RouterOS

Fundamental

Ufoakses Training Center ( UTC )

PT UFOAKSES SUKSES LUARBIASA
Jakarta
[email protected]
 What is RouterOS?
• RouterOS is an operating system that
turns a regular PC into a multi-functional
network device
• RouterOS can turn your PC into:
– a dedicated router
– a bandwidth shaper
– a (transparent) packet filter
– any 802.11a,b/g wireless device
– almost anything that concerns networking
needs
 Applications
RouterOS Features
• Router • Static and dinamic
route, Police Route,
• Bandwidth Manager
RIP,OSPF,BGP
• Firewall
• Bridge ,Bonding
• HotSpot Gateway
• VPN Server/Client • HotSpot Gateway
• Wireless AP/Station/WDS • Dial-In Server
• Web proxy • Dial-Out Server
• VRRP • Bandwidth shaper (
• IP routing HTB,PCQ,PFIFO,BFIF
• Tunnel O)
• Radius • Traffic logger
• Monitoring • VOIP
• Diagnostic Tools & • ISP ( RT/RW Net )
Scripting • Intranet (
Kampus,kantor,pabrik,
ip camera dll )
Dari manakah RouterOS itu?
TM

SIA "Mikrotikls"
Pernavas iela 46, Riga, LV-1009 LATVIA
 Mikrotik Hardware
TM
• RouterBOARD adalah perangkat
hardware yang 100% compatibel dengan
TM
MikroTik Router OS
• RouterBOARDTM adalah perangkat
hardware yang di release dari SIA
"Mikrotikls“
• Peralatan hardware dapat dilihat di situs
Http://www.routerboard.com
 Jenis-jenis Routerboard
RB/100 Series

RB/200
RB/153 RB/112 RB/150 RB/133C RB/133 Series
RB/44
RB/500 Series

R52
RB/532 series RB/534 RB/44G
RB/596
(RB/532 + RB/502) (RB/532 + RB/564)
Gambar RB 333 ( new )
Spesifikasi Teknis RB 333
Gambar RB 133
Spesifikasi Teknis RB 133
 How to Install RouterOS ?
• Instalasi RouterOS™ dapat melalui
beberapa cara:
– Instalasi melalui Floppy Disk
– Instalasi melalui CD-ROM
– Instalasi melalui network (Netinstall)

• Source dapat di download di

http://www.mikrotik.com/download.php
Menginstall Sofware dengan
Netinstall
Contoh Netinstall
Netinstall Server Status
Installing the Router
How to Setup RouterOS ?

Your dedicated PC router hardware should have:

• CPU and motherboard - advanced 4th generation (core
frequency 100MHz or more), 5th generation (Intel
Pentium, Cyrix 6X86, AMD K5 or comparable) or newer
uniprocessor Intel IA-32 (i386) compatible (multiple
processors are not supported)
• RAM - minimum 64 MiB, maximum 1 GiB; 64 MiB or
more recommended
• Hard Drive/Flash - standard ATA interface controller
and drive (SCSI and USB controllers and drives are not
supported; RAID controllers that require additional
drivers are not supported) with minimum of 64 Mb space
How to Setup RouterOS ?

