MikroTik CRS304-4XG-IN 4-Port 10GbE Router SwOS ROS
The MikroTik CRS304-4XG-IN is a compact 4-port 10 Gigabit Ethernet desktop switch and router — 4× RJ45 10GbE copper ports (no SFP, no SFP+), Marvell Prestera 98DX3236 switch chip, quad-core ARM64 AL21400 at 1,400 MHz, 1 GB RAM, 1 GB NAND, dual-boot SwOS and RouterOS v7 License 6, USB 3.0 Type-A, DC jack (18–28V), passive cooling, IP20, -20°C to +50°C, MTBF ~200,000 hours at 25°C. CE, EAC, RoHS certified. Includes 24V 1.2A power adapter. USD 199.00. The correct compact 10GbE desktop switch for homelab operators, small server rooms, and 10G-ready workstation deployments where RJ45 copper 10GbE connectivity is required without SFP+ cabling, transceivers, or rack infrastructure.
We only offer IC Certified products. For international products, contact us.
Ship Charge Will Display As Free Until Ship Address / Location Is Provided To Calculate Ship Charge.
The MikroTik CRS304-4XG-IN answers a specific connectivity problem that has become increasingly common as 10 Gigabit Ethernet moves from enterprise-only infrastructure into homelab and small server room deployments: four devices need 10GbE connectivity to each other and to an upstream 10G network, and the operator does not want to deal with SFP+ cabling, transceiver compatibility, or rack mounting. The CRS304's four RJ45 copper 10GbE ports connect directly to any device with a 10GBASE-T network interface — a workstation, a NAS, a server, an upstream switch — using standard Cat6a or Cat7 Ethernet cable, with no transceivers, no DAC cables, no fibre patch panels, and no rack ears required. Plug in, power on, configure in SwOS or RouterOS, done.
The four RJ45 10GbE ports are the entire port inventory — there are no Gigabit Ethernet management ports, no SFP+ uplinks, no combo ports. Every port on the CRS304 is a full 10GBASE-T copper port capable of 10G, 5G, 2.5G, 1G, 100M, and 10M operation depending on the connected device's capability. For a homelab with a mix of 10GbE workstations, 2.5GbE NAS devices, and 1GbE servers, the CRS304's ports auto-negotiate to the highest common speed — all four ports active simultaneously at their respective negotiated speeds, all switched at hardware line rate by the Marvell Prestera 98DX3236. No manual speed configuration is required for a mixed-speed deployment — the switch handles speed negotiation and switching across all active combinations automatically.
The dual-boot SwOS / RouterOS architecture is the feature that separates the CRS304 from every other compact 10GbE switch in its price range. Most compact 10GbE desktop switches in the USD 150–250 range are unmanaged or provide only a browser-based managed switch interface — they switch packets and provide basic VLAN and QoS, and nothing more. The CRS304 boots either SwOS (MikroTik's switch-focused managed OS, same as the CSS318 and FTC21) or RouterOS v7 on License 6 (MikroTik's full routing and network management platform, the highest licence tier in the home and office product line). The operator selects the operating mode at boot time — SwOS for pure Layer 2 managed switching, RouterOS for full routing, firewall, VPN, container, and advanced network management.
**SwOS mode** provides the full managed switch feature set: VLAN tagging and trunking, per-port bandwidth limiting, traffic mirroring, broadcast storm control, MAC filtering, SNMP monitoring, and the Layer 2 switching management capabilities consistent with the CSS318 and FTC21 in this product batch. For a homelab switch that needs VLAN segmentation between a server VLAN, a workstation VLAN, and a management VLAN across 4 ports at 10GbE line rate, SwOS handles this with hardware-accelerated switching at the Marvell Prestera ASIC level — no CPU overhead, no forwarding latency.
**RouterOS v7 mode** is where the CRS304 becomes something that no other compact 10GbE switch in this price range offers. RouterOS v7 on License 6 — the same licence tier as the Chateau PRO ax — provides:
- Full Layer 3 routing between the CRS304's 4 ports — inter-VLAN routing, static routes, OSPF, BGP, RIP without restriction
- Full firewall with stateful packet inspection, connection tracking, and Layer 7 protocol filtering
- WireGuard and IPsec VPN — site-to-site and remote access VPN termination directly on the 10GbE switch
- RouterOS v7 container support (Docker-compatible Linux containers on ARM64) — run Pi-hole, monitoring agents, custom services, or development containers on the CRS304 alongside its routing function
- Bandwidth management, QoS, traffic shaping, and queue trees at 10GbE line rate
- SNMP, The Dude network monitoring agent, scripting and automation via RouterOS scheduler and scripts
- Unlimited OSPF/BGP routes, tunnels, and hotspot users (License 6)
- All RouterOS v7 features available on ARM64 License 6
The container support on ARM64 License 6 RouterOS is specifically relevant for homelab operators who run Pi-hole for DNS ad-blocking, Grafana for network monitoring, or custom network services alongside their routing stack. The CRS304 running RouterOS v7 with containers active is a compact 10GbE router, firewall, VPN concentrator, and container host in a single fanless desktop device — a capability combination that is unique at USD 199.00.
