain. I really have to rethink the investment.
One point, you mean that the coverage is not good with Unifi at your parents and that one from MikroTik is better?
By the way,. your Unifi controller is mounted vertically. If you want better coverage you need to mount it horizontally.
Never used Unifi at my parents place btw, so couldn't comment. Tbh the Mikrotik solution I have in place, is working well. Really.
Actually, in enterprise-solutions the AP/controller is heavily involved in the roaming process, this is called "fast roaming" or "fast BSS" (IEEE 802.11r-2008).
+The Random Linux Guy does it actually work well?
Kai Hendry I can only speak for a Cisco solution which needs a dedicated controller unit and some sort of RADIUS in place, but yes it does work like a charm.
+The Random Linux Guy so it can keep a VoIP or FaceTime call going without disruption !?
Im a mikrotik, Ruijie and ubiquiti user. Mikrotik is really powerful device. The one thing I dislike mikrotik is the firewall. Someone always try to break in or attempt to hack the device. Updates are frequent but they seemed not to anticipate the problem. Pros: PCQ and Mangles are the best! you will only see these features on paid competitor devices in medium enterprise level. While Ubiquiti, 8/10 wireless Signal especially Unifi. But I dont like the unifi controller . They are making Money out of it. While Ruijie... DOES IT ALL. 10/10.
Picks something because 'its Half the Price of Ubiquiti' which is half the Price of the big boys Aruba, Cisco, etc and then says he expects Apple levels of Support and for it to 'just work.'... hmmm
Even cheaper wireless gear has simpler menus for configuring a Firewall & QoS, so what's your point? :P
@@kaihendry yes but those even cheaper ones are not considered enterprise products.
Interesting thoughts and comments you have, Im about to start a similar journey, but yet to purchase MicroTik (supplier out of stock for HAP AC Lite) or Ubiquiti.
The point you make about license is, from what I have read at least, that the boxes come with different level licences, but should you wish to use RouterOS and their stuff on other hardware or installs such as VM's, you have to purchase different levels of license depending on how and what its doing things. On a recent MUM vid from July they were saying you can now have a 60 day trial.
Should your box get zapped you have to re-license it, so probably best to keep a record of hardware ID and licence etc.
what I am even more confused is the actual license of their code... IIUC they use linux, don't they need to publish linux sources?!
Licence level depends on your needs, there is a table that explains the capacity of each license level, some license levels do not manage certain packages (that is why they do not come by default) so you can customize license and packages to your needs. I am not familiar with politics on publishing linux sources...
you can download winbox for mac as well
called winbox4mac
Could you suggest me some physical stores in Singapore to buy mikrotik? Or it's available online only? Though based in India I will be travelling to Singapore for about a week next month. Thank you.
I buy from sg.alagas.shop but I suggest you pre-order with Soragan Ong. There is no items on display.
All my home equipment is Mikrotik. i sw for ubiquity because after last firmare update a have a lot of problems ( device distonecting form lan and wifi issue) and also form time to time i need to reset it and reconfigure. so mikrotik is working fine and you don't need tons of sw to do it. But to use miktorik you need to have advance network knowledge. so to you don't have this use a user freandly interface for other device, is you know what you are doing the use mikrotik. PS my router also manage 3 VPN with my friends and all in on the same device :)
Mikrotik wireless is years behind Unifi in features, there is no roaming support as in 802.11r nor do they have any proprietary solution for it. They also have no bandsteering support.
It is a feature they announced for ROSv7. Routing on the other hand is night and day difference, USG quite frankly blows.
And ultimately the main difference between the two is that you need solid networking fundamentals to make Mikrotik stuff work properly, whereas with Unifi you don't.
I'm not quite sure why you rant about user interface options. WinBox is visually the best and most powerful tool in the industry. WebFig should not only be avoided, but disabled altogether.
On communities and vendor support, Mikrotik is an ecosystem for advanced users that can be tweaked with in a very granular fasion whereas Unifi can be set up by anyone but you're basicly stuck with the WYSIWYG experience. Very little can be done through CLI.
Community forums reflect that fact. If you make some beginner mistake in your Mikrotik configuration such as creating an IP pool for DHCP server outside your network range, the folk there won't take you seriously. Do I agree with that kind of behaviour? Absolutely not, but it is what it is. It's a big boys club so to speak.
I'm a certified MTCRE/UEWA and work with both vendors on a daily basis, and I'd hate it very much if suddenly I had to replace either one of them.
Mikrotik is incredibly rich feature-wise when it comes to routing options for a laughable price and Unifi is incredible for the money as well in the wireless world. 3x3 outdoor AP for $200? Count me in!
I kinda hope they'll come out with UAP-AC-M-HD sometime soon for some 4x4 outdoor goodness.
Soda88 nice comment. Just want to say that Linux users like myself, winbox sucks quite a bit.
I do find Unifi controller to be a bit of an elephant in the room compared to Capsman. It’s a train wreck and I don’t feel it’s offering much value. Maybe I need the gateway or something..
