Mikrotik Routers

History (About us taken directly from Mikrotik website)

Background
Mikrotik are famous for their RouterOS and also their RouterBoard hardware. Their products are affordable yet featured pack. In the SEA region, Indonesia ISP uses these Mikrotik routers in their backend. In fact if you Google about Mikrotik, Indonesia has a huge user base.

Over here in Malaysia, these Mikrotik routers became famous when Unifi was launched. At that time, Mikrotik routers had support VLAN tagging, and was one of the most affordable ones around. With VLAN tagging, it allowed the user to replace TM provided router with their own, while retaining both internet access and IPTV service.

RouterOS
RouterOS can be installed on a PC or on Mikrotik hardware, or better known as RouterBoard. You can read about the featuers of RouterOS with this PDF file from Mikrotik.

Their RouterOS comes in many versions from Level 0 to Level 6. Read the difference of each level here.
You may try and download the Level 0 which is a full featured RouterOS, but with a 24 hour limit.

RouterBoard
RouterBoard are special hardware platform manufactured by Mikrotik.
You can view all their hardware on their routerboard.com website.
You could also view the hardware features by viewing this PDF from Mikrotik.

You are able to interface with your RouterBoard via one of the following methods
| WinBox via IP or MAC address
| Web Interface via IP
| SSH via IP
| Telnet via IP
| Terminal via Serial connection (selected models) [This is OLD SKOOL]

Where to buy Mikrotik
Malaysia Distributor: Landasan Teknologi (M) Sdn Bhd (website)
Malaysia: Computer Zone
From Singapore: Just google Mikrotik Singapore and you'll get a few online retailers
From Lowyat Forum: Just do a forum search and you'll find some sellers

I have a Mikrotik and I need some help!
Start by visiting Mikrotik's Wiki page. For most home users, you'll find instructions with sample codes available.
Their Wiki pages also has lots of interesting articles, discussion topics as well as advance routing concepts.
If you are unable to find what you need, please try your best friend Google.
Or you could just post on this thread, and we'll hopefully someone who is expert enough to help.

Certification
There are basically 6 certification available. More info here.

MTCNA - MikroTik Certified Network Associate
MTCRE - MikroTik Certified Routing Engineer
MTCWE - MikroTik Certified Wireless Engineer
MTCTCE - MikroTik Certified Traffic Control Engineer
MTCUME - MikroTik Certified User Management Engineer
MTCINE - MikroTik Certified Inter-networking Engineer

Next Course in Malaysia
MTCNA | 3 to 6 Oct 2011 | Organised by Spectrum Indonesia

Past Course in Malaysia
MTCNA | 5 to 7 July 2011 | Organised by Landasan Teknologi

Pros / Cons of Mikrotik Routers
+ Affordable hardware
+ Full featured routerOS with enterprise features
+ Hotspot with Radius support
+ etc

- Need to have basic networking knowledge to setup
- Advance setting require someone with good RouterOS knowledge
- Not for the ordinary home user

Facebook Mikrotik User Group (MUG)
I started MUG on Facebook because a few friends/users asked me to.
However I believe that the forum format would be easier for discussion.

Interesting Facts
Did you know that KLIA's free Hotspot service is service by Mikrotik hardware?

This post has been edited by eric_tan: Oct 4 2011, 12:09 PM

Mikrotik & RouterOS owner list

soonwai = RB750GL, RB751U-2HnD
eric_tan = RB750GL, RB751G-2HnD x2, RB433UAH +R52 wifi, RB433 + R52 wifi
DeLarafi = RB750, RB750GL, RB 951 2N
Arul = RB1100 , RB450, RB750G, RB433 and RB433AH
billytong = RB750G, RB250GS

[PM me to add to list]

This post has been edited by eric_tan: May 29 2013, 11:35 PM

Additional information of Microtik product availability.

I have seen Microtik price quote in C-zone in digital mall.

Just checked and yes C-Zone has Mikrotik products under the Unifi category.

Yesterday I just asked the price from Landasan on the following product:-

| RB750GB @ RM210 + RM10 courier charges

Nice group, build community for mikrotik malaysia..
i'm using mikrotik for all my networks backend..

arul_sr can I ask what series of the RouterBoard do you use as backend?

Your is PC or RouterBoard?

i'm using Rb1100 , rb450, rb750g also rb433 and rb433ah
before this use x86 too..

Wow, all the TOP end stuff..... nice...

I actually have question, is the RB750G any good?

I actually have the RB433 but is wondering how does the RB750GL compare to it?

Because the RB750GL is very cheap, want to help friend setup hotspot service at his place.

rb750g also ok, better than 750..huhu..try handle 1000-3000connection still proc below 50%, but at 750 1000 connection hang....

rb433 and rb433AH i using for wireless..insert radio card inside rb for point to point and multipoint bridging..

rb750gl not tested..but sure ok..

---

Added on September 23, 2011, 9:41 pmif any user or forumer from lowyat.net want a local training mikrotik just tell me.. min 10 user.. but certificate local only..not proper certificate..

This post has been edited by arul_sr: Sep 23 2011, 09:41 PM

Arul: bro you do much scripting with Mikrotik?

hmm both my RB750G, RB250GS collecting dust now. :>

my old router still havent spoil. been trying to fully use it till spoil...

This post has been edited by billytong: Sep 25 2011, 12:20 PM

what script do you want to know bro?

Great we have a group here also selling mikrotik stuff :-) partner with arul_sr

Centralized Mikrotik WiFi Radius server will be up this week

I completed my sript.

Because RouterOS only takes IP, but I want to have a script that resolves the domain name and then updates the IP address accordingly.

sifus for the Mikrotik RB750GL, is it possible to create a IP v6 network with it, rather than running on a v4 network? ppl recommend me the 750GL cause some said it can have a full IP v6 network running on it plz advise fellow sifus.. need it for research purposes

This post has been edited by raptar_eric: Sep 26 2011, 05:34 PM

for dyndns bro?
can you paste your script here

did you even try looking at the mikrotik wiki ?

check here http://wiki.mikrotik.com/wiki/Manual:IPv6

yes sort of.

Scripts I taken from the following link and modify. Not that hard, just need to use the "resolve" function only

http://wiki.mikrotik.com/wiki/Manual:Scripting-examples



This post has been edited by eric_tan: Sep 27 2011, 09:59 AM

after create the script, you must add scheduler to run
at your script i think no problem..
did you see the log bro?

Yes you need to add to scheduler to run (I assume you already know)

Yah, I use the log to do debugging. No problem.

*I didnt use that script, I modified that script to use for my purpose

In the classroom now :-)

I did the previous class by Landasan....

Exam not that easy, specially for those with no Networking background.
Exams very tricky too.

How much they charge for the class? How many people in the class?

Try to save or get sample exams from them. So share with others.

Heheh day one so many input already . Anyway did u pass the test?

Total is RM 1500 from Monday to Thursday

http://www.trainingmikrotik.co.id/mikrotik...-mtcna--96.html

Passed on first try (lucky)
You no problem la: Eat, Sleep & Networking....

But in my class only 3 people pass on first try.

But most of them passed on 2nd try

Same price, but mine only 3 days.. I think yours more worth it

Ask you class members to join the FB MUG group

Well we see about it this Thursday hopefully i pass on first try 95% :-)

Kindly update your first post for the link on FB MUG Group i will ask them to join :-)

Wah, want 90% plus somemore, means u want to be trainer...

I cant la, I tried many times, everytime I put FB link, I cannot save the page... very strange.... (I try again)

Eric

Not so good lah bro failed the first time due to multiple box answer




[attachmentid=2472349]

This post has been edited by MX510: Oct 6 2011, 09:47 PM


Attached thumbnail(s)

Fail 1 time, but can still get 79% wor... congratulations!

Thanks bro :-)

Current project with Mikrotik is using centralized hotspot gateway system which is currently running now


Ok already running the system now :-)

This post has been edited by MX510: Oct 11 2011, 12:03 AM


Attached thumbnail(s)

anyone got any script to build a good home router? I found the Dmitry's firewall guide and the one article for home router. I'm still reading and checking the wiki page to understand more. It will be great if any sifu here can share your opinion and guidance

Hi,
There isn't any pre-written script. You start with a clean slate and you fill in with any settings you need.

To use as a home router, you'll need at least the following set
| PPPOE Client to connect to Streamyx
| NAT Translation to share the internet with all the PC on the network
| DHCP Server to provide IP address to all PC on the network


Optional stuff includes (not required for most people)
| Firewall setup (can be a few lines to hundreds of line)
| QOS/Bandwidth management (can be a few lines to hundreds of line)


Depending on what you need to do, you'll need to setup it up. There is no "fixed" template that will fit everybody's requirement.

As for the optional stuff, your router will fine without it. You may run it without a Firewall or QOS/Bandwidth management. However should you need to optimise it, you have the option to.

As you know NAT itself can also be considered a very basic firewall.

my 750GL router already up and running I use IP mangle for packet classification (short list though) but also decide not to use QoS yet. My port scan rule add my own PC into blocked list...maybe too strict I do not have time for it now.

