Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

 MikroTik RouterOS Unifi Setup Guide

views
     
Anime4000
post Apr 24 2023, 02:37 AM

Look at all my stars!!
*******
Senior Member
2,399 posts

Joined: Jul 2009
From: /dev/null


QUOTE(soonwai @ Apr 23 2023, 01:01 AM)
Which vendor is 00:00:5E ? I do lookup, I got ICANN, IANA?
*
Microsoft Windows Server 2019, only Microsoft RRAS doing fake mac address.

pretty dumb TM using Windows Server to handle PPPoE, I don't think other vendor like Juniper can't accept other ISP account...
known issue which Windows Server PPPoE Server cannot support MTU 1500 even you set ETH 1508 MTU (baby jumbo)

even I do fake injury, they can't change back from Microsoft RRAS to Juniper bangwall.gif

haha
amirsubhi
post Apr 27 2023, 09:11 AM

The Power Is IN Your Hand!
******
Senior Member
1,472 posts

Joined: Apr 2005
From: SumwHeRe In MaLaYsIa



QUOTE(Anime4000 @ Apr 24 2023, 02:37 AM)
Microsoft Windows Server 2019, only Microsoft RRAS doing fake mac address.

pretty dumb TM using Windows Server to handle PPPoE, I don't think other vendor like Juniper can't accept other ISP account...
known issue which Windows Server PPPoE Server cannot support MTU 1500 even you set ETH 1508 MTU (baby jumbo)

even I do fake injury, they can't change back from Microsoft RRAS to Juniper  bangwall.gif

haha
*
nah, its VRRP

not related to Microsoft RRAS at all

This post has been edited by amirsubhi: Apr 27 2023, 09:12 AM
squall0833
post Jul 15 2023, 02:21 AM

Regular
******
Senior Member
1,473 posts

Joined: Oct 2006
From: Jupiter


I'm trying to make something like this but not sure if it is possible or maybe it's totally wrong, Im new to vlan, hope sifu help

What I wanted to do..
QUOTE
hap AC:
ether1 - WAN
ether2 - my PC
ether3 - trunk to  port 8 of TP link Smart switch SG108E v4 (with vlan support)
ether4 - not connected (was for VoIP gateway, but I want to move it to SG108E switch port 3
ether5 - IPTV

SG108E
Port 1-2,4-7 = normal access port
Port 3 = VoIP gateway
Port 8 = connect to hap AC ether3 trunk port


so my current hap AC vlan configuration are below

CODE

interface bridge print
R;;; defconf
    name="bridge" mtu=auto actual-mtu=1500 l2mtu=1594 arp=enabled arp-timeout=auto mac-address=xxxxxxxxxx protocol-mode=rstp
    fast-forward=yes igmp-snooping=no auto-mac=no admin-mac=xxxxxxxxxxx ageing-time=5m priority=0x8000 max-message-age=20s
    forward-delay=15s transmit-hold-count=6 vlan-filtering=yes ether-type=0x8100 pvid=1 frame-types=admit-all ingress-filtering=yes
    dhcp-snooping=no

interface bridge port print
Flags: I - INACTIVE; H - HW-OFFLOAD
Columns: INTERFACE, BRIDGE, HW, PVID, PRIORITY, PATH-COST, INTERNAL-PATH-COST, HORIZON
#    INTERFACE    BRIDGE  HW   PVID  PRIORITY  PATH-COST  INTERNAL-PATH-COST  HORIZON
;;; defconf
0    ether2       bridge  yes     1  0x80             10                  10  none  
;;; defconf
1    ether3       bridge  yes     1  0x80             10                  10  none  
;;; defconf
2 IH ether4-VoIP  bridge    yes     1  0x80             10                  10  none  
;;; defconf
3 I  ether5-IPTV  bridge    yes     1  0x80             10                  10  none  
;;; defconf
4    wlan1        bridge          1  0x80             10                  10  none  
;;; defconf
5 I  wlan2        bridge          1  0x80             10                  10  none  
6    vlan400      bridge          1  0x80             10                  10  none  
7    vlan600      bridge            1  0x80             10                  10  none  


interface bridge port vlan print
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
0 D bridge         1                  bridge          
                                     ether2          
                                     wlan1          
                                     vlan400        
                                     ether3          
1   bridge       400  bridge                          
                     ether3                                      



my TP Link SG108E 802.1Q VLAN configuration as below:

QUOTE
VLAN 1 (default)
Untagged Port 1-2,4-8
Tagged none
PVID=1  Port 1-2,4-8

VLAN 400 (VoIP)
Untagged Port 3
Tagged Port 8
PVID=400 Port 3
my VoIP gateway connected to SG108E port 3, VoIP Phone does not work, other ports do work as access ports, any Mikrotik sifu can help? did I miss something or do anything wrong?