I choose MT, because i simply hate the UBNT Controller. I do like their products, but I am not buying anything from them anymore as long as this stupid Java Server is needed.
Agreed! CapsManager is good enough for me
Install Ubuntu on a VM and run it from there, controller doesn't need to run 24/7 anyway.
That why you should take mirotik course from academy. They will give a full insight how thinks should work.
RUclips URLs?
Have a look at Cambium.
Love mtk gear but their non 60 GHz gear kinda sucks.Still suck on wave 1 AC with no beamforming etc.
Also full support for 802.11r and 802.k for faster roaming support as well as OKC support.
I thank you for your video and sharing your experience. But your title is not really accurate.
What is a more accurate title ?
IMHO "Initial review of Mikrotik platform" I liked your review of the product, its community, and your issues. Being new to Mikrotik myself your video really helped me look deeper into the platform. The reason I started looking into Mikrotik is because I am not finding Ubiquiti a plug and play and then some platform. In fact I am having a lot of issues with Ubiquiti that seem to have existed for some time, according to my forum searches. So I am looking for an alternative.
I got the impression that you didn't really start to compare the two products until the very end of the video. I truly appreciate your time and sharing of information. Thank you.
Hi Kai, do you mind to do a tutorial on RB951G in setting up 2 SSIDs with 2 different bands setting?
Yes I mind
@@kaihendry Please, Kai!!
@@mmm17_ I got you. ruclips.net/video/tG3_VfSYpkg/видео.html
For WiF/wireless, should go for UniFi,becoz UniFi Wireless is more stable, user friendly configuration. for Mikrotik should act as Core or distibute coz it's had more feature and customise ,
my experience with Mikrotik make me speechless. They call me idiot when I asked on Mikrotik Reddit community. The community isnt helpful. And to be honest, I would never read Mikrotik wiki, unless I cannot find the info elsewhere. I hope Mikrotik improve a bit more.
UBNT= unbox look for a tutorial, works fine MTIK= Quitte strong network knowledge, unbox, read reference and examples, you win!!
you should try out cisco stuff :)
If only I could afford it
Dude, he struggled to run CAPsMAN how you expect him to configure Cisco devices, lol.
NO!!
quick settings should do the trick, even the app helps.
So far I like unifi ap's but there switches I will never use again I'll pay the overkill price and stick with Cisco ios switches and pfsence for routing/firewall
I've had 2 Unifi POE switches fail this year alone - and just out of the 1 year (!) warranty. Big headache at the clients site and embarrassing too as I recommended a Ubiquiti stack to get the business. With the service calls and loss of reputation it hurts! You're almost better off buying used HP switches or for a VIP customer buy new HP and try and make back the cost somewhere else in the installation package. The rest of the Ubiquiti gear seems fine.....
Mate with all due respect - Mikrotik is for professionals and really not designed for beginners.
Have you seen ruclips.net/video/ALo0ISzz4IA/видео.html ? hahahaa
@@kaihendry Hahahahha OMFG well the reality could not be more apart from wishful thinking...
Hello Kai:
As far as I know Mikrotik does not support roaming in AC mode, so try to stick to B mode or G mode only, try to upgrade all 3 units to the same software version and try to install the package "wireles-cm2" without the quotes.
Joaquin Nunez interesting! What does that package do? Roaming is a misnomer since I think it’s upto the client to choose...
Kai Hendry is a new wireless package that allows fast handover, also support background scanning and some other features
Joaquin Nunez why doesn’t Mikrotik use that package by default? Guess I need to install the package on each AP I have ? Bit worried about testing things on my parents ! 😅
@Joaquin Nunez - could you point me to what the fast handoff feature is called, or where to initialize it? wireless-cm2 has been discontinued as of RouterOS v6.37
The cheapest and the most powerful router is Mikrotik.
Routing the World.
I think also, I have seen vids about MicroTik's hotspots that enable bandwidth limiting, so I would think you could borrow some techniques from those to define and maybe even QOS type rules, so that low level cloud file pushes could get a lower priority of bandwidth to avoid saturation and delayed hand shake issues to the frontside ISP
Most routers as some form of QoS, but Mikrotik's is really really hard to fathom. Guess it's the "most powerful" one too.
Use this for your network but only for upload and for your network its perfect (change lesses for your network to 2 min max it helps you a lot with this q):D :
ruclips.net/video/MPxVWlqmWOI/видео.html
and here is explain how works QoS with PCQ (don't mind mangle rules it's not important for q above):
ruclips.net/video/RK-1mRgTEPg/видео.html
If you need help I;ll explain more about it my e-mail: smostowik(at)gmail.com
"When they move around their large house they get disconnected..." Ah, first world problems...
So he should use mesh :D and problem solved :D
MESH is for noobs
they apparently live in a farm, so not quite the kind of "large house" you would expect haha
Wao dude the Title of your video said Choosing Mikrotik over Unifi for wireless but you talk more bad of Mikrotik than a comparison why to do what you said on your title
Compare and contrast.
