Hands-on experience in networks, servers and business communications.
A complete hardening checklist for MikroTik routers: updating RouterOS, removing the admin user, closing services and changing the Winbox port, the input firewall, brute-force protection, remote management over VPN, disabling extra features, logging, encrypted backups and regular reviews, all with ready-to-use commands.
· 7 min read
A MikroTik whose DNS answers the internet becomes a tool for DNS amplification attacks and wastes CPU and bandwidth. How to detect it, firewall rules to close port 53, preventing DNS hijacking and setting up DNS over HTTPS in RouterOS.
· 4 min read
A step-by-step set-up of MikroTik’s new CAPsMAN for Wi-Fi 6 with 10 cAP ax units on RouterOS 7, with two SSIDs (staff and guest), each carried on its own VLAN from the MikroTik router through a Cisco switch to the access points: the VLAN plan, router, Cisco switch and cAP ax configuration, roaming, channel planning and common errors.
· 9 min read
A step-by-step site-to-site IPsec tunnel with IKEv2 between MikroTik (RouterOS 7) and a Cisco router (IOS): matching the parameters, the full commands on both sides, NAT bypass, firewall rules, testing the tunnel and fixing common errors.
· 7 min read
From hEX and hAP for small offices to the RB5009 and CCR series for large networks, and CHR for virtual servers: this article covers the MikroTik router families, RouterOS licence levels and how to choose the right model.
· 4 min read
Before any configuration you need to know which port is the internet, what address the internal network uses and who may access the router. This article covers network planning, logging in with Winbox, creating a user, updating RouterOS and building the internal bridge, step by step.
· 3 min read
A MikroTik router connects to the internet in three common ways: behind a modem with DHCP, PPPoE with the modem in bridge mode, or a static IP. See all three, plus NAT, DNS and connection checks, step by step.
· 3 min read
With a DHCP server, computers, phones and IP phones get their IP address, gateway and DNS automatically. Learn the quick Setup wizard, manual configuration, address reservations for fixed devices, DHCP for several VLANs and troubleshooting.
· 3 min read
MikroTik srcnat and dstnat with examples and ready-to-use commands: masquerade, src-nat, port forwarding, hairpin NAT and one-to-one NAT.
· 4 min read
A static route to another network, the default route, failover between two internet lines with distance and check-gateway, recursive routing and policy routing in RouterOS 7, with examples and ready-to-use commands.
· 4 min read
A MikroTik router connected to the internet is scanned and attacked with password guesses every day. See a basic input and forward firewall, closing unneeded services, restricting Winbox, isolating the guest network and a MikroTik security checklist.
· 4 min read
Want to see your cameras, office computer or server from home or your phone? MikroTik gives you three ways: port forwarding, DDNS with IP Cloud, and a WireGuard VPN. The pros, the risks and the set-up of each are covered here.
· 4 min read