Showing posts with label MIKROTIK Router. Show all posts
Showing posts with label MIKROTIK Router. Show all posts

Wednesday, 19 March 2014

Manual Setting Mikrotik DNS

 A MikroTik router with DNS feature enabled can be set as a DNS server for any DNS-compliant client. Moreover, MikroTik router can be specified as a primary DNS server under its dhcp-server settings. When the remote requests are enabled, the MikroTik router responds to TCP and UDP DNS requests on port 53.

DNS Cache Setup

  • Submenu level: /ip dns

Description

DNS facility is used to provide domain name resolution for router itself as well as for the clients connected to it.

How to make transparent web proxy using MIKROTIK

 

 Overview

Web proxy is a service that is placed between a client and the internet, specifically for HTTP web surfing. It is normal that only HTTP traffic is cached. It is not so easy to cache and provide a web-proxy for HTTPS and FTP. Therefore the following example only shows how easy it is to enable a transparent web-proxy for HTTP traffic.
There are two main benefits to using a web-proxy.
  • Raising Security for client and network
  • Enhanced Performance and possibly lowering costs for client and network

Raising Security

Security is raised as the client is not directly connected to the website they are requesting data from. The client makes a connection request to the web-proxy and the web-proxy fetches the data on the client's behalf. Therefore the internet is connected to the web-proxy interface, not directly to the client. Using a web-proxy also allows the possibility of providing other services, such as anti-virus scanning, content filtering and monitoring or reports on the websites being requested.

Enhanced Performance

Performance is enhanced as it is very likely that the same identical website is being requested by many clients. If the web page is cached, then the web-proxy can deliver the content of that web page directly from it's own cache, rather than fetching it every single time, again and again, from the internet. This is very important for satellite links or on limited internet connections. If the network connection is metered by the service provider any means of reducing the traffic will bring cost benefits.

Use MikroTik RouterOS as a Dialup Client PPPoE


MikroTik has the capability of dialing to the internet via a PPPoE connection which is commonly used for ADSL and wireless internet dialups.  Simply set your ADSL modem into ‘bridge’ mode which allows other devices such as MikroTik routers to do the dialup.



>>In your MikroTik router, click on the Interfaces >>button and add a new PPPoE client.
Once the new PPPoE Client interface window appears, simply choose the Ethernet port of your MikroTik router that will be connecting to your ADSL modem in this example it will be ether3.


Once you have chosen your ADSL interface, proceed to the “Dial Out” tab and specify your PPPoE (ADSL) username and password and be sure to tick the option “Use Peer DNS” which will allow the MikroTik to make use of your service providers DNS server to resolve DNS queries.


Source : http://netwanlan.com

MIKROTIK Services Port

Sub-menu: /ip service

This document lists protocols and ports used by various MikroTik RouterOS services. It helps you to determine why your MikroTik router listens to certain ports, and what you need to block/allow in case you want to prevent or grant access to the certain services. Please see the relevant sections of the Manual for more explanations.

Mikrotik Mangle

Mangle is a bandwidth management method, if you want the bandwidth is shared equally by Mikrotik. Such as bandwidth 256kbps downstream and 128kbps upstream. While the client that will access as many as 10 clients, then automatically each client gets a small bandwidth as much as 256kbps downstream and upstream divided by 10 divided by 10 as 128kbps. So each client gets 25.6 kbps downstream and upstream 12.8kbps. if only 2 Clients who access it each client gets 64kbps to 128kbps downstream and upstream.

For the used type PCQ (Per Connection Queue), which can automatically divide traffic per client.
About the type of queue in the proxy can be read in the manual in http://www.mikrotik.com/testdocs/ros/2.9/root/queue.php.

Previous rules need to be made at the mangle. such as:

MIKROTIK NAT ( Network Address Tranlation )

This is a short howto explaining how to set up a full-NAT on a Mikrotik RouterOS.

This setup allows you to hide (masquerade) your private IP address from a public network. This means, for example, that in your private network you can have whatever private IP you want which is then in turn translated to the public network IP given to you by your network provider. This tutorial can thus be used by clients who want to connect to a network without requiring a change to the internal IP addressing of their LAN.

Example

In the following example we have a wireless interface which connects to a public wireless network and an Ethernet interface for the local private network.

Friday, 14 March 2014

What is a Firewall ?

A firewall is a device whose function is to examine and determine which data packets can get in or out of a network. With this capability, firewall plays a role in protecting the network from attacks originating from outside the network (outside the network). The firewall implements packet filtering and thereby provides security functions that are used to manage data flow to, from and through the router. For example, the firewall function to protect the local network (LAN) from possible attacks coming from the Internet. In addition to protecting the network, the firewall is also intended to protect the user's computer or host (host firewalls).

Firewalls are used as a means to prevent or minimize the security risks inherent in connecting to other networks. If properly configured firewall will play an important role in efficient network deployment and infrastrure safe. MikroTik RouterOS has very powerful firewall implementation with features including:

Mikrotik Basic Router Configuration

Install Mikrotik router:

Insert your Mikrotik OS and start the server. It will show the bellow message :

Welcome to MikroTik Router Software installation Move around menu using 'p' and 'n' or arrow keys, select with 'spacebar'. Select all with 'a', minimum with 'm'. Press 'i' to install locally or 'r' to install remote router or 'q' to cancel and reboot.


Chose your require software from here and press "i". Then you will get the bellow message and press "n". 


Do you want to keep old configuration? [y/n]:

How to install Mikrotik Router OS


In this article i will show you how to install MikroTik Router OS on a PCs. Just relax..because this step is very simple and easy to practice at your home. I will Guide you how to install the Router OS step by step. Prepare your pc with minimum requirement: Intel Pentium 3 or pentium 4 with minimal 512 MB storage ( HDD ) and 64 MB Physical Memory. You should buy minimal 1 NIC or Network address Card because the NIC will be used to connetcing the client trhough the internet( On Board and New NIC ). For the first steps, Download the Router OS from official Mikrotik website at this link www.mikrotik.com/download.html and Select system type with PC / x86, Select software type with all version. Download the iso's file. When i wrote this article, The last version of Mikrotik router OS is OS 5.7. You can download the router OS v5.7 from this link directly http://download.mikrotik.com/mikrotik-5.7.iso

Difference Between Mikrotik RouterBoard and RouterOS

Mikrotik is an operating system that can connect different Ethernet to create a network (network). Typically, mikrotik is widely used by ISP (Internet Service provider) to run a network router.

Mikrotik divided into 2, namely
  1. Mikrotik routerboard is a router hardware that can run the network without the need to install to a PC, because this mikrotik has been designed to run RouterOS so it can be a router that is reliable for users. price for the router is quite cheap.   
  2. RouterOS is the operating system that needs to be installed into a PC and can change the PC (computer) into the router.