The quad-core ARM64 AL21400 at 1,400 MHz with 1 GB RAM and 1 GB NAND is the hardware foundation for RouterOS mode. 1 GB RAM matches the Chateau PRO ax and provides the headroom required for active RouterOS v7 with container workloads, connection tracking under load, and BGP/OSPF routing table maintenance simultaneously. 1 GB NAND provides storage capacity for container images and RouterOS configuration backups — substantially more storage than the 128 MB NAND of the Chateau PRO ax and wAP ax. The ARM64 architecture enables the hardware-efficient cryptographic instruction handling that benefits WireGuard and IPsec VPN performance.
The USB 3.0 Type-A port extends the CRS304's storage capability in RouterOS mode — plug in a USB 3.0 SSD or flash drive for additional container image storage, RouterOS configuration backup, or file server capability via RouterOS's SMB/NFS server. USB Power Reset is supported — the RouterOS USB power cycle function can be used to remotely power-cycle a connected USB device without physically accessing the unit.
The -20°C to +50°C operating temperature range is the most restrictive in this product batch — a lower limit of -20°C (versus -40°C for most MikroTik active devices) and an upper limit of +50°C (versus +70°C for most). The +50°C upper limit reflects the thermal constraints of the 10GBASE-T copper PHY circuitry — 10GbE RJ45 transceivers generate significant heat at full link speed on all four ports, and passive cooling limits the maximum ambient temperature the device can sustain. For indoor server room and homelab deployments with standard HVAC, -20°C to +50°C covers all standard conditions. For installations in unventilated enclosures, above-ceiling spaces, or equipment rooms without air conditioning in Canadian summer conditions, confirm that the ambient temperature at the CRS304's installation location does not exceed +50°C.
Maximum power consumption is 30W — the highest of any device in this product batch. The 10GBASE-T copper PHY is the reason: four active 10GbE RJ45 ports generate substantially more heat and consume substantially more power than SFP+ fibre or DAC connections at the same throughput. For a homelab or server room deployment where the CRS304 runs continuously, 30W represents approximately 263 kWh per year at full load — a meaningful electricity cost at Canadian retail rates. For cost-sensitive deployments, note that the CRS304's power draw at 2.5GbE or 1GbE link speeds on all ports is lower than at full 10GbE — the PHY scales power with link speed.
The 24V 1.2A power adapter is included — the DC jack input range is 18–28V. For rack-integrated deployments where a central DC power bus is available, the 18–28V DC jack input allows the CRS304 to be powered from a 24V DC distribution rail without the included AC adapter. For standard desktop deployments, the included 24V adapter provides out-of-box power without additional hardware.
**Canadian market note:** Certifications published are CE, EAC, and RoHS — no FCC, no IC. The CRS304-4XG-IN is a wired Ethernet switch and router with no wireless transmitter. IC and FCC certification requirements for wired network equipment differ substantially from active wireless devices — the regulatory risk for a wired-only device is lower. Confirm Canadian regulatory compliance with your distributor before listing. No wireless advisory applies.
Key specifications:
- **Architecture:** ARM 64-bit
- **CPU:** AL21400, quad-core ARM64, 1,400 MHz
- **Switch chip:** Marvell Prestera 98DX3236
- **RAM:** 1 GB
- **Storage:** 1 GB NAND
- **OS:** SwOS / RouterOS v7 dual-boot, License 6
- **Ethernet:** 4× RJ45 10GbE (10G/5G/2.5G/1G/100M/10M)
- **USB:** 1× USB 3.0 Type-A, USB Power Reset
- **DC jack input:** 18–28V
- **Max power consumption:** 30W
- **Cooling:** Passive
- **IP rating:** IP20 (indoor installation only)
- **Operating temperature:** -20°C to +50°C
- **MTBF:** ~200,000 hours at 25°C
- **Monitors:** CPU temperature, PCB temperature, voltage
- **Mode button:** Yes
- **Certifications:** CE, EAC, RoHS — no FCC, no IC published
- **Included:** 24V 1.2A power adapter
- **Product code:** CRS304-4XG-IN
- **Suggested price:** USD 199.00
Note: 4× RJ45 10GbE copper only — no SFP, no SFP+, no fibre. IP20 — indoor installation only. Operating temperature upper limit +50°C — confirm ambient temperature at installation location. 30W max power draw — highest in this product batch. Passive PoE-in is NOT supported — DC jack only.
- Product code
- RS304-4XG-IN
- CPU architecture
- ARM 64bit
- Switch chip model
- 98DX2528
- Operating System
- RouterOS v7 only, License level 5
- Size of RAM
- 512 MB
- Storage size
- 32 MB, Flash
- Number of DC inputs
- 4 (2x DC jack, 2-pin terminal, PoE-In)
- DC jack input Voltage
- 12-57 V
- Max Power consumption
- 21 W
- Max power consumption without attachments
- 15 W
- PoE in
- 802.3af/at
- PoE in input Voltage
- 36-57 V
- 10/100/1000 Ethernet ports
- 1
- Dimensions
- 176 x 128 x 35 mm
- 2-pin terminal input Voltage
- 12-57 V
- Operating Temperature
- -40°C to +70
- 1G/2.5G/5G/10G RJ45 Ethernet ports
- 4
- RAM type
- DDR4
General information
All students who attend the Training can receive a free L4 license from MikroTik. Training should be at least three days long.
