Mikrotik Basic Setup

Disini bisa paham Mikrotik.

Oct 28, 2023 - 16:56
Oct 28, 2023 - 19:33
 0  3.2k

SETUP MIKROTIK BASIC SETTING

I think you already understand, so there are not many pictures included for learning.

If you still don't understand, please visit our channel : https://www.youtube.com/@disiniaja-id

 Or

 open the following link : https://disiniaja.id/mikrotik-7-11-2-stable-x86-on-vmware-esxi

Let’s begin. Only here can we understand what we don't know

For secure reason plz Change default user admin by winbox.

1.       Copy default user admin

2.       Set username and password for newuser with privilege group full

3.       Then exit winbox

4.       Login winbox by newuser

5.       Delete default user admin

 

/interface list

add name=LAN

add name=WAN

 

/ip pool

add name=pool-disiniaja ranges=192.168.0.100-192.168.0.254

 

/interface ethernet

set [ find default-name=ether3 ] name=lan

set [ find default-name=ether4 ] name=wan

 

/interface list member

add interface=wan list=WAN

add interface= lan list=LAN

 

/ip address

add address=192.168.0.2/24 comment=Tolan interface=lan network=192.168.0.0

 

/ip dhcp-server

add add-arp=yes address-pool=pool-disiniaja authoritative=after-2sec-delay \

    disabled=no interface=lan lease-time=6h name=dhcptoLAN

 

/ip dhcp-server network

add address=192.168.0.0/24 dns-server=192.168.0.2 domain=hotspot-disiniaja.org gateway=\

    192.168.0.2 netmask=24 ntp-server=\

    203.89.31.13,202.65.114.202,120.25.115.19

/ip dns

set allow-remote-requests=yes cache-size=8192KiB servers=8.8.8.8,8.8.4.4

 

/ip firewall nat

add action=masquerade chain=srcnat comment="NAT WAN" out-interface=\

    wan

 

WAN with dynamic IP 

/ip dhcp-client

add dhcp-options=hostname,clientid disabled=no interface=wan

 

reboot, and plz test for WAN with dynamic ip

 

WAN with static IP 

/ip address

add address=192.168.20.128/22 comment=Towan interface=wan network=192.168.20.0

 

/ip route

add comment=route_WAN distance=1 gateway=192.168.20.2

 

reboot, and plz test for WAN with static IP

Allows Network Access Only from DHCP Client on Mikrotik

This setting is intended for users who often change their computer's IP from obtainable (DHCP Client) to static. This change can cause the policies that have been set to become messy, and often even cause IP Conflicts to occur, which will make it difficult to detect where the IP Conflict comes from.

However, for network admins who use Mikrotik as a router as well as a DHCP server, now you don't need to worry, because this configuration can force clients to reset their computer's IP to Obtain IP (DHCP Client). Because if the user forces to use Static IP, the result will be that the computer will not be able to connect to the internet or to other networks that pass through the Mikrotik router.

Configure the DHCP Server to add ARP when a DHCP-lease occurs. Click IP–>DHCP Server, edit DHCP, check Add ARP for leases


Click Interface, then double click the LAN interface used as the DHCP interface

Select in the ARP section: Reply-Only


 

Test For Static Local IP

 

Open your browser https://disiniaja.id

Vioola….user can’t connect internet.

You can watch this lesson on YouTube to understand better. Don't forget to help our channel to develope further so that, there is nothing that can't be done except https://disiniaja.id.
Greetings of good health and success always.

What's Your Reaction?

like

dislike

love

funny

angry

sad

wow