This document provides instructions for configuring a MikroTik router using the command line interface. It demonstrates how to configure basic router settings like the system identity and interface names. It also shows how to set up network services like DHCP, hotspot, and proxy to provide internet access and filtering. The commands configure routing, firewall rules, hotspot profiles and users to manage network access.
This document provides instructions for configuring a MikroTik router using the command line interface. It demonstrates how to configure basic router settings like the system identity and interface names. It also shows how to set up network services like DHCP, hotspot, and proxy to provide internet access and filtering. The commands configure routing, firewall rules, hotspot profiles and users to manage network access.
This document provides instructions for configuring a MikroTik router using the command line interface. It demonstrates how to configure basic router settings like the system identity and interface names. It also shows how to set up network services like DHCP, hotspot, and proxy to provide internet access and filtering. The commands configure routing, firewall rules, hotspot profiles and users to manage network access.
This document provides instructions for configuring a MikroTik router using the command line interface. It demonstrates how to configure basic router settings like the system identity and interface names. It also shows how to set up network services like DHCP, hotspot, and proxy to provide internet access and filtering. The commands configure routing, firewall rules, hotspot profiles and users to manage network access.
Download as DOC, PDF, TXT or read online from Scribd
Download as doc, pdf, or txt
You are on page 1/ 7
COMMAND LINE MIKROTIK FOR UKK
MMMM MMMM KKK TTTTTTTTTTT KKK MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK MikroTik RouterOS 6.32.2 (c) 1999-2015
http://www.mikrotik.com/
[?] Gives the list of available commands command [?] Gives help on the command and list of arguments [Tab]
Completes the command/word. If the input is ambiguous,
a second [Tab] gives possible options
/ Move up to base level .. Move up one level /command Use command at the base level [admin@MikroTik] > password old-password: new-password: *** confirm-new-password: *** [admin@MikroTik] > system identity set name=RouterTKJ [admin@RouterTKJ] > [admin@RouterTKJ] > interface print Flags: D - dynamic, X - disabled, R - running, S - slave # NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU 0 R ether1 ether 1500 1 R ether2 ether 1500 [admin@RouterTKJ] > interface set ether2 name=internet [admin@RouterTKJ] > interface set ether1 name=local [admin@RouterTKJ] > interface print Flags: D - dynamic, X - disabled, R - running, S - slave # NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU 0 R internet ether 1500 1 R local ether 1500 [admin@RouterTKJ] > ip address add address=192.168.10.1/25 interface=local [admin@RouterTKJ] > ip dhcp-client add interface=internet disabled=no [admin@RouterTKJ] > ip address print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK INTERFACE 0 D 192.168.1.2/24 192.168.1.0 internet 1 192.168.10.1/25 192.168.10.0 local [admin@RouterTKJ] > ip dhcp-client print Flags: X - disabled, I - invalid # INTERFACE USE-PEER-DNS ADD-DEFAULT-ROUTE STATUS ADDRESS 0 internet yes yes bound 192.168.1.2/24 [admin@RouterTKJ] > ip dhcp-server setup Select interface to run DHCP server on
COMMAND LINE MIKROTIK FOR UKK
dhcp server interface: local