Students are allowed to take the certification test ONLY upon the attendance of individual training course, in the class, under the supervision of a MikroTik Certified Training Partner.
Each certification test consists of a pre-defined % of random questions (multiple choice and true/false) from specific question categories. Items also have a difficulty parameter. MTCNA test is generated from more straightforward questions, Advanced tests – from more difficult questions.
Only one attempt is allowed. The test must be finished within one hour. The passing grade is set to 60%. There are 25 questions in the exam.
Certificate numbers and RouterOS L4 licenses are assigned automatically by MikroTik. Students can see their certificates and generate license keys once logged into the account server. Printed documents from MikroTik cost USD 30 per piece. Shipping is not included.
Remote training sessions and certification exams are not allowed.
MikroTik Certification Test without prior attendance of particular MikroTik Training Session is not allowed.
Wireless Netware offers every participant a free RouterBOARD hAP-ac-lite.
The price includes class attendance, course materials, coffee breaks and lunch, "Only for local Training." The amount does not cover travel and accommodation expenses.
Please bring (very important): Laptop, power extension strip (10ft./3m) with five sockets, one long Ethernet cable (16ft./5m+) and several short Ethernet cables.
Cost: Early bird price for the course is $850. It is valid 15 days before the scheduled session, referring to the MikroTik Training website. The price will be $1050 after the early bird date. The price includes class attendance, course materials, coffee breaks and lunch," Only for local Training." The amount does not cover travel and accommodation expenses. Seating is limited to only four students. The seat is reserved and guaranteed just after the payment is received in full amount.
Certificates will only be valid for three years.
Become a consultant: It's simple if you have MTCNA (score 75%+) and at least one valid MikroTik Engineer level certificate (MTCRE, MTCWE, MTCTCE, MTCUME or MEDICINE) with score 75%+, apply by email with your mikrotik.com account name and fields of expertise and MikroTik will add you to the list. To stay on the consultant list, you will have to have valid certificates, participate in the MikroTik Forum and attend the ...M.U.M. events in your country conducting RouterOS case studies or workshops for the rest of the attendees.
By purchasing any of "Training Courses," you signify your agreement to these terms and conditions. If you do not agree to these Terms and Conditions, do not use this Site or Service. *WNT may modify this ...T.O.C. at any time and such changes will be effective on the date that such modified ...T.O.C. is posted on this Site. Use of the Site or Service after such changes have taken effect constitutes acceptance of all changes. Training classes, courses, and workshops may be subject to additional notices, class/course descriptions and policies (collectively "Additional Terms"), all of which are made part of this ...T.O.C. by this reference. If there is any conflict between this ...T.O.C. and Additional Terms posted for or applicable to a specific part of Sites such as training course description, the latter supersedes concerning using that particular part of the Site or accurate Service, please read these terms carefully, and keep a copy of them for your reference.
Returns:
All returns to WNT LTD. are handled as exchanges or store credit toward a future purchase. All returns must have a valid ...R.M.A. Number. To request an ...R.M.A. number, log into your account and select. ...R.M.A. from the options menu at the left of your screen. Identify the order and the product you wish to ...R.M.A. and follow instructions on the screen. Once your ...R.M.A. request is received, our ...R.M.A. The team will review your application and respond within two business days or sooner. All products returned for an exchange or store credit must be returned within 30 days of the invoice date. Defective products received by the customer as ...D.O.A. must be reported within seven days. Shipping errors, such as incorrect quantities or incorrect product received, must be reported within seven days. Products purchased from our Clearance Sale, Overstock, Open Box or Special Order (...S.P.O.), or non-stocked items, or custom-assembled products, cannot be returned or exchanged. Order shipments, which arrived damaged, must have a completed. "Damage Parcel Report" with ...U.P.S., USPS, or DHL. All products being returned must be shipped pre-paid. Returns sent C.O.D. will not be accepted and returned to the shipper at the customer's expense. If the repair is under warranty, WNT LTD. will return the product to the customer, within Canada-Post, using Standard Service at no charge. Expedited shipping methods, international shipping costs, customs fees, and duties are the customer's sole responsibility. For non-warranty returns, the customer is responsible for all related shipping costs. All products being returned for store credit must be in the original box with all accessories, warranty cards and instructional sheets, and new, unused condition with the factory seal intact. We do not accept returns for products that have been opened or have missing parts, manuals, warranty cards, or damaged when returned (unless it's ...D.O.A.). A 25% restocking fee will apply. To ensure that the product remains in returnable condition, do not use the product box as the shipping box. You must repackage in another box with appropriate packing materials. Products arriving in a product box will be returned to the shipper at the customer's expense. The customer is responsible for adequately packaging the products returned. Contents of the package not matching the information on the ...R.M.A. form will be cause for the return of ALL equipment.