Awesome MikroTik Router Demo – Thanks Karl Auer
Here are the slides (PDF): Into6 MikroTik Presentation
Attendees :
- Paul McCooey(splashinternet.net)
- Amanda and Gordon Dalziel
- John Barlow
- Liam O’Duibhir (www.tripleacs.com)
- Karl Auer (into6.com.au)
- Grant Robertson (www.2ec.com.au/index.php/news/tech-dude)
Venue : Office of Pambula & District Community Development Group
A very enjoyable encounter – personally I cannot conceive of a more concentrated and efficient way to acquire knowledge about a particular subject than this – a group of passionate people immersing themselves in a dense analysis of the topic for a solid 2 hour block. I really think these sorts of meetings are gold.
Some brief notes :
- Grant mentioned his organisation is moving from SnapGear to MikroTik
- Duxtel is distributor of MikroTik products
- MikroTik awesome in Routing and Wireless
- In a word, MikroTik is ‘cheap good kit’ – but not so much for the enterprise space
- Systems include RouterBOARD hardware and RouterOS Software – software can be licensed for use on a computer, so can be virtualised etc
- The demo kit had
- great price – $50 for the smallest router (10/100, small processor), $100 with USB, gigabit ethernet, faster processor. Visit eg www.duxtel.com.au for the range and pricing.
- include wifi, 2.4Ghz, bgn
- flexible port arrangements – can be set up as a switch, or be individually router, put into VLANs etc
- supports access via ssh, scp, rsynch, telnet, serial (on some models) and more
- Firewall – very comprehensive, not quite DPI; includes scheduling
- Also enables ‘hair pinning’ – some routers do it by default, but you need to add a NAT rule – see here – http://wiki.mikrotik.com/wiki/Hairpin_NAT
- allows scripting, cron-like scheduling of scripts, running scripts on events
- reasonable logging for debugging…including customisable info messages
- low wattage unit – can be powered via PoE (power over ethernet)
- they run cool – so you can potentially stack ’em high – but don’t say we said it – conform to OHS
- one single radio, can be set up as many virtual access points, with different SSIDs and passphrases
- not open source…proprietary system
- features failover to an alternative WAN…
- can connect a 3G dongle via USB – so if WAN goes out it can send an SMS to someone notifying them of the WAN outage – or even switch to 3G Intenet access
- can attach a disk via the USB and configure a low-cost “NAS” (albeit with a USB 2.0 speed limit)
- missing some enterprise features – no high availability features, hard to clone, no running vs startup configurations, no power backup etc
- nice form factor…sturdy, well-manufactured but not designed for really tough working conditions…but heck you only paid $50
- external antenna available on some models
- has a useful tool (“Winbox”)that can be installed on an PC/laptop and allows easy configuration. This tool allows direct access to the router via MAC address if necessary, so can work even if the router is not configured properly for networking
Basic set-up – router identity, password, ssid, WPA passphrase, DHCP settings, DNS options, WAN configuration…
Karl (with valuable input from Paul) also talked through some simple principles for preventing some Denial of Service Attacks.
Things missed this outing but which may be covered next time :-
- hotspots
- using multiple MikroTiks for Load-balancing between multiple WANs
- using multiple MikroTiks for bonding DSL lines to boost bandwidth
- working with VOIP phones – which fail to re-register with the SIP server after failover to a backup WAN
- setting up VPN tunnelling
- configuring firewall rules
Thanks very much again to Karl Auer for a great talk, and to the Pambula & District Community Development Group for providing a location.
See you at the next talk.
Liam O’Duibhir
Triple A Cloud Solutions
Leave a Reply
Want to join the discussion?Feel free to contribute!