The Mikrotik hEX RB750Gr3 5-port Ethernet Gigabit Router has been a reliable addition to my network setup. With its compact design and five Gigabit Ethernet ports, it offers efficient connectivity options for small networks and home offices.I appreciate its robust performance and capability to handle high-speed data transfers seamlessly. The router's advanced features include powerful firewall capabilities and customizable routing options, making it suitable for both basic and more complex network configurations.Setting up the Mikrotik hEX RB750Gr3 was straightforward, thanks to its user-friendly interface and comprehensive management capabilities. It's proven to be a dependable choice for ensuring stable and secure network connectivity.If you're looking for a cost-effective and versatile Gigabit router for small-scale networking needs, the Mikrotik hEX RB750Gr3 is an excellent option. It combines performance, reliability, and advanced features to meet various networking requirements effectively. Highly recommended!

Good item

Ich habe einige Jahre Erfahrungen im Netzwerkbereich, das hier bei Amazon gekaufte RouterBoard hEX war jedoch mein Erstkontakt mit MikroTik. Ich kannte die Firma und Produkte zwar schon vorher vom Hörensagen, hatte jedoch immer den Eindruck von "Spielzeug" oder "Bastelware", daher bisher niemals wirklich große Lust mir das näher anzusehen.Wie habe ich mich doch geirrt! Im Nachhinein, nach etwas Stunden Einarbeitungszeit: Die gebotene Leistung und die Konfigurationsmöglichkeiten sind für den Preis der helle Wahnsinn!Der hex ist bei einem Projekt im Einsatz bei dem es wirklich sehr sehr günstig sein musste, und ersetzt ein in die Jahre gekommenes ALIX-Board mit BSD als Firewall.Es braucht schon etwas länger Einarbeitungszeit. Auch mit einiger Erfahrung im Netzwerkbereich ist das Konzept von RouterOS anfangs gewöhnungsbedürftig, weil anders. Nicht schlecht - nur anders! Die Doku ist ausreichend, könnte aber besser strukturiert sein. Nach einigen Stunden: Die UI ist meiner Meinung nach einfach altbacken, die CLI dafür super.Wenn man länger mit MikroTik Produkten arbeitet ist das wohl alles absolut kein Problem mehr. Für mich war MikroTik/RouterOS jedoch komplett neu, und das einarbeiten dauerte im Vergleich zu anderen Herstellern/Produkten dann doch eben etwas länger. Ich habe aber schlussendlich immer alles gefunden was ich gebraucht habe.Die Einarbeitungszeit hat sich definitiv gelohnt, da die gebotenen Features auf der winzigen und günstigen Hardware schlicht phänomenal sind. Meine Meinung hat sich also geändert, und meine Erwartungen wurden weit übertroffen.Nach meinem Erstkontakt: Für wen eignen sich meiner Meinung nach solche Boards, oder etwas allgemeiner gehalten: Produkte von MikroTik?Nicht wirklich für den reinen Heimanwender, der quasi nur "Ersatz für Fritzbox" sucht. Dafür ist routerOS schlicht nicht einfach genug. Es eignet sich auch nicht wirklich gut für sehr große Unternehmen, da fehlt dann doch noch etwas power, support und compliance.Ich habe gelernt das MikroTik eine wirklich interessante und gute Alternative ist für alle Anwendungsfälle die zwischen diesen beiden Extremen liegen. Also angefangen beim ambitionierten Laien mit Bereitschaft zum (längeren) Einarbeiten in Netzwerktechnik, weiter sehr gut für alle Arten von Lehr- und Ausbildungszwecke, nahezu perfekt für kleine bis mittlere Projekte mit hohen Ambitionen aber sehr engem Budget, bis hin zum flächigen Einsatz in KMU oder auch bei kleineren ISP.Ich bin schon etwas beeindruckt.

