This document provides information about a MikroTik RouterOS fundamentals training course. The training schedule outlines 6 days of classes covering topics such as introduction, routing, bridging, wireless networking, firewalls, QoS, tunnels and case studies. The objectives of the course are for students to become familiar with RouterOS software and RouterBoard hardware, and to learn how to configure, manage and troubleshoot a MikroTik router. Brief biographical information and contact details are provided for the trainer. An introduction section gives an overview of MikroTik as a company and outlines the various MikroTik certification courses. The document also provides information on RouterOS, RouterBoard hardware, integrated router solutions, custom router

1. Fundamental Class
Rahmat D. Djatmiko – erdeje85@gmail.com

2. Training Schedule
08.00 – 10.00 10.15 – 12.15 13.15 – 15.30
Day 1 Introduction MikroTik Basic Routing
Day 2 Bridging Wireless
Network
Management
Day 3 Firewall QoS Tunnels
Day 4 Linux Basic DNS Server Web Server
Day 5 DHCP Server Mail Server Proxy Server
Day 6 Case Study
Rahmat
D.
Djatmiko
erdeje85@gmail.com
2

3. Course objectives
At the end of this course, the student will:
• Be familiar with RouterOS software and RouterBoard
products
• Be able to configure, manage, do basic
troubleshooting of a MikroTik router
• Be able to provide basic services to clients
Rahmat
D.
Djatmiko
erdeje85@gmail.com
3

4. About Me
• SMK Telkom Malang as Networking Teacher
• SMK Telkom MikroTik Academy as Trainer
• Freelance Trainer
• Contact :
• Email : erdeje85@gmail.com
• Mobile/WA : 0811353595
• BBM : 527C266F
Rahmat
D.
Djatmiko
erdeje85@gmail.com
4

5. INTRODUCTION
MODULE 1
Rahmat
D.
Djatmiko
erdeje85@gmail.com
5

6. MikroTikls SIA
• Software and Hardwate Vendor
• Motto : Routing the World
• Location : Riga, Latvia (North Europe)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
6

7. MikroTik Certified
Rahmat
D.
Djatmiko
erdeje85@gmail.com
7
MikroTik 101
TCP/IP and Basic
MTCNA
Fundamental Class
MTCRE
Advanced
Routing
MTCTCE
Advanced Traffic
Control
MTCWE
Advanced
Wireless
MTCUME
Advanced User
Management
MTCINE
Advanced
InterNetworking

8. MTCNA Outline
• Introduction
• Routing
• Bridging
• Wireless
• Network Management
• Firewall
• QoS
• Tunnels
Rahmat
D.
Djatmiko
erdeje85@gmail.com
8

9. MTCWE Outline
• Wireless Installation
• Wireless Standard
• Wireless Tools
• Wireless Troubleshooting
• Wireless Advanced Settings
• 802.11n
• Wireless Security
• WDS and MESH
• Wireless Bridging
• Nstreme Protocol
• Nv2 Protocol
Rahmat
D.
Djatmiko
erdeje85@gmail.com
9

10. MTCRE Outline
• Static Routing
• Point to Point Addressing
• VPN
• OSPF
Rahmat
D.
Djatmiko
erdeje85@gmail.com
10

11. MTCTCE Outline
• Packet Flow Diagram
• Firewall filter/nat/mangle
• Quality of Service
• DNS Client/Cache
• DHCP Client/Relay/Server
• Web Proxy
Rahmat
D.
Djatmiko
erdeje85@gmail.com
11

12. MTCUME Outline
• PPP
• PPTP/L2TP
• PPPoE
• PPP Bridging
• IPSec
• Hotspot
• RADIUS
Rahmat
D.
Djatmiko
erdeje85@gmail.com
12

13. MTCINE Outline
• BGP
• MPLS
• Traffic Engineering
Rahmat
D.
Djatmiko
erdeje85@gmail.com
13

14. MIKROTIK ROUTEROS AND
ROUTERBOARD
CHAPTER 1
Rahmat
D.
Djatmiko
erdeje85@gmail.com
14

15. What is RouterOS?
• MikroTik RouterOS is the operating system of MikroTik
RouterBOARD hardware.
• It has all the necessary features for an ISP or network
administrator such as routing, firewall, bandwidth
management, wireless access point, backhaul link,
hotspot gateway, VPN server and more.
• RouterOS also compatible with PC
• Based on Linux Kernel
Rahmat
D.
Djatmiko
erdeje85@gmail.com
15

