Noob trying to play ISP.

RouterOS Beginner Basics
1

Hi there!

I am having some problems with my setup. Some background: I am using this router switch combo to provide internet access to apartments. RJ45 port 1 goes to the modem, RJ45 port 2 is for management, everything else is for apartments but till now i have only set up RJ45 10 till 24 for that. I’m trying to make it so that every apartment has its own subnet that can talk to others on that subnet. so that if someone for example has their router in AP mode their chromecast and whatnot still function correctly.

Any constructive criticism is welcome, this is my first time doing anything with this kind of pro hardware, all previous experience is with openwrt. I configured this all via winbox :slight_smile:

# dec/23/2019 14:02:47 by RouterOS 6.46.1
/interface ethernet
set [ find default-name=ether1 ] loop-protect=on name=1_WAN
set [ find default-name=ether2 ] loop-protect=on name=2_Man
set [ find default-name=ether3 ] disabled=yes loop-protect=on name=3
set [ find default-name=ether4 ] disabled=yes name=4
set [ find default-name=ether5 ] disabled=yes loop-protect=on name=5
set [ find default-name=ether6 ] disabled=yes loop-protect=on name=6
set [ find default-name=ether7 ] disabled=yes loop-protect=on name=7
set [ find default-name=ether8 ] disabled=yes loop-protect=on name=8
set [ find default-name=ether9 ] disabled=yes loop-protect=on name=9
set [ find default-name=ether10 ] loop-protect=on name=10_234
set [ find default-name=ether11 ] loop-protect=on name=11_234A
set [ find default-name=ether12 ] loop-protect=on name=12_234B
set [ find default-name=ether13 ] loop-protect=on name=13_236
set [ find default-name=ether14 ] loop-protect=on name=14_236A
set [ find default-name=ether15 ] loop-protect=on name=15_236B
set [ find default-name=ether16 ] loop-protect=on name=16_236C
set [ find default-name=ether17 ] loop-protect=on name=17_236D
set [ find default-name=ether18 ] loop-protect=on name=18_236E
set [ find default-name=ether19 ] loop-protect=on name=19_236F
set [ find default-name=ether20 ] loop-protect=on name=20
set [ find default-name=ether21 ] disabled=yes loop-protect=on name=21
set [ find default-name=ether22 ] disabled=yes loop-protect=on name=22
set [ find default-name=ether23 ] disabled=yes loop-protect=on name=23
set [ find default-name=ether24 ] disabled=yes loop-protect=on name=24
set [ find default-name=sfp1 ] disabled=yes loop-protect=on
/interface list
add name=Appartementen
add name=WAN
add name=Management
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=pool10 ranges=10.10.10.11-10.10.10.254
add name=pool11 ranges=10.10.11.12-10.10.11.254
add name=pool12 ranges=10.10.12.13-10.10.12.254
add name=pool13 ranges=10.10.13.14-10.10.13.254
add name=pool2 ranges=10.10.2.3-10.10.2.254
add name=pool3 ranges=10.10.3.4-10.10.3.254
add name=pool4 ranges=10.10.4.5-10.10.4.254
add name=pool5 ranges=10.10.5.6-10.10.5.254
add name=pool6 ranges=10.10.6.7-10.10.6.254
add name=pool7 ranges=10.10.7.8-10.10.7.254
add name=pool8 ranges=10.10.8.9-10.10.8.254
add name=pool9 ranges=10.10.9.10-10.10.9.254
add name=pool14 ranges=10.10.14.15-10.10.14.254
add name=pool15 ranges=10.10.15.16-10.10.15.254
add name=pool16 ranges=10.10.16.17-10.10.16.254
add name=pool17 ranges=10.10.17.18-10.10.17.254
add name=pool18 ranges=10.10.18.19-10.10.18.254
add name=pool19 ranges=10.10.19.20-10.10.19.254
add name=pool20 ranges=10.10.20.21-10.10.20.254
add name=pool21 ranges=10.10.21.22-10.10.21.254
add name=pool22 ranges=10.10.22.23-10.10.22.254
add name=pool23 ranges=10.10.23.24-10.10.23.254
add name=pool24 ranges=10.10.24.25-10.10.24.254
/ip dhcp-server
add address-pool=pool10 bootp-support=dynamic disabled=no interface=10_234 \
    name=dhcp10
add address-pool=pool11 bootp-support=dynamic disabled=no interface=11_234A \
    name=dhcp11
add address-pool=pool12 bootp-support=dynamic disabled=no interface=12_234B \
    name=dhcp12
add address-pool=pool13 bootp-support=dynamic disabled=no interface=13_236 \
    name=dhcp13
add address-pool=pool14 bootp-support=dynamic disabled=no interface=14_236A \
    name=dhcp14
add address-pool=pool15 bootp-support=dynamic disabled=no interface=15_236B \
    name=dhcp15
add address-pool=pool16 bootp-support=dynamic disabled=no interface=16_236C \
    name=dhcp16
add address-pool=pool17 bootp-support=dynamic disabled=no interface=17_236D \
    name=dhcp17
add address-pool=pool18 bootp-support=dynamic disabled=no interface=18_236E \
    name=dhcp18
add address-pool=pool19 bootp-support=dynamic disabled=no interface=19_236F \
    name=dhcp19
add address-pool=pool20 bootp-support=dynamic disabled=no interface=20 name=\