Poco que decir de un router Mikrotik. Es lo mejor que hay en redes y no hay discusion que valga. Claro, hay que saber, esto no es un router sencillo, hay que saber que se toca y por que se hace.Se configura con Winbox para tener un entorno grafico, o por SSH.He puesto mi router del ISP en modo bridge y detras el Mikrotik, porque tengo red HFC y tengo que mantener el router de la operadora, pero ahora todo el trabajo de enrutamiento lo hace el Mikrotik. Con lo cual la red ya no se satura ni sufre cortes intermitentes por la saturacion del router de la operadora.Posibilidades infinitas...lo siguiente sera unir redes con Mikrotik con tuneles GRE sobre MPLS con OSPF.Ningun fabricante te va a dar tantas posibilidades por unos pocos euros.

★★★★★ (5/5) 𝐖𝐢𝐫𝐞𝐝 𝐭𝐡𝐫𝐨𝐮𝐠𝐡𝐩𝐮𝐭★★★★★ (5/5) 𝐖𝐢𝐫𝐞𝐝 𝐬𝐭𝐚𝐛𝐢𝐥𝐢𝐭𝐲★★★☆☆ (3/5) 𝐂𝐨𝐧𝐬𝐮𝐦𝐞𝐫 𝐮𝐭𝐢𝐥𝐢𝐭𝐲★★★★★ (5/5) 𝐒𝐎𝐇𝐎 𝐮𝐭𝐢𝐥𝐢𝐭𝐲𝐏𝐫𝐨𝐬:► Plug and Play as a basic home Internet router. Just four simple instructions that are on the underside of the box► symmetric Gigabit Ethernet on LAN even with realistic firewall rules, tested with router Bandwidth Test tool and free third-party iperf3 standard tool. Widespread user reports of symmetric Gigabit Internet speeds for those lucky enough to have fibre► minimal bufferbloat making it great for low latency applications (hello gamers!), tested with DSLReports Speed Test site and a cable modem in bridge mode► fanless and silent. Case is plastic but good quality► power efficient: maximum of 5W► externally secure by default configuration (zero ports accessible from WAN side except for ICMP). Tested with nmap tool► every port can be independently or collectively configured, i.e. no special WAN ports required► has almost every pure routing feature you can imagine for consumer, prosumer and small businesses, including software support for VLANs. Powered by the exact same software used in Mikrotik's ISP and enterprise products called RouterOS► great multi-document, highly responsive and "flat" (no deep drilldown menus) WinBox software for Windows PCs or Linux Wine or Windows VMs makes the router configuration very accessible. Can also be configured by http, https, and ssh► comes with exactly one QuickSet configuration ("Ethernet"). So, you cannot go wrong with the simplest default configuration► upgrading the router is a button click away or just dragging a file from your web browser directly into "Files" of WinBox► powerful stateful firewall similar to Linux's iptables, including Layer 7 (application) rules. The action of each rule can be logged► full size USB 2.0 port for storage, modems, usb host or other devices► hardware accelerated IPSEC support► trivial to backup to binary file or export whole configuration to text to share with others or for support► many bundled networking tools with RouterOS► even more powerful networking tools by adding microSD storage space or using a USB drive for Mikrotik's free Dude Server software► very configurable logging including to email, file or syslog server► mode button and LEDs can be configured to do/show arbitrary actions► real-time counters and statistics available everywhere, from interfaces to ports to firewall rules to bridges to router resource usage, etc.► temperature and other sensor information, but it never gets remotely hot (30 C / 86F) under temperate conditions► free firmware and unlimited RouterOS updates for life► 12 months hardware warranty► Level 4 RouterBOARD License comes with the device = 15 days free support, including over email► if you need it: command line interface and scripting is very powerful, flexible and easy to get used to► quick to boot, power cycle and reset► very stable in both uptime and performance𝐂𝐨𝐧𝐬:► outside of the basic QuickSet profile(s), far more complex to configure than a typical consumer or even technical enthusiast router. This is no exaggeration, plan for DAYS not minutes for anything harder than port forwarding or client VPN the very first time. But once you understand what you need, it's straightforward and even inviting► currently missing support for OpenVPN with UDP and other OpenVPN features. Can only