MikroTik RouterOS v2.9 Reference Manual
  1. Manuals
  2. Brands
  3. MikroTik Manuals
  4. Software
  5. RouterOS v2.9
  6. Reference manual
MikroTik RouterOS v2.9 Reference Manual

MikroTik RouterOS v2.9 Reference Manual

Reference manual
Hide thumbs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
Table of Contents

Advertisement

Quick Links

MikroTik RouterOS™ v2.9
Reference Manual

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the RouterOS v2.9 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for MikroTik RouterOS v2.9

  • Page 1 MikroTik RouterOS™ v2.9 Reference Manual...

  • Page 2: Table Of Contents

    General Information......................20 License Management......................22 Basic Setup Guide................25 General Information ......................25 Setting up MikroTik RouterOS™..................26 Logging into the MikroTik Router..................29 Adding Software Packages....................30 Navigating The Terminal Console..................30 Basic Configuration Tasks....................33 Setup Command........................34 Basic Examples........................
  • Page 3 FTP (File Transfer Protocol) Server..........59 General Information ......................59 File Transfer Protocol Server....................59 MAC Level Access (Telnet and Winbox)......... 61 General Information ......................61 MAC Telnet Server......................62 MAC WinBox Server......................62 Monitoring Active Session List.................... 63 MAC Telnet Client....................... 63 Serial Console and Terminal............
  • Page 4 General Information......................94 Troubleshooting........................99 IP Addresses and ARP..............100 General Information ......................100 IP Addressing........................101 Address Resolution Protocol....................102 Proxy-ARP feature......................103 Unnumbered Interfaces...................... 106 Troubleshooting........................106 OSPF....................107 General Information ......................107 General Setup........................108 Areas........................... 110 Networks..........................
  • Page 5 Bridge....................156 General Information......................157 Bridge Interface Setup......................158 Port Settings........................159 Bridge Monitoring......................160 Bridge Port Monitoring...................... 160 Bridge Host Monitoring..................... 161 Bridge Firewall General Description................. 162 Bridge Packet Filter......................165 Bridge NAT........................166 Bridge Brouting Facility..................... 167 Troubleshooting........................168 CISCO/Aironet 2.4GHz 11Mbps Wireless Interface......
  • Page 6 Traffic Monitoring......................202 GPRS PCMCIA................. 203 How to make a GPRS connection..................203 ISDN (Integrated Services Digital Network) Interface....205 General Information......................205 ISDN Hardware and Software Installation................. 206 ISDN Client Interface Configuration................. 207 ISDN Server Interface Configuration................. 208 ISDN Examples........................209 M3P....................
  • Page 7 Connect List........................260 Access List......................... 261 Info............................. 262 Virtual Access Point Interface.................... 265 WDS Interface Configuration.................... 266 Align........................... 267 Align Monitor........................268 Frequency Monitor......................269 Manual Transmit Power Table................... 270 Network Scan........................270 Security Profiles......................... 271 Sniffer..........................274 Sniffer Sniff........................275 Sniffer Packets........................
  • Page 8 Troubleshooting........................332 PPPoE....................334 General Information......................334 PPPoE Client Setup......................336 Monitoring PPPoE Client....................337 PPPoE Server Setup (Access Concentrator)..............338 PPPoE Users........................339 PPPoE Server User Interfaces.................... 339 Application Examples......................340 Troubleshooting........................342 PPTP....................344 General Information......................344 PPTP Client Setup......................346 Monitoring PPTP Client.....................
  • Page 9 RADIUS client.................. 381 General Information ......................381 RADIUS Client Setup......................382 Connection Terminating from RADIUS................383 Suggested RADIUS Servers....................384 Supported RADIUS Attributes................... 384 Troubleshooting........................391 Router User AAA................392 General Information ......................392 Router User Groups......................393 Router Users........................394 Monitoring Active Router Users..................
  • Page 10 Mangle..........................450 General Information ......................455 NAT....................457 General Information ......................457 NAT............................ 458 NAT Applications......................463 Packet Flow..................465 General Information......................465 Packet Flow........................466 Connection Tracking......................468 Connection Timeouts......................470 Service Ports........................471 General Firewall Information..................... 472 Services, Protocols, and Ports............475 General Information ......................
  • Page 11 Active Host List........................516 Service Port........................517 Customizing HotSpot: Firewall Section................517 Customizing HotSpot: HTTP Servlet Pages..............519 Possible Error Messages..................... 527 HotSpot How-to's....................... 528 HTTP Proxy..................529 General Information ......................529 Setup........................... 531 Access List......................... 532 Direct Access List......................533 Cache Management......................
  • Page 12 GPS Synchronization..............568 General Information ......................568 Synchronizing with a GPS Receiver.................. 569 GPS Monitoring......................... 570 LCD Management................571 General Information ......................571 Configuring the LCD's Settings..................573 LCD Information Display Configuration................574 LCD Troubleshooting......................575 MNDP....................576 General Information ......................576 Setup...........................
  • Page 13 Bandwidth Test................602 General Information......................602 Server Configuration......................603 Client Configuration......................604 ICMP Bandwidth Test..............606 General Information ......................606 ICMP Bandwidth Test......................606 Packet Sniffer.................. 608 General Information......................608 Packet Sniffer Configuration....................609 Running Packet Sniffer...................... 610 Sniffed Packets........................611 Packet Sniffer Protocols.....................
  • Page 14 General Information ......................649 Scheduler Configuration..................... 649 Traffic Monitor................. 652 General Information ......................652 Traffic Monitor........................652 IP Telephony..................654 General Information ......................655 General Voice port settings....................657 Voicetronix Voice Ports..................... 658 LineJack Voice Ports......................659 PhoneJack Voice Ports....................... 661 Zaptel Voice Ports......................

  • Page 15: Specifications Sheet

    • VRRP - VRRP protocol for high availability • UPnP - Universal Plug-and-Play support Page 1 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 16 • Supported systems - RouterBOARD 500 series (532, 512 and 511) Page 2 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 17 • SSH - SSH (secure shell) server is running on 22 TCP port by default (available only if security Page 3 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 18 • MAC Telnet - MikroTik MAC Telnet potocol server is by default enabled on all Ethernet-like interfaces • Winbox - Winbox is a RouterOS remote administration GUI for Windows, that uses 8291 TCP port. It may also connect routers by their MAC addresses...

  • Page 19: Device Driver List

    Description PCMCIA Adapters Specifications Description GPRS Cards Specifications Page 5 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 20: General Information

    The document lists the drivers, included in MikroTik RouterOS and the devices that are tested to work with MikroTik RouterOS. If a device is not listed here, it does not mean the device is not supported, it still may work. It just means that the device was not tested.
  • Page 21 Chipset type: AMD PCnet32 PCI 10BaseT and 10/100BaseT Compatibility: • AMD PCnet-PCI Page 7 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 22 21140A chip • 21142 chip • Digital DS21143 Tulip Page 8 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 23 Intel PRO/1000 MF Dual Port Server Adapter (i82546, Board IDs: A91620-xxx, C30848-xxx) Page 9 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 24 RouterBoard 200 built-in Ethernet • RouterBoard 24 4-port Ethernet Page 10 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 25 NE-2000 Compatible PCMCIA Ethernet • NS8390-based PCMCIA cards Page 11 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 26 TI ThunderLAN Chipset type: TI ThunderLAN PCI 10/100Base Compatibility: Page 12 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 27 Chipset type: Winbond w89c840 PCI 10/100Base Compatibility: • Winbond W89c840 • Compex RL100-ATX Page 13 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 28: Wireless

    Chipset type: Cisco/Aironet ISA/PCI/PCMCIA 11Mbit/s IEEE802.11b (wireless station only) Compatibility: Page 14 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 29 Z-Com XI-325HP PCMCIA 200mW Card • Z-Com XI-626 Wireless PCI Card Notes Page 15 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 30: Aironet Arlan

    LMC/SBEI wanPCI-1T1E1 PCI T1/E1 (also known as DS1 or LMC1200P, 1.544 Mbit/s or Page 16 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 31: Asynchronous Serial

    Winbond W6692 based PCI cards VoIP Packages required: telephony Page 17 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 32: Xdsl

    CISCO/Aironet PCMCIA adapter (ISA and PCI versions) for CISCO/Aironet PCMCIA cards only Page 18 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 33: Gprs Cards

    Sierra Aircard 595 and other Sierra Wireless cards Page 19 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 34: License Management

    Level 2 is a transitional license level from versions Page 20 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 35 (unless your hard drive has crashed). Please contact support@mikrotik.com to arrange this. Also Page 21 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 36: License Management

    - command's execution status • Resolving www.mikrotik.com - resolving DNS name • Failed to resolve www.mikrotik.com, check your dns settings - check whether DNS client is Page 22 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
  • Page 37 • ERROR: Your credit limit is exceeded! - self-explanatory • ERROR: This payment method is not more allowed! Go to www.mikrotik.com, log on and purchase key there or use other payment methods. - you can not use the selected payment method from the router anymore due to system changes (for credit cards now) •...
  • Page 38 - you may not update an expired key to the version 2.9, you must purchase a new one • ERROR: You are not allowed to use this service! - please contact sales@mikrotik.com for further assistance • Key upgraded successfully - the upgrade procedure has been completed successfully Page 24 of 695 Copyright 1999-2007, MikroTik.

  • Page 39: Basic Setup Guide

    Reference Manual (and even without it). Page 25 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 40: Setting Up Mikrotik Routeros

    The Guide describes the basic steps of installing and configuring a dedicated PC router running MikroTik RouterOS™. Setting up MikroTik RouterOS™ Page 26 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 41 PXE or EtherBoot option supported by some network interface cards, that allows truly networked installation. Netinstall program works on Windows 95/98/NT4/2K/XP. • MikroTik Disk Maker - if you want to create 3.5" installation floppies. The Disk Maker is a self-extracting archive DiskMaker_v2-9-x_dd-mmm-yyyy_(build_z).exe file, which should be run on your Windows 95/98/NT4/2K/XP workstation to create the installation floppies.
  • Page 42 (note that you must first log in the router; by default there is user admin with no password Page 28 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 43: Logging Into The Mikrotik Router

    Note! Do not use MS-DOS format command or other disk format utilities to reinstall your MikroTik router! This will cause the Software-ID to change, so you will need to buy another license in order to get MikroTik RouterOS running.

  • Page 44: Adding Software Packages

    Neighbor Viewer. Download it from www.mikrotik.com, unpack both files contained in the archive to the same directory, and run NeighborViewer.exe. A list of MikroTik routers working in the same broadcast domain will be showed double-click the one you need to connect to. Note that Winbox is also able to connect to routers by their MAC addresses, and has the discovery tool built-in.
  • Page 45 Welcome Screen and Command Prompt After logging into the router you will be presented with the MikroTik RouterOS™ Welcome Screen and command prompt, for example: TTTTTTTTTTT MMMM MMMM TTTTTTTTTTT MMM MMMM MMM RRRRRR OOOOOO KKKKK KKKKK KKK KKK RRRRRR KKK KKK OOOOOO MikroTik RouterOS 2.9 (c) 1999-2004...
  • Page 46 Executes the command Shows the list of all available commands Page 32 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 47: Basic Configuration Tasks

    The interfaces need to be enabled, if you want to use them for communications. Use the /interface Page 33 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 48: Setup Command

    • setup dhcp client Page 34 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 49: Basic Examples

    - exit menu your choice: x Basic Examples Example Page 35 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 50 Please note that the addresses assigned to different interfaces of the router should belong to different networks. Page 36 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 51 'Public'. If the gateway was specified incorrectly, the value for the argument 'interface' would be unknown. Notes Page 37 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 52 LAN Page 38 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 53: Advanced Configuration Tasks

    ISP, you should use the source network address translation (masquerading) feature of the MikroTik router. Masquerading is useful, if you want to access the ISP's network and the Internet appearing as all requests coming from the host 10.0.0.217 of the ISP's network. The masquerading will change the source IP address and port of the packets originated from the network 192.168.0.0/24 to the address 10.0.0.217 of the router when the packet is routed through it.
  • Page 54 80. We want to make it accessible from the Internet at address:port 10.0.0.217:80. This can be done by means of Static Network Address translation (NAT) at the MikroTik Router. The Public address:port 10.0.0.217:80 will be translated to the Local address:port 192.168.0.4:80. One destination NAT rule is required for translating the destination address and port: [admin@MikroTik] ip firewall nat>...

