MikroTik RB2011UiAS-2HnD - Cost Effective SOHO Security

I got to a point where I wanted to give my home network a boost with more security in mind and from my research on SOHO equipment the MikroTik RB2011UiAS-2HnD was victorious for the following reasons.

  • Required hardware specifications (No 5Ghz :( - there is always that one thing missing)
  • Full featured Linux based platform called RouterOS
  • Good community support and good documentation
  • Commercial Support (which i have not used but is good because it looks like it trickles down their product line)
  • Excellent value for money (A\$160)
  • Highly configurable
    • Scripting abilities
    • Segregated Wireless networks with WPA2 Enterprise and on device RADIUS back end
    • VLANs, VPN, Monitoring/Graphing, encrypted backups etc etc
    • Good web based and command line based configuration
  • Improved security capabilities

I was impressed when I got the device as the build quality is good, it was exactly what i expected and all for a reasonable price.

I know OpenWRT and DD-WRT are great in many regards but there is something nice about having commercially supported Linux based hardware platform that just works and that has most the same functionality.

Make sure you have the time to configure it. There is quite a few resources but its not exactly up and running in 15 minutes.

Given that there is a bit of a barrier to entry I figured I would blog about some of the things I have setup to bring that barrier down a little more.