Mikrotik heX RB750Gr3 vs Ubiquiti EdgeRouter ER-X: Hardware, Features, Warranty & Use Cases

Both devices are very similar in terms of hardware and price. Efficient, probably too? Mikrotik has USB and SD cards, but I don't see any applications at the moment. ER-X, on the other hand, has PoE passtrough and the only use that comes to my mind is something like AP AC Lite but I doubt that I will wear it in a studio apartment.
They both have HW NAT, IPSEC / L2TP hardware support, MT has Winbox for Windows, but apparently wine is also great, and besides, I have 2 windows virtuals so no problem.
The software is different, but the capabilities are the same as far as I know.

As I looked at apricots, Er-X has 24 months of manufacturer's warranty and MT only 12 of the store. This is quite an important argument.


Maybe you have any pros / cons for one of them?

In general, I will also mention that I have the third concept behind my head all the time to put something into pfsense, because I have heard a lot of good things about it. But it will definitely come out more expensive and will want more watts (even the Atom built into ITX with a pico ATX power supply) than a mikrotik / ubiquiti.

PS. I did the OpenWRT / Tomato, I don't really want to.

Radio to ubiquity.
Po kablu mikrotik.

What is it for?
Because it could make a difference. For example, an Eth tunnel can be made on the mikrotik when it is behind NAT. I did not succeed in such a thing on ubiquiti.
Management seems a little more transparent on ubiquiti. But as always, everything is a matter of taste. I managed to get better results in IPSec on Mikrotik.
Ubiquiti has an external management system - quite nice. especially if you have multiple devices

With this tunnel it is not a port forwarding issue? I don't know how to tunnel over IPSEC but with OpenVPN you can have a machine inside the LAN and you only redirect port 1194 to it. In the company we even have 2 hops done (nested LAN).

As for the destination: I have wf2780 now. It's nice, but I need to have CRON on the router and put WoL into my NAS. I also want to set up a normal DDNS, because now it resets my domain every 30 days and I only have his and a paid one to choose from. And some other small things that can't be done without SSH access. Net 40/4 but it will be 120/10. I will leave this Netis for Wifi AC, maybe I will not even bridge it, only Wifi will be behind the second NAT.

In addition, in the future, I want to assemble a lab and such Mikrotik would provide interesting configuration options. I saw that there are, for example, cheap 1043ND v3 for PLN 100. But I would like something more serious, and moreover, I would like to know it for the sake of knowledge.

Currently I am leaning towards Mikrotik.

This IPSec "tunneling" is called NAT-Traversal (NAT-T) and MT only works on paper. I do not know how it is in practice with UBQ. As a rule, the IPSec hub is mounted on the edge of the network (traffic filters, security).