How To Setup Your Mikrotik Routerboard For The First Time (OOBE) using The Winbox App.
There are 3 basic ways to setup any Mikrotik Router for the first time (out of the box – OOBE) and these are :
1) Winbox first time startup and configuration.
2) Webfig first time start up and configuration and
3) CLI first time startup and configuration.
The goal of this Tutorial is to show you how to setup your RouterBoard for first time using All 3 methods.
In order to complete this tutorial successfully the following items are required. Please ensure to have these items available before taking implementation action on this tutorial :
1) 1 x Basic Laptop or desktop Computer
2) 1 x Mikrotik Routerboard
3) 1 x RJ45 Cat5 or Cat6 Network Cable
4) Winbox utility
5) Putty SSH and TELNET client.
Step 1 : Connecting and Logging into the Mikrotik Router
MikroTik RouterOS is configured by default with the IP address 192.168.88.1 when it is new and powered on for the first time or when you do a factory data reset on the router. Winbox can connect to this IP address or through the MAC address of the mikrotik router however it is recommended to always perfom configuration operations using an IP address.
Head over to www.mikrotik.com to download the Winbox utility if you havent already done so. Proceed to open the Winbox utility, a login page will be displayed as show in the image
1)Connect your Routerboard to a power source, connect an RJ45 ethernet cable to ether2 and the ethernet port of your laptop / desktop
2) If your connection is successful Winbox will automatically detect all connected Routerboard devices as shown in the image, if you do not see your routerboard device try to click the refresh button under the neighbours tab or try to power cycle your routerboard.
3) Ensure that the ethernet adapter on your laptop / desktop is operational, set to DHCP and that there is no active firewall blocking communications.Double click on the IP address or MAC address to populate the CONNECT TO Field and enter admin on the LOGIN field and leave the PASSWORD field empty. Proceed to click the CONNECT button.
Step 2 : Basic Configuration Using Winbox Quickset
The QUICKSET option in the Winbox Utility is one of the fastest ways to get up and running with your mikrotik device. Follow the steps as show in the image.
1) Select the desired operation mode in this case we select ROUTER
2) Select the port you would to use to access the internet i.e ETHER1
3) Select ISP address aquisition method, if you select STATIC enter the static IP address assigned to you by your ISP. If you select Automatic RouterOS will obtain internet IP configuration automatically and if you select PPPoE configure your PPPoE username and password assigned by your ISP
4) Next, configure the Local Area Network (LAN) settings. Enter your desired LAN address i.e 192.168.88.1 , subnet mask 255.255.255.0 in the fields provided as shown in the image. Next tick the DHCP Server check box to allow devices that connect to your LAN to be provisioned with an IP address automatically. Configure your desired client DHCP range i.e 192.168.88.10 – 192.168.88.254
5) Finally tick the NAT check box , this will enable network address transalation for your LAN.
Step 4 : Basic Configuration (Identity , Date And Time, Login Password
The final step in configuring your new Routerboard is to setup a system identity, configuring date and time and well as setting up a secure login Password.
1) As show in the image go to SYSTEM > PASSWORD the password CHANGE dialog will be displayed leave the Old password field empty and add your new password in the NEW PASSWORD AND CONFIRM PASSWORD FIELDS. Click the CHANGE password button to apply your new Password
2) Go to SYSTEM > IDENTITY and add any name you would like as the RouterOS identifier, click OK and then APPLY.
Step 5 : Basic Configuration (Non Quickset Method)
If you prefer to configure your RouterBoard Step By Step to allow you to make more detailed changes and adjustments you can follow these steps :
1) The first step is to go to the SYSTEM > USERS page and click on ADD NEW to create a new username and choose full option from Group dropdown menu also add a strong password in the password field. Enter the same password in the password confirm input box. Click apply and close. Highlight the builtin admin account and click remove. Logout and login using your newly created credentials
2) Next Go to the IP > Addresses page. Click on default IP address. Now put a desired LAN address i.e 192.168.1.1 /24 in the address field click Apply and OK button.
