RouterOS 7 multiwan PPPoE loadbalance script

Last edit 04/01/2022 Please try my RouterOS 7 multiwan PPPoE loadbalance script Main features: 1) This script allows you to send traffic from special address lists via certain pppoe connection, bypassing the load balance logic (for example your TV should always go only via pppoe-02) 2) This script supports HAIRPIN-NAT 3) This script solves the multiwan issue when you are …

MikroTik Single-WAN / Dual-LAN PCQ simple queue script example

The example below shows how to setup MikroTik PCQ queues for configurations with multiple LAN (office, guest) using MikroTik PCQ simple queues to equally split the available 100mbit bandwidth across all connected devices in the LAN network. Ví dụ dưới đây cho thấy cách thiết lập MikroTik PCQ queues cho các cấu hình với WAN đơn và nhiều mạng LAN …

MikroTik Dual-WAN PCQ simple queue script example (works for load-balancing)

The example below shows how to setup MikroTik PCQ queues for configurations with multiple LAN (office, guest) and multiple WAN (Viettel, FPT) using MikroTik PCQ simple queues to equally split the available bandwidth across all connected devices in the LAN network. Works properly with load-balance configurations. Ví dụ dưới đây cho thấy cách thiết lập MikroTik PCQ queues cho các …

Default firewall for RouterOS v6 and v7

/ip firewall nat add chain=srcnat out-interface-list=WAN ipsec-policy=out,none action=masquerade comment=”defconf: masquerade” /ip firewall { filter add chain=input action=accept connection-state=established,related,untracked comment=”defconf: accept established,related,untracked” filter add chain=input action=drop connection-state=invalid comment=”defconf: drop invalid” filter add chain=input action=accept protocol=icmp comment=”defconf: accept ICMP” filter add chain=input action=accept dst-address=127.0.0.1 comment=”defconf: accept to local loopback (for CAPsMAN)” filter add chain=input action=drop in-interface-list=!LAN comment=”defconf: drop all not coming from …

IPv6 default firewall for RouterOS v6 and v7

/ipv6 firewall { address-list add list=bad_ipv6 address=::/128 comment=”defconf: unspecified address” address-list add list=bad_ipv6 address=::1 comment=”defconf: lo” address-list add list=bad_ipv6 address=fec0::/10 comment=”defconf: site-local” address-list add list=bad_ipv6 address=::ffff:0:0/96 comment=”defconf: ipv4-mapped” address-list add list=bad_ipv6 address=::/96 comment=”defconf: ipv4 compat” address-list add list=bad_ipv6 address=100::/64 comment=”defconf: discard only ” address-list add list=bad_ipv6 address=2001:db8::/32 comment=”defconf: documentation” address-list add list=bad_ipv6 address=2001:10::/28 comment=”defconf: ORCHID” address-list add list=bad_ipv6 address=3ffe::/16 comment=”defconf: …

How to reset MikroTik RouterBOARD admin password without resetting the configuration

Forgot the MikroTik RouterBOARD password? No problem, lets try to reset the admin password WITHOUT resetting the all configuration. This trick works only with RouterBOARDs produced before mid 2018 (with factory RouterOS 6.42.12 and older) Tip: try this trick on a test device before resetting in real RouterOS versions 6.42.x and below had weak winbox authentication with insecure plain-text internal …