MikroTik Router OS V3.0 User Manual

							bgp-local-pref(integer) - local preference value for a route
bgp-med(integer) - a BGP attribute, which provides a mechanism for BGP speakers to convey to
an adjacent AS the optimal entry point into the local AS
bgp-origin(incomplete|igp|egp) - the origin of the route prefix
bgp-prepend(integer: 0..16) - number which indicates how many times to prepend AS_NAME to
AS_PATH
check-gateway(arp|ping; default:ping) - which protocol to use for gateway reachability
distance(integer: 0..255) - administrative distance of the route. When forwarding a packet, the
router will use the route with the lowest administrative distance and reachable gateway
dst-address(IP addressnetmask; default:0.0.0.0/0) - destination address and network mask, where
netmask is number of bits which indicate network number. Used in static routing to specify the
destination which can be reached, using a gateway
•0.0.0.0/0- any network
gateway(IP address) - gateway host, that can be reached directly through some of the interfaces.
You can specify multiple gateways separated by a comma , for ECMP routes
pref-src(IP address) - source IP address of packets, leaving router via this route
•0.0.0.0- pref-src is determined automatically
routing-mark(name) - a mark for packets, defined under /ip firewall mangle. Only those packets
which have the according routing-mark, will be routed, using this gateway
scope(integer: 0..255) - a value which is used to recursively lookup the nexthop addresses.
Nexthop is looked up only through routes that have scope  add gateway=10.5.8.1[admin@MikroTik] ip route> printFlags: X - disabled, A - active, D - dynamic,C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,B - blackhole, U - unreachable, P - prohibit# DST-ADDRESS PREF-SRC G GATEWAY DIS INTE...0 A S 10.1.12.0/24 r 192.168.0.253 Local1 ADC 10.5.8.0/24 Public2 ADC 192.168.0.0/24 Local3 A S 0.0.0.0/0 r 10.5.8.1 Public[admin@MikroTik] ip route>
Page 40 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							Policy Rules
Home menu level:/ip route rule
Property Description
action(drop|unreachable|lookup; default:unreachable) - action to be processed on packets
matched by this rule:
•drop- silently drop packet
•unreachable- reply that destination host is unreachable
•lookup- lookup route in given routing table
dst-address(IP addressnetmask) - destination IP address/mask
interface(name; default:) - interface through which the gateway can be reached
routing-mark(name; default:) - mark of the packet to be mached by this rule. To add a routing
mark, use /ip firewall mangle commands
src-address(IP addressnetmask) - source IP address/mask
table(name; default:) - routing table, created by user
Notes
E 	
   

 (
    	8	
 
  (	
 

   	 
 
 	 	 
  
 
 	 

 *
 ( (
  
 ! 
  	 	
 

+%+%+%+
*
   
 
2 7
7 
	  
 
 	
  
 		 
	 




	
  	
 	
 	 	
 
	
 
 	  9+  
	

 $7
7$ 
	 

  

	 
	 $7
7$ 	  

  &
	 		

  7

 

 	

	 
 
 

	 	
 $7
7$ 
	 7 
 	

 + 

 	
  

  
 ( 
  
 
  	
 

 $7
7$ 
	 
  
 	

 	
	

 	 
  
	  
 	

 	
	 *
 
  
  	
 
 &,$
59! $ $: 
   
 
 	
	 + 	(
 	 
 
 & $7
7$ 
	 	 
  

	
	 ) &
  

 
	

  	
	   
  
 
	

 
  $7
7$ 



 	 
	 
 
  

Example
 	 
  
 
	
 	 
 	
  
 /.../DD 
   



 
	
[admin@MikroTik] ip firewall mangle add action=mark-routing new-routing-mark=mt \\... chain=prerouting[admin@MikroTik] ip route> add gateway=10.0.0.254 routing-mark=mt[admin@MikroTik] ip route rule> add src-address=10.0.0.144/32 \\... table=mt action=lookup[admin@MikroTik] ip route rule> printFlags: X - disabled, I - invalid0 src-address=192.168.0.144/32 action=lookup table=mt[admin@MikroTik] ip route rule>
Application Examples
Page 41 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							Static Equal Cost Multi-Path routing
3
 
