Welcome Guest ( Log In | Register )

Bump Topic Add Reply RSS Feed

Outline · [ Standard ] · Linear+

 MikroTik RouterOS Unifi Setup Guide

views
     
TSsoonwai
post Jul 31 2022, 06:46 PM, updated 3y ago


********
All Stars
11,450 posts

Joined: Oct 2007
From: KL
New guide. Old one is here https://forum.lowyat.net/topic/4202122
I'm sure you all will let me know if got any mistakes. smile.gif

First post is only using terminal and command line.
Second post is using Quickset and a bit of command line.

I'm lazy to put screenshots. Maybe later.

Winbox
I suggest using Winbox to configure your Mikrotik router. Download from https://mikrotik.com/download
You can also SSH to the router or use the web configuration page which has a terminal.

Defaults
IP: 192.168.88.1
Username: admin
Password: blank

Ports
LAN port 1 (ether1) is your WAN port. (Connect modem here)
LAN Port 2-5 for your devices. Later we can use port 5 for UnifiTV.

Command Line Method

OK, let's go

Connect to the router using Winbox and open a New Terminal or use SSH. Change to your Unifi username and password first then copy and paste the commands below

CODE
/system package enable ipv6

/system reset-configuration


/interface vlan add interface=ether1 name=vlan500 vlan-id=500

/interface pppoe-client add add-default-route=yes use-peer-dns=yes disabled=no interface=vlan500 name=pppoe-out1 password=fmsSJQEMtvuTy user=myusername@unifi
/interface list member add interface=pppoe-out1 list=WAN

/ip upnp

set enabled=yes

/ip upnp interfaces

add interface=bridge type=internal

add interface=pppoe-out1 type=external

Done. That's all you need for a very basic setup. Internet should be working now.



Explain a bit

First ensure IPv6 package is enabled. This is just to get the IPv6 firewall rules configured in case we want to setup IPv6 in the future.
CODE

/system package enable ipv6


Reset to default configuration. Very important. Router will be reboot.
CODE

/system reset-configuration


When you reconnect, the router will ask you to change password.

Create VLAN 500.
CODE

/interface vlan add interface=ether1 name=vlan500 vlan-id=500


Create PPPoE Client
CODE


/interface pppoe-client add add-default-route=yes use-peer-dns=yes disabled=no interface=vlan500 name=pppoe-out1 password=fmsSJQEMtvuTy user=myusername@unifi


Add PPPoE client to the WAN interface list
CODE
/interface list member add interface=pppoe-out1 list=WAN


Enable UPNP. Not mandatory but many apps uses UPNP.
CODE

/ip upnp

set enabled=yes

/ip upnp interfaces

add interface=bridge type=internal

add interface=pppoe-out1 type=external


WiFi, UnifiTV & IPv6
Wait ya.

This post has been edited by soonwai: Jul 31 2022, 09:11 PM
TSsoonwai
post Jul 31 2022, 06:56 PM


********
All Stars
11,450 posts

Joined: Oct 2007
From: KL
Quickset Method (with a bit of command line)
Here we use Quickset plus a bit of command line.

For Quickset, we can use Winbox or Web configuration. Advantage of Quick Set is that you can easily set PPPoE, WiFi, VPN all on one screen. No need command line until the end.

Begin
Connect to router and choose "Quick Set" in Winbox.

For router only, choose "Ethernet" from the Quick Set dropdown menu.
For wifi router choose - actually I forgot what it's called exactly - Home AP or something like that.

Fill in the blanks
Everything is on one page.


Mode: Router

Address Acquisition: PPPoE

PPPoE User: username@unifi

PPPoE Password: fmsSJQEMtvuTy

DHCP Server: Checked

NAT: Checked

If it's a WiFi router, enter your preferred SSID and password.

Can also enable VPN if you like.

Command Line bit
Now finish up with a little bit of command line.

CODE

/interface vlan add interface=ether1 name=vlan500 vlan-id=500

/interface pppoe-client set 0 interface=vlan500

/ip upnp

set enabled=yes

/ip upnp interfaces

add interface=bridge type=internal

add interface=pppoe-out1 type=external

That's it. You should now have internet, WiFi and maybe even VPN.

