Mikrotik How To

Mikrotik Router RouterBOARD 711-2Hn - The RB711 is a small CPE type RouterBOARD wireless router with an integrated 2GHz 802.11b/g/n wireless card. RB711 includes RouterOS operating system which can be a router, firewall, bandwidth manager, a CPE and more - all at the same time.

This device has one MMCX connector allowing single chain connectivity. The integrated wireless card is capable of up to 27dBm transmit power output and has built-in 16kV ESD protection on RF and LAN ports.

Features mikrotik router RB 711-2n :
Performance: Atheros AR7241 400MHz CPU
Memory: 32 MB DDR SDRAM onboard memory
Ethernet: One 10/100 Mbit/s Fast Ethernet port with Auto-MDI/X
Wireless: Built in 2GHz AR9280 802.11b/g/n card, 1x1 MIMO, 1x MMCX connector
Operating System: RouterOS v4 Included and Level 3 License
Power Options: Passive PoE
Dimensions: 10.5 cm x 10.5 cm (4.13 in x 4.13 in) Weight: 67g
( For the specific feature set of a MikroTik license level, please see the MikroTik web site ).

Mikrotik router RB 1200 Review - The new and affordable rackmount router. It has ten individual gigabit Ethernet ports, five of them can be connected together in one 5-port switch group.

RB1200 has a SODIMM slot with bundled 512MB of RAM, a beeper and a serial port. It has no moving parts and it’s operation is completely silent, optional fan header is available. The RB1200 comes in a 1U aluminium rackmount case.

Specification Mikrotik router RB 1200 :

Product Code	RB1200
Architecture	PPC
CPU	PPC460GT 1000MHz
Current Monitor	No
Main Storage/NAND	64MB
RAM	512MB
SFP Ports	0
LAN Ports	10
Gigabit	Yes
Switch Chip	1
MiniPCI	0
Integrated Wireless	No
MiniPCIe	0
SIM Card Slots	No
USB	No
Memory Cards	No
Power Jack	110/220V
802.3af Support	No
POE Input	No
POE Output	No
Serial Port	DB9/RS232
Voltage Monitor	Yes
Temperature Sensor	Yes
Dimentions	1U case: 44x176x442m
Operating System	RouterOS
Temperature Range	-20C .. +65C
RouterOS License	Level6

All throughput tests done with Xena Networks specialized test system and RouterOS v5, according RFC2544, with Ethernet frame sizes 64, 512, 1518 bytes. Each board is tested with specified number of Ethernet interfaces, to ensure optimal load on hardware.

Previous product line MikroBits has issued a series MikroBits Celoica 8101 Core 2 Quad, and now latest series MikroBits Celoica 8101 Quad Xeon (available ROS Level 4, 5 and 6), MikroBits Celoica rackmount solutions for the needs of large-capacity router, with an Intel ® Xeon ® Processor X3380 (12M Cache, 3.16 GHz, 1333 MHz FSB), 2 GB of RAM, and 10 gigabit ethernet ports. Fastest among other products.

Specification :

• Processor : Intel® Xeon® Processor X3380 (12M Cache, 3.16 GHz, 1333 MHz FSB)
• RAM : 2 x 667MHz DDR2 Slots, 2 x 1024MB Industrial Grade RAM (2GB RAM) installed on the base Model
• Boot loader : Award 16 Mbit PnP Flash BIOS with function of BIOS redirected to COM port
• HDD Interface : 2x SATA, IDE, 1x CF Slots with True IDE IBM MicroDrive Support
• Compact Flash : 1 GB Industrial Grade Compact Flash for RouterOS
• HDD : 250GB SATA 2.5" HDD
• Ethernet : 10 x 10/100/1000Mbps Gigabit Ethernet (Intel® 82574L)
• Lan by-pass : 2 groups, LAN1-LAN2, LAN3-LAN4Expansion Slots : 1 x 32bit/33MHz MiniPCI/1 x PCIe x8 slot
• Serial port : 1 console, RJ type
• LCDs : 1x back lit 2character x16 character LCD Display
• LEDs : Power and HDD LED
• Speaker : Mini PC - Speaker
• Power : IEC C13 Power Cord, input power: 100VAC-250VAC 50Hz- 60Hz (International PSU)
• Fan : 3x Redundant CPU/Power Supply /Chassis Fans,
• Dimensions : 44 mm (1.73") (H) x 427.8 mm (16.93") (W) x 392 mm (15.43") (D)
• Operating Temperature : 0°C ~ +45°C (32°F ~ 113°F)
• Storage Temperature : -20°C ~ +70°C (-4°F ~ +158°F)
• Humidity : 10% ~ 95% RH, non-condensing
• Power Supply : 270W ATX PSU
• Operating System : MikroTik Router OS v5