  • Page 55: Installing Routeros With Cd-Install

    CD burning programs): Page 41 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 56 Select the recently extracted ISO file and click Open: Finally, click Burn button: Page 42 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 57 The system will install selected packages. After that you will be prompted to press 'Enter'. Page 43 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 58 Note: after the installation you will have to enter the Software key. See this manual how to do it. Page 44 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 59: Installing Routeros With Floppies

    Read the licence agreement and press 'Yes' to continue. Page 45 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 60 You are prompted to insert disk #1 into the floppy drive: Page 46 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 61 Proceed with next floppies until the following dialog occurs: Page 47 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 62 Note: after the installation you will have to enter the Software key. See this manual how to do it. Page 48 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 63: Installing Routeros With Netinstall

    NetInstall Description NetInstall is a program that allows you to install MikroTiK RouterOS on a dedicated PC or RouterBoard via Ethernet network. All you need is a blank floppy or an Ethernet device that supports PXE (like RouterBoard 100, RouterBoard 200 and RouterBoard 500 series), an Ethernet network between workstation and dedicated computer, and a serial null-modem console cable (for RouterBoard routers).
  • Page 64 Page 50 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 65 (on RouterBoard 230 it is next to the RS-232 interface): Page 51 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 66 (*.npk files) on your hard drive. NetInstall v1.10 Page 52 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 67 When this is done, the RouterBoard BIOS will return to the first menu. Press the 'x' key to exit Page 53 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 68 NetInstall program. Remember to set the boot device back to IDE in the RouterBoard BIOS. Page 54 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 69: Configuration Management

    Description The configuration backup can be used for backing up MikroTik RouterOS configuration to a binary file, which can be stored on the router or downloaded from it using FTP. The configuration restore can be used for restoring the router's configuration from a backup file.

  • Page 70: System Backup

    Restore and reboot? [y/N]: y The Export Command Command name: /export Page 56 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 71: The Import Command

    [admin@MikroTik] ip address> The Import Command Command name: /import Description Page 57 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 72: Configuration Reset

    Dangerous! Reset anyway? [y/N]: n action cancelled [admin@MikroTik] > Page 58 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 73: Ftp (File Transfer Protocol) Server

    Home menu level: /file Description MikroTik RouterOS has an industry standard FTP server feature. It uses ports 20 and 21 for communication with other hosts on the network. Uploaded files as well as exported configuration or backup files can be accessed under /file menu.

  • Page 74: Command Description

    - sets the file's contents to 'content' Page 60 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 75: Mac Level Access (Telnet And Winbox)

    Software Package Management • WinBox • Ping • MNDP Page 61 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 76: Mac Telnet Server

    To enable MAC Winbox server on ether1 interface only: [admin@MikroTik] tool mac-server mac-winbox> print Page 62 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 77: Monitoring Active Session List

    Terminal linux detected, using multiline input mode [admin@MikroTik] > Page 63 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 78: Serial Console And Terminal

    Hardware usage: Not significant Related Documents • Software Package Management Page 64 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 79: Serial Console Configuration

    With the serial-terminal feature of the MikroTik, up to 132 (and, maybe, even more) devices can be monitored and controlled Serial Console Configuration Description A special null-modem cable should be used for connecting to the serial console.

  • Page 80: Using Serial Terminal

    ( name ) - port name to use Page 66 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 81: Console Screen

    [admin@MikroTik] system console screen> print line-count: 40 [admin@MikroTik] system console screen> Page 67 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 82: Software Package Management

    Description General Information Summary The MikroTik RouterOS is distributed in the form of software packages. The basic functionality of the router and the operating system itself is provided by the system software package. Other Page 68 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.

  • Page 83: Installation (Upgrade)

    FTP binary mode. After that, execute command /system package downgrade Installation (Upgrade) Page 69 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 84 Description Installation or upgrade of the MikroTik RouterOS software packages can be done by uploading the newer version of the software package to the router and rebooting it. The software package files are compressed binary files, which can be downloaded from the MikroTik's web page download section.

  • Page 85: Uninstallation

    Connect to the router using ftp client • Select the BINARY mode file transfer Page 71 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 86: Disabling And Enabling

    2.9.11 2 X wireless-test 2.9.11 2.9.11 routeros-rb500 2.9.11 Page 72 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 87: Unscheduling

    This submenu gives you the ability to download RouterOS software packages from a remote RouterOS router. Page 73 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 88 2.9.11 scheduled 3 192.168.25.8 isdn 2.9.11 available Page 74 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 89: Adding Package Source

    The system software package provides the basic functionality of the MikroTik RouterOS, namely: Page 75 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 90 • winbox server as well as winbox executable with some plugins After installing the MikroTik RouterOS, a free license should be obtained from MikroTik to enable the basic system functionality. Additional Software Feature Packages The table below shows additional software feature packages, extended functionality provided by them, the required prerequisites and additional licenses, if any.
  • Page 91 2.4GHz/5GHz wireless stations and Wireless Server (optional) Page 77 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 92: Software Version Management

    Related Documents • Software Package Management • License Management Page 78 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 93: Print Command

    4 192.168.25.8 available 5 192.168.25.8 scheduled Page 79 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 94: Adding Package Source

    USER 0 192.168.25.8 admin [admin@MikroTik] system upgrade upgrade-package-source> Page 80 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 95: Ssh (Secure Shell) Server And Client

    • OpenSSH GNU/Linux client Specifications Packages required: security Page 81 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 96: Ssh Server

    SSH Server Home menu level: /ip service Description SSH Server is already up and running after MikroTik router installation. The default port of the service is 22. You can set a different port number. Property Description name ( name ) - service name port ( integer : 1 ..65535 ) - port the service listens to...
  • Page 97 Terminal unknown detected, using single line input mode [admin@MikroTik] > Page 83 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 98: Telnet Server And Client

    Telnet Client Description Example General Information Summary MikroTik RouterOS has a build-in Telnet server and client features. These two are used to communicate with other systems over a network. Specifications Packages required: system License required: level1 Home menu level: /system , /ip service...

  • Page 99: Telnet Client

    [admin@MikroTik] ip service> Telnet Client Command name: /system telnet [IP address] [port] Description MikroTik RouterOS telnet client is used to connect to other hosts in the network via Telnet protocol. Example An example of Telnet connection: [admin@MikroTik] > system telnet 172.16.0.1 Trying 172.16.0.1...

  • Page 100: Terminal Console

    Related Documents • Scripting Host and Complementary Tools Page 86 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 101: Common Console Functions

    You can also use / and .. to execute commands from other menu levels without changing the current level: Page 87 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 102: Lists And Item Names

    Example Page 88 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 103: Quick Typing

    [admin@MikroTik] > ping 10.0.0.1 count 3 size 100 Page 89 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 104: Additional Information

    R ether4 ether 1500 [admin@MikroTik] > General Commands Page 90 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 105 - first argument. Specifies the item(-s) being moved. - second argument. Page 91 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 106: Safe Mode

    [r] - keeps all current safe mode changes, and puts current session in a safe mode. Previous Page 92 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 107 Pressing [Ctrl]+[X] twice is an easy way to empty safe mode action list. Page 93 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 108: Winbox

    The Winbox plugins are cached on the local disk for each MikroTik RouterOS version. The plugins are not downloaded, if they are in the cache, and the router has not been upgraded since the last time it has been accessed.
  • Page 109 The winbox.exe program opens the Winbox login window. Page 95 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 110 MNDP (MikroTik Neighbor Discovery Protocol) or CDP (Cisco Discovery Protocol) devices. Page 96 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 111 The Winbox Console of the router: Page 97 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 112 • Enable an item • Disable an item Page 98 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 113: Troubleshooting

    The Winbox Console uses TCP port 8291. Make sure you have access to it through the firewall. Page 99 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 114: Ip Addresses And Arp

    Standards and Technologies: Hardware usage: Not significant Related Documents Page 100 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 115: Ip Addressing

    10.0.0.0/24. Use addresses from different networks on different interfaces, or enable proxy-arp on Page 101 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 116: Address Resolution Protocol

    ADDRESS MAC-ADDRESS INTERFACE 0 D 2.2.2.2 00:30:4F:1B:B3:D9 ether2 Page 102 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 117: Proxy-Arp Feature

    Consider the following network diagram: Page 103 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 118 ARP always answer with its own MAC address if it has a route to the destination. Page 104 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 119 G GATEWAY DISTANCE INTERFACE S 0.0.0.0/0 r 10.0.0.1 eth-LAN Page 105 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 120: Unnumbered Interfaces

    Check also for an IP address for the particular interface. Page 106 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 121: Ospf

    Routing tables with Revised Link Cost Functioning of the Backup General Information Summary Page 107 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 122: General Setup

    • never - do not send own default route to other routers Page 108 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 123 The metric cost can be calculated from line speed by using the formula 10e+8/line speed. The table Page 109 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 124: Areas

    ( none | simple | md5 ; default: none ) - specifies authentication method for OSPF protocol messages Page 110 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 125: Networks

    The right netmask in this case is /32. Example Page 111 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 126: Interfaces

    To add an entry that specifies that ether2 interface should send Hello packets every 5 seconds, do the following: Page 112 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 127: Virtual Links

    The submenu provides an access to the list of OSPF neighbors, id est the routers adjacent to the current router, and supplies brief statistics Page 113 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 128: General Information

    [admin@MikroTik] routing ospf> General Information Page 114 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 129 R main_gw ether 1500 R to_peer_1 ether 1500 Page 115 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 130 10.1.0.1/24 10.1.0.0 10.1.0.255 to_main 10.3.0.1/24 10.3.0.0 10.3.0.255 backup Page 116 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 131 [admin@OSPF_peer_2] routing ospf network> print Flags: X - disabled, I - invalid Page 117 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 132 OSPF_peer_1 and OSPF_peer_2 has a higher cost (might be slower, we have to pay more for the traffic through it, etc.). Page 118 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 133 Flags: X - disabled, I - invalid, D - dynamic, J - rejected, Page 119 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 134 C - connect, S - static, r - rip, o - ospf, b - bgp DST-ADDRESS G GATEWAY DISTANCE INTERFACE Page 120 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 135 OSPF area! Page 121 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 136: Rip

    (i.e. routers)) available. Specifications Page 122 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 137: General Setup

    ( integer ; default: 1 ) - specifies metric (the number of hops) for the connected Page 123 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 138: Interfaces

    ( v1 | v1-2 | v2 ; default: v2 ) - specifies RIP protocol update versions to distribute Page 124 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 139: Networks

    For this case the correct netmask will be /32. Page 125 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 140: Neighbors

    This list shows routes learned by all dynamic routing protocols (RIP, OSPF and BGP) Page 126 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 141: General Information

    [admin@MikroTik] routing rip network> add address=10.0.0.0/2 Page 127 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 142 Gateway of last resort is 192.168.1.2 to network 0.0.0.0 10.0.0.0/24 is subnetted, 1 subnets Page 128 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 143 192.168.3.0/24 [120/1] via 192.168.1.2, 00:00:05, Serial1 0.0.0.0/0 [120/1] via 192.168.1.2, 00:00:05, Serial1 Cisco# As we can see, the Cisco router has learned RIP routes both from the MikroTik router (192.168.0.0/24), and from the ISP router (0.0.0.0/0 and 192.168.3.0/24). Page 129 of 695 Copyright 1999-2007, MikroTik.