Explanation
Create VLAN 500
CODE

/interface vlan add interface=ether1 name=vlan500 vlan-id=500


Set the PPPoE Client to VLAN 500
CODE

/interface pppoe-client set 0 interface=vlan500


Enable UPNP
CODE

/ip upnp

set enabled=yes

/ip upnp interfaces

add interface=bridge type=internal

add interface=pppoe-out1 type=external


This post has been edited by soonwai: Jul 31 2022, 08:29 PM
haturaya
post Jul 31 2022, 07:13 PM

Look at all my stars!!
Group Icon
Elite
2,545 posts

Joined: Jan 2003
Thanks. Is it similar with RouterOS 7?
TSsoonwai
post Jul 31 2022, 07:16 PM


********
All Stars
11,450 posts

Joined: Oct 2007
From: KL
QUOTE(haturaya @ Jul 31 2022, 07:13 PM)
Thanks. Is it similar with RouterOS 7?
*
The vlan part is different. I’ll do one for ros7 also. Makan first.

Correction: The above will work with RouterOS 6 for a simple config. However if you have additional internal VLANs, it probably won't work. There's another way to do the vlans.

This post has been edited by soonwai: Jul 31 2022, 08:49 PM
stella_purple
post Aug 1 2022, 04:34 AM

Casual
***
Junior Member
392 posts

Joined: Oct 2011
what is your mtu?

as I notice with mikrotik the mtu will be auto to 1480 even when I manually set it to 1492.
reevansxyz P
post Aug 2 2022, 07:08 PM

New Member
*
Probation
3 posts

Joined: Jul 2022
QUOTE(stella_purple @ Aug 1 2022, 04:34 AM)
what is your mtu?

as I notice with mikrotik the mtu will be auto to 1480 even when I manually set it to 1492.
*
My PPPoE MTU automatically 1492

user posted image
TSsoonwai
post Aug 2 2022, 07:14 PM


********
All Stars
11,450 posts

Joined: Oct 2007
From: KL
QUOTE(stella_purple @ Aug 1 2022, 04:34 AM)
what is your mtu?

as I notice with mikrotik the mtu will be auto to 1480 even when I manually set it to 1492.
*
QUOTE(reevansxyz @ Aug 2 2022, 07:08 PM)
My PPPoE MTU automatically 1492

user posted image
*
Mine is automatically MTU 1480 & MRU 1492.

If I set MTU to 1492, also get the same thing.

This post has been edited by soonwai: Aug 2 2022, 07:18 PM
go626201
post Aug 2 2022, 08:04 PM

Regular
******
Senior Member
1,881 posts

Joined: Sep 2017
The biggest MTU I can set is 1488,any bigger value will automatic change to 1480.
ry@ P
post Apr 14 2023, 05:14 AM

New Member
*
Probation
4 posts

Joined: Oct 2022
any update guide for RouterOS 7 ? recently bought a hAP ax3 but don't know how to setup for unifi tongue.gif
hasmidzul_jojo
post Apr 14 2023, 06:23 AM

Getting Started
**
Junior Member
203 posts

Joined: Feb 2008
Just give this tuto a try.Nothing drastically change on the setup for unifi for ROS6 and ROS7
OlgaC4
post Apr 14 2023, 08:48 AM

Look at all my stars!!
*******
Senior Member
5,292 posts

Joined: Nov 2006
QUOTE(ry@ @ Apr 14 2023, 05:14 AM)
any update guide for RouterOS 7 ? recently bought a hAP ax3 but don't know how to setup for unifi tongue.gif
*
you tube a lot.
ry@ P
post Apr 14 2023, 10:15 AM

New Member
*
Probation
4 posts

Joined: Oct 2022
QUOTE(hasmidzul_jojo @ Apr 14 2023, 06:23 AM)
Just give this tuto a try.Nothing drastically change on the setup for unifi for ROS6 and ROS7
*
QUOTE(OlgaC4 @ Apr 14 2023, 08:48 AM)
you tube a lot.
*
I see some guide mention in ROS7 we should only use a single bridge for all VLAN? otherwise the hardware offload for switch not working? As in ROS6 and previous, usually will just create a separate bridge for VLAN 600 IPTV, but now it seems like is no longer recommend to do so.
TSsoonwai
post Apr 14 2023, 02:43 PM


