The RB1100AHx4 is powered by an Annapurna Alpine AL21400 CPU with four ARM Cortex-A15 cores clocked at 1.4 GHz each, delivering a maximum throughput of up to 7.5 Gbps. This is the highest throughput figure of any device in MikroTik’s RouterBOARD router lineup — nearly double the RB5009’s routing performance in CPU-heavy configurations, and appropriate for ISP aggregation, large enterprise core routing, or any environment where the hEX and RB5009 family’s limits are a constraint.

Hardware IPsec — 2.2 Gbps with AES128

The RB1100AHx4 supports IPsec hardware acceleration at up to 2.2 Gbps with AES128 — the fastest IPsec throughput of any RouterBOARD device. For site-to-site VPN concentrators, encrypted ISP backbone links, or enterprise VPN aggregation at multi-gigabit speeds, this is the appropriate MikroTik platform. Compare with the RB5009’s hardware IPsec, which is capable but unspecified at this throughput level, or the hEX family’s 470 Mbps limit.

13 Gigabit Ethernet Ports

The unit provides 13 Gigabit Ethernet ports — all 10/100/1000 Mbps — with an RTL8367 switch chip for hardware-accelerated inter-port switching. Thirteen ports gives substantial flexibility for multi-WAN aggregation, multiple LAN segments, dedicated management interfaces, and inter-device links without needing an external switch at the routing layer.

Dual Redundant Power Supplies — AC and −48V DC Telecom

The RB1100AHx4 includes dual redundant power supplies with two IEC AC inputs and −48V DC telecom power support, as well as 802.3at/af PoE input. The −48V DC input is a carrier-grade feature — telco and ISP environments typically run DC power plants at −48V for reliability and battery backup compatibility. Having both AC and −48V DC inputs means the router can be powered from either or both simultaneously, with automatic failover between them. PoE-in on the first Ethernet port provides a third power path for deployments where neither AC nor DC supply is immediately available.

RouterOS Level 6 — The Top Licence

The device runs RouterOS Level 6 — the highest RouterOS licence tier, with no artificial limits on tunnels, BGP peers, OSPF adjacencies, hotspot users, or other features that are capped at lower licence levels. Level 6 is appropriate for ISPs running full BGP routing tables, large-scale OSPF deployments, multi-thousand-client hotspot environments, or any scenario where Level 5’s limits would otherwise become a constraint. Compared to the RB5009 (Level 5) and the hEX family (Level 4), the RB1100AHx4 removes all practical software limitations.

RS232 Console Port and microSD

A dedicated RS232 serial console port is included — essential for out-of-band management and recovery in production environments where network access to the router is unavailable. A microSD slot provides additional storage for logging, configuration backups, and Dude database use.

Key Highlights

• CPU: Annapurna Alpine AL21400 quad-core ARM Cortex-A15 @ 1.4 GHz | 4 threads
• RAM: 1 GB DDR | Storage: 128 MB NAND + microSD slot
• Switch chip: RTL8367
• Architecture: ARM 32-bit
• Max throughput: 7.5 Gbps
• IPsec hardware acceleration: Up to 2.2 Gbps (AES128)
• Ethernet ports: 13× Gigabit (10/100/1000 Mbps)
• RouterOS: Level 6 (pre-installed, lifetime updates) — highest tier, no feature caps
• Power: 2× IEC AC inputs (dual redundant) + −48V DC telecom input + 802.3at/af PoE-in (port 1)
• Console: RS232 serial port
• Storage expansion: microSD slot
• Form factor: 1U rack mount | 444 × 148 × 47 mm
• Operating temp: −40°C to +70°C
• MTBF: ~200,000 hours at 25°C

Proudly sold by the Ringwood Digital Store.

Adding an IP66-rated waterproof enclosure to the RB5009 series creates a compact, cost-effective solution for network tower setups — one of the most capable outdoor networking devices available at this price point. The RB5009UPr+S+OUT has 7× Gigabit Ethernet ports, one 2.5 Gigabit Ethernet port, a 10G SFP+ cage, and a full-size USB 3.0 port, identical to the indoor RB5009UG+S+IN in port layout. The distinction is entirely in the enclosure, PoE capability, and power redundancy stack.

