Adding a DHCP lease exclusion is typically a simple task on most routers—just a few clicks to add the desired IP to an exclusion list. However, on RouterOS, the process is quite manual and requires a bit more effort. This guide will walk you through the steps to create a DHCP exclusion in RouterOS, leveraging its granular configuration capabilities.
Lets take a look at two different approaches to achieve the same end result.
Continue reading
Post Notes: as of RouterOS 7.18 – ip – added support for /31 address
The steps below aim to illustrate how to setup a site to site VPN between two Mikrotik devices using WireGuard. Pre-existing local networks and firewalls exist on both R1 and R2. Between R1 and R2 the WireGuard tunnel will use 172.17.0.0/30. R2 has 172.17.0.1 assigned to its WireGuard interface, while R1 has 172.17.0.2 assigned to its WireGuard interface. The network used, or the order in which IP addresses are assigned is not important, however it is considered best practice to use a point to point subnet between peers.
Continue reading