3)Next Go to IP > Address page and click on the Add New button. In New Address page add a static IP address that your ISP provided i.e 220.127.116.11/32 in Address input field, choose ether1 and Click on Apply and OK button.
4)Next Go to IP > Firewall and click on NAT tab. Click on Add New button. Under the General panel, choose srcnat from the Chain dropdown menu. Go to Action panel and then choose masquerade from Action dropdown menu. This configures Network Address Transalation for your LAN. Click on Apply and the OK buttons.
5)Next Go to IP > DNS page and configure the DNS servers IP (18.104.22.168 and 22.214.171.124) in Servers input field (You can specify any other known DNS servers depending on your ISP and region. Click the ALLOW REMOTE REQUEST check box then Apply and OK buttons.
6)Finally Go to IP > Routes page and click on the Add New button. In New Route page, click on Gateway arrow button and configure your ISP Gateway IP address this will allow your routerboard to forward allow internet bound traffic to this address
Step 6 : Basic Configuration Using Webfig Quickset
1) WebFig is a web based utility which makes it possible to monitor, configure and troubleshoot a Mikrotik Router as an alternative to WinBox.
Gaining access to Webfig is aa simple process as long as if the HTTP service is not disabled in RouterOS. To access Webfig, launch your favourite web browser and in the web browser search bar enter the LAN IP address of your Mikrotik Router.
2) Once the Webfig page loads in your browser enter your routeros username and password on the “LOGIN” and “PASSWORD” fields and press the “LOGIN” button. Once logged in the Webfig configuration dashboard will be displayed.
3) Select the “QUICK SET” button at the top of the page.
4) Select the desired operation mode in this case we select ROUTER
5) Select ISP address aquisition method, if you select STATIC enter the static IP address assigned to you by your ISP. If you select Automatic RouterOS will obtain internet IP configuration automatically and if you select PPPoE configure your PPPoE username and password assigned by your ISP
6) Under the “LOCAL AREA NETWORK FIELD” enter the IP address you would like to assign to your mikrotik router in the “IP ADDRESS” field.
7) Enter the subnet mask you would like to use in your LAN i.e 255.255.255.0
8) Select the “DHCP SERVER” check box if you would like to use your mikrotik router as the DHCP server for your LAN.
In the “DHCP SERVER RANGE” field enter the range of ip addresses you would like to be assigned to your LAN devices i.e 192.168.88.10 – 192.168.88.20.
10) Finally select the NAT check box to enable network address translation for your LAN.
11) Remember to add a RouterOS password protect your router by going to “WEBFIG > SYSTEM > PASSWORD”
Step 7 : Basic Configuration Using The RouterOS Command Line Interface
12) A Mikrotik router can be configured using a command line interface. To gain access to the mikrotik command line interface download and install the putty SSH and TELNET client HERE.
13) Open the putty application and enter the IP address of the mikrotik router in the “HOST NAME (IP ADDRESS) text input field. The port setting should be set to 22 and the connection type should be set to SSH. Click on the “OPEN” button to proceed.
14) Enter the username “admin” on the “login as” prompt and press enter twice. There is no password when setting up a new mikrptik router and it is recommended to change the username and password when setting up the router for the first time.
15) Next, To view users that are currently on the router run the following command:
Change the default username “admin” to different name. A custom name helps to protect access to the mikrotik router. To do this run the following commands:
user add name=yourusernamename password=yourpassword group=full
Remove the default admin user by running the command:
user remove admin
16) Next exit out of putty and login user the newly created username and password.
Give the router a name that you can use for identification purposes by typing in the command:
system identity set name=YOUR-MIKROTIK-ROUTER-NAME
Add an IP address for the LAN interface i.e ether2 by typing in the command:
ip address add address=192.168.1.1/24 interface=ether2
17) Add a DHCP server so client LAN devices can obtain an IP address from the router automatically by using the built in DHCP server setup wizard.
Type in the command :
ip dhcp-server setup
and enter the details specifi to your network on the appropriate sections.
1) The final step is to add an IP default route that will point internet bound traffic to gateway IP address. To do this run the following command:
ip route add gateway=192.168.55.252