Top Banner
MikroTik RouterOS™ V2.6 Reference Manual MikroTik
437

MikroTik RouterOS™ V2.6 Reference Manual · MikroTik RouterOS™ V2.6 Reference Manual ix. Table of Contents Firewall Filters and Network Address Translation (NAT) IP Firewall Configuration

Oct 04, 2018

Download

Documents

ngokhuong
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
  • MikroTik RouterOS V2.6 Reference ManualMikroTik

  • Table of ContentsMikroTik RouterOS V2.6 Basic Setup Guide..............................................................................................1

    Introduction.........................................................................................................................................................2

    Setting up MikroTik RouterOS.....................................................................................................................4Downloading and Installing the MikroTik RouterOS.........................................................................4

    1. Download the basic installation archive file.................................................................................42. Create the installation media.........................................................................................................43. Install the MikroTik RouterOS software...................................................................................5

    Obtaining the Software License...............................................................................................................5Logging into the MikroTik Router..........................................................................................................7Adding Software Packages......................................................................................................................7Software Licensing Issues........................................................................................................................7

    Navigating the Terminal Console......................................................................................................................8

    Accessing the Router Remotely Using Web Browser and WinBox Console...............................................11Overview................................................................................................................................................11Starting the Winbox Console.................................................................................................................11Overview of Common Functions...........................................................................................................14Troubleshooting for Winbox Console...................................................................................................15

    Configuring Basic Functions............................................................................................................................16Working with Interfaces........................................................................................................................16

    Use of the 'setup' Command............................................................................................................17Adding Addresses..................................................................................................................................17Configuring the Default Route...............................................................................................................18Testing the Network Connectivity.........................................................................................................18

    Application Examples.......................................................................................................................................20Application Example with Masquerading.............................................................................................20Application Example with Bandwidth Management.............................................................................20Application Example with NAT............................................................................................................21

    MikroTik RouterOS V2.6 Reference Manual............................................................................................22

    Terminal Console Manual................................................................................................................................23Overview................................................................................................................................................23Contents of the Manual..........................................................................................................................23Overview of Common Functions...........................................................................................................23

    Lists.................................................................................................................................................24Item Names......................................................................................................................................25Quick Typing...................................................................................................................................25Help.................................................................................................................................................27Internal Item numbers.....................................................................................................................27Multiple Items.................................................................................................................................27

    General Commands................................................................................................................................27

    Scripting Manual..............................................................................................................................................32Overview................................................................................................................................................32Contents of the Manual..........................................................................................................................32Scripts....................................................................................................................................................32

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual i

  • Table of ContentsScripting Manual

    Network Watching Tool........................................................................................................................33Writing Scripts.......................................................................................................................................35

    Console scripting introduction........................................................................................................35Command........................................................................................................................................35Grouping level commands...............................................................................................................36Variables..........................................................................................................................................37Changing variable values................................................................................................................38Command substitution, return values..............................................................................................38Expressions......................................................................................................................................39Value types......................................................................................................................................41Colon commands.............................................................................................................................43Monitor commands..........................................................................................................................45Get commands.................................................................................................................................45More on syntax................................................................................................................................46

    SSH Installation and Usage..............................................................................................................................47Overview................................................................................................................................................47Contents of the Manual..........................................................................................................................47Installation.............................................................................................................................................47Hardware Resource Usage.....................................................................................................................47Suggested Windows Client Setup..........................................................................................................48Suggested UNIX/Linux Client Setup....................................................................................................48Additional Resources.............................................................................................................................48

    Links for Windows Client:..............................................................................................................48Other links:......................................................................................................................................48

    Software Package Installation and Upgrading...............................................................................................49Overview................................................................................................................................................49Features..................................................................................................................................................49Contents of the Manual..........................................................................................................................49Software Upgrade Instructions..............................................................................................................49Software Package Installation Instructions............................................................................................50Contents of the Software Packages........................................................................................................51

    System Software Package...............................................................................................................51Additional Software Feature Packages............................................................................................52

    Software Package Resource Usage........................................................................................................54Troubleshooting.....................................................................................................................................55

    Hardware.........................................................................................................................................56Basic Network Platform..................................................................................................................56

    TCP/IP protocol suite................................................................................................................56Special Protocols.......................................................................................................................56Caching Features.......................................................................................................................57

    Administration.................................................................................................................................57General......................................................................................................................................57Scripting....................................................................................................................................57