  • Page 144: Routes, Equal Cost Multipath Routing, Policy Routing

    • • IP Addresses and ARP • Filter • Page 130 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 145: Routes

    ( text ) - manual value of BGP's as-path for outgoing route Page 131 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 146 1 ADC 10.5.8.0/24 Public 2 ADC 192.168.0.0/24 Local Page 132 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 147: Policy Rules

    [admin@MikroTik] ip route rule> print Flags: X - disabled, I - invalid Page 133 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 148: General Information

    C - connect, S - static, r - rip, b - bgp, o - ospf Page 134 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 149 GW_Backup also for network 192.168.1.0/24 instead of GW_2. The setup: Page 135 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 150 \... action=mark-routing new-routing-mark=net2 chain=prerouting [admin@PB-Router] ip firewall mangle> print Page 136 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 151 5 A S 0.0.0.0/0 r 10.0.0.1 Public [admin@PB-Router] ip route> Page 137 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 152: Bgp Command Reference

    [admin@rb12] > /routing bgp peer print Flags: X - disabled 0 Page 138 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 153: Instances

    • http://www.ietf.org/rfc/rfc1771.txt • http://www.cisco.com/univercd/cc/td/doc/cisintwk/ics/icsbgp4.htm • http://www.cisco.com/univercd/cc/td/doc/cisintwk/idg4/nd2003.htm Instances Description Page 139 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 154: Peers

    ( name ; default: "" ) - name of the routing filter that is applied to outgoing routing update messages Page 140 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 155 ( integer ; default: 0 ) - AS number of the remote peer Page 141 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 156: Bgp Routing Filters

    Page 142 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 157: Filter Rules

    ( name ) - the name of the chain which is used to evaluate the route. If the chain Page 143 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 158 Page 144 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 159 ( integer : -2147483648 ..2147483647 ) - match for the weight of the route Page 145 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 160: Arlan 655 Wireless Client Card

    Example Troubleshooting Description General Information Summary The MikroTik RouterOS supports Arlan 655 Wireless Interface client cards. This card fits in the ISA expansion slot and provides transparent wireless communications to other network nodes. Specifications Packages required: arlan License required: level4...

  • Page 161: Wireless Interface Configuration

    • yes - ARLAN • no - NON ARLAN Page 147 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 162: Troubleshooting

    The pc interface does not show up under the interfaces list Page 148 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 163 The wireless card does not register to the Access Point Check the cabling and antenna alignment. Page 149 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 164: Interface Bonding

    Note that bonding interface needs a couple of seconds to get connectivity with its peer. Page 150 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 165: Related Documents

    • mii-type1 - uses Media Independent Interface type1 to determine link status. Link status Page 151 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 166: General Information

    Also, the Active load balancing (mode=balance-alb) does not work on some cheap cards. Page 152 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 167 General Information Bonding two Eoip tunnels Assume you need to configure the MikroTik router for the following network setup, where you have two offices with 2 ISP for each. You want combine links for getting double speed and provide failover: We are assuming that connections to Internet through two ISP are configured for both routers.
  • Page 168 10.1.0.111/24 10.1.0.0 10.1.0.255 isp1 3.3.3.1/24 3.3.3.0 3.3.3.255 bonding1 Page 154 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 169 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 2/2.0/2 ms Page 155 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 170: Bridge

    Property Description Bridge Brouting Facility Description Property Description Page 156 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 171: General Information

    Standards and Technologies: IEEE801.1D Hardware usage: Not significant Related Documents Page 157 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 172: Bridge Interface Setup

    (i.e., after router startup or enabling the interface) in listening/learning state before Page 158 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 173: Port Settings

    Starting from version 2.9.9, the ports in this lists should be added, not set, see the following Page 159 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 174: Bridge Monitoring

    Statistics of an interface that belongs to a bridge Property Description Page 160 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 175: Bridge Host Monitoring

    4m48s bridge1 00:E0:F7:7F:0A:B8 ether1 [admin@MikroTik] interface bridge host> Page 161 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 176: Bridge Firewall General Description

    These bytes are always equal. Two hexadecimal digits may be specified here to match an Page 162 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 177 • ipsec-esp - IPsec ESP protocol • ddp - datagram delivery protocol Page 163 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 178 ( IP address ; default: 0.0.0.0/0 ) - source IP address (only if MAC protocol is set to Page 164 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 179: Bridge Packet Filter

    Bridge Packet Filter Home menu level: /interface bridge filter Page 165 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 180: Bridge Nat

    • passthrough - ignore this rule and go on to the next one. Acts the same way as a disabled rule, except for ability to count packets Page 166 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 181: Bridge Brouting Facility

    ( MAC address ) - destination MAC address to put in Ethernet frames, when action=dst-nat is selected Page 167 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 182: Troubleshooting

    • there is an action=mark-routing, but no new-routing-mark Page 168 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 183: Cisco/Aironet 2.4Ghz 11Mbps Wireless Interface

    Hardware usage: Not significant Related Documents • Package Management Page 169 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 184: Wireless Interface Configuration

    The requested I/O base address cannot be used on your motherboard Page 170 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 185 ( text ; default: "" ) - service set identifier 3 Page 171 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 186 11Mbit/s ssid: "mt" access-point: 00:02:6F:01:5D:FE access-point-name: "" Page 172 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 187: Troubleshooting

    The IP addresses assigned to the wireless interface should be from the network 10.1.1.0/24: Page 173 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 188 "mt" access-point: 2E:00:B8:01:98:01 access-point-name: "" signal-quality: 35 Page 174 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 189 5.64Mbps rx-10-second-average: 5.32Mbps rx-total-average: 4.87Mbps [admin@wnet_gw] interface pc> Page 175 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 190: Cyclades Pc300 Pci Adapters

    Device Driver List • IP Addresses and ARP Page 176 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 191: Synchronous Interface Configuration

    Connect a communication device, e.g., a baseband modem, to the V.35 port and turn it on. The MikroTik driver for the Cyclades Synchronous PCI Adapter allows you to unplug the V.35 cable from one modem and plug it into another modem with a different clock speed, and you do not need to restart the interface or router.

  • Page 192: Troubleshooting

    RSV/V.35 Synchronous Link Applications Example Let us consider the following network setup with MikroTik Router connected to a leased line with baseband modems and a CISCO router at the other end: The driver for the Cyclades PC300/RSV Synchronous PCI Adapter should load automatically. The interface should be enabled according to the instructions given above.
  • Page 193 Success rate is 100 percent (5/5), round-trip min/avg/max = 28/32/40 ms CISCO# Page 179 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 194: Driver Management

    /driver add command. Users cannot add their own device drivers, only drivers included in the Mikrotik RouterOS software packages can be used. If you need a support for a device, which hasn't a driver yet, you are welcome to suggest it at suggestion page on our web site.

  • Page 195: Loading Device Drivers

    PORT-RANGE OWNER 0x20-0x3F APIC 0x40-0x5F timer 0x60-0x6F keyboard Page 181 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 196: Removing Device Drivers

    You can remove only statically loaded drivers, id est those which do not have the D flag before the Page 182 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 197: Notes On Pcmcia Adapters

    The system cannot load driver for the card. Try to specify different IO or IRQ number Page 183 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 198: Ethernet Interfaces

    IP Addresses and ARP • DHCP Client and Server Page 184 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 199: Ethernet Interface Configuration

    [admin@MikroTik] > interface enable ether1 [admin@MikroTik] > interface print Page 185 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 200: Monitoring The Interface Status

    In some very rare cases it is possible that the device driver does not show correct information, Page 186 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 201 NIC's performance (of course, if your card is not broken) Page 187 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 202: Farsync X.21 Interface

    • IP Addresses and ARP • Log Management Page 188 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 203: Synchronous Interface Configuration

    Page 189 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 204: Troubleshooting

    Check the cabling and the line between the modems. Read the modem manual Synchronous Link Applications MikroTik router to MikroTik router Let us consider the following network setup with two MikroTik routers connected to a leased line with baseband modems: Page 190 of 695 Copyright 1999-2007, MikroTik.
  • Page 205 G GATEWAY DISTANCE INTERFACE S 0.0.0.0/0 r 1.1.1.2 farsync1 Page 191 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 206 ADDRESS NETWORK BROADCAST INTERFACE 10.0.0.112/24 10.0.0.0 10.0.0.255 ether1 Page 192 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 207 [admin@MikroTik] interface farsync> Page 193 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 208 DLCI INTERFACE pvc1 1500 42 farsync1 [admin@office] interface pvc> Page 194 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 209 CTS output-signals: RTS,DTR [admin@hq] interface pvc> Page 195 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 210: Framerelay (Pvc, Private Virtual Circuit) Interface

    Cyclades PC300 PCI Adapters • Moxa C101 Synchronous interface Page 196 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 211: Configuring Frame Relay Interface

    PVC and Cyclades interface configuration • Cyclades [admin@MikroTik] interface cyclades> print Page 197 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 212 Flags: X - disabled, I - invalid, D - dynamic ADDRESS NETWORK BROADCAST INTERFACE Page 198 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 213 Success rate is 100 percent (5/5), round-trip min/avg/max = 28/31/32 ms CISCO# Page 199 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 214: Troubleshooting

    Please check the configuration on the Cisco router Page 200 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 215: General Interface Settings

    ( integer ; default: 0 ) - maximum data rate for transmitting data Page 201 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 216: Traffic Monitoring

    101kbps 101kbps -- [Q quit|D dump|C-z pause] Page 202 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 217: Gprs Pcmcia

    Let us consider a situation that you are in a place where no internet connection is available, but you have access to your mobile network provider. In this case you can connect MikroTik router to your mobile phone provider using GPRS (General Packet Radio Service) and so establish an internet connection.
  • Page 218 1 D 10.40.205.168/32 212.93.96.65 0.0.0.0 ppp-out1 [admin@MikroTik] ip address> Page 204 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 219: Isdn (Integrated Services Digital Network) Interface

    General Information Summary The MikroTik router can act as an ISDN client for dialing out, or as an ISDN server for accepting incoming calls. The dial-out connections may be set as dial-on-demand or as permanent connections (simulating a leased line). The remote IP address (provided by the ISP) can be used as the default gateway for the router.

  • Page 220: Isdn Hardware And Software Installation

    Note! ISDN ISA adapters are not supported! Property Description Page 206 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 221: Isdn Client Interface Configuration

    ( name ; default: isdn-outN ) - interface name Page 207 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 222: Isdn Server Interface Configuration

    ( name ; default: default ) - profile to use when connecting to the remote server Page 208 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 223: Isdn Examples

    Flags: * - default 0 * name="default" local-address=0.0.0.0 remote-address=0.0.0.0 Page 209 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 224 Flags: X - disabled NAME SERVICE CALLER-ID PASSWORD PROFILE Page 210 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 225: Isdn Backup

    The backup system example is shown in the following picture: Page 211 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 226 Comments are required for references in scripts. The first router: Page 212 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 227 [admin@Mikrotik] tool netwatch> add host=2.2.2.2 interval=5s \ \... up-script=connection_up down-script=connection_down Page 213 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 228: M3P

    General Information Summary The MikroTik Packet Packer Protocol (M3P) optimizes the data rate usage of links using protocols that have a high overhead per packet transmitted. The basic purpose of this protocol is to better enable wireless networks to transport VoIP traffic and other traffic that uses small packet sizes of around 100 bytes.

  • Page 229: Setup

    • compress-all - increase network performance even more by using header and data compression (extensive CPU usage) Page 215 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 230 AGGREGATED-SIZE ether1 compress-all compress-all 1500 [admin@MikroTik] ip packing> Page 216 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 231: Moxa C101 Synchronous Interface

    Device Driver List • IP Addresses and ARP Page 217 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 232: Synchronous Interface Configuration

    Synchronous Interface Configuration Home menu level: /interface moxa-c101 Page 218 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 233 ( integer ; default: 1500 ) - Maximum Transmit Unit Notes If you purchased the MOXA C101 Synchronous card from MikroTik, you have received a V.35 cable with it. This cable should work for all standard modems, which have V.35 connections. For synchronous modems, which have a DB-25 connection, you should use a standard DB-25 cable.