********
All Stars
11,450 posts

Joined: Oct 2007
From: KL
QUOTE(ry@ @ Apr 14 2023, 10:15 AM)
I see some guide mention in ROS7 we should only use a single bridge for all VLAN? otherwise the hardware offload for switch not working? As in ROS6 and previous, usually will just create a separate bridge for VLAN 600 IPTV, but now it seems like is no longer recommend to do so.
*
I think I read the same thing also but didn't really test what they said about hwoffload and vlans. Anyways this is how my vlans are set with a single bridge1 and all ether ports are running with hwoffload. This is on RB5009.
CODE
/interface vlan
add interface=bridge1 name=vlan500 vlan-id=500

/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan500 max-mru=1500 max-mtu=1488 name=pppoe-out1 user=soonwai@unifi

/interface bridge
add arp=reply-only ingress-filtering=no name=bridge1 protocol-mode=none vlan-filtering=yes

/interface bridge port
add bridge=bridge1 interface=ether2-wan1
add bridge=bridge1 interface=ether3-trunk1
add bridge=bridge1 interface=ether4 pvid=50
add bridge=bridge1 interface=ether5 pvid=50
add bridge=bridge1 interface=ether6 pvid=50
add bridge=bridge1 interface=ether7 pvid=50
add bridge=bridge1 interface=ether8 pvid=50
add bridge=bridge1 interface=sfp-sfpplus1 pvid=50
add bridge=bridge1 interface=ether1 pvid=50

/interface bridge vlan
add bridge=bridge1 tagged=ether3-trunk1,bridge1 untagged=ether1,ether4,ether5,ether6,ether7,ether8,sfp-sfpplus1 vlan-ids=50
add bridge=bridge1 tagged=ether2-wan1,ether3-trunk1,bridge1 vlan-ids=600
add bridge=bridge1 tagged=ether2-wan1,bridge1 vlan-ids=500

- I use vlan50 for LAN traffic.
- My modem & router are upstairs. That's why my hypptv vlan600 is trunked to the Hypptv STB downstairs.

So for simpler setup, maybe something like this:
CODE
/interface bridge vlan
add bridge=bridge1 tagged=bridge1 untagged=ether1,ether3,ether4,ether5,ether6,ether7,sfp-sfpplus1 vlan-ids=50
add bridge=bridge1 tagged=ether8-unifitv,bridge1 vlan-ids=600
add bridge=bridge1 tagged=ether2-wan1,bridge1 vlan-ids=500

- where ether2 is wan port and ether8 is hypptv port.

btw, switch chip ethernet hwoffload for hAP ax3 not implemented yet. So, for now, you won't see the hwupload flag no matter what you do.
https://help.mikrotik.com/docs/display/ROS/...dwareOffloading
See footnote 6 for IPQ-PPE.
6. Currently, HW offloaded bridge support for the IPQ-PPE switch chip is still a work in progress. We recommend using, the default, non-HW offloaded bridge (enabled RSTP).

This post has been edited by soonwai: Apr 14 2023, 02:53 PM
Gaara92
post Apr 15 2023, 02:13 PM

Herald
****
Junior Member
612 posts

Joined: Mar 2008
QUOTE(soonwai @ Apr 14 2023, 02:43 PM)
I think I read the same thing also but didn't really test what they said about hwoffload and vlans. Anyways this is how my vlans are set with a single bridge1 and all ether ports are running with hwoffload. This is on RB5009.
CODE
/interface vlan
add interface=bridge1 name=vlan500 vlan-id=500

/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan500 max-mru=1500 max-mtu=1488 name=pppoe-out1 user=soonwai@unifi

/interface bridge
add arp=reply-only ingress-filtering=no name=bridge1 protocol-mode=none vlan-filtering=yes

