Mikrotik - Second Part [Interface and Configurations] by : Mohamed Ahmed.

Sep 12, 2017 12:43 AM
636407474862338785.jpg

This time will advance in the configuration of an RB equipment.

Upon completion of the communication with the RB through the Winbox application:

https://download2.mikrotik.com/routeros/winbox/3.11/winbox.exe

it is possible to clarify that the connection can be made by layer 2 or layer 3 (MAC or IP).

You will see the following image:

636407477116713880.jpg

On the left you will find all the configuration options provided by RB.

The first steps to leave an RB ready I will describe next.

NTP Server Allows you to

connect to the time server to automatically update the computer time (very useful when using the task scheduler)

636407480810151183.jpg

Determines the range of ip addresses to use as well as the gateway and subnet mask.

636407481794838496.jpg

Clicking the + button allows you to configure.

636407482295152257.jpg

Provides IP addresses automatically to computers connected to the LAN.

636407482882182765.jpg

You must now define the POOL of addresses to use.

636407483392340919.jpg

Within IP-POOL with pressing the button + the new window allows to configure the range of addresses to use.

636407484143588715.jpg

This section is interesting because it allows you to use your own DNS server (or for educational purposes) or use multiple servers, also if your computer allows you to perform a local DNS cache server.

One of the goals of performing a local DNS is to use the DNS entries to add them to the firewall.

636407484626088828.jpg

To make it transparent, just add the rule to the firewall.

Code:

/ip firewall nat

add action=redirect chain=dstnat dst-port=53 in-interface=all-vlan protocol=udp to-ports=53

Proxy Web Server

A Web-Proxy server allows you to have total control over the pages you visit, redirection, a little marketing.

636407485428589576.jpg

To make it transparent, you have to add the rule to the firewall

Code:

/ip firewall nat

add action=redirect chain=dstnat dst-port=80 in-interface=all-vlan protocol=tcp to-ports=3128

greetings ........

Comments

No Comments Exist

Be the first, drop a comment!