Hello again, here's just a few useful links for new users and initial configuration: MikroTik Getting Started: help.mikrotik.com/docs/display/ROS/Getting+started First Time Configuration: help.mikrotik.com/docs/display/ROS/First+Time+Configuration Management Tools: help.mikrotik.com/docs/display/ROS/Management+tools MikroTik Torch video :D ua-cam.com/video/45E2uwI3xhc/v-deo.html
Excellent video, only one important thing you didn't mention; backup and restore of config. This is by far one of the most useful options mikrotik has. It makes it really easy to switch from a certain mikrotik router to another without having to reconfigure the new one from scratch. Saves a lot of time especially if you use bridges which eliminate having to redo your whole firewall setup when changing ports. It also is good practice to save a working config before doing anything new. If it fails and you have a mess (also very easy to get with mikrotik), just reset the router to factory, upload and activate the saved config and voila.
Johnny... I will put it as simple as I can. Thanks for your help. The knowledge I have acquired from you the last few years is incomparable. You made me digging more, understanding more, doing more. Keep it up.
Wow thank you for the extremely nice comment! I really hope I can help more people with their own growth when it comes to MikroTik or networking in general and get them wanting to do more!
I have been attempting to get my hands on a CCR2004 for quite a while now. They are never in stock. Right at the moment I have a RB301 that I am using. I set it up with your excelent help and training on eyour UA-cam Channel. I would have never been able to get as far as I have withought your help. I sincerely thank you for being a great source of training.
Hey @TheNetworkBerg - just wanted to say thanks for the videos. Mikrotik do things in a slightly odd way to what I'm used to, but your videos have helped me get my brain around it much easier than forum posts etc (I'm a network engineer also, but I've been siloed in Cisco/HPE aruba for far too long).
This was an awesome video. I got my first Mikrotek router today and was able to configure it first time out following the steps in this video. I had to go find a vid for WifiWave2 config, but this video was awesome. Thanks!
You get a sub and thumbs up. This worked great for me on a RB4011iGS and I appreciate the time you take to explain things as you do them. I look forward to learning much more from you.
Very usefulnd MUCH NEEDED video. There's really not a lot of material for basic users on Mikrotik in the internet - and the ones who are there are like encyclopedia - which is not really useful for education. Can you make a video on configuring Mikrotik for VPN and/or Proxy? (OpenVPN or any other service)
Thank you…the version I had on my csr326 didn’t have anything configured as part of its default setup…your video helped me set up things. I was missing the NAT config and that brought my 10 hour struggle to an end . Cheers!
Dude this is awesome! I can see a lot of these devices getting into the hands of consumers as a lot of these devices get upgraded and decommissioned from various industries
I enjoyed that introduction. I don’t own a Milrotik, but I do enjoy learning how different switches and routers work, and have been considering some of their smaller 100G switches for my Homelab just for the hell of it snd to see if I can push my hardware.
Thanks for your vid, getting my first microtik in a few days and very excited.I do have some school networking experience and work in it but I think it's be a fun challenge.And WAY better than my r7000 ^^
Yeah I know they are definitely working on it, I recall seeing it mentioned in either a newsletter or one of the new HAP reveals on their channel. So maybe it will come out soon for ROS as a whole. Thank you also for the nice comment, it is appreciated!
19:41 oh and don't forgett about F4, F5, F6 F4 - close current window (same as ESC) F5 - refresh current window F6 - cycle through open windows even my trainer did not know those ;)
I definitely agree that a CCNA is a bit of a step of from the MTNCA, it is also in my opinion a harder certificate to achieve due to the high bar set by Cisco as well as not being able to go back on questions when taking the exam. And yeah, MikroTik expects you to already understand how TCP/IP works and how to perform basic subnetting. So not a 100% equivalent, but it is MikroTik's equivalent to an entry level networking certification.
You are mixing between networking and vendors, CISCO does not mean networking, it is only a vendor, you can master networking with Network+ then start with MTCNA or CISCO. There will be no differences at all.
@@johnlegend8421 while it may be true Cisco is just a vendor but they were if not still are the standard when it comes to networking because of how much in depth the curriculum is, the same may not be true for N+ as they skim over the basics of networking and aren't vendor specific meaning after all of the learning with N+ you still Will pickup Cisco or juniper to study.
There is no way a very basic course like mtcna would be compared to CCNA.I have heard this argument so many times and mostly from people that do not have the CCNA
Very interesting. Would love to see an updated version of this. I have 7.14.2 running with the mostly default config and I see some different options. In particular the default firewall rules are different from what you have and what MikroTik has on their First TIme Configuration guide.
I can't imagine the firewall rules have changed much since publishing this video, will need to give it a review :) I think the most important part about the rules is just to understand how they work. Especially how input, output and forward rules work. Fasttrack is also a very interesting topic. So might revisit this again for noobies or create a new video going over all the current MT configurations and features in version 7.15
At 42:00 you setup your country. Well, my country is Nigeria and I never ever find Nigeria on any list of installation software, setups or whatever. Sometimes, I just put UK, hoping that the remaining hidden technicalities of the software would fall in place. Otherwise, this is an excellent video. I forgot to pick your accent. I just thought, Mikrotik = Latvia guy. Thanks
I do not know what regulations Nigeria has regarding Wireless connectivity, I think the country selection just basically allows you to tweak the wireless to standards or regulations in your country. Setting it to the UK or any other country I do not think will pose any risk or issues unless there are some regulations where you may be connecting to spectrums that you aren't allowed to. I am an African too, living in South Africa that is where my accent is from using the "Afrikaans" language. I think many people think about Latvia when it comes to MikroTik. I really hope to see more MikroTiks being used globally because it is a really good piece of hardware and software for the price!