/interface bridge port
add bridge=bridge1 interface=ether2-wan1
add bridge=bridge1 interface=ether3-trunk1
add bridge=bridge1 interface=ether4 pvid=50
add bridge=bridge1 interface=ether5 pvid=50
add bridge=bridge1 interface=ether6 pvid=50
add bridge=bridge1 interface=ether7 pvid=50
add bridge=bridge1 interface=ether8 pvid=50
add bridge=bridge1 interface=sfp-sfpplus1 pvid=50
add bridge=bridge1 interface=ether1 pvid=50

/interface bridge vlan
add bridge=bridge1 tagged=ether3-trunk1,bridge1 untagged=ether1,ether4,ether5,ether6,ether7,ether8,sfp-sfpplus1 vlan-ids=50
add bridge=bridge1 tagged=ether2-wan1,ether3-trunk1,bridge1 vlan-ids=600
add bridge=bridge1 tagged=ether2-wan1,bridge1 vlan-ids=500

- I use vlan50 for LAN traffic.
- My modem & router are upstairs. That's why my hypptv vlan600 is trunked to the Hypptv STB downstairs.

So for simpler setup, maybe something like this:
CODE
/interface bridge vlan
add bridge=bridge1 tagged=bridge1 untagged=ether1,ether3,ether4,ether5,ether6,ether7,sfp-sfpplus1 vlan-ids=50
add bridge=bridge1 tagged=ether8-unifitv,bridge1 vlan-ids=600
add bridge=bridge1 tagged=ether2-wan1,bridge1 vlan-ids=500

- where ether2 is wan port and ether8 is hypptv port.

btw, switch chip ethernet hwoffload for hAP ax3 not implemented yet. So, for now, you won't see the hwupload flag no matter what you do.
https://help.mikrotik.com/docs/display/ROS/...dwareOffloading
See footnote 6 for IPQ-PPE.
6. Currently, HW offloaded bridge support for the IPQ-PPE switch chip is still a work in progress. We recommend using, the default, non-HW offloaded bridge (enabled RSTP).
*
MikroTik vlan setup with bridge interface has always confused me a lot. I don't know why, the configuration is a bit weird and I can't really fathom it no matter how much I try to study.
TSsoonwai
post Apr 15 2023, 02:25 PM


********
All Stars
11,450 posts

Joined: Oct 2007
From: KL
QUOTE(Gaara92 @ Apr 15 2023, 02:13 PM)
MikroTik vlan setup with bridge interface has always confused me a lot. I don't know why, the configuration is a bit weird and I can't really fathom it no matter how much I try to study.
*
Me too. While the above works for me, I'm not 100% sure that it's correct way to do it.

So essentially, this guide is like blind leading the blind. sweat.gif

This post has been edited by soonwai: Apr 15 2023, 02:26 PM
Anime4000
post Apr 23 2023, 12:38 AM

Look at all my stars!!
*******
Senior Member
2,399 posts

Joined: Jul 2009
From: /dev/null
QUOTE(soonwai @ Aug 2 2022, 07:14 PM)
Mine is automatically MTU 1480 & MRU 1492.

If I set MTU to 1492, also get the same thing.
*
can you try MTU 1500 on PPPoE?
mine always set back from 1500, 1492, 1480,

this particular PPPoE AC (Microsoft RRAS) dislike MTU 1500,
user posted image

before under Juniper Network just work!
user posted image

This post has been edited by Anime4000: Apr 23 2023, 12:39 AM
TSsoonwai
post Apr 23 2023, 01:01 AM


********
All Stars
11,450 posts

Joined: Oct 2007
From: KL
QUOTE(Anime4000 @ Apr 23 2023, 12:38 AM)
can you try MTU 1500 on PPPoE?
mine always set back from 1500, 1492, 1480,

this particular PPPoE AC (Microsoft RRAS) dislike MTU 1500,
...
before under Juniper Network just work!
...
*
I use 1488 and 1500.
CODE
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan500 max-mru=1500 max-mtu=1488 name=pppoe-out1 user=

CODE
/interface/pppoe-client> monitor 0
              status: connected
              uptime: 7h27m19s
        active-links: 1
            encoding:
        service-name:
             ac-name: ibse01.bgi
              ac-mac: 00:00:5E:00:01:0D
                 mtu: 1488
                 mru: 1500
       local-address: 60.54.x.x
      remote-address: 60.54.x.x
  local-ipv6-address: fe80::e
 remote-ipv6-address: fe80::200:5eff:fe00:10d


Which vendor is 00:00:5E ? I do lookup, I got ICANN, IANA?