  • Page 234: Troubleshooting

    Synchronous Link Application Examples MikroTik Router to MikroTik Router Let us consider the following network setup with two MikroTik Routers connected to a leased line with baseband modems: The driver for MOXA C101 card should be loaded and the interface should be enabled according to the instructions given above.
  • Page 235 [admin@MikroTik] ip address> MikroTik Router to Cisco Router Let us consider the following network setup with MikroTik Router connected to a leased line with baseband modems and a CISCO router at the other end: The driver for MOXA C101 card should be loaded and the interface should be enabled according to the instructions given above.
  • Page 236 IP address of the other end, and the broadcast address is set to 255.255.255.255. Page 222 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 237: Moxa C502 Dual-Port Synchronous Interface

    Device Driver List • IP Addresses and ARP Page 223 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 238: Synchronous Interface Configuration

    There will be TWO interfaces for each MOXA C502 card since the card has TWO ports. The MikroTik driver for the MOXA C502 Dual Synchronous adapter allows you to unplug the V.35 cable from one modem and plug it into another modem with a different clock speed, and you do not need to restart the interface or router.

  • Page 239: Troubleshooting

    Synchronous Link Application Examples MikroTik Router to MikroTik Router Let us consider the following network setup with two MikroTik Routers connected to a leased line with baseband modems: The driver for MOXA C502 card should be loaded and the interface should be enabled according to the instructions given above.
  • Page 240 [admin@MikroTik] ip address> MikroTik Router to Cisco Router Let us consider the following network setup with MikroTik Router connected to a leased line with baseband modems and a CISCO router at the other end: The driver for MOXA C502 card should be loaded and the interface should be enabled according to the instructions given above.
  • Page 241 IP address of the other end, and the broadcast address is set to 255.255.255.255. Page 227 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 242: Ppp And Asynchronous Interfaces

    128 ports (4 cards) Page 228 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 243: Serial Port Configuration

    Keep in mind that baud-rate, data-bits, parity, stop-bits and flow control parameters must be the same for both communicating sides. Page 229 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 244: Ppp Server Setup

    You can add a PPP server using the add command: Page 230 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 245: Ppp Client Setup

    PPP client profiles must match at least partially (local-address and values related to encryption should match) with corresponding remote server values. Page 231 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 246: Ppp Application Example

    = 11/19.2/43 ms [admin@MikroTik] interface ppp-client> Page 232 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 247: Radiolan 5.8Ghz Wireless Interface

    • IP Addresses and ARP • Log Management Page 233 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 248: Wireless Interface Configuration

    ( enabled | disabled ; default: disabled ) - transmit diversity Page 234 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 249 D - our-default-destination NAME ADDRESS ACCESS-POINT D 00A0D4203B7F 00:A0:D4:20:3B:7F Page 235 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 250: Troubleshooting

    Point-to-Point Setup with Routing Let us consider the following network setup: Page 236 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 251 The Router#2 should have addresses 10.1.0.2/30 and 192.168.0.254/24 assigned to the radiolan and Page 237 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 252 Ethernet interfaces respectively. The default route should be set to 10.1.0.1 Page 238 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 253: Sangoma Synchronous Cards

    Synchronous Interface Configuration Home menu level: /interface sangoma Description Page 239 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 254 ( name ; default: sangomaN ) - descriptive interface name Page 240 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 255: Lmc/Sbei Synchronous Interfaces

    Synchronous Interface Configuration Home menu level: /interface sbe Page 241 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 256: General Information

    [admin@R1] > • On R2 router: Page 242 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 257 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 7/7.8/8 ms [admin@R2] > Page 243 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 258: Wireless Client And Wireless Access Point Manual

    Property Description Notes Example Virtual Access Point Interface Description Page 244 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 259 Property Description Command Description Example Station and AccessPoint Page 245 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 260: General Information

    Let's consider that you have a wireless interface, called wlan1. Page 246 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 261 5GHz 5GHz-turbo 2.4GHz-G default default default 10km 15km Page 247 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 262: Wireless Interface Configuration

    AP-controlled TokenRing) Hardware Notes The MikroTik RouterOS supports as many Atheros chipset based cards as many free adapter slots are on your system. One license is valid for all cards on your system. Note that maximal number of PCMCIA sockets is 8.
  • Page 263 This setting is available only for AR5000, AR5001X, and AR5001X+ Page 249 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 264 If set to 'yes', the interface will always be shown as running Page 250 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 265 Page 251 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 266 /interface wireless security-profiles where you can setup WPA or WEP wireless security, for further details, see the Security Profiles section of this manual ssid ( text ; default: MikroTik ) - Service Set Identifier. Used to separate wireless networks supported-rates-a/g ( multiple choice: 6Mbps, 9Mbps, 12Mbps, 18Mbps, 24Mbps, 36Mbps, 48Mbps, 54Mbps ) - rates to be supported in 802.11a or 802.11g standard...
  • Page 267 (3) excessive power usage for the card Page 253 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 268 "000B6B345A91" signal-strength: -77dBm tx-signal-strength: -76dBm tx-ccq: 21% Page 254 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 269: Nstreme Settings

    WDS between AP modes (bridge and ap-bridge) will not work. Page 255 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 270: Nstreme2 Group Settings

    (best performance) Page 256 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 271 Page 257 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 272: Registration Table

    Registration Table Home menu level: /interface wireless registration-table Page 258 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 273 ( read-only: integer ) - number of sent packets in form of sent-packets/number of Page 259 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 274: Connect List

    In case when the station has not connected to any AP, this process repeats from beginning. Property Description Page 260 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 275: Access List

    ( yes | no ) - not implemented, yet Page 261 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 276: Info

    5520, 5525, 5530, 5535, 5540, 5545, 5550, 5555, 5560, 5565, 5570, 5575, 5580, 5585, 5590, 5595, Page 262 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 277 ( read-only: yes | no ) - whether this interface supports Virtual Access Points ('/interface wireless add') Notes Page 263 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 278 5280:0,5285:0,5290:0,5295:0,5300:0,5305:0,5310:0,5315:0, 5320:0,5325:0,5330:0,5335:0,5340:0,5345:0,5350:0,5355:0, 5360:0,5365:0,5370:0,5375:0,5380:0,5385:0,5390:0,5395:0, 5400:0,5405:0,5410:0,5415:0,5420:0,5425:0,5430:0,5435:0, 5440:0,5445:0,5450:0,5455:0,5460:0,5465:0,5470:0,5475:0, 5480:0,5485:0,5490:0,5495:0,5500:0,5505:0,5510:0,5515:0, 5520:0,5525:0,5530:0,5535:0,5540:0,5545:0,5550:0,5555:0, 5560:0,5565:0,5570:0,5575:0,5580:0,5585:0,5590:0,5595:0, Page 264 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 279: Virtual Access Point Interface

    ( yes | no ; default: no ) - whether to hide ssid or not in the beacon frames: Page 265 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 280: Wds Interface Configuration

    Neighbour MAC addresses will be resolved using /ip arp statically set table only Page 266 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 281: Align

    Page 267 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 282: Align Monitor

    This command is used to monitor current signal parameters to/from a remote host. Page 268 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 283: Frequency Monitor

    To monitor other bands, change the the band setting for the respective wireless interface. Page 269 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 284: Manual Transmit Power Table

    ( name ) - the name of interface which will be used for scanning APs Page 270 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 285: Security Profiles

    (if first method listed is rejected, the next one is tried). Stations Page 271 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 286 ( none | 40bit-wep | 104bit-wep | aes-ccm | tkip ; default: none ) - which encryption algorithm to use: Page 272 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 287 • no-certificates - certificates are negotiated dynamically using anonymous Diffie-Hellman MODP 2048 bit algorithm Page 273 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 288: Sniffer

    ( integer ; default: 10 ) - limits file-name's file size (measured in kilobytes) Page 274 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 289: Sniffer Sniff

    ( read-only: integer ) - number of packets that are sent to the streaming server Command Description Page 275 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 290: Sniffer Packets

    ( time ; default: 200ms ) - how long to snoop each channel, if multiple-channels is set to yes Page 276 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 291: General Information

    [admin@MikroTik] interface wireless snooper> General Information Station and AccessPoint This example shows how to configure 2 MikroTik routers - one as Access Point and the other one as a station on 5GHz (802.11a standard). Page 277 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
  • Page 292 Page 278 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 293 This example shows you how to make a transparent network, using the Station WDS feature: Page 279 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 294 [admin@WDS_AP] interface bridge> port Page 280 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 295 [admin@WDS_Station] interface wireless> Virtual Access Point Page 281 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 296 Note that the master-interface must be configured as an Access Point (ap-bridge or bridge Page 282 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 297 AR5213 radio-name="000B6B345A91" mode=station ssid="nstreme" area="" Page 283 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 298 This example will show you how to make a point-to-point link, using Dual Nstreme. Page 284 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 299 Page 285 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 300 R name="nstreme1" mtu=1500 mac-address=00:0C:42:05:04:36 arp=enabled disable-running-check=no tx-radio=wlan2 rx-radio=wlan1 remote-mac=00:0C:42:05:00:22 tx-band=5ghz tx-frequency=5805 Page 286 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 301 2 name="StationX" mode=static-keys-required wpa-unicast-ciphers="" Page 287 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 302 Page 288 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 303 AP and Client Page 289 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 304 AR5213 radio-name="000B6B35E55C" mode=station ssid="MikroTik" area="" frequency-mode=superchannel country=no_country_set antenna-gain=0 Page 290 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 305: Troubleshooting

    Prism wireless clients do not connect to AP that work with enabled hide-ssid feature Page 291 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 306: Xpeed Sdsl Interface

    General Information Summary The MikroTik RouterOS supports the Xpeed 300 SDSL PCI Adapter hardware with speeds up to 2.32Mbps. This device can operate either using Frame Relay or PPP type of connection. SDSL (Single-line Digital Subscriber Line or Symmetric Digital Subscriber Line) stands for the type of DSL that uses only one of the two cable pairs for transmission.

  • Page 307: Xpeed Interface Configuration

    Can be 0 or 2 Example To enable interface: Page 293 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 308: Frame Relay Configuration Examples

    Consider the following network setup with MikroTik router connected via SDSL line using Xpeed interface to another MikroTik router with Xpeed 300 SDSL adapter. SDSL line can refer a common patch cable included with the Xpeed 300 SDSL adapter (such a connection is called Back-to-Back).

  • Page 309: Troubleshooting

    Success rate is 100 percent (5/5), round-trip min/avg/max = 28/31/32 ms CISCO# Troubleshooting Description Page 295 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 310 LT mode if you have a very long line Page 296 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 311: Eoip

    General Information Summary Ethernet over IP (EoIP) Tunneling is a MikroTik RouterOS protocol that creates an Ethernet tunnel between two routers on top of an IP connection. The EoIP interface appears as an Ethernet interface. When the bridging function of the router is enabled, all Ethernet traffic (all Ethernet protocols) will be bridged just as if there where a physical Ethernet interface and cable between the two routers (with bridging enabled).

