I’m looking for assistance with configuring my MikroTik RB5009UG+S+IN router to work with my ISP, YouSee. YouSee uses VLAN 101 and DHCP for their connection. The ONT is connected to the router’s ether1 port. I want to ensure that all other ports (ether2-ether5) are configured optimally, preferably as a switch, to connect multiple access points.
Could someone provide a detailed and complete configuration script that includes:
Setting up VLAN 101 on ether1 for the WAN connection.
Configuring DHCP client on the WAN interface.
Setting up a bridge for the LAN ports (ether2-ether5) with hardware offloading.
Configuring a DHCP server for the LAN.
Enabling UPnP.
Setting up firewall rules for security.
Any other necessary settings for optimal performance and security.
Our focus is to help you construct a useful and safe config, supporting your efforts!
It is not to provide complete configs, as in spoon feeding which ends at age 2.
If you desire provided solutions suggest looking here: https://mikrotik.com/consultants
The default configuration RouterOS ships with (minus the VLAN 101 tagged on WAN) will get you a good stride to the end goal. if you are looking for the bare minimal configuration to get started using your own Tik router instead of the SP’s.
Tik is “known” for a steep learning curve. Compared to e.g. Ubiquity (head UBI called the “apple of network equipment” in terms of getting to use the product)
I recommend using Interface lists for matching incoming (and sometimes outgoing) interfaces in Firewall rules.
Using interface lists your can implement a concept similar to security zones, if you wish to do so.
Using interface lists can shorten your ruleset somewhat, instead of needing to match on single interfaces in firewall rules.