Great video, very nice explained as always, enjoyed watching even when you are talking about basic stuff. Right now im waiting 2 hap ax2 to replace my current aps. (Cant wait for mikrotik to make cap ax haha).
I honestly wish I could also get my hands on a hap ax2 or ax3 :D Feel free to comment on a video once you have them how the performance is! And thank you for the kind comment I really appreciate it.
@@TheNetworkBerg No problem, i have to see how long i have to wait, ax2 is available to order but i didn't see ax3. I will run a few test to see the performance and report back but i think it will work just fine, i never had problems with mikrotik.
@@TheNetworkBerg I've been waiting for RB260GSP for over 10 months... And hAP ax2 is already sold out... Ax3 eta is unknown right now... AX2 is not yet available in south africa ?
@@kresimirpecar4925 AX2 is available, but not really. Since all big distributors have it sold out already and no time available for when new stock is available. So could be months :((((
Once again a very very good video. I became aware of MikroTik through you and now use it at home. Thanks a lot for the really great videos. Question: Have you ever used a MikroTik as a DSL router? SFP with VDSL or ADSL to set up an Internet ISP access? Can I sponsor you a coffee?
I plan to replace my router wifi 5 with version 6. it seems interesting to use Mikrotik since it can configure the router and wifi according to my requirements.
Hi there. I have a rater newbie question. I own a CCR1009-7G-1C-1S+ which I would like to change to CCR2004-16G-2S+ because of the newer architecture. I would like to know how fast and easy can be an upgrade? Is the old configuration from the old CCR going to work after loading or is there something that would need to be done beforehand?
Oh, man, when I was first learning to manually setup a mikrotik some time ago, I thought that everything is good, but forgetting NAT set did puzzle me a lot of time as of why internet wasn't available, hahaha
Thank you for the excellent video. One suggestion. You say this video is intended for beginners. It would be helpful to clarify that you mean beginners who are new to MikroTik products, not for persons new to networking concepts in general. Your video assumes the audience is already familiar with things like IP addresses, ethernet interfaces, DHCP, NAT, firewalls, etc.
Thank you for your suggestion, yeah I can agree that if you are going in completely new to networking and you don't know some fundamentals that it might take some time to get your head around things. I'll see if I can update the description or pinned comments to link some of my other videos going over those basics. Although for some reason people seem to avoid the pure basics like what an IP address is, how the OSI model works or what routing in general is, though I guess it's because there are so many other videos on YT covering those topics already.
Great more of MikroTik Router OS lessons using Vm or Virtualization... And is it possible to set up any type of MikroTik Routersor Switch for LAB lessons or Study purposes? Thanks for great video lesson
28:23 Question: So how do the ports act if they are not part of the bridge? Would they still act as if they were on the same switch with the option to configure otherwise? Great vid you hit the nail on the head for me recent network grad. Found the Router OS very intimidating.
Hi Ryan ports that aren't bridged will typically function as a single broadcast domain. Useful for connecting to upstream providers like ISPs that have a "dedicated" port each port will also be able to carry 4095 VLAN tags which get more useful in the ISP/Carrier space. And yes you do have the option to change things later on as the need arises.
Yes, you could run the x86 VM on Proxmox if you are interested in learning more about MikroTik and to play around with the OS, Networking, etc. You can download the ISO from here: mikrotik.com/download
I have a question please - If ether 1 is your DHCP Client, and you did not include ether1 in your Lan Bridge, (with the Lan Bridge the DHCP Sever), how is the link from the Wan (internet from ether1), linked to the rest of the LAN ports if it is not included in the bridge?
The WAN interface is supposed to be separate from the LAN, not bridged together. He set up a DHCP 'client' on the WAN interface to get an IP from his ISP, and set up a DHCP 'server' on the LAN interfaces (which are bridged to each other) to give out IP addresses to his LAN clients. Traffic from the WAN side must now flow through the router according to the firewall rules, to get to the LAN side.
Hello. Are you aware of a site who would provide "template" for enthusiast users ??? Kind of files to uploade with setup mostly used all of the time ... One ro two antenna, WAN, DMZ, IOT, LAN_1 & LAN_2 ... I hate to re-invent the wheel ...
При знайомстві з Mikrotik, саме цього не вистачало. Але я радив би робити коротенькі відео, трохи іншого формату, більш практичного характеру. По перше беремо ситуацію - є офіс на 6-7 осіб з сервером 1с та відеоспостереженням. Пояснюємо, який девайс для цього обираємо - за якими критеріями, а потім показуємо як вирішуємо конкретні завдання - налаштування певної адреси для сервера, відеорегістратора, мережевого принтера, VPN, як прокинути за NAT порти, власний та гостьовий Wi-Fi і таке інше. При цьому виділяти певні моменти - best practices best. За аналогією, потім офіс на 50-100 осіб - DualWan, VLAN і т.д. Ціни не було б цим відосикам.
Hi im new here. I have a question. I have my pppoe connection on my home. Can i still configure pppoe client in mikrotik router?Just for testing.and will it have a bad effect on my existing pppoe connection from my isp?
Can i use a Mikrotik as a firewall between a fibre connection and my home router? For example, between a virgin router in modem mode and a WiFi router? All i want is a firewall.
