Mikrotik router

Mikrotik RouterCollected from Techtunes

-

. Mikrotik ?.Mikrotik Router ?, Mikrotik Router . Bandwidth Control Function . ARP(MAC) Bonding . DHCP Server Setup and Graphing . PPPoE Server PPPoE Client Configuration . Bandwidth Control Function

Mikrotik ?Mikrotik Router operating system. Router operating system Mikrotik Router Mikrotik Router Board RouterBOARD 450, RouterBOARD 450G, RouterBOARD 750GL, RouterBOARD RB 1100AH Mikrotik Router ?Mikrotik Router Intelligent Router. Mikrotik router Router Mikrotik Administration Mikrotik Router DHCP Server Router IP Bandwidth Control IP Bandwidth control Mail Bandwidth, Ping bandwidth, Voice Bandwidth Web proxy Web proxy ISP connection Load Balance/Bandwidth Marge ISP Auto Redundancy ( ) PPPOE Server Configure Dialer PPPOE Client configure BTCL Mikrotik Router USB wimax modem, USB mobile modem VPN Server VPN Client Configure Advance firewall configure Networking , IP Address, IP Class, Subnet, Subnet Mask Mikrotik Router Configure RB 450g Mikrotik Router Mikrotik Router graphical mode a configure winbox software Mikrotik Router (RouterBOARD) by default DHCP Server mode Configure Mikrotik Router Reset Winbox software download Install winbox Mikrotik Router ether port Straight cable LAN port a connect winbox connect to box ... icon IP address MAC Address show Mac Address login admin connect a click Password

Mikrotik router Reset New Terminal system reset Enter Press Confirm y press router reset winbox disconncet PC LAN unplug show LAN Connect show winbox Mikrotik Login Login Remove configuration a click Router disconnect Mikrotik Router Zero configuration Router Basic configure ISP IP address, Subnet mask, gateway, DNS Server IP address Private IP address block Menu IP > Address + (add) icon IP address, subnet mask, gateway address and DNS server address Address IP address subnet mask Interface ether 1 ( ether) Select Apply>Ok

Gateway Address Add IP>Routes> +(add) Gateway Apply>OK

DNS Server IP>DNS Setting- DNS Address Apply>OK

New Terminal ping WAN Side Configure Uplink Provider LAN Side Configure IP>Address>+(add) Button IP block (192.168.1.1/24) Interface list Ether choose ether5. ether Real IP ether ether IP>Firewall Firewall window NAT Tab +(add) button , Chain: scrnat Scr Address Private IP Block (192.168.1.0/24) Advance Tab Action=Masquerade Apply>OK

Mikrotik Router configure. 192.168.1.2, 192.168.1.3, 192.168.1.4 IP use gateway IP 192.168.1.1

Mikrotik Router Configure Mikrotik Router Mikrotik Router Bandwidth Control Function WAN (ether1) ISP Real IP, Gateway IP, DNS server IP LAN (ether5) Private IP block (192.168.1.0/24) Configure 192.168.1.2, 192.168.1.3, 192.168.1.4, 192.168.1.5, 192.168.1.6 Bandwidth Control Mikrotik Router clock winbox Mikrotik Router a Login System>Clock Date, Time and Manual Time Zone Apply>OK Queues Simple Queues Tab + (add)

Name: ( )Target Address: ( Bandwidth control )Target Upload and Target Download: upload speed download speed. Custom value , lower case k (k = kilo bit, K= kilo byte) Setting bandwidth download 256k 32 KB speed download Burst Limit (optional) : bandwidth ? Burst Threshold (optional): Burst bandwidth Burst Time (optional): Burst bandwidth value. - *=Time (optional) : Bandwidth (256k/256k) Time Slot create , - 00.00.00-07.59.59 queue time slot - 08.00.00-15.59.59 and 16.00.00-23.59.59. Bandwidth loop Days (optional): Bandwidth settings Advance Tab

Parent (optional): Bandwidth queue - Commercial, Marketing, Technical queue queue queue queue create (Commercial, Marketing, Technical) Select , Child queue Parent queue bandwidth limit cross - Commercialqueue Bandwidthlimit 512k/512k Child queue 512k/512k Bandwidth Priority(optional) : Bandwidth Priority. By default 8. Bandwidth Priority 1 Total Bandwidth 1 Mbps. 256k/256k 256kbps Bandwidth queue Bandwidthcrisis queue Bandwidth queue priority = 1 Apply>OK queue queue queue Bandwidth control set Unlimited Bandwidth queue disable(x)

optional Name, Target Address, Upload and download limit Bandwidth control Advance level Function

Mikrotik Router clock set Router restart router Clock reset queue time slot clock Function Router Router restart Mikrotik Router Clock ( ) Mikrotik IP>NTP Client (This option availability depend on the RouterOS version)

