Hi everyone. I am a privacy and security enthusiast. I tinker when I have time, which is almost never, but I try to have sanitary online privacy and security habits. After some research before attempting to build my first home lab, I landed on Mikrotik. I knew the learning curve would be steep base…

Read and digest this excellent guide, considered THE Vlan bible around her. [image] Using RouterOS to VLAN your network Useful user articles Title: Using RouterOS to VLAN your network Welcome: This article is for system integrators, network administrators,…

First of all, yes you need VLANs. You should first create a rough network plan with Draw.io , this would be the easiest way for understanding, and a list of networks with the corresponding VLAN IDs. Examples for VLAN IDs: 200 = MGMT (For managing the network components) 300 = FAMILY 400 = SERVER …

Agree on the "VLAN bible" being a good read. I'll note that some things have become simpler WRT to VLANs. Overall VLAN are the well-trotted path to isolating devices in a home networks. For the real pandantic, you can also layer on /interface/bridge/filters, which operate at the ethernet level, i…

I disagree on a few point of @SpeedHeed [image] SpeedHeed: Since you are still a beginner, I recommend not using a Mikrotik as a firewall, but rather OPNSense. I'm not sure introducing more devices helps in learning RouterOS. Certainly OPNSense is more powerful and simpler... But there is n…

[image] helpmytik: I don’t know if I actually REQUIRE VLANs or not, but I have been 100% unsuccessful at every attempt so far. If this is your first time using vlans, I recommend https://www.practicalnetworking.net/index/vlans-index/ which has a Cisco orientation, but covers the concept of vl…

Thanks! Yes, the RB5009 is getting an IP from the Flint 2 router. I'm going to read up in the info for shared. Thanks.

Thanks for the info! I knew of back to home, but I couldn’t find it in RouterOS.

Thank you! I’ll read the thread.

Thank you for the wealth of information.

BackToHome is under IP > Cloud, in "BTH VPN" tab... you change it to "enable" at top, hit OK. It will show the WG configuration in the "BTH WireGuard" tab from IP > Cloud - which you can import in standard WG app, or use QR code from standard WireGuard apps. You'd need to configure your WAN first…

You've Never Seen a Noob Like Me

RouterOS Beginner Basics

holvoetn January 11, 2026, 9:36pm 2

Read and digest this excellent guide, considered THE Vlan bible around her.