    dhcp20
add address-pool=pool2 bootp-support=dynamic disabled=no interface=2_Man name=\
    dhcp2
/ip neighbor discovery-settings
set discover-interface-list=all
/interface list member
add interface=10_234 list=Appartementen
add interface=11_234A list=Appartementen
add interface=12_234B list=Appartementen
add interface=13_236 list=Appartementen
add interface=14_236A list=Appartementen
add interface=15_236B list=Appartementen
add interface=16_236C list=Appartementen
add interface=17_236D list=Appartementen
add interface=18_236E list=Appartementen
add interface=19_236F list=Appartementen
add interface=20 list=Appartementen
add interface=21 list=Appartementen
add interface=22 list=Appartementen
add interface=23 list=Appartementen
add interface=24 list=Appartementen
add interface=1_WAN list=WAN
add interface=2_Man list=Management
/ip address
add address=10.10.10.0/24 interface=10_234 network=10.10.10.0
add address=10.10.11.0/24 interface=11_234A network=10.10.11.0
add address=10.10.12.0/24 interface=12_234B network=10.10.12.0
add address=10.10.13.0/24 interface=13_236 network=10.10.13.0
add address=10.10.14.0/24 interface=14_236A network=10.10.14.0
add address=10.10.15.0/24 interface=15_236B network=10.10.15.0
add address=10.10.16.0/24 interface=16_236C network=10.10.16.0
add address=10.10.17.0/24 interface=17_236D network=10.10.17.0
add address=10.10.18.0/24 interface=18_236E network=10.10.18.0
add address=10.10.19.0/24 interface=19_236F network=10.10.19.0
add address=10.10.20.0/24 interface=20 network=10.10.20.0
add address=10.10.21.0/24 interface=21 network=10.10.21.0
add address=10.10.22.0/24 interface=22 network=10.10.22.0
add address=10.10.23.0/24 interface=23 network=10.10.23.0
add address=10.10.24.0/24 interface=24 network=10.10.24.0
/ip dhcp-client
add disabled=no interface=1_WAN
/ip dhcp-server alert
add disabled=no interface=10_234 valid-server=CC:2D:E0:8E:78:A5
add disabled=no interface=11_234A valid-server=CC:2D:E0:8E:78:A6
add disabled=no interface=12_234B valid-server=CC:2D:E0:8E:78:A7
add disabled=no interface=13_236 valid-server=CC:2D:E0:8E:78:A8
add disabled=no interface=14_236A valid-server=CC:2D:E0:8E:78:A9
add disabled=no interface=15_236B valid-server=CC:2D:E0:8E:78:AA
add disabled=no interface=16_236C valid-server=CC:2D:E0:8E:78:AB
add disabled=no interface=17_236D valid-server=CC:2D:E0:8E:78:AC
add disabled=no interface=18_236E valid-server=CC:2D:E0:8E:78:AD
add disabled=no interface=19_236F valid-server=CC:2D:E0:8E:78:AE
add disabled=no interface=20 valid-server=CC:2D:E0:8E:78:AF
/ip dhcp-server network
add address=10.10.2.0/24 dns-server=10.10.2.2 gateway=10.10.2.2
add address=10.10.10.0/24 gateway=10.10.10.10
add address=10.10.11.0/24 gateway=10.10.11.11
add address=10.10.12.0/24 gateway=10.10.12.12
add address=10.10.13.0/24 gateway=10.10.13.13
add address=10.10.14.0/24 gateway=10.10.14.14
add address=10.10.15.0/24 gateway=10.10.15.15
add address=10.10.16.0/24 gateway=10.10.16.16
add address=10.10.17.0/24 gateway=10.10.17.17
add address=10.10.18.0/24 gateway=10.10.18.18
add address=10.10.19.0/24 gateway=10.10.19.19
add address=10.10.20.0/24 gateway=10.10.20.20
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/lcd
set backlight-timeout=never default-screen=informative-slideshow
/lcd interface
set "1_WAN" timeout=1s
set "2_Man" timeout=1s
set "4" timeout=1s
set "5" timeout=1s
set "6" timeout=1s
set "7" timeout=1s
set "8" timeout=1s
set "9" timeout=1s
set "10_234" timeout=1s
set "11_234A" timeout=1s
set "12_234B" timeout=1s
set "13_236" timeout=1s
set "14_236A" timeout=1s
set "15_236B" timeout=1s
set "16_236C" timeout=1s
set "17_236D" timeout=1s
set "18_236E" timeout=1s
set "19_236F" timeout=1s
set "21" timeout=1s
set "22" timeout=1s
set "23" timeout=1s
set "24" timeout=1s
set sfp1 timeout=1s
/lcd screen
set 0 timeout=1s
set 1 timeout=1s
set 2 timeout=1s
set 3 timeout=1s
set 4 timeout=1s
set 5 timeout=1s
/system clock
set time-zone-name=Europe/Amsterdam
2 
/ip address
add address=10.10.10.0/24
  • you should add an address iteself instead of network 0 address;
  1. Change empty space to default firewall rules as minimum security;
    3)And why you keep switching 4th octet of gateways forward? :slight_smile: Just set it to 1 and do not forget to exclude them from dhcp pools.
3

Given the number of ports in the config this is probably a CRS.
Remember that a CRS is not intended to do high-volume routing like this!
It is a VLAN switch with some routing capability, not a fast router with 24 ports.
Depending on what speed your internet access is and how much firewalling you add, you will probably quickly saturate the CPU.