use OpenVPN with TCP► currently no hardware acceleration for OpenVPN► no easy Content Filtering and no UTM services. Layer 7 rules are not trivial. Easiest and most performant way to content filter is by DNS, following the guidelines from OpenDNS and then redirecting all DNS network traffic to these settings► no consumer-friendly, centralized documentation► no port forwarding or UPnP wizard or other obvious task wizards. This would be helpful for retail customers since that's their number one reason to touch a router's configuration after initial setup and upgrades► for a tiny, plain looking white box, it activates a lot of big LEDs on the box cover, including blue ones, instead of the traditional embedded port LEDs. Be aware where you want to place it. The LEDs cannot all be disabled at this time on this specific Mikrotik device𝐀𝐝𝐯𝐚𝐧𝐜𝐞𝐝 𝐂𝐨𝐧𝐬:► no PoE out nor PoE pass-through (unlike the Ubiquiti Edgerouters)► Passive PoE in, not standard 802.3af or 802.3at PoE► no SFP cage► weaker switch chip than previous hEX (RB750Gr2), which had the powerful QCA8337 switch chip. This RB750Gr3 (using MT7621 SoC) does not have hardware support for VLANs on switch nor switch rules, despite having a more powerful CPU► no standard Linux or other unix support, despite Terminal support that looks like unix► currently MetaRouter (a type of "virtual router") cannot be used with devices using SPI flash in RouterOS► not easy to load up other operating systems, e.g. OpenWRT/LEDE, though it can be done► despite a comprehensive command line interface (everything a user can do in RouterOS can be done by a command and almost all also by GUI), there is no logging of changes as commands. This is poor for enterprise audit reasons𝐓𝐢𝐩𝐬:► upgrade your RouterOS and firmware ASAP. Just like any other router, you need security updates and may get useful new features and performance improvements. There are Bugfix/Stable, Current/Release and Beta/Release Candidate update options. Unless it is for business use, just get the Current update► change your Router password, just like on any other router. It is empty by default► the router is not in stealth by default. It still allows ping responses from the entire Internet. If you don't need pings/ICMP from the Internet (extremely unlikely), you should consider disabling this Accept rule in the IP Firewall Filter Rules section. You can test with the famous Shields Up! GRC Security site, which advises the same► if you want help configuring anything, the online Mikrotik Wiki can be very useful, or consult the Mikrotik forums or Reddit /r/mikrotik. Youtube should also have the very basic, e.g. port forwarding, and some advanced configurations (it's in-between where it is less useful)► many things are easier or just a copy & paste away using commands in the Terminal, e.g. based on the default factory configuration, port forwarding is just "/ip firewall nat add chain=dst-nat action=dst-nat protocol=tcp dst-port=1234 to-address=192.168.1.234 to-port=1234" (change the ports, change the to-address, DONE)► you can use the "/export hide-sensitive" command to share your configuration with others without sharing passwords.In short, you won't find any more value in a wired-only router at this price point. Mikrotik appear to have it on lockdown with the feature set of the hEX RB750Gr3.

Très bon produit. Il y a certes un investissement à consentir pour le configurer finement, mais la documentation en ligne est très complète et conforme. Venant de firmwares open source (style dd-wrt ou openwrt), je trouve ce dernier point capital. La supervision du réseau est également au rendez-vous avec theDude. La présence d'un emplacement pour une carte microSD permet d'ajouter facilement un stockage performant, notamment pour theDude, le cache du WebProxy et les logs.Cerise sur le gâteau : avec les points d'accès WiFi de la même marque, on peut construire un réseau avec de multiples points d'accès gérés de manière centralisée par le routeur. Parfait pour les grandes maisons, sous réserve bien sûr de pouvoir passer des câbles ethernet vers les points d'accès.