16. What is RouterBOARD?
• A family of hardware solutions created by MikroTik
to answer the needs of customers around the world.
• All operate with RouterOS.
• Available from low-end spec up until Cloud-Core
high-end type
Rahmat
D.
Djatmiko
erdeje85@gmail.com
16

17. Integrated Solutions
• These products are provided complete with cases
and power adapters.
• Ready to use and preconfigured with the most
basic functionality.
• All you need to do is to plug it in and connect to the
Internet or a corporate network.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
17

18. RouterBOARD (boards only)
• Small motherboard devices that are sold “as is”. You
must choose the case, power adapter and
interfaces separately. Perfect for assembling your
own systems as they offer the biggest customization
options.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
18

19. Enclosures
• Indoor and outdoor casings to house your
RouterBOARD devices. Select based on:
• intended location of use
• the RouterBOARD model
• the type of connections needed (USB, antennas, etc.).
Rahmat
D.
Djatmiko
erdeje85@gmail.com
19

20. Interfaces
• Ethernet modules, fiber SFPs or wireless radio cards
to expand the functionality of RouterBOARD
devices and PCs running RouterOS.
• Once again, selection is based on your needs.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
20

21. Accessories
• These devices are made for MikroTik products -
power adapters, mounts, antennas and PoE
injectors.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
21

22. Why get an integrated router?
• Can address many needs
• Some add-on options
• Little to no expansion
• Fixed configuration
• Simple, yet solid solution for many needs
Rahmat
D.
Djatmiko
erdeje85@gmail.com
22

23. Integrated router, examples
• RB951G-2HnD
• Good for home or small office
• 5 Gig ports
• Built-in Wi-Fi (2,4GHz)
• License level 4
Rahmat
D.
Djatmiko
erdeje85@gmail.com
23

24. Integrated router, examples
• SXT Sixpack
• (1 OmniTIK U-5HnD with
5 SXT-5HPnD)
• Good for WISP or
company with branch
offices
• 5 100Mbps ports
(OmniTik)
• 5GHz 802.11a/n radios
• Can cover 5Km
between central and
satellite sites
Rahmat
D.
Djatmiko
erdeje85@gmail.com
24

25. Integrated router, examples
• CCR1036-12G-4S
• Cloud Router
• Flagship model
• Good for ISPs or company
networks
• 1U rack mount
• 12 Gig ports
• Serial console, USB and
color touch screen
• Default 4G RAM, but can
use any size of SO-DIMM
RAM
Rahmat
D.
Djatmiko
erdeje85@gmail.com
25

26. Why build your own router?
• Can address a greater variety of needs
• Many add-on options / Lots of expansion
• Customizable configuration
• Can be integrated into client equipment or cabinet
• More complete solution for particular needs
Rahmat
D.
Djatmiko
erdeje85@gmail.com
26

27. Custom router, examples
• Flexible CPE
• RB411UAHR
• 1 100Mbps port
• 1 2,4GHz radio (b/g)
• Level 4 license
• Add power supply or PoE
module
• Add 3rd party enclosure
• Add 3rd party 3G mini PCI-E
modem
Rahmat
D.
Djatmiko
erdeje85@gmail.com
27

28. Custom router, examples
• Powerful Hotspot
• RB493G
• 9 gig ports
• Level 5 license
• Add power supply or
PoE module
• Add R2SHPn (2,4GHz
radio card)
• Add R5SHPn (5GHz
radio card)
• Add 3rd party enclosure
• Add microSD card
Rahmat
D.
Djatmiko
erdeje85@gmail.com
28

29. RouterBOARD Architecture
• RouterBOARD build with different architecture
• Different architectre means different characteristic in
processing and addressing memory
Rahmat
D.
Djatmiko
erdeje85@gmail.com
29

30. RouterBOARD Extended Code
• Additional features that come with some type
• U – equipped with USB port
• A – Advanced, usually comes with higher license llevel
• H – High Performance / High Power
• R – equipped with embedded wireless card
• G – equipped with Gigabit Ethernet interface
• P – equipped with PoE port
• n – MIMO card
• D – Dual Chain
• S – equipped with SFP port
• L – lite (can be lower license level or lower spec)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
30