    Wireless Interfaces..........................................................................................................................57Synchronous....................................................................................................................................57Asynchronous Interfaces.................................................................................................................58Ethernet Interfaces...........................................................................................................................58ISDN Interfaces...............................................................................................................................58VoIP Interfaces................................................................................................................................58

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual ii

  • Table of ContentsSoftware Package Installation and Upgrading

    xDSL Interfaces...............................................................................................................................58HomePNA Interfaces......................................................................................................................59

    MikroTik RouterOS V2.6 Specifications Sheet..........................................................................................59

    Device Driver Management.............................................................................................................................60Overview................................................................................................................................................60Contents of the Manual..........................................................................................................................60Loading Device Drivers.........................................................................................................................60Removing Device Drivers......................................................................................................................62Notes on PCMCIA Adapters.................................................................................................................62List of Drivers........................................................................................................................................62

    ISA Drivers......................................................................................................................................62PCI Drivers......................................................................................................................................62

    Troubleshooting.....................................................................................................................................64

    General Interface Settings................................................................................................................................65Overview................................................................................................................................................65Contents of the Manual..........................................................................................................................65Interface Status.......................................................................................................................................65Interface Specific Settings.....................................................................................................................66

    Atheros 5GHz 54Mbps Wireless Interface.....................................................................................................67Overview................................................................................................................................................67Contents of the Manual..........................................................................................................................67Supported Network Roles......................................................................................................................67

    Wireless Client................................................................................................................................67Wireless Access Point.....................................................................................................................68Wireless Bridge...............................................................................................................................68

    Installation.............................................................................................................................................68License.............................................................................................................................................68System Resource Usage..................................................................................................................68Installing the Wireless Adapter.......................................................................................................68Loading the Driver for the Wireless Adapter..................................................................................68

    Wireless Interface Configuration...........................................................................................................69Station Mode Configuration..................................................................................................................70

    Monitoring the Interface Status.......................................................................................................70Access Point Mode Configuration.........................................................................................................71

    Registration Table...........................................................................................................................71Access List......................................................................................................................................72Registering the Access Point to another Access Point....................................................................73

    Troubleshooting.....................................................................................................................................73Wireless Network Applications.............................................................................................................74

    Wireless Client................................................................................................................................74Wireless Access Point.....................................................................................................................75Wireless Bridge...............................................................................................................................78

    [MTparent] Configuration......................................................................................................78[MTchild] Configuration........................................................................................................79

    Supported Hardware..............................................................................................................................79

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual iii

  • Table of ContentsBridge Interface................................................................................................................................................80

    Overview................................................................................................................................................80Contents of the Manual..........................................................................................................................80Installation.............................................................................................................................................80Hardware Resource Usage.....................................................................................................................80Bridge Setup..........................................................................................................................................80Port Settings...........................................................................................................................................81Bridge Monitoring.................................................................................................................................83Bridge Firewall......................................................................................................................................84

    Additional Bridge Firewall Resources............................................................................................84Troubleshooting.....................................................................................................................................84

    CISCO/Aironet 2.4GHz 11Mbps Wireless Interface.....................................................................................85Overview................................................................................................................................................85Contents of the Manual..........................................................................................................................85Wireless Adapter Hardware and Software Installation..........................................................................85

    Software Packages...........................................................................................................................85Software License.............................................................................................................................86System Resource Usage..................................................................................................................86Installing the Wireless Adapter.......................................................................................................87Loading the Driver for the Wireless Adapter..................................................................................87

    Wireless Interface Configuration...........................................................................................................87Wireless Troubleshooting......................................................................................................................89Wireless Network Applications.............................................................................................................89

    PointtoMultipoint Wireless LAN................................................................................................90PointtoPoint Wireless LAN........................................................................................................91

    Cyclades PC300 PCI Adapters........................................................................................................................94Overview................................................................................................................................................94Contents of the Manual..........................................................................................................................94Adapter Hardware and Software Installation.........................................................................................94

    Software Packages...........................................................................................................................94Software License.............................................................................................................................95System Resource Usage..................................................................................................................95Installing the Synchronous Adapter................................................................................................96Loading the Driver for the Cyclades PC300 PCI Adapter..............................................................96

    Interface Configuration..........................................................................................................................96Troubleshooting.....................................................................................................................................97RSV/V.35 Synchronous Link Applications...........................................................................................97

