Hacker News Reader

Comment by jimnotgym | Hacker News Reader

> It'd be irrational to choose Cisco for any new network deployment these days

I'm interested what you would buy instead? In the UK SME space I see mostly HP, Watchguard, Unifi. Lease lines still often come with Cisco gear (supplied by the provider). Otherwise I only see Cisco at the bigger entities.

View on HN

Mikrotik has recently made bridging much saner, which makes their portfolio complete for datacenter use and pretty close on bridging users in the access layer.

Their CCR-series is very much bang per buck if L4-filtering is enough, which should be enough in today's world of end-to-end encrypted communications.

The CRS3xx-series as stated has become much saner with changes to bridging and with most features implemented are also worth the cost.

The upside with affordable devices and the licensing model they have, make it possible to keep cold spares available in case of disaster.

It does however make sense to study the management interfaces and disable all but SSH and HTTPS in order to minimize attack surface.

I have a phobia of MikroTik, especially in the hands of general IT people. Amazing bang per-buck, but I took over a network with 6 sites all with Mikrotik routers and there were some staggering config mistakes. The more I dug the more I became convinced that the OS was, if not to blame, but certainly was a major factor.

I used to test changes (when duties allowed) with nmap, and several times I showed experienced engineers that they had left a service open to the WAN by mistake! When a network is in the hands of general engineers, like it often is in the SME space, I like Watchguard firewalls. Very good defaults, helpful os.

I can imagine in a datacenter where you have network specialists, and robust working procedures Mikrotik could work well.

I use Unifi for Wifi, and have used their routers for a dedicated guest wifi network. For switches I know nothing other than HP, but don't see a lot of issues, especially with the Aruba kit.

I again have phobias regarding Watchguard and other products that have the consumer style special WAN-ports and related configuration restraints. Many Mikrotik-devices come preconfigured like consumer devices but the recent CCR-series does not.

The firewall in Mikrotik-devices is among the cleanest I've seen and very hard to miss-configure as long as the firewall is otherwise configured to not let unauthorized traffic through.

And yes, people are people and this is why we educate people when needed.

Depends on the type of network element required.

If I were doing data center switching, I'd buy something Broadcom based on which I could run something like Cumulus Linux.

For wifi, I like Unifi. For routers, Juniper is fine. Arista seems to be well-regarded in the switching space as well. Basically anything but Cisco.

That said, I haven't had to think about network elements for quite a few years.

UniFi is great for home, small to medium businesses, and anything up to a massive church or stadium. I use it at home and I know a few local installers who swear by it.

If you have a small network team UniFi would be a perfect fit. It’s very manageable and support is great.

Backing this. I use Unifi extensively and like it. There are some quirks, but I've had better experiences with it than Meraki.

in the service provider market juniper and arista seem to be king. There is very little on the market that beats an MX series router when looking for a network core for example.

in the enterprise, ubiquiti and HP seem to still be quite relevant. The amount of HP procurve gear in use is rather large.

I learned MX and JunOS mid-career. Routing protocols are solid and I much preferred the configuration over Cisco IOS especially for things like BGP, ISIS, routing policy, prefix lists, etc.

Reply on news.ycombinator.com