31. RouterBOARD Name Code
• Three Digits Code
Rahmat
D.
Djatmiko
erdeje85@gmail.com
31
RBABCX
RouterBOARD Series
Number of Ethernet port
Number of miniPCI slot
Additional Features
RB751U-2HnD
RouterBOARD Series
5 Ethernet port
1Wireless Interface
With USB and 2GHz
card, High Power, MIMO
and Dual Chain

32. RouterBOARD Name Code
• Four Digits Code
Rahmat
D.
Djatmiko
erdeje85@gmail.com
32
RBAACCX-X
RouterBOARD Series
Interface Information
Additional Features
RB2011UAS-2HnD
RouterBOARD 2000 Series
11 Interfaces (one of them is SFP)
With USB, Advanced license
level, and SFP port
Additional 2GHz card, High
power, MIMO and Dual Chain

33. RouterBOARD Name Code
• Some new routers, use abother formats
Rahmat
D.
Djatmiko
erdeje85@gmail.com
33
NAME-X
RouterBOARD Series
Interface Information
SXT-5HnD
SEXTANT
Groove-2
OmniTik

34. ROUTEROS & ROUTERBOARD
LABORATORY 1
Rahmat
D.
Djatmiko
erdeje85@gmail.com
34

35. [LAB 1] Basic Installation of RouterOS
• First download new RouterOS from
http://www.mikrotik.com/download
• Then write ISO image file to CD or USB and put in
CD-ROM Drive and turn on
Rahmat
D.
Djatmiko
erdeje85@gmail.com
35

36. [LAB 1] Basic Installation of RouterOS
• After select paclage and then press “i” for start
installation
• Answer "n" to first question and "y" to second
• After installation remove cd and press Enter
• After rebooting type “admin” as login and no
password
Rahmat
D.
Djatmiko
erdeje85@gmail.com
36

37. [LAB 1] Check Your RouterBOARD
• Check RouterBOARD Name Code at the bottom of
your router and tell the code!
Rahmat
D.
Djatmiko
erdeje85@gmail.com
37

38. [LAB 1] RouterBOARD Catalog
• At least twice a year, MikroTik will release Product
Catalog
• Open the catalog Q3/Q4
Rahmat
D.
Djatmiko
erdeje85@gmail.com
38

39. FIRST TIME ACCESSING THE ROUTER
CHAPTER 2
Rahmat
D.
Djatmiko
erdeje85@gmail.com
39

40. Router Access Method
Access Via Condition
Text
Based
GUI
Need
IP
Custom
Additional
Device
Keyboard/Monitor If installed in a PC O
Serial Console With serial console cable O O
Telnet and SSH O O
WinBox Used program called winbox.exe O O O
FTP O
API Socket programming O O
Web(HTTP) O O
MAC-WinBox Layer 2 connection O O
MAC-Telnet Layer 2 connection O
Rahmat
D.
Djatmiko
erdeje85@gmail.com
40

41. Router Access Method
• Accessing Command Line Interface (CLI) via Telnet,
ssh, serial cable or even keyboard and monitor if
router has VGA card.
• Accessing Web based GUI (Webfig)
• Using WinBox configuration utility
• Every router is factory pre-configured with IP address
192.168.88.1/24 on ether1 port.
• Default username is admin with empty password.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
41

42. Accessing CLI
• Command Line Interface (CLI) allows configuration
of the router's settings using text commands.
• Since there is a lot of available commands, they are
split into groups organized in a way of hierarchical
menu levels.
• There are several ways how to access CLI:
• winbox terminal
• telnet
• ssh
• serial cable etc.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
42

43. Serial Cable
• If your device has a Serial port, you can use a
console cable.
• Plug one end of the serial cable into the console
port of the RouterBOARD and the other end in your
PC.
• You can also use a USB-Serial adapter.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
43

44. Serial Cable
• Run a terminal program (HyperTerminal, or Putty on
Windows) with the following parameters for All
RouterBOARD models except 230:
• 115200bit/s, 8 data bits, 1 stop bit, no parity, flow
control=none by default.
• If parameters are set correctly you should be able
to see login prompt. Now you can access router by
entering username and password:
Rahmat
D.
Djatmiko
erdeje85@gmail.com
44

45. SSH and Telnet
• Standard IP tools to access router
• Telnet communications are in clear text
• Available on most Operating Systems
• Unsecured!!
• SSH communications are encrypted
• Secured!!
• Many Open Source (free) tools available such as PuTTY
(http://www.putty.org/)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
45