Select network for DHCP addresses dhcp address space: 192.168.10.0/25 Select gateway for given network gateway for dhcp network: 192.168.10.1 Select pool of ip addresses given out by DHCP server addresses to give out: 192.168.10.2-192.168.10.126 Select DNS servers dns servers: 192.168.1.1 Select lease time lease time: 10m [admin@RouterTKJ] > ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 192.168.1.1 1 1 ADC 192.168.1.0/24 192.168.1.2 internet 0 2 ADC 192.168.10.0/25 192.168.10.1 local 0 [admin@RouterTKJ] > ip firewall nat add chain=srcnat out-interface=internet src-add ress=192.168.10.0/25 action=masquerade [admin@RouterTKJ] > ip firewall nat print Flags: X - disabled, I - invalid, D - dynamic 0 chain=srcnat action=masquerade src-address=192.168.10.0/25 out-interface=internet log=no log-prefix="" [admin@RouterTKJ] > ping google.com SEQ HOST SIZE TTL TIME STATUS 0 74.125.200.101 56 45 62ms 1 74.125.200.101 56 45 59ms sent=2 received=2 packet-loss=0% min-rtt=59ms avg-rtt=60ms max-rtt=62ms [admin@RouterTKJ] > ip hotspot setup Select interface to run HotSpot on hotspot interface: local Set HotSpot address for interface local address of network: 192.168.10.1/25 masquerade network: yes Set pool for HotSpot addresses address pool of network: 192.168.10.2-192.168.10.126 Select hotspot SSL certificate select certificate: none
COMMAND LINE MIKROTIK FOR UKK
Select SMTP server ip address of smtp server: 0.0.0.0 Setup DNS configuration dns servers: 192.168.10.1 DNS name of local hotspot server dns name: routertkj.net Create local hotspot user name of local hotspot user: admin password for the user: admin [admin@RouterTKJ] > ip hotspot print Flags: X - disabled, I - invalid, S - HTTPS # NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT 0 hotspot1 local dhcp_pool1 hsprof1 5m [admin@RouterTKJ] > ip hotspot profile print Flags: * - default 0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no 1 name="hsprof1" hotspot-address=192.168.10.1 dns-name="routertkj.net" html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no [admin@RouterTKJ] > ip hotspot profile set 0,1 login-by=http-chap [admin@RouterTKJ] > ip hotspot profile set 1 rate-limit=256k/512k [admin@RouterTKJ] > ip hotspot profile print Flags: * - default 0 * name="default" hotspot-address=0.0.0.0 dns-name="" html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 login-by=http-chap split-user-domain=no use-radius=no 1 name="hsprof1" hotspot-address=192.168.10.1 dns-name="routertkj.net" html-directory=hotspot rate-limit="256k/512k" http-proxy=0.0.0.0:0 smtp-server=0.0.0.0 login-by=http-chap split-user-domain=no use-radius=no [admin@RouterTKJ] > ip hotspot user add name=panda password=panda [admin@RouterTKJ] > ip hotspot user print Flags: X - disabled, D - dynamic # SERVER NAME ADDRESS PROFILE UPTIME 0 admin default 0s 1 panda default 0s [admin@RouterTKJ] > ip hotspot user profile add name=siswa shared-users=16 transpar ent-proxy=yes [admin@RouterTKJ] > ip hotspot user profile print Flags: * - default 0 * name="default" idle-timeout=none keepalive-timeout=2m status-autorefresh=1m
COMMAND LINE MIKROTIK FOR UKK
shared-users=1 add-mac-cookie=yes mac-cookie-timeout=3d address-list="" transparent-proxy=no 1 name="siswa" idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=16 add-mac-cookie=yes mac-cookie-timeout=3d address-list="" transparent-proxy=yes open-status-page=always advertise=no [admin@RouterTKJ] > ip hotspot user profile set 0 transparent-proxy=yes [admin@RouterTKJ] > ip hotspot user profile set 1 rate-limit=256k/512k [admin@RouterTKJ] > ip hotspot user profile print Flags: * - default 0 * name="default" idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=1 add-mac-cookie=yes mac-cookie-timeout=3d address-list="" transparent-proxy=yes open-status-page=always advertise=no 1 name="siswa" idle-timeout=none keepalive-timeout=2m status-autorefresh=1m shared-users=16 add-mac-cookie=yes mac-cookie-timeout=3d rate-limit="256k/512k" address-list="" transparent-proxy=yes