  • Page 312: Eoip Setup

    WDS whenever possible. EoIP Setup Home menu level: /interface eoip Page 298 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 313: Eoip Application Example

    ( name ; default: eoip-tunnelN ) - interface name for reference remote-address - the IP address of the other side of the EoIP tunnel - must be a MikroTik router tunnel-id ( integer ) - a unique tunnel identifier Notes tunnel-id is method of identifying tunnel.
  • Page 314 [admin@Remote] interface pptp-client> monitor pptp status: "connected" uptime: 39m46s Page 300 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 315: Troubleshooting

    Addresses from the same network can be used both in the Office LAN and in the Remote LAN. Troubleshooting Page 301 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 316 Check the MAC addresses of the EoIP interfaces - they should not be the same! Page 302 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 317: Ip Security

    License required: level1 Home menu level: /ip ipsec Page 303 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 318 SPD rule), the packet is dropped. This is called incoming policy check. Page 304 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 319 1024 bits RFC2409 Group 5 1536 bits RFC3526 Page 305 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 320: Policy Settings

    AH is applied after ESP, and in case of tunnel mode ESP will be applied in tunnel mode and Page 306 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 321 If you are using IKE to establish SAs automatically, then policies on both routers must exactly Page 307 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 322: Peers

    ( yes | no ; default: no ) - allow this peer to establish SA for non-existing policies. Page 308 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 323 Page 309 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 324: Remote Peer Statistics

    ( read-only: time ) - soft/hard expiration time counted from installation of SA Page 310 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 325: Flushing Installed Sa Table

    Sometimes after incorrect/incomplete negotiations took place, it is required to flush manually the Page 311 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 326: Counters

    To view current statistics: [admin@WiFi] ip ipsec> counters print out-accept: 6 Page 312 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 327: General Information

    Router 1 and static policy on Router 2 Page 313 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 328 IPsec Between two Masquerading MikroTik Routers Add accept and masquerading rules in SRC-NAT Page 314 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 329 We will configure IPsec in tunnel mode in order to protect traffic between attached subnets. Page 315 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 330: Tunnel Mode

    ! And finally apply crypto map to serial interface: interface Serial 0 crypto map mymap exit Page 316 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 331 192.168.87.0/24 connected to Linux. MT and Linux are connected together over the "public" network 192.168.0.0/24: Page 317 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 332 [admin@MikroTik] > /ip ipsec policy add sa-src-address=192.168.0.155 \ \... sa-dst-address=192.168.0.108 src-address=10.0.0.0/24 \ \... dst-address=192.168.87.0/24 tunnel=yes Page 318 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 333: Ipip Tunnel Interfaces

    • to use it instead of source routing Quick Setup Guide To make an IPIP tunnel between 2 MikroTik routers with IP addresses 10.5.8.104 and 10.1.0.172, using IPIP tunnel addresses 10.0.0.1 and 10.0.0.2, follow the next steps. • Configuration on router with IP address 10.5.8.104: Add an IPIP interface (by default, its name will be ipip1): [admin@10.5.8.104] interface ipip>...

  • Page 334: Ipip Setup

    May be set to 1500 bytes if mtu path discovery is not working properly Page 320 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 335: General Information

    There is no authentication or 'state' for this interface. The bandwidth usage of the interface may be monitored with the monitor feature from the interface menu. MikroTik RouterOS IPIP implementation has been tested with Cisco 1005. The sample of the Cisco 1005 configuration is given below: interface Tunnel0 ip address 10.3.0.1 255.255.255.0...
  • Page 336 = 19/21.0/24 ms [admin@MikroTik] interface ipip> Page 322 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 337: L2Tp Interface

    PPP user connections to a remote location (for example, to separate authentication and Internet access points for ISP) Page 323 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 338: Quick Setup Guide

    Intranet/LAN of a company for remote (mobile) clients (employees) Each L2TP connection is composed of a server and a client. The MikroTik RouterOS may function as a server or client or, for various configurations, it may be the server for some connections and client for other connections.

  • Page 339: L2Tp Client Setup

    10.1.1.12 L2TP server and use it as the default gateway: Page 325 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 340: Monitoring L2Tp Client

    To create L2TP users, you should consult the PPP secret PPP Profile manuals. It is also possible to use the MikroTik router as a RADIUS client to register the L2TP users, see the manual how to do it. Property Description Page 326 of 695 Copyright 1999-2007, MikroTik.

  • Page 341: L2Tp Server Users

    To add a static entry for ex1 user: Page 327 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 342: L2Tp Application Examples

    Each router is connected to a different ISP. One router can access another router through the Internet. Page 328 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 343 'direct' communication between the routers over third party networks. Page 329 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 344 Test the connection through the L2TP tunnel to the LocalHomeOffice interface: Page 330 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 345 The client computer can access the router through the Internet. Page 331 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 346: Troubleshooting

    Disabling IPSEC Policy Used with L2TP Troubleshooting Description Page 332 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 347 See the respective documentation on how to configure IPsec in the Microsoft L2TP/IPsec VPN Client and in the MikroTik RouterOS. If you do not want to use IPsec, it can be easily switched off on the client side. Note: if you are using Windows 2000, you need to edit system registry using regedt32.exe or regedit.exe.

  • Page 348: Pppoe

    PPPoE employs Ethernet instead of modem connection. Page 334 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 349 DHCP are used. It is adviced not to use static IP addresses or DHCP on the same interfaces as PPPoE for obvious security reasons. MikroTik RouterOS can act as a RADIUS client - you can use a RADIUS server to authenticate PPPoE clients and use accounting for them.

  • Page 350: Pppoe Client Setup

    ( yes | no ; default: no ) - whether to add a default route automatically Page 336 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 351: Monitoring Pppoe Client

    • Verifying password... - connection has been established to the server, password verification in Page 337 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 352: Pppoe Server Setup (Access Concentrator)

    20 (so, for 1500-byte Ethernet link, set the Page 338 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 353: Pppoe Users

    PPPoE Server User Interfaces Home menu level: /interface pppoe-server Description Page 339 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 354: Application Examples

    Page 340 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 355 [admin@PPPoE-Server] ip address> add address=10.1.0.3/24 interface=Local [admin@PPPoE-Server] ip address> print Page 341 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 356: Troubleshooting

    Troubleshooting Page 342 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 357 You have to specify the "Service Name" in the properties of the XP PPPoE client. If the service name is not set, or it does not match the service name of the MikroTik PPPoE server, you get the "line is busy" errors, or the system shows "verifying password - unknown error"...

  • Page 358: Pptp

    PPTP client and server. General applications of PPTP tunnels: Page 344 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 359 Windows for more information) Each PPTP connection is composed of a server and a client. The MikroTik RouterOS may function as a server or client - or, for various configurations, it may be the server for some connections and client for other connections.

  • Page 360: Pptp Client Setup

    ( text ) - user name to use when logging on to the remote server Page 346 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 361: Monitoring Pptp Client

    Level3 or Level4 licenses up to 200 clients, and Level5 or Level6 licenses do not have PPTP client limitations. Page 347 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 362: Pptp Users

    To create PPTP users, you should consult the PPP secret PPP Profile manuals. It is also possible to use the MikroTik router as a RADIUS client to register the PPTP users, see the manual how to do it. Property Description authentication ( multiple choice: pap | chap | mschap1 | mschap2 ;...

  • Page 363: Pptp Application Examples

    The following is an example of connecting two Intranets using an encrypted PPTP tunnel over the Internet. Page 349 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 364 Flags: X - disabled, D - dynamic, R - running NAME USER CLIENT-ADDRESS UPTIME ENC... Page 350 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 365 To route the local Intranets over the PPTP tunnel you need to add these routes: Page 351 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 366 Please, consult the respective manual on how to set up a PPTP client with the software You are using. Page 352 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 367 And the server must be enabled: [admin@RemoteOffice] interface pptp-server server> set enabled=yes Page 353 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 368: Troubleshooting

    I use firewall and I cannot establish PPTP connection Page 354 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 369 Also, IP protocol 47 should be passed through Page 355 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 370: Vlan

    General Information Summary VLAN is an implementation of the 802.1Q VLAN protocol for MikroTik RouterOS. It allows you to have multiple Virtual LANs on a single ethernet or wireless interface, giving the ability to segregate LANs efficiently. It supports up to 4095 vlan interfaces, each with a unique VLAN ID, per ethernet device.

  • Page 371: Additional Documents

    When the VLAN extends over more than one switch, the inter-switch links have to become trunks, on which packets are tagged to indicate which VLAN they belong to. You can use MikroTik RouterOS (as well as Cisco IOS and Linux) to mark these packets as well as to accept and route marked ones.

  • Page 372: Vlan Setup

    R test 1500 enabled ether1 [admin@MikroTik] interface vlan> Page 358 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 373: Application Example

    VLAN example on MikroTik Routers Let us assume that we have two or more MikroTik RouterOS routers connected with a hub. Interfaces to the physical network, where VLAN is to be created is ether1 for all of them (it is needed only for example simplification, it is NOT a must).

  • Page 374: Graphing

    Description The Graphing tool can display graphics for: Page 360 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 375: General Options

    Page 361 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 376: Interface Graphing

    ( IP address | netmask ; default: 0.0.0.0/0 ) - IP address range which is allowed to Page 362 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 377: Resource Graphing

    Flags: X - disabled ALLOW-ADDRESS STORE-ON-DISK 192.168.0.0/24 [admin@MikroTik] tool graphing resource> Page 363 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 378: Hotspot User Aaa

    • • PPP User AAA • Router User AAA Page 364 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 379: Hotspot User Profiles

    • none - do not timeout unreachable users Page 365 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 380: Hotspot Users

    HotSpot Users Home menu level: /ip hotspot user Page 366 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 381 Page 367 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 382: Hotspot Active Users

    ( read-only: integer ) - maximal amount of bytes the user is allowed to send to the router Page 368 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 383 SESSION-TIMEOUT IDLE-TIMEOUT 10.0.0.144 4m17s 55m43s [admin@MikroTik] ip hotspot active> Page 369 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 384: Ip Accounting

    • • Package Management • IP Addresses and ARP Page 370 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 385: Local Ip Traffic Accounting

    Enable IP accounting: [admin@MikroTik] ip accounting> set enabled=yes Page 371 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 386: Local Ip Traffic Accounting Table

    3142 3 192.150.20.254 192.168.0.2 2857 4 10.0.0.4 192.168.0.2 Page 372 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 387: Web Access To The Local Ip Traffic Accounting Table

    The web page report make it possible to use the standard Unix/Linux tool wget to collect the traffic data and save it to a file or to use MikroTik shareware Traffic Counter to display the table. If the web report is enabled and the web page is viewed, the snapshot will be made when connection is initiated to the web page.

  • Page 388: Ppp User Aaa

    HotSpot User AAA • Router User AAA • RADIUS client Page 374 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 389: Local Ppp User Profiles

    ( IP address ) - IP address of the DNS server to supply to clients Page 375 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 390 • yes - enable data encryption • no - disable data encryption Page 376 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 391: Cpu Utilization

    2 * name="default-encryption" use-compression=default use-vj-compression=default use-encryption=yes only-one=default change-tcp-mss=default [admin@rb13] ppp profile> Page 377 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 392: Local Ppp User Database

    Monitoring Active PPP Users Command name: /ppp active print Page 378 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 393: Ppp User Remote Aaa

    ( time ; default: 0s ) - Interim-Update time interval Page 379 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 394 0s [admin@MikroTik] ppp aaa> Page 380 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 395: Radius Client

    • Router User AAA • PPP User AAA Page 381 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 396: Radius Client Setup

    The RADIUS server database is consulted only if no matching user acces record is found in router's local database. Traffic is accounted locally with MikroTik Traffic Flow and Cisco IP pairs and snapshot image can be gathered using Syslog utilities. If RADIUS accounting is enabled, accounting information is also sent to the RADIUS server default for that service.