Nine Powering Options — Genuine Power Redundancy

The unit offers nine possible ways of powering: a 2-pin power connector on the front, plus PoE-in and PoE-out on all eight Ethernet ports. If you are using PoE-in, the board will stay on even if eight of your nine power sources suddenly go down. All power options support a wide voltage range of 24–57V. The board powers itself from whichever source presents the highest voltage — so connecting multiple supplies at different voltages within the supported range provides automatic priority-based failover without any configuration.

Voltages cannot be mixed. All connected power sources must be within the same voltage standard — do not connect 24V passive PoE and 48V 802.3af sources simultaneously to the same unit.

PoE-Out — Up to 25W Per Port, 130W Total

Each PoE-out port can supply up to 25W of power, with all ports combined limited to 130W total. You can specify maximum available power from your power sources manually. This means the RB5009UPr+S+OUT can simultaneously power up to eight downstream devices directly — wireless radios, IP cameras, CPE units — without a separate PoE switch or injectors at the tower or mast.

PoE-out is single-voltage — it can be either 802.3at/af compatible or low-voltage PoE-out, determined by the voltage on the 2-pin connector, as no voltage conversion is done on the board. At 48–57V input the PoE-out is 802.3at/af standard; at 24V input it is 24V passive PoE. Plan your power supply voltage based on which PoE standard your downstream devices require.

PoE-out requires 2-pin DC connector power. If you are powering downstream devices via PoE-out, the 2-pin connector must supply power. PoE-in alone is not sufficient to run PoE-out to other devices — the router takes up to 21W for itself, and the remainder of the budget is available for PoE-out only when the 2-pin connector is powered.

RouterOS L5 and ISP-Grade Use Cases

The RB5009 series handles PPPoE termination, DHCP to customers, Local Queuing, MPLS Push/Pop/Swap and MPLS Forwarding, VPLS/VXLAN Termination, and Hardware Bridging — a full ISP-grade feature set in a weatherproof outdoor enclosure. RouterOS Level 5 is pre-installed with lifetime free updates, covering OSPF, BGP, firewall, NAT, VPN (IPsec, OpenVPN, L2TP, WireGuard), CAPsMAN, scripting, and the complete RouterOS v7 stack.

Key Highlights

• Enclosure: IP66 weatherproof | Outdoor — tower/mast/pole mount
• CPU: Marvell Armada 88F7040 quad-core ARMv8 @ 350–1400 MHz (auto)
• RAM: 1 GB DDR4 | Storage: 1 GB NAND
• Gigabit ports: 7× 10/100/1000 Mbps (all PoE-in + PoE-out)
• 2.5G port: 1× 2.5 GbE (PoE-in + PoE-out)
• 10G port: 1× SFP+ cage (module not included)
• USB: 1× USB 3.0 Type-A full-size
• PoE-out: Up to 25W per port | 130W total budget
• PoE standard: 802.3at/af (48–57V input) or passive PoE (24V input) — single voltage, no conversion
• Power inputs: 9 total — 2-pin DC connector + PoE-in on all 8 Ethernet ports | 24–57V range
• Power priority: Highest voltage source auto-selected; fails over to next highest
• Router self-power: Up to 21W
• RouterOS: Level 5 (pre-installed, lifetime updates, v7)
• Switch chip: Marvell Amethyst | 10 Gbps CPU link
• Passive cooling: IP66 enclosure acts as heat sink
• Operating temp: −40°C to +60°C

Proudly sold by the Ringwood Digital Store.

The RB1100AHx4 Dude Edition features several high-speed storage connectors — two SATA and two M.2 slots — for use with a Dude database, proxy cache, or any other storage-intensive feature. It includes a 60 GB M.2 drive already installed. This is the only functional difference between the Dude Edition and the standard RB1100AHx4.

The SATA ports accept standard 2.5″ SSDs or HDDs for additional storage. The second M.2 slot is available for a second NVMe or SATA M.2 module. For large-scale deployments, both the 60 GB M.2 and additional SATA or M.2 drives can be used simultaneously.

What The Dude Is — and Why It Belongs Here

The Dude is MikroTik’s free network monitoring and management application — a server component that maps, monitors, and alerts on your entire network topology in real time. It tracks device uptime, interface utilisation, ping response, service availability, and generates alerts for failures. Running The Dude on a router that is already always-on at the core of your network makes operational sense: no separate monitoring server, no additional hardware, no VM overhead.

