Hello again, here's just a few useful links for new users and initial configuration: MikroTik Getting Started: help.mikrotik.com/docs/display/ROS/Getting+started First Time Configuration: help.mikrotik.com/docs/display/ROS/First+Time+Configuration Management Tools: help.mikrotik.com/docs/display/ROS/Management+tools MikroTik Torch video :D ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-45E2uwI3xhc.html
Excellent video, only one important thing you didn't mention; backup and restore of config. This is by far one of the most useful options mikrotik has. It makes it really easy to switch from a certain mikrotik router to another without having to reconfigure the new one from scratch. Saves a lot of time especially if you use bridges which eliminate having to redo your whole firewall setup when changing ports. It also is good practice to save a working config before doing anything new. If it fails and you have a mess (also very easy to get with mikrotik), just reset the router to factory, upload and activate the saved config and voila.
Johnny... I will put it as simple as I can. Thanks for your help. The knowledge I have acquired from you the last few years is incomparable. You made me digging more, understanding more, doing more. Keep it up.
Wow thank you for the extremely nice comment! I really hope I can help more people with their own growth when it comes to MikroTik or networking in general and get them wanting to do more!
Very usefulnd MUCH NEEDED video. There's really not a lot of material for basic users on Mikrotik in the internet - and the ones who are there are like encyclopedia - which is not really useful for education. Can you make a video on configuring Mikrotik for VPN and/or Proxy? (OpenVPN or any other service)
I definitely agree that a CCNA is a bit of a step of from the MTNCA, it is also in my opinion a harder certificate to achieve due to the high bar set by Cisco as well as not being able to go back on questions when taking the exam. And yeah, MikroTik expects you to already understand how TCP/IP works and how to perform basic subnetting. So not a 100% equivalent, but it is MikroTik's equivalent to an entry level networking certification.
You are mixing between networking and vendors, CISCO does not mean networking, it is only a vendor, you can master networking with Network+ then start with MTCNA or CISCO. There will be no differences at all.
@@johnlegend8421 while it may be true Cisco is just a vendor but they were if not still are the standard when it comes to networking because of how much in depth the curriculum is, the same may not be true for N+ as they skim over the basics of networking and aren't vendor specific meaning after all of the learning with N+ you still Will pickup Cisco or juniper to study.
There is no way a very basic course like mtcna would be compared to CCNA.I have heard this argument so many times and mostly from people that do not have the CCNA
I enjoyed that introduction. I don’t own a Milrotik, but I do enjoy learning how different switches and routers work, and have been considering some of their smaller 100G switches for my Homelab just for the hell of it snd to see if I can push my hardware.
Hey @TheNetworkBerg - just wanted to say thanks for the videos. Mikrotik do things in a slightly odd way to what I'm used to, but your videos have helped me get my brain around it much easier than forum posts etc (I'm a network engineer also, but I've been siloed in Cisco/HPE aruba for far too long).
Thank you…the version I had on my csr326 didn’t have anything configured as part of its default setup…your video helped me set up things. I was missing the NAT config and that brought my 10 hour struggle to an end . Cheers!
I have been attempting to get my hands on a CCR2004 for quite a while now. They are never in stock. Right at the moment I have a RB301 that I am using. I set it up with your excelent help and training on eyour RU-vid Channel. I would have never been able to get as far as I have withought your help. I sincerely thank you for being a great source of training.
You get a sub and thumbs up. This worked great for me on a RB4011iGS and I appreciate the time you take to explain things as you do them. I look forward to learning much more from you.
This was an awesome video. I got my first Mikrotek router today and was able to configure it first time out following the steps in this video. I had to go find a vid for WifiWave2 config, but this video was awesome. Thanks!
Very interesting. Would love to see an updated version of this. I have 7.14.2 running with the mostly default config and I see some different options. In particular the default firewall rules are different from what you have and what MikroTik has on their First TIme Configuration guide.
I can't imagine the firewall rules have changed much since publishing this video, will need to give it a review :) I think the most important part about the rules is just to understand how they work. Especially how input, output and forward rules work. Fasttrack is also a very interesting topic. So might revisit this again for noobies or create a new video going over all the current MT configurations and features in version 7.15
19:41 oh and don't forgett about F4, F5, F6 F4 - close current window (same as ESC) F5 - refresh current window F6 - cycle through open windows even my trainer did not know those ;)
I plan to replace my router wifi 5 with version 6. it seems interesting to use Mikrotik since it can configure the router and wifi according to my requirements.
