MikroTik RouterOS Basics

1. Command Line Interface (CLI)

The Command Line Interface (CLI) is the primary method for configuring and managing MikroTik RouterOS. It allows users to execute commands directly on the router. The CLI is organized hierarchically, with commands grouped into categories such as system, interface, IP, and queue.

For example, to view the list of network interfaces, you would use the command /interface print. This command falls under the /interface category, which is responsible for managing network connections.

An analogy for the CLI is a car dashboard. Just as a car dashboard provides various controls and displays information, the CLI provides commands to control and monitor the router's functions.

2. Queues

Queues in MikroTik RouterOS are used to manage and prioritize network traffic. They allow administrators to shape traffic by setting bandwidth limits and priorities. This is crucial for ensuring that critical applications receive the necessary bandwidth while less critical traffic is managed accordingly.

For instance, you can create a queue to prioritize VoIP traffic over web browsing. This ensures that voice calls remain clear and uninterrupted even during high network usage. The command to create a queue might look like this: /queue simple add name=VoIP-Priority target=192.168.1.10/32 max-limit=1M/1M.

An analogy for queues is a grocery store checkout line. Just as customers with fewer items are given priority, network traffic with higher priority is processed first, ensuring efficient service.

3. Firewall Rules

Firewall rules in MikroTik RouterOS are used to filter and control network traffic based on various criteria such as source IP, destination IP, protocol, and port number. These rules help in securing the network by allowing or denying specific types of traffic.

For example, to block all incoming traffic from a specific IP address, you would create a firewall rule like this: /ip firewall filter add chain=input src-address=192.168.1.10 action=drop. This rule ensures that any traffic originating from the specified IP address is dropped.

An analogy for firewall rules is a security guard at a building entrance. The guard checks each person's credentials and decides whether to allow them inside. Similarly, firewall rules check each packet's attributes and decide whether to allow or block it.