MikroTik RB4011iGS+5HacQ2HnD-IN-US 10-Port Gigabit PoE Router 10G SFP+

The MikroTik RouterBOARD RB4011iGS+5HacQ2HnD-IN delivers enterprise-grade routing performance in a compact matte-black metal enclosure. At its core is a quad-core AL21400 Cortex A15 processor running at 1.4 GHz—the same CPU architecture used in MikroTik's carrier-grade RB1100AHx4 platform—paired with 1 GB of RAM and 512 MB of NAND storage. Ten Gigabit Ethernet ports and a single SFP+ 10 Gbps uplink port provide dense, high-throughput wired connectivity suitable for demanding network edge and aggregation deployments. The integrated dual-band wireless subsystem adds a four-chain 802.11ac radio covering 5 GHz at data rates up to 1733 Mbps alongside a dual-chain 2.4 GHz 802.11b/g/n radio, making this an all-in-one solution for environments that require both high-speed wireless access and powerful wired routing. Passive PoE input on port 1 and passive PoE output on port 10 extend deployment flexibility, while RouterOS License Level 5 unlocks the full breadth of MikroTik's advanced routing, switching, tunneling, and security feature set. IPsec hardware acceleration offloads encryption workloads from the CPU, sustaining throughput under encrypted tunnel loads. This is the US version of the product.

Key features & benefits

• Quad-Core AL21400 CPU at 1.4 GHz — The same Cortex A15-based AL21400 processor found in MikroTik's carrier-grade RB1100AHx4 drives the RB4011, delivering substantial routing, firewall, and tunneling throughput for a device in this form factor.
• Ten Gigabit Ethernet Ports plus SFP+ 10 Gbps Uplink — Ten 10/100/1000 Mbps copper ports managed through an RTL8367SB switch chip, combined with a dedicated SFP+ 10 Gbps interface, provide versatile high-density wired connectivity for both access and uplink needs.
• IPsec Hardware Acceleration — Dedicated hardware acceleration for IPsec offloads cryptographic processing, allowing the router to sustain higher encrypted VPN throughput without proportionally taxing the main CPU cores.
• Dual-Band Wireless with Four-Chain 5 GHz Radio — A QCA-9984 five-chain module delivers 802.11a/n/ac on 5 GHz (5150–5875 MHz) at up to 1733 Mbps with four chains, while a separate R11e-2HnD dual-chain card provides 802.11b/g/n coverage on 2.4 GHz (2412–2484 MHz), supporting legacy and modern client devices simultaneously.
• Passive PoE In and PoE Out — Port 1 accepts passive PoE input at 18–57 V for flexible power sourcing. Port 10 provides passive PoE output at up to 57 V, allowing a downstream device to be powered directly from the router.
• Wide Input Voltage Range — Supported input voltage of 12–57 V via the power jack accommodates a broad range of power sources, including direct DC supply in environments where standard mains power is unavailable.
• 1 GB RAM and 512 MB NAND Storage — Ample memory supports complex routing tables, numerous simultaneous connections, and extensive RouterOS configurations, while 512 MB of NAND provides sufficient space for the OS and logging.
• RouterOS License Level 5 — Level 5 licensing unlocks advanced RouterOS capabilities including BGP, OSPF, MPLS, and a full suite of VPN and traffic management features appropriate for professional network deployments.
• Compact Metal Enclosure with Wide Operating Temperature — The solid matte-black metal chassis measures 228 × 120 × 30 mm and is rated for operation from -40 °C to +45 °C, suiting both indoor and thermally challenging installations.
• Integrated Voltage and PCB Temperature Monitoring — Onboard voltage and PCB temperature monitors provide real-time hardware health visibility through RouterOS, supporting proactive infrastructure management.