Nice video its very helpful, johnny can you explain new User Manager 7.6 ? I'm facing some issues, time validity not working, limitation also not working, added some attributes then not working please explain and make a full video to User manager, thank you
I'm so confused. I'm trying to connect a Proxmox host machine to the switch. I'm trying to enter 192.168.1.196/24 as an address but whenever I do, it ends up shutting down the Mikrotik DHCP IP and kicking me off. Can only access it via MAC address and legacy mode after that point. Functionality returns when removing the Proxmox machine IP. I'm really new to this. Do I need to change the Proxmox machine IP?
Hello sir johnny, I have small network Im using ccr1016 Im providing internet connection in our area. After upgrading to v7 from v6 some clients complaining their connection become slow. My question is can i revert/downgrade back to v6 my router without affecting configuration? Thank you.
Great videos you make Sir. Just perfect. Can I ask what is the smallest Mikrotik routerboard to the best of your knowledge that wont choke if u have 1Gig from ISP. Im moving from Google Mesh and I want Mikrotik router and probably 2 x AP lite from Ubiquiti. Now I have been looking at the Hex S. Would that work you think? Its only for my family. 3 kids with pc's: I have some cameras, a NAS and some other stuff. Can you recommend anything?
cool video on the basics, but can you do a video on how to port forward ? i have a relatively simple setup, just no matter what, port forwarding wont work correctly the setup, im having two WAN, 1 pppoe and 1 static ip, combined with pcc, both WAN queued, some additional mangle rules to allow access to different subnet on my remote site thats connected via ZT running on a CRS326, and also additional pbr rule to prioritize ZT traffic going via pppoe, i have port forward and hairpinNAT configured on IP>Firewall>NAT, asked reddit and they checked the export hide sensitive, everything seems to be correct, but didnt work correctly anyways
Hi Johnny could you pls tell me something I'm looking to use the Hap Ac 2. I just need to know if there is a limit on how may port forwarding rules I can set up. I would like to run a few game servers from home for my friends and need to forward like 70 ports could you tell me if i could do that with a Hap Ac 2?
It's more about how much resources the devices has available for the session (connections) table, you could configure thousands of NAT rules, but it depends on if they are actually being used by the router. So if you want to port forward 70 ports to a host inside your network and you only use the NAT rule whenever needed it should be fine. But don't expect it being able to handle too many sessions where thousands of people connect at the same time for something like a web service.
@@TheNetworkBerg wow ok thx so much for coming back to me on this really Awesome what you doing on your channel. keep it going will make sure to shear your channel :)
At 25:53 you are talking about default firewall config blocking wireguard. That's not entirely true, wireguard is processed by the rule number 1 in your config - accept established, related, untracked. Only people who have a very old set of rules, for example from RouterOS 5 will have problems. Default firewall rules in ROS 5 are very different from those in ROS 7. The changes are subtle but important for everything to work smoothly.
Sorry if you misunderstood or if I didn't make that part clear this is specifically if you run the default rules for incoming connections. Ie you have remote clients trying to initiate wireguard connectivity to you. Not the other way around. You can read more about it on the MikroTik Docs help.mikrotik.com/docs/display/ROS/WireGuard
Well, if you are on the "server" side of things, then yes, you need to allow that incoming connection on the mikrotik router. I just meant that as a client you do not have to. I personally use Wireguard for enabling IPv6 traffic (my ISP does not support IPv6 yet), and I never had to open anything, everything worked out of the box.
Hi, Thanks for the amazing video, I have dual wan setup what I want to do is some source IP need to go on WAN 1 and rest on WAN2, I did the same on routerOS 6 but I think things has changed on RouterOS7. can please show me way how to do this?
You will use mangle rules to enforce packet markings to basically push traffic from a specific source out over a different gateway. The methods are still pretty similar between v6 and v7, biggest changes is how the routing tables are added. Will create an updated video sometime to demonstrate this process.
On the internet method shows by creating separate FIBs, You cannot mark a routing without it. but after I switch to newly created FIB routing table shows blank, So I'm bit confused whether this is like VRF a complete new routing instance? @@TheNetworkBerg
You added a rule in the forward chain for established and related connections. First one has action "fasttrack" and second one is "accept". Why do you need the second one (accept)?
When I try to create my first DHCP Client on WAN interface eth 1, I get an error message stating I cannot run on slave interface 6. I don't 'understand why I am getting this error
Of course you can, you can sign up for something like DynDNS and use that to connect to with your router. Can then just setup a portforward rule on your WAN port and forward it internally so even if the IP changes everyone still knows what the FQDN is :)
There isn't any benefit from using 172 instead of 192 other than preventing clients from 192 network accessing clients on 172 network and vice versa or/and just assigning 2 different networks or VLANs with unique rules. Scenario where you might need that, is if you have let's say smart TV and want to allow netflix and firmware updates on it, but prevent all access to and from internet to it or setup network for kids which deactivates internet access at certain time and/or days or restricts type of content your kids can access on the internet.
Mikrotik is actually surprisingly similar to LANCOM in the way it works and is set up. But when it comes to price/performance, Mikrotik is about 10 times better. :^)
Sorry to hear that Joe, any reason why you are done? There are definitely many alternatives depending on what you want to use the device for. Home use or business?