  • Page 397: Connection Terminating From Radius

    RADIUS server. For this purpose DM (Disconnect-Messages) are used. Disconnect messages Page 383 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 398: Suggested Radius Servers

    , which incorporates all the needed RADIUS attributes. This dictionary is the minimal dictionary, which is enough to support all features of MikroTik RouterOS. It is designed for FreeRADIUS, but may also be used with many other UNIX RADIUS servers (eg. XTRadius).
  • Page 399 • MS-CHAP-Domain - User domain, if present • Mikrotik-Realm - If it is set in /radius menu, it is included in every RADIUS request as Mikrotik-Realm attribute. If it is not set, the same value is sent as in MS-CHAP-Domain attribute (if MS-CHAP-Domain is missing, Realm is not included neither) •...
  • Page 400 RADIUS server only is MS-CHAPv2 was used as authentication (for PPPs only) Page 386 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 401 The rx-rate-min and tx-rate-min values can not exceed rx-rate and tx-rate values. • Mikrotik-Group - Router local user group name (defines in /user group) for local users. HotSpot default profile for HotSpot users.
  • Page 402 • Acct-Terminate-Cause - session termination cause (see RFC2866 ch. 5.10) Change of Authorization Page 388 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 403 RFC2866 Acct-Session-Time RFC2866 Acct-Status-Type RFC2866 Acct-Terminate-Cause RFC2866 Ascend-Client-Gateway Page 389 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 404 MS-CHAP-Domain RFC2548 MS-CHAP-Response RFC2548 MS-CHAP2-Response RFC2548 MS-CHAP2-Success RFC2548 Page 390 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 405: Troubleshooting

    Page 391 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 406: Router User Aaa

    Home menu level: /user Hardware usage: Not significant Related Documents Page 392 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 407: Router User Groups

    • winbox - policy that grants rights to log in remotely via WinBox Page 393 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 408: Router Users

    ( name ) - user name. Although it must start with an alphanumeric character, it may contain "*", "_", "." and "@" symbols Page 394 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 409: Monitoring Active Router Users

    • winbox - user is logged in remotely via WinBox tool Page 395 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 410: Router User Remote Aaa

    0s default-group: read [admin@MikroTik] user aaa> Page 396 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 411: Traffic Flow

    • version 5 - in addition to version 1, version 5 has the BGP AS and flow sequence number Page 397 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 412: General Configuration

    ( 1 | 5 | 9 ) - which version format of NetFlow to use General Information Traffic-Flow Example Page 398 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 413 Top three hosts by upload and download each minute: Page 399 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 414 Overall network load each minute: Traffic usage by each protocol: Page 400 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 415 Page 401 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 416: Snmp Service

    User defined communities are supported • Get and GetNext actions Page 402 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 417: Snmp Setup

    3rd floor [admin@MikroTik] snmp> SNMP Communities Page 403 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 418: Available Oids

    • /interface Page 404 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 419: Available Mibs

    RFC1493 dot1dBridge.dot1dBase.dot1dBaseBridgeAddress dot1dBridge.dot1dStp.dot1dStpProtocolSpecification dot1dBridge.dot1dStp.dot1dStpPriority dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbAddress dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbPort dot1dBridge.dot1dTp.dot1dTpFdbTable.dot1dTpFdbEntry.dot1dTpFdbStatus RFC2863 Page 405 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 420 RFC2011 ip.ipForwarding Page 406 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 421 Note that obsolete ip.ipRouteTable is also supported RFC1213 Page 407 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 422 RFC2863 ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifInMulticastPkts ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifInBroadcastPkts ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifOutMulticastPkts ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifOutBroadcastPkts ifMIB.ifMIBObjects.ifXTable.ifXEntry.ifHCInMulticastPkts Page 408 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 423: Tools For Snmp Data Collection And Analysis

    An example of using MRTG with MikroTik SNMP Here is a example configuration file for MRTG to monitor a network interface traffic on Mikrotik RouterOS. This is only an example file. ###################################################################### # Multi Router Traffic Grapher -- Sample Configuration File ###################################################################### # This file is for use with mrtg-2.5.4c...

  • Page 424: Configuration Reference

    For more information read the MRTG documentation: Configuration Reference Page 410 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 425: Log Management

    Various system events and status information can be logged. Logs can be saved in local routers file, displayed in console, sent to an email or to a remote server running a syslog daemon. MikroTik provides a shareware Windows Syslog daemon, which can be downloaded from www.mikrotik.com...

  • Page 426: General Settings

    ( name ) - name of an action Page 412 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 427: Log Messages

    • buffer - prints log messages that were saved in specified local buffer Page 413 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 428 -- Ctrl-C to quit. New entries will appear at bottom. Page 414 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 429: Bandwidth Control

    PCQ - Per Connection Queue • HTB - Hierarchical Token Bucket Specifications Page 415 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 430 Before sending data over an interface, it is processed with a queuing discipline. By default, queuing Page 416 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 431 HTB qdisc in detail: Page 417 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 432 RouterOS which refer to shaping and one - to prioritizing: Page 418 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 433 In case of equal priorities and equal states, HTB serves these classes, using round robin algorithm. HTB Examples Page 419 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 434 Leaf1 continues to be at green state - it has to send packets, but not faster than 1Mbps. Leaf3 still has nothing to send. Page 420 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 435 Leaf3 still has no packets to send. Page 421 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 436 Assume that Leaf2 is borrowing from ClassB, ClassB from ClassA, but ClassA reaches its max-limit (2Mbps). Page 422 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 437 Finally, let's see what happens, if Leaf1, Leaf2, Leaf3 and ClassB are in the yellow state, and ClassA is green. Page 423 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 438 When a user is starting to download a file via HTTP, we can observe such a situation: Page 424 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 439 Additional Documents • http://linux-ip.net/articles/Traffic-Control-HOWTO/overview.html • http://luxik.cdi.cz/~devik/qos/htb/ Page 425 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 440: Queue Types

    Page 426 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 441 Public interface, all traffic from our clients will be grouped by src-address - so we can easily limit Page 427 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 442 ( integer ; default: 2000 ) - number of packets that can hold the whole PCQ queue Page 428 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 443: Interface Default Queues

    0 wlan1 wireless-default [admin@MikroTik] queue interface> Simple Queues Description Page 429 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 444 ( integer : 1 ..8 ) - priority of the queue. 1 is the highest, 8 - the lowest Page 430 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 445: Queue Trees

    General Information Page 431 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 446 C - connect, S - static, r - rip, b - bgp, o - ospf DST-ADDRESS G GATEWAY DISTANCE INTERFACE Page 432 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 447 For example, if we turn off the laptop, share its 64Kib/s download and 32Kib/s Page 433 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 448 The same for Laptop and Workstation: [admin@MikroTik] ip firewall mangle> add src-address=192.168.0.2 \ Page 434 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 449 This example shows how to equally share 10Mibps download and 2Mibps upload among active Page 435 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 450 /queue tree add name=Download parent=Local max-limit=10240000 /queue tree add parent=Download queue=pcq-download packet-mark=users Page 436 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 451 /queue tree add parent=Local queue=pcq-download packet-mark=users /queue tree add parent=Public queue=pcq-upload packet-mark=users Page 437 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 452: Filter

    License required: level1 (P2P filters limited to 1) , level3 Page 438 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 453: Firewall Filter

    • packet size Page 439 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 454 • accept - accept the packet. No action is taken, i.e. the packet is passed through and no more rules are applied to it Page 440 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 455 FTP data connection (the later requires enabled FTP connection tracking helper under /ip firewall service-port) Page 441 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 456 • loose-source-routing - match packets with loose source routing option. This option is used to Page 442 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 457 ( ddp | egp | encap | ggp | gre | hmp | icmp | idrp-cmtp | igmp | ipencap | ipip | ipsec-ah | Page 443 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 458 ( integer : 0 ..65535 ) - matches TCP MSS value of an IP packet Page 444 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 459: Filter Applications

    Block IP addreses called "bogons": Page 445 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 460 Page 446 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 461: Address Lists

    NAT facilities can use address lists to match packets against them. Page 447 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 462 Hosts with these IP addresses tried to initialize a telnet session to the router. Page 448 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 463: Mangle

    Routes, Equal Cost Multipath Routing, Policy Routing • • Filter • Packet Flow Page 449 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 464: Mangle

    Used in conjunction with Page 450 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 465 ( integer : 0 ..65535 | integer : 0 ..65535 ) - destination port number or range Page 451 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 466 ( name ) - specify the new value of the routing mark used in conjunction with action=mark-routing Page 452 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 467 • WeightThreshold - total weight of the latest TCP/UDP packets with different destination ports Page 453 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 468 • min-delay - minimize delay (ToS=16) • normal - normal service (ToS=0) Page 454 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 469: General Information

    [admin@MikroTik] > / ip firewall mangle add chain=prerouting \ \... connection-mark=known_mac_conn action=mark-packet new-packet-mark=known_mac Page 455 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 470 [admin@MikroTik] > Page 456 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 471: Nat

    Routes, Equal Cost Multipath Routing, Policy Routing • Filter • Mangle • Packet Flow Page 457 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 472: Nat

    Starting from HTTP/1.1 there is special header in HTTP request which Page 458 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 473 • 00:00:00 - leave the address in the address list forever Page 459 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 474 • Expire - specifies interval after which recorded IP addresses / ports will be deleted Page 460 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 475 0 and Every inclusively. Page 461 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 476 ( integer : 0 ..65535 ) - matches TCP MSS value of an IP packet Page 462 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 477: Nat Applications

    ISP, you should use the source network address translation (masquerading) feature of the MikroTik router. The masquerading will change the source IP address and port of the packets originated from the network 192.168.0.0/24 to the address 10.5.8.109 of the router when the packet is routed through it.
  • Page 478 If you want to link Public IP 10.5.8.200 address to Local one 192.168.0.109, you should use destination address translation feature of the MikroTik router. Also if you want allow Local server to talk with outside with given Public IP you should use source address translation, too Add Public IP to Public interface: /ip address add address=10.5.8.200/32 interface=Public...

  • Page 479: Packet Flow

    Software Package Management • IP Addresses and ARP Page 465 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 480: Packet Flow

    Packet Flow Description MikroTik RouterOS is designed to be easy to operate in various aspects, including IP firewall. Therefore regular firewall policies can be created and deployed without the knowledge about how the packets are processed in the router. For example, if all that required is just natting internal...
  • Page 481 VPN or others. Alike, there are two ways for Page 467 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 482: Connection Tracking

    Connection Tracking Home menu level: /ip firewall connection Description Page 468 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 483 ( read-only: IP address | port ) - the source address and port the reply connection is established from Page 469 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 484: Connection Timeouts

    ( time ; default: 10s ) - maximal amount of time connection tracking entry Page 470 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 485: Service Ports

    Some network protocols are not compatible with network address translation, for example due to Page 471 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 486: General Firewall Information

    Allow path MTU—ICMP Fragmentation-DF-Set messages inbound • Block everything else Page 472 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 487 MikroTik RouterOS works with the full ToS byte. It does not take account of reserverd bits in this byte (because they have been redefined many times and this approach provides more flexibility). It...
  • Page 488 Warez (Warez, Ares; starting from 2.8.18) - this protocol can only be dropped, speed limiting is impossible Page 474 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 489: Services, Protocols, And Ports

    This document lists protocols and ports used by various MikroTik RouterOS services. It helps you to determine why your MikroTik router listens to certain ports, and what you need to block/allow in case you want to prevent or grant access to the certain services. Please see the relevant sections of the Manual for more explanations.

  • Page 490: List Of Services

    Secure Socket Layer SSL encrypted 443/tcp HTTP(Only with hotspot package) Page 476 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 491 PPTP and EoIP) ESP - Encapsulating Security Payload for Page 477 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 492 OSPFIGP - OSPF Interior Gateway Protocol /112 VRRP - Virtual Router Redundancy Protocol Page 478 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 493: Dhcp Client And Server

    Property Description Notes Example DHCP Relay Description Property Description Page 479 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 494: General Information

    General Information Summary The DHCP (Dynamic Host Configuration Protocol) is needed for easy distribution of IP addresses in a network. The MikroTik RouterOS implementation includes both - server and client parts and is compliant with RFC2131. General usage of DHCP: •...