The Dude database — device records, historical metrics, maps, and logs — is storage-intensive over time. Running it from the onboard 128 MB NAND (as on the standard RB1100AHx4 or RB5009) is impractical at scale. The Dude Edition’s 60 GB M.2 drive resolves this directly, with SATA expansion available for even larger deployments or proxy cache use alongside Dude.

Everything Else — Identical to the Standard RB1100AHx4

The RB1100AHx4 Dude Edition uses the same Annapurna Alpine AL21400 CPU with four Cortex-A15 cores clocked at 1.4 GHz, for a maximum throughput of up to 7.5 Gbps, with IPsec hardware acceleration up to 2.2 Gbps with AES128, 13× Gigabit Ethernet ports, RS232 serial port, and dual redundant power supplies with −48V DC telecom power and 802.3at/af support. RouterOS Level 6 is pre-installed with lifetime free updates and no feature caps.

Key Highlights

• CPU: Annapurna Alpine AL21400 quad-core ARM Cortex-A15 @ 1.4 GHz
• RAM: 1 GB DDR | Onboard storage: 128 MB NAND
• Added storage: 2× SATA + 2× M.2 slots | 60 GB M.2 drive included
• Architecture: ARM 32-bit | Switch chip: RTL8367
• Max throughput: 7.5 Gbps
• IPsec hardware acceleration: Up to 2.2 Gbps (AES128)
• Ethernet ports: 13× Gigabit (10/100/1000 Mbps)
• RouterOS: Level 6 (pre-installed, lifetime updates) — highest tier, no feature caps
• The Dude: Supported — 60 GB M.2 drive pre-installed for Dude database
• Power: 2× IEC AC inputs (dual redundant) + −48V DC telecom input + 802.3at/af PoE-in (port 1)
• Console: RS232 serial port
• Storage expansion: microSD slot + 2× SATA + 2× M.2
• Form factor: 1U rack mount | 443 × 148 × 44 mm
• Operating temp: −40°C to +70°C
• MTBF: ~200,000 hours at 25°C

Proudly sold by the Ringwood Digital Store.

The CRS804-4DDQ is a compact and reliable 400 Gigabit switch designed for modern AI workloads and next-generation network upgrades, delivering exceptional bandwidth density in a quiet and efficient 1U form factor. Until recently, 400G switching was the exclusive domain of high-end vendors with equally high-end price tags. The CRS804-4DDQ changes that — bringing MikroTik’s proven RouterOS ecosystem to a class of performance previously out of reach for most organisations.

Key Highlights

• 4× 400G QSFP56-DD ports and 2× 1G/10G Ethernet RJ45 management/uplink ports
• Marvell 98DX7335 switch chip with quad-core 2.0GHz ARM64 CPU, 4GB DDR4 RAM, and 512MB NAND storage
• RouterOS v7 with License Level 6 — full Layer 2 and Layer 3 feature set
• Approximately 200,000 hours MTBF at 25°C

Flexible Breakout & High-Density Connectivity

Each 400G QSFP56-DD port is built from eight independent data lanes, enabling flexible breakout options including two 200G links for AI workloads or lower-speed connections such as 100G or 40G. This makes the CRS804-4DDQ equally capable as a spine or aggregation device in existing infrastructure, connecting to a mix of 400G, 200G, 100G, 40G, and even lower-speed breakout links within the same deployment.

• Per-port support for 40G, 50G, 100G, 200G, and 400G speeds
• Breakout to 1G, 2.5G, 5G, 10G, 25G, and 50G via QSFP-DD breakout cables
• Non-blocking wire-speed performance across all ports
• Functions as a core, aggregation, or spine device within modern network fabrics

Enterprise Reliability & Efficient Power Design

Dual hot-swap power supplies are included for redundancy, ensuring uninterrupted operation in critical environments. Efficient cooling and optimised power design keep energy usage low, with maximum consumption reaching only 123W even under full load with optics installed. The switch operates reliably across a wide ambient temperature range, making it suitable for data centres, research labs, and edge compute deployments alike.

• Dual hot-swap AC power inputs (100–240V) for full power redundancy
• Maximum power consumption of 123W under full load; 92W without attachments
• Dual cooling fans with optimised airflow design
• Operating temperature: -10°C to +60°C

Half-Rack Form Factor & Space Efficiency

With the included RMK-2×10/19 accessory, two CRS804 switches can be mounted side-by-side in a single 1U slot of a standard 19-inch rack, maximising rack space efficiency. This makes the CRS804-4DDQ an exceptionally space-efficient choice for high-density data centre environments where rack space is at a premium.