Primary NTP Server NTP Server NTP Server NTP Server Apply>OK Mikrotik Router, restart NTP Server Mikrotik Router Firewall configure IP>Firewall Filter Rules Tab Add (+) Parameter Chain=InputProtocol= 1(icmp)Action=accept Router Chain=InputSrc Address=A Real IP/Real IP Block ( , Router winbox ) 115.144.0.0/21 , accept Action=accept NTP Server , Add

drop Chain=InputSrc. Address= ! 115.144.0.0/21 (! Not)Action=drop Router Access ! 115.144.20.0/21 115.144.20.0/21 Mikrotik Firewall accept Accept Rules and Drop Rule sequence mix Rules accept Rules Security Mikrotik admin Mikrotik Create/Change/Permission Change/Password create or change System>User Users> + (add), user name and Group (full, write, read) allowed Address / Mikrotik a login system default user (admin) password set disable

ARP (MAC) Bonding: Administration Router Client IP MAC address Router bonding , Bandwidth use ARP Bonding. IP>ARP Router connected MAC address D (Dynamic) MAC Static MAC static Make static D MAC static Lan Interface MAC static WAN Interface IP MAC static

LAN Interface(ether) IP er MAC static Interface LAN Interface(ether) double-click , ARP: Reply-only Apply>Ok Router Client MAC bonding! MAC Free LAN interface(Ether) ARP: Enable IP>ARP Disable(x) Router connected D MAC Free (dynamic)

Mikrotik Router DHCP Server LAN Side Private Block Static IP static IP dynamic IP provide ( Router ) Mikrotik Router-a DHCP Server Configure DHCP Server Configure Private IP block ( ) ThenIP>DHCP Server DHCP Tab DHCP Setup LAN Interface Next , By default Mikrotik Next Finish Row DHCP Server Lease tab Host lease , Host name ? lease time

MRTG Graph:Mikrotik Router Built-in graphing system queue Bandwidth usage queue Upload or Download Bandwidth Graph Tools>graphing Interface Rules Add (+) Field All Allow address Allow address 0.0.0.0/0 Apply>OK queues Queue Rules

? Mikrotik Router store Mikrotik browse Mikrotik Static Real IP Mikrotik Router WAN Side Static Real IP browse Mikrotik Router Graph

Mikrotik Router Built-in Graphing system Bandwidth usage Server - Cacti.

PPPoE Client ? PPPoE Dialer BTCL Broadband Connection ISP Client PPPoE Dialer connection PPPoE Client. PPPoE Server Connected () - connection Mikrotik Router Mikrotik Router WAN (Internet) side a Static IP PPPoE Client configure Mikrotik Router BTCL Broadband Internet Connection PPPoE Connection PPPoE Client Configuration:Mikrotik Router PPPoE Client Configure Mikrotik Router Interface PPPoE Client

General Tab

Dial Out Connection Password

Apply>OK Router Password Connection dial LAN Router User PC PPPoE Server: PPPoE client PPPoE Server Connected Mikrotik Router PPPoE Server Mikrotik Router PPPoE Server Client PPPoE client Dial PPPoE Server Connected Mikrotik Router PPPoE Server Router PPP PPPOE Server (+) Service Name: PPPoE Server Interface: PPPoE Server

Router PPPOE Server Create create User Profile Creation: PPP profile add (+) window General field

Name: Local Address: Router DNS Server: DNS server Protocol

Limits Rate Limits Upload/Download kbps 1 Mbps Upload and Download kbps Lower case k

Apply>OK PPPOE Client / Connect User Creation: PPP secret (+) Field

Name: PPPoE Client Client connected Password: PPPoE Client password. Password Client Connected Service: service pppoe Caller ID: password connect Client MAC address MAC bonding Profile: pppoe Bandwidth allocation Remote Address: Apply>OK Mikrotik Router Connected Password PPPoE Dialer Mikrotik Router Connected Bandwidth Firewall: Mikrotik Router Firewall Rules customize rules Firewall rules , , / winbox Mikrotik Router IP>Firewall>Filter Rules Add (+) Rule-1:Chain: InputSrc Address: 203.99.15.100/30 ( WAN / ) Action Accept Apply>OK Filter Rules

Add (+) , Rule-2:Chain: InputSrc Address: 192.168.1.0/24 ( LAN )Action: AcceptApply>OK. WAN / LAN Unauthorized IP Access Add (+) ,Rule-3:Chain: InputSrc Address: ! 203.99.15.100/30Action: DropApply>OK.Rule-4:Chain: InputSrc Address: !192.168.1.0/24Action: DropApply>OK

203.99.15.100/30 192.168.1.0/24 / brute force attack , - , - - 192.168.1.0/24 3129 3129 , Mikrotik Router Filter rules section Input, Output and Forward Chain Random Action Chain Accept