MikroTik CRS Series Switches: CRS326 vs CRS328 vs CRS520 (Used Market Guide)

Aug 07 , 2026 1

Quick answer: MikroTik's CRS (Cloud Router Switch) series is the RouterOS-powered switch line: CRS112 and CRS326 for Gigabit access, CRS328 for PoE and SFP campus roles, CRS326-24S+2Q for 10G aggregation, and CRS520 for 40G spine work. Every unit runs RouterOS (the license is embedded in the hardware, so a used unit is fully licensed) and every tier is a solid, low-cost used-market buy — we stock tested CRS326, CRS328 and CRS520 units today.

This guide is for buyers who know MikroTik routers but not the switch line, or who found a "CRS" listing and want to know what they are actually getting. The CRS family is easy to misjudge because the name is cryptic, the models overlap on price, and the RouterOS license question confuses almost everyone buying used for the first time. We cover the lineup tier by tier, what each model is for, what the embedded RouterOS license means on the used market, and the exact checks to run before you pay. You can jump straight to the used MikroTik equipment page to see current CRS stock.

MikroTik CRS Lineup at a Glance

All CRS switches run RouterOS — the same operating system as MikroTik's routers — with the switching done by dedicated switch chips. That combination is exactly why the series exists: switch hardware with full RouterOS features instead of a limited web-only switch. The lineup tiers look like this:

One naming note: CRS devices are part of MikroTik's RouterBOARD hardware family, and they run RouterOS. The separate CSS line (CSS326, CSS610, etc.) runs SwOS — a simpler web-only operating system with no routing. When a listing says "CRS," you are getting RouterOS; when it says "CSS," you are not.

Entry Level: CRS112-8G-4S-IN

The CRS112-8G-4S-IN is the smallest rackable path into the CRS family: 8 Gigabit RJ45 ports, 4 SFP fiber ports, fanless, and small enough for a desk or a wall. It carries RouterOS Level 4 — enough for VLANs, a few routed networks, and firewall rules — and its whole job is cheap, silent, manageable switching for small offices, retail sites, and remote branches.

On the used market the CRS112 is almost disposable in price, which makes it the ideal test unit for RouterOS if you have never run it: MikroTik CRS112-8G-4S-IN units we stock are port-tested and shipped with a wiped, current RouterOS configuration.

Standard Access: CRS326-24G-2S+RM

The CRS326-24G-2S+RM is the workhorse of the entire CRS line: 24 Gigabit RJ45 ports, 2 SFP+ 10G uplinks, rack-mount 1U, RouterOS Level 5. It is the direct answer to "cheap 24-port managed switch with full routing features," and it is the model you will see most often on the used market — which means the deepest price discount and the easiest parts/support situation.

For a typical wiring closet — 20-24 access drops, a 10G uplink to the aggregation switch — this is the sweet spot. We stock the MikroTik CRS326-24G-2S+RM as our standard access-layer recommendation. If you need the same switch in a fanless desktop form factor, the CRS326-24G-2S+IN is the identical port layout in the small chassis.

PoE Access: CRS328-24P-4S+RM

The CRS328-24P-4S+RM takes the 24-port access role and adds PoE-out on every copper port (802.3af/at) plus 4 SFP+ 10G uplinks, all at RouterOS Level 5. That makes it the one-box answer for camera estates, IP phone fleets, and Wi-Fi deployments — no separate PoE injectors, no second switch for powered devices.

Used CRS328-24P units are in strong demand precisely because PoE access is such a common project, and they are one of the best-value PoE buys on the used market versus Cisco 2960X/9300-class pricing. Before purchase, verify the PoE budget against your powered devices — a camera-and-AP load is typically fine, but a fully loaded 24-port PoE budget needs the correct power supply fitted. Check current stock on the MikroTik CRS328-24P-4S+RM page.

SFP Campus Access: CRS328-4C-20S-4S+RM

If your access layer is fiber rather than copper, the CRS328-4C-20S-4S+RM is the matching platform: 20 SFP 1G fiber ports, 4 combo ports that accept either SFP or 10G SFP+, and 4 dedicated SFP+ 10G uplinks — again at RouterOS Level 5. It is the classic choice for campus risers, industrial yards, and ISP-style builds where runs exceed 100 meters and copper is not an option.

The used-market value proposition here is simple: 24 fiber ports plus 10G uplinks for less than the price of the optics on a comparable Cisco access switch. We carry the MikroTik CRS328-4C-20S-4S+RM tested and ready for fiber builds.

10G Aggregation: CRS326-24S+2Q+RM and CRS326-4C+20G+2Q+RM

Above the Gigabit tiers sit the two 10G aggregation platforms. The CRS326-24S+2Q+RM offers 24 SFP+ 10G ports with 2 QSFP+ 40G uplinks — the natural aggregation switch for a stack of Gigabit access switches, and the cheapest way on the used market to put real 10G in a campus. The CRS326-4C+20G+2Q+RM instead pairs 20 multi-gig 2.5G RJ45 ports with 4 SFP+ and 2 QSFP+ 40G — the answer for Wi-Fi 6/7 access points and modern desktops that outgrow 1G but do not need 10G on every drop.

Used 10G MikroTik pricing is dramatic: a CRS326-24S+2Q typically costs a small fraction of a comparable enterprise 10G aggregation switch, and 40G uplinks give you headroom into a spine later. For server top-of-rack duties, the 24-port SFP+ density handles a 24-server row comfortably, and the 40G uplinks keep the spine simple.