46. Webfig
• If you have router with default configuration, then IP
address of the router can be used to connect to the
Web interface.
• Connect to router with Ethernet cable
• Launch browser
• Type in the IP address
• If asked for, log in. Username is “admin” and
password is blank
Rahmat
D.
Djatmiko
erdeje85@gmail.com
46

47. Webfig
• You will see :
Rahmat
D.
Djatmiko
erdeje85@gmail.com
47
http://wiki.mikrotik.com/wiki/Manual:Webfig

48. WinBox and MAC-Winbox
• WinBox is MikroTik’s proprietary interface to access
RouterOS routers.
• It can be downloaded from MikroTik’s website or
from the router.
• It is used to access the router through IP (OSI layer
3) or MAC (OSI layer 2).
Rahmat
D.
Djatmiko
erdeje85@gmail.com
48

49. WinBox and MAC-Winbox
• If still in the browser, scroll down and click “logout”
• You will see:
• Click on “Winbox”
• Save “winbox.exe”
Rahmat
D.
Djatmiko
erdeje85@gmail.com
49

50. Winbox - Login
Rahmat
D.
Djatmiko
erdeje85@gmail.com
50
Saved router informaation
Network Discovery, will show any
router that connected with your
PC/laptop through layer 2
connection

51. Winbox - Interface
• If parameters are set correctly you should be able
to see :
Rahmat
D.
Djatmiko
erdeje85@gmail.com
51

52. ACCESS METHOD
LABOLATORY 2
Rahmat
D.
Djatmiko
erdeje85@gmail.com
52

53. [LAB2] CLI-Direct Access
• Access your RouterOS (PC Router) via keyboard
and monitor
• Login with “admin” user and blank password
• Configure your TCP/IP using CLI
Rahmat
D.
Djatmiko
erdeje85@gmail.com
53

54. [LAB2] CLI-Telnet/SSH
• Telnet and SSH method use TCP/IP connectivity
• Application telnet/ssh in client is needed (ex : putty)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
54

55. [LAB2] Webfig
• Access your RouterOS (PC Router) via Internet
Browser
• Write your router’s IP at URL
Rahmat
D.
Djatmiko
erdeje85@gmail.com
55

56. [LAB2] Winbox
• Download Winbox from your webfig’s homepage
• Write your router’s IP address or click “...” button for
discovery connection
• Click Connect button
Rahmat
D.
Djatmiko
erdeje85@gmail.com
56

57. INITIAL CONFIGURATION
CHAPTER 3
Rahmat
D.
Djatmiko
erdeje85@gmail.com
57

58. Basic or blank configuration?
• You may or may not have a basic configuration
when freshly installed
• You may choose not to take the default basic
configuration
• Check the following web page to find out how your
device will behave:
http://wiki.mikrotik.com/wiki/Manual:Default_Configurations
Rahmat
D.
Djatmiko
erdeje85@gmail.com
58

59. Default Basic Configuration
• When connecting for the first time with WinBox, click
on “OK”
• The router now has the default basic configuration.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
59

60. Blank Configuration
• Can be used in situations when the default basic
configuration is not required.
• No need for firewall rules
• No need for NATing
• The minimal steps to setup a basic access to the
Internet (if your router does not have a default basic
configuration)
• LAN IP addresses, Default gateway and DNS server
• WAN IP address
• NAT rule (masquerade)
• SNTP client and time zone
Rahmat
D.
Djatmiko
erdeje85@gmail.com
60

61. Configuration Reset
• For some reason, we need to reset the configuration
• When we totally forgot the username and password
• When the confguration is too complex so it’s much
easier to reset to repair them
• Configuration reset can be done using several
method
• Hard-reset, reset the configuration physically
• Soft-reset, reset the configuration through
winbox/terminal/web
Rahmat
D.
Djatmiko
erdeje85@gmail.com
61

62. BASIC CONFIGURATION
LABORATORY 3
Rahmat
D.
Djatmiko
erdeje85@gmail.com
62

63. [LAB3] Hard-reset - Button
• Most RouterBOARD devices are fitted with a reset
button.
• unplug the device power, hold the button, apply
power and wait until the USER LED starts flashing.
Now release the button to clear configuration.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
63
Reset Button

64. [LAB3] Hard-reset - Jumper
• All RouterBOARD current models are also fitted with
a reset jumper hole.
• Some devices might need opening of the
enclosure.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
64
Close the jumper
with a metal
screwdriver, and
boot the board
until the
configuration is
cleared.

