MikroTikCRS328-24P-4S+RM 24 port Gigabit Ethernet router/switch with four 10Gbps SFP+ ports in 1U rackmount case, Dual Boot and PoE output, 500W

This switch brought me farther into the MikroTik camp than any of the inexpensive RouterBoard products I'm used to working with. After several weeks of researching managed PoE switches for a local business install, I settled on the CRS328 over several Cisco enterprise and small business options, as well as some AdTran switches. I chose the CRS328 for a few key features, including:- CAPsMAN function for controlling wireless access points- Full Layer-3 routing capability, including BGP/OSPF/RIP as well as MPLS capability- MikroTik reputation for regular firmware updates and responsiveness to bug fixes- Lack of complicated licensing schemes (ahem, Cisco...)After installing this switch, it has exceeded my expectations. There were initially some growing pains as the Cisco router that it is connected to had an odd trunk configuration that created a few headaches. Now, the business where this is installed has near wirespeed throughput, PoE for wireless access points and security cameras, and built-in tools such as Bandwidth testing and Torch that make troubleshooting a breeze.A few things to consider for those who might purchase this switch for business use (especially if PCI-DSS compliance are a concern):- The Winbox interface is notoriously insecure, and should be disabled.- DHCP configuration makes it easy for a user to determine server source IP address, and access to the default web interface isn't blocked by default (although firewall rules can be configured to limit access to the web interface from particular IPs or subnets). If you're familiar with the MikroTik command line interface, all web access can be disabled leaving serial console access for secure management- Be mindful that the DHCP lease time configuration by default is set in HH:MM:SS format. If you want to provide long lease times to certain devices (or as part of the DHCP default configuration), leases can have days added as well using the format XXd HH:MM:SS for lease times.NOTE: The Manito Networks website has a great hardening guide for MikroTik devicesAfter a month of having this switch installed, it is running like a champ with CPU usage generally less than 30%, even with the network fully saturated and with 250+ clients.

Mikrotik has some great products for very reasonable prices, but they're not plug-and-play home units. To get the most out of their stuff, research capabilities thoroughly on their website.This particular unit was just what we needed to upgrade my company's equipment/throughput testing lab. We upgraded from a Cisco SG350-10P. This gave us more ports, 10 Gb capability, more PoE options, wire-speed VLAN routing, and VPN capabilities.I rated "Easy to use" at 3 stars only because you really do need to dive through the documentation to optimize your configuration. For instance, this box will offload VLAN routing to the switch chip for wire-speed layer-3 switching, but only if you have it set up a certain way. Once I got the configuration correct, this thing works a treat!

I'll start by saying that this is actually a decent switch and it does exactly what I wanted it to do. It does a LOT more than I was expecting or planning to use it for, but it does give me ideas on a future mikrotik purchase if I decide to. Coming from HP switches (and one dying recently), I decided to give this mikrotik switch a try and I'm glad I gave it a chance. If you're looking for something that will give you most if not all of the features you would want in a 24 port switch (such as VLAN's, LACP support, PoE), then you can't go wrong with this one.I've seen some reviews mention a noise level problem. This is fairly subjective. Someone's "quiet" is someone else's "loud". For me, it's not bad. I can sit in the lab room and work a full day and never notice it. Honestly, I hear the HP switch I still have left.For those who have never worked on Mikrotik devices, these are some things I think you should know:* Expect growing pains. You may have some problems with the configuration of the switch. Don't blame yourself nor the device. It's extremely confusing at first.* The CLI is not immediately understandable; it is NOT a cisco-like CLI. Consider using WinBox at first to get you started. It can connect to the switch via mac address.* The documentation has some good moments and also some bad moments. Read through it at least three times for the things you care about, and consider looking through the forums and perhaps a youtube video or two.* Don't confuse yourself with the "bridges" when you're configuring the switch. Leave a single bridge and do NOT add any more. You will thank yourself later.Other than those things (which I didn't think was worth docking a star for), it's a good switch and is serving me well with what I wanted it for.