- Page 1 and 2:
MikroTik RouterOS v2.8 Reference Ma
- Page 3 and 4:
Removing Device Drivers............
- Page 5 and 6:
General Information................
- Page 7 and 8:
Source NAT.........................
- Page 9 and 10:
Router User Groups.................
- Page 11 and 12:
LCD Information Display Configurati
- Page 13 and 14:
Basic Setup Guide Document revision
- Page 15 and 16:
Downloading and Installing the Mikr
- Page 17 and 18:
• You shoud have an account on ou
- Page 19 and 20:
The list of available commands at a
- Page 21 and 22:
Description Interface Management Be
- Page 23 and 24:
e assigned. If the setup offers you
- Page 25 and 26:
2 DC 10.0.0.0/24 r 0.0.0.0 0 Public
- Page 27 and 28:
interface=Local queue=default prior
- Page 29 and 30:
Terminal Console Document revision
- Page 31 and 32:
[admin@MikroTik] ip route> /ping 10
- Page 33 and 34:
Notes Pressing [Tab] key while ente
- Page 35 and 36:
edit - this command is in every pla
- Page 37 and 38:
Package Management Document revisio
- Page 39 and 40:
• Check the information about the
- Page 41 and 42:
• Ethernet interface support •
- Page 43 and 44:
Specifications Sheet Document revis
- Page 45 and 46:
"El Torito" bootable CDs (you might
- Page 47 and 48:
Device Driver List Document revisio
- Page 49 and 50:
• 3c905B Cyclone 10/100/BNC • 3
- Page 51 and 52:
• Macronix 98715 PMAC • Macroni
- Page 53 and 54:
Compatibility: • Planet ENW-9601T
- Page 55 and 56:
• Olicom OC-2326 VIA vt612x 'Velo
- Page 57 and 58:
• Samsung SWL2000-N 11Mbit/s 802.
- Page 59 and 60:
• Moxa Smartio C104H/PCI, CP-114,
- Page 61 and 62:
Driver Management Document revision
- Page 63 and 64:
0xF0-0xFF FPU 0x100-0x13F [prism2_c
- Page 65 and 66:
General Interface Settings Document
- Page 67 and 68:
Description The traffic passing thr
- Page 69 and 70: Additional Documents • http://www
- Page 71 and 72: The interface should be enabled acc
- Page 73 and 74: 1 1.1.1.2/32 1.1.1.1 1.1.1.1 farsyn
- Page 75 and 76: Finally we need to add IP addresses
- Page 77 and 78: • accessing an Intranet/LAN of a
- Page 79 and 80: [admin@MikroTik] interface l2tp-cli
- Page 81 and 82: [admin@MikroTik] interface l2tp-ser
- Page 83 and 84: To route the local Intranets over t
- Page 85 and 86: On the L2TP server a user must be s
- Page 87 and 88: CISCO/Aironet 2.4GHz 11Mbps Wireles
- Page 89 and 90: Try to change the I/O base address
- Page 91 and 92: Troubleshooting Description Keep in
- Page 93 and 94: The default route should be set to
- Page 95 and 96: The second router will have address
- Page 97 and 98: 1. Add an IPIP interface (by defaul
- Page 99 and 100: [admin@MikroTik] interface ipip> pr
- Page 101 and 102: Additional Documents • http://www
- Page 103 and 104: MOXA C502 Dual-port Synchronous Int
- Page 105 and 106: Example [admin@MikroTik] interface
- Page 107 and 108: [admin@MikroTik] ip route> print Fl
- Page 109 and 110: Flags: X - disabled, I - invalid, D
- Page 111 and 112: Description VLANs are simply a way
- Page 113 and 114: [admin@MikroTik] interface vlan> pr
- Page 115 and 116: Description Installing the Wireless
- Page 117 and 118: [admin@MikroTik] interface radiolan
- Page 119: Ethernet interfaces respectively. T
- Page 123 and 124: 0 1.1.1.1/24 1.1.1.0 1.1.1.255 pvc1
- Page 125 and 126: Troubleshooting Description • I c
- Page 127 and 128: Hardware usage: Not significant Rel
- Page 129 and 130: mtu (integer; default: 1500) - Maxi
- Page 131 and 132: session-timeout=0s idle-timeout=0s
- Page 133 and 134: In this case the backup interface i
- Page 135 and 136: PPTP Document revision 1.3 (Thu May
- Page 137 and 138: outers as well as between routers a
- Page 139 and 140: Property Description enabled (yes |
- Page 141 and 142: • [HomeOffice] Interface LocalHom
- Page 143 and 144: [admin@RemoteOffice]> /ping 10.150.
