Just a random note... there are very limited site-to-site scenarios where the IPSec offload will actually kick in. I wasn't able to get offload working for any kind of remote access scenario, meaning it's not usable as a VPN (unaccellerated strong crypto on the MIPS is < 10 Mbps)

Ubiquity would absolutely own this router space if they made a follow up to the ERL with fully offloaded IPSec for stronger crypto.