40G Spine: CRS520-4XS-16XQ-RM

At the top of the CRS stack sits the CRS520-4XS-16XQ-RM: 16 QSFP+ 40G ports plus 4 SFP+ 10G, 1U, RouterOS Level 6 — the full license. It is the spine switch for small data centers and serious campus cores: 16x 40G in a single rack unit, with each QSFP+ port usable as 4x 10G breakout, which effectively gives 64+ 10G ports of spine capacity.

Used CRS520 units appear less often than the Gigabit tiers, and they are the biggest single CRS purchase — worth the extra diligence. Breakout cables, firmware state, and the fan noise profile all matter. As a used-market rule of thumb: if your plan is a spine-leaf fabric with 10G servers, the CRS520 is the cheapest genuine 40G spine you can build; if your plan is one wiring closet, an access-tier CRS is the right spend instead.

RouterOS on CRS: What the License Means

The single most misunderstood fact about buying used MikroTik is the license. RouterOS licenses are embedded in the device — not sold as separate support subscriptions like Cisco Smart Net. When you buy a used CRS, the license comes with the hardware: CRS112 units carry Level 4, CRS3xx units (CRS326/CRS328) carry Level 5, and the CRS520 carries Level 6. There is nothing to transfer, renew, or pay for, and RouterOS updates stay free for the life of the hardware.

What you do need to check is that the unit was not tampered with: run /system license print in Winbox or the CLI and confirm the level matches the model. A CRS326 showing Level 4, or a unit whose serial does not match the sticker, is a red flag. On the feature side, note that CRS switches hardware-offload Layer 2 switching (VLAN switching runs on the switch chip at line rate), while routing, firewall, and other Layer 3 work runs on the CPU — fine for a few routed VLANs, not for heavy routing loads.

Choosing the Right CRS for Your Project

Three questions decide the model:

1. Copper or fiber access? All-copper wiring closets → CRS326-24G-2S+RM (or CRS328-24P for PoE). Fiber risers and runs over 100m → CRS328-4C-20S-4S+RM. Anything mixing both → the combo ports on the CRS328-4C handle it.

2. Does the plan include 10G or multi-gig? Server racks or 10G trunks → CRS326-24S+2Q+RM. Wi-Fi 6/7 AP fleets or premium desktops → CRS326-4C+20G+2Q+RM for 2.5G ports. A future 40G spine → any CRS3xx with QSFP+ uplinks reaches it.

3. Is this the whole network or a leaf? Single-site switching → an access-tier CRS plus the edge router does everything. A growing fabric → pair access CRS switches with a CRS520 spine, and put the heavy routing on a Cloud Core Router — the CCR2004-1G-2XS-PCIe is our recommended routing companion when rack space is tight.

Buying Used MikroTik CRS: The Checklist

Used CRS hardware is generally robust — fanless options mean fewer moving parts — but four checks protect you:

1. Verify the license level. /system license print must match the model (L4 on CRS112, L5 on CRS3xx, L6 on CRS520). The license is the value in a used unit; do not buy sight-unseen.

2. Confirm the RouterOS version and reset state. Current-generation units run RouterOS 7. A unit on old 6.x firmware should be upgradeable for free, but confirm it boots and resets cleanly. The unit should arrive with a factory configuration, never someone else's production setup.

3. Test the ports, optics, and PoE budget. All copper and SFP+ ports should be exercised before shipment; on PoE models the 24-port budget needs the correct PSU. A legitimate refurbisher will share test records.

4. Check the warranty terms. Every unit at LinkNewNet is tested before shipment and carries a free 3-month warranty, extendable to one year — the same terms across our used MikroTik equipment range.

If your project also needs routing or wireless at the edge, the same used-market logic applies to MikroTik's Cloud Core Router line — including the PCIe card form factor we stock — all RouterOS-managed and all testable under the same warranty.

Ready to price a CRS build? The used MikroTik equipment page lists current CRS stock, or contact us and we will map your port counts to the cheapest tier that actually fits.

FAQ

Q: What is the difference between MikroTik CRS and RouterBOARD?

RouterBOARD is the umbrella brand for all MikroTik hardware — CRS switches, CCR routers, and the small hEX/RB units are all RouterBOARD products. CRS (Cloud Router Switch) is the switch-focused family within it, running RouterOS with hardware switch-chip support. The separate CSS family runs SwOS, a simpler web-only operating system without routing.

Q: Can a used MikroTik CRS switch do routing?

Yes. CRS switches run full RouterOS, so they route, firewall, and run OSPF/BGP — but Layer 3 is CPU-processed while Layer 2 switching runs on the switch chip. That makes a CRS excellent for a few routed VLANs and terrible for heavy routing loads. For serious routing, pair the switch with a Cloud Core Router instead.

Q: Are used MikroTik CRS switches reliable?

Yes — CRS units are simple, rugged designs, and the fanless models have no moving parts to fail. The realistic risks on the used market are a tampered RouterOS license, unverified ports, and missing power supplies on PoE models, all of which a tested unit from a refurbisher with a written warranty covers.

Q: What RouterOS license comes with a used CRS switch?

The license is embedded in the hardware and comes with the unit: Level 4 on CRS112, Level 5 on CRS326/CRS328, and Level 6 on the CRS520. There is nothing to transfer or renew, and RouterOS updates remain free. Verify with "/system license print" before you buy.

Q: What warranty comes with used MikroTik gear from LinkNewNet?

Every used MikroTik unit ships with a free 3-month warranty covering tested functionality, extendable to one year. Units are port-tested, firmware-verified, and factory-reset before shipment, and we can share test documentation on request.