RouterOS dapat di Install di

• Harddisk
• Disk on Module
• NAND ( For RB )
 Akses ke RouterOS
• Direct Monitor dan keyboard
• Serial Console ( RB )
• Telnet ( IP Address )
• SSH ( IP Address )
• HTTP / webbox ( IP Address )
• Winbox ( Interface )
• FTP ( IP Address )
• Mac-Telnet ( Interface )
 Winbox Loader
• Winbox is able to
connect via IP or
MAC addresses
Winbox
Contoh Webbox
License
Management
Melihat Lisensi
Menggunakan Terminal
 Command Interface (CLI)
• For the first time log on as ‘admin’, no password.
• Once logged in, press [?] to see the all
commands at the current menu level
– [admin@router] > [?]
• Press [Tab] twice and you will see a short list of
the available commands
– [admin@router] > ip [Tab][Tab]
• You can use these commands in any level
– [admin@router] > ip address [?]
– [admin@router] > ip address print [Enter]
Using CLI : Console Completion
• Commands and arguments don't have to be
completely typed, hit [Tab] to complete the
typing:
– [admin@router] > ip add[Tab]
– [admin@router] > ip address
• If single [Tab] doesn’t work, hit it twice to see
available options
– [admin@router] > i[Tab][Tab]
import interface ip
– [admin@router] > in[Tab]
– [admin@router] > interface
 Using CLI : Navigation
• You can go step-by-step down into menus:
– [admin@router] > ip [Enter]
– [admin@router] ip > address [Enter]
– [admin@router] ip address> print [Enter]
• Use “..” to go one level up in the menu tree
– [admin@router] ip address> .. [Enter]
– [admin@router] ip > .. [Enter]
– [admin@router] >
• Use [/] to go up to the root level
– [admin@router] ip address> /
– [admin@router] >
 Print’ and ‘Monitor’
• ‘print’ is one of the most often used commands
in the CLI. It prints a list of items, and can be
issued with a number of arguments, e.g.,
– print status,
– print interval=2s,
– print without-paging, etc.
• Use ‘print ?’ to see the available arguments
• ‘monitor’ continuously shows status of items
– ‘/in et monitor ether2’
 Add', 'Set' and 'Remove
• Use the 'add' command to create
additional items, you can specify a set of
options for this new item in a particular
menu.
• You can change some options for already
existing items by using the 'set' command
• Or you can delete items by using the
'remove‘ command
 Undo' and 'Redo
• To revert to a previous configuration state,
use the '/undo' command
– [admin@router] > /undo
• To repeat the last undone action, enter the
'/redo‘ command
– [admin@router] > /redo
 Users
• You must make your own user with a
secure password and get rid of the default
user 'admin' (but not in this class )
• You can create and assign a specific
profile for a specific user
• You can allow specific users to log in only
from allowed IP addresses
• You can view active users
Winbox: Users
Winbox: User Groups
 Package Management
• You can enable and disable software
packages to achieve necessary set of
RouterOS functions
• You can install and uninstall software
packages to free up disk space
• To have all latest functionality, upgrade
your router to the latest version of
RouterOS
• You can also downgrade.
Drag'n'Drop
Winbox: Package
 Clock Settings
• To get correct logging or graphing data
you must set correct time on the router
• Boards without a BIOS battery will lose
time settings in case of power failure, to
avoid that you must use the NTP client
• NTP stands for Network Time Protocol – a
network service, that allows to synchronize
time with a remote server
• NTP server example: time.nist.gov
Winbox: Clock Settings
 Import and Export
• You can export all the configuration from a
specific menu to an editable script file:
– [nico@router] > /export file=all
– [nico@router] > /ip address export file=address
– files will be stored on the router
• You can import script files
– [nico@router] > /import file=all
– [nico@router] > /import file=address
– Files must be on the router
• Script file is a plain text file which contains CLI
• commands
 System Backup
• Note:You cannot export passwords
• You can backup all the configuration using
the “backup” button in the winbox “files”
menu
• You can restore backups using the
“restore button in the winbox “files” menu
Backup file konfigurasi : File Æ
tab Backup
Backup Router : Tarik file/copy file kemudian di
paste di winbox dan reboot
MAC-telnet and MAC-winbox
Neighbour Viewer
 Interface Traffic Monitor
• Open up interface menu in WinBox to see
tx/rx rates per interface
• Open up any interface and select the
“Traffic” tab to see the graphs
• Use the “monitor-traffic” command in
terminal to get the traffic data per one or
more interfaces, for example:
– /interface monitor-traffic ether1
– /interface monitor-traffic ether1,ether2,ether3
Interface Traffic Monitor
 Torch Tool
• Torch tool offers more detailed actual
traffic report for the interface
• It's easier to use the torch in WinBox:
– Go to “Tools” > “Torch”
– Select an interface to monitor and click “Start”
– Use “Stop” and “Start” to freeze/continue
– Refine the output by selecting protocol and
port
– Double-click on specific IP address to fill in
the Src. Or. Dst. Address Field (0.0.0.0/0 is for
any address)
Torch Tools
 Reset System Konfigurasi

• Klik New Terminal

• [nico@router] > system reset
• Do you want system reset (y/N )
• Ketik Y enter
• Reboot router