MikroTik
Latvia's MikroTik sells inexpensive routers, but the RouterOS inside does almost everything: BGP, OSPF, VPN, load balancing, hotspot. Small regional ISPs use it widely. The downside: it is easy to misconfigure and needs regular firmware updates.
- Headquarters
- Latvia
- Positioning
- EntryMid-market
- Official website
- mikrotik.com
Who it suits
Offices with two or three lines from different ISPs that need load balancing and failover, with an engineer looking after the config.
Overview
Who MikroTik is
MikroTik is a company from Riga, Latvia. What sets it apart is not the hardware but RouterOS, a single operating system that runs on almost every device it sells, from a palm-sized router to ISP-grade routers. Learn it once and you can configure any model. The current version, RouterOS v7, supports BGP, OSPF, WireGuard, IPsec, VLANs, hotspot, QoS and containers.
Product families
- CCR (Cloud Core Router): the CCR2004, CCR2116 and CCR2216 series act as the main router for an office or ISP, with 10G or faster ports.
- CRS (Cloud Router Switch): switches, some of which can boot either RouterOS or SwOS, a simpler switch-only system.
- hAP and RouterBOARD: small routers for branches and shops. The hAP ax series uses Wi-Fi 6, and MikroTik has started releasing Wi-Fi 7 models in the hAP be series.
- Outdoor wireless: antennas and point-to-point links for joining buildings or reaching places cable can't.
- CHR (Cloud Hosted Router): RouterOS for virtual machines and cloud servers.
- WinBox 4 and The Dude: the configuration tool, now native on Windows, macOS and Linux, and a network monitoring tool.
Licensing
The RouterOS licence comes with the hardware, never expires and includes unlimited software updates. The licence level (for example Level 4, 5 or 6) sets limits such as the number of tunnels and hotspot users. There is no yearly subscription. CHR has one-time licences graded by throughput.
MikroTik fits places that need serious routing on a small budget: offices with two or three internet lines, branches that need a VPN back to head office, wireless links between buildings, and small ISPs. The condition is that an engineer who really knows RouterOS looks after the configuration and keeps it updated.
Strengths
- An inexpensive router can run BGP, OSPF, multi-ISP load balancing, WireGuard VPN and a hotspot without buying extra licences.
- Licences never expire and updates are free, so there is no yearly renewal to remember just to keep the network running.
- The same RouterOS on every device: scripts and configs from one branch can be reused at the next, even on different hardware.
- Low-cost outdoor wireless gear is a practical way to link buildings, warehouses or guard posts where trenching fiber doesn't pay.
Things to know before choosing
- All that flexibility also makes it easy to misconfigure. Routers with WinBox or management ports open to the internet and left unpatched have been taken over in large numbers for botnets in the past.
- There is no central cloud dashboard like Meraki or Omada for many sites. With ten branches you have to build your own config backup, monitoring and update routine.
- It is not a next-generation firewall: no signature-updated IPS and no full web filtering. Organizations that need strong security should put a dedicated firewall in front.
- Warranty and replacements go through the distributor; there is no next-business-day replacement contract. For a main router, keep a spare with the config already loaded.
Using it in Laos
MikroTik is widely used in Laos by small ISPs, hotels, internet shops and offices with several internet lines. Most equipment comes through distributors in Thailand, and common models such as the hAP and CCR2004 are usually in stock.
What we recommend for Lao conditions:
- Multiple ISPs: use PCC or recursive routes for load balancing and failover, and test the failover every month, not only on installation day.
- Power: many small routers use an external adapter that dies easily in brownouts. Put the router on a UPS and keep a spare adapter.
- Outdoor wireless links: rainy season and lightning call for proper earthing, surge protectors and shielded outdoor cable. Check antenna alignment after storms.
- Skills: technicians who can use MikroTik are easy to find, but people who set up the RouterOS firewall properly and patch it on schedule are fewer. Always ask for a config backup and documentation.
Compared with alternatives
If you want an easy dashboard and many Wi-Fi points in one system, Ubiquiti UniFi or TP-Link Omada suit teams that would rather avoid the command line. If security is the main concern, Fortinet FortiGate combines a next-generation firewall and SD-WAN in one box. MikroTik remains a strong choice when you need complex routing on a small budget and have someone who knows RouterOS.
Product lines
- RouterOS
- Cloud Core Router (CCR)
- Cloud Router Switch (CRS)
- hAP
- RouterBOARD
- The Dude
Solutions that use this brand
Enterprise LAN & SwitchingA core–access LAN with VLANs, redundant uplinks and enough PoE. One looped cable no longer takes down the whole building.
Point-to-Point Wireless LinksPtP/PtMP radio links over several kilometres for buildings and sites you can't cable, across roads and rivers.
SD-WAN for BranchesProvincial branches run two internet links at once. If one fails, the other takes over within seconds, and everything is…
Fiber Backbone & Campus LinksFiber between floors, buildings and sites at 10–100 Gbps. It doesn't conduct, so lightning can't ride it from one building to the…
Industrial Networking (OT)Hardened switches that survive dust, heat and vibration, with ring redundancy and IT/OT separation for plants and mines.
Hotel Guest Wi-FiWi-Fi guests can join easily, strong in every room, each guest isolated, with your own login page and PMS link.FAQ
Does a MikroTik licence expire?
No. The RouterOS licence comes with the device and lasts for the life of the hardware, with free updates. What to check before buying is whether that model's licence level covers the number of VPN tunnels or hotspot users you need.
Can MikroTik be our company firewall?
For a small office, a properly configured RouterOS stateful firewall is enough. If you need antivirus scanning, self-updating IPS or category web filtering, use a separate NGFW and let MikroTik handle routing and ISP load balancing.
How often should we update RouterOS?
Check for updates at least monthly and patch immediately when a security fix appears. On a main router, use the stable or long-term channel, back up the config first and update outside working hours. Don't forget to upgrade the RouterBOARD firmware afterwards.
All brand names and trademarks belong to their respective owners. Mention does not imply official partnership unless explicitly stated. Products are sourced through legitimate distribution channels.
Send us a floor plan or a few photos of the site
We’ll come back with a few questions, then a first design. The first consultation is free, in Lao, Thai or English, on WhatsApp or our Facebook page.