Mikrotik Basic Configuration Tips and Tricks

Introduction

• Welcome to Mikrotik Indonesia YouTube channel.
• Presented by Mr. Valens Riyadi and host.
• Focus on basic configuration before firewall, queues, etc.
• Reminder to subscribe for updates.

Importance of Basic Configuration

• Basic configuration is essential before more complex settings.
• Common issue: inability to connect after setting up Mikrotik at home.
• Many users are confused by Winbox menus.
• Previous videos on basic configuration were popular but may be outdated.

Steps for Basic Configuration

1. Determine IP Address Allocation

• Determine IP addresses for local network (private IP range).
• Common private IP ranges:
  • /8, /16, /24
• For small networks, /24 is usually sufficient (up to 254 IPs).

2. Network Design

• Create a network topology, identifying internet sources (fiber, ethernet, wireless).
• Consider using GSM/LTE connections if applicable.

3. Required Applications

• Download Winbox from mikrotik.com for configuration.
• Alternatively, use Webfig in a web browser.

4. Initial Connection

• Connect to Mikrotik Router: Use ports 2-10, not port 1.
• Port 1 is usually reserved for ISP connections.

5. Accessing the Router

• Connect to the router using Winbox or web browser at IP 192.168.88.1.
• Login Credentials: User: admin, Password: (leave blank).

6. Removing Default Configuration

• Delete default configuration to start fresh.
• Caution: Use this step if you are familiar with settings and want to avoid conflicts.

7. Change Default Password

• Change password for security, especially before connecting to the internet.
• Create a new user instead of using the default admin (to prevent brute force attacks).

8. Device Identification

• Change router name for easy identification.
• Go to System > Identity to rename (e.g., "Router-Rumah").

9. Interface Configuration

• Set up interface for internet connection (ISP).
• Consider using a bridge to simplify interface management.

10. DHCP Client Configuration

• For automatic IP from ISP: Use DHCP client on the appropriate bridge (e.g., bridge-WAN).
• Verify connectivity by pinging the gateway and checking IP configurations.

11. Static IP Configuration (if needed)

• If DHCP isn't available, assign a static IP manually.
• Add default route and set gateway as provided by the ISP.
• Configure DNS settings to resolve domain names.

12. DNS Configuration

• Set DNS from ISP or use public DNS servers (e.g., 8.8.8.8).
• Activate Allow Remote Requests for local DNS service.

13. LAN Configuration

• Configure LAN IP address for the internal network.
• Set up DHCP server for local clients.
• Use bridge for LAN to manage multiple ports easily.

14. NAT Configuration

• Set up NAT (Network Address Translation) for outbound traffic.
• Use masquerade for source NAT on the WAN interface.

15. Quality of Service (QoS)

• Use simple queues to limit bandwidth for specific clients.
• Further resources available in the Mikrotik QoS playlist.

Security Considerations

• Disable unnecessary services in the IP-Service menu.
• Change default ports for services (like SSH) for security.
• Limit access to certain IP addresses if needed.

Wireless Configuration

• Set up wireless access points for both 2.4GHz and 5GHz.
• Ensure security profiles are created with passwords.

Additional Configuration (PPPoE)

• For ISPs using PPPoE, configure the PPPoE client on the bridge interface.
• Verify NAT settings for PPPoE.

Conclusion

• Basic configuration is complete for internet access.
• Future configurations may include firewall, QoS, and additional services.
• Encourage viewers to ask questions in comments and subscribe for more tips.