What's new

The guide to choosing between mikrotik or ubiquiti or to ditch them entirely

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

System Error Message

Part of the Furniture
I see a lot of people who when they want to buy a non consumer router tend to only know about ubiquiti rather than other brands. I mean theres cisco lower end, engenius and all sorts of other brands too that sell all sorts of products. Theres also the x86 area where you get your own PC and install a router/UTM distribution on it instead of buying any of it.

So im writing this so that people can understand the difference between these 2 brands when it comes to choosing an AP or a switch or a router. So the next time someone on the forum asks about ubiquiti or mikrotik, link them here so that they know other brands exist too and other choices exist too.

As a brand, both rely on forums for their support and they give a limited time email support. Warranty is equivalent to a consumer brand of 1 year. In support they do very poorly such that you only get support for functionality that can be achieved with a consumer router (though you still do get better support than for consumer routers in this case) but it is still community reliant. Both have professional and dedicated tutorials from various blocks and networking professionals. The only difference is that ubiquiti uses bs marketing by directly shaming cisco (saying their devices are more reliable and better than cisco professional from a video). The bad thing that both brands have is that they will not offer support for any advanced prospect of their products unlike what cisco would offer with their higher end products and what some companies who make business products do provide as well.

In terms of products both brands release good products. Mikrotik tends to be more on the customisable side since more of their products have SFP than ubiquiti even their APs for quite a low price and they have mini PCIe and probably other tricks that let you upgrade your wifi without having to buy a whole new device. Mikrotik also allows you to change the cpu frequency of your routerboard and they all run the same OS, something that ubiquiti lacks.

So when choosing an indoor AP, the only reason to choose mikrotik or ubiquiti is because you want their OS. They both lack a number of hardware wireless features that even consumer wifi routers have. Mikrotik relies on software more to handle the job just like the netgear r7000 when it comes to wifi which is why they can reliably handle many clients and in price mikrotik actually wins for indoor APs but you have to buy the case and PSU for it too but their indoor APs are customisable incase you want to add more wifi or functionality to them through usb, SFP and mini PCIe or even LTE. If you are someone who lacks skill or an IT department do not go for either of these brands, go for engenius,cisco or some other business brand. In small scale deployments Ubiquiti does fine in that area. For outdoor APs both brands offer very similar products so the choice is between price, routing features you need and skill (if you lack skill go for ubiquiti's AP if choosing between the 2).

In the switching area, both their low end switches arent much to look at compared to whats out there. Ubiquiti offers better low end switches than mikrotik and in the higher end ubiquiti has POE out on their larger switches however mikrotik has SFP+ on their higher end switches for a lot less than ubiquiti's equivalent. They both offer fully managed functionality so they can do more than the commonly suggest sg300 at the price point and they use the same OS as their routers so they can function as low end routers. Although mikrotik is new to the fully managed switch game both brands offer a lot that you can use from a fully managed switch although the sg300 is a semi managed switch. Again lots of skills are required for using their switches and you should really ask yourself what features are you planning to use. If you need to perform LAN filtering and firewall than buying a switch for that is a mistake. As with any switch, once you start adding rules to them you start losing wirespeed. If you are out for a fully managed switch, both brands offer a lot for less price but it is rare that you would need a fully managed switch. Best to look at other brands.

For their routing products, you will need skill or an IT department. As a router mikrotik is a lot better in firmware, flexibility and dedication than ubiquiti does. Their firmwares are less buggy in routing and are better optimised in software throughput. Mikrotik doesnt rely on hardware acceleration that ubiquiti does so if you are buying a router, the choice between brands depends on if you are just doing basic NAT (like a consumer router) that is compatible with hardware acceleration or advanced stuff like QoS and firewall in which routerOS wins here. RouterOS also lets you perform layer 2 filtering which ubiquiti's edgeMAX doesnt have and if you have gigabit internet that has PPPOE and need to perform QoS and firewall than you will need a mikrotik CCR as it does that and VPN at gigabit speeds which the ubiquiti edgerouters just cant keep up with. However although ubiquiti's firmware doesnt offer much as a router it does follow the linux OS well so the best way to utilise an edgerouter is to treat it as a linux server. Currently i have an ERPRO running squid3 and some other things, not using any of the features from the GUI or console. Being able to install 3rd party software or other things is what mikrotik lacks. in terms of scripts, Ubiquiti wins here for being able to use linux scripts unlike mikrotik's very restrictive scripts but Ubiquiti doesnt make this apparent in their GUI for running and managing scripts. In terms of management software Ubiquiti has a cluster controller while mikrotik has winbox which does a better job to access their own products (such as being able to access them through layer 2, ipv6 and vpn but they arent cloud managed). As a cisco alternative both brands fail spectacularly. If you need to use a cisco feature/protocol get high end cisco/juniper. None of these brands can perform cisco features fast enough to be considered as an alternative.

