In cases where an offsite or cloud hosted Unifi controller is used, setting the inform URL is required to adopt a Unifi AP and other UniFi devices. Once and inform URL is setup the Unifi device will “inform” the controller of its existence, from there you will see it in your list of ready to adopt devices.
Continue reading
If you’ve ever needed to limit download/upload speed for a specific user, subnet, or an entire interface, Mikrotik’s simple queues are an easy way to achieve just that. There are various parameters within the simple queue menu, and I suggest reading up about these on the Mikrotik Wiki, however to create a basic queue that applies a limit to a specific target, only a few settings are required:
queue/simple/add max-limit=5M/5M queue=default-small/default-small target=192.168.0.0/24 name=test_queueThe command above creates a simple queue, the max-limit sets the upload/download speed, and “queue=x” sets the queuing algorithm.
Continue reading
In large NATTED networks, where the number of LAN devices create more connections than there are available ports, connections will stop working, and internet access will be intermittent due to port exhaustion.
Example: In a standard NAT setup on Mikrotik, NATTED connections each get one src port. By default Mikrotik NATS using the port range (1024–65535) – If the total amount of active connections out number ~64 thousand (ignoring any static ports), then the network will have exhausted all available ports, and subsequently new connections will not be possible until used ports become available again after connection timeouts.
Continue reading
Using the built in Mikrotik scripting and email tools is an easy way to create automatic backups, that are emailed to you everyday at scheduled times. This guide will give you a detailed walk through of the 3 parts to setting this up.
Continue reading
Configuring login notes to appear as pop-up messages in Winbox, that also display in the terminal is quite easy, and can be done in just a few simple steps.
Firstly, login to your Mikrotik router. Navigate to System > Note:
Continue reading
Post Notes: as of RouterOS 7.18 – ip – added support for /31 address
Contents:
Mikrotik WireGuard Interface Setup
In this guide, I’ll show you how to easily set up a VPN tunnel using WireGuard between a Windows PC and a MikroTik router. Whether you need to manage your router remotely or access hosts on your network from anywhere, this tutorial will covers each aspect and aims to simplify the steps to make it easy for anyone at any skill level.
Continue reading
A simply way to create firewall filter rules that are only active at certain times without needing to use scripts, is to utilize the built in “Time” field that can be found in the “Extra” menu when configuring a firewall filter on Mikrotik RouterOS.
Its important to make sure your routers system clock is correctly recording time. The easiest way to do this is to use an NTP server. You can find my guide on how to do this 👉 here.
Continue reading
In this guide we’ll be focussing on setting up an NTP client on Mikrotik RouterOSv7 for global time and date sync, and ensuring that the system clock is keeping time correctly.
NTP functions by allowing a device to sync its UTC time and date from a global time server. In our use case, it enables a Mikrotik router running an NTP client to get accurate UTC time and dates from an external NTP server. Once the MikroTik router syncs its UTC time and date via NTP, the system clock applies the configured local time zone to display the correct time.
Continue reading
This guide aims to effectively demonstrate the steps required to setup a simple DHCP server on MikroTik RouterOS.
Step 1:
Before we start with the DHCP server, there are two considerations we need to take into account. 1, what IP subnet are we going to use for our LAN range that DHCP hands out? 2, what interface is the DHCP server going to live on?
Continue reading
In this guide we’re taking a look at one possible way to setup a “drop all, except whitelisted IP addresses” config. The premise for this setup, is to be a very easy way to stop network users from visiting websites other that what we explicitly allow.
Continue reading