@@TheNetworkBerg My work gives out hAP2's when you hit your 90 days. It's kind of to get us to play with and get more comfortable with Mikrotiks, no one really does though. I have had mine for over a year now and it's mostly gathered dust. I have not deployed it here in my home network, as I spend 2 hours here, 4 hours there every few weeks trying to get it to work. Every time it ends with me not being able to even access it through Winbox. The past remedies of resetting the device are not working this time and doing the Netinstall has been futile. I have dumped hours upon hours into trying to get this thing to work. They really are awesome though, so much potential, just too complicated. I just got an OPNSense firewall spun up in a VM (in less than 2 hours) and this seems like the way to go.
@@TheNetworkBerg We do use them for some of our clients, but none of the engineers like to mess with them if they don't have to. Probably only 2 of the engineers set them up and deploy them.
@@TheNetworkBerg I have issues while trying to set it up. I have never been able to actually deploy it as I end up not being able to find it via Winbox, this is after some configuration via Winbox. I have gone through the process 7-8 times over the last year, I get frustrated with it and let it sit for a month or two then try again, same result. However, last week when I said I was officially done, apparently I bricked the device (not my words, but my coworkers as he is the most knowledgeable about Mikrotiks in our office). He gave me a new one, but I am not holding my breath that I am going to get a better outcome.
@@joeosint by losing access i imagine it is from configuring the firewall. mikrotik firewall is just GUI-fied iptables, which admittedly is very complicated. linux users already familiar with iptables will feel right at home though. for preventing losing access constantly, there is a safe mode toggle that snapshots your config when activated, and if winbox disconnects any changes in the config are rolled back to when safe mode was activated.
I really couldn't say, you would have to ask the people who mounted them. Maybe free wifi for people who are parked there or someone who can't put cables in or over a road but they are using it as a wireless connection. I would probably just let your council / police department know about it since I don't think it is probably legal to mount wireless equipment to light poles.
Mikrotik should relese two default configurations for say exampel RB5009UPr+S+IN. One should be for using ether1 as WAN and one config for using ether2 as WAN and ether 1,3,4,5,6,7,8 as LAN. So you can choose without making alot of configurations,
@@TheNetworkBerg If for instance we block a porn site through mikrotik, but the wireless users on their mobile if they install any vpn app then they can open those pages.....so kids also might do that. Is there anyway in Mikrotik to drop all the packets that are out of my public ip... so believe if they connect to vpn then internet won't be available...
You don't have to use winbox, but it is a very useful tool for accessing a device on even its mac-address or to connect to a romon network. Personally I use the CLI a lot more than winbox, but that is more of a personal preference.
Hello again, here's just a few useful links for new users and initial configuration:
MikroTik Getting Started:
help.mikrotik.com/docs/display/ROS/Getting+started
First Time Configuration:
help.mikrotik.com/docs/display/ROS/First+Time+Configuration
Management Tools:
help.mikrotik.com/docs/display/ROS/Management+tools
MikroTik Torch video :D
ua-cam.com/video/45E2uwI3xhc/v-deo.html
Excellent video, only one important thing you didn't mention; backup and restore of config. This is by far one of the most useful options mikrotik has. It makes it really easy to switch from a certain mikrotik router to another without having to reconfigure the new one from scratch. Saves a lot of time especially if you use bridges which eliminate having to redo your whole firewall setup when changing ports. It also is good practice to save a working config before doing anything new. If it fails and you have a mess (also very easy to get with mikrotik), just reset the router to factory, upload and activate the saved config and voila.
Thanks awesome
this single video (with crisp & to-the-point explanations and reasoning) is better than 1000s of videos on youtube.
Johnny... I will put it as simple as I can. Thanks for your help. The knowledge I have acquired from you the last few years is incomparable. You made me digging more, understanding more, doing more. Keep it up.
Wow thank you for the extremely nice comment! I really hope I can help more people with their own growth when it comes to MikroTik or networking in general and get them wanting to do more!
@@TheNetworkBerg Its true. I got better to what I do. That leads to getting better at everything. 🙏
Thank you so much! Finally, I have a long sought-after practical intro to networking, routers & switching.
Tack!
Thank you very much for your support and generosity, I appreciate it a lot!
I have been attempting to get my hands on a CCR2004 for quite a while now. They are never in stock. Right at the moment I have a RB301 that I am using. I set it up with your excelent help and training on eyour UA-cam Channel. I would have never been able to get as far as I have withought your help. I sincerely thank you for being a great source of training.
After already a few seconds, thank you for the much friendlier attitude compared to some of the experts on the Mikrotik forum! Thanks for the vid.
It's a pleasure, thanks for leaving the nice comment :)!
Hey @TheNetworkBerg - just wanted to say thanks for the videos. Mikrotik do things in a slightly odd way to what I'm used to, but your videos have helped me get my brain around it much easier than forum posts etc (I'm a network engineer also, but I've been siloed in Cisco/HPE aruba for far too long).
Thanks for you very useful and video with great information and not much fluff. You get right to it and don’t waste time. That is so refreshing.
Fantastic video. Thank you for posting this. By far the best explained video out there! Dankie meneer!
Helpful and insightful. Great job! Thank you for this video.
Greetings from the Philippines's top MikroTik Distributor. Cheers!
Thanks for watching!
This was an awesome video. I got my first Mikrotek router today and was able to configure it first time out following the steps in this video. I had to go find a vid for WifiWave2 config, but this video was awesome. Thanks!
Thanks
Thank you so much for your support and generosity, happy to see more South Africans on the channel
Even if it's a video made out of official MikroTik docs… you've helped me a lot during my very first MikroTik router setup ❤
Wow, thanks!