As an importact fact to remember, neither of these brands are a saviour to the networking space. consumer routers can be just as reliable if you installed a 3rd party firmware and there are cheaper and more reliable choices such as x86 that performs the job faster in every way (except to the CCR series) and with much more flexibility. If you're looking for cheap 10Gb/s than consider 2nd hand SFP+ cards. Ubiquiti's marketing portrays them as a saviour from their low price points to the features they offer but dont be fooled by it as if you are considering an ERL, the ASUS AC56 is a very potent choice too and you get wifi and usb3 thrown in which you dont get with the ERL.
 
Ubiquiti's marketing portrays them as a saviour from their low price points to the features they offer but dont be fooled by it as if you are considering an ERL, the ASUS AC56 is a very potent choice too and you get wifi and usb3 thrown in which you dont get with the ERL.

I won't trade in my AC56U for ERL for sure :D
 
I think there is not one best answer. It is good to have all the recommendations thrown in for people to size up. People systems are very different. Some work at layer 2 and some work at layer 3.

I would not buy an ASUS router because I work at layer 3 and there is no support for ACLs. It probably is a fine router but it will not do what I need. I would buy the ERL over the ASUS AC56U.

Having a solution for an internet GIG connection does not really exist right now. If I could have Google fiber I would add a 10GIG setup to my pfSense box. My motherboard will handle a second Xeon processor if need be. I don't think I would really need it since my layer 3 switch handles all the local traffic.
 
Last edited:
I would not buy an ASUS router because I work at layer 3 and there is no support for ACLs. It probably is a fine router but it will not do what I need. I would buy the ERL over the ASUS AC56U.

When ERX's firmware is mature (with various h/w accelerators supported), I'll probably buy one and turn AC56U into a AP. Given ubnt's firmware pace, that'll be two to three years away if they have the will to actually enable them in ERX..
 
There is RMerlin's firmware that adds ACLs to ASUS routers, hence my suggestion of the AC56U.

Also routers are actually faster than switches if you need to handle layer 3 traffic with filtering, without filtering is a different story.

Still i went with the alternative route, get all the solutions so i have x86, ubiquiti, mikrotik, ASUS, zyxel and some other stuff that consists of developer stuff or boards.
 
There is RMerlin's firmware that adds ACLs to ASUS routers, hence my suggestion of the AC56U.

Also routers are actually faster than switches if you need to handle layer 3 traffic with filtering, without filtering is a different story.

Still i went with the alternative route, get all the solutions so i have x86, ubiquiti, mikrotik, ASUS, zyxel and some other stuff that consists of developer stuff or boards.

Very good. I am glad RMerlin's firmware is going to add ACLs. Is this true of all the ASUS routers?'

I was always under the impression switches even layer 3 switches process traffic as a mesh from MAC tables. I did not think routers worked this way. I thought the mesh processing was faster. Of course layer 3 switches are limited on layer 3 processing compared to routers due to this mesh processing.
 
ACLs through the use of iptables. But i think even their config files could also do some of the ACLs too.

the TILE CPU is a mesh CPU which is why it is faster than a switch. But unlike a switch each core of the TILE CPU is a proper CPU core whereas each core of a switch or the switch core itself is only capable of basic things. To do advanced things with a switch the CPU takes multiple cycles to complete it compared to what a CPU can do and the CPU is clocked way higher than the switch's CPU.
 
Layer 3 switches don't do advanced processing they just move traffic in the lower lines. I don't think most of these consumer routers do mesh processing.

This is why my SG300-28 switch can move 56 GIG per second of data.
 
Last edited:
There is no ACLs in Merlin firmware nor I heard of a plan adding it.

iptables isn't a Merlin feature either but any linux routers come with it. Using iptables can achieve some sort of ACLs but certainly not the kind people used to CISCO or other higher end routers expect.
 
Layer 3 switches don't do advanced processing they just move traffic in the lower lines. I don't think most of these consumer routers do mesh processing.

This is why my SG300-28 switch can move 56 GIG per second of data.
Managed Layer 3 switches can do advanced processing. My mikrotik CRS has ACLs and filters in the switch section itself and the bridge section. Infact mikrotik has a benchmark of the switch with rules on the switch chip itself. Some switches have enough of a CPU that it can take the hit of a few rules and still perform at wirespeed. The SG300-28 can move 28Gb/s of data and not 56Gb/s of data. The switch/router doesnt generate any data and data flows 2 ways so data going in has to go out too. This is why forwarding performance for wirespeed is half the port capacity.

Checking the specs of the SG300 it doesnt have a very fast switch CPU either, but it is a semi managed switch so you would only be applying configurations instead of any rules. Only fully managed switches have ACLs, rules and that sort of stuff which is what differentiates between managed and semi managed. The SG300 is a semi managed switch. A fully managed switch will switch at wirespeed with no rules.
 
You need to check the Cisco data sheet. It is 56 GIG per second. I think you forgot about full duplex. 28 ports full duplex equals 56 GIG.