  • Page 495: Dhcp Client Setup

    Home menu level: /ip dhcp-client Description The MikroTik RouterOS DHCP client may be enabled on any Ethernet-like interface at a time. The client will accept an address, netmask, default gateway, and two dns server addresses. The received IP address will be added to the interface with the respective netmask. The default gateway will be added to the routing table as a dynamic entry.
  • Page 496 [admin@MikroTik] ip dhcp-client> Page 482 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 497: Dhcp Server Setup

    Ascend-Data-Rate attributes (in that case Ascend-Data-Rate will specify Page 483 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 498 • 0.0.0.0 - the DHCP server will be used only for direct requests from clients (no DHCP really Page 484 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 499: Store Leases On Disk

    In these cases dhcp server may give out the same ip address to another Page 485 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 500: Dhcp Networks

    DHCP Server Leases Home menu level: /ip dhcp-server lease Description Page 486 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 501 ( read-only: yes | no ) - shows, whether this dynamic lease is authenticated by RADIUS or Page 487 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 502 You should specify a correct MAC address there. Example Page 488 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 503: Dhcp Alert

    All alerts on an interface can be cleared at any time using command: /ip dhcp-server alert reset-alert <interface> Page 489 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 504: Dhcp Option

    Now the DHCP server will reply with its Hostname Host-A to DHCP client (if requested) DHCP Relay Page 490 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 505: Question&Answer-Based Setup

    ( IP address ; default: 0.0.0.0 ) - the IP address of the DHCP relay between the DHCP server and the DHCP clients Page 491 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 506: General Information

    0 dhcp_pool1 10.0.0.2-10.0.0.254 [admin@MikroTik] ip dhcp-server> General Information Page 492 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 507 To-DHCP-Relay 10.1.0.2/24 10.1.0.0 10.1.0.255 Public [admin@DHCP-Server] ip address> Page 493 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 508 Let us consider that we want to assign IP addresses for clients, using the RADIUS server. Page 494 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 509: Users File

    /ip dhcp-server add address-pool=Radius-Clients use-radius=yes interface=Local \ disabled=no Configure DHCP networks: Page 495 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 510 Now the client with MAC address 00:0B:6B:31:02:4B will always receive IP address 192.168.0.55. Page 496 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 511: Dns Client And Cache

    Related Documents • Software Package Management • HotSpot Gateway Page 497 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 512: Client Configuration And Cache Setup

    • Description The MikroTik router with DNS cache feature enabled can be set as a primary DNS server for any DNS-compliant clients. Moreover, MikroTik router can be specified as a primary DNS server under its dhcp-server settings. When the DNS cache is enabled, the MikroTik router responds to DNS TCP and UDP requests on port 53.

  • Page 513: Cache Monitoring

    Home menu level: /ip dns static Description The MikroTik RouterOS has an embedded DNS server feature in DNS cache. It allows you to link the particular domain names with the respective IP addresses and advertize these links to the DNS clients using the router as their DNS server.
  • Page 514 1w cache-used: 10 KiB [admin@MikroTik] ip dns> Page 500 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 515: Hotspot Gateway

    Property Description Example One-to-one NAT static address bindings Page 501 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 516: General Information

    To put HotSpot on the Local interface, using the same IP address pool as DHCP server uses Page 502 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 517 Description section below before deploying a HotSpot system. If this does not work: • check that /ip dns contains valid DNS servers, try to /ping www.mikrotik.com to see, that DNS resolving works • make sure that connection tracking is enabled:...
  • Page 518 Configuring Walled Garden feature, it is possible to allow users to access some web pages without the need of prior authentication. Getting Address Page 504 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 519 (or to a specified parent proxy). When a user is logged in, there is no effect of this table on him/her. Page 505 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 520 If authentication is done locally, profile corresponding to that user is Page 506 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 521 The accounting information for each user may be sent to a RADIUS server. Page 507 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 522: Question&Answer-Based Setup

    • import-other-certificate - setup the certificates not imported yet, and ask this question again Page 508 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 523: Hotspot Interface Setup

    ( name ) - interface to run HotSpot on Page 509 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 524: Hotspot Server Profiles

    /ip proxy direct list. If not specified, the address defined in parent-proxy parameter of Page 510 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 525 ( name | none ; default: none ) - name of the SSL certificate to use for HTTPS authentication. Not used for other authentication methods Page 511 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 526: Hotspot User Profiles

    HotSpot Cookies Home menu level: /ip hotspot cookie Description Page 512 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 527: Http-Level Walled Garden

    ( IP address ) - IP address of the destination web server Page 513 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 528: Ip-Level Walled Garden

    HTTP and HTTPS protocol specific properties (like the actual DNS name, HTTP method and path used in requests). Property Description Page 514 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 529: One-To-One Nat Static Address Bindings

    • blocked - the translation will not be preformed, and all packets from the host will be dropped Page 515 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 530: Active Host List

    ( read-only: IP address ) - what address is the original IP address of the host translated Page 516 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 531: Service Port

    NAT algorithm. NAT rules Page 517 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 532 Providing SMTP proxy for authorized users (the same as in rule #12) Page 518 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 533: Customizing Hotspot: Http Servlet Pages

    • popup - whether to pop-up a status window on successfull login Page 519 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 534 Page 520 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 535 HotSpot server. For example, to show a link to the login page, following construction can be used: Page 521 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 536 • username - the name of the user ("John") • User status information: Page 522 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 537 • radius<id> - show the attribute identified with <id> in text string form (in case RADIUS authentication was used; "" otherwise) Page 523 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 538: Customizing Error Messages

    (which references to the md5.js which must be already loaded) before the Page 524 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 539 To choose different page shown after login, in login.html change: Page 525 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 540 Page 526 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 541: Possible Error Messages

    IP addresses in IP pool Page 527 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 542: Hotspot How-To's

    Page 528 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 543: Http Proxy

    Description Command Description HTTP Methods Description General Information Page 529 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 544 Home menu level: /ip proxy Standards and Technologies: HTTP/1.0 HTTP/1.1 Related Documents Page 530 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 545: Setup

    (one 2 MiB object hit counts for 2048 1KiB hits). If you wish to Page 531 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 546: Access List

    If the particular connection does not match any rule, it will be allowed. Page 532 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 547: Direct Access List

    Direct Access List Home menu level: /ip proxy direct Description Page 533 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 548: Cache Management

    ( IP address | netmask ) - destination address of the IP packet Page 534 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 549: Proxy Monitoring

    • invalid-hostname - proxy is enabled, but not running because of invalid hostname (you should Page 535 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 550: Connection List

    This menu shows statistics on objects stored in cache (cache inserts) Page 536 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 551: Cache Lookups

    - formats non-system cache drive and prepairs it for holding the cache Page 537 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 552: Http Methods

    Responses to POST method are not cacheable, unless the response includes appropriate Page 538 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 553 Responses to this method MUST NOT be cached. Page 539 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 554: Ip Pools

    DHCP Client and Server • HotSpot Gateway • Universal Client Interface Page 540 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 555: Setup

    ( read-only: IP address ) - IP address that is assigned to client form the pool Page 541 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 556 192.168.0.100 00:0C:42:03:1F:60 test local 192.168.0.99 00:0C:42:03:21:0F test Page 542 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 557: Socks Proxy Server

    Hardware usage: Not significant Related Documents • • Web Proxy • Page 543 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 558: Socks Configuration

    1080 connection-idle-timeout: 2m max-connections: 200 [admin@MikroTik] ip socks> Page 544 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 559: Access List

    80.91.34.241:80 11 192.168.0.2:3262 80.91.34.241:80 [admin@MikroTik] ip socks connections> Page 545 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 560: General Information

    Note! In order to use SOCKS proxy server, you have to specify its IP address and port in your FTP Page 546 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 561 In this case IP address would be 192.168.0.1 (router's/SOCKS server's local IP) and port 1080. Page 547 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 562: Upnp

    (the one the Internet is connected to). A router may only have one external interface with a 'public' Page 548 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 563: Enabling Universal Plug-N-Play

    • external - the interface global IP address is assigned to • internal - router's local interface Page 549 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 564 [admin@MikroTik] ip upnp interfaces> print Flags: X - disabled Page 550 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 565 [admin@MikroTik] ip upnp interfaces> .. set enabled=yes [admin@MikroTik] ip upnp interfaces> Page 551 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 566: Web Proxy

    Transparent proxy. Can be transparent and regular at the same time Page 552 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 567 When setting up Web proxy, make sure it serves only your clients, and is not misused as relay. Page 553 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 568: Setup

    • dns-missing - proxy is enabled, but not running because of unknown DNS server (you should specify it under /ip dns) Page 554 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 569: Access List

    2048 KiB [admin@MikroTik] ip web-proxy> Access List Page 555 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 570 Home menu level: /ip web-proxy access Description Access list is configured in the same way as MikroTik RouterOS firewall rules. Rules are processed from the top to the bottom. First matching rule specifies decision of what to do with this connection.

  • Page 571: Direct Access List

    Page 557 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 572: Cache Management

    - deletes existing cache and creates new cache directories Page 558 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 573: Transparent Mode

    (or) the requirements associated with a resource without initiating any resource retrieval Page 559 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 574 Responses to this method are not cacheable. TRACE Page 560 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 575 Responses to this method MUST NOT be cached. Page 561 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 576: Certificate Management

    CA is VeriSign, but that is not the only one) Page 562 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 577: Certificates

    - delete all cached decrypted public keys and rebuild the certificate cache Page 563 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 578 Page 564 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 579 0.0.0.0/0 0.0.0.0/0 hotspot-ssl 0.0.0.0/0 cert1 [admin@MikroTik] ip service> Page 565 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 580: Ddns Update Tool

    Note that you have to have a DNS server that supports DNS updates properly configured. Page 566 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 581: Dynamic Dns Update

    [admin@MikroTik] tool> dns-update dns-server=23.34.45.56 name=mydomain \ \... zone=myzone.com address=68.42.14.4 key-name=dns-update-key key=update Page 567 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 582: Gps Synchronization

    Description Property Description Example General Information Summary Global Positioning System (GPS) receiver can be used by MikroTik RouterOS to get the precise location and time (which may be used as NTP time source) Specifications Packages required: gps License required: level1...

  • Page 583: Synchronizing With A Gps Receiver

    [admin@MikroTik] system gps> set enabled=yes port=serial0 Page 569 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 584: Gps Monitoring

    "0.001600 km/h" valid: yes [admin@MikroTik] system gps> Page 570 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 585: Lcd Management

    Standards and Technologies: None Hardware usage: Not significant Related Documents Page 571 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 586 Note that there are some PowerTip PC2404A modules that have different pin-out. Compare: Page 572 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 587: Configuring The Lcd's Settings

    ( name | parallel ; default: parallel ) - name of the port where the LCD is connected. May be Page 573 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 588: Lcd Information Display Configuration

    [admin@MikroTik] system lcd page> print Flags: X - disabled Page 574 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 589: Lcd Troubleshooting

    Probably none of the information display items have been enabled. Use the /system lcd page set command to enable the display. Page 575 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 590: Mndp

    Standards and Technologies: MNDP Hardware usage: Not significant Related Documents Page 576 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 591: Setup

    MNDP basic function is to assist with automatic configuration of features that are only available between MikroTik routers. Currently this is used for the 'Packet Packer' feature. The 'Packet Packer' may be enabled on a per interface basis. The MNDP protocol will then keep information about what routers have enabled the 'unpack' feature and the 'Packet Packer' will be used for traffic between these routers.
  • Page 592 1 ether2 1.1.1.3 00:0C:42:03:02:ED MikroTik 2.9beta5 [admin@MikroTik] ip neighbor> Page 578 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 593: System Clock And Ntp

    ( read-only: yes | no ; default: no ) - whether the Daylight Saving Time is currently acitve Page 579 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 594: System Clock Dst Adjustment

    To make DST zonechange active from mar/27/2005 03:00:00 till oct/30/2005 03:00:00: Page 580 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 595: General Information

    - acts the same as broadcast mode, only instead of broadcast messages (IP Page 581 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 596: Client

    [admin@MikroTik] system ntp client> Server Home menu level: /system ntp server Page 582 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 597: Time Zone

    12:24:42 time-zone: +02:00 [admin@MikroTik] system clock> Page 583 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 598 08:13:28 time-zone: -03:00 [admin@MikroTik] system clock> Page 584 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 599: Routerboard-Specific Functions

    • BIOS upgrading • BIOS configuration Page 585 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 600: Bios Upgrading

    230 serial-number: 8524983 current-firmware: 1.3.4beta7 (Nov/12/2004 17:12:58) Page 586 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 601: Bios Configuration

    ( fail-safe | optimal ; default: auto ) - SDRAM memory speed Page 587 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 602: System Health Monitoring

    It is not available if LM87 chip is not detected successfully. All values are 10 second Page 588 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 603: Led Management Or Rb200

    ( yes | no ; default: no ) - whether the LED2 is on Page 589 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 604: Led Management On Rb500

    ( time ; default: 0 ) - how long to hold the set state value, and then return to the prevoius Page 590 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 605: Console Reset Jumper

    Special flag that prevents any other program except serial console to acquire this port is set • Router is rebooted Page 591 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 606: Support Output File

    The support file is used for debugging MikroTik RouterOS and to solve the support questions faster. All MikroTik Router information is saved in a binary file, which is stored on the router and can be downloaded from the router using ftp.