65. [LAB3] Soft-reset
• If you still can access the RouterOS, you can
execute a soft-reset command using
Rahmat
D.
Djatmiko
erdeje85@gmail.com
65

66. [LAB3] Topology
Rahmat
D.
Djatmiko
erdeje85@gmail.com
66

67. [LAB3] Laptop’s Settings
Rahmat
D.
Djatmiko
erdeje85@gmail.com
67
Your laptop’s IP
Your router’s IP

68. [LAB3] LAN Configuration
Rahmat
D.
Djatmiko
erdeje85@gmail.com
68

69. [LAB3] WAN Configuration
• Activate wlan interface through interface menu –
select wlan interface and click check button
• Open wlan configuration through double click wlan
interface
• Open tab wireless and select station mode
Rahmat
D.
Djatmiko
erdeje85@gmail.com
69
1
2
3
4
5
6

70. [LAB3] Default Route
• Open Route List through menu IP – Routes
• Click “+” button to create new default route
Rahmat
D.
Djatmiko
erdeje85@gmail.com
70
1
2
3
4
5

71. [LAB3] DNS Resolver
• Set DNS server through DNS Settings (menu IP – DNS)
• Check “Allow Remote Requests”
Rahmat
D.
Djatmiko
erdeje85@gmail.com
71
1
2
3
4

72. [LAB3] NAT Configuration
Rahmat
D.
Djatmiko
erdeje85@gmail.com
72
1
2
3
4
5
6

73. VERSION AND
UPGRADE/DOWNGRADE
CHAPTER 4
Rahmat
D.
Djatmiko
erdeje85@gmail.com
73

74. MikroTik Version
• MikroTik features depend on the current version
installed on the device.
• Current version can be viewed both in the status
bar of Winbox or in the package installed in the
Router OS.
• Installed packages also show what kind of features
available in the Router
• Package can be a combined package or individual
package
Rahmat
D.
Djatmiko
erdeje85@gmail.com
74

75. MikroTik Version
Rahmat
D.
Djatmiko
erdeje85@gmail.com
75
Mikrotik Version

76. RouterOS Package
• More information:
http://wiki.mikrotik.com/wiki/Manual:System/Packages
Rahmat
D.
Djatmiko
erdeje85@gmail.com
76

77. Working with packages
• Individual package installed can be :
• Enabled
• Disabled
• Uninstall
• A package should be removed if it’s totally unused and
we need to free-up some disk space
• All above process is not executed directly, but will
be scheduled to be executed when the router
reboot
Rahmat
D.
Djatmiko
erdeje85@gmail.com
77

78. Upgrade and Downgrade
• Upgrade is needed when we want to get the latest
features or bug repair
• Downgrade is needed when we figured out that
current version has some bug in a specific feature
• For upgrading, you need to aware about the
license-limitation (upgradable to)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
78

79. Before you upgrade
• Know what architecture (mipsbe, ppc, x86, mipsle,
tile) you are upgrading.
• If in doubt, Winbox indicates the architecture in top left
corner!
• Know what files you require:
• NPK : Base RouterOS image with standard packages
(Always)
• ZIP : Additional packages (based on needs)
• Changelog : Indicates what has changed and special
indications (Always)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
79

80. How to upgrade
• Get the package files from MikroTik’s website
• Downloads page
Rahmat
D.
Djatmiko
erdeje85@gmail.com
80

81. How to upgrade
• Three ways
• Download file(s) and copy over to router.
• “Check for updates” (System -> Packages)
• Auto Upgrade (System -> Auto Upgrade)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
81

82. Downloading the files
• Copy file(s) to the router via “Files” window.
Examples are:
• routeros-mipsbe-5.25.npk
• ntp-5.25-mipsbe.npk
• Reboot
• Validate state of router
Rahmat
D.
Djatmiko
erdeje85@gmail.com
82

83. Sending new-package to the Router
• Package to-be-installed must upload to the router in
File section
• There are saveral way to upload the package
• Drag and drop
• FTP
• Since this process using FTP connection, IP validity is
very important (winbox has to be able to open the
Router through IP, not only mac-address)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
83