Combined with a Netgear GS105Ev2 and a garden variety home wifi router or access point, this enables SIGNIFICANT security improvements over just the garden variety wifi routers.The hEX is a full-function firewall/router. As others have mentioned, this little piece of hardware costs less than licensing just the RouterOS software. The firewall software gives a very high level of control of traffic, and is far more sophisticated than most home network users would need.But most home wifi routers are LESS sophisticated than really needed. It is, for example, difficult or impossible to set up a "whitelist" firewall policy on most systems, so they tend to come with "blacklist" policies. Immediately on completion of "whitelist" policies on the Mikrotik the rule that finalized the policies began logging attempts from inside the firewall to establish connection outside. This kind of activity is tough to track down in a "blacklist" system. A quick web search on those two terms will provide better information than can fit in this review.It DOES take quite a bit of time and effort to build a "whitelist" policy. And even though the hEX DOES have a built-in sniffer capability, you'll need some way to sniff things the hEX is not connected to, and to filter through the results of both sniffer outputs. The Netgear GS105Ev2 complements the hEX nicely. it can be set up to "mirror" ports, which then allow you to sniff traffic normally not available to your local ethernet sniffer interface. And while the older GS105 needed a special windows client for administration, both the GS105Ev2 and the hEX can be managed with simple web interfaces. The sniffer output from the hEX is easy to download from the router and works flawlessly in the freely available Wireshark. The GS105Ev2 allows your local ethernet (if it has a promiscuous mode) to feed local Wireshark sniffing as well. Then the sophisticated filtering tools in Wireshark allow you to zero in on what traffic you do, and do not, want to allow.Once you know the addresses and ports of traffic you want, the hEX makes it straightforward to not only create the rules, but save them in case a rebuild is needed. For some rules it's easiest to use the web GUI, and some folks really cannot get comfortable with the command line. For those who CAN deal with the command line, hEX can allow telnet, ssh, and sftp access. Using the command set, these facilities can be used to save configurations in eye-readable formats, some of which can be pasted directly back into the router to recover from a rule error or system replacement. Since the sequence of rules is critical in a firewall, it's nice to know that Mikrotik makes it possible to add rules to specific places, especially if you use the generous comment facility to identify distinct rules and purposes. Such comments will be invaluable if the rules ever need to be translated into a different firewall "language."If more homeowners used whitelisting policies there would be more help on the web for making this work. In all likelihood, even the router makers would start shipping with a default whitelist policy. Meanwhile, the Mikrotik hEX is unmatched at its price for enabling significant home network security improvements.So far, highly recommended. I just hope it lasts!

Apr 2020 update:I recently added two more RB750Gr3 units to my private stable, I have two RB450Gx4 RouterBOARDs shipping, and I see much bigger Mikrotik boxes in my near future. I have just sold the last of my many Ubiquiti products. What's changed? Well, maybe this is just the natural evolution of a geek. In any event, I'll try to walk you through some of the changes in thinking that have caused me to revisit Mikrotik in earnest.Most recently, I've been deploying pfSense and the odd IPFire box for routing/firewalling. These have almost exclusively been Ivy Bridge or Haswell Core i5 Optiplex boxes with an abundance of fast RAM, Intel NICs, and reliable SATA SSDs. None have given me any fits; they've all done what you'd expect.Part of the reason for using these high-horsepower i5 boxes was due to a need for traffic shaping, in my cases via FQ_Codel, but in recent months some of my users have switched to an ISP serving over fiber. A good percentage of the remaining, including myself, now have gigabit connections via cable. The fiber-connected users have essentially no bufferbloat worries. With the cable users, I don't know if it's the migration to DOCSIS 3.1 and its use of OFDM channels, or if it's pie shaping taking place inside the modem, or some combination thereof, but bufferbloat woes have been substantially mitigated on these gigabit cable connections as well.Sure, I can continue to feather this bufferbloat out