MikroTik CCR2004-1G-12S+2XS 25G SFP28 Router

A 1U router built for 10G and 25G fibre uplinks

The CCR2004-1G-12S+2XS is a rack-mount router from MikroTik that puts twelve 10G SFP+ cages, two 25G SFP28 cages and one 10/100/1000 Ethernet port in a 443 x 224 x 44 mm 1U chassis. MikroTik positions it as its router with the strongest single-core performance at the time of the datasheet, aimed at single-tunnel VPN work and BGP feed processing, and states that its performance is on par with the older CCR1009 and CCR1016 routers.

Inside is an AL32400 quad-core ARM 64-bit CPU at 1700 MHz, 4 GB of RAM and 128 MB of NAND storage running RouterOS v7. Two AC inputs give a redundant power arrangement, which matters for a device that typically sits at the edge of a data hall, an ISP point of presence or a campus core.

Technical specifications

Values below come from the MikroTik datasheet and product page for CCR2004-1G-12S+2XS; any row that disagreed with the datasheet was dropped.

Throughput measured by MikroTik for this router (AL32400 All port test (CCR2004-1G-12S+2XS)), RFC2544 with Xena equipment:

Reading the numbers: the fourteen fibre cages add up to 170 Gbps of port capacity in one direction (derived: 12 x 10G plus 2 x 25G), far more than the CPU forwards when rules are applied. The measured table shows routing in the fast path reaching 38116 Mbps at 1518 bytes, while adding 25 IP filter rules lowers the same test to 14303.7 Mbps and, at 64 bytes, to 636.3 Mbps. Size the router for the packet size and rule set it will really see, not for the port count, and keep heavy firewall work on traffic that must be inspected.

Port layout, CPU and IPsec figures from the datasheet

• 12 x 10G SFP+ and 2 x 25G SFP28 cages plus one gigabit Ethernet port; the datasheet pairs it with the CRS317-1G-16S+RM, CRS312-4C+8XG-RM and CRS326-24S+2Q+RM multiport switches.
• Quad-core AL32400 CPU at 1700 MHz with 4 GB RAM; the page lists the 4 GB as ECC memory.
• Dual redundant AC inputs, 100-240 V, with two fans and CPU, PCB and voltage monitoring.
• Hardware-accelerated IPsec: 3400.3 Mbps at 1400-byte packets in a single AES-128-CBC + SHA1 tunnel, and 3382.4 Mbps across 256 tunnels (datasheet table).
• RouterOS v7 with licence level 6, so the full routing and firewall feature set is available.

Choosing and ordering the CCR2004-1G-12S+2XS

The order code is the complete model name, CCR2004-1G-12S+2XS: 1G is the single Ethernet port, 12S+ the SFP+ count and 2XS the SFP28 count. The kit contains two IEC power cords, a rack-mount bracket and a fastening set. SFP+ and SFP28 transceivers or DAC cables are separate items, so confirm the optics type and reach for each link before requesting a quotation.

First power-up and rack installation

For the first connection MikroTik instructs you to plug a PC into the Ethernet1/Boot port, set the PC to 192.168.88.2/24 and open http://192.168.88.1 or WinBox; the default user is admin without a password. The quick guide asks for RouterOS v7.9 or later for regulatory compliance, states that the device is for indoor use and professional installation, and classes it as Class A equipment. The EU declaration of conformity cites EN 55032, EN 55035 and EN IEC 62368-1.

Where it fits in Gulf networks

Typical placements are data-centre aggregation, ISP edge with BGP sessions, and the core of a large campus or industrial park where several 10G switches uplink at once. The tested ambient range of -20 to 60 degrees C and IP20 rating mean the router belongs in a ventilated rack or air-conditioned equipment room; a hot, dusty plant floor would need an enclosure with proper cooling.

Information to send with an RFQ for the MikroTik CCR2004-1G-12S+2XS 25G SFP28 Router

Network hardware is easier to quote correctly when the application is clear. For the MikroTik CCR2004-1G-12S+2XS 25G SFP28 Router, tell us how many sites or users it will serve, the WAN connections at each site (fibre, DSL, LTE or microwave) and the throughput you expect with firewall and VPN rules active, because encrypted throughput is usually well below the headline routing figure.

• Quantity, and whether spare units are needed for critical sites.
• Power arrangement: included adapter, PoE input or DC supply from a site battery.
• Optics: the SFP or SFP+ modules and fibre type, single-mode or multimode, if fibre ports will be used.
• Mounting: desk, wall, DIN rail, pole or 19-inch rack, and any enclosure needed outdoors.

If the device is replacing existing equipment, the current configuration or a short description of the network layout helps confirm that the replacement supports the same features.

Related items and documents

Related items named in the datasheet are the CRS317-1G-16S+RM, CRS312-4C+8XG-RM and CRS326-24S+2Q+RM switches. For smaller sites, browse the industrial communications range.

The datasheet PDF is attached. Seven Star LLC can quote CCR2004-1G-12S+2XS; share the quantity and destination, and confirm any regional variant.

Frequently asked questions

How many 25G ports does the CCR2004-1G-12S+2XS have?

Two SFP28 cages at 25G, alongside twelve 10G SFP+ cages and one 10/100/1000 Ethernet port.

Does it have redundant power?

Yes. It has two AC inputs rated 100-240 V, which the datasheet describes as dual redundant power supply.

Which operating system does it run?

RouterOS v7 with licence level 6; 4 GB RAM and 128 MB NAND storage.

What is the IPsec throughput?

The datasheet table lists 3400.3 Mbps for a single AES-128-CBC + SHA1 tunnel at 1400-byte packets, with hardware acceleration.

Are transceivers included?

No. The kit lists two IEC cords, a rack-mount bracket and a fastening set; SFP+ and SFP28 modules are bought separately.