What's new
By:

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

New hEX

So I got my shiny new hex today, first off what an amazing little machine! :D

Set it up, with basically just the default configuration out of the box, got winbox up and running and this thing is blazing, ~50% cpu usage at a combined 1000Mbit throughput (500 each way) using torrents, this is simply amazing.

Did some portforwards which was pretty easy, added some graphs for the fun of it and im pretty happy right now.

It "just works" - All the latency issues I had with the ERL is now completely gone, I can play online with no issues, even when the uplink is maxed out im not seeing any real spikes just a steady higher ping of 3-5ms more than when it is not loaded.

So far, pretty nice little device!
 
I am really suprised to be honest, as I have already had the Edgerouter X which should be identical software, but this little mikrotik runs loops around it at what a router should do.

Sure, it might not be as fancy, and have a fancy webui etc but it just works, and its stable as hell which is the most important aspect for me in my router.
 
Does hEx r3 worth $30 more over ER-x? Thanks.

Sent from my SM-G935W8 using Tapatalk
 
I actually need a router to pair with my Asus AC 68U and 56U as APs. Winbox seems to be easily configured. I am leaning towards Mikrotik now.

Sent from my SM-G935W8 using Tapatalk
 
ma678 said:
Bought it on eBay last night. Thanks.

Sent from my SM-G935W8 using Tapatalk
Click to expand...

Enjoy it. IMHO this is the best IPv4 router on the market, value wise, but only when configured properly.
Let's wait for the review from Tim. I already can see some results in the charts...
 
I received it last night and now I am looking for a good configuration. Tried it last night and could not get it working anyway.

Sent from my SM-G935W8 using Tapatalk
 
ma678 said:
I received it last night and now I am looking for a good configuration. Tried it last night and could not get it working anyway.

Sent from my SM-G935W8 using Tapatalk
Click to expand...
you have to understand networking to get it working, otherwise just copy pasting rules doesnt work. You have to know what you're doing.
 
ma678 said:
I received it last night and now I am looking for a good configuration. Tried it last night and could not get it working anyway.

Sent from my SM-G935W8 using Tapatalk
Click to expand...

Could you please elaborate your problem?
 
paraplu said:
Could you please elaborate your problem?
Click to expand...
After I received the router, I reset its configuration without keeping the default one; however, I was unable to get my 3 AP working. I had to reset to default. After that, everything has been working well.

I use it in a pure home office with 3 AP on each floor. No VPN in or out. I don't have too much network knowledge and so far the default settings look okay. My only concern is its firewall policy is secure enough.

Where can I get a better tutorial for a newbie?

Thanks.

Sent from my SM-G935W8 using Tapatalk
 
ma678 said:
After I received the router, I reset its configuration without keeping the default one; however, I was unable to get my 3 AP working. I had to reset to default. After that, everything has been working well.

I use it in a pure home office with 3 AP on each floor. No VPN in or out. I don't have too much network knowledge and so far the default settings look okay. My only concern is its firewall policy is secure enough.

Where can I get a better tutorial for a newbie?

Thanks.

Sent from my SM-G935W8 using Tapatalk
Click to expand...
you can always ask me, i need to renew my tutorial though.

There is a general purpose ruleset though but it wont work with all configurations due to various different ISP kinds. For example some ISPs just use automatic IP, some use PPPOE and some use VLANs, and some use a combination of various.

The first thing you'll want to do is whitelist your DNS and NTP service, then block input and output to everything else. It takes a bit of thinking to figure out and understand what to block and on which interfaces.

I recommend blocking 255.255.255.255 on WAN for both input and output as thats a broadcast, same with ipv6 equivalent.
 
System Error Message said:
you can always ask me, i need to renew my tutorial though.

There is a general purpose ruleset though but it wont work with all configurations due to various different ISP kinds. For example some ISPs just use automatic IP, some use PPPOE and some use VLANs, and some use a combination of various.

The first thing you'll want to do is whitelist your DNS and NTP service, then block input and output to everything else. It takes a bit of thinking to figure out and understand what to block and on which interfaces.

I recommend blocking 255.255.255.255 on WAN for both input and output as thats a broadcast, same with ipv6 equivalent.
Click to expand...

Before I start trying to play with this, I want to make sure I understand some things. I will have the router hooked up to the surfboard 6141 cable modem (Comcast internet). From there I will have 2 main splits, one will run upstairs to a wireless access point (converting current wireless router) which will be used by kids pc/phone and the upstairs Roku. Basically anything that gets terrible signal because its on the 2nd floor and my "closet" is in the basement. The other split includes my wired network. This is 2 unmanaged switches (eventually wanted to get 1 managed) spread out across the basement to support all of my devices, plus a wireless AP to support any wireless devices.
I have one of my PCs currently set up as a PLEX Server, that i use to stream to the various tablets and Roku devices throughout the house. My work PC would need to be able to connect using Cisco VPN to our work network.
I am not too concerned with QOS at this point, though with an 11yr old and 14 year old, I do like being able to kill internet after 10PM automatically and control their connectivity (throttling speeds, etc), but that can be manged manually for now. I am sure I will likely try out additional things as I get more comfortable.such as keeping the kids from being able to access the basement network. Currently, it is apparently too tempting for the 14 yr old to not "Airplay" from her phone to the AV Receiver. It being stuck in a closet, I use the receiver app to manage inputs and change settings, so I don't want to unplug it.

Assuming I follow your rules from the Mikrotik configuration post, any watchouts? Anything you can point me to that I need to read and try to understand (and likely ask questions on) due to the things I am trying to do above?
 
ThatITGuy said:
Before I start trying to play with this, I want to make sure I understand some things. I will have the router hooked up to the surfboard 6141 cable modem (Comcast internet). From there I will have 2 main splits, one will run upstairs to a wireless access point (converting current wireless router) which will be used by kids pc/phone and the upstairs Roku. Basically anything that gets terrible signal because its on the 2nd floor and my "closet" is in the basement. The other split includes my wired network. This is 2 unmanaged switches (eventually wanted to get 1 managed) spread out across the basement to support all of my devices, plus a wireless AP to support any wireless devices.
I have one of my PCs currently set up as a PLEX Server, that i use to stream to the various tablets and Roku devices throughout the house. My work PC would need to be able to connect using Cisco VPN to our work network.
I am not too concerned with QOS at this point, though with an 11yr old and 14 year old, I do like being able to kill internet after 10PM automatically and control their connectivity (throttling speeds, etc), but that can be manged manually for now. I am sure I will likely try out additional things as I get more comfortable.such as keeping the kids from being able to access the basement network. Currently, it is apparently too tempting for the 14 yr old to not "Airplay" from her phone to the AV Receiver. It being stuck in a closet, I use the receiver app to manage inputs and change settings, so I don't want to unplug it.

Assuming I follow your rules from the Mikrotik configuration post, any watchouts? Anything you can point me to that I need to read and try to understand (and likely ask questions on) due to the things I am trying to do above?
Click to expand...
You can use the scheduler to enable/disable rules, this can be used to turn off internet or block internet. The best way to do it is to add addresses to a list (and use the not in your forward and NAT rules) or to use layer 2 to block mac (cant be bypassed unless they know how to change the mac address). Incase your kids are smart, you could always turn on hotspot and place an exception for yourself and set hotspot to turn on using the scheduler at a certain time and turn off at a certain time. Make sure not to allow router logins to be used in hotspot.

Regarding the rules i placed in my past posts, i strongly suggest you ignore the forward drops because its way too sensitive (even blocks google and facebook).
 
You must log in or register to reply here.

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 566 (members: 7, guests: 559)
Back
Top