    Ethernet Interfaces.........................................................................................................................................100Overview..............................................................................................................................................100Contents of the Manual........................................................................................................................100Ethernet Adapter Hardware and Software Installation........................................................................100

    Software Packages.........................................................................................................................100Software License...........................................................................................................................100System Resource Usage................................................................................................................100Loading the Driver........................................................................................................................101

    Ethernet Interface Configuration.........................................................................................................101

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual iv

  • Table of ContentsEthernet over IP (EoIP) Tunnel Interface....................................................................................................104

    Overview..............................................................................................................................................104Contents of the Manual........................................................................................................................104Installation...........................................................................................................................................104Hardware Resource Usage...................................................................................................................104EoIP Interface and Protocol Description.............................................................................................104EoIP Setup...........................................................................................................................................105EoIP Application Example..................................................................................................................106

    FarSync X.21 Interface...................................................................................................................................108Overview..............................................................................................................................................108Contents of the Manual........................................................................................................................108Synchronous Adapter Hardware and Software Installation.................................................................108

    Software Packages.........................................................................................................................108Software License...........................................................................................................................108

    Synchronous Interface Configuration..................................................................................................108Troubleshooting...................................................................................................................................109

    Synchronous Link Applications.....................................................................................................................111MikroTik Router to MikroTik Router.................................................................................................111

    FrameRelay (PVC) Interfaces.......................................................................................................................113Overview..............................................................................................................................................113

    Frame Relay Installation on the MikroTik RouterOS...................................................................113Configuring Frame Relay Interface.....................................................................................................114

    Cyclades PC300 interface.............................................................................................................114MOXA C101 interface..................................................................................................................114Frame Relay PVC interface...........................................................................................................115

    Frame Relay Configuration Example with Cyclades Interface...........................................................115Frame Relay Configuration Example with MOXA Interface..............................................................116Frame Relay Troubleshooting..............................................................................................................117

    IP over IP (IPIP) Tunnel Interface................................................................................................................119Overview..............................................................................................................................................119Contents of the Manual........................................................................................................................119Installation...........................................................................................................................................119Hardware Resource Usage...................................................................................................................119IPIP Interface and Protocol Description..............................................................................................119IPIP Setup............................................................................................................................................119.............................................................................................................................................................120Additional Resources...........................................................................................................................120

    ISDN Interface................................................................................................................................................121Overview..............................................................................................................................................121ISDN Hardware and Software Installation..........................................................................................121

    Loading the ISDN Driver..............................................................................................................122ISDN Channels..............................................................................................................................122MSN and EAZ numbers................................................................................................................123

    ISDN Client Interface Configuration...................................................................................................123ISDN Server Interface Configuration..................................................................................................123Troubleshooting...................................................................................................................................124ISDN Examples...................................................................................................................................124ISDN Dialout.....................................................................................................................................124

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual v

  • Table of ContentsISDN Interface

    ISDN Dialin.......................................................................................................................................125ISDN Backup.......................................................................................................................................126

    ISDN Backup Description.............................................................................................................126Setting up ISDN Connection.........................................................................................................127Setting up Static Routes................................................................................................................127Adding Scripts...............................................................................................................................128Setting up Netwatch......................................................................................................................128

    MOXA C101 Synchronous Interface............................................................................................................129Overview..............................................................................................................................................129Contents of the Manual........................................................................................................................129Synchronous Adapter Hardware and Software Installation.................................................................129

    Software Packages.........................................................................................................................129Software License...........................................................................................................................130System Resource Usage................................................................................................................130Installing the Synchronous Adapter..............................................................................................130

    MOXA C101 PCI variant cabling..........................................................................................131Loading the Driver for the MOXA C101 Synchronous Adapter..................................................131

    Synchronous Interface Configuration..................................................................................................132Troubleshooting...................................................................................................................................133Synchronous Link Applications...........................................................................................................133

    MikroTik Router to MikroTik Router...........................................................................................134MikroTik Router to CISCO Router...............................................................................................135

    MOXA C502 Synchronous Interface............................................................................................................138Overview..............................................................................................................................................138Contents of the Manual........................................................................................................................138Synchronous Adapter Hardware and Software Installation.................................................................138

    Software Packages.........................................................................................................................138Software License...........................................................................................................................139System Resource Usage................................................................................................................139Installing the Synchronous Adapter..............................................................................................139Loading the Driver for the MOXA C502 Synchronous Adapter..................................................139

