Welcome to RouterOS guide. You can get a RouterOS device for as low as $22 (USD).

This tutorial is to setup MikroTik router by Static IP address. If you need to setup with “PPPoE username and password” provided by your internet service provider then visit our PPPoE Setup Guide.

To better and clear understanding please click on the respected image in each step from this tutorial.

RouterOS/MikroTik can be configured by Winbox. Download Winbox software from MikroTik website, to access and configure your router.

Keep Winbox software in your Computer to manage the router. Now, we can start setup the MikroTik, follow the step by step instructions to setup the MikroTik router.

Look at the connection chart image below:

 

1) Connect your ISP-1 (primary Internet service provider) cable to port-1

2) Connect your Switch/Computer cable to port-3

3) Power on the MikroTik router

4) Run Winbox, double-click on the MAC address of new MikroTik and click Connect

5) Winbox will be connected with router and notice you to keep or remove default configuration, please click on Remove Configuration

6) Winbox automatically logged-out, close/quit the Winbox and wait a minute(s) to re login

7) Open Winbox, double-click on the new MAC address again, and click Connect

8) Give each Interface to their respective name first

If Wireless interface available in your MikroTik, we will setup WiFi at the last step in this tutorial.

9) Close Interface window and create a new Bridge interface

10) Add port in the bridge

after adding the ether3 port on Bridge network, the Winbox logged out automatically because we were connected on the ether3 port already, reconnect Winbox and add Wireless port (if available) in the bridge

11) Close the bridge window, and open IP addresses window

12) Add private IP series (192.168.xx.x/xx) on the bridge port, must be a IP block (/30, /28, /24, etc.)

As example, I’m using 192.168.88.1/24 IP block for LAN IP series, so the maximum of 254 devices (Computers, printers, mobile phones, etc.) can be connected on the network.

If you have more than 254 devices, you can add 192.168.88.1/21 block which will connect up to 2046 devices.

Here is the two IP block details (for LAN network):

192.168.88.1/24 = 254 devices

IP address: 192.168.88.51
Subnet mask: 255.255.255.0
Gateway: 192.168.88.1
192.168.88.1/21 = 2046 devices

IP address: 192.168.88.51
Subnet mask: 255.255.248.0
Gateway: 192.168.88.1

13) Close IP Addresses window, and open DHCP server window

then click DHCP Setup button

select the bridge interface for DHCP

keep an IP block for addresses, you should use the same block which was assigned in the previous step (/24, or /21 block)

choose a gateway IP and click Next

select addresses to give out to devices for automatic IP, start from IP number 51 so that the first 50 IP addresses can be reserved for static IP for your special devices

set DNS addresses

please use Google DNS for a better browsing experience, and it will help you to advance configure your MikroTik in future

set Google DNS secondary IP

set automatic IP lease time as one day

now, the DHCP server setup is completed in bridge interface

and your computer is already assigned in DHCP server lease time

close the DHCP window

14) It’s time to add your ISP provided IP address

And here is the ISP provided IP details (as an example for this tutorial), please replace your ISP provided IPs with these

IP: 172.16.1.36
Subnet mask: 255.255.255.0
Gateway: 172.16.1.1

Depending on the subnet mask, the network is 172.16.1.36/24

If needed please use Subnet Calculator to find out your maximum addresses network

close IP address window, and add IP routes (Gateway)

add your ISP provided gateway IP

15) Here we should add a comment on the gateway list, this comment will help setup failover in future when you will get dual ISP

write a comment as “Primary Gateway, this comment is required for failover settings, do not modify it.”

16) Close the Routes window, and add DNS entry now

add primary DNS IP (please use Google DNS)

add a secondary DNS

close the DNS window

17) Remove or delete DHCP client, if any

18) Now is the time to enable Internet to the router

go to Firewall to add Masquerade entry to access Internet

add a NAT entry

select “srcnat”

masquerade

Now you got the Internet, connect one other device to your MikroTik and test Internet access

19) Add necessary firewall to keep  safe your Router

add ICMP ping rule

now add a comment for the rule

forward all connection via bridge, add a new firewall rule

add a comment on bridge forward rule

accept input for established and related connection only, add a new firewall rule

add a comment on input accepted rule

add a new rule for accept forward connection

add a new rule to block all other input connection

add a new rule to block all other forward traffic

and add a new rule for block invalid connection

now, the router is safe from hacker

close firewall window and we are at the WiFi setup step (if your MikroTik is wireless capable)

20) Enable Wireless interface

do some settings on wireless interface

go to wifi security profiles

setup your WiFi password and security

close wireless window and set some basic settings

21) Configure SNTP Client to sync system time

set your MikroTik identity/name

finally, change your MikroTik password

22) Restart your router and enjoy !

# Feel free to post a comment if you have any question regarding this post