This post has been edited by soonwai: Apr 23 2023, 01:04 AM
go626201
post Apr 23 2023, 11:37 AM

Regular
******
Senior Member
1,881 posts

Joined: Sep 2017
QUOTE(soonwai @ Apr 23 2023, 01:01 AM)
I use 1488 and 1500.
CODE
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan500 max-mru=1500 max-mtu=1488 name=pppoe-out1 user=

CODE
/interface/pppoe-client> monitor 0
              status: connected
              uptime: 7h27m19s
        active-links: 1
            encoding:
        service-name:
             ac-name: ibse01.bgi
              ac-mac: 00:00:5E:00:01:0D
                 mtu: 1488
                 mru: 1500
       local-address: 60.54.x.x
      remote-address: 60.54.x.x
  local-ipv6-address: fe80::e
 remote-ipv6-address: fe80::200:5eff:fe00:10d


Which vendor is 00:00:5E ? I do lookup, I got ICANN, IANA?
*
Yours also can set 1488 max only? 1492 cant?
TSsoonwai
post Apr 23 2023, 12:18 PM


********
All Stars
11,450 posts

Joined: Oct 2007
From: KL
QUOTE(go626201 @ Apr 23 2023, 11:37 AM)
Yours also can set 1488 max only? 1492 cant?
*
Ya lor, set 1492 will go back to 1480. Yours most is how much?

This post has been edited by soonwai: Apr 23 2023, 12:19 PM
go626201
post Apr 23 2023, 12:57 PM

Regular
******
Senior Member
1,881 posts

Joined: Sep 2017
QUOTE(soonwai @ Apr 23 2023, 12:18 PM)
Ya lor, set 1492 will go back to 1480. Yours most is how much?
*
Same,i thought only my area cant set higher than 1488 only...
Because i saw some people said they can set 1492 with their unifi.(Few year ago,now not sure.Maybe unifi change the limit)

This post has been edited by go626201: Apr 23 2023, 12:59 PM
Anime4000
post Apr 24 2023, 02:37 AM

Look at all my stars!!
*******
Senior Member
2,399 posts

Joined: Jul 2009
From: /dev/null
QUOTE(soonwai @ Apr 23 2023, 01:01 AM)
Which vendor is 00:00:5E ? I do lookup, I got ICANN, IANA?
*
Microsoft Windows Server 2019, only Microsoft RRAS doing fake mac address.

pretty dumb TM using Windows Server to handle PPPoE, I don't think other vendor like Juniper can't accept other ISP account...
known issue which Windows Server PPPoE Server cannot support MTU 1500 even you set ETH 1508 MTU (baby jumbo)

even I do fake injury, they can't change back from Microsoft RRAS to Juniper bangwall.gif

haha
amirsubhi
post Apr 27 2023, 09:11 AM

The Power Is IN Your Hand!
******
Senior Member
1,472 posts

Joined: Apr 2005
From: SumwHeRe In MaLaYsIa
QUOTE(Anime4000 @ Apr 24 2023, 02:37 AM)
Microsoft Windows Server 2019, only Microsoft RRAS doing fake mac address.

pretty dumb TM using Windows Server to handle PPPoE, I don't think other vendor like Juniper can't accept other ISP account...
known issue which Windows Server PPPoE Server cannot support MTU 1500 even you set ETH 1508 MTU (baby jumbo)

even I do fake injury, they can't change back from Microsoft RRAS to Juniper  bangwall.gif

haha
*
nah, its VRRP

not related to Microsoft RRAS at all

This post has been edited by amirsubhi: Apr 27 2023, 09:12 AM
squall0833
post Jul 15 2023, 02:21 AM