    Synchronous Interface Configuration..................................................................................................139Troubleshooting...................................................................................................................................141Synchronous Link Applications...........................................................................................................141

    MikroTik Router to MikroTik Router...........................................................................................141MikroTik Router to CISCO Router...............................................................................................143

    General Point to Point Settings......................................................................................................................146Overview..............................................................................................................................................146Contents of the Manual........................................................................................................................146Installation...........................................................................................................................................146Hardware Resource Usage...................................................................................................................147Local Authentication Overview...........................................................................................................147Local Authentication Management of P2P Users................................................................................147

    PPP Profile....................................................................................................................................147PPP Secret.....................................................................................................................................148

    Active Users.........................................................................................................................................148Local Accounting of PPP Users...........................................................................................................149Authentication using RADIUS Server.................................................................................................149

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual vi

  • Table of ContentsGeneral Point to Point Settings

    RADIUS Overview.......................................................................................................................149RADIUS Client Setup...................................................................................................................149RADIUS Client Monitor...............................................................................................................150RADIUS Parameters.....................................................................................................................150

    Authentication data sent to server (AccessRequest).............................................................150Data received from server (AccessAccept)..........................................................................151Accounting information sent to server(AccountingRequest)...............................................151

    RADIUS Servers Suggested..........................................................................................................152PPPoE Bandwidth Setting...................................................................................................................152PPP Troubleshooting...........................................................................................................................152RADIUS Server Configuration Example.............................................................................................152

    Point to Point Protocol (PPP) and Asynchronous Interfaces......................................................................155Overview..............................................................................................................................................155Contents of the Manual........................................................................................................................155Installation...........................................................................................................................................155Hardware Resource Usage...................................................................................................................155Serial Port Configuration.....................................................................................................................156PPP Server...........................................................................................................................................156PPP Client Setup..................................................................................................................................157Additional Resources...........................................................................................................................159

    Point to Point Protocol over Ethernet (PPPoE)...........................................................................................160Overview..............................................................................................................................................160

    PPPoE Installation on the MikroTik RouterOS............................................................................160PPPoE hardware resource usage...................................................................................................161PPPoE Client Setup.......................................................................................................................161PPPoE Server Setup (Access Concentrator).................................................................................162PPPoE bandwidth setting..............................................................................................................162PPPoE in a multipoint wireless 802.11b network.........................................................................163PPPoE Troubleshooting................................................................................................................163Additional Resources....................................................................................................................163

    Point to Point Tunnel Protocol (PPTP).........................................................................................................164Overview..............................................................................................................................................164Contents of the Manual........................................................................................................................164Installation...........................................................................................................................................164Hardware Resource Usage...................................................................................................................164PPTP Protocol Description..................................................................................................................165PPTP Client Setup...............................................................................................................................165PPTP Server Setup...............................................................................................................................166PPTP RoutertoRouter Secure Tunnel Example...............................................................................168Connecting a Remote Client via PPTP Tunnel....................................................................................171PPTP Setup for Windows....................................................................................................................172

    Links:.............................................................................................................................................172Sample instructions for PPTP (VPN) installation and client setup Windows 98se...................172

    Troubleshooting...................................................................................................................................173Additional Resources...........................................................................................................................173

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual vii

  • Table of ContentsPrismII Wireless Client and Wireless Access Point Manual......................................................................174

    Overview..............................................................................................................................................174Contents of the Manual........................................................................................................................174Supported Network Roles....................................................................................................................175

    Wireless Client..............................................................................................................................175Wireless Access Point...................................................................................................................175Wireless Bridge.............................................................................................................................175

    Installation...........................................................................................................................................175License...........................................................................................................................................175System Resource Usage................................................................................................................176Installing the Wireless Adapter.....................................................................................................176Loading the Driver for the Wireless Adapter................................................................................176

    Wireless Interface Configuration.........................................................................................................177Station Mode Configuration................................................................................................................178

    Monitoring the Interface Status.....................................................................................................179Access Point Mode Configuration.......................................................................................................179

    Registration Table.........................................................................................................................180Access List....................................................................................................................................181Registering the Access Point to another Access Point..................................................................181

    Network Scan.......................................................................................................................................182Logging of Prism Interface..................................................................................................................182Troubleshooting...................................................................................................................................183Wireless Network Applications...........................................................................................................183

