Changing Router Passwords via Perl

February 1st, 2010 Mikrotik

This article is being posted in answer to a question on my Mikrotik Mailing List. The original poster asked if there was a solution for changing the password on a group of routers. This is something that I have been doing with perl for a VERY long time. Here is the script I have been using.

Read the rest of this entry »

Point to Point Mikrotik

December 13th, 2009 Mikrotik

Routed or bridged, there are few back haul radios available that can match the Mikrotik RouterOS software for features, tools, flexibility and cost.  With features and flexibility comes complexity and confusion.  I wanted to help dispel some of that confusion with this article.  You may have lots of choices to make, but most of these choices are relatively simple decisions.  And so, brave reader, proceed…

Read the rest of this entry »

How to bridge distant networks using RouterOS and PPtP

December 5th, 2009 Mikrotik

Mikrotik has recently added MPLS to their already amazing RouterOS product.  MPLS offers some really nice options for bridging networks that exist within a single administrative domain.  But, what can you do if you need to bridge 2 networks that do NOT exist within the same administrative domain?  This article discusses how to create a bridge using another fairly recent upgrade in RouterOS.  Read on…

Read the rest of this entry »

QOS Implementation details with RouterOS

November 23rd, 2009 Mikrotik, iptables

About 2 months ago, I began experimenting with an approach to QOS that mimics much of the functionality of the NetEqualizer (http://www.netequalizer.com) product line.  As I was experimenting with some various techniques for limiting bandwidth utilization, I realized that the scope of the project I had undertaken was WAY more than I had initially bargained for.  I dedicated more and more time to this project, however, because I was seeing some real results from my tests.  While most of my articles here have been tutorial in nature, this one is a little different.  I have a lot of time invested in my approach to handling QOS on a network and have made this a commercial offering.  I will attempt to describe some of the functionality in this short article.

Read the rest of this entry »

Creating a “travel” router

November 19th, 2009 Mikrotik

When I travel, and it seems like that happens WAY to much, I like to carry a MikroTik Router with me.  I use this router to simplify many of the problems I encounter with various “free” wifi spots in hotels.  In this article, I will describe how my “travel” router is configured.

Read the rest of this entry »

Mikrotik’s True Full Duplex Wireless – NStreme Dual

April 19th, 2009 Mikrotik

There are numerous full duplex options available on the market today when you go looking for wireless devices.  Most of these devices will cost in the multiple thousands of dollars.  With NStreme Dual, Mikrotik’s proprietary FDX protocol, you can build a true full duplex link for under $1000.  This article is a tutorial walkthrough on configuring an NStreme Dual link, along with some helpful hints on how to tweak it.

Read the rest of this entry »

Spam trojan detection with Mikrotik RouterOS

December 14th, 2008 Mikrotik

One major issue facing ISPs today is the difficulty in obtaining sufficient IP space for every customer.  For many, it’s a matter of cost and for some it is simply a choice to NAT their customers behind their router/firewall.  For the most part, NAT behaves much better today than in days gone by, but there is one issue that is very problematic for those that choose to NAT their customers.  There is a significant proliferation of a new generation of trojans that turns  a user’s computer into a menace to the Internet community.  This new generation of trojans (collectively known as “botnets”) can cause problems for not only the owner, but for other customers of the ISP that chooses to NAT.  Since a significant number of these botnets are used to send spam all over the internet, we, as service providers, have to find a way to protect our networks from being blacklisted, while still allowing our customers to utilize the internet in a way that does not set too many boundries.  In this article, I will discuss two approaches to setting these limits which have shown to be both effective AND relatively mantenance free.

Read the rest of this entry »

Using the layer 7 filters – instant messaging example

December 14th, 2008 Mikrotik

In this article, I will describe one functional use for the layer-7  filters that MikroTik offers.  This feature can be very useful if used with caution.  The main problem with L7 filters is that they require much more processor time than many of the firewall functions.  I am not saying this just to “scare” you away from using them, but you need to be aware of this issue.  The scripts in this article have been tested and DO work as written.  They are in no way complete, but they are certainly functional as posted.

Read the rest of this entry »

Using OSPF to create full duplex behaviour for wireless links

October 23rd, 2008 Mikrotik

One reality that all WISPs face is that all radio communications are half-duplex.  When one end of a link is “speaking”, the other end must be “listening”.  For many applications, this is sufficient for our purpose.  When a link becomes busy, however, some types of communications are negatively impacted by the delays caused by this behaviour.  Mikrotik RouterOS offers some options to help you alleviate this congestion without breaking the bank. In this article, I will discuss the details for how to configure Mikrotik RouterOS and OSPF to provide a simulated full-duplex link with the added benefit of failover to half-duplex in the event of a single link failure.

This idea is taken from an article I wrote on my main website back in November of 2006.

Read the rest of this entry »

Training classes scheduled ONLINE

October 17th, 2008 Basic Routing, Mikrotik, Training

I recently announced 2 new training courses that I will be offering online.  Details can be found at the registration pages linked below.  You can view ALL currently available courses HERE

The first course is a WISP Basics course.  This course is a discussion of IP basics and an RF Primer.  The IP Basics portion is a detailed look at network fundamentals.  This course is perfect for those that are new to the WISP business or anyone who wishes to learn more about how data flows over an IP network, including wired and wireless networks.  There is a lot of detail in this course and it is possible that it will extend to about 2.5 days.  Registration for this course is HERE

The second course is our Mikrotik Standard training course adapted for use online.  The online course is not exactly the same as our live training, however, it is similar in many ways.  The content of the course is mostly the same, however, the labs are rewritten to accomodate an online environment.  This is a 4 day training and is a detailed look at most of the features in RouterOS.  Registration and more information is HERE.

Because the training is online, there is no need to make travel arrangements.  Online training offers you the ability to have multiple employees trained for the price of one.  Online training offers you the ability to learn from the comfort of your own office space.  The training we are offering is of the highest quality and should not be confused with other training offers currently in the marketplace.  We offer:
* The most mature (over 4 years in development) training material
* An expert in networking as trainer (not just Mikrotik)
* An experienced trainer (I’ve been teaching in one form or another since 1998)
* An experienced ISP with the expertise to adapt materials to the WISP network

You don’t have to spend HUNDREDS of dollars more in order to get quality training.  You don’t have to spend MONTHS learning this material.  If you’ve ever considered attending a live training, but have been waiting for one to be “near you”, then this is your chance to see what it’s all about.  Registration information is available for both courses HERE.  Seating is limited and the special discounts won’t last long, so don’t hesitate.