Building a HomeLab: Setting Up MikroTik as Your Home Router

Mikrotik is not a mere replacement for plug and play routers such as TP-Link and the like. It's a very advanced device offering countless networking features, including multiple VPN server options, advanced Layer 2/bridging/switching features - VLANs, nested VLANs (Q-in-Q), VXLAN, spanning tree protocols (STP, RSTP, MSTP), 802.1x authentication, bridge-based firewall and bridge-based NAT, data center bridging (a.k.a. "lossless Ethernet"). Advanced Layer 3 features such as BGP, policy routing, traffic shaping, VRRP, hardware layer 3 acceleration. Then containers, matter/thread protocols, mesh networking, advanced wi-fi features such as centrally-managed network (CAPSMAN), multiple/virtual access points, hotspots, and many many more. Advanced firewall for both IPv4 and IPv6. On top of that scripting, SSH server, NTP server, DNS cache. API client for advanced integrations, and built-in scheduler, packet sniffer for troubleshooting, safe mode for automatic rollbacks of recent changes in case when the admin gets cut off due to a dangerous change. It'd be really hard to enumerate all that RouterOS offers.

And all that is available from tiny home/SMB office devices starting at 40 USD, through dedicated wireless point to point bridges, to a big Ethernet switches/routers with 400G interfaces.

Of course it doesn't compete with high end NVIDIA Spectrum-X, Cisco or Juniper, but is good enough for 95% of networks.

It works great as a plug&play home/office router, too thanks to Quick Set, […]

For me, the era of MikroTik is sort of... now.

Don't get me wrong, they make powerful and feature-complete stuff, but their UI sort of assumes you really know what you're doing. I don't know what I'm doing.

But my LLM does. I've been able to set up site-to-site VPNs with Mikrotik in fifteen minutes now, rather than the day-long exercise of googling and praying.

Mikrotik is really a sweet spot for routers. It's feature-rich and it has a nice Web UI (or WinBox that is now cross-platform). And Mikrotik as a company is just amazing; they still support hardware that is almost 15 years old.

Other routers:

1. OpenWRT is a bit too basic, and updates are hit-and-miss.

2. Ubiquity is a bit too Apple-like, with its reliance on apps and integration.

3. Cisco is WAY too expensive, and too complicated to set up without having Cisco experience.

I'm now eagerly waiting for them to release the next generation of their routers. hEX Pro looks perfect to replace my aging CCR2004.

I'm more than happy with VyOS. Throw that in proxmox and you have an open source JunOS with zero license headache.

I do use Mikrotik for 2.5g switching though, zero complaints.

About 2 years ago I tried to use Mikrotik, as the router for my ATT Fiber.

It's royal pain.

Basic router setup is not hard.

Port forward to expose web server? Can be done after heavy docs&forum reading, but hair pinning never worked for me.

I checked their WiFi AP. It's UI is hard even for senior software engineer.

In the end I got opnSense installed in VM on Proxmox and it's my router for last 2 years.

I'm using 2 Mikrotik switches with their simplified UI to operate VLANs. Zero complains.

Just use linux! Why use someone else's non FOSS, locked down linux, when you could truly own your router?

It's a great educational experience I would recommend to anyone interested in networking. Grab debian, grab a system with 2 NICs, make it your router/firewall/gateway.

In Poland, Play.pl sets up IPv6 by default. One phone call to ISP to disable the hidden firewall on their router gives us full IPv6 network transparency, no NATs are needed anymore. I highly recommend after installing a firewall appliance (for example OPNsense, but probably Mikrotik should have it as well). IPv6 "feels" like how networks should work since the beginning. IPv4 feels like a legacy technology.

They of course also have a DS-Lite AFTR gateways to tunnel the IPv4 traffic. In practice, everything works (for me at least).