Mikrotik

Here is a step-by-step guide on how to configure Mikrotik to work with VAULT.

Configuration Steps Overview

1. Enable APIs

2. Create VLAN Interface

3. Create IP Address

4. Create DHCP Pool

5. Create DHCP Server

6. Create DHCP Network

7. Create Hotspot

8. Create Simple Queue

Important Note

All configuration steps detailed assume the Mikrotik Router has an accessible IP address and configuration steps are accomplished via WebFig user interface.

Enable APIs

1. Click IP

2. Click Services

3. Click api-ssl

4. Click Enabled to enable the service

5. Port: 8729

6. Available From: Click down arrow to add an IP address

1. Set IP Addresses to:

   1. 3.217.123.156/32

   2. 34.204.9.182/32

   3. 100.20.214.243/32

   4. 52.23.18.184/32

2. Click OK

1. Click api

2. Click Enabled to enable the service

3. Port: 8728

4. Available From: Click down arrow to add an IP address

1. Set IP Addresses to:

   1. 3.217.123.156/32

   2. 34.204.9.182/32

   3. 100.20.214.243/32

   4. 52.23.18.184/32

2. Click OK

Create VLAN Interface

Table Description automatically generated

1. Click Interfaces

2. Click Add New

3. Click VLAN

4. Select Enabled to Enable the new VLAN

5. Enter the following information:

   1. Name: vlan+VLANID (example: vlan1050)

   2. VLAN ID: VLANID (example: 1050)

   3. Interface: Select the Physical Interface to send VLAN traffic (example: sfp-sfpplus2)

   4. All other fields can remain default

6. Click OK

Create IP Address

Graphical user interface Description automatically generated

1. Click IP

2. Click Addresses

3. Click Add New

4. Click Enable to enable the IP

5. Enter the IP address and MASK as CIDR to assign as the default gateway IP of the VLAN (ex. 172.20.50.1/24)

6. Network: Enter the Network Address of the Subnet (ex. 172.20.50.0)

7. Interface: Select the newly created VLAN

8. Click OK

Create DHCP Pool

1. Click IP

2. Click Pool

3. Click Add New

4. Enter Name as vlan+VLANID+pool (ex. vlan1050pool)

5. Click down arrow to add addresses

6. Enter the starting address – ending address for pool (ex. 172.20.50.3-172.20.50.254)

7. Leave Next Pool as none

8. Click OK

Create DHCP Server

1. Click IP

2. Click DHCP Server

3. Click Add New

4. Click Enabled to enable the DHCP Server

5. Enter the following information:

   1. Name: dhcp+VLANID (ex. dhcp1050)

   2. Interface: Newly Created VLAN Interface (ex. vlan1050)

   3. Lease Time: Enter valid lease time (ex. 3d 00:00:00)

   4. Address Pool: Select Address Pool Created above (ex. vlan1050pool)

   5. All other values may remain default or set to best practices

6. Click OK

Create DHCP Network

Graphical user interface, table Description automatically generated

1. Click IP

2. Click DHCP Server

3. Select Networks Tab

4. Click Add New

5. Enter the following Information:

   1. Address: The Subnet Address in CIDR format (ex. 172.20.50.0/24)

   2. Gateway: The IP address assigned to the New VLAN (ex. 172.20.50.1)

   3. All other options can be default or set to best practices

6. Click OK

Create Hotspot

Graphical user interface, application Description automatically generated

1. Click IP

2. Click Hotspot

3. Select Server Profiles Tab

4. Click Add New

5. Enter the following information:

   1. Name: vlan+VLANID+hsprof (ex. vlan1050hsprof)

   2. Hotspot Address: The IP address assigned to the New VLAN (ex. 172.20.50.1)

   3. All other fields may remain default or set to best practices

6. Click OK

7. Select Servers Tab

8. Click Add New

9. Enter the following information:

   1. If Hotspot should be enabled: Select Enabled

   2. Name: vlan+VLANID+hotspot (ex. vlan1050hotspot)

   3. Interface: Select the Newly Created VLAN Interface (ex. vlan1050)

   4. Address Pool: Select the Newly Created Address Pool (ex. vlan1050pool)

   5. Profile: Select the Newly Created Hotspot Profile (ex. vlan1050hsprof)

   6. All other fields may remain default or set to best practices

10. Click OK

Create Simple Queue

Graphical user interface Description automatically generated

1. Click Queues

2. Click Add New

3. Click Enable to enable the queue

4. Enter the following information:

   1. Name: vlan+VLANID+queue (ex. vlan1050queue)

   2. Target: Select the Newly Created VLAN (ex. vlan1050)

   3. Target Upload:

      1. Set MAX Limit to Upload Limit (ex. 1G)

   4. Target Download:

      1. Set MAX Limit to Download Limit (ex. 1G)

   5. All other fields may remain default or set to best practices

5. Click OK