Regular
******
Senior Member
1,473 posts

Joined: Oct 2006
From: Jupiter
I'm trying to make something like this but not sure if it is possible or maybe it's totally wrong, Im new to vlan, hope sifu help

What I wanted to do..
QUOTE
hap AC:
ether1 - WAN
ether2 - my PC
ether3 - trunk to  port 8 of TP link Smart switch SG108E v4 (with vlan support)
ether4 - not connected (was for VoIP gateway, but I want to move it to SG108E switch port 3
ether5 - IPTV

SG108E
Port 1-2,4-7 = normal access port
Port 3 = VoIP gateway
Port 8 = connect to hap AC ether3 trunk port


so my current hap AC vlan configuration are below

CODE

interface bridge print
R;;; defconf
    name="bridge" mtu=auto actual-mtu=1500 l2mtu=1594 arp=enabled arp-timeout=auto mac-address=xxxxxxxxxx protocol-mode=rstp
    fast-forward=yes igmp-snooping=no auto-mac=no admin-mac=xxxxxxxxxxx ageing-time=5m priority=0x8000 max-message-age=20s
    forward-delay=15s transmit-hold-count=6 vlan-filtering=yes ether-type=0x8100 pvid=1 frame-types=admit-all ingress-filtering=yes
    dhcp-snooping=no

interface bridge port print
Flags: I - INACTIVE; H - HW-OFFLOAD
Columns: INTERFACE, BRIDGE, HW, PVID, PRIORITY, PATH-COST, INTERNAL-PATH-COST, HORIZON
#    INTERFACE    BRIDGE  HW   PVID  PRIORITY  PATH-COST  INTERNAL-PATH-COST  HORIZON
;;; defconf
0    ether2       bridge  yes     1  0x80             10                  10  none  
;;; defconf
1    ether3       bridge  yes     1  0x80             10                  10  none  
;;; defconf
2 IH ether4-VoIP  bridge    yes     1  0x80             10                  10  none  
;;; defconf
3 I  ether5-IPTV  bridge    yes     1  0x80             10                  10  none  
;;; defconf
4    wlan1        bridge          1  0x80             10                  10  none  
;;; defconf
5 I  wlan2        bridge          1  0x80             10                  10  none  
6    vlan400      bridge          1  0x80             10                  10  none  
7    vlan600      bridge            1  0x80             10                  10  none  


interface bridge port vlan print
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
0 D bridge         1                  bridge          
                                     ether2          
                                     wlan1          
                                     vlan400        
                                     ether3          
1   bridge       400  bridge                          
                     ether3                                      



my TP Link SG108E 802.1Q VLAN configuration as below:

QUOTE
VLAN 1 (default)
Untagged Port 1-2,4-8
Tagged none
PVID=1  Port 1-2,4-8

VLAN 400 (VoIP)
Untagged Port 3
Tagged Port 8
PVID=400 Port 3
my VoIP gateway connected to SG108E port 3, VoIP Phone does not work, other ports do work as access ports, any Mikrotik sifu can help? did I miss something or do anything wrong?

This post has been edited by squall0833: Jul 15 2023, 02:23 AM
bingbangboom
post Dec 18 2023, 11:19 PM

Getting Started
**
Junior Member
112 posts

Joined: Jun 2008
QUOTE(soonwai @ Jul 31 2022, 06:46 PM)
New guide. Old one is here https://forum.lowyat.net/topic/4202122
I'm sure you all will let me know if got any mistakes. smile.gif

First post is only using terminal and command line.
Second post is using Quickset and a bit of command line.

I'm lazy to put screenshots. Maybe later.

Winbox
I suggest using Winbox to configure your Mikrotik router. Download from https://mikrotik.com/download
You can also SSH to the router or use the web configuration page which has a terminal.

Defaults
IP: 192.168.88.1
Username: admin
Password: blank

Ports
LAN port 1 (ether1) is your WAN port. (Connect modem here)
LAN Port 2-5 for your devices. Later we can use port 5 for UnifiTV.

