I would think an RB3011 would do the job. RB4011 is faster but doesn't do VLANs on the switch chip. That mightn't be a big deal though. Both have hardware IPSEC now. Regards Russell -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Chris Herrmann Sent: Tuesday, 5 November 2019 14:15 To: public@talk.mikrotik.com.au Subject: [MT-AU Public] upgrade from RB2011UiAS to something faster - RB450Gx4 ? Hi all, I've been using the rb2011 for several years now, happy user. I'm about to get faster internet (NBN - please stop snickering), so I'm looking at models that will handle higher throughput and after people's recommendations. Things I care about... * I'm running a few VLANs. there was one rb or Hex model that I played with that didn't handle VLANs as well as the 2011 but I can't remember the reason now. Might have been a software switch and not hardware or something like that. * IPSEC - the 2011 tops out around 16Mbit before it flakes out in my experience. Would like to get more throughput.. if I look at the RB450Gx4 specs and pick the worst-case IPSEC throughput, it claims to do 20Mbit which is better than my real-world experience with the RB2011. * Non-IPSEC NAT - would like it to comfortably handle 100Mbit * I'm running a few other things but nothing that should be too taxing (logging, not a huge number of policies, only a little bit of mangling). * Don't want wifi on it * Don't need POE * Would love to be able to export / import my RB2011 config and have that work :) but I'm guessing it'll have to be a rebuild based upon prior experience switching models. Cheers, Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au