We build and maintain MikroTik-based networks for a living, and we got tired of writing the same base configuration by hand for every new device. So we built a generator and put it online for free:
https://extremehosting.nl/configurator/mikrotik/
What it does
-
Pick a device (136 models, from hAP/hEX up to CRS, CCR and CHR), pick a role, answer a handful of questions, get a complete .rsc you paste into a terminal.
-
11 roles: home router, office router with VLANs, switch, AP, CAPsMAN, CPE/PtP, VPN gateway, LTE, hotspot, core router (OSPF/BGP), and a hardening baseline.
-
An advanced mode with 18 sections if you want to set everything yourself: bridge/VLAN, firewall, QoS, WireGuard/IPsec/L2TP, routing, containers, etc.
-
You can paste your existing /export and edit that instead of starting fresh. Anything the tool does not model is preserved verbatim in the output rather than dropped, so you do not lose parts of your config.
-
Output is checked before it is shown: overlapping subnets, duplicate VLAN IDs, a missing admin password, fasttrack conflicting with queues, and similar.
How it is built
Syntax follows the official documentation, and every section links to the relevant manual page. Where the manual gives a complete example (the default firewall, the IPv6 defconf rules, the PCC example) the generated output matches it.
Everything runs in your browser. There is no account, no upload, and nothing is stored server-side: the page ships a device catalogue and does the generating locally. Your configuration, including passwords and keys, does not leave your machine. WireGuard keypairs are generated with WebCrypto in the browser.
Known limitations
-
RouterOS v7 only. No v6 syntax.
-
Interface names are verified for most models but derived from the spec sheet for some older boards; those are flagged in the UI and in the script header. Check /interface print if your model shows that warning.
-
CSS switches (SwOS) get a note, not a config.
-
It generates a starting configuration. Read it before you apply it, use Safe Mode, and keep access to the device.
Disclosure: I own eXtreme Hosting, a Dutch MSP and MikroTik reseller. The tool is free, has no ads, no signup and no upsell, and we are not collecting anything from it. We built it because we love the community and want to contribute to it.
Feedback welcome, especially: missing models, wrong port layouts, and anything in the generated output you would do differently.
We hope you guys will love it, we will add more languages and functionality while we go.
P.s. this is not an opensource project! It is not allowed to make a copy.
Addition 27-08-2026:
A roadmap you can vote on, and a form for requests
Two pages went live today, so you can see what is planned for the configurator and have a say in the order it gets built.
What is coming: https://extremehosting.nl/configurator/en/roadmap/
Fifteen items, ordered by votes. Click the arrow to vote. No account, no sign-up, nothing to install. One vote per browser and network, which is good enough to order a list and deliberately no better than that.
Three of them came straight out of this thread and are credited to whoever raised them:
- Provider presets (KPN, Ziggo, Odido, Telekom, Swisscom, Free): pick your ISP and the WAN VLAN tag, PPPoE quirks and IPTV settings are filled in for you. Planned, not built, so please do not expect it this week.
- Topology for multi-device sites: tell the tool which port faces which device instead of it assuming the first one. Asked for by roe1974 and Buckeye.
- Verify the Wi-Fi 7 band settings on real hardware: rextended's question about whether
band=5ghz-berestricts the radio to that standard is still open, and the answer decides what the tool ought to emit.
The rest are things like diffing against a running /export, generating a rollback script next to the config, choosing which RouterOS version to target, SwOS support, CHR and x86, and confirming the twenty models whose interface names have never been checked on real hardware. That last one needs people who own the boxes far more than it needs code.
Requests and reports: https://extremehosting.nl/configurator/en/feedback/
If your idea is not on the list, this is what puts it there, so other people can vote for it too. Same deal, no account.
Security issues do not go here. Use https://extremehosting.nl/melden / https://extremehosting.nl/en/melden so they reach the right people.
We keep answering here. The form is for anything you want tracked and voted on; this thread stays the place for discussion, and reports posted here get the same attention they always have.
P.s. we will be adding more to that list, so many ideas you guys have we also have and more!
Addition 13-09-2026:
We are proud to present two new parts of the configurator: the Network board and the Wi-Fi plan. Both work on the same site as the list view, so what you draw ends up in the generated RouterOS scripts. Nothing is a separate drawing that you have to keep in sync by hand.
The Network board
You draw the network the way you would on a whiteboard, and the tool turns it into configuration.
- Place routers, switches and access points from the catalogue. Right-click on an empty spot to add a device, with your most used models at the top.
- Connect ports with cables. Every cable shows its speed, and loops are flagged.
- Internet connections with a main and a backup line, and presets for common providers.
- Port settings straight from the right-click menu.
- VLANs per device, which set the switch ports along the path.
- Location zones, so a second office gets its own address range.
- Tunnels as virtual ports: WireGuard, GRE, IPIP, EoIP and VXLAN, with BGP over them.
- Servers, hypervisors and virtual machines with their network cards. The VLANs you plan on them set the switch port, and IP addresses and capacity are checked.
The part we are most happy with is the traffic analysis. The board reads the generated firewall, routes, WireGuard and BGP configuration back and follows a packet through it. If a firewall rule blocks traffic between two locations or through a tunnel, you see it on the board, and you can trace the path to find the rule that stops it. It checks what the script actually does, not what you meant it to do.
The Wi-Fi plan
Most tools let you draw walls and stop there. We wanted to include the things that make the real difference in a house.
- Draw each floor with rooms, walls, doors and windows in metres.
- Every wall has a material: plasterboard, wood, aerated concrete, brick, tiles, concrete, reinforced concrete, glass, coated HR++ glass or metal. You can set the thickness, and the loss follows it.
- Drag a wall to move it and the connected walls and rooms follow. Drag an end to make it longer or shorter, or type the exact position.
- The meter cupboard, which almost no tool takes into account. Choose how many cables run through it and whether it has a metal door.
- Other obstacles like a fridge, a boiler, a mirror, a radiator or a full bookcase.
- Floors with their own height and floor type, so the signal through the ceiling counts too.
- A heatmap for 2.4, 5 and 6 GHz, coverage per room, and advice on where an extra access point helps.
- Place the access points from your site, add a MikroTik model straight from the plan, or put down a planning AP to compare spots or another brand. Double-click an access point to open it on the Network board.
The signal map is an estimate. It uses common loss figures per material and the indoor transmit limits, because the catalogue does not list transmit power or antenna gain per model. It is not a replacement for measuring on site, but it shows the weak spots before you drill a hole.
You can try it here: https://extremehosting.nl/configurator/en/mikrotik/
We are curious what you think. Feedback and bug reports are welcome here or through the feedback form in the tool.
, thanks for sharing the tool.