Command Line Method

OK, let's go

Connect to the router using Winbox and open a New Terminal or use SSH. Change to your Unifi username and password first then copy and paste the commands below

CODE
/system package enable ipv6

/system reset-configuration


/interface vlan add interface=ether1 name=vlan500 vlan-id=500

/interface pppoe-client add add-default-route=yes use-peer-dns=yes disabled=no interface=vlan500 name=pppoe-out1 password=fmsSJQEMtvuTy user=myusername@unifi
/interface list member add interface=pppoe-out1 list=WAN

/ip upnp

set enabled=yes

/ip upnp interfaces

add interface=bridge type=internal

add interface=pppoe-out1 type=external

Done. That's all you need for a very basic setup. Internet should be working now.
Explain a bit

First ensure IPv6 package is enabled. This is just to get the IPv6 firewall rules configured in case we want to setup IPv6 in the future.
CODE

/system package enable ipv6


Reset to default configuration. Very important. Router will be reboot.
CODE

/system reset-configuration


When you reconnect, the router will ask you to change password.

Create VLAN 500.
CODE

/interface vlan add interface=ether1 name=vlan500 vlan-id=500


Create PPPoE Client
CODE


/interface pppoe-client add add-default-route=yes use-peer-dns=yes disabled=no interface=vlan500 name=pppoe-out1 password=fmsSJQEMtvuTy user=myusername@unifi


Add PPPoE client to the WAN interface list
CODE
/interface list member add interface=pppoe-out1 list=WAN


Enable UPNP. Not mandatory but many apps uses UPNP.
CODE

/ip upnp

set enabled=yes

/ip upnp interfaces

add interface=bridge type=internal

add interface=pppoe-out1 type=external


WiFi, UnifiTV & IPv6
Wait ya.
*
hi bro. wanna check with you. my office now using some crappy TM router. Fiberhome SR120-A. i can set up mikrotik to run for internet. but phone service wont work. i checked the old router and i believe it has additional vlan set. 209 and 400 i believe. any idea how i can set it up?

user posted image
PRSXFENG
post Dec 19 2023, 09:36 PM

Look at all my stars!!
*******
Senior Member
2,607 posts

Joined: Nov 2020
QUOTE(bingbangboom @ Dec 18 2023, 11:19 PM)
hi bro. wanna check with you. my office now using some crappy TM router. Fiberhome SR120-A. i can set up mikrotik to run for internet. but phone service wont work. i checked the old router and i believe it has additional vlan set. 209 and 400 i believe. any idea how i can set it up?

user posted image
*
TR069 is not needed, that is for TM remote management to access the Fiberhome router

Not sure for the "other"
yenchenje
post Dec 20 2023, 03:22 PM

Enthusiast
*****
Junior Member
932 posts

Joined: Dec 2019
QUOTE(bingbangboom @ Dec 18 2023, 11:19 PM)
hi bro. wanna check with you. my office now using some crappy TM router. Fiberhome SR120-A. i can set up mikrotik to run for internet. but phone service wont work. i checked the old router and i believe it has additional vlan set. 209 and 400 i believe. any idea how i can set it up?

user posted image
*
Pretty sure 400 is VoIP for VLAN, DHCP to get IP from TM

How to set it up on Mikrotik unknown, I’ve been struggling to work with it on my OPNSense as well
tschong
post Mar 11 2024, 04:43 PM

New Member
*
Junior Member
21 posts

Joined: Aug 2010
Dear all sifus,

Greetings. Recently was given A new homefibre wifi6 router by unifi (300 package) but am not happy with the performance. Hence i got myself a used rb2011uias-2hnd on v7.12.1 and try to replace the homefibre. After got hold of the unit i try follow bro soonwai method ( terminal via winbox ) to setup my Unifi on mtk but faced following challenges :

1. /system package enable ipv6 [COLOR=blue] syntex error or unknown command.
2. reset-config [COLOR=blue] ok
3./interface vlan add interface=ether1 name=vlan500 vlan-id=500 [COLOR=blue]ok
4
/interface pppoe-client add add-default-route=yes use-peer-dns=yes disabled=no interface=vlan500 name=pppoe-out1 password=fmsSJQEMtvuTy user=myusername@unifi [COLOR=blue]ok
5./interface list member add interface=pppoe-out1 list=WAN [COLOR=blue] input does not match any value of list
6./ip upnp [COLOR=blue]ok
7.
set enabled=yes [COLOR=blue]ok
8.
/ip upnp interfaces
[COLOR=blue]ok
9. add interface=bridge type=internal [COLOR=blue]bad command name add (line1 of column 1)
10.
add interface=pppoe-out1 type=external[COLOR=blue]bad command name add (line1 of column 1).