You get a sub and thumbs up. This worked great for me on a RB4011iGS and I appreciate the time you take to explain things as you do them. I look forward to learning much more from you.
Awesome guide for beginners. Thank you!
Very usefulnd MUCH NEEDED video. There's really not a lot of material for basic users on Mikrotik in the internet - and the ones who are there are like encyclopedia - which is not really useful for education. Can you make a video on configuring Mikrotik for VPN and/or Proxy? (OpenVPN or any other service)
Thank you…the version I had on my csr326 didn’t have anything configured as part of its default setup…your video helped me set up things. I was missing the NAT config and that brought my 10 hour struggle to an end . Cheers!
Glad it helped
Dude this is awesome! I can see a lot of these devices getting into the hands of consumers as a lot of these devices get upgraded and decommissioned from various industries
Hi, I subcribed half way in the video. Keep it up, your explanation is precise and well drafted out. Thanks alot man. God Bless you
I enjoyed that introduction. I don’t own a Milrotik, but I do enjoy learning how different switches and routers work, and have been considering some of their smaller 100G switches for my Homelab just for the hell of it snd to see if I can push my hardware.
I haven’t use Mikrotik but it’s interesting to learn at home. Thank you coming from Cebu, Philippines.
Thanks for your vid, getting my first microtik in a few days and very excited.I do have some school networking experience and work in it but I think it's be a fun challenge.And WAY better than my r7000 ^^
best video for this topic! thanks bru
Excellent video! Thank you!
Glad you liked it!
Tks for sharing your knowledge,
The video was very helpful, thank you.
really useful, thank you!
Excelente video like always, Mikrotik really needs to implement the WPA3 security protocol.
Yeah I know they are definitely working on it, I recall seeing it mentioned in either a newsletter or one of the new HAP reveals on their channel. So maybe it will come out soon for ROS as a whole. Thank you also for the nice comment, it is appreciated!
ROS v7 with wifi wave2 package already have WPA3 implemented and functional
19:41
oh and don't forgett about F4, F5, F6
F4 - close current window (same as ESC)
F5 - refresh current window
F6 - cycle through open windows
even my trainer did not know those ;)
Great guide man. Im trying to find a replacemnt for my ubiquiti er8-pro. Im done with ubiquiti. Probably gonna pick up a microtik now.
Cool video. But i disagree saying the MTCNA is equivalent to a CCNA. CCNA makes you learn networking. MTCNA makes you learn basics of MikroTik.
I definitely agree that a CCNA is a bit of a step of from the MTNCA, it is also in my opinion a harder certificate to achieve due to the high bar set by Cisco as well as not being able to go back on questions when taking the exam. And yeah, MikroTik expects you to already understand how TCP/IP works and how to perform basic subnetting. So not a 100% equivalent, but it is MikroTik's equivalent to an entry level networking certification.
You are mixing between networking and vendors, CISCO does not mean networking, it is only a vendor, you can master networking with Network+ then start with MTCNA or CISCO. There will be no differences at all.
@@johnlegend8421 while it may be true Cisco is just a vendor but they were if not still are the standard when it comes to networking because of how much in depth the curriculum is, the same may not be true for N+ as they skim over the basics of networking and aren't vendor specific meaning after all of the learning with N+ you still Will pickup Cisco or juniper to study.
There is no way a very basic course like mtcna would be compared to CCNA.I have heard this argument so many times and mostly from people that do not have the CCNA
@@johnlegend8421 look at how Cisco has structured their courses .You cover the theory first before you cover the application of the technology.
Very interesting. Would love to see an updated version of this. I have 7.14.2 running with the mostly default config and I see some different options. In particular the default firewall rules are different from what you have and what MikroTik has on their First TIme Configuration guide.
I can't imagine the firewall rules have changed much since publishing this video, will need to give it a review :) I think the most important part about the rules is just to understand how they work. Especially how input, output and forward rules work. Fasttrack is also a very interesting topic. So might revisit this again for noobies or create a new video going over all the current MT configurations and features in version 7.15
Very thorough. Great job.
It worked perfectly!!! Thank you so much
all your vidoes are supber!!!!! thank you sir
32:44 What is (mentioned with) Lease Time?
Would you be able to give a config example to setup a l2tpv3 tunnel between a mikrotik and a device that is not a mikrotik.
Very useful, thanks 👍👍
At 42:00 you setup your country. Well, my country is Nigeria and I never ever find Nigeria on any list of installation software, setups or whatever. Sometimes, I just put UK, hoping that the remaining hidden technicalities of the software would fall in place. Otherwise, this is an excellent video. I forgot to pick your accent. I just thought, Mikrotik = Latvia guy. Thanks
I do not know what regulations Nigeria has regarding Wireless connectivity, I think the country selection just basically allows you to tweak the wireless to standards or regulations in your country. Setting it to the UK or any other country I do not think will pose any risk or issues unless there are some regulations where you may be connecting to spectrums that you aren't allowed to. I am an African too, living in South Africa that is where my accent is from using the "Afrikaans" language. I think many people think about Latvia when it comes to MikroTik. I really hope to see more MikroTiks being used globally because it is a really good piece of hardware and software for the price!
Great video, very nice explained as always, enjoyed watching even when you are talking about basic stuff. Right now im waiting 2 hap ax2 to replace my current aps. (Cant wait for mikrotik to make cap ax haha).
I honestly wish I could also get my hands on a hap ax2 or ax3 :D Feel free to comment on a video once you have them how the performance is! And thank you for the kind comment I really appreciate it.
