MikroTik Router Configuration Basics

MikroTik Router Configuration

• MikroTik RouterOS is a flexible and versatile router for various network environments, from small home networks to large enterprise networks.
• Downloading the WinBox application from https://mikrotik.com/download is the first step.
• Open WinBox, double-click it, and connect to the router using the router's MAC address found in the "Neighbors" tab.
• Ensure the router's internet port (ethernet 1) is not connected to another port on the router.
• The default login credentials for MikroTik routers are admin (lowercase letters) and no password.
• To reset the router and return its configuration to default, select "Reset Configuration" and mark "No Default Configuration".
• Creating a bridge connects Ethernet and Wi-Fi interfaces for a local area network (LAN).
• Increasing Ethernet ports and Wi-Fi interfaces is done within the bridge interface settings.

Creating a Bridge

• The bridge feature is used for connecting multiple ports to a local network.
• Adding a bridge involves clicking the plus symbol and then clicking OK to create a new bridge.
• Using the bridge, Ethernet and Wi-Fi interfaces are merged.
• The Ethernet port 1 remains unchanged and becomes the internet interface.

Creating a Password

• A strong password with uppercase letters, lowercase letters, numbers, and symbols is recommended.
• The minimum password length is eight characters.

Setting up IP Address and DNS

• Assign a public DNS server to facilitate DNS requests from the local network (LAN).
• Set a static IP address with relevant subnet mask (e.g., 192.168.100.1/24) for the router.

Configuring DHCP Server

• The DHCP server automatically assigns IP addresses to devices on the local network.
• Configure the range of available IP addresses for the network appropriately (e.g., 192.168.100.2 to 192.168.100.254).
• Set a lease time for the IP addresses (e.g., 60 minutes).

Configuring Wi-Fi

• Activate the Wi-Fi interface (wlan1).
• Set band to 2 GHz.
• Configure and set the network name (SSID) and security settings. Specify country options.

Configuring NAT (Network Address Translation)

• NAT translates private IP addresses used within a local network to a public IP address needed for communication on the internet.
• Configure NAT using the srcnat rule to translate private source addresses to public addresses.

Firewall Rules

• Configure the firewall to control network traffic and only allow specific types of traffic.
• Create rules, defining which traffic should be allowed and dropped based on source and destination addresses.
• Create rules for outgoing and incoming traffic defining the protocol and ports to be allowed.