with FQ_Codel, cake, or pie, but at what cost? These Optiplex boxes are pretty power thirsty. And the other projects, like pfSense, IPFire, and my roll-your-own Debian routers and whatnot were mostly attractive due to having features/functionality missing from solutions like RouterOS in the Mikrotik products. What functionality? Well, things like Squid, Snort, Suricata, pfBlockerNG, that kind of thing. But these all come with an administrative cost, I've learned. Packages need updates. Gobs of additional rules need to be tweaked, gradually over time. And in today's age of encrypt-all-the-traffic-or-else, I see too much cost (maintenance/breakage) in putting a bump on the wire with fake certificates to be bothered using Squid. Snort and Suricata by themselves don't do anything that's interesting to me (they won't peer into encrypted traffic, and that's all I'd really be concerned with). Even pfBlockerNG (or Pie-hole, or whatever) cause some amount of breakage. Just the fact that most of these network-based ad-block mechanisms will kill affiliate links from a place like dealnews or techbargains is enough of a nuisance that I can't even attempt to deploy them. Even on my own network, the administration overhead became tiring. And the benefits...well....according to my logs, they were all pretty inconsequential. Network IDS/IPS and whatever other fancy fangled thing is no panacea, and I consider my security in layers: my device's permissions are super restrictive, everything is patched and updated regularly, I'm careful where I click and ignore all but the most trusted emails. I'm not super worried about security, since I've been paranoid about it for decades, enough to learn where the real threat actors tend to lie and what tools they'll likely prefer.So what if I could get just the things that I *need*, with all the visibility I could want, with very low power consumption, and a small form factor? What would that look like? A dream? Well, for me, it looked like I'd be revisiting Mikrotik. And it now looks like I'll be here for a good while. And I'm serious about it. I consumed two books on RouterOS, I've read a ton of their online documents, and I've scoured the odd forum. I've tried to figure out what it's like to really understand RouterOS and its tooling. I want to understand how to utilize the software to my every advantage. And I'm impressed. I'm excited. This is genuinely a Swiss Army kniferouter. And try as I did, I couldn't break it.I don't use features that break FastTrack, so the bulk of my traffic passes almost completely without overhead. I think that means I see some 930Mbps over the WAN, instead of the occasional 980Mbps-1Gbps I'd see with my beefier boxes. This is absolutely acceptable for a tiny, cool-running box that's spec'd to max at 5W. Nothing "feels" any different to me. Nothing lags. No performance concerns whatsoever. This hEX works and doesn't bellyache. If you need FastTrack disabled for any reason, you'll want to find a resource that can give you some idea of how overall performance will suffer as a result.The tooling is outrageous. It's almost unimaginably great. There's any amount of visibility you desire. Watch anything you can imagine in real time. And this thing can run the Dude server on a $10 microSD card. The box reboots in no time flat. It'll email you about whatever you want it to. If you really try hard to break it and hold the reset button down for the wrong amount of time, you can take your otherwise "bricked" router back to good with netinstall simply and quickly. Backups and restores can be done multiple ways, and you can even snag a text file of all settings, modify the odd IP address or whatever, and use that revised text file to deploy another hEX. Options galore. Updating the firmware is dead simple. Updating packages is dead simple, and there are multiple tracks (long-term, stable, testing, development). The web interface nearly mimics the Winbox interface (you will almost surely prefer Winbox, and it can run reliably on any desktop OS), and the command line interface neatly follows the same parent>child directory structure as the GUI, which makes it a pleasure to learn, once you've found your way around the GUI. The iOS app I use on my iPhone isn't too shabby, and surely about as good as I could want from a phone app for such a device (and again the same design principles follow, so it feels as cohesive as the other administering methods).This thing just begs to be poked and prodded, which makes it just the most amount of fun a network nerd can have for $60 or so.For newbies, you can do the quick config/wizard setup thing (I don't know what it's called), then walk through the online page "Manual:Securing