84. Checking for updates
(with /system packages)
• Through the menu “System -> Packages”
• Click on “Check for Updates” then “Download &
Upgrade”
• Reboots automatically
• Validate packages and state of router
Rahmat
D.
Djatmiko
erdeje85@gmail.com
84

85. Auto upgrading
• Copy required files by all routers to an internal router
(source).
• Configure all routers to point to source router
• Display available packages
• Select and download packages
• Reboot and validate router
Rahmat
D.
Djatmiko
erdeje85@gmail.com
85

86. UPGRADE OR DOWNGRADE
LABORATORY 4
Rahmat
D.
Djatmiko
erdeje85@gmail.com
86

87. [LAB4] Enable/Disable Package
• Open Package List through menu System –
Package
• Enabling/disabling package – Reboot Router
Rahmat
D.
Djatmiko
erdeje85@gmail.com
87

88. [LAB4] Uninstall Package
• Open Package List through menu System –
Package
• Select package and clik Uninstall button
Rahmat
D.
Djatmiko
erdeje85@gmail.com
88

89. [LAB4] After Uninstall
• Look at your “free HDD Space” through System -
Resource
Rahmat
D.
Djatmiko
erdeje85@gmail.com
89

90. [LAB4] Upgrade Version
• Drad and drop file “new-package” into router via
Winbox and then reboot the router
Rahmat
D.
Djatmiko
erdeje85@gmail.com
90

91. [LAB4] Check For Update
Rahmat
D.
Djatmiko
erdeje85@gmail.com
91

92. LICENSE
CHAPTER 5
Rahmat
D.
Djatmiko
erdeje85@gmail.com
92

93. License
• RouterOS features also depend on licensing level
that attach to the hardware
• License of RouterOS is attached to the storage
device
• E.g. : harddisk, NAND, USB, Compact Flash
• If the storage media is formatted with non-mikrotik
partition, then the license will be invalid
Rahmat
D.
Djatmiko
erdeje85@gmail.com
93

94. License Level and The Features
Rahmat
D.
Djatmiko
erdeje85@gmail.com
94

95. UPGRADE LICENSE
LABORATORY 5
Rahmat
D.
Djatmiko
erdeje85@gmail.com
95

96. [LAB5] Check Your License
• Open License through menu System – License
• Software ID used for upgrade license
Rahmat
D.
Djatmiko
erdeje85@gmail.com
96

97. [LAB5] Upgrade PC Router’s License
• Open License through menu System – License
• Software ID used for upgrade license
Rahmat
D.
Djatmiko
erdeje85@gmail.com
97

98. MANAGING ROUTEROS
CHAPTER 6
Rahmat
D.
Djatmiko
erdeje85@gmail.com
98

99. Login Management
• Access to the Router is configured in USER menu
• User management is configured by
• GROUP – profile of a user, consist of what kind of
priveledge is given to a user
• USER – login, consist of username and password of a
user
• User session (current connected users) is showed at
“Active Users” tab
Rahmat
D.
Djatmiko
erdeje85@gmail.com
99

100. Login Mgm – active user
• Current connected users can be viewed in “Active
User”, incuding the method they are using
Rahmat
D.
Djatmiko
erdeje85@gmail.com
100

101. Login Mgm - Group
• Group is bunch of restriction that applied to a user
Rahmat
D.
Djatmiko
erdeje85@gmail.com
101
Assign some
priveledge to a
group

102. Login Mgm - User
Rahmat
D.
Djatmiko
erdeje85@gmail.com
102

103. Service Management
• By default, RouterOS provide some services to
access it’s configuration
Rahmat
D.
Djatmiko
erdeje85@gmail.com
103

104. Network Time
• RouterBOARD doesn’t have any CMOS Batery to
save the time, so we must using NTP
• Use NTP (Network Time Protocol) to allow the
RouterBOARD to synchronize the time with a valid
server
Rahmat
D.
Djatmiko
erdeje85@gmail.com
104

105. Backup and Restore
• Router configration can be backed-up and saved
to be used in the future
• There are two types of backups :
• Binary backup
• Configuration export
Rahmat
D.
Djatmiko
erdeje85@gmail.com
105

106. Binary Backup
• Unreadable
• Complete system backup
• Includes passwords
• Assumes that restores will be on same router
Rahmat
D.
Djatmiko
erdeje85@gmail.com
106

