Mikrotik Config Cheatsheet

Published: 2022-12-08

Intro

The following is a cheatsheet with common configurations for the Mikrotik CRS326 router / switch.

Lab Environment

The following hardware is used for all examples in this post.

DeviceSoftware
Mikrotik CRS3267.3

Administration

Console

Connect to the console port.

cmd
screen /dev/tty.usbserial-<usb id> 115200

SSH

Connect via SSH.

cmd
ssh admin@<router ip>

Web UI

Connect to the web UI.

cmd
http://<router ip>

Software Update

Upgrade the software package.

cmd
/system package update
check-for-updates
download
# reboot required after download completes
/system reboot

Hostname

Set the device hostname.

cmd
/system identity
set name=<hostname>

Bridge

Create a bridge.

cmd
/interface bridge
add name=bridge1 vlan-filtering=yes

VLAN

Create a VLAN and assign it to a bridge.

cmd
/interface bridge vlan
add bridge=bridge1 tagged=bridge1,ether24 vlan-ids=<vlan id>

Access Port

Add an interface to a bridge and configure it as an access port.

cmd
/interface bridge port
add bridge=bridge1 interface=<interface> pvid=<vlan id>

Trunk Port

Add an interface to a bridge and configure it as a trunk port.

cmd
/interface bridge port
add bridge=bridge1 interface=<interface>

VLAN Interface

Create a VLAN interface and assign an IP address.

cmd
/interface vlan
add interface=bridge1 name=<vlan name> vlan-id=<vlan id>

/ip address
add address=<ip address>/<prefix length> interface=<vlan name>

Static Route

Add a static route.

cmd
/ip route
add dst-address=<destination network>/<prefix length> gateway=<gateway ip>

DNS Client

Configure DNS client settings.

cmd
/ip dns
set servers=<dns server ip>

NTP Client

Configure NTP client settings.

cmd
/system ntp client
set enabled=yes

/system ntp client servers
add address=<ntp server ip>

LLDP Client

Enable LLDP on all interfaces.

cmd
/ip neighbor discovery-settings
set discover-interface-list=all

Show LLDP neighbors.

cmd
/ip neighbor print

HTTP Server

Configure HTTP server settings.

cmd
/ip service
set www disabled=no port=80
set www-ssl disabled=no port=443

Disable Services

Disable unused services.

cmd
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes

Service Status

Show the status of all services.

cmd
/ip service print

Outro

In this cheatsheet, I covered some common configurations for the Mikrotik CRS326 router / switch.