    Wireless Client..............................................................................................................................183Wireless Access Point...................................................................................................................184Wireless Bridge.............................................................................................................................187

    [MTparent] Configuration....................................................................................................187[MTchild] Configuration......................................................................................................188

    Supported Prism II Hardware..............................................................................................................189

    RadioLAN 5.8GHz Wireless Interface..........................................................................................................191Overview..............................................................................................................................................191Contents of the Manual........................................................................................................................191Wireless Adapter Hardware and Software Installation........................................................................191

    Software Packages.........................................................................................................................191Software License...........................................................................................................................192System Resource Usage................................................................................................................192Installing the Wireless Adapter.....................................................................................................192Loading the Driver for the Wireless Adapter................................................................................193

    Wireless Interface Configuration.........................................................................................................193Wireless Troubleshooting....................................................................................................................196Wireless Network Applications...........................................................................................................196

    PointtoPoint Setup with Routing..............................................................................................196

    Virtual LAN (VLAN) Interface.....................................................................................................................197Overview..............................................................................................................................................197Contents of the Manual........................................................................................................................197Installation...........................................................................................................................................197Hardware Resource Usage...................................................................................................................197VLAN Interface and Protocol Description..........................................................................................197VLAN Setup........................................................................................................................................198VLAN Application Example...............................................................................................................199

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual viii

  • Table of ContentsVirtual LAN (VLAN) Interface

    Additional Resources...........................................................................................................................200Currently Supported Interfaces............................................................................................................200

    WaveLAN/ORiNOCO 2.4GHz 11Mbps Wireless Interface.......................................................................201Overview..............................................................................................................................................201

    Note! MikroTik does not guarantee support for Orinocco/Wavelan............................................201Contents of the Manual........................................................................................................................201Wireless Adapter Hardware and Software Installation........................................................................202

    Software Packages.........................................................................................................................202Software License...........................................................................................................................202System Resource Usage................................................................................................................202Installing the Wireless Adapter.....................................................................................................203Loading the Driver for the Wireless Adapter................................................................................203

    Wireless Interface Configuration.........................................................................................................203Wireless Troubleshooting....................................................................................................................205Wireless Network Applications...........................................................................................................205

    PointtoMultipoint Wireless LAN..............................................................................................205IP Network Configuration......................................................................................................206

    PointtoPoint Wireless LAN......................................................................................................207IP Network Configuration......................................................................................................208Testing the Network Connectivity..........................................................................................209

    PointtoPoint Wireless LAN with Windows Client...................................................................209IP Network Configuration......................................................................................................210Testing the Network Connectivity..........................................................................................211

    DHCP Client and Server................................................................................................................................212Overview..............................................................................................................................................212Contents of the Manual........................................................................................................................212Installation...........................................................................................................................................212Hardware Resource Usage...................................................................................................................212DHCP Description...............................................................................................................................212DHCP Client Setup..............................................................................................................................213DHCP Server Setup.............................................................................................................................213

    Static Leases..................................................................................................................................215Additional DHCP Resources...............................................................................................................215

    DNS Cache.......................................................................................................................................................216Overview..............................................................................................................................................216Contents of the Manual........................................................................................................................216Installation...........................................................................................................................................216Hardware Resource Usage...................................................................................................................216DNS Cache Description.......................................................................................................................216DNS Cache Setup................................................................................................................................216Monitoring DNS Cache.......................................................................................................................217Additional Resources...........................................................................................................................217

    Firewall Filters and Network Address Translation (NAT).........................................................................218Overview..............................................................................................................................................218Contents of the Manual........................................................................................................................218Firewall Installation.............................................................................................................................218Packet Flow through the Router..........................................................................................................218

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual ix

  • Table of ContentsFirewall Filters and Network Address Translation (NAT)

    IP Firewall Configuration....................................................................................................................219IP Firewall Common Arguments..................................................................................................220Logging the Firewall Actions........................................................................................................221Marking the Packets (Mangle) and Changing the MSS................................................................221Firewall Chains..............................................................................................................................222Firewall Rules................................................................................................................................223Masquerading and Source NAT....................................................................................................224Redirection and Destination NAT.................................................................................................225Understanding REDIRECT and MASQUERADE.......................................................................225

    Connection Tracking............................................................................................................................225Troubleshooting...................................................................................................................................226Additional Resources...........................................................................................................................226IP Firewall Applications......................................................................................................................226Basic Firewall Building Principles......................................................................................................227