• Compact half-rack 1U form factor
• Two units mountable side-by-side in a standard 19″ 1U rack slot using included accessory
• Standard 19″ rack compatible via included mounting hardware

RouterOS v7 — Full Layer 2 & Layer 3 Management

RouterOS v7 (License Level 6) provides full Layer 2 and Layer 3 capabilities with future-ready networking features, including VLAN management, routing, firewall rules, ACLs, quality of service, and traffic shaping — all in MikroTik’s familiar management environment. The switch is manageable via Winbox, WebFig, CLI (SSH/Telnet), and SNMP, integrating naturally into existing MikroTik-managed infrastructure.

• Full Layer 2 and Layer 3 capabilities under RouterOS v7 (License Level 6)
• VLAN trunking, routing, ACLs, QoS, and traffic shaping
• Manageable via Winbox, WebFig, CLI (SSH/Telnet), and SNMP
• CPU, PCB, and voltage monitoring for proactive network health management

Proudly sold by the Ringwood Digital Store.

The hAP lite TC is MikroTik’s entry-level home access point, but “entry-level” means something different in the MikroTik world. The device ships with a RouterOS Level 4 licence — the same operating system used across MikroTik’s entire product range — giving you access to a firewall, bandwidth shaping, user access control, VLAN support, and a stack of other features that consumer routers don’t come close to. If you know RouterOS, you’ll feel right at home. If you don’t, expect a learning curve.

The “TC” in the model name refers to the colourful tower-case enclosure that differentiates it from the flat RB941-2nD variant. Same internals, different form factor.

Not a beginner device: The hAP lite runs RouterOS, not a simplified consumer interface. Out of the box it requires basic MikroTik configuration knowledge to set up correctly. If you’re after a plug-and-play home router, look elsewhere.

Hardware at a Glance

The QCA9533 CPU runs at 650MHz with 32MB RAM and 16MB of flash storage. Wireless is 802.11b/g/n (Wi-Fi 4) on 2.4GHz with two chains and 1.5dBi internal antennas, giving a maximum link rate of 300Mbps. Four 10/100 Fast Ethernet ports handle wired connectivity. Power is supplied via USB — a USB adapter is included in the box. There’s no PoE input and no 5GHz radio, so plan your deployment accordingly.

CAPsMAN & Centralised Management

The hAP lite supports a button-triggered WPS mode for quick client onboarding, and can be switched to cAP mode to join a CAPsMAN centrally managed wireless network with a single button press. This makes it a viable thin AP in a larger MikroTik-managed environment, controlled from a central RouterOS device running the CAPsMAN controller. For small deployments of a handful of units, this is a genuinely useful feature at this price point.

Key Highlights

• 650MHz QCA9533 CPU, 32MB RAM, 16MB flash
• 802.11b/g/n (Wi-Fi 4), 2.4GHz dual-chain, up to 300Mbps
• Four 10/100 Fast Ethernet ports
• RouterOS Level 4 licence included — full feature set
• USB-powered — USB adapter included
• WPS button for quick client onboarding
• CAPsMAN compatible — can join a centrally managed wireless network
• Compact tower-case (TC) enclosure
• Free software updates for the life of the product, or a minimum of 5 years from date of purchase.

Proudly sold by the Ringwood Digital Store.

The RB750r2’s defining characteristic is the mismatch between its price and its capability. MikroTik describes it as probably the most affordable MPLS-capable router on the market, with a price lower than the RouterOS licence alone. RouterOS Level 4 includes the full routing feature set: static and dynamic routing (OSPF, BGP, RIP), firewall with connection tracking, NAT, VLAN (802.1Q), IPsec, OpenVPN, L2TP, PPTP, SSTP VPN, bandwidth queuing, traffic shaping, Netwatch, scripting, and MPLS — features typically found on much more expensive hardware.

This is what makes the RB750r2 popular beyond simple home use: it’s a capable lab router, a branch office gateway, a VPN endpoint, or a managed edge device for a WISPs or small ISP tail-end — all at a fraction of what enterprise routers cost.

Hardware

The RB750r2 is powered by a QCA9533 SoC running at 850 MHz with a single MIPSBE core, 64 MB RAM, five 10/100 Mbps Fast Ethernet ports handled by the same QCA9533 switch chip, passive PoE-in on port 1 (10–28V DC), and a maximum power consumption of 2W. The tiny 2W draw makes it suitable for always-on deployments, remote sites, and PoE-powered installations.

