Limit Any Device’s Speed on MikroTik (default-small / pfifo Simple Queues)

If you’ve ever needed to limit download/upload speed for a specific user, subnet, or an entire interface, Mikrotik’s simple queues are an easy way to achieve just that. There are various parameters within the simple queue menu, and I suggest reading up about these on the Mikrotik Wiki, however to create a basic queue that applies a limit to a specific target, only a few settings are required:

queue/simple/add max-limit=5M/5M queue=default-small/default-small target=192.168.0.0/24 name=test_queue

The command above creates a simple queue, the max-limit sets the upload/download speed, and “queue=x” sets the queuing algorithm.

Continue reading

Load-Balancing Src NAT Across Multiple Public IPs on MikroTik

In large NATTED networks, where the number of LAN devices create more connections than there are available ports, connections will stop working, and internet access will be intermittent due to port exhaustion.

Example: In a standard NAT setup on Mikrotik, NATTED connections each get one src port. By default Mikrotik NATS using the port range (1024–65535) – If the total amount of active connections out number ~64 thousand (ignoring any static ports), then the network will have exhausted all available ports, and subsequently new connections will not be possible until used ports become available again after connection timeouts.

Continue reading

WireGuard VPN with MikroTik and Windows Setup Guide

Contents:

In this guide, I’ll show you how to easily set up a VPN tunnel using WireGuard between a Windows PC and a MikroTik router. Whether you need to manage your router remotely or access hosts on your network from anywhere, this tutorial will covers each aspect and aims to simplify the steps to make it easy for anyone at any skill level.

Continue reading

How To Setup Time Based Firewall Rules on Mikrotik RouterOS

A simply way to create firewall filter rules that are only active at certain times without needing to use scripts, is to utilize the built in “Time” field that can be found in the “Extra” menu when configuring a firewall filter on Mikrotik RouterOS.

Its important to make sure your routers system clock is correctly recording time. The easiest way to do this is to use an NTP server. You can find my guide on how to do this 👉 here.

Continue reading

MikroTik V7 NTP Client Setup: Connect and Sync to Global Time Servers

In this guide we’ll be focussing on setting up an NTP client on Mikrotik RouterOSv7 for global time and date sync, and ensuring that the system clock is keeping time correctly.

NTP functions by allowing a device to sync its UTC time and date from a global time server. In our use case, it enables a Mikrotik router running an NTP client to get accurate UTC time and dates from an external NTP server. Once the MikroTik router syncs its UTC time and date via NTP, the system clock applies the configured local time zone to display the correct time.

Continue reading

MikroTik DHCP Server Setup Guide

This guide aims to effectively demonstrate the steps required to setup a simple DHCP server on MikroTik RouterOS.

Step 1:

Before we start with the DHCP server, there are two considerations we need to take into account. 1, what IP subnet are we going to use for our LAN range that DHCP hands out? 2, what interface is the DHCP server going to live on?

Continue reading

Mikrotik DHCP Lease Exclusions

Adding a DHCP lease exclusion is typically a simple task on most routers—just a few clicks to add the desired IP to an exclusion list. However, on RouterOS, the process is quite manual and requires a bit more effort. This guide will walk you through the steps to create a DHCP exclusion in RouterOS, leveraging its granular configuration capabilities.

Lets take a look at two different approaches to achieve the same end result.

Continue reading