This post has been edited by cyberic: Oct 18 2011, 12:26 AM

+++++++++++Good work, eric_tan for creating this user group. +++++++++++

ok back to firewall.


As eric_tan said
you start with a clean slate and no one complete rules fits all situation or user needs.

Maybe we can start with the must do, for start, and we add in as we specify our requirement together.

1. as a start, make sure you change router default password,

2. make sure you close all services you are not using, so that it cannot be access, and specify ip address where it is allowed to be access.

[admin@HSE.AP] /ip service> print
Flags: X - disabled, I - invalid
# NAME PORT ADDRESS CERTIFICATE
0 X telnet 23
1 X ftp 21
2 X www 80
3 X ssh 22
4 X www-ssl 443 none
5 X api 8728
6 winbox 8291

On firewall, I think Demitry example is a bit complicated. I think you don't need to mangle to do firewall, Just filter straight away.
first thing first, you should have at least this on your first entry of firewall rules. allow router to accept only clean packet. ie ; meant for you.

/ip firewall filter
add chain=forward connection-state=established comment="allow established connections"
add chain=forward connection-state=related comment="allow related connections"
add chain=forward connection-state=invalid action=drop comment="drop invalid connections"

Next what did we want to filter,objective?? Hey guys, maybe we can come out with the list together and move from here

TO BE CONTINUE ........

Honestly. I dont bother with Firewall setup.
Good ones are just too complicated and LONG to setup.....
Simple ones are just too restrictive....

Unless you have a Trojan Horse, a router with NAT should be good enough for most home users. [My opinion only]

But if you want to setup Firewall, because you worried that people want to come in, check out the option "Tarpit"....

Yes, disable all services not used, so you keep all the ports closed.

---

Added on October 19, 2011, 2:11 amGuys also join the Facebook page I had setup

https://www.facebook.com/pages/Mikrotik-Use...247061138651771

This post has been edited by eric_tan: Oct 19 2011, 02:13 AM

I agree that NAT enough for most. I bought microtik to learn new stuff and other benefit is able to use my old D-link 655 wireless as AP. I hope the supposely upcoming Asus RT-N66 or 57U will be a good replacement later.

spend some time RTFM before finalize my firewall setup. I actually like the idea of using packet classifier and filter from there . So, my firewall is based on the Dimitri's guide and modified it for my own requirement. I already secure the router and SSH and winbox only allowed from local. just that I never really test the firewall properly.

---

Added on October 20, 2011, 4:10 pmcurious question:

I notice that my router's cpu speed is 250 (not 400). I have no complain about the performance. Just want to clarify.

Is the rb750gl default cpu speed set to 250?


This post has been edited by cyberic: Oct 20 2011, 04:10 PM

Wa, you all sifu so advance, me just starting. need to RTFM more.

My RB750GL says CPU Frequency 400MHz, don't know where to set also.

Strange. I should have check 1st before upgrade to bootloader 3.7 and RouterOS 5.7. Now I don't know why it is set to 250 only. Going to try change the cpu speed tonight.

I'm not a sifu..just a beginner that do a lot of RTFM. I still new to this

this is the command to set the cpu speed. Need to reboot the router after that.

system routerboard settings set cpu-frequency=400

to check configurable speed?
system routerboard settings set cpu-frequency=

Wow, I was actually in the same class as you

anybody using or tried the new RB751U-2HnD ??
any comments on it ?

There has been a group here

https://www.facebook.com/groups/157243411036294/

Mikrotik Malaysia

---

Added on November 2, 2011, 7:29 pmVersion 5.8 is now out now

What's new in 5.8 (2011-Nov-01 10:14):

*) snmp - fixed problem where some rows were missed
in a few tables when walking them;
*) ipv6 - added support for router address assignment from ipv6 pools;
*) routerboard - fix RB400/RB700 bootloader upgrade problem
*) radius - respond to CoA & Disconnect requests with the same ip address
it was received to;
*) improved webfig look;
*) webfig - do not allow to show secret passwords if user does not have
sensitive permission;
*) webfig - allow to customize all item names in skins;
*) updated timezone information;
*) lcd - added support for new ax93304 model and nexcom LCDs;
*) ppp - added support for ipv6 pools;
*) ppp - added support for Framed-IPv6-Pool radius attribute;
*) dhcp client - fix high CPU usage when interface is disabled;
*) snmp - trap interface filter, multiple trap targets;
*) dhcp - added server support for IPv6 prefix delegation from /ipv6 pool,
client support is also added;
*) ipsec - support authorization with raw RSA keys;
*) added ipv6 prefix pools;
*) winbox - now copied item in ordered list is added right after it's original;
*) pcq - fixed possible crash;

This post has been edited by MX510: Nov 2 2011, 07:29 PM

when use RB750GL , do we need to write script manualy or do have a browser setup? kinda looking forward with this router/switch

I'm using RB750. Pretty much the same as RB750GL. Except for the Gigabit LAN.

Setup is simple. You have a couple of choices.

Web interface - SOME features can be accessed and toy around with.
Winbox - Fully GUI and ALL features are available to be messing around with.
Telnet - Scripting. If you're well conversed with RouterOS, then go ahead.

still in planning ..

Yes there are 3 ways to setup your Mikrotik routers.

Web Interface have very limited features. Don't bother...

Winbox should have 99% of the the settings you need. Certain things you just cannot do from Winbox.

Command Line Interface (CLI) via Telnet/SSH is for those who knows what they are doing. Most of the tutorials online are based on command line. Easy to copy other people's setting, and just paste it in the command line.

Start with Winbox and slowly graduate to Command Line Interface.

oh la la..

the new SME router.. thats what im talking abt mikrotik...

Cool what is the name of this model bro ?

not sure the product not fully launch yet.. just a preview.. only will update this thread once i get more info and all

MX510:

good day bro.. i dont find your thread selling Mikrotik router.. kinda interested here and a 1week+ Unifi user here..

This post has been edited by ahlong: Dec 6 2011, 09:51 PM

Click here bro

:-)

tq abang MX510

seems like Mikrotik has been bz bz..

new model (RB750UP) - http://routerboard.com/RB750UP




RAM is 32MB same with the previous RB750 modemsl...

I can see that the new model has SFP port. Does it support all kind of SFP? i.e. GPON ONU SFP?

http://www.alibaba.com/product-gs/51369418...ceiver_OLT.html

The RB2011 will support GEPON via the appropriate GEPON ONU SFP module

Interesting... Interesting... one device rule them all!

Hopefully its not that expensive!

Agreed hopefully it's not so expensive :-)

starting price would be 100 USD

so makes it abt 370MYR plus-minus...

for the basic model

Forget to check this thread for sometime liao.. sorry guys..

looks like got a few regulars now

hey guys

just to share with you all mikrotik latest newsletter

http://www.mikrotik.com/download/share/news_35.pdf

lol looks like the newer RB750 series all of them still inferior to the RB750G. I guess I am happy to be one of the early bird buyer who manage to get my hands on RB750G

what makes you say that.. what about the 750GL ???

if u check the throughput listed by Mikrotik's spec sheet themselves, the 750G edge out the 750GL in all cases.

750G is equipped with a much more powerful Atheros 680MHz CPU, while being smaller RAM than 750GL, the CPU inside 750GL is exactly the same as 750(non G version) = 400MHz only. May not even be Atheros(not sure since it didnt say)


RB750UP is nothing much than a 750(non G) with Ethenet power capable.

http://routerboard.com/RB750G
http://routerboard.com/RB750GL
http://routerboard.com/RB750UP
http://routerboard.com/RB750

This post has been edited by Boldnut: Dec 18 2011, 11:28 AM

the case looks like it says RB201

It's RB2011, suppose to be launched in 2011 but delayed , it will have few different models, stay tuned

I have checked n found this model

http://routerboard.com/RB751U-2HnD

Would be great :-) for Unifi replacement since got WiFi Card with 30DBM transmit power



Product specifications

Details
Product code RB751U-2HnD
CPU speed 400MHz
TX power 30dBm
CPU Atheros AR7241
Current Monitor No
Antenna gain 2x2 MIMO PIF antennas, max gain 2.5dBi; external MMCX option
Max Power consumption 10W
RAM 32MB
LAN ports 5
Gigabit No
MiniPCI 0
Integrated Wireless 1
Wireless standards 802.11b/g/n
USB 1
Power Jack yes
PoE 8-30V
Voltage Monitor No
CPU temperature monitor No
Dimensions 113x138x29mm
Operating System RouterOS
Temperature range -20C .. +50
RouterOS License L4







Attached File(s)
 rb751U_2HnD.pdf ( 275.83k ) Number of downloads: 26
 rb751U_2HnD_ug.pdf ( 892.5k ) Number of downloads: 28

Yes this is great as it is the sole integrated model from Mikrotik that does everything in one box!

if they only have it in gigabit ether and 8 port.. it would be be AWESOME

Its the gigabit that is the major drawback.

8 port can be easily fix by connecting a switch and I doubt any home user needed more than 5 ports.

