Welcome to RouterOS guide. You can get a RouterOS/MikroTik device for as low as $22 (USD).
This tutorial is to setup MikroTik router by PPPoE Username and Password. If you need to setup with “Static IP address” provided by your internet service provider then visit our Static IP Setup Guide.
To better and clear understanding please click on the respected image in each step from this tutorial.
RouterOS/MikroTik can be configured by Winbox. Download Winbox software from MikroTik website, to access and configure your router.
Keep Winbox software in your Computer to manage the router. Now, we can start setup the MikroTik, follow the step by step instructions to setup the MikroTik router.
Look at the connection chart image below:
1) Connect your ISP-1 (primary Internet service provider) cable to port-1
2) Connect your Switch/Computer cable to port-3
3) Power on the MikroTik router
4) Run Winbox, double-click on the MAC address of new MikroTik and click Connect
5) Winbox will be connected with router and notice you to keep or remove default configuration, please click on Remove Configuration
6) Winbox will automatically logged-out, close/quit the Winbox and wait a minute(s) to re-login
7) Open Winbox, double-click on the new MAC address again, and click Connect
8) Give each Interface to their respective name first
If Wireless interface available in your MikroTik, we will setup WiFi at the last step in this tutorial.
9) Close Interface window and create a new Bridge interface
10) Add port in the bridge
after adding the ether3 port on Bridge network, the Winbox logged out automatically because we were connected on the ether3 port already, reconnect Winbox and add Wireless port (if available) in the bridge
11) Close the bridge window, and open IP addresses window
12) Add private IP series (192.168.xx.x/xx) on the bridge port, must be a IP block (/30, /28, /24, etc.)
As example, I’m using 192.168.88.1/24 IP block for LAN IP series, so the maximum of 254 devices (Computers, printers, mobile phones, etc.) can be connected on the network.
If you have more than 254 devices, you can add 192.168.88.1/21 block which will connect up to 2046 devices.
Here is the two IP block example details (for LAN network):
192.168.88.1/24 = 254 devices IP address: 192.168.88.51 Subnet mask: 255.255.255.0 Gateway: 192.168.88.1
192.168.88.1/21 = 2046 devices IP address: 192.168.88.51 Subnet mask: 255.255.248.0 Gateway: 192.168.88.1
13) Close IP Addresses window, and open DHCP server window
then click DHCP Setup button
select the bridge interface for DHCP
keep an IP block for addresses, you should use the same block which was assigned in the previous step (/24, or /21 block)
choose a gateway IP and click Next
select addresses to give out to devices for automatic IP, start from IP number 51 so that the first 50 IP addresses can be reserved for static IP for your special devices
set DNS addresses
please use Google DNS for a better browsing experience, and it will help you to advance configure your MikroTik in future
set Google DNS secondary IP
set automatic IP lease time as one day
now, the DHCP server setup is completed in bridge interface
and your computer is already assigned in DHCP server lease time
close the DHCP window
14) It’s time to add your ISP provided username/password to PPPoE interface, open PPP interface
Click PPPoE Client to create a new PPPoE connection interface
Select ether1 from General TAB and then click Dial Out
Write your ISP provided username and password
Enable all tick-mark
Click Apply and OK
Close the PPP window
15) Remove or delete DHCP client, if any
16) Now is the time to enable Internet to the router
go to Firewall to add Masquerade entry to access Internet
add a NAT entry
select “srcnat”
Select Out Interface to the PPPoE profile
masquerade
Now you got the Internet, connect one other device to your MikroTik router and test Internet access
17) Add necessary firewall to keep safe your Router
add ICMP ping rule
now add a comment for the rule
forward all connection via bridge, add a new firewall rule
add a comment on bridge forward rule
accept input for established and related connection only, add a new firewall rule
add a comment on input accepted rule
add a new rule for accept forward connection
add a new rule to block all other input connection
add a new rule to block all other forward traffic
and add a new rule for block invalid connection
now, the router is safe from hacker
close firewall window and we are at the WiFi setup step (if your MikroTik is wireless capable)
18) Enable Wireless interface
do some settings on wireless interface
go to wifi security profiles
setup your WiFi password and security
close wireless window and set some basic settings
19) Configure SNTP Client to sync system time
set your MikroTik identity/name
finally, change your MikroTik password
20) Restart your router and enjoy !
# Feel free to post a comment if you have any question regarding this post.
Leave A Comment