 
 
	

   	( 
 
 	
  
 

!&%!)(%+%+&1
 -
	
	 7!+%!%+%!	
!+%!%!%!
9
 
	
 
 *!$/ (  - 	
 *!$- 7 D   	

 	 
	 	
 /- &/1:  

1

	

 *$ 	 !&%!)(%+%+&1 
 *!$/ 	
 -1: 
 *!$-
*$ 	  
 

[admin@ECMP-Router] ip address> printFlags: X - disabled, I - invalid, D - dynamic# ADDRESS NETWORK BROADCAST INTERFACE0 192.168.0.254/24 192.168.0.0 192.168.0.255 Local1 10.1.0.2/28 10.1.0.0 10.1.0.15 Public12 10.1.1.2/28 10.1.1.0 10.1.1.15 Public2[admin@ECMP-Router] ip address>
+ 
 	
 
 7 
  *!$/ 	
 -  *!$-   	
 
 
 	
 /:
[admin@ECMP-Router] ip route> add gateway=10.1.0.1,10.1.1.1,10.1.1.1[admin@ECMP-Router] ip route> printFlags: X - disabled, A - active, D - dynamic,C - connect, S - static, r - rip, b - bgp, o - ospf# DST-ADDRESS G GATEWAY DISTANCE INTERFACE0 ADC 10.1.0.0/28 Public11 ADC 10.1.1.0/28 Public22 ADC 192.168.0.0/24 Local3 A S 0.0.0.0/0 r 10.1.0.1 Public1r 10.1.1.1 Public2r 10.1.1.1 Public2
Page 42 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							[admin@ECMP-Router] ip route>
Standard Policy-Based Routing with Failover
 	    
 
 	
 
 	
 	

	
 
     
 

 
 
 
 	
  
 

!&%!)(%+%+&1 
 	
	 /.../ 	
 	

 

!&%!)(%!%+&1 
 	
	 /...- * I6K/  

 
 
 
 
I6K)	  

 /;-/GC..1-D  I6K-  

 
 
 
  I6K)	 	 


 /;-/GC/.1-D 

	  I6K-
 

3
	

  
 *$ 	
[admin@PB-Router] ip address> printFlags: X - disabled, I - invalid, D - dynamic
Page 43 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							# ADDRESS NETWORK BROADCAST INTERFACE0 192.168.0.1/24 192.168.0.0 192.168.0.255 Local11 192.168.1.1/24 192.168.1.0 192.168.1.255 Local22 10.0.0.7/24 10.0.0.0 10.0.0.255 Public[admin@PB-Router] ip address>
 	( 
  
  
 
	

 

1.	 	
  

 /;-/GC..1-D 
 	$

! 	
 	
 


 /;-/GC/.1-D 
 	$

&
[admin@PB-Router] ip firewall mangle> add src-address=192.168.0.0/24 \\... action=mark-routing new-routing-mark=net1 chain=prerouting[admin@PB-Router] ip firewall mangle> add src-address=192.168.1.0/24 \\... action=mark-routing new-routing-mark=net2 chain=prerouting[admin@PB-Router] ip firewall mangle> printFlags: X - disabled, I - invalid, D - dynamic0 chain=prerouting src-address=192.168.0.0/24 action=mark-routingnew-routing-mark=net1
1 chain=prerouting src-address=192.168.1.0/24 action=mark-routingnew-routing-mark=net2[admin@PB-Router] ip firewall mangle>
2.
 	