(rbmikrotik).

Five miniPCI slots and three Gigabit Ethernet ports give you enough connectivity options to use the RB435G as the central part of your network. Now with Gigabit ports, to properly utilize all the speed 802.11n with Nv2 wireless. Five miniPCI slots to be used for four sectors and a backbone, or any other configuration you need. The two USB 2.0 ports can be used for extending storage, adding a 3G wireless modem for backup connectivity,for a mobile installation or all together. The RB435G comes with a 680MHz Atheros CPU and is preinstalled with a Level5 RouterOS license.

CPU: Atheros AR7161 680MHz (800MHz option supported)
Memory: 256MB DDR SDRAM onboard memory
Boot loader: RouterBOOT
Data storage: 128MB onboard NAND memory chip and microSD slot for expansion
Ethernet: Three 10/100/1000 Gigabit Ethernet ports with Auto-MDI/X
miniPCI: Five miniPCI Type IIIA/IIIB slots
Expansion: Two USB 2.0 ports with powering (5V 1A supply)
Extras: Reset switch, beeper, temperature, voltage and current monitors
Serial port: One DB9 RS232C asynchronous serial port
LEDs: Power, NAND activity, 5 user LEDs
Power options: PoE: 8-28V DC on Ether1 (Non 802.3af). Jack: 8-30V DC
Dimensions: 105 mm x 154 mm, Weight: 153g
Power consumption: ~4.5W without extension cards
Output to cards: 19W without any cooling, up to 40W with active cooling
Operating System: MikroTik RouterOS, L5 license


(http://www.balticnetworks.com/mikrotik-routerboard-435g-rb-435g.html).

The purpose of this script is to provide a solution for loss of service from ISP providers. The idea is for a topology where there are two different ISP providers, one of them provides a static IP and the other provides a dynamic IP address.

It is important to clarify that DNS should be usable from either ISP connection. This is because each ISP has its own DNS service. If a connection is lost it is likely that ISP 2 will not be able to connect to the DNS at ISP 1 and DNS requests will not be allowed to be resolved. The solution to this is to use a public DNS service such as OpenDNS.

/tool netwatch
add comment=Test1 disabled=no down-script="/tool netwatch set [find comment=\"Test2\"] disabl\
ed=no\r\
\n/tool netwatch set [find comment=\"Test1\"] disabled=yes" host=74.125.47.104 interval=\
30s timeout=2s up-script=""
add comment=Test2 disabled=yes down-script=":global GA\r\
\n:global GA [/ip dhcp-client get \"ether2 Fibertel\" gateway ]\r\
\n/ip route set [find comment=\"Fibertel\"] gateway=\$GA\r\
\n/ip route set [find comment=\"Telefonica\"] disabled=yes\r\
\n/ip route set [find comment=\"Fibertel\"] disabled=no\r\
\n/tool e-mail send to=\"EMAIL ADDRESS\" body=\"Connection with Telefonica Lost\
, Switched to Fibertel\" subject=\"Lost connection with Telefonica\"\r\
\n/tool netwatch set [find comment=\"Test3\"] disabled=no\r\
\n/tool netwatch set [find comment=\"Test2\"] disabled=yes" host=209.191.93.52 interval=\
30s timeout=2s up-script=":delay 10ms\r\
\n:log warning \"Started Test2\"\r\
\n/tool netwatch set [find comment=\"Test1\"] disabled=no\r\
\n/tool netwatch set [find comment=\"Test2\"] disabled=yes"
add comment=Test3 disabled=yes down-script="/tool netwatch set [find comment=\"Test4\"] disab\
led=no\r\
\n/tool netwatch set [find comment=\"Test3\"] disabled=yes" host=64.233.169.104 \
interval=30s timeout=2s up-script=""
add comment=Test4 disabled=yes down-script="/ip route set [find comment=\"Fibertel\"] disable\
d=yes\r\
\n/ip route set [find comment=\"Telefonica\"] disabled=no\r\
\n/tool e-mail send to=\"EMAIL ADDRESS\" body=\"Telefonica Connection Lost and Fi\
bertel took over, Trying to restore Telefonica\" subject=\"Loss of service type 2\"\r\
\n/tool netwatch set [find comment=\"Test1\"] disabled=no\r\
\n/tool netwatch set [find comment=\"Test4\"] disabled=yes" host=209.191.93.55 interval=\
30s timeout=2s up-script=":delay 10ms\r\
\n:log warning \"Started Test4\"\r\
\n/tool netwatch set [find comment=\"Test3\"] disabled=no\r\
\n/tool netwatch set [find comment=\"Test4\"] disabled=yes"