open-status-page=always advertise=no [admin@RouterTKJ] > ip hotspot user add name=siswa1 password=1 profile=siswa [admin@RouterTKJ] > ip hotspot user add name=siswa2 password=2 profile=siswa [admin@RouterTKJ] > ip hotspot user add name=siswa3 password=3 profile=siswa [admin@RouterTKJ] > ip hotspot user print Flags: X - disabled, D - dynamic # SERVER NAME ADDRESS PROFILE UPTIME 0 admin default 0s 1 panda default 0s 2 siswa1 siswa 0s 3 siswa2 siswa 0s 4 siswa3 siswa 0s [admin@RouterTKJ] > ip proxy print enabled: no src-address: :: port: 8080 anonymous: no parent-proxy: :: parent-proxy-port: 0 cache-administrator: webmaster max-cache-size: unlimited max-cache-object-size: 2048KiB cache-on-disk: no max-client-connections: 600 max-server-connections: 600 max-fresh-time: 3d serialize-connections: no always-from-cache: no cache-hit-dscp: 4 cache-path: web-proxy [admin@RouterTKJ] > ip proxy set enabled=yes src-address=0.0.0.0 parent-proxy=0.0.0 .0 cache-administrator=webmaster@sekolah.sch.id cache-on-disk=yes [admin@RouterTKJ] > ip proxy print
COMMAND LINE MIKROTIK FOR UKK
enabled: yes src-address: 0.0.0.0 port: 8080 anonymous: no parent-proxy: 0.0.0.0 parent-proxy-port: 0 cache-administrator: webmaster@sekolah.sch.id max-cache-size: unlimited max-cache-object-size: 2048KiB cache-on-disk: yes max-client-connections: 600 max-server-connections: 600 max-fresh-time: 3d serialize-connections: no always-from-cache: no cache-hit-dscp: 4 cache-path: web-proxy [admin@RouterTKJ] > ip proxy access add src-address=192.168.10.0/25 dst-host=*.face book* action=deny [admin@RouterTKJ] > ip proxy access add src-address=192.168.10.0/25 dst-host=*.yout ube* action=deny [admin@RouterTKJ] > ip proxy access add src-address=192.168.10.0/25 dst-host=*.telk om* action=deny [admin@RouterTKJ] > ip proxy access print Flags: X - disabled # DST-PORT DST-HOST PATH METHOD ACTION HITS 0 *.facebook* deny 0 1 *.youtube* deny 0 2 *.telkom* deny 0 [admin@RouterTKJ] > ip firewall nat add chain=dstnat protocol=tcp src-address=192.1 68.10.0/25 dst-port=80,3128,8000 action=redirect to-ports=8080 [admin@RouterTKJ] > ip firewall nat print Flags: X - disabled, I - invalid, D - dynamic 0 D chain=dstnat action=jump jump-target=hotspot hotspot=from-client log=no log-prefix="" 1 D chain=hotspot action=jump jump-target=pre-hotspot log=no log-prefix="" 2 D chain=hotspot action=redirect to-ports=64872 protocol=udp dst-port=53 log=n> log-prefix="" 3 D chain=hotspot action=redirect to-ports=64872 protocol=tcp dst-port=53 log=n> log-prefix="" 4 D chain=hotspot action=redirect to-ports=64873 protocol=tcp hotspot=local-dst dst-port=80 log=no log-prefix="" 5 D chain=hotspot action=redirect to-ports=64875 protocol=tcp hotspot=local-dst dst-port=443 log=no log-prefix=""
COMMAND LINE MIKROTIK FOR UKK
6 D chain=hotspot action=jump jump-target=hs-unauth protocol=tcp hotspot=!auth log=no log-prefix="" 7 D chain=hotspot action=jump jump-target=hs-auth protocol=tcp hotspot=auth log=no log-prefix="" 8 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=80 log=no log-prefix="" -- [Q quit|D dump|right|down] 9 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=3128 log=no log-prefix="" 10 D chain=hs-unauth action=redirect to-ports=64874 protocol=tcp dst-port=8080 log=no log-prefix="" 11 D chain=hs-unauth action=redirect to-ports=64875 protocol=tcp dst-port=443 log=no log-prefix="" 12 D chain=hs-unauth action=jump jump-target=hs-smtp protocol=tcp dst-port=25 log=no log-prefix="" 13 D chain=hs-auth action=redirect to-ports=64874 protocol=tcp hotspot=http log=no log-prefix="" 14 D chain=hs-auth action=jump jump-target=hs-smtp protocol=tcp dst-port=25 log=no log-prefix="" 15 X ;;; place hotspot rules here chain=unused-hs-chain action=passthrough log=no log-prefix="" 16