  • Page 607: System Resource Management

    Property Description Configuration Change History Description Command Description Page 593 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 608: General Information

    To view the current system CPU usage and free memory: Page 594 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 609: Irq Usage Monitor

    0xCF8-0xCFF [PCI conf1] 0x4000-0x40FF [PCI CardBus #03] Page 595 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 610: Usb Port Information

    [admin@MikroTik] system resource pci> print # DEVICE VENDOR NAME Page 596 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 611: Reboot

    Only users, which are members of groups with reboot privileges are permitted to shutdown the Page 597 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 612: Router Identity

    • manual - adjust all time zone and DST settings manally Notes Page 598 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 613: System Clock Manual Adjustment

    Home menu level: Command name: /system history , /undo , /redo Page 599 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 614: System Note

    To configure Page 600 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 615 If you want to enter or edit multiline system note, you may need to use embedded text editor: /system note edit note Page 601 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 616: Bandwidth Test

    Property Description Example General Information Summary The Bandwidth Tester can be used to monitor the throughput only to a remote MikroTik router (either wired or wireless) and thereby help to discover network "bottlenecks". Specifications Packages required: system License required: level1...

  • Page 617: Server Configuration

    2000 max-sessions: 10 [admin@MikroTik] tool> Active sessions: Page 603 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 618: Client Configuration

    To run 15-second long bandwidth-test to the 10.0.0.211 host sending and receiving 1000-byte UDP packets and using username admin to connect Page 604 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 619 3.33Mbps rx-10-second-average: 3.68Mbps rx-total-average: 3.49Mbps [admin@MikroTik] tool> Page 605 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 620: Icmp Bandwidth Test

    Page 606 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 621 [admin@MikroTik] tool> ping-speed 159.148.60.2 interval=1s current: 2.23Mbps average: 2.61Mbps [admin@MikroTik] tool> Page 607 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 622: Packet Sniffer

    (when using switched network, a computer may catch only the data addressed to it or is forwarded through it). Specifications Page 608 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 623: Packet Sniffer Configuration

    ( read-only: yes | no ; default: no ) - if the sniffer is started then the value is yes otherwise Page 609 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 624: Running Packet Sniffer

    [admin@MikroTik] tool sniffer> /file print # NAME TYPE SIZE CREATION-TIME Page 610 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 625: Sniffed Packets

    • gre - General Routing Encapsulation • esp - IPsec ESP protocol Page 611 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 626: Packet Sniffer Protocols

    ( read-only: ip | arp | rarp | ipx | ipv6 ) - the name/number of ethernet protocol • ip - Internet Protocol Page 612 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 627 PACKETS BYTES SHARE 0 ip 4592 100 % Page 613 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 628: Packet Sniffer Host

    ( read-only: IP address ) - source address Page 614 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 629 -- [Q quit|D dump|down] Page 615 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 630: Ping

    (Time to Live). Is is decremented at each machine in Page 616 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 631: The Ping Command

    To resolve IP address from a DNS name, type the command: /ping www.google.lv Page 617 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 632: Mac Ping Server

    [admin@MikroTik] tool mac-server ping> print enabled: no [admin@MikroTik] tool mac-server ping> Page 618 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 633: Torch (Realtime Traffic Monitor)

    The Torch Command Command name: /tool torch Property Description Page 619 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 634 To see what tcp/udp protocols are going through the ether1 interface: Page 620 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 635 2.11kbps 1059 139 (netbios-ssn) 248bps 360bps [admin@MikroTik] tool> Page 621 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 636: Traceroute

    Traceroute shows the number of hops to the given host address of every passed gateway. Traceroute Page 622 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 637: The Traceroute Command

    134ms 17 216.239.39.101 134ms 134ms 135ms [admin@MikroTik] tool> Page 623 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 638: Network Monitor

    Standards and Technologies: none Hardware usage: Not significant Page 624 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 639 Let's look at the example above - it changes default route if gateway becomes unreachable. How it's Page 625 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 640 14:15:36 status=up up-script=e-up down-script=e-down [admin@MikroTik] tool netwatch> Page 626 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 641: Serial Port Monitor

    ( read-only: integer ) - how many times the event for this item was triggered. Count is reset Page 627 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 642 [admin@MikroTik] tool sigwatch> print detail Page 628 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 643 It will continue all the time until the serial cable will not be connected again. Page 629 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 644: Scripting Host

    Script Repository Description Property Description Command Description Notes Example Page 630 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 645: General Information

    • Serial Port Monitor Console Command Syntax Description Page 631 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 646 :for i from=1 to=10 do={:put $i} Page 632 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 647: Expression Grouping

    0.0.0.0/0 write 0.0.0.0/0 read 0.0.0.0/0 [admin@MikroTik] ip route> Page 633 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 648: Variables

    This is called command substitution. Page 634 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 649: Operators

    < - less. Binary operator which compares two numbers, two time values or two IP addresses. Returns boolean value Page 635 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 650 [admin@MikroTik] interface> :put (10.0.0.15 + 10) 10.0.0.25 [admin@MikroTik] interface> Page 636 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 651 [admin@MikroTik] interface> :put (~((0.0.0.1 << 7) - 1)) 255.255.255.128 [admin@MikroTik] interface> Concatenation Page 637 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 652: Data Types

    Time intervals can be entered either using HH:MM:SS.MS notation, e.g.: [admin@MikroTik] > :put 01:12:1.01 01:12:01.010 [admin@MikroTik] > Page 638 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 653: Command Reference

    The if parameter, if present, is evaluated only once Page 639 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 654 ( text ) - contains the command to be executed repeatedly Page 640 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 655 | no ) - controls third LED ( yes | no ) - controls fourth LED ( time ) - specifies the length of the action Page 641 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 656 [admin@MikroTik] > ([:pick $string 10]=[:nothing]) do={ Page 642 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 657 Measuring time needed to resolve www.example.com [admin@MikroTik] > :put [:time [:resolve www.example.com Page 643 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 658: Special Commands

    - condition, which is evaluated each time before the execution of enclosed statements ( text ) - console commands that should be executed repeatedly [admin@MikroTik] > :set i 0; :while ($i < 10) do={:put $i; :set i ($i + 1)}; [admin@MikroTik] >...

  • Page 659: Additional Features

    It is also possible to start a script manually via /system script run command. Page 645 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 660: Task Management

    "Hello World!" [admin@MikroTik] system script> Task Management Page 646 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 661: Script Editor

    • Ctrl+k - deletes characters from cursor position to the end of line Page 647 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 662 This script is used for writing message "hello" and 3 messages "kuku" to the system log. Page 648 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 663: Scheduler

    The scheduler can trigger script execution at a particular time moment, after a specified time interval, or both. Property Description Page 649 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 664 [admin@MikroTik] system script> add name=start_limit source={/queue simple set \ \... Cust0 limit-at=64000} Page 650 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 665 12:00:00 log-x oct/30/2008 00:00:00 [admin@MikroTik] system scheduler> Page 651 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 666: Traffic Monitor

    Property Description Page 652 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 667 12000 eth-down [admin@MikroTik] tool traffic-monitor> Page 653 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 668: Ip Telephony

    Notes Example Regional Settings Description Property Description Notes Page 654 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 669: General Information

    Related Documents • Package Management • ISDN • Page 655 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 670 The jitter buffer is delaying the actual playback of a received packet forming Page 656 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 671: General Voice Port Settings

    ( integer ; default: "" ) - number to be dialed automatically, if call is coming in from this voice port Notes Page 657 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 672: Voicetronix Voice Ports

    ( name ) - port name to test balance of Page 658 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 673: Linejack Voice Ports

    LineJack Voice Ports Home menu level: /ip telephony voice-port linejack Page 659 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 674 ( text ) - minimal/average/maximal intervals between packets received ( time ) - Page 660 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 675: Phonejack Voice Ports

    If the number is incorrect, busy tone is played. If the number is correct, then the appropriate number is dialed Page 661 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 676 ( phone | line ) - the active port of the card Page 662 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 677: Zaptel Voice Ports

    - terminate a current call established with the specified voice port ( name ) - port name to Page 663 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 678: Isdn Voice Ports

    ( integer : -48 ..48 ; default: 0 ) - playback volume in dB Page 664 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 679 Page 665 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 680: Voice Port For Voice Over Ip (Voip)

    Therefore, it should be turned off, if there are problems to establish telephony connection using the fast start mode Numbers Page 666 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 681 If nr=12345, it matches the record #0, therefore number "" is dialed over the voice port XX Page 667 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 682 If nr=325 => matches the record #5 => nc=55325, vp=LL Page 668 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 683: Regional Settings

    ( integer : 0 ..30000 ; default: 1000,2000 ) - Ring tone cadence in ms • 0 - end of cadence Page 669 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 684: Audio Codecs

    [admin@MikroTik] ip telephony codec> Home menu level: /ip telephony aaa Description Page 670 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 685 • 5 - Remote endpoint did not answer in required time Page 671 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 686: Gatekeeper

    Page 672 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 687 [admin@MikroTik] ip telephony voice-port voip> print Page 673 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 688 XD 78 local XD 3_ local D 76 10.0.0.100 Page 674 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 689: Troubleshooting

    Description The following describes examples of some useful IP telephony applications using MikroTik RouterOS. Let us consider the following example of IP telephony gateway, one MikroTik IP telephone, and one Welltech LAN Phone 101 setup: Page 675 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
  • Page 690 The IP telephony gateway [voip_gw] requires the following configuration: • Set the regional setting to match our PBX. The mikrotik region will be used in thisn example: [admin@voip_gw] ip telephony voice-port linejack> set linejack1 region=mikrotik [admin@voip_gw] ip telephony voice-port linejack> print Flags: X - disabled name="linejack1"...
  • Page 691 We recommend to upgrade the Welltech LAN Phone 101 with the latest application software. Page 677 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 692 -add name gw ip 10.1.1.12 usr/config$ Page 678 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 693 1 pots destination-pattern 101 port 0/0 exit Page 679 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 694 97 voip destination-pattern 097 session target ipv4:10.0.0.97 codec g711ulaw Page 680 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 695 To dial from the main office PBX#2 any extension of the remote office PBX#1, the actions are the same as in first situation. Page 681 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 696: System Watchdog

    ( yes | no ; default: no ) - whether to reboot if system is unresponsive for a minute Page 682 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 697 192.0.2.1 send-email-to: support@example.com [admin@MikroTik] system watchdog> Page 683 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 698: Ups Monitor

    "smart" mode status information supported by UPS • logging of power changes Specifications Page 684 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 699: Ups Monitor Setup

    When the value reaches the min-runtime value, the router will go to hibernate mode Page 685 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 700: Runtime Calibration

    This command calibrates the returned run time value. Page 686 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 701: Ups Monitoring

    When running on utility power: [admin@MikroTik] system ups> monitor 0 on-line: yes Page 687 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 702 [admin@MikroTik] system ups> Page 688 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 703: Vrrp

    HMAC-MD5-96 within ESP and AH Hardware usage: Not significant Page 689 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 704: Vrrp Routers

    ( integer : 1 ..255 ; default: 1 ) - VRRP update interval in seconds. Defines how frequently Page 690 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 705: Virtual Ip Addresses

    Home menu level: /ip vrrp address Property Description Page 691 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

  • Page 706: A Simple Example Of Vrrp Fail Over

    A simple example of VRRP fail over Description Page 692 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 707 M name="vr1" interface=local vrid=1 priority=255 interval=1 preemption-mode=yes authentication=none password="" on-backup="" on-master="" Page 693 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 708 Now, when we will disconnect the master router, the backup one will switch to the master state: Page 694 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
  • Page 709 2 D 192.168.1.1/24 192.168.1.0 192.168.1.255 local [admin@MikroTik] ip vrrp> Page 695 of 695 Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA. Other trademarks and registred trademarks mentioned herein are properties of their respective owners.

Table of Contents

Save PDF