Fast Ethernet only — 100 Mbps maximum per port. The RB750r2 is not a Gigabit device. If your internet connection or internal network traffic regularly exceeds 100 Mbps, consider the MikroTik hEX (RB750Gr3) which provides five Gigabit ports in a similar form factor. The RB750r2 is well-suited to ADSL, VDSL, and lower-tier fibre connections.

Five Ports, Flexible Deployment

Dimensions are 113 × 89 × 28 mm and weight without cables is 129 g — smaller than most Wi-Fi routers. The five Fast Ethernet ports can be configured freely: a typical setup uses one as WAN and four as a LAN switch, but RouterOS lets you configure any port combination, bridge or route between any interfaces, set per-port VLANs, and apply firewall rules at any point.

Passive PoE In

The device supports passive PoE input on port 1 at 10–28V DC, allowing it to be powered over an Ethernet cable from a compatible passive PoE injector or switch — useful for mounting the router close to an ONT or media converter without running a separate power cable.

RouterOS Licence and Software Updates

RouterOS Level 4 is pre-installed and licensed — no separate purchase is required. Free software updates are provided for the life of the product or a minimum of five years from the date of purchase. RouterOS v7 is the current major version, bringing improvements to routing performance, container support (not applicable on this hardware), and a refreshed web interface (WebFig) alongside WinBox desktop management.

Key Highlights

• CPU: QCA9533 MIPSBE, single-core 850 MHz
• RAM: 64 MB | Storage: Built into SoC
• Ethernet ports: 5× 10/100 Mbps Fast Ethernet — not Gigabit
• Switch chip: QCA9533
• RouterOS: Level 4 (pre-installed, lifetime updates included)
• Key features: Routing, Firewall, NAT, VLAN, VPN (IPsec, OpenVPN, L2TP, PPTP), MPLS, QoS, Scripting, Netwatch, OSPF, BGP
• PoE input: Passive PoE on port 1 | 10–28V DC
• Power supply: 12V/0.5A DC adapter (included)
• Max power consumption: 2W
• Dimensions: 113 × 89 × 28 mm | Weight: 129 g
• Enclosure: Plastic desktop
• Operating temp: −20°C to +70°C (RouterOS supported range)

Proudly sold by the Ringwood Digital Store.

The RB760iGS is the hEX (RB750Gr3) with two meaningful additions: an SFP cage running at 1.25 Gbps, and passive PoE output on Ethernet port 5. The CPU, RAM, port count, RouterOS licence, IPsec performance, USB, and microSD are identical between the two models. Whether to choose the hEX or hEX S comes down to whether you need either of those additions.

SFP Cage — Fibre and SFP Module Support

The 1.25 Gbps SFP cage accepts standard SFP modules, opening several deployment scenarios not possible on the hEX: direct connection to a GPON or EPON ONU’s SFP uplink, a fibre run to a remote switch or building, a media converter bypass, or connection to a switch or router with an SFP port for a cleaner cabling arrangement. The SFP port operates at 1.25 Gbps maximum — it is not an SFP+ port and does not support 10G modules.

SFP module not included. The appropriate SFP module must be sourced separately — single-mode or multimode depending on your fibre type and distance, or a copper SFP for RJ45 connectivity via the SFP port.

PoE Output on Port 5 — Passive PoE

Port 5 provides passive PoE output, powering other passive PoE-capable devices at the same voltage as supplied to the unit. With the included 24V power adapter, this means port 5 outputs 24V passive PoE — sufficient to power MikroTik wireless access points, IP cameras, and other devices that accept passive PoE at that voltage. This is a clean way to power a single downstream device without a separate PoE injector.

Passive PoE only — not 802.3af/at. Port 5 does not negotiate standard PoE. Only connect devices that are explicitly rated for passive PoE at the voltage you are supplying. Connecting a standard 802.3af/at-only device to a passive PoE port can damage the device.

Hardware and RouterOS

The MT7621A dual-core MMIPS CPU runs at 880 MHz with 256 MB RAM. IPsec hardware encryption delivers approximately 470 Mbps — making this a capable VPN gateway for site-to-site IPsec, L2TP/IPsec road warrior, or any application where encryption throughput matters. The Dude server package is supported via the microSD slot for improved read/write performance, and a full-size USB 2.0 port is available for storage or 3G/4G LTE modem failover.