@@TheNetworkBerg No problem, i have to see how long i have to wait, ax2 is available to order but i didn't see ax3. I will run a few test to see the performance and report back but i think it will work just fine, i never had problems with mikrotik.
@@kresimirpecar4925 they look BEAUTIFUL, I am very jealous :D!!!!
@@TheNetworkBerg I've been waiting for RB260GSP for over 10 months... And hAP ax2 is already sold out... Ax3 eta is unknown right now... AX2 is not yet available in south africa ?
@@kresimirpecar4925 AX2 is available, but not really. Since all big distributors have it sold out already and no time available for when new stock is available. So could be months :((((
Great stuff
Bro that's awesome man thanks
What if you reboot your ISP modem and get a new IP, do you have to manually re-add the new IP to the router?
Do you have link to that Torch tool?
Once again a very very good video. I became aware of MikroTik through you and now use it at home. Thanks a lot for the really great videos. Question: Have you ever used a MikroTik as a DSL router? SFP with VDSL or ADSL to set up an Internet ISP access? Can I sponsor you a coffee?
Thank you for what you doing. God bless you
Thank you for the nice comment, I truly appreciate it!
at 32:00 you made the lease time 8 hours instead of 10min however you've not explained what that means? Thanks
I plan to replace my router wifi 5 with version 6. it seems interesting to use Mikrotik since it can configure the router and wifi according to my requirements.
I love your wall paper
Thank you ^^!
Hi there. I have a rater newbie question. I own a CCR1009-7G-1C-1S+ which I would like to change to CCR2004-16G-2S+ because of the newer architecture. I would like to know how fast and easy can be an upgrade? Is the old configuration from the old CCR going to work after loading or is there something that would need to be done beforehand?
Oh, man, when I was first learning to manually setup a mikrotik some time ago, I thought that everything is good, but forgetting NAT set did puzzle me a lot of time as of why internet wasn't available, hahaha
Wow very informative
Do you have a video to remote access , using the IP-Cloud Miktrotik DNS of routerOS? Thank you from the Philippines.
Thank you for the excellent video. One suggestion. You say this video is intended for beginners. It would be helpful to clarify that you mean beginners who are new to MikroTik products, not for persons new to networking concepts in general. Your video assumes the audience is already familiar with things like IP addresses, ethernet interfaces, DHCP, NAT, firewalls, etc.
Thank you for your suggestion, yeah I can agree that if you are going in completely new to networking and you don't know some fundamentals that it might take some time to get your head around things. I'll see if I can update the description or pinned comments to link some of my other videos going over those basics. Although for some reason people seem to avoid the pure basics like what an IP address is, how the OSI model works or what routing in general is, though I guess it's because there are so many other videos on YT covering those topics already.
Great more of MikroTik Router OS lessons using Vm or Virtualization... And is it possible to set up any type of MikroTik Routersor Switch for LAB lessons or Study purposes?
Thanks for great video lesson
28:23
Question: So how do the ports act if they are not part of the bridge? Would they still act as if they were on the same switch with the option to configure otherwise?
Great vid you hit the nail on the head for me recent network grad. Found the Router OS very intimidating.
Hi Ryan ports that aren't bridged will typically function as a single broadcast domain. Useful for connecting to upstream providers like ISPs that have a "dedicated" port each port will also be able to carry 4095 VLAN tags which get more useful in the ISP/Carrier space. And yes you do have the option to change things later on as the need arises.
what is the usage of MariaDB, when you use real system mail users ?
thanks
Nice video
Hey, thanks a lot for this. Do you have or could you make in-depth QoS traffic shaping tutorials for this device? cheers 👍
Is there a VM or container for Mikrotik I could run on a say PROXMOX?
Yes, you could run the x86 VM on Proxmox if you are interested in learning more about MikroTik and to play around with the OS, Networking, etc. You can download the ISO from here:
mikrotik.com/download
@@TheNetworkBerg wow thank you ❤
I have a question please - If ether 1 is your DHCP Client, and you did not include ether1 in your Lan Bridge, (with the Lan Bridge the DHCP Sever), how is the link from the Wan (internet from ether1), linked to the rest of the LAN ports if it is not included in the bridge?
The WAN interface is supposed to be separate from the LAN, not bridged together. He set up a DHCP 'client' on the WAN interface to get an IP from his ISP, and set up a DHCP 'server' on the LAN interfaces (which are bridged to each other) to give out IP addresses to his LAN clients.
Traffic from the WAN side must now flow through the router according to the firewall rules, to get to the LAN side.
Hello. Are you aware of a site who would provide "template" for enthusiast users ??? Kind of files to uploade with setup mostly used all of the time ... One ro two antenna, WAN, DMZ, IOT, LAN_1 & LAN_2 ... I hate to re-invent the wheel ...
При знайомстві з Mikrotik, саме цього не вистачало. Але я радив би робити коротенькі відео, трохи іншого формату, більш практичного характеру. По перше беремо ситуацію - є офіс на 6-7 осіб з сервером 1с та відеоспостереженням. Пояснюємо, який девайс для цього обираємо - за якими критеріями, а потім показуємо як вирішуємо конкретні завдання - налаштування певної адреси для сервера, відеорегістратора, мережевого принтера, VPN, як прокинути за NAT порти, власний та гостьовий Wi-Fi і таке інше. При цьому виділяти певні моменти - best practices best. За аналогією, потім офіс на 50-100 осіб - DualWan, VLAN і т.д. Ціни не було б цим відосикам.