    Example of Firewall Filters...........................................................................................................227Protecting the Router.....................................................................................................................228Protecting the Customer's Network...............................................................................................229Enforcing the 'Internet Policy'.......................................................................................................231Example of Source NAT (Masquerading).....................................................................................231Example of Destination NAT........................................................................................................232

    HotSpot Gateway............................................................................................................................................234Overview..............................................................................................................................................234Contents of the Manual........................................................................................................................234Installation...........................................................................................................................................235

    Software License...........................................................................................................................235Hardware Resource Usage...................................................................................................................235How MikroTik HotSpot Gateway Works............................................................................................235

    The Initial Contact.........................................................................................................................236The Servlet....................................................................................................................................236Authentication...............................................................................................................................236Address Assignment......................................................................................................................237Logging Out..................................................................................................................................237

    MikroTik HotSpot Gateway Setup......................................................................................................237HotSpot RADIUS Client Setup...........................................................................................................237

    RADIUS Parameters.....................................................................................................................238Authentication data sent to server (AccessRequest).............................................................238Data received from server (AccessAccept)..........................................................................238Accounting information sent to server(AccountingRequest)...............................................239

    HotSpot Profiles...................................................................................................................................239HotSpot Server Settings.......................................................................................................................240HotSpot User Database........................................................................................................................240HotSpot Cookies..................................................................................................................................242HotSpot StepbyStep User Guide.....................................................................................................242

    Planning the Configuration...........................................................................................................242Setup Example...............................................................................................................................243Optional Settings...........................................................................................................................244

    Customizing the Servlet.......................................................................................................................246Servlet Page Description...............................................................................................................246Variable Description......................................................................................................................246Examples.......................................................................................................................................247

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual x

  • Table of ContentsIP Addresses and Address Resolution Protocol (ARP)...............................................................................249

    Overview..............................................................................................................................................249Contents of the Manual........................................................................................................................249Assigning IP Addresses.......................................................................................................................249Address Resolution Protocol (ARP)....................................................................................................250Using the ProxyARP Feature............................................................................................................251Using Unnumbered Interfaces.............................................................................................................252Troubleshooting...................................................................................................................................253

    IP Pool Management.......................................................................................................................................254Overview..............................................................................................................................................254Contents of the Manual........................................................................................................................254Installation...........................................................................................................................................254Hardware Resource Usage...................................................................................................................254IP Pool Description..............................................................................................................................254IP Pool Setup.......................................................................................................................................254RADIUS settings.................................................................................................................................255Monitoring Used IP Addresses............................................................................................................255

    IPsec.................................................................................................................................................................256Overview..............................................................................................................................................256Contents of the Manual........................................................................................................................256Installation...........................................................................................................................................256Hardware Resource Usage...................................................................................................................257How IPsec Works................................................................................................................................257

    Encryption.....................................................................................................................................257Decryption.....................................................................................................................................257Internet Key Exchange..................................................................................................................257IKE Traffic....................................................................................................................................258

    IPsec Setup...........................................................................................................................................258Policy Settings...............................................................................................................................259Peer................................................................................................................................................260Presharedsecret.........................................................................................................................262Manual SA.....................................................................................................................................262Proposal.........................................................................................................................................263Installed SA...................................................................................................................................263Counters.........................................................................................................................................264

    Application examples...........................................................................................................................265IPsec setup between two RourerOS routers..................................................................................265IPsec Setup for Routing Between two Masquerading MikroTik Routers.....................................266IPsec Setup Between MikroTik and CISCO Routers....................................................................267

    Configuring RouterOS............................................................................................................267Configuring Cisco...................................................................................................................268Testing....................................................................................................................................268

    IPsec setup between RouterOS router and Windows SonicWall Client.......................................269Configuring RouterOS............................................................................................................270Configuring SonicWALL.......................................................................................................270Testing....................................................................................................................................274

    IP Telephony....................................................................................................................................................276IP Telephony Specifications................................................................................................................276

    Supported Hardware......................................................................................................................276

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual xi

    ##zzee_link_4_1029336638
  • Table of ContentsIP Telephony

    Supported Standards......................................................................................................................277Implementation Options................................................................................................................277

    IP Telephony Hardware and Software Installation..............................................................................277Software Packages.........................................................................................................................278Software License...........................................................................................................................278Hardware Installation....................................................................................................................278

