MikroTik Basic Configuration Prepared by: Mr. LEANG Tola Contact: +855968814005 /017728858 Email to : itolaleng.sna@gmailcom website: www. itolaleng.wordpress.com 2015-2016 Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolalengsna@gmail.com Page 1Contents |. Introduction VILL. Requirements IX. Practice Project A. Infrastructure Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng-sna@gmail.com Page 2I. Introduction 1.1. What is TCP (Transmission Control Protocol) /IP (Internet Protacol)? How TCPAP Work? Answer: TCP/IP for IP version 4 (IPv4) is a networking protocol suite that we uses to communicate over the inlemet with other computers, And i work as defines the details of how data is sent and received through network for example: hubs, switches, routers and other network communications devices. 1.2 What is router OS/RouterBoard? History (briefly)? Answers ~ MikroTik RouterOS: & the operating system of MikroTik RouterBOARD hardware. can also be installed on a PC and will tum it imo a router with all the necessary atures routing, firewall, bandwidth management, wireless access point, backhaul link, hotspot gateway, VPN server and more. = RouterOS: is a stand-alone operating system based on the Linux v2.6 kernel, and ourgoal here at MikroTikis to provide all these features with aquick and simple installation and an easy to use interface. ~The History of Mikrotik: MikroTikis.a Latvian company which was foundedin 1995 to develop routers and wireless SP systems. MikroTiknow provideshardware andsoftware for internet connectivity in most of the countries around the world. 1.3 Compare MikioTk & other venders? 1.4 MikroTik Function and Features? Answer: => Mikrotik Major features: Powerfil QoS control P2P traffe fikering High availability with VRRP Bonding of Interfaces Improved interface Smaller and Less resouree-hungry “Tons of other new features Advanced Quality of Service Statefil firewall, tunnels STP bridging with fering High speed 802.1 lavb/g wireless with WEP/WPA WDS and Virtual AP HotSpot for Plig-and-Phy access RIP, OSPF, BGP, MPLS routing remote WinBox GUI and Web admin telnet mac-telneussh/console admin time configuration and monitoring Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng sna@gm: Page 3Nv2 wireless TDMA support Nstreme wirekss protocol 3GILTE support 802. alb/e’n WPA? fall support OpenFlow support Many more listed_here LS MikroTi: Certification? newer = Approved MikroTik training programs and certificates: MTCNA - MikroTik Certified Network Associate (view outtine) MTCRE - MikroTik Certified Routing Engineer (view outline) MTCWE - MiktoTik Certified Wireless Engineer (view outline) MTCTCE - MikroTik Certitied Trafic Control Engineer (view outline) MTCUME - MikroTkk Certifed User Management Engineer (view outline) MTCINE - MikroTik Certiicd Inter-networking Engineer (view outline) 1.6 What kind of MikroTik Products that we shoukl recommend to customers for their using and required? Answer: In this required Twoull like to recommend 1 customers to we! Mikrotik RB9S1-2N Wireless Router 802.1 1big/n VIII. Requirements What are the material for practice kb with MikroTik? Answer: the materials for this 2. Website actice lab there are: -Mikrotik RB9S1-2N Wirekss Router internet connection Client PC for test ~ As prefer if more material or devices have Answer: hitpe/wwow. mikrotik.com bhiup?/fwwiw. mikro tik.cony/ tra ining hitp:/wwiw.amazon.com/Mikrotik-RB9S |-2N-Wireless-Router-802~ Lbidp/BOOSW7WEV6 Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng-sna@gmail.com Page 4IX. Practice Project A. Infrastructure Corara Security User Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng sna@gmail.com Page §1. Seemario: - MasBIT’s Customer requests our Technical support setup new connection for his new office that requirement below: Internet access © Basic configure the first acess to router vis. winbox we tnine Dowie 3 cet Puce tees Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng sna@gm Page 6+ Configure DHCP Server and Chent with the fill access/mlimited for management IP: 192.168. 1.10-192.168.1.50 © Client request DHCP IP address © Configure and choose the imerfice which chent could request Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng.sna@gmail.com Page 7a IP Address __[Evpies Aer [Statue 172303010 100-0558 bound. Itfound the IPaddress requested LY > Assign LAN interfiice and add new address 192,168.11 netmask 2 © 255.255.2550 eth? een Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng sna@gmail.com Page 8Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng,sna¢ com Page 9© Configure DHCP Poal fe nn ERSTE Yo i: (1855) 09686 14005, tolaleng.sna@gmail.com Page 10graceanaeyy® Prepared by Mr. LENG Tola, Tel I: (+855) 09688 14005, tolaleng-sna@gmail.com Page 11DHCP [Naas Lewes Opkons Onion Sets ets | DHCP eal ‘Lesses ‘Options Option Sets ets eo ‘DHCP Config || DHCP Sein ——__[atsy_ [Lene Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng.sna¢ Page 12[add AR. (Aas AR. Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng,sna¢ comDHCP | Nebnes Leares Opin Opton Sete Aria (=) (ee) [a [orcas J 1 Trtece lay [Lasse Tine —_(Adtest Pool [Aca AR | Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng,sna¢ com Page 14Natron iz ‘Leaves Optona Option Sets At | | DHCP Contig || DHCP Setup ut Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolalengsna¢ com Page 15‘Fier Rides “AT Mange Serica Pots Conmectone Adtruas Uts Layer el [] [oo mest Carin or as Care i: (1855) 05686 14005, tolaleng.sna@gmail.comHepUBe gc ELS tga 1 wom MOTI KKK EK ORRRARR = 000 000, TTT. KK 3G mm = emt TIT Moat aoe RAR ABR coo#”o) |= TTF TIT ear baat winroTix RoutetoS: 6.32.2 (¢) 1999-2015 Retp! //unde mikrotse:comy Gives the List of available comands Gives help on the command and list of arguments Completes the comand/word, If the input is ambiguous, a second (Tab) gives possible options Move up te bese level ‘Move up one level, Use command at che base level [edeuntiiesetik] > ping B.f58.8 SIZ TTL Tne sTATUS eimeent 4h Btme 1 6503 79m a1 Tin senteS rece:vedad packet=loaseZO¥ min=rctnG¥ma avgqrtt~7Sna tax-rrt=20me fodnin@ikrotak] > § : (4855) 09688 14005, tolaleng sna@gmai Page 17f Gb Administrator CAWindowslsystemzeredere Pee ee corer Peer et enecre ean yee] ents Os i a Creer eres re : oe) Sem ead Cos Cree ee eee ee Cree] Ce eee etd pared eee eT Cet emeernte | reno CeCe date rece £ hey, ore, rents ort Passe etc oe Packets: § f Cae Pree eet meee ehreee meres Cette oe Saar Tey Prepared by Mr. LENG Tola, Tek: (+855) 09688 14005, tolaleng.sna@gmail.com Page 18* Limit Internet Bandwidth per user (Normal User: 512kbpsieach), | just calculate the queue on the internets IPNumber 192168151 124 Upload download Max rt 312 1024 bits Burstimit 1024 1024 ros Burstinre stir bits Buirst time 1600 3900 s Tor" 254 hk Generate Generate queue simple add tarpet=182 168 1.51 name=192 168.151 marlimit=512K102ak burst limit=1024n/1024k burstaume=1800/1600 queue simple add targst=192 168 1.52 name=192.168.152 mavlimit-S12H1024k burst limits 1024er1024k burstaime= 1800/1800 ‘queue simple add target=192 189 453 name=192 188,153 matdimit=5121024K burst- limit=10244 1028 busstime= 1800/1800 queue simple ads target=192-158 1.54 name=192 168.1 54 maraimit=51241028k burst limits 10248/4024k buretsime=1800/1200 ‘usu Simple add target= 192.169. 1.55 name=192-168.1.55 matimit=51201024k burst limit=1624h/102¢k burstsime=1800/1800 ‘queue simpie add target=192 168 1.56 name=192-168.1.56 rmatimit=5121/1024K burst- limit= 10240 1024 butsttieme=1200/1200 ‘queue simple add targets 192 168.1 57 nament92:166.1.57 macsimiteS 1207024K Durst limit= 1024e/1024k burst.tme=1800/1800 aes sinaple add target=192-169.1.58 name=192.168.1.58 maxlimf=512W1024k burst: limits 1024K102ak burstsime=1800/1600 ‘queue simple add target=192 168 1.50 name=192.168,1.59 macsimit=5121/1026K burst. limit=1024H'1024k burstime=1800/1600 faueve simpie ads tarpet=192 168.1 60 name=192 168.160 marlimit=512k1024k burst limits 1024/1024 burstime=1800/1600 ‘queue simple add target=192.168.1.61 name=192:168,1.61 marimit=51241028k burst- limits1024/1024k burstaime=1800/1800 ‘queue simple ad target=192 188.162 name=192 188.162 macsimi=51201024k burst. himit= 10248/1024k burstime=1900/1800 queue simple add target=192 168.1.63 name=192 168.163 marslimit=512k/102¢k burst Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng.sna@gm: Page 19© Affer define the queue calculate, we need to past it into the router terminal to all the script command. ss eee Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolalengsna@gmail.com Page 20Setup Wi-Fi On MikroTik_ with SSID= ABC, and Password: abc(@2015 © Add wireless LAN and LAN bridge interface Prepared by Mr. LENG Tola, Tel i: (1855) 09688 14005, tolaleng.sna@gmail.com Page21I: (+855) 09688 14005, tolaleng-sna@gmail.com Page 22© Fenward port for his new cameras: DVR 192.168, 1.5/24 port software: 1122 and http: 8080 Farhi 0 [sige Sf Comci [fee rc carer | o(en omen) Aa on (Ts) Mle [ & De Asse: [808 Preah) ‘ro Poe: [30 esr [oon (ke sr: | To Asem: [HOTEL LE To Pots [080 i: (1855) 05686 14005, tolaleng.sna@gmail.com‘en (ron hes z > Test the wireless connection Not connected ae exif] Connections ar avaiabte oi j-up and VPN smart 3 Wireless Network Conmection fi Mexstt-Otice E (Connect automaticaly = MonSIT-Customer Linigfi : Kona Chea ai Open Network and Sharing Center Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolaleng sna@gmi Fer Fides “AT Marge Service Ports Gormmectons Address Lists Layer? Protoccis a) eile] (7) 00 Feet | oo Fee rte ‘se iim [Oa hie [pat Se Pot [bu Pon ww [Oa Currently connected to: ABC cea ial-up and VPN “ mn 3 Connected if! Page 25The End! Prepared by Mr. LENG Tola, Tel: (+855) 09688 14005, tolalengsna@gmail.com Page 26