The web interface is straightforward but if you don't have a solid understanding of Layer2/Layer3, VLANs, iptables, NAT and routing you will be overwhelmed with all the options

My rule is now changed, as on MikroTik devices, most open source products do not substantially improve upon RouterOS capability (though it may be easier to have a well understood interface)