- Page 145 and 146: The setup of the connections takes
- Page 147 and 148: Description Property Description No
- Page 149 and 150: Description The Atheros card has be
- Page 151 and 152: urst-time (time; default: disabled)
- Page 153 and 154: • dynamic - WDS interfaces are cr
- Page 155 and 156: may be combined into one bigger one
- Page 157 and 158: supported-rates-b=1Mbps,2Mbps,5.5Mb
- Page 159 and 160: The access list is used by the Acce
- Page 161 and 162: firmware (read-only: text) - curren
- Page 163 and 164: simultaneously mtu (integer: 68..16
- Page 165 and 166: This feature is created to position
- Page 167 and 168: Example [admin@MikroTik] interface
- Page 169 and 170: You need Level5 license to enable t
- Page 171 and 172:
Router Home • ssid = wds-test •
- Page 173 and 174:
Wireless Security Example Let us co
- Page 175 and 176:
EoIP Tunnel Interface Document revi
- Page 177 and 178:
arp (disabled | enabled | proxy-arp
- Page 179 and 180:
tunnel: [admin@Our_GW] interface eo
- Page 181 and 182:
Additional Documents • Xpeed home
- Page 183 and 184:
MikroTik Router to Cisco Router Let
- Page 185 and 186:
ARLAN 655 Wireless Client Card Docu
- Page 187 and 188:
Example [admin@MikroTik] > interfac
- Page 189 and 190:
Bridge Document revision 1.4 (Wed F
- Page 191 and 192:
can be connected together using MAC
- Page 193 and 194:
Property Description bridge-id (tex
- Page 195 and 196:
dst-address (IP address/mask; defau
- Page 197 and 198:
When configuring the MikroTik route
- Page 199 and 200:
MOXA C101 Synchronous Interface Doc
- Page 201 and 202:
Moxa c101 synchronous interface is
- Page 203 and 204:
The driver for MOXA C101 card shoul
- Page 205 and 206:
The driver for MOXA C101 card shoul
- Page 207 and 208:
Cyclades PC300 PCI Adapters Documen
- Page 209 and 210:
• Non-CRC4 - plain Cyclic Redunda
- Page 211 and 212:
[admin@MikroTik] ip route> add gate
- Page 213 and 214:
addresses or DHCP are used. It is a
- Page 215 and 216:
user (text; default: "") - a user n
- Page 217 and 218:
keepalive packets every second. If
- Page 219 and 220:
Configure the logging feature under
- Page 221 and 222:
[admin@MT_Prism_AP] ip pool> /ppp p
- Page 223 and 224:
• Cyclades (http://www.cyclades.c
- Page 225 and 226:
[admin@MikroTik] interface ppp-serv
- Page 227 and 228:
Now we need to setup the client to
- Page 229 and 230:
IP Addressing Home menu level: /ip
- Page 231 and 232:
1 D 10.5.7.242 00:A0:24:9D:52:A4 et
- Page 233 and 234:
Description Unnumbered interfaces c
- Page 235 and 236:
Standards and Technologies: IPsec H
- Page 237 and 238:
Group 5 1536 bits RFC3526 IKE Traff
- Page 239 and 240:
match each other, id est src-addres
- Page 241 and 242:
[admin@WiFi] ip ipsec peer> Remote
- Page 243 and 244:
installed SA table so that SA could
- Page 245 and 246:
\... secret="gvejimezyfopmekun" gen
- Page 247 and 248:
• for MikroTik router [admin@Mikr
- Page 249 and 250:
• FreeS/WAN configuration: config
- Page 251 and 252:
• Package Management • IP Addre
- Page 253 and 254:
[admin@MikroTik] ip route> set 0 ga
- Page 255 and 256:
• drop - silently drop packet •
- Page 257 and 258:
# TYPE DST-ADDRESS G GATEWAY DISTAN
- Page 259 and 260:
Connection Tracking Home menu level
- Page 261 and 262:
6 quake3 [admin@test_1] ip firewall
- Page 263 and 264:
• IP Addresses and ARP • Routes
- Page 265 and 266:
• dont-change - leave MSS of the
- Page 267 and 268:
MNDP Document revision 0.3.0 (Fri M
- Page 269 and 270:
Description This submenu allows you
- Page 271 and 272:
• To deny acces to router via Tel
- Page 273 and 274:
Description A rule is an expression
- Page 275 and 276:
content (text; default: "") - the t
- Page 277 and 278:
• none - not applicable Usually p
- Page 279 and 280:
The IP addresses and routes of the
- Page 281 and 282:
y the ISP (see the network diagram
- Page 283 and 284:
IP Pools Document revision 0.0 (Thu
- Page 285 and 286:
Peer to Peer Traffic Control Docume
- Page 287 and 288:
Peer-to-peer traffic marking provid
- Page 289 and 290:
[admin@MikroTik] ip firewall rule f
