Mikrotik How To

VLAN example on MikroTik Routers - Let us assume that we have two or more MikroTik RouterOS routers connected with hub. Interfaces to the physical network, where the VLAN is to be created is ether1 for all them (it is needed only for example simplification, it is NOT a must).

To connect computers through VLAN they must be connected physically and unique IP addresses should be assigned them so that they could ping each other. Then on each of them the VLAN interface should be created:



[admin@MikroTik] interface vlan> add name=test vlan-id=32 interface=ether1
[admin@MikroTik] interface vlan> print
Flags: X - disabled, R - running
#   NAME   MTU     ARP       VLAN-ID  INTERFACE
0 R test   1500    enabled   32       ether1
[admin@MikroTik] interface vlan>

If the interface were succesfully created, both of them will be running. If computer are connected incorectly (through network device thet does not retransmitt or forward VLAN packets), either both or one of the interface will not be running.

When the interface is running, IP addresses can be assigned to the VLAN interface.

On the Router 1:

[admin@MikroTik] ip address> add address=10.10.10.1/24 interface=test
[admin@MikroTik] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
#    ADDRESS          NETWORK    BROADCAST     INTERFACE
0    10.0.0.204/24    10.0.0.0   10.0.0.255    ether1
1    10.20.0.1/24     10.20.0.0  10.20.0.255   pc1
2    10.10.10.1/24    10.10.10.0 10.10.10.255  test
[admin@MikroTik] ip address>

On Router 2:


[admin@MikroTik] ip address> add address=10.10.10.2/24 interface=test
[admin@MikroTik] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
#    ADDRESS          NETWORK    BROADCAST     INTERFACE
0    10.0.0.201/24    10.0.0.0   10.0.0.255    ether1
1    10.10.10.2/24    10.10.10.0 10.10.10.255  test
[admin@MikroTik] ip address>

[admin@MikroTik] ip address> /ping 10.10.10.1
10.10.10.1 64 byte pong: ttl=255 time=3 ms
10.10.10.1 64 byte pong: ttl=255 time=4 ms
10.10.10.1 64 byte pong: ttl=255 time=10 ms
10.10.10.1 64 byte pong: ttl=255 time=5 ms
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 3/10.5/10 ms
[admin@MikroTik] ip address> /ping 10.10.10.2
10.10.10.2 64 byte pong: ttl=255 time=10 ms
10.10.10.2 64 byte pong: ttl=255 time=11 ms
10.10.10.2 64 byte pong: ttl=255 time=10 ms
10.10.10.2 64 byte pong: ttl=255 time=13 ms
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 10/11/13 ms
[admin@MikroTik] ip address>

Some of X86 server based mikrotiks were showing “R” at ethernet interfaces although the cable is unplug. I did some quick searching and found that on X86 installs by default there is an option “disable-running-check” enabled. What this does is make the interface appear to always be running. As a byproduct if the interface always appears to be running, any IP addressing and routing is also still valid. This means that your router will still thinks this is a valid path.

With a quick command, you can revert this behavior to normal opperation:
In the below command I specified all three of my interfaces at once.

/interface ethernet set 0,1,2 disable-running-check=no

(MU).

Tunning Wireless Interface To Increase Throughput - To increase the troughput of the mikrotik wireless link, i have did this way.

Enter interface wireless to tune.

Data Rates Tab:

- Select configure. start with smalest values in Supported Rates A/G, in this case 6Mbps.

To Prevent Self Interference With 3 Mini PCI in One Board, there is Adaptive Noise Immunity (ANI). There are 2 choises of ANI, ap-and-client-mode dan client-mode.

Use ap-and-client-mode if the RB mode is ap-bridge
Use client-mode if the RB mode is (mikrotik only)

To Activate ANI tool is:

DBii-F20 wireless minipci card work at 2,4GHz, output power 500 mWatt have Rx sensivity until -97 dbm. Include pigtail MMCX to N-Female.

Transmitter Characteristics (Tx)

Three simple rules for for Create DOTA Server
/ip
firewall
nat
add
chain=srcnat
action=masquerade
out-interface=Public

/ip
firewall
nat
add
chain=dstnat
dst-address=202.xxx.xxx.xxx(ip public)
protocol=tcp
dst-port=xxx(DOTA port)
action=dst-nat
to-addresses=192.168.xxx.xxx(private ip)
to-port=xxx(DOTA port)