This post has been edited by squall0833: Jul 15 2023, 02:23 AM
bingbangboom
post Dec 18 2023, 11:19 PM

Getting Started
**
Junior Member
112 posts

Joined: Jun 2008

QUOTE(soonwai @ Jul 31 2022, 06:46 PM)
New guide. Old one is here https://forum.lowyat.net/topic/4202122
I'm sure you all will let me know if got any mistakes. smile.gif

First post is only using terminal and command line.
Second post is using Quickset and a bit of command line.

I'm lazy to put screenshots. Maybe later.

Winbox
I suggest using Winbox to configure your Mikrotik router. Download from https://mikrotik.com/download
You can also SSH to the router or use the web configuration page which has a terminal.

Defaults
IP: 192.168.88.1
Username: admin
Password: blank

Ports
LAN port 1 (ether1) is your WAN port. (Connect modem here)
LAN Port 2-5 for your devices. Later we can use port 5 for UnifiTV.

Command Line Method

OK, let's go

Connect to the router using Winbox and open a New Terminal or use SSH. Change to your Unifi username and password first then copy and paste the commands below

CODE
/system package enable ipv6

/system reset-configuration


/interface vlan add interface=ether1 name=vlan500 vlan-id=500

/interface pppoe-client add add-default-route=yes use-peer-dns=yes disabled=no interface=vlan500 name=pppoe-out1 password=fmsSJQEMtvuTy user=myusername@unifi
/interface list member add interface=pppoe-out1 list=WAN

/ip upnp

set enabled=yes

/ip upnp interfaces

add interface=bridge type=internal

add interface=pppoe-out1 type=external

Done. That's all you need for a very basic setup. Internet should be working now.
Explain a bit

First ensure IPv6 package is enabled. This is just to get the IPv6 firewall rules configured in case we want to setup IPv6 in the future.
CODE

/system package enable ipv6


Reset to default configuration. Very important. Router will be reboot.
CODE

/system reset-configuration


When you reconnect, the router will ask you to change password.

Create VLAN 500.
CODE

/interface vlan add interface=ether1 name=vlan500 vlan-id=500


Create PPPoE Client
CODE


/interface pppoe-client add add-default-route=yes use-peer-dns=yes disabled=no interface=vlan500 name=pppoe-out1 password=fmsSJQEMtvuTy user=myusername@unifi


Add PPPoE client to the WAN interface list
CODE
/interface list member add interface=pppoe-out1 list=WAN


Enable UPNP. Not mandatory but many apps uses UPNP.
CODE

/ip upnp

set enabled=yes

/ip upnp interfaces

add interface=bridge type=internal

add interface=pppoe-out1 type=external


WiFi, UnifiTV & IPv6
Wait ya.
*
hi bro. wanna check with you. my office now using some crappy TM router. Fiberhome SR120-A. i can set up mikrotik to run for internet. but phone service wont work. i checked the old router and i believe it has additional vlan set. 209 and 400 i believe. any idea how i can set it up?

user posted image
PRSXFENG
post Dec 19 2023, 09:36 PM

Look at all my stars!!
*******
Senior Member
2,607 posts

Joined: Nov 2020


QUOTE(bingbangboom @ Dec 18 2023, 11:19 PM)
hi bro. wanna check with you. my office now using some crappy TM router. Fiberhome SR120-A. i can set up mikrotik to run for internet. but phone service wont work. i checked the old router and i believe it has additional vlan set. 209 and 400 i believe. any idea how i can set it up?

user posted image
*
TR069 is not needed, that is for TM remote management to access the Fiberhome router

Not sure for the "other"
yenchenje
post Dec 20 2023, 03:22 PM

Enthusiast
*****
Junior Member
932 posts

Joined: Dec 2019
QUOTE(bingbangboom @ Dec 18 2023, 11:19 PM)
hi bro. wanna check with you. my office now using some crappy TM router. Fiberhome SR120-A. i can set up mikrotik to run for internet. but phone service wont work. i checked the old router and i believe it has additional vlan set. 209 and 400 i believe. any idea how i can set it up?

user posted image
*
Pretty sure 400 is VoIP for VLAN, DHCP to get IP from TM

How to set it up on Mikrotik unknown, I’ve been struggling to work with it on my OPNSense as well
tschong
post Mar 11 2024, 04:43 PM