This is a bottom line layer 3 switch so I don't expect real fast specs. But layer 3 switch specs are much faster than most routers. You have to go into the pro Cisco line to find a router able to move 56GIG per second of data.

This switch has ACLs phone stuff, private lan and etc. Things you would need in a small business.
 
56Gb/s in terms of traffic flowing, not moved. When you move 28Gb/s of traffic that means that the 28Gb/s of traffic that went in has gone out somewhere so you cannot say it moves 56Gb/s data because it is physically impossible. This is with full duplex ofcourse and it has been what i have talked about numerous time relating to bandwidth requirements. When people talk about WAN they're talking about a single port out of the other ports on a router which is why for WAN speed it is both download + upload. Traffic moved is forwarding capacity and as i was saying forwarding capacity when at wirespeed is half the port capacity.

Phones use very little bandwidth so it doesnt slow down the switch too much by having ACLs for phones assuming the firmware is well optimised to only have that traffic go through the ACLs and not the rest of the traffic.

So the important terms to remember are
Forwarding capacity (amount of packets or data per second. At wirespeed this is half the port capacity)
Port capacity (total bandwidth of all ports)
WAN capacity (in+out bandwidth of the WAN port only)

At least cisco's low end switches perform well. the cisco rv is a disaster.
 
Last edited:
WAN capacity (in+out bandwidth of the WAN port only)

To grasp what you meant better, can you elaborate by example? For example, I have a 100/100 Mbit/s WAN. How does your terminology apply to this example..
 
To grasp what you meant better, can you elaborate by example? For example, I have a 100/100 Mbit/s WAN. How does your terminology apply to this example..
That means the required WAN capacity to max out your WAN is 200Mb/s which is by adding download + upload of the WAN port only. If your WAN is restricted by ISP say 50/50 using the same port than your required WAN capacity would be 100Mb/s.
 
I started to see what you mean by "WAN capacity"..put it another way you're referring to the CPU processing power on how much traffics can push through WAN interface. In order to saturate a 100/100 WAN, the CPU shall be powerful enough to send 100 Mbit/s and receive 100 Mbit/s at the same time. And you coin this 200 Mbit/s the "WAN capacity".

If that's the case, it's equally logical to say, the CPU is able to move 200Mbit/s through WAN. Then both of you are correct.

It's simply a matter of "proper" terminology which I don't know what's the industry's convention.
 
Moving 200Mb/s through WAN is not the same as moving the port capacity through the port capacity which i said is physically impossible. As i said data that goes in have to come out. In the case of the WAN port there is the corresponding LAN port. In consumer routers theres the WAN port and the LAN port connected to a switch so the CPU has 2 ports. That means that in this case the WAN capacity would so happen to be the forwarding capacity as well across 2 ports.

The port capacity applies to all ports on the device.

To put it simply if a device has 5 ports and performs at wirespeed and has 1 WAN port, all gigabit ports this means that it has a port capacity of 10Gb/s, with a forwarding capacity of 5Gb/s and a WAN capacity of 2Gb/s.
 
Reading through the cisco data sheet, I can't see any definition of how "56Gbit/s" is defined on the 28-port models..

With my 'insight' into marketing materials, I would believe cisco count both in/out traffic through the switch. Hence, the 56Gbit/s shall be the aggregate sum of traffic that the switch can manage to 'switch' - i.e. send and receive at the same time through all ports.
 
To put it simply if a device has 5 ports and performs at wirespeed and has 1 WAN port, all gigabit ports this means that it has a port capacity of 10Gb/s, with a forwarding capacity of 5Gb/s and a WAN capacity of 2Gb/s.

Interesting game of numbers. Apparently you can guess I'm not a practicing network engineer, what kind of purpose do such definitions serve? Seems to me "port capacity" only limits to a switch section of the all-in-one router. "Forward capacity" only limits to 'forwarding' between CPU and the switch. And then purposely isolate the WAN traffic from the counting game...
 
As a brand, both rely on forums for their support and they give a limited time email support. .

Ubiquiti annouced (and released) online "chat support" last year.
https://help.ubnt.com/hc/en-us

They also, from day 1, focused on support and excellent training through their wholesalers and major partners. Examples such as the Training Academy courses you can find from the above link, or by checking in through your Ubiquiti wholesaler like Streakwave or Ingram Micro.

You can also get good support direct from Ubiquiti staff. Granted they may sorta ignore what they perceive to be home/end users, but you will get attention if you're an IT person and deploying their hardware in volume.

Coming soon is "In-App" support.
 
It is true that ubiquiti support has gotten better but that still doesnt stray from the fact that there still isnt any sort of support that involves the advanced features of the product. Even mikrotik has training academy courses but im speaking from the perspective of the buyer, not an IT guy who has to configure one.

The terms help when choosing a router. It tells the maximum amount of data that can be communicated and how fast in a quick way.
 

Similar threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top