Could you please maybe provide list od rules i should create on Mikrotik Atl LTE 18 to make it more secure then default ones?
Hi im new here. I have a question. I have my pppoe connection on my home. Can i still configure pppoe client in mikrotik router?Just for testing.and will it have a bad effect on my existing pppoe connection from my isp?
I'm new to the Microtik ecosystem. Can anyone suggest how are these routers compared hEX RB750Gr3 vs E50UG vs hEX S (RB760iGS)?
Can i use a Mikrotik as a firewall between a fibre connection and my home router?
For example, between a virgin router in modem mode and a WiFi router? All i want is a firewall.
Yes, you could run this as a transparent bridge and apply firewalling.
Nice video its very helpful,
johnny can you explain new User Manager 7.6 ?
I'm facing some issues, time validity not working, limitation also not working,
added some attributes then not working please explain and make a full video to User manager, thank you
I'll definitely test it out and make a video on it sometime :D Thanks for the suggestion and appreciate the nice comment
I'm so confused. I'm trying to connect a Proxmox host machine to the switch. I'm trying to enter 192.168.1.196/24 as an address but whenever I do, it ends up shutting down the Mikrotik DHCP IP and kicking me off. Can only access it via MAC address and legacy mode after that point. Functionality returns when removing the Proxmox machine IP. I'm really new to this. Do I need to change the Proxmox machine IP?
How do you open a terminal window?
In the WinBox Programm klick on "New Terminal" in the box on the left
Great video and thank you, can you please make the same video but by using the cli?
Will definitely looking at creating a video aimed specifically at the CLI
Hello sir johnny, I have small network Im using ccr1016 Im providing internet connection in our area. After upgrading to v7 from v6 some clients complaining their connection become slow. My question is can i revert/downgrade back to v6 my router without affecting configuration? Thank you.
Great videos you make Sir. Just perfect. Can I ask what is the smallest Mikrotik routerboard to the best of your knowledge that wont choke if u have 1Gig from ISP. Im moving from Google Mesh and I want Mikrotik router and probably 2 x AP lite from Ubiquiti. Now I have been looking at the Hex S. Would that work you think? Its only for my family. 3 kids with pc's: I have some cameras, a NAS and some other stuff. Can you recommend anything?
cool video on the basics, but can you do a video on how to port forward ? i have a relatively simple setup, just no matter what, port forwarding wont work correctly
the setup, im having two WAN, 1 pppoe and 1 static ip, combined with pcc, both WAN queued, some additional mangle rules to allow access to different subnet on my remote site thats connected via ZT running on a CRS326, and also additional pbr rule to prioritize ZT traffic going via pppoe, i have port forward and hairpinNAT configured on IP>Firewall>NAT, asked reddit and they checked the export hide sensitive, everything seems to be correct, but didnt work correctly anyways
Hi Johnny could you pls tell me something I'm looking to use the Hap Ac 2. I just need to know if there is a limit on how may port forwarding rules I can set up. I would like to run a few game servers from home for my friends and need to forward like 70 ports could you tell me if i could do that with a Hap Ac 2?
It's more about how much resources the devices has available for the session (connections) table, you could configure thousands of NAT rules, but it depends on if they are actually being used by the router. So if you want to port forward 70 ports to a host inside your network and you only use the NAT rule whenever needed it should be fine. But don't expect it being able to handle too many sessions where thousands of people connect at the same time for something like a web service.
@@TheNetworkBerg wow ok thx so much for coming back to me on this really Awesome what you doing on your channel. keep it going will make sure to shear your channel :)
At 25:53 you are talking about default firewall config blocking wireguard. That's not entirely true, wireguard is processed by the rule number 1 in your config - accept established, related, untracked. Only people who have a very old set of rules, for example from RouterOS 5 will have problems. Default firewall rules in ROS 5 are very different from those in ROS 7. The changes are subtle but important for everything to work smoothly.
Sorry if you misunderstood or if I didn't make that part clear this is specifically if you run the default rules for incoming connections. Ie you have remote clients trying to initiate wireguard connectivity to you. Not the other way around.
You can read more about it on the MikroTik Docs
help.mikrotik.com/docs/display/ROS/WireGuard
Well, if you are on the "server" side of things, then yes, you need to allow that incoming connection on the mikrotik router. I just meant that as a client you do not have to. I personally use Wireguard for enabling IPv6 traffic (my ISP does not support IPv6 yet), and I never had to open anything, everything worked out of the box.
Hi, Thanks for the amazing video, I have dual wan setup what I want to do is some source IP need to go on WAN 1 and rest on WAN2, I did the same on routerOS 6 but I think things has changed on RouterOS7. can please show me way how to do this?
You will use mangle rules to enforce packet markings to basically push traffic from a specific source out over a different gateway. The methods are still pretty similar between v6 and v7, biggest changes is how the routing tables are added. Will create an updated video sometime to demonstrate this process.
On the internet method shows by creating separate FIBs, You cannot mark a routing without it. but after I switch to newly created FIB routing table shows blank, So I'm bit confused whether this is like VRF a complete new routing instance?
@@TheNetworkBerg
Legit check, hadeda at 27:12, my ma's se kind!
Hahahaha ja hulle maak dit soms moeilik om videos te record.
You added a rule in the forward chain for established and related connections. First one has action "fasttrack" and second one is "accept". Why do you need the second one (accept)?
I wonder the same thing... Hope he answers. I will have my MikroTik soon, if I find out, I will reply again.
