The Book - networking:mikrotik

dhcp_option

Anonymous (anonymous@undisclosed.example.com) — 2020-05-03T00:50:37+00:00

Add DHCP Option How to configure Mikrotik DHCP Server for Cisco Phone TFTP option 1. Change your TFTP server IP in to hex code. You can use this online tool. 10.0.2.12 becomes 0x0A00020C 2. Now configure Mikrotik RouterOS : /ip dhcp-server option add code=150 name=ciscotftp value=0x0A00020C

gre_and_ipsec

Anonymous (anonymous@undisclosed.example.com) — 2016-08-22T21:49:42+00:00

hairpin_nat

Anonymous (anonymous@undisclosed.example.com) — 2021-05-19T17:30:09+00:00

Hairpin NAT http://wiki.mikrotik.com/wiki/Hairpin_NAT Interfaces from ether1 to ether5 are in the bridge with IP address 192.168.0.254. Ether10 is a WAN port In the below network topology a web server behind a router is on private IP address space, and the router performs NAT (dst-nat) to forward traffic which was destined to its public IP address, to the web server behind it (on local network).

intro

Anonymous (anonymous@undisclosed.example.com) — 2023-04-09T15:58:54+00:00

Mikrotik * Check and change PIN on LTE card * Add DHCP option * Rougue DHCP server disable * Torrent trackers address list * Reinstalling Mikrotik router (forgotten password) * Mikrotik wireless with dual band / dual SSID / multiple VLANs VPN * IPsec tunnel Mikrotik to Linksys BEFVP41 * IPIP with IPsec transport Mikrotik to Mikrotik * IPsec tunnel - Windows client to Mikrotik * IPsec tunnel2 - Windows client to Mikrotik - 2 * L2TP / IPsec client RADIUS (NSP) EAP autenthi…

ipip_with_ipsec_transport_mikrotik_to_mikrotik

Anonymous (anonymous@undisclosed.example.com) — 2016-02-18T12:35:12+00:00

IPIP tunnel with IPsec transport [Mikrotik to Mikrotik] Check the differences between IPsec tunnel and IPsec transport. Assumptions: First location Mikrotik Router1 ----------------------- Second location Mikrotik Router2 Private network address 192.168.0.0/24

ipsec_and_radius

Anonymous (anonymous@undisclosed.example.com) — 2017-03-01T06:27:36+00:00

L2TP / IPsec and Wireless client RADIUS (NSP) EAP autenthication

ipsec_tunnel_-_windows_client_to_mikrotik

Anonymous (anonymous@undisclosed.example.com) — 2016-02-18T12:38:42+00:00

IPsec tunnel - Windows client to Mikrotik Check the differences between IPsec tunnel and IPsec transport. Assumptions: We have a central location [HQ] connected to internet via Mikrotik router. Rourer has either a fixed IP or some dynamic DNS auto update script. Let's assume that we are using the ChangeIP service and our router can be found on internet by

ipsec_tunnel_mikrotik_to_linksys_befvp41

Anonymous (anonymous@undisclosed.example.com) — 2016-03-08T12:11:24+00:00

IPsec tunnel [Mikrotik to Linksys BEFVP41][Mikrotik to Mikrotik] Check the differences between IPsec tunnel and IPsec transport. Assumptions: First location Mikrotik RB1000 Second location Mikrotik RB1000 Third location Linksys BEFVP41 Private network address

ipsec_tunnel2_-_windows_client_to_mikrotik_-_2

Anonymous (anonymous@undisclosed.example.com) — 2015-01-16T21:47:54+00:00

mtik_reinstall

Anonymous (anonymous@undisclosed.example.com) — 2016-03-30T06:45:40+00:00

Reinstalling Mikrotik router (forgotten password) * PDF [tutorial] by Chris Sutherland / (original location - link )

private_public_en

Anonymous (anonymous@undisclosed.example.com) — 2021-05-20T05:36:54+00:00

Public service on a private network Connecting to the Internet opens up a whole range of new and interesting possibilities for users. From “ordinary” surfing the Internet, receiving and sending e-mails through communication through various public online services and watching streaming content, to the ability to provide some of the services to the public. This does not necessarily mean opening access to the masses, but primarily launching one of the privately hosted services (web server, video s…

