************************ Add Mikrotik in EVE-NG ********************** Download Mikrotik Cloud router image chr-6.40.4.img.zip unzip it to get image file chr-6.40.4.img mkdir /opt/unetlab/addons/qemu/mikrotik-6.40.4/ create directory for Mikrotik node. cd /opt/unetlab/addons/qemu/mikrotik-6.40.4/ go to directory mv chr-6.40.4.img hda.qcow2 rename file to hda.qcow2 /opt/unetlab/wrappers/unl_wrapper -a fixpermissions permit images Default username is admin with no password for Mikrotik quit exit .. go to back one step ? help interface print show interfaces ip address print show ip ip address print brief ip address add add ip 192.168.10.1/24 ip address remove numbers=0 first check IP number with "ip address print" or "ip address print brief" command intercace print interface ethernet enable ether1 interface ethernet disable ether1 interface disable 5,6 ip address set interface=ether2 address=192.168.211.160/24 network=192.168.211.0 to modify ip on an interface ENTER then type numer (confirm with "ip address print" command) interface wireless print interface wireless print detail interface wireless disable 0,1 interface wireless enable 0,1 interface wireless security-profile print interface wireless security-profile set authentication-type=wpa2-psk wpa2-pre-shared-key=nespk@123 mode=dynamic-keys system reset to reset the router system reboot system shutdown ip dns print ip dhcp server print ip dhcp server disable *************** Basic WAN LAN interfaces Settings for MikroTik *************** https://www.youtube.com/watch?v=qmtu9J9-Kiw&list=PLA07043F913F49EAE&index=2 go to interfaces > Rename interfaces for LAN & WAN go to bridge > create a bridge(any name) > slect port tab > add LAN ports to bridge go to IP > address > assign IP to bridge for LAN & to WAN port for WAN connectivity go to IP > DNS > assign DNS adressses as per need > check "Allow Remote Requests" go to IP > Routes > add Default Route from LAN with LAN Gateway. e.g 0.0.0.0/0 gateway(WAN side next hop)=192.168.211.1 if mikrotik WAN interface IP is 192.168.211.250 *************** Hotspot, PPPoE, RADIUS, DHCP *************** https://www.youtube.com/watch?v=15tAZ1XyPjI&list=PLA07043F913F49EAE&index=3&pp=iAQB https://www.youtube.com/watch?v=S_Mov_jnXvc 512 IP hotspot and basic https://www.youtube.com/watch?v=mlULI5Ee2Rk PPPoE ------------------ Hotspot Server Configs ------------------ go to IP > Hotspot > click hostspot setup > give Gateway Local Address > address Pool(Range) i.e 192.168.10.2-192.168.10.250 > DNS if NA > DNS Name(to login Hotspot on customer device) go to IP > Hotspot > click Servers tab > clcik listed server i.e hotspot1 > give right Address Pool if not selected > Adress per MAC=1 go to IP > Hotspot > click user Profiles tab > create hotspot users profiles if RADIUS is not used i.e 2MB , 10MB etc go to IP > Hotspot > click user tab > create users > assign Profile also ------------------ PPPoE Server Configs ------------------ go to IP > Pool > create IP Pool i.e 10.10.10.10-10.10.10.250 go to PPP > in Interfaces Tab, click + > PPPoE server Binding > just apply and OK go to PPP > in PPPoE Servers Tab, click + to create a service> select interface as bridge 1 > uncheck all Authentication except pap go to PPP > click user Profiles tab > users profiles + > name > Local Addr=LAN Gateway > Remote Addr=select IP Pool cretaed in step 1 > click Limits Tab > rx/tx =10m/10m go to IP > Hotspot > click secret tab > create users > name, password, service pppoe, profile also go to IP > Firewall > NAT > NAT Rule for Pool 1 created in step 1 i.e name=srcnat, source address=10.10.10.0/24 *************** Change TTL in MikroTik *************** https://www.youtube.com/watch?v=qxybA5ByGxE&list=PLQoYl9crtRM1PpZlYXztJHb9JtFFsWJB3&index=1&pp=iAQB *************** Configure SAS4 RADIUS to Authenticate users *************** https://www.youtube.com/watch?v=wdL9925z2vo https://www.youtube.com/watch?v=i3lpOm9zsVk *************** Configure RADIUS to Authenticate users *************** https://www.youtube.com/watch?v=7ltXsE-ruyw&list=PLA07043F913F49EAE&index=4 ------------------- for RouterOS 6 and older ------------------- update for user manager by downloading extra packages from mikrotik website and upload in router's flash packages link = https://mikrotik.com/download go to RADIUS option in MT >> add RADIUS >> check ppp, login, hotspot, address(RADIUS IP, 127.0.0.1 if local), port=udp, secret=any go to RADIUS option in MT >> click imcoming >> check Accept, change port if required go to IP >> Hotspot >> Server Profile >> click created profile(not default) >> RADIUS >> check use RADIUS now go to RADIUS SERVER & add mikrotik credentials i.e. MT IP, port, secret for mikrotik in built RADIUS go to browser and Type WAN interface Address like 192.168.211.250/userman & configure RADIUS Accordingly ------------------- for RouterOS 7 and Later ------------------- https://www.youtube.com/watch?v=PqdATafTKic no need to go to browser user manager MENU is provided in Winbox so configure in Winbox directly by following above steps *************** Dial PPPoE on PC via RADIUS *************** https://www.youtube.com/watch?v=qYhrpRVo7ew 1. open PPP >> profiles >> default >> add Local Address(LAN address) & add Remote Address(Pool for hostpot) apply 2. open PPP >> secrets >> PPP Authentication&Accounting >> check use RADIUS & use Circuit ID in NAS Port ID apply --------------------- Mikrotik User Capacity --------------------- hex RB750 Gr3 80 users 5x1000Mbps 880MHz/2Cores 16 MB Flash/memroy card supported RB 450 120 users 5x1000Mbps 256MB RAM/512MB Flash RB 450G 200+ users 5x1000Mbps 1GB RAM RB 100 AHx2 1600+ users 12x1000Mbps 2GB RAM/2Cores/128MB Flash