New Member
*
Junior Member
21 posts

Joined: Aug 2010
Dear all sifus,

Greetings. Recently was given A new homefibre wifi6 router by unifi (300 package) but am not happy with the performance. Hence i got myself a used rb2011uias-2hnd on v7.12.1 and try to replace the homefibre. After got hold of the unit i try follow bro soonwai method ( terminal via winbox ) to setup my Unifi on mtk but faced following challenges :

1. /system package enable ipv6 [COLOR=blue] syntex error or unknown command.
2. reset-config [COLOR=blue] ok
3./interface vlan add interface=ether1 name=vlan500 vlan-id=500 [COLOR=blue]ok
4
/interface pppoe-client add add-default-route=yes use-peer-dns=yes disabled=no interface=vlan500 name=pppoe-out1 password=fmsSJQEMtvuTy user=myusername@unifi [COLOR=blue]ok
5./interface list member add interface=pppoe-out1 list=WAN [COLOR=blue] input does not match any value of list
6./ip upnp [COLOR=blue]ok
7.
set enabled=yes [COLOR=blue]ok
8.
/ip upnp interfaces
[COLOR=blue]ok
9. add interface=bridge type=internal [COLOR=blue]bad command name add (line1 of column 1)
10.
add interface=pppoe-out1 type=external[COLOR=blue]bad command name add (line1 of column 1).

Any sifu can help with checking n thank you in advance. When ppl said steep leaning curve i guess this is it but its also a tools to learn new knowledge.

Also halfway keying in the command the terminal window disapear, and reappear as new window ( first window content all gone ). Is this normal?

thank you and wish everyone a nice day ahead.

tschong

update 12/3/2024

Now pppoe/wan (ether1) and pc (ether2) and wifi 2.4 (wlan) is running. Wired test to tm speedtest and ookla can get 200 Mbps dl and wifi 20 Mbps dl. Next is to add rest of the lan into the bridge and run local lan speed test as well as add homefiber router as wifi6 AP.

Thanks

tschong

This post has been edited by tschong: Mar 12 2024, 07:23 AM
mamakap
post Apr 2 2024, 09:31 PM

Casual
***
Junior Member
403 posts

Joined: Jan 2005
delete

This post has been edited by mamakap: Apr 3 2024, 05:16 AM
skywardsword
post Jul 5 2024, 11:15 AM

On my way
****
Junior Member
680 posts

Joined: Sep 2010
Just got my R009... Have been trying to set it up using guides.... No luck so far.

Have to keep at it.

Last time I set up Ambience not so difficult.

The pope cannot connect.

Update. Had to update defconf masquerade firewall rule to output interface for poop.

End up I had to follow up on subtel YouTube video which was also not updated since two years ago.

Latest video is on The network berg YouTube video, which also helps quite a bit.

Setting up mikrotik is like going to university networking course...


It is funny because it can be completely devastating...I setup all the ppoe and than go on to set the interface, bridges, DHCP... Basically lost access right after I change DHCP to issue out the IP address I am familiar with...

Anyhow, fortunately I still have my old Asus. So after marathon setup for 8 hrs and still not successful...I plug the old one back... So I do not get complaint for internet down.

This post has been edited by skywardsword: Jul 6 2024, 12:09 PM
cwtien
post Jun 17 2025, 09:10 PM

Casual
***
Junior Member
477 posts

Joined: Jan 2003
From: Seri Kembangan



QUOTE(skywardsword @ Jul 5 2024, 11:15 AM)
Just got my R009... Have been trying to set it up using guides.... No luck so far.

Have to keep at it.

Last time I set up Ambience not so difficult.

The pope cannot connect.

Update. Had to update defconf masquerade firewall rule to output interface for poop.

End up I had to follow up on subtel YouTube video which was also not updated since two years ago.

Latest video is on The network berg YouTube video, which also helps quite a bit.

Setting up mikrotik is like going to university networking course...
It is funny because it can be completely devastating...I setup all the ppoe and than go on to set the interface, bridges, DHCP... Basically lost access right after I change DHCP to issue out the IP address I am familiar with...

Anyhow, fortunately I still have my old Asus. So after marathon setup for 8 hrs and still not successful...I plug the old one back... So I do not get complaint for internet down.
*
Did you ever complete your Mikrotik journey?
skywardsword
post Jun 18 2025, 02:47 PM

On my way
****
Junior Member
680 posts

Joined: Sep 2010
QUOTE(cwtien @ Jun 17 2025, 09:10 PM)
Did you ever complete your Mikrotik journey?
*
It has been online. And did not meddle with it much since. Not sure it is complete but just too busy to do much other stuff.

 

Change to:
| Lo-Fi Version
0.0203sec    1.19    5 queries    GZIP Disabled
Time is now: 27th November 2025 - 07:22 AM