Your Router" to learn how to change user/password, disable unwanted services, etc., and even stop at the part about configuring the firewall (firewall defaults are already well suited to most homes/small businesses), and you'll have a very nice, suitably secure router for practically any home/SOHO (certainly just as good as any other device, embedded or otherwise, would ship out of the box).Pro tip: from Mikrotik's website, pick a product. Under Support & Downloads for said product, see the block diagram. This will give you some understanding of how the hardware is arranged. Pay careful attention to switches/backplanes/ports. Coupled with an understanding of RouterOS bridges and FastTrack, you can probably suss out whether this or any other Mikrotik box is right sized for your environment. You'll likely find IPsec test results from the product page too, if it's important to you, and some boxes have hardware offloading for this.You'll hear people gripe about anything. But the ones who complain about Winbox confuse me immensely. Winbox is brilliant. You can resize a window, move it around, run it next to another window about a related function...I usually find myself looking at three or four windows simultaneously within Winbox, and it makes life so much nicer when you can take in all the data you need in a single pane. I think this is just the coolest.In terms of overall routing and firewall performance (for most users in most common configurations) I’m convinced this will stomp anything in its class and run with or plain smoke most other embedded boxes at multiples its price. To boot, I very much doubt anything compares in terms of useful tooling. I keep some OpenWRT-flashed field units on hand at all times, usually with 1.2GHz or faster dual-core CPUs, 802.11ac, and all the trimmings. I don’t think routing performance compares. And I’m not knocking the OpenWRT project. I love it. It can do glorious things and provide bleeding edge functionality. I don’t knock many networks devices, since it seems that with only rare exceptions all have their place, for the right user. And nothing stops you from running RouterOS or OpenWRT on bare metal with gobs of compute and memory to level the playing field.Fun fact: you can run OpenWRT on this hEX, too.Um, so....yeah. I like this.........................Feb 2019 update:Anything that reads as critical of Ubiquiti can be safely ignored. I now have 0 Mikrotik units in service and dozens of Ubiquiti EdgeRouters deployed, a couple USGs, a couple Cloud Keys, a cloud-hosted controller, various PoE switches, and quite a darn big lot of UAP AC access points (LITE, LR, and PRO models only). This shouldn’t take anything away from my love of Mikrotik, but Ubiquiti is now favored for my deployment needs, and it’s been this way for a little more than a year.........................My original review:Amazing, just like practically everything from Mikrotik. Hardware more or less speaks for itself. This thing is an animal, and I don't have the ability to really stress the router at all (largely due to my cable connection being limited to about 90/13Mbps cable, no tunnels running, etc.). The RB750Gr3 is simply best of breed. I've run and deployed competing products, namely EdgeRouter PoE, EdgeRouter Lite, and EdgeRouter X. The EdgeRouters are really nice, and I suspect most or all of the EdgeRouters are more performant in terms of pps routing, but my Mikrotik boxes simply NEVER hiccup (running updates exclusively from the bugfix track and keeping firmware current is my personal policy). On the topic of updates, I've had Ubiquiti AP and EdgeRouter updates bork on me a few times. I've always been able to overcome, but not without some frustration. And I've had a client's EdgeRouter X fall over three times, spaced out 4-5 months per occurrence, reasons as yet unknown. Hasn't happened in 4 years with any of my Mikrotik boxes. Also, updating is dead simple with Mikrotik, click and done. Ubiquiti requires you to fetch the update from the web, save to disk, push to router. Isn't hard, by any means, but it's just an extra step. Mikrotik handles much more nicely. And winbox is the greatest config tool ever devised. To be able to drag windows around the screen for all of the various configs you wish to play with is bliss. No need to memorize IP or MAC addresses for anything, just park the relevant window off to the side to keep in view. It's the bee's knees. This is pretty much a no-limits device that professionals will drool over...backup, export, export compact, scripts...I don't even know where to begin...this does it all. And it runs on almost no power, with no noise, and no discernible heat. So affordable it's stupid. Get it.