RouterOS Level 4 is pre-installed with lifetime free updates, covering the full feature set: OSPF, BGP, RIPv2, firewall, NAT, VLAN, IPsec, OpenVPN, L2TP, PPTP, SSTP, MPLS, bandwidth queuing, hotspot, scripting, and more.

Key Highlights

• CPU: MT7621A dual-core MMIPS @ 880 MHz | 4 threads
• RAM: 256 MB | Storage: 16 MB flash + microSD slot
• Ethernet ports: 5× Gigabit (10/100/1000 Mbps)
• SFP cage: 1× 1.25 Gbps (SFP module not included)
• PoE out: Passive PoE on port 5 (same voltage as input — passive only)
• PoE in: Passive PoE on port 1
• RouterOS: Level 4 (pre-installed, lifetime updates included)
• IPsec hardware acceleration: ~470 Mbps
• USB: 1× USB 2.0 (3G/4G modem, storage)
• microSD: 1× slot (Dude server, file storage)
• Power: DC jack 8–30V or passive PoE-in | Max ~10W
• Power adapter: Included
• Extras: PCB temp monitor, voltage monitor, mode button, beeper
• Dimensions: 113 × 89 × 28 mm
• Operating temp: −40°C to +70°C
• Architecture: MMIPS

Proudly sold by the Ringwood Digital Store.

The hEX PoE’s standout characteristic versus the hEX and hEX S is multi-port PoE output. Ports 2–5 can power other PoE-capable devices at the same voltage as applied to the unit, with a maximum of 1A per port and shielded Ethernet connectors throughout. In a small office or remote site, this eliminates the need for a separate PoE switch or individual PoE injectors — the router itself powers the access point, IP camera, IP phone, or VoIP adapter directly over Ethernet.

Passive and 802.3af/at PoE — Voltage Matters

PoE behaviour depends on input voltage, and this is the most important thing to understand before purchasing:

The unit supports passive PoE input and passive or 802.3af/at PoE output on ports 2–5. It can power 802.3af/at mode B (pins 4,5+; 7,8−) compatible devices if 48–57V DC input voltage is used. The included power adapter is 24V — at 24V input, ports 2–5 output 24V passive PoE, which works with MikroTik access points and other passive PoE devices rated for that voltage. To power standard 802.3af/at devices, a separate 48V power supply is required (sold separately).

The unit provides a maximum current of 450mA per port regardless of device power class and does not support PoE powered device classification. Maximum total PoE output budget is 2A across all four ports.

802.3af/at requires a 48V power supply — not included. The included 24V adapter enables passive PoE only. If you need to power standard PoE access points or cameras, source a 48V DC supply separately. Never connect a device expecting 48V passive PoE to a port driven by a 24V supply.

SFP Cage and USB

A 1.25 Gbps SFP cage and a USB 2.0 port are included, matching the hEX S on both counts. The SFP port accepts standard SFP modules for fibre uplinks, media conversion, or SFP-to-RJ45 copper modules. The USB port supports 3G/4G LTE modems for WAN failover, or USB storage for configuration backups and logging.

CPU and RAM — Different from the hEX/hEX S

Unlike the hEX (RB750Gr3) and hEX S (RB760iGS) which run the MT7621A dual-core MMIPS at 880 MHz with 256 MB RAM, the hEX PoE uses a QCA9557 single-core MIPSBE CPU at 800 MHz with 128 MB RAM. This is the same architecture as the hEX lite (RB750r2) but at a higher clock, with the trade-off being that the hEX PoE lacks the hardware IPsec acceleration and higher RAM of the MT7621A-based siblings. For most small office deployments — routing, firewall, NAT, VLAN, VPN pass-through — this is not a practical limitation. If IPsec VPN throughput is a priority, the hEX S is the better choice.

Power Input Range

The DC jack accepts 12–57V input, with a maximum power consumption of 54W (including PoE-powered devices) and 6W without attachments. The wide input voltage range gives deployment flexibility — 12V, 24V, or 48V DC depending on what PoE output standard you need.