Great more of MikroTik Router OS lessons using Vm or Virtualization... And is it possible to set up any type of MikroTik Routersor Switch for LAB lessons or Study purposes? Thanks for great video lesson
Dude this is awesome! I can see a lot of these devices getting into the hands of consumers as a lot of these devices get upgraded and decommissioned from various industries
Thanks for your vid, getting my first microtik in a few days and very excited.I do have some school networking experience and work in it but I think it's be a fun challenge.And WAY better than my r7000 ^^
Oh, man, when I was first learning to manually setup a mikrotik some time ago, I thought that everything is good, but forgetting NAT set did puzzle me a lot of time as of why internet wasn't available, hahaha
At 42:00 you setup your country. Well, my country is Nigeria and I never ever find Nigeria on any list of installation software, setups or whatever. Sometimes, I just put UK, hoping that the remaining hidden technicalities of the software would fall in place. Otherwise, this is an excellent video. I forgot to pick your accent. I just thought, Mikrotik = Latvia guy. Thanks
I do not know what regulations Nigeria has regarding Wireless connectivity, I think the country selection just basically allows you to tweak the wireless to standards or regulations in your country. Setting it to the UK or any other country I do not think will pose any risk or issues unless there are some regulations where you may be connecting to spectrums that you aren't allowed to. I am an African too, living in South Africa that is where my accent is from using the "Afrikaans" language. I think many people think about Latvia when it comes to MikroTik. I really hope to see more MikroTiks being used globally because it is a really good piece of hardware and software for the price!
Once again a very very good video. I became aware of MikroTik through you and now use it at home. Thanks a lot for the really great videos. Question: Have you ever used a MikroTik as a DSL router? SFP with VDSL or ADSL to set up an Internet ISP access? Can I sponsor you a coffee?
Yeah I know they are definitely working on it, I recall seeing it mentioned in either a newsletter or one of the new HAP reveals on their channel. So maybe it will come out soon for ROS as a whole. Thank you also for the nice comment, it is appreciated!
Nice video its very helpful, johnny can you explain new User Manager 7.6 ? I'm facing some issues, time validity not working, limitation also not working, added some attributes then not working please explain and make a full video to User manager, thank you
Great videos you make Sir. Just perfect. Can I ask what is the smallest Mikrotik routerboard to the best of your knowledge that wont choke if u have 1Gig from ISP. Im moving from Google Mesh and I want Mikrotik router and probably 2 x AP lite from Ubiquiti. Now I have been looking at the Hex S. Would that work you think? Its only for my family. 3 kids with pc's: I have some cameras, a NAS and some other stuff. Can you recommend anything?
При знайомстві з Mikrotik, саме цього не вистачало. Але я радив би робити коротенькі відео, трохи іншого формату, більш практичного характеру. По перше беремо ситуацію - є офіс на 6-7 осіб з сервером 1с та відеоспостереженням. Пояснюємо, який девайс для цього обираємо - за якими критеріями, а потім показуємо як вирішуємо конкретні завдання - налаштування певної адреси для сервера, відеорегістратора, мережевого принтера, VPN, як прокинути за NAT порти, власний та гостьовий Wi-Fi і таке інше. При цьому виділяти певні моменти - best practices best. За аналогією, потім офіс на 50-100 осіб - DualWan, VLAN і т.д. Ціни не було б цим відосикам.
28:23 Question: So how do the ports act if they are not part of the bridge? Would they still act as if they were on the same switch with the option to configure otherwise? Great vid you hit the nail on the head for me recent network grad. Found the Router OS very intimidating.
Hi Ryan ports that aren't bridged will typically function as a single broadcast domain. Useful for connecting to upstream providers like ISPs that have a "dedicated" port each port will also be able to carry 4095 VLAN tags which get more useful in the ISP/Carrier space. And yes you do have the option to change things later on as the need arises.
Great video, very nice explained as always, enjoyed watching even when you are talking about basic stuff. Right now im waiting 2 hap ax2 to replace my current aps. (Cant wait for mikrotik to make cap ax haha).
I honestly wish I could also get my hands on a hap ax2 or ax3 :D Feel free to comment on a video once you have them how the performance is! And thank you for the kind comment I really appreciate it.
@@TheNetworkBerg No problem, i have to see how long i have to wait, ax2 is available to order but i didn't see ax3. I will run a few test to see the performance and report back but i think it will work just fine, i never had problems with mikrotik.
@@TheNetworkBerg I've been waiting for RB260GSP for over 10 months... And hAP ax2 is already sold out... Ax3 eta is unknown right now... AX2 is not yet available in south africa ?
@@kresimirpecar4925 AX2 is available, but not really. Since all big distributors have it sold out already and no time available for when new stock is available. So could be months :((((
cool video on the basics, but can you do a video on how to port forward ? i have a relatively simple setup, just no matter what, port forwarding wont work correctly the setup, im having two WAN, 1 pppoe and 1 static ip, combined with pcc, both WAN queued, some additional mangle rules to allow access to different subnet on my remote site thats connected via ZT running on a CRS326, and also additional pbr rule to prioritize ZT traffic going via pppoe, i have port forward and hairpinNAT configured on IP>Firewall>NAT, asked reddit and they checked the export hide sensitive, everything seems to be correct, but didnt work correctly anyways
You added a rule in the forward chain for established and related connections. First one has action "fasttrack" and second one is "accept". Why do you need the second one (accept)?