107. Configuration Export
• Mikrotik allow us to create a configuration script
• Can be used to backup only part of configuration
• Has to be done through terminal console
Rahmat
D.
Djatmiko
erdeje85@gmail.com
107

108. Archiving backup files
• Once generated, copy them to a server
• With SFTP (secured approach)
• With FTP, if enabled in IP Services
• Using drag and drop from “Files” window
• Leaving backup files on the router IS NOT a good
archival strategy
• No tape or CD backups are made of routers
Rahmat
D.
Djatmiko
erdeje85@gmail.com
108

109. CONFIGURATION MANAGEMENT
LABORATORY 6
Rahmat
D.
Djatmiko
erdeje85@gmail.com
109

110. [LAB6] User Management
• Add a group named “minimal”
• Give it the “telnet”, “read”, and “winbox” rights
• Explain these rights
• Add a user and give it your name
• Assign it to “minimal” group
• Give it a password
• Assign a password to “admin”
• Give it “podX”, where “X” is your pod number
• Open a new terminal. What happened?
Rahmat
D.
Djatmiko
erdeje85@gmail.com
110

111. [LAB6] Service Management
• Disable these IP Services :
• Telnet
• WWW
• Change port of SSH from 22 to 222
• Try to access your router through Telnet, WWW and
SSH
• Explain the result
Rahmat
D.
Djatmiko
erdeje85@gmail.com
111

112. [LAB6] Time Management
Rahmat
D.
Djatmiko
erdeje85@gmail.com
112

113. [LAB6] Backup/Restore
• Do binary backup
• Do configuration backup (export)
• Download both of binary anda configuration
backup file to local computer
• Open all of file with notepad / wordpad
• Explain the different
• Restore the bnary backup file
• Restore the configuration backup (import)
Rahmat
D.
Djatmiko
erdeje85@gmail.com
113

114. NETINSTALL
CHAPTER 7
Rahmat
D.
Djatmiko
erdeje85@gmail.com
114

115. Reinstall
• Reinstall RouterOS if the original one became
damaged
• Reinstall RouterOS if the “admin” password was lost
• Can be found on MikroTik’s web site under the
download tab
• Installation can be using
• CD Instalation
• Netinstall
• Every RouterBOARD, can only be installed using
netinstall
Rahmat
D.
Djatmiko
erdeje85@gmail.com
115

116. Step-by-step Netinstall
For RBs without a COM port.
• Connect computer to Ethernet port 1
• Give computer a static IP address and mask
• Launch Netinstall
• Click on “Net booting” and write a random IP address
in the same subnet as computer
• In “Packages” section, click “Browse” and select
directory containing valid NPK files
Rahmat
D.
Djatmiko
erdeje85@gmail.com
116

117. Launch Netinstall
• Allow this program to passed through any firewall
Rahmat
D.
Djatmiko
erdeje85@gmail.com
117

118. Configure Netinstall
• Click Net booting – Check Boot Server enabled –
write a random IP address in the same subnet as
computer
Rahmat
D.
Djatmiko
erdeje85@gmail.com
118

119. Change the boot-sequence
• To be able to install a Router, first the router has to
be instructed to boot using Ethernet
• There are saveral method to do this
• Serial Console
• Terminal Console
• Winbox
• Reset-button
Rahmat
D.
Djatmiko
erdeje85@gmail.com
119

120. Changing the boot Sequence via Winbox
Rahmat
D.
Djatmiko
erdeje85@gmail.com
120
1
2
3
4

121. Changing the boot Sequence via Reset Button
• unplug the device power, hold the reset button,
apply power and wait until the ACT LED stop
flashing. Now release the button to clear reboot
from ethernet.
Rahmat
D.
Djatmiko
erdeje85@gmail.com
121

122. Netinstall Ready Status
Rahmat
D.
Djatmiko
erdeje85@gmail.com
122

123. Package Selection
Rahmat
D.
Djatmiko
erdeje85@gmail.com
123
1
2
3
4

124. Installation Process
Rahmat
D.
Djatmiko
erdeje85@gmail.com
124

125. Post Installation
• After doing Neinstall, then the configuration and
files will be totally empty
• Get in to the Router through MAC-Winbox, then do
a soft-reset and restore your previous backup
Rahmat
D.
Djatmiko
erdeje85@gmail.com
125

126. NEXT : ROUTING
END OF INTRODUCTION MODULE
Rahmat
D.
Djatmiko
erdeje85@gmail.com
126