How it works:
The solution is composed of 4 netwatch tests.

The first (test 1) checks www.google.com, if for some reason this address stops responding to pings then it enables test2 and test1 disables itself.

Test2 pings www.yahoo.com, if the result is UP it enables test1 and test2 disables itself. If the result is "DOWN", test2 looks for the address of the gateway of the ISP on a dynamic IP and configures that address as a static route, followed by disabling the static route of the ISP on a static IP and enabling the dynamic IP route previously mentioned. It then sends an alert e-mail and enables test3 (for the new dynamic ISP) and test2 disables itself.

Test 3 and test4 do the same thing as test1 and test2 respectively. Only in this case, test4 would release the dynamic ISP and re-enable the static ISP.

(http://wiki.mikrotik.com/wiki/Failover_via_Netwatch_III_%28English%29).

Mikrotik Layer 7 Firewall Setup - Layer 7 is the application layer of the OSi system model and allows the Mikrotik router to analyze each and every packet that enters your network, and decide what to do with it.


The first step is to get a script file with the list of the most common Layer 7 protocols. This can be obtained from the Mikrotik Wiki via the following link :

http://www.mikrotik.com/download/l7-protos.rsc

We can now copy this script file into the Mikrotik 'Files' list.

Once you have the script file copied into the 'Files' window we can now proceed to import it via the terminal.
To make sure the script file imported properly, head to the 'IP' -> 'Firewall' menu and go to the 'Layer 7 Protocol' tab. You should now have a list ofthe most common types of traffic found within a network.

We can now create a firewall rule to block any type of Layer 7 traffic we choose. Go to the 'Filter' tab and add a new Firewall rule. Leave the chain set to 'forward'.

In the ' Advanced' tab you may now choose the Layer 7 traffic type you would like to block/allow.

Once the Layer 7 traffic type has been selected, proceed to the 'Action' tab and define the action of your choice. Drop is the most common action to stop a certain type off traffic flowing through your network.

The RB493 has nine ethernet ports and three miniPCI slots, it also has a switch chip, so the ethernet ports 2-9 can be grouped together to make it act as a switch.

RB493 includes RouterOS - the operating system, which will turn this powerful system into a highly sophisticated router, firewall or bandwidth manager.

With nine Ethernet ports, and three miniPCI slots, this is our most versatile RouterBOARD model.

The RB493AH model includes the higher speed Atheros 680MHz CPU, more memory, and a Level5 license for more simultaneous tunnel interfaces and hotspot users.

Product specifications

Details
Product code	RB493AH
CPU speed	680MHz
RAM	128MB
Architecture	MIPS-BE
LAN ports	9
MiniPCI	3
Integrated Wireless	0
USB	0
Memory Cards	0
Power Jack	10-28V
802.3af support	No
PoE	10-28V
Voltage Monitor	No
Temperature range	-30C to +60C
RouterOS License	Level5

 (http://routerboard.com/RB493AH).