private_public

Anonymous (anonymous@undisclosed.example.com) — 2021-05-21T11:19:13+00:00

Javni servis na privatnoj mreži Priključak na Internet korisnicima otvara cijeli spektar novih i interesantnih mogućnosti. Od “običnog” surfanja Internetskim prostranstvima i primanja i slanja mailova preko komuniciranja putem raznih javnih mrežnih servisa i gledanja streaming sadržaja pa sve do mogućnosti da i sami pružimo neku od usluga javnosti. To ne mora nužno značiti otvaranje pristupa širokim masama nego prvenstveno puštanje nekog od privatno hostanog servisa (web server, server video na…

rougue_dhcp_server_disable

Anonymous (anonymous@undisclosed.example.com) — 2020-03-23T14:30:12+00:00

Router speaks only with clients that have been served by our DHCP Any other clients with manually configured ip or with ip served from unauthorized dhcp server will be ignored. Do this by enabling “Add ARP for leases” on DHCP server. And on the eth interface that is hosting dhcp service choose option

scripts_01

Anonymous (anonymous@undisclosed.example.com) — 2013-04-01T17:17:32+00:00

SuperScript SuperScript obnavlja zapis na ChangeIP i DynSNS servisima i šalje mail sa novom IP adresom administratoru. Potrebno je editirati varijable označene sa “+++varijabla+++“ Adrese mail servera sa kojih se može slati mail: T-Com smtp.t-com.hr [195.29.150.97] T-Com mail.t-com.hr [195.29.150.5] Amis imap.amis.hr [194.146.109.197] Amis smtp.amis.hr [194.146.109.197] H-1 mail.h-1.hr [80.80.50.132] H-1 smtp.h-1.hr [80.80.50.132] Bnet mail.bnet.hr [83.139…

scripts_02

Anonymous (anonymous@undisclosed.example.com) — 2013-04-01T17:19:54+00:00

Router backup Ova skripta kreira backup routera sa imenom “Ime_Routera.backup” i šalje preko servera definiranog u varijabli primatelju. :local datum [/system clock get date]; :local vrijeme [/system clock get time]; :local ime [/system identity get name]; :local mailsender "$ime@zg.t-com.hr"; :local mailrec ++MAIL ADRESA PRIMATELJA++; :local mailpass ++PASSWORD NA MAIL SERVERU++; :local mailbody "B.A.C.K.U.P."; :local mailserver ++IP ADRESA MAIL SERVERA++; :local mailuser ++USERNAME NA MAI…

split_tunnel_01

Anonymous (anonymous@undisclosed.example.com) — 2020-08-19T12:02:25+00:00

Split tunnel - Powershell cmdlet * In vpn connection properties select Internet Protocol V4 * In General Properties, click Advanced * In Advanced TCP/IP Settings, uncheck Use default gateway on remote network Now, your computer will no longer use a gateway on remote network for internet access.

torrent_trackers

Anonymous (anonymous@undisclosed.example.com) — 2016-02-18T12:13:14+00:00

Torrent trackers address list /ip firewall address-list add list="torrent" address="31.172.124.2" comment="vtv.tv.tracker.prq.to" /ip firewall address-list add list="torrent" address="31.172.124.3" comment="tracker.jamendo.com" /ip firewall address-list add list="torrent" address="95.211.88.54" comment="tracker.blazing.de" /ip firewall address-list add list="torrent" address="62.152.54.78" comment="announce.opensharing.ru" /ip firewall address-list add list="torrent" address="65.106.220.164" com…

wg_r2r

Anonymous (anonymous@undisclosed.example.com) — 2022-11-26T09:08:55+00:00

Wireguard - Router to router ]]

wireguard-_windows_client_to_mikrotik

Anonymous (anonymous@undisclosed.example.com) — 2022-11-26T09:11:42+00:00

Wireguard VPN - Windows client to Mikrotik * If your router is on dynamic public IP (ADSL...) you can substitute Endpoint IP in windows client with your routers Cloud DNS Name... * For AllowedIPs in your windows client you have to put all networks behind your router you would like to access through WG. You will automatically setup a

wireless_vlan

Anonymous (anonymous@undisclosed.example.com) — 2020-02-27T06:49:15+00:00

Mikrotik wireless with dual band / dual SSID / multiple VLANs The purpose of this example is to explain how to create dual SSID on dual band AP with separated traffic. How to transport the separated traffic to another device via VLAN-s and finaly how to disable trafic between VLAN-s but enable them both to access Internet. We are using two Mikrotik devices. First is