Any sifu can help with checking n thank you in advance. When ppl said steep leaning curve i guess this is it but its also a tools to learn new knowledge.

Also halfway keying in the command the terminal window disapear, and reappear as new window ( first window content all gone ). Is this normal?

thank you and wish everyone a nice day ahead.

tschong

update 12/3/2024

Now pppoe/wan (ether1) and pc (ether2) and wifi 2.4 (wlan) is running. Wired test to tm speedtest and ookla can get 200 Mbps dl and wifi 20 Mbps dl. Next is to add rest of the lan into the bridge and run local lan speed test as well as add homefiber router as wifi6 AP.

Thanks

tschong

This post has been edited by tschong: Mar 12 2024, 07:23 AM
mamakap
post Apr 2 2024, 09:31 PM

Casual
***
Junior Member
403 posts

Joined: Jan 2005
delete

This post has been edited by mamakap: Apr 3 2024, 05:16 AM
skywardsword
post Jul 5 2024, 11:15 AM

On my way
****
Junior Member
680 posts

Joined: Sep 2010
Just got my R009... Have been trying to set it up using guides.... No luck so far.

Have to keep at it.

Last time I set up Ambience not so difficult.

The pope cannot connect.

Update. Had to update defconf masquerade firewall rule to output interface for poop.

End up I had to follow up on subtel YouTube video which was also not updated since two years ago.

Latest video is on The network berg YouTube video, which also helps quite a bit.

Setting up mikrotik is like going to university networking course...


It is funny because it can be completely devastating...I setup all the ppoe and than go on to set the interface, bridges, DHCP... Basically lost access right after I change DHCP to issue out the IP address I am familiar with...

Anyhow, fortunately I still have my old Asus. So after marathon setup for 8 hrs and still not successful...I plug the old one back... So I do not get complaint for internet down.

This post has been edited by skywardsword: Jul 6 2024, 12:09 PM
cwtien
post Jun 17 2025, 09:10 PM

Casual
***
Junior Member
477 posts

Joined: Jan 2003
From: Seri Kembangan
QUOTE(skywardsword @ Jul 5 2024, 11:15 AM)
Just got my R009... Have been trying to set it up using guides.... No luck so far.

Have to keep at it.

Last time I set up Ambience not so difficult.

The pope cannot connect.

Update. Had to update defconf masquerade firewall rule to output interface for poop.

End up I had to follow up on subtel YouTube video which was also not updated since two years ago.

Latest video is on The network berg YouTube video, which also helps quite a bit.

Setting up mikrotik is like going to university networking course...
It is funny because it can be completely devastating...I setup all the ppoe and than go on to set the interface, bridges, DHCP... Basically lost access right after I change DHCP to issue out the IP address I am familiar with...

Anyhow, fortunately I still have my old Asus. So after marathon setup for 8 hrs and still not successful...I plug the old one back... So I do not get complaint for internet down.
*
Did you ever complete your Mikrotik journey?
skywardsword
post Jun 18 2025, 02:47 PM

On my way
****
Junior Member
680 posts

Joined: Sep 2010
QUOTE(cwtien @ Jun 17 2025, 09:10 PM)
Did you ever complete your Mikrotik journey?
*
It has been online. And did not meddle with it much since. Not sure it is complete but just too busy to do much other stuff.
« Next Oldest · Networks and Broadband · Next Newest »
 

Add ReplyOptions
 

Change to:
| Lo-Fi Version
 0.0261sec    0.47    5 queries    GZIP Disabled
Time is now: 25th November 2025 - 07:50 AM
All Rights Reserved © 2002- 2025 Vijandren Ramadass (~unite against racism~)
Removal Request
Powered by Invision Power Board © 2025  IPS, Inc.