Mikrotik is actually surprisingly similar to LANCOM in the way it works and is set up. But when it comes to price/performance, Mikrotik is about 10 times better. :^)
Hello. Are you aware of a site who would provide "template" for enthusiast users ??? Kind of files to uploade with setup mostly used all of the time ... One ro two antenna, WAN, DMZ, IOT, LAN_1 & LAN_2 ... I hate to re-invent the wheel ...
Hi im new here. I have a question. I have my pppoe connection on my home. Can i still configure pppoe client in mikrotik router?Just for testing.and will it have a bad effect on my existing pppoe connection from my isp?
Mikrotik should relese two default configurations for say exampel RB5009UPr+S+IN. One should be for using ether1 as WAN and one config for using ether2 as WAN and ether 1,3,4,5,6,7,8 as LAN. So you can choose without making alot of configurations,
At 25:53 you are talking about default firewall config blocking wireguard. That's not entirely true, wireguard is processed by the rule number 1 in your config - accept established, related, untracked. Only people who have a very old set of rules, for example from RouterOS 5 will have problems. Default firewall rules in ROS 5 are very different from those in ROS 7. The changes are subtle but important for everything to work smoothly.
Sorry if you misunderstood or if I didn't make that part clear this is specifically if you run the default rules for incoming connections. Ie you have remote clients trying to initiate wireguard connectivity to you. Not the other way around. You can read more about it on the MikroTik Docs help.mikrotik.com/docs/display/ROS/WireGuard
Well, if you are on the "server" side of things, then yes, you need to allow that incoming connection on the mikrotik router. I just meant that as a client you do not have to. I personally use Wireguard for enabling IPv6 traffic (my ISP does not support IPv6 yet), and I never had to open anything, everything worked out of the box.
Hi, Thanks for the amazing video, I have dual wan setup what I want to do is some source IP need to go on WAN 1 and rest on WAN2, I did the same on routerOS 6 but I think things has changed on RouterOS7. can please show me way how to do this?
You will use mangle rules to enforce packet markings to basically push traffic from a specific source out over a different gateway. The methods are still pretty similar between v6 and v7, biggest changes is how the routing tables are added. Will create an updated video sometime to demonstrate this process.
On the internet method shows by creating separate FIBs, You cannot mark a routing without it. but after I switch to newly created FIB routing table shows blank, So I'm bit confused whether this is like VRF a complete new routing instance? @@TheNetworkBerg
Hi there. I have a rater newbie question. I own a CCR1009-7G-1C-1S+ which I would like to change to CCR2004-16G-2S+ because of the newer architecture. I would like to know how fast and easy can be an upgrade? Is the old configuration from the old CCR going to work after loading or is there something that would need to be done beforehand?
Can i use a Mikrotik as a firewall between a fibre connection and my home router? For example, between a virgin router in modem mode and a WiFi router? All i want is a firewall.
I have a question please - If ether 1 is your DHCP Client, and you did not include ether1 in your Lan Bridge, (with the Lan Bridge the DHCP Sever), how is the link from the Wan (internet from ether1), linked to the rest of the LAN ports if it is not included in the bridge?
The WAN interface is supposed to be separate from the LAN, not bridged together. He set up a DHCP 'client' on the WAN interface to get an IP from his ISP, and set up a DHCP 'server' on the LAN interfaces (which are bridged to each other) to give out IP addresses to his LAN clients. Traffic from the WAN side must now flow through the router according to the firewall rules, to get to the LAN side.
Hello sir johnny, I have small network Im using ccr1016 Im providing internet connection in our area. After upgrading to v7 from v6 some clients complaining their connection become slow. My question is can i revert/downgrade back to v6 my router without affecting configuration? Thank you.
I'm so confused. I'm trying to connect a Proxmox host machine to the switch. I'm trying to enter 192.168.1.196/24 as an address but whenever I do, it ends up shutting down the Mikrotik DHCP IP and kicking me off. Can only access it via MAC address and legacy mode after that point. Functionality returns when removing the Proxmox machine IP. I'm really new to this. Do I need to change the Proxmox machine IP?
Sorry to hear that Joe, any reason why you are done? There are definitely many alternatives depending on what you want to use the device for. Home use or business?
