Page 1 of 1

RS125-24G-1S-2HnD-IN as a simple router config needed

Posted: Fri Jun 06, 2014 3:17 pm
by rentbox

can anyone share a config for RS125-24G-1S-2HnD-IN so it behaves as a simple router?
Ether1: WAN DHCP client ( DSL Router/Modem IP:
Ether2-24: LAN DHCP server, switched

- also this network will have VoIP traffic, i want to disable all firewall for clean testing.
- also change the network IPs range from 192.168.88.* to 192.168.1.*


Re: RS125-24G-1S-2HnD-IN as a simple router config needed

Posted: Fri Jun 06, 2014 11:29 pm
by maomanna
Why did you bought this kind of router then?

Use your ISP router and an unmanaged switch.
Thats simple

Re: RS125-24G-1S-2HnD-IN as a simple router config needed

Posted: Sat Jun 07, 2014 4:12 pm
by rentbox
here is what i want to do:

- i have a DSL Router-Modem connected to my ISP. the DSL Router IP Address is , i have disabled the DHCP on this router.

- i have connected the mikrotik ETH1 to the DSL Router ETH1

- i have 5 Desktops connected to ETH-2-3-4-5 ( many will be added later ).

- i have 2 Access Points connected to ETH6 & ETH7, and many mobile clients will connect to the internet from these Access Points ( will add more later ).

- the mikrotik also have a built in WiFi, many mobile clients will use it for connection.

how do i configure this setup ?

i have tryed many things, but field, now i factory reset the mikrotik, the current IP address is

i want my lan to be in the range 192.168.1.*
also i don't want any firewall on, i want any client connected to ping and browse any other client on the network, i will add firewalls later after i install the VoIP server and configure every thing.

Re: RS125-24G-1S-2HnD-IN as a simple router config needed

Posted: Sun Jun 08, 2014 7:11 pm
by Etz
Removed all the Multicast (IPTV) & VPN related config, also specific config to my setup is removed, including Firewall rules.
And pretty much this is what was left and should do it:

ros code

/interface ethernet
set [ find default-name=ether1 ] name=ether01-inet-gw
set [ find default-name=ether2 ] name=ether02-lan-master
set [ find default-name=ether3 ] master-port=ether02-lan-master name=\
set [ find default-name=ether4 ] master-port=ether02-lan-master name=\
set [ find default-name=ether5 ] master-port=ether02-lan-master name=\
set [ find default-name=ether6 ] master-port=ether02-lan-master name=\
set [ find default-name=ether7 ] master-port=ether02-lan-master name=\
set [ find default-name=ether8 ] master-port=ether02-lan-master name=\
set [ find default-name=ether9 ] master-port=ether02-lan-master name=\
set [ find default-name=ether10 ] master-port=ether02-lan-master name=\
set [ find default-name=ether11 ] master-port=ether02-lan-master name=\
set [ find default-name=ether12 ] master-port=ether02-lan-master name=\
set [ find default-name=ether13 ] master-port=ether02-lan-master name=\
set [ find default-name=ether14 ] master-port=ether02-lan-master name=\
set [ find default-name=ether15 ] master-port=ether02-lan-master name=\
set [ find default-name=ether16 ] master-port=ether02-lan-master name=\
set [ find default-name=ether17 ] master-port=ether02-lan-master name=\
set [ find default-name=ether18 ] master-port=ether02-lan-master name=\
set [ find default-name=ether19 ] master-port=ether02-lan-master name=\
set [ find default-name=ether20 ] master-port=ether02-lan-master name=\
set [ find default-name=ether21 ] master-port=ether02-lan-master name=\
set [ find default-name=ether22 ] master-port=ether02-lan-master name=\
set [ find default-name=ether23 ] master-port=ether02-lan-master name=\
set [ find default-name=ether24 ] master-port=ether02-lan-master name=\
set [ find default-name=sfp1 ] disabled=yes
/ip pool
add name=dhcp-lan-pool ranges=
/ip dhcp-server
add address-pool=dhcp-lan-pool disabled=no interface=ether02-lan-master \
    lease-time=1h name=dhcp-lan
/ip address
add address= interface=ether02-lan-master network=
/ip dhcp-client
add comment=Internet dhcp-options=hostname,clientid disabled=no interface=\
/ip dhcp-server network
add address= dns-server= domain=local.lan \
    gateway= netmask=24
/ip dns
set allow-remote-requests=yes cache-size=8192KiB max-udp-packet-size=4096
/ip firewall nat
add action=masquerade chain=srcnat comment=Local-Lan out-interface=\
But be careful, as there is no Firewall rules present on this config, so nothing protects your network and Router. :!:

As mine doesnt have Wireless (CRS125-24G-1S-RM), I have absolutely no idea about the wireless config part ;)

But I suspect that you have to create a Bridge interface and assign that IP on that,
instead of ether2-lan-master and attach ether2 & wireless to it, effectively bridging them both together.
All the other part of the config should be pretty much same.