Longstory short - Ubiquity is for network amateurs and Mikrotik is for people that knows what they're doing. Problem with people is that they expect to buy Mikrotik and have this plug and play experience. I've achieved things that I could never do on Ubiquity (either at all or not efficiently) for a fraction of cost of Ubiquity. As for your experience with community I've never seen anything like it on their forum, but I do have to say that you are certain age and maybe you are not used to do a little bit of research and self education. CAPsMAN is like one of the easiest things that you can configure on any Mikrotik device and there are *detailed* manuals on Mirkotik Wiki or here on YT.
I guess my point is that you obviously doesn't know more than basics about LAN and probably didn't work with devices from Cisco and Alcatel and things like that so maybe you should be better of with Ubiquity or some TP-Link, but for users that actually knows something about networking (knows exactly what they want to achieve) then you should definitely go with Mikrotik or Cisco
Don't blame the device because you don't know how to setup any network hardware, there is a reason hand holding device get popular among people who are not technical. That said learning to do it and do it correctly will change the experience allowing you to get so much more from your network. That said, so many red flags in his rant about poor setup or misinformation. Good on you for trying and continuing to learn.
This is what I find infuriating: Mikrotik people (like you) saying to me "don't know how to setup any network hardware". I have set up plenty of networks and Mikrotik has the most painful UI I have ever seen. So much potential, so many pitfalls. I'm trying to point out the failures, yet it is me who doesn't know how to setup any network hardware? Get my point?
Kai Hendry if that's how you are about constructive criticism, then I guess you learned nothing from actual people who where trying to take advantage of you. You clearly made mistakes like putting your parents computers on the public internet, not changing default passwords, and trashing on the configuration tools because you do not understand them.
What is worse about your bad attitude towards me is that I have a partial email I was going to send to you from your website, in it I was going to offer to help you out if you needed someone such as myself who has experience with MikroTik devices. What ever have fun stumbling through stuff.
Sorry, how is it constructive to say to me that I don't know how to "setup any network hardware"?
You are effectively (in my eyes) blaming the user for poor software decisions. For example when in CAP mode, IIRC I had to login to each device to change the default blank password. How is that a sane UX?
I'm super grateful for any feedback. Is it a "bad attitude" asking not to be branded an idiot? Thanks!
Mr. Hendry, I have been there too, but what kept me going with mikrotik (and other systems which are not one click friendly) was to conquer step by step and finding out that maybe my way or point of view to do something was already learned the wrong way, in other words, simple UI make us lazy, so we expect everything to be like that, we get used to simplicity and routine, try changing from IOS to Android or vice versa, people go crazy. What I did was to take out my old college books when I learned Cisco´s basics, OSI Model, static routing, etc, back in those days labs where pure comanda line interface, and behind the UI of a ubiquiti, or any SOHO device there is the same CLI as in mikrotik, once you learn and achieve what you first wanted to achieve, believe me the dark side will take control and you will be fascinated by the power of routerOS (actually Mikrotik is the RouterOS, you can buy mikrotik hardware or routerboards that come with certain license level of routerOS or you can use any x86 PC, buy or try free license and flash it into that piece of junk and voila you have a working router).
Remember, buttons and scroll down menus on a UI get you locked into half the possibilities of a hardware, remember that linksys old router 54wrt that we used to flash with dd-wrt, result was a 54wrt on steroids.
Please dont get me wrong, I do not feel like an expert, I am still learning, people who call you idiot are just ignorants, because once they knew nothing just like everybody else, just keep in mind that what you are trying to acomplish is some how medium to advanced skill in terms of mikrotik.
you find it weird that people want to be paid for their work? What do you do for a living?
Paid to share issues of a MikroTik? I’m an engineer and contribute time to sharing knowledge.
mikrotik is linux in networking :D
Ubiquity unify sucks big time. They don’t update and the controller software is bad and full of laws. Mikrotik is the way to go
Moral of the story: If you don't know what you're doing, do something else
Mikrotik is cheap and best.
MikroTik support & the forums are incredibly poor, legendary in fact, they have spread this culture and perpetuated it. UniFi isn't plug and play BTW, not configured properly anyway.
MikroTik should never be configured using the web interface, its not a good option, WinBox is the way to go. The target market for Tik is WISPs and infrastructure projects, never home users!
Idiotic use of IPs by the ISP in the UK...
I don't like NAT, so sorry about the "idiotic use of IPs" ;)
Kai Hendry Is this the way they normally configure their network or have you paid extra? IPv4 IPs should not be wasted like this if they are being used thus. As you found out a network router left in default mode without properly defined firewall rules will be taken over in minutes no matter who makes it. Not talking about consumer grade stuff as they come preconfigured but are so inflexible they are mostly useless.
Keep up the videos!
some ppl just try to find excuses to cry over stuff. powerfull things happen by hand dude. buy tp-link if you like to be pressing buttons. beauty is on the imperfections
I don't agree.
I stayd to 10 minuto to seed some bechmark losft of time this video
20 minute moan. ignore.