RouterOS L4

RouterOS Level 4 is pre-installed with lifetime free updates. The full feature set covers static and dynamic routing (OSPF, BGP, RIPv2), firewall with connection tracking, NAT, VLAN, bridge, bonding, IPsec, OpenVPN, L2TP, PPTP, SSTP, MPLS, bandwidth queuing, hotspot, scripting, DHCP server/client/relay, DNS cache, and PPPoE client/server — exactly the same licence as the rest of the hEX family.

Key Highlights

• CPU: QCA9557 single-core MIPSBE @ 800 MHz
• RAM: 128 MB | Storage: 16 MB flash
• Ethernet ports: 5× Gigabit (10/100/1000 Mbps) | Shielded
• PoE out: Ports 2–5 | 1A max per port | 2A max total | Passive or 802.3af/at (48V input required for 802.3af/at)
• PoE in: Passive PoE on port 1 | DC jack 12–57V
• SFP cage: 1× 1.25 Gbps (SFP module not included)
• USB: 1× USB 2.0
• RouterOS: Level 4 (pre-installed, lifetime updates)
• IPsec hardware acceleration: Not supported on this CPU
• Power: 24V/2.5A DC adapter (included) | Max 54W (with PoE devices) / 6W (standalone)
• Extras: PCB temp monitor, voltage monitor
• Dimensions: 113 × 89 × 28 mm
• Operating temp: −40°C to 60°C
• Architecture: MIPSBE

Proudly sold by the Ringwood Digital Store.

The RB960PGS-PB (PowerBox Pro) and RB960PGS (hEX PoE) share identical hardware: same QCA9557 CPU, same RAM, same port layout, same RouterOS licence. The PowerBox Pro is an outdoor five Gigabit Ethernet port router with PoE output on four ports, featuring a weatherproof outdoor case for mounting on a tower or in other outdoor locations. If you need the hEX PoE’s functionality at a remote site, on a comms tower, under a rooftop overhang, or on an external wall exposed to the elements, the RB960PGS-PB is the appropriate unit. The standard hEX PoE (RB960PGS) is the indoor plastic desktop unit.

Five Gigabit Ports with Four PoE Outputs

Ethernet ports 2–5 can power other PoE-capable devices at the same voltage as applied to the unit, with passive or 802.3af/at PoE output supported. It can power 802.3at and 802.3af mode B compatible devices if 48–57V DC input voltage is used. Maximum current is 1A per port, with shielded Ethernet connectors throughout. This makes the PowerBox Pro well suited for powering outdoor wireless access points, IP cameras, and other PoE devices co-located on a mast or rooftop — eliminating the need for separate injectors at each device.

Passive PoE at 24V input; 802.3af/at requires 48–57V input. The same PoE voltage caveat applies as the indoor hEX PoE: at the default 24V input voltage, ports 2–5 output 24V passive PoE. Standard 802.3af/at devices require a 48V supply (sourced separately). Maximum 450 mA per port, no PoE device class negotiation.

SFP Cage for Fibre Uplink

The device has an SFP port for adding optical fibre connectivity — essential for outdoor deployments where the uplink from the tower or remote site runs over fibre. The SFP cage accepts standard 1.25 Gbps SFP modules (module not included).

Outdoor Form Factor and Power

Dimensions are 125 × 52 × 225 mm — a notably different form factor from the squat 113 × 89 × 28 mm desktop footprint of the indoor hEX PoE, shaped for pole or wall mounting. Input voltage range is 12–57V DC, with the same 54W maximum power consumption (including PoE outputs) and 6W standalone. The wide voltage range accommodates solar power systems, 48V DC telco supplies, and standard 24V passive PoE injection for powering the unit itself.

RouterOS L4 — Full Feature Set

RouterOS Level 4 is pre-installed with lifetime free software updates, covering static and dynamic routing (OSPF, BGP, RIPv2), firewall with connection tracking, NAT, VLAN (802.1Q), bridge, bonding, IPsec, OpenVPN, L2TP, PPTP, SSTP, MPLS, bandwidth queuing, hotspot, scripting, DHCP, DNS, PPPoE, and more. The full RouterOS feature set is identical to the indoor hEX PoE.

