Hi, I just received a new RB951 router that came with an unreadable (even with a magnifying glass) quick guide. I checked the Mikrotik website to find an online guide but had no luck. Can someone provide a link to a readable manual?
It’s not that hard to find …
I didn’t find it on www.mikrotik.com. Had no idea about the help.m … website.
Thanks, anyway.
My, oh my … that device is discontinued (note the filter settings), how did you manage to buy a new one?
Anyways, let me google that for you … it’s the first link offered.
I ordered it online, they never mentioned it was discontinued. Were there any problems with it? As long as it works, fine with me.
Nothing wrong with it, IMO it was one of greatest Mikrotiks at its time. I’ve got 2 of gigabit variant (RB951G) at home and they are fine. Great as switches, fine as 2.4GHz APs (802.11n only) with very decent range (being high-power wifi APs). A bit slow if used as routers (should handle 100Mbps just fine, they struggle if pressed for more than 200Mbps). They run ROS v7 just fine as they have decently large flash (it’s even possible to partition it for booting two different ROS versions or two different configurations making roll-back an easy task) and enough RAM.
Well, that doesn’t sound half bad.
If I connect it according to the quick guide (2 PCs, ethernet-wired, one wireless laptop and ROKU stick) that should work fine, right?
Agree with @mkx. I still have a lot of its cousin RB953’s in service — they refuse to die. As noted it’s only 802.11n but that’s still well supported by client devices.
For Wi-Fi, just make sure you set “indoor” on the Wi-Fi’s Advanced tab’s “Distance” field that be only GOTCHA from QuickSet/defaults. e.g. distance is NOT “dynamic” — that designed for long-range WISP PTP & was often source of complaints if used for “normal” Wi-Fi clients.
Similarly, since the CPU is unlikely able to route 80Mhz worth of Wi-Fi anyway & other reasons…I’d recommend set Wi-Fi channel size to only 20Mhz. That seems to keep Apple devices happy (e.g. connect quickly), and imagine same with Roku stick.
I did connect the new router and the 2 wired PCs work fine, however, wireless doesn’t seem to work.
How can I check that or turn it on?
I have installed winbox if that helps.
The whole wireless shebang should be under “Wireless” menu subtree (winbox, top part of left frame). Check the settings there.
If you can’t figure it out, then post the textual config export: open terminal window, execute command /export hide-sensitive file=anynameyouwish, fetch the resulting file off device, open it in text editor, redact any remaining sensitive information (such as serial number, wireless password an SSID, public IP addresses, etc.) and copy-paste it inside [__code] [/code] environment.
Of course I can’t figure it out, that’s why I’m seeking help here, that’s what forums are for, right?
This is what I see, assuming I did enter it correctly.
[admin@MikroTik] > /export hide-sensitive file=anynameyouwish/
[admin@MikroTik] >
in Winbox you have a Files section.
Pick up the file there (you can simply drag and drop to your computer desktop) and then process as requested.
Here it is:
# nov/09/2023 10:09:35 by RouterOS 6.45.9
# software id = VVI3-XE31
#
# model = RB951Ui-2nD
# serial number = <serial>
/interface bridge
add admin-mac=2C:C8:1B:2C:00:A6 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
country="united states" disabled=no distance=indoors frequency=auto \
installation=indoor mode=ap-bridge ssid=MikroTik-2C00AA \
wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=\
192.168.88.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=\
ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=America/Chicago
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
If you have winbox, go to the Wireless section
- change channel-width to 20Mhz (from 20/40-XX)
- change band to “2ghz-g/n” (from 2ghz-b/g/n)
- if your NOT in the United States, change you country to match your country
- for now, use channel 1, so frequency to “2412” (instead of “auto”)
Config says that device should be transmitting SSID with name MikroTik-2C00AA and that it’s an open AP, i.e. no password needed and no encryption used over the air.
Config also says it’s running ancient ROS version and that config has a minor error in config (due to error in default config): LAN IP address bound to ether2 instead of bridge.
Here’s my suggestion: netinstall your device to latest stable (v 7.12 as of today), reset to default config (untick the “keep configuration” option) and start configuring it again.
Good suggestion but you may explain the details how 
I’m not sure netinstall is needed yet – that a painful process for a beginner as first step…
But totally agree on upgrade to at least stable V6. To do this, use System > Packages, “Check for Updates” button, and then you Download&Install button.
While not as clean, the bridge will just inherit the IP address from ether2, so that should actually be harmless.
Guys, thanks for all your help. I did change the band and frequency but didn’t find the channel-width setting.
As to updating the OS, I’m a bit leery of that.
You see, before this router I had an older MikroTik and I was told in another post to update the OS, which apparently didn’t go as planned and the router was dead as a door nail. Hence the “new” box.
Sorry to be a nuisance.