- Page 291 and 292:
VRRP Document revision 1.4 (Fri Mar
- Page 293 and 294:
advertisement packets • none - no
- Page 295 and 296:
This example shows how to configure
- Page 297 and 298:
Network Address Translation Documen
- Page 299 and 300:
tells web server address, so proxy
- Page 301 and 302:
If the packet matches the masquerad
- Page 303 and 304:
UPnP Document revision 2.2 (Tue Mar
- Page 305 and 306:
Notes It is highly recommended to u
- Page 307 and 308:
M3P Document revision 0.3.0 (Wed Ma
- Page 309 and 310:
unpacking (none | simple | compress
- Page 311 and 312:
• AAA Description The MikroTik ro
- Page 313 and 314:
allow-remote-requests: no cache-siz
- Page 315 and 316:
To set www service to use 8081 port
- Page 317 and 318:
HotSpot Gateway Document revision 3
- Page 319 and 320:
Universal Client feature may be use
- Page 321 and 322:
walled garden feature allows users
- Page 323 and 324:
Question&Answer-Based Setup Command
- Page 325 and 326:
dns-name (text) - DNS name of the H
- Page 327 and 328:
outgoing-filter (name) - name of th
- Page 329 and 330:
Otherwise, the password should be e
- Page 331 and 332:
[admin@MikroTik] ip hotspot aaa> se
- Page 333 and 334:
information about HotSpot service p
- Page 335 and 336:
• Registration may occur on a dif
- Page 337 and 338:
• bytes-in - number of bytes rece
- Page 339 and 340:
If still nothing happens, press her
- Page 341 and 342:
database. Solution: log in from the
- Page 343 and 344:
Internet gateway 10.5.6.1, for exam
- Page 345 and 346:
Note! Changing www service to other
- Page 347 and 348:
ip hotspot set hotspot-address=10.5
- Page 349 and 350:
Summary The DHCP (Dynamic Host Conf
- Page 351 and 352:
Notes If host-name property is not
- Page 353 and 354:
enew this address after a half of t
- Page 355 and 356:
address (IP address; default: 0.0.0
- Page 357 and 358:
dhcp server interface (name) - inte
- Page 359 and 360:
Universal Client Interface Document
- Page 361 and 362:
Universal Host List Home menu level
- Page 363 and 364:
IP Telephony Document revision 2.2
- Page 365 and 366:
Description IP telephony, known as
- Page 367 and 368:
If autodial does not exactly match
- Page 369 and 370:
name (name) - name given by the use
- Page 371 and 372:
ing-cadence (text) - a 16-symbol ri
- Page 373 and 374:
number of packets received by this
- Page 375 and 376:
There is a possibility to enter som
- Page 377 and 378:
ZZ • If nr=444, it matches the re
- Page 379 and 380:
To generate a tone, frequency and c
- Page 381 and 382:
• 10 - Call failed as could not f
- Page 383 and 384:
0 11 phonejack1 1 _ voip1 [admin@Mi
- Page 385 and 386:
Setting up the MikroTik IP Telephon
- Page 387 and 388:
# DST-PATTERN VOICE-PORT PREFIX 0 3
- Page 389 and 390:
• G.729a codec MUST be disabled (
- Page 391 and 392:
We want to be able to use make call
- Page 393 and 394:
MikroTik RouterOS implements OSPF V
- Page 395 and 396:
contains some examples: Example net
- Page 397 and 398:
To enable the OSPF protocol on the
- Page 399 and 400:
Property Description address (read-
- Page 401 and 402:
2 R to_peer_2 ether 0 0 1500 Add al
- Page 403 and 404:
# NETWORK AREA 0 10.2.0.0/24 local_
- Page 405 and 406:
C - connect, S - static, r - rip, o
- Page 407 and 408:
RIP Document revision 1 (Wed Mar 24
- Page 409 and 410:
outes metric-ospf (integer; default
- Page 411 and 412:
Example To enable RIP protocol on 1
- Page 413 and 414:
0 R ether1 ether 1500 1 R ether2 et
- Page 415 and 416:
BGP (Border Gateway Protocol) Docum
- Page 417 and 418:
state (read-only: disabled | runnin
- Page 419 and 420:
Try to see if the peer is directly
- Page 421 and 422:
When there is a match, the route is
- Page 423 and 424:
AAA Document revision 2.1 (Fri Dec
- Page 425 and 426:
• L2TP • ISDN Description The M
- Page 427 and 428:
Notes There is one predefined user
- Page 429 and 430:
each packet coming from the client,
- Page 431 and 432:
To add the user ex with lkjrht pass
- Page 433 and 434:
enabled: yes threshold: 256 [admin@
- Page 435 and 436:
• PPPoE - service name • PPTP -
- Page 437 and 438:
• NAS-Port - unique session ID
- Page 439 and 440:
Note that the received attributes o
- Page 441 and 442:
Framed-Protocol 7 RFC2865 Framed-Ro
- Page 443 and 444:
Certificate Management Document rev
- Page 445 and 446:
decrypt - decrypt and cache public
- Page 447 and 448:
FTP (File Transfer Protocol) Server
- Page 449 and 450:
Ping Document revision 1 (Mon Jul 1
- Page 451 and 452:
To disable MAC pings: [admin@MikroT
- Page 453 and 454:
• SFQ - Stochastic Fair Queuing
- Page 455 and 456:
e less-prioritative than the ones n
- Page 457 and 458:
sfq-allot (integer; default: 1514)
- Page 459 and 460:
Example To add a simple queue that
- Page 461 and 462:
IP addresses on MikroTik: [admin@Mi
- Page 463 and 464:
1. Mark server's download and uploa
- Page 465 and 466:
1. Limit the overall download (256k
- Page 467 and 468:
1. Mark all packets with flow all:
- Page 469 and 470:
argument from is used, then it is p
- Page 471 and 472:
SNMP Service Document revision 1.7
- Page 473 and 474:
Home menu level: /snmp community De
- Page 475 and 476:
interfaces.ifTable.ifEntry.ifDescr
- Page 477 and 478:
host.hrSystem.hrSystemUptime host.h
- Page 479 and 480:
Title[RouterBOARD_queue]: Traffic A
- Page 481 and 482:
interface (name | all; default: all
- Page 483 and 484:
The Ping Command Command name: /pin
- Page 485 and 486:
DDNS Update Tool Document revision
- Page 487 and 488:
Torch (Realtime Traffic Monitor) Do
- Page 489 and 490:
[admin@MikroTik] tool> Page 477 of
- Page 491 and 492:
to analyze its behavior. Statistics
- Page 493 and 494:
Example To run 15-second long bandw
- Page 495 and 496:
Packages required: system License r
- Page 497 and 498:
Sniffed Packets Home menu level: /t
- Page 499 and 500:
• ipv6 - Internet Protocol next g
- Page 501 and 502:
[admin@MikroTik] tool sniffer conne
- Page 503 and 504:
utility sends packets three times t
- Page 505 and 506:
Property Description do (name) - as
- Page 507 and 508:
General Information Summary MikroTi
- Page 509 and 510:
0xC800-0xC87F [Cyclades Corporation
- Page 511 and 512:
[admin@MikroTik] > system shutdown
- Page 513 and 514:
LCD Management Document revision 2.
- Page 515 and 516:
Some LCDs may be connected without
- Page 517 and 518:
[admin@MikroTik] system lcd page> s
- Page 519 and 520:
Important! Support output contains:
- Page 521 and 522:
Home menu level: /system ssh Standa
- Page 523 and 524:
Configuration Backup and Restore Do
- Page 525 and 526:
Serial Console and Terminal Documen
- Page 527 and 528:
installation, the console is enable
- Page 529 and 530:
GPS Synchronization Document revisi
- Page 531 and 532:
[admin@MikroTik] system gps> print
- Page 533 and 534:
Task Management Description Propert
- Page 535 and 536:
path_args input :for i from=1 to=10
- Page 537 and 538:
Description Some console commands a
- Page 539 and 540:
sum [admin@MikroTik] interface> :pu
- Page 541 and 542:
• h, hour, hours - one hour • m
- Page 543 and 544:
time - this action calculates the a
- Page 545 and 546:
Property Description last-started (
- Page 547 and 548:
• Ctrl+u - undoes last action •
- Page 549 and 550:
In another example there will be tw
- Page 551 and 552:
Example This example will run the s
- Page 553 and 554:
Sigwatch Specifications Packages re
- Page 555 and 556:
UPS Monitor Document revision 2.1 (
- Page 557 and 558:
model (read-only: text) - less than
- Page 559 and 560:
smart-ssdd-mode - only shown when t
- Page 561 and 562:
Network Time Protocol (NTP) is used
- Page 563 and 564:
Home menu level: /system clock Note
- Page 565 and 566:
• Fan voltage control (on/off)
- Page 567 and 568:
System Health Monitoring Home menu
- Page 569 and 570:
• 0 - leave the state in the set
- Page 571 and 572:
There are 6 licensing levels, each
- Page 573 and 574:
• Failed to resolve www.mikrotik.
- Page 575 and 576:
Telnet Server and Client Document r
- Page 577 and 578:
Log Management Document revision 2.
- Page 579 and 580:
emote-address (IP address; default: