RouterOS system installation and simple configuration

1. Install the RouterOS system

VMware virtual machine, create a new virtual machine for other systems, similar to installing the Linux system, mounting the system image, and completing the installation step by step according to the prompts.

Select the installed feature pack

After selecting the installed feature pack, press I installs, and press y saves the configuration installation of the settings.

After the installation is complete, the press Enter restart completes the installation, the system is very small, the installation is very fast, the whole process is less than 5 minutes.

Display the login interface

Default account admin password is empty

The first installation of RouterOS requires a registration license, otherwise it can only be used for 24 hours. We can see software-id below. You can contact the distributor to purchase the license through the software-id after installation.

Log in to view the network card

# 2. Configuration

2.1 configure IP addr

Failure: after installing the system, you can open the WEB login page, but the login will prompt the user that the password is invalid. After changing the password many times, the problem remains.

Solution: after replacing the IP and the host on the same network segment, the problem is solved (I don't know why)

2.2 Connect winbox

Liscense was not imported

2.3 user Management

Group rights management

Add user

Remove user

3. activation

Install the vmware-activated virtual machine system.

4. RouterOS IP workflow and the role of firewall 4.1 Mangle

IP firewall in RouterOS is mainly composed of three rule parts: Mangle, Filter and NAT, while Address-list is often used to classify address lists.

After marking specific IP data streams, Mangle provides tagged IP data streams for Filter, NAT, and routing, Queue.

Mangle plays the role of marking and classification in RouterOS.

4.2 Firewall linked list classification

The linked list of RouterOS mainly consists of:

Input-used to process packets entering the router, that is, the destination IP address of the packet is the IP address that reaches one of the interfaces of the router. Secure the router. Forward-the user processes packets passing through the router. Protect users. Output-the user processes packets that originate from the router and go out one of the excuses. Control the data sent by the route. Custom linked lists-other linked lists can be created through customization in RouterOS for data filtering and classification.

Filtering process of input

Filtering process of output

Filtering process of Forward

Forward data is not filtered by input and output.

Firewall rules are constructed in an if-then way (if environment condition then action execution)

PPPOE server