How much do you ask for remote Mikrotik assistance?
When I try to create my first DHCP Client on WAN interface eth 1, I get an error message stating I cannot run on slave interface 6. I don't 'understand why I am getting this error
If the interface is in a bridge, its considered a slave interface. You would need to remove eth1 from the ports (do not use "all" in ports)
Can you do port forward in NAT ??
Of course you can, you can sign up for something like DynDNS and use that to connect to with your router. Can then just setup a portforward rule on your WAN port and forward it internally so even if the IP changes everyone still knows what the FQDN is :)
@@TheNetworkBerg but i am connected in NAT.i have pay an aplication called "Port Forward" and he couldnt do me port forward.cos ISP have NAT.
Dankie! 🙏
Remember the Wifi channels in 2.4GHz range have to be 1,6 and 11 - especially the dence populated areas.
I want to do masters in computer science from uk University and after that want to start my career in networking what salary i will get in freshers
Is there a benefit to using 172 instead of 192?
There is no benefit, it is just another private subnet that is available for personal use.
There isn't any benefit from using 172 instead of 192 other than preventing clients from 192 network accessing clients on 172 network and vice versa or/and just assigning 2 different networks or VLANs with unique rules.
Scenario where you might need that, is if you have let's say smart TV and want to allow netflix and firmware updates on it, but prevent all access to and from internet to it or setup network for kids which deactivates internet access at certain time and/or days or restricts type of content your kids can access on the internet.
Mikrotik is actually surprisingly similar to LANCOM in the way it works and is set up.
But when it comes to price/performance, Mikrotik is about 10 times better. :^)
Hi i have access point WAP-ACM711AC 802.11b/g/n/ac radio (Atheros) can mokrotik detect this third party access point?
I don't see why not, pretty sure I have seen Atheros on MT as well.
why do you put a slash / after an IP address?
that is something called the CIDR notation. it defines the netmask
I am officially done with Mikrotiks, looking for alternatives as I spend so much time trying to get it work properly. Any suggestions?
Sorry to hear that Joe, any reason why you are done? There are definitely many alternatives depending on what you want to use the device for. Home use or business?
@@TheNetworkBerg My work gives out hAP2's when you hit your 90 days. It's kind of to get us to play with and get more comfortable with Mikrotiks, no one really does though. I have had mine for over a year now and it's mostly gathered dust. I have not deployed it here in my home network, as I spend 2 hours here, 4 hours there every few weeks trying to get it to work. Every time it ends with me not being able to even access it through Winbox. The past remedies of resetting the device are not working this time and doing the Netinstall has been futile. I have dumped hours upon hours into trying to get this thing to work. They really are awesome though, so much potential, just too complicated. I just got an OPNSense firewall spun up in a VM (in less than 2 hours) and this seems like the way to go.
@@TheNetworkBerg We do use them for some of our clients, but none of the engineers like to mess with them if they don't have to. Probably only 2 of the engineers set them up and deploy them.
@@TheNetworkBerg I have issues while trying to set it up. I have never been able to actually deploy it as I end up not being able to find it via Winbox, this is after some configuration via Winbox. I have gone through the process 7-8 times over the last year, I get frustrated with it and let it sit for a month or two then try again, same result. However, last week when I said I was officially done, apparently I bricked the device (not my words, but my coworkers as he is the most knowledgeable about Mikrotiks in our office). He gave me a new one, but I am not holding my breath that I am going to get a better outcome.
@@joeosint by losing access i imagine it is from configuring the firewall.
mikrotik firewall is just GUI-fied iptables, which admittedly is very complicated. linux users already familiar with iptables will feel right at home though.
for preventing losing access constantly, there is a safe mode toggle that snapshots your config when activated, and if winbox disconnects any changes in the config are rolled back to when safe mode was activated.
Why would one of these will actually two are mounted to a light pole on my road
I really couldn't say, you would have to ask the people who mounted them. Maybe free wifi for people who are parked there or someone who can't put cables in or over a road but they are using it as a wireless connection. I would probably just let your council / police department know about it since I don't think it is probably legal to mount wireless equipment to light poles.
@@TheNetworkBerg thank you very much for your reply. I thought it was kinda odd. You have a great day.
Mikrotik should relese two default configurations for say exampel RB5009UPr+S+IN. One should be for using ether1 as WAN and one config for using ether2 as WAN and ether 1,3,4,5,6,7,8 as LAN. So you can choose without making alot of configurations,
I have a question.
Fire away
@@TheNetworkBerg
If for instance we block a porn site through mikrotik, but the wireless users on their mobile if they install any vpn app then they can open those pages.....so kids also might do that. Is there anyway in Mikrotik to drop all the packets that are out of my public ip... so believe if they connect to vpn then internet won't be available...
Subbed, want ek is ook van Loadshedding Land
Where to start if you want to learn how to use a Mikrotik, buy a RouterOS is a good choice?
You could learn completely for free by downloading a CHR image and running that as a VM
This is crazy. I use Ubuntu based distro and RouterOS is based on Linux. And you say I should use Winbox to configure my device....
You don't have to use winbox, but it is a very useful tool for accessing a device on even its mac-address or to connect to a romon network. Personally I use the CLI a lot more than winbox, but that is more of a personal preference.
Man ,your mouse pointer should be highlighted .
You should do Udemy courses. I would buy them.
Mikrotik
ua-cam.com/play/PLyshxoZjMvzzS1YGOE_5XBxqqBH--BYzI.html