@@TheNetworkBerg My work gives out hAP2's when you hit your 90 days. It's kind of to get us to play with and get more comfortable with Mikrotiks, no one really does though. I have had mine for over a year now and it's mostly gathered dust. I have not deployed it here in my home network, as I spend 2 hours here, 4 hours there every few weeks trying to get it to work. Every time it ends with me not being able to even access it through Winbox. The past remedies of resetting the device are not working this time and doing the Netinstall has been futile. I have dumped hours upon hours into trying to get this thing to work. They really are awesome though, so much potential, just too complicated. I just got an OPNSense firewall spun up in a VM (in less than 2 hours) and this seems like the way to go.
@@TheNetworkBerg We do use them for some of our clients, but none of the engineers like to mess with them if they don't have to. Probably only 2 of the engineers set them up and deploy them.
@@TheNetworkBerg I have issues while trying to set it up. I have never been able to actually deploy it as I end up not being able to find it via Winbox, this is after some configuration via Winbox. I have gone through the process 7-8 times over the last year, I get frustrated with it and let it sit for a month or two then try again, same result. However, last week when I said I was officially done, apparently I bricked the device (not my words, but my coworkers as he is the most knowledgeable about Mikrotiks in our office). He gave me a new one, but I am not holding my breath that I am going to get a better outcome.
@@joeosint by losing access i imagine it is from configuring the firewall. mikrotik firewall is just GUI-fied iptables, which admittedly is very complicated. linux users already familiar with iptables will feel right at home though. for preventing losing access constantly, there is a safe mode toggle that snapshots your config when activated, and if winbox disconnects any changes in the config are rolled back to when safe mode was activated.
Yes, you could run the x86 VM on Proxmox if you are interested in learning more about MikroTik and to play around with the OS, Networking, etc. You can download the ISO from here: mikrotik.com/download
Hi Johnny could you pls tell me something I'm looking to use the Hap Ac 2. I just need to know if there is a limit on how may port forwarding rules I can set up. I would like to run a few game servers from home for my friends and need to forward like 70 ports could you tell me if i could do that with a Hap Ac 2?
It's more about how much resources the devices has available for the session (connections) table, you could configure thousands of NAT rules, but it depends on if they are actually being used by the router. So if you want to port forward 70 ports to a host inside your network and you only use the NAT rule whenever needed it should be fine. But don't expect it being able to handle too many sessions where thousands of people connect at the same time for something like a web service.
@@TheNetworkBerg wow ok thx so much for coming back to me on this really Awesome what you doing on your channel. keep it going will make sure to shear your channel :)
Of course you can, you can sign up for something like DynDNS and use that to connect to with your router. Can then just setup a portforward rule on your WAN port and forward it internally so even if the IP changes everyone still knows what the FQDN is :)
There isn't any benefit from using 172 instead of 192 other than preventing clients from 192 network accessing clients on 172 network and vice versa or/and just assigning 2 different networks or VLANs with unique rules. Scenario where you might need that, is if you have let's say smart TV and want to allow netflix and firmware updates on it, but prevent all access to and from internet to it or setup network for kids which deactivates internet access at certain time and/or days or restricts type of content your kids can access on the internet.
When I try to create my first DHCP Client on WAN interface eth 1, I get an error message stating I cannot run on slave interface 6. I don't 'understand why I am getting this error
You don't have to use winbox, but it is a very useful tool for accessing a device on even its mac-address or to connect to a romon network. Personally I use the CLI a lot more than winbox, but that is more of a personal preference.
I really couldn't say, you would have to ask the people who mounted them. Maybe free wifi for people who are parked there or someone who can't put cables in or over a road but they are using it as a wireless connection. I would probably just let your council / police department know about it since I don't think it is probably legal to mount wireless equipment to light poles.
@@TheNetworkBerg If for instance we block a porn site through mikrotik, but the wireless users on their mobile if they install any vpn app then they can open those pages.....so kids also might do that. Is there anyway in Mikrotik to drop all the packets that are out of my public ip... so believe if they connect to vpn then internet won't be available...
"Winbox is a small utility that allows the administration of MikroTik RouterOS using a fast and simple GUI. It is a native Win32 binary but can be run on Linux and macOS (OSX) using Wine." .... as soon as they mentioned "WINE" I lost all interest.
Never connect your router to the internet without any firewall rules set. Yikes man. The second you connect any device with open ports it is instantly scanned by a hackers bot.
Yikes indeed, great point! Luckily there are several other videos on the channel that focuses specifically on securing a MikroTik router which I can suggest watching this is just a pure intro😊
That's a shame you feel that way, what do you think would make the video less dull for you? You could also check out some other the other MT channels like TKSJA or The Network Trip and see if their style of video is more to your liking.
Just a heads up, "Mikrotik is not OPEN SOURCE" and do not contribute to the open source community. I would avoid it and look for alternatives. strange you didn't mention this in your video.
Thanks for the suggestion, I think I just happened to forget to turn on capture cursor on OBS in this instance, although on the other side I have received complaints before that I am too busy with the cursor as well 😄
