MikroTik is a Latvian network company .The router OS they ...

MikroTik is a Latvian network company .The router OS they created provides extensive

stability, controls, and flexibility for all kinds of data interfaces and routing. This

documentation provide a brief introduction about MikroTik router os, and basic skills about

how to set a MikroTik router OS.

You can download the Mikrotik router os in below site.

https://mikrotik.com/download

Choose X86 framework. Download the version you need.

Create a new virtual machine.

Choose Linuxubuntu

The disk type should be IDE.

Other settings set as default. Add the ISP file when finish setting.

Choose the NIC from NAT to a host mode NIC, as you can see the NIC I choose is subenet

192.168.10.0/24

Power on the machine, then you can see below.

Press A to select all features.

Then press I start install the system.

Now start install the OS.

When finish install the OS, you will see the login interface, default username is admin, no

password.

After login the OS, you will see below.

You can configure the MikroTik Router OS via a software named as Winbox.

The winbox will detect the Router even you didn’t configure the IP address. By mac address,

you can also login the OS.

Username admin, password leave blank, and when login the system, you can see below

interface.

Check the interface via Interfaces

Go to IPaddress to set up IP address for interfaces.

In this test I set eth1 as 192.168.10.100/24

Test ping from local pc, and try to telnet from local.

Test environment is about how to set up a site-to-site IPSec VPN between hillstone and

MikroTik. Topology as below

Interface information in below.

Set up a default routing for MikroTik.

Test the connectivity between hillstone and MikroTik.

IPSec VPN configuration in hillstone side.

Configuration in MikroTik side. First set up a IPsec policy, this actually is the phase 2 of the

VPN. As you can see in below, defined the proxy id in each side, choose the phase 2 proposal.

Phase 2 proposal’s name is hillstone, authentication use MD5, encryption as 3des, group2.

Set up a IPsec peer. This step actually is the phase 1 of IPsec VPN as in hillstone. As you can

see in below, set the peer address, authentication method as PSK, encryption aes-256,hash

md5, dh group 2.

After all these steps you can check the SAs in installed SAs. Check the SA in both sides.

Test the connectivity between two sides.

Check the packet encryption.