Mikrotik – RADIUS Wireless Authentication Guide

This is a step-by-step guide for configuring RADIUS authentication for Mikrotik Wireless, for Server 2008 R2-2016.   RADIUS allows you to use domain credentials for accessing a wireless network, rather than a static WPA2 PreShared Key that rarely changes. Important for keeping terminated employees out, by just disabling their Active Directory account, rather than having to […]

Mikrotik – SSTP VPN Server Setup Guide

Overview I’ve played with L2TP/IPSec, IKEv2, PPTP, and SSTP VPN Servers. SSTP is now my go-to for business clients, and here is a step-by-step guide to help you set one up on a Mikrotik Router :-). Benefits over L2TP/IPSec Multiple clients can connect from the same Public IP. Important if you have multiple employees that […]

Mikrotik – Setup a Full Router Within 5 Minutes

We setup a LOT of Mikrotik routers, doing everything by the GUI is tedious. Below is a “cheat-sheet”, feel free to customize it to rapidly deploy your own Mikrotik routers. Apply to a freshly reset and updated router for best effect. This script assumes you have a static WAN IP, hence the 0.0.0.0/0 static route. […]

Mikrotik – VOIP QoS – Simple Queues

Another bit of helpful code for Mikrotik. We were getting some crackling on our VOIP phone system when the internet connection was maxed out, the following code let phone traffic run smoothly, based on the UDP ports the VOIP service uses. Adjust to your VOIP providers ports, and adjust your LAN targets as needed. There […]

Mikrotik – Simple WAN Hard Failover

It is amazing how many ways there are to configure a simple WAN Failover on a Mikrotik. This post, contains three simple lines of code, that will perform a hard failover: Use a primary connection 100% of the time, if the primary line becomes unable to ping an external IP, switch entirely over to the failover line. […]

Mikrotik IKEv2 VPN Server Setup Guide

Looking for a detailed guide on configuring a Mikrotik IKEv2 VPN server? Need your on-the-road devices to be able to remotely access your internal LAN? Then you’ve come to the right place 🙂 The major functional benefit of IKEv2, over L2TP/IPsec VPNs, is that L2TP only allows one source IP per client, while IKEv2 has no limit. […]

Mikrotik L2TP IPsec Dedicated VPN Appliance Setup

Mikrotik L2TP IPSec VPN Guide – Start to Finish Appliance There are a small number of L2TP IPSec VPN guides, I found them pretty frustrating, and often conflicting when integrating into an existing network. This guide provides full configuration steps for a Mikrotik L2TP/IPSec VPN appliance. It does not have to be the primary router. VPN […]

Mikrotik VPN – L2TP/IPSec Server for Remote Clients (Windows/Android/iOS)

Mikrotik VPN – L2TP/IPSec Server for Remote Clients If you’re looking for a quick guide for configuring a Mikrotik VPN Server, allowing remote clients to connect into your building controlled by a Mikrotik Router, you’ve come to the right place. This guide was written for Mikrotik RouterOS v6.41  in September 2017. It presumes you have […]

Mikrotik and Wireless Interference – Deploying High Density WiFi with CAPsMAN

Mikrotik and Wireless Interference – Deploying High Density WiFi with CAPsMAN This post is brought to you by over 100 hours of blood, sweat, and maybe a few tears, in making an optimal Mikrotik-based high density wireless system. One of the hardest projects I’ve ever done, but wow it feels good to be at the end. […]

Mikrotik – Cloud Router Switch – Switch Chip VLANs

  Mikrotik – CRS – Switch Chip VLANs Well, this all came in last week — 8x Cloud Router Switches (CRS125-24G-1S), 33x WAPs, 4x BaseBox 2s, and a 12 Port Fiber Switch (CRS212-1G-10S-1S+), enough gear to hook together an a minor-league baseball stadium, fun stuff! This post is regarding how to use the CRS Switch Chip. The […]