    IP Telephony Configuration................................................................................................................278Telephony Voice Ports..................................................................................................................279Monitoring the Voice Ports...........................................................................................................279VoicePort Statistics.....................................................................................................................280Voice Port for Telephony cards.....................................................................................................281Voice Port for ISDN......................................................................................................................282Voice Port for Voice over IP (voip)..............................................................................................283Numbers........................................................................................................................................283Regional Settings...........................................................................................................................285Audio CODEC..............................................................................................................................286

    IP Telephony Accounting....................................................................................................................287IP Telephony Gatekeeper.....................................................................................................................289IP Telephony Troubleshooting............................................................................................................291IP Telephony Applications..................................................................................................................291Setting up the MikroTik IP Telephone................................................................................................292Setting up the IP Telephony Gateway.................................................................................................293Setting up the Welltech IP Telephone.................................................................................................294Setting up the MikroTik Router and CISCO Router...........................................................................296

    IP Traffic Accounting.....................................................................................................................................299Overview..............................................................................................................................................299Installation...........................................................................................................................................299Hardware Resource Usage...................................................................................................................299Traffic accounting setup......................................................................................................................300Traffic data description........................................................................................................................300Threshold settings................................................................................................................................300Traffic data display and collection.......................................................................................................301Traffic data analysis.............................................................................................................................301Additional Resources...........................................................................................................................302

    IP Packet Packer Protocol (M3P)..................................................................................................................303Overview..............................................................................................................................................303Contents of the Manual........................................................................................................................303Installation...........................................................................................................................................303Hardware Resource Usage...................................................................................................................303MikroTik Packet Packer Protocol Description....................................................................................303MikroTik Packet Packer Protocol Setup..............................................................................................304

    MikroTik Neighbor Discovery Protocol (MNDP))......................................................................................305Overview..............................................................................................................................................305Contents of the Manual........................................................................................................................305Installation...........................................................................................................................................305Hardware Resource Usage...................................................................................................................305MikroTik Discovery Protocol Description..........................................................................................305MikroTik Discovery Protocol Setup....................................................................................................306

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Reference Manual xii

  • Table of ContentsIP Route Management....................................................................................................................................307

    Overview..............................................................................................................................................307Contents of the Manual........................................................................................................................307Adding Static Routes...........................................................................................................................307Equal Cost Multipath Routing.............................................................................................................308Policy Routing.....................................................................................................................................309

    Application Example for Policy Routing......................................................................................311Additional Resources...........................................................................................................................312

    Services, Protocols, and Ports........................................................................................................................313Overview..............................................................................................................................................313

    WEB Proxy......................................................................................................................................................315Overview..............................................................................................................................................315Contents of the Manual........................................................................................................................315Installation...........................................................................................................................................315

    Software License...........................................................................................................................315Hardware Resource Usage...................................................................................................................315MikroTik Web Proxy Description.......................................................................................................316MikroTik Web Proxy Setup.................................................................................................................316Monitoring the Web Proxy..................................................................................................................316Access List...........................................................................................................................................318Direct Access List................................................................................................................................318Managing the Cache............................................................................................................................319Transparent Mode................................................................................................................................319Setup Example.....................................................................................................................................320Troubleshooting...................................................................................................................................320

    Queues and Bandwidth Management...........................................................................................................322Overview..............................................................................................................................................322Contents of the Manual........................................................................................................................322Installation...........................................................................................................................................322How Queues Work...............................................................................................................................323Configuring Simple Queues.................................................................................................................324Queue Types........................................................................................................................................324Setting Default Queue Type for the Interface......................................................................................325Configuring Queue Trees.....................................................................................................................326Troubleshooting...................................................................................................................................327Queue Applications..............................................................................................................................327

    Example of Emulating a 128k/64k Line........................................................................................328Example of Using Masquerading..................................................................................................330Example of Guaranteed Quality of Service...................................................................................331

    Additional Resources...........................................................................................................................332Links on ClassBased Queuing (CBQ):.......................................................................................332Links on Random Early Detection (RED):...................................................................................332More Complete Informatin about Traffic Cotrol:.........................................................................332

    Open Shortest Path First (OSPF) Routing Protocol....................................................................................333Overview..............................................................................................................................................333Contents of the Manual........................................................................................................................333Installation...........................................................................................................................................333Hardware Resource Usage...................................................................................................................333

    MikroTik RouterOS V2.6 Reference Manual

    MikroTik RouterOS V2.6 Refere