Key Highlights

• Enclosure: Outdoor weatherproof — pole/tower/wall mountable
• CPU: QCA9557 single-core MIPSBE @ 800 MHz
• RAM: 128 MB | Storage: 16 MB flash
• Ethernet ports: 5× Gigabit (10/100/1000 Mbps) | Shielded
• PoE out: Ports 2–5 | 1A max per port | 2A max total | Passive or 802.3af/at (48–57V input required for 802.3af/at)
• PoE in: Passive PoE on port 1 | DC jack 12–57V
• SFP cage: 1× 1.25 Gbps (SFP module not included)
• USB: No USB port (unlike the indoor hEX PoE)
• RouterOS: Level 4 (pre-installed, lifetime updates)
• IPsec hardware acceleration: Not supported on this CPU
• Power: DC jack 12–57V | Max 54W (with PoE devices) / 6W standalone
• Dimensions: 125 × 52 × 225 mm
• Operating temp: −40°C to 60°C
• Architecture: MIPSBE

Proudly sold by the Ringwood Digital Store.

The RB5009UG+S+IN is built around the Marvell Armada ARMv8 quad-core CPU running at up to 1.4 GHz (auto-scaling from 350 MHz), with all nine ports connected to a Marvell Amethyst family switch chip via a 10 Gbps full-duplex internal link to the CPU. The CPU architecture is ARM 64-bit, the RAM is 1 GB DDR4, and storage is 1 GB NAND. This combination delivers approximately double the throughput in CPU-intensive configurations — IPsec encryption, complex firewall rules, BGP/OSPF with large routing tables, traffic shaping with many queues — compared to the single or dual-core MIPS and lower-RAM devices in MikroTik’s smaller lineup.

Both CPU and switch chip are located on the bottom of the board, so the aluminium case acts as a massive passive heat sink — no fan, no noise, no moving parts to fail.

Nine Ports — Gigabit, 2.5G, and 10G SFP+

The board features seven Gigabit Ethernet ports, one 2.5 Gigabit Ethernet port, and one 10G SFP+ cage. This combination serves a wider range of deployment needs than any previous compact MikroTik router: the 10G SFP+ accepts fibre or copper SFP+ modules for backbone or ISP uplink connectivity; the 2.5 GbE port is useful for a NAS, workstation, or multi-gig switch without wasting a 10G port; and the seven Gigabit ports cover standard LAN connectivity. All nine ports are switch-chip accelerated, meaning inter-port switching happens in hardware rather than going through the CPU.

Three Power Input Options

The RB5009UG+S+IN can be powered three ways: passive PoE-in on Ethernet port 1 (24–57V DC), DC jack (24–57V DC), or the 2-pin 5.08 mm terminal on the side (24–57V DC). Having three independent power inputs enables power redundancy in deployments where uptime is critical — if the primary supply fails, the device can be configured to fall back to a secondary input automatically.

RouterOS Level 5 — A Licence Step Up

RouterOS Level 5 is pre-installed — a step up from the Level 4 licence on the hEX family. Level 5 adds unlimited OSPF, RIP, and BGP peers (L4 caps these), The Dude network monitoring server, and higher hotspot user limits. It is the appropriate licence level for ISPs, larger enterprise networks, and serious home lab deployments. RouterOS v7 is required and is the only supported version on this hardware. Free software updates for the life of the product or minimum five years from purchase.

Rackmount Option

Four RB5009 routers can be mounted in a single 1U rack space using the optional dedicated mounting bracket (sold separately). This makes the RB5009 practical for data centres, server rooms, and ISP environments where rack density matters — four independent routers in the footprint of a single 1U device.

Key Highlights

• CPU: Marvell Armada 88F7040 quad-core ARMv8 @ 350–1400 MHz (auto) | 64-bit
• RAM: 1 GB DDR4 | Storage: 1 GB NAND
• Switch chip: Marvell Amethyst | 10 Gbps full-duplex CPU link
• Gigabit ports: 7× 10/100/1000 Mbps Ethernet
• 2.5G port: 1× 2.5 Gbps Ethernet
• 10G port: 1× SFP+ cage (module not included)
• USB: 1× USB 3.0 Type-A full-size
• Power inputs: DC jack (24–57V) + passive PoE-in port 1 (24–57V) + 2-pin terminal (24–57V)
• Max power consumption: ~25W
• RouterOS: Level 5 (pre-installed, lifetime updates, v7 only)
• Passive cooling: Aluminium chassis as heat sink — no fan
• Rackmount: 4× per 1U (bracket sold separately)
• Dimensions: 232 × 120 × 22 mm (approx.)
• Operating temp: −40°C to 60°C
• MTBF: ~200,000 hours at 25°C
• Architecture: ARM 64-bit

Proudly sold by the Ringwood Digital Store.