This post has been edited by Boldnut: Jan 12 2012, 08:37 AM

any mikrotik product support load balancing?

most of them support load balancing as its done at routeros level...

see here http://wiki.mikrotik.com/wiki/Load_Balanci...ltiple_Gateways

there are many methods to LB.. just google for them

This post has been edited by JinXXX: Jan 12 2012, 12:20 PM

Bought from CloudComputer and my unit has been working great. Recommended seller.

My simple configuration below: -

BTU - RB751U-2HnD - WRT54GSv4 - IPTV

BTU & RB751U-2HnD located in 1st floor

WRT54GSv4 & IPTV located in ground floor

1st floor, RB751U-2HnD ethernet port 1 connect to BTU, ethernet port 5 connect to HomePlug, users can connect to ethernet port 2 to 4 and wireless for web browsing.

Ground floor, WRT54GSv4 ethernet port 1 connect to HomePlug, users can connect to WRT54GSv4 ethernet port 2 to 3 and wireless for web browsing. IPTV connect to WRT54GSv4 port 4.

Rootlinux, how to you rate the wireless signal of the 751?

I got RB751U-2HnD last week, planing to put in my "server" room (aka store room)? Current Dlink give me 50% wireless signal in my working room, wonder if 751 will give better signal.

I also have 2 units of 250GS. Did not fully put into "production" only use it for cisco paring and testing.

Later when I have time, I'll put 751, and one 250 for my Unifi. The extra 250 will be use to pair with my Cisco test lab. If all done up, should have 4 VLans. So the 751 is good fit with the 4 ports.

My Current Mikrotik setup

My house is now operating as network operation centre ( Hehehe )

Unifi Biz10 ( Static IP ) With L2TP VPN

BTU -> RB1200 -> ASUS RTN-56U as access point -> Notebook / PC

Lan Ports from RB1200
From RB1200 to another radius server central billing server for all wifi hotspot gateway ( AAA Server )
From RB1200 to my desktop PC

Another setup

Unifi Biz5 for WiFI hotspot

BTU - Server with Mikrotik RouterOS + Transparent Proxy Server 200GB Cache ( Dual Network Card ) - Switch Gigabit - UBNT Nanostation M2 and Picostation M2HP as Access Point

For mobile usage use Maxis 3G Unlimited on iPhone4S and Blacberry advance on Celcom :-)

Additional jobs

Active network routing monitoring performance to offshore dedicated server located in Europe and USA

The built-in antenna signal is very bad if u were some distance from it. I put the RB751U-2HnD in my room. Within the room the signal is good to fair only.

Anything outside the room is bad...

---

Added on January 13, 2012, 4:06 pmWah... your setup is awesome

This post has been edited by rootlinux: Jan 13 2012, 04:06 PM

Oh my.. I hope is better than the D-Link 615. If not it will be really a bad investment. I'll test it out this soon to find out.

Would like to hear on your feedback.

Not a bad investment Here the sample signal i took using Windows 7 catcher. Is not the most precious testing, but is something free

Viru$$$ = Mikrotik RB751U-2HnD
Viru$ = Dlink 615


At Room 1


At Room 2


At Room 3


At Room 4


This post has been edited by weikee: Jan 17 2012, 11:37 PM

Is this the result with internal antenna or external antenna?

All build in, no external antenna.

thanks for sharing. can u run this command in terminal and share the output

interface wireless print

i will install the wifi catcher and share mine soon

C-Zone lowyat plaza is now selling RB-751-2HnD

Limited 10 units i saw the stock arrive today

20 units RB750GL grab it while stock last

just sharing

thats alot of new products

Some not really new, maybe few months old.

well i got it in my email yesterday lol hahahaha

well good to share.. some ppl really slowpoke

I'm scouting where can i get the RB751G-2HnD~

Here you go.

Flags: X - disabled, R - running
0 R name="wlan1" mtu=1500 mac-address=00:0C:42:FC:xx:xx arp=enabled interface-type=Atheros 11N mode=ap-bridge ssid="Viru$$$" frequency=2412 band=2ghz-b/g/n
channel-width=20/40mhz-ht-above scan-list=default wireless-protocol=any antenna-mode=ant-a wds-mode=disabled wds-default-bridge=none wds-ignore-ssid=no
bridge-mode=enabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no
security-profile=WPA-Key compression=no

C-Zone Lowyat Plaza :-)

hello all im new in mikrotik

curently im using mikrotik OS (v2.9) installed on HP PC

hmm..mikrotik has wireless router rght? how much the cost for support unifi?