  

 /;-/GC..1-D 
 	
	 I6K/ &/...- 	
  


/;-/GC/.1-D 
 	
	 I6K- &/...: 
 
 	
 	
 	 * I6K/  I6K- 	
& 

  
 
 
 
 
( 	
 
 I6K	
 &/.../
[admin@PB-Router] ip route> add gateway=10.0.0.2 routing-mark=net1 \\... check-gateway=ping[admin@PB-Router] ip route> add gateway=10.0.0.3 routing-mark=net2 \\... check-gateway=ping[admin@PB-Router] ip route> add gateway=10.0.0.1[admin@PB-Router] ip route> printFlags: X - disabled, A - active, D - dynamic,C - connect, S - static, r - rip, b - bgp, o - ospf# DST-ADDRESS PREFSRC G GATEWAY DISTANCE INTERFACE0 ADC 10.0.0.0/24 10.0.0.7 Public1 ADC 192.168.0.0/24 192.168.0.1 Local12 ADC 192.168.1.0/24 192.168.1.1 Local23 A S 0.0.0.0/0 r 10.0.0.2 Public4 A S 0.0.0.0/0 r 10.0.0.3 Public5 A S 0.0.0.0/0 r 10.0.0.1 Public[admin@PB-Router] ip route>
Page 44 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							ARLAN 655 Wireless Client Card
Document revision 1.2 (September 7, 2007, 8:37 GMT)
This document applies to MikroTik RouterOS V3.0
Table of Contents
TableofContents
GeneralInformation
Summary
Specifications
Installation
Example
WirelessInterfaceConfiguration
Description
PropertyDescription
Example
Troubleshooting
Description
General Information
Summary
  
 ! 
 +	
 G driver printFlags: I - invalid, D - dynamic# DRIVER IRQ IO MEMORY ISDN-PROTOCOL0 D RealTek 81391 Arlan 655 0xD000
[admin@MikroTik] driver>
Page 45 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							Wireless Interface Configuration
Home menu level:/interface arlan
Description
  	 
	
 	
  
	
  
 
 AF5 
0

 78/	
 
.


 78/
StatusActivityDescription
AmberAmber
ARLAN 655 is functional but
nonvolatile memory is not
configured
Blinking GreenDont CareARLAN 655 not registered to
an AP (ARLAN mode only)
GreenOffNormal idle state
GreenGreen FlashNormal active state
RedAmberHardware failure
RedRedRadio failure
Property Description
add-name(text; default:test) - card name (optional). Must contain less than 16 characters.
arp(disabled|enabled|proxy-arp|reply-only; default:enabled) - Address Resolution Protocol
setting
bitrate(1000|2000|354|500; default:2000) - data rate in Kbit/s
frequency(2412|2427|2442|2457|2465; default:2412) - channel frequency in MHz
mac-address(MAC address) - Media Access Control address
mtu(integer; default:1500) - Maximum Transmission Unit
name(name; default:arlanN) - assigned interface name
sid(integer; default:0x13816788) - System Identifier. Should be the same for all nodes on the
radio network. Must be an even number with maximum length 31 character
tma-mode(yes|no; default:no) - Networking Registration Mode:
•yes- ARLAN
•no- NON ARLAN
Example
[admin@MikroTik] > interface printFlags: X - disabled, D - dynamic, R - running# NAME TYPE MTU0 R outer ether 15001 X arlan1 arlan 1500[admin@MikroTik] interface> enable 1[admin@MikroTik] > interface printFlags: X - disabled, D - dynamic, R - running
Page 46 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							# NAME TYPE MTU0 R outer ether 15001 R arlan1 arlan 1500
 
	

 	
 
	

 		
 	
  
 
 


	 

[admin@MikroTik] interface arlan> printFlags: X - disabled, R - running0 R name=arlan1 mtu=1500 mac-address=00:40:96:22:90:C8 arp=enabledfrequency=2412 bitrate=2000 tma-mode=no card-name=testsid=0x13816788
[admin@MikroTik] interface arlan>
E 	
 

 
 
	
  
  

	
[admin@MikroTik] interface arlan> monitor 0registered: noaccess-point: 00:00:00:00:00:00backbone: 00:00:00:00:00:00
[admin@MikroTik] interface arlan>
!  	

 
 
 
  

	 
 	 
	

 
 
.5
 	 
++2(!)9((   
 
  
 
 	
 
 	

 (	 

++2(!)9((	




[admin@MikroTik] interface arlan> set 0 sid=0x03816788 tma-mode=yes[admin@MikroTik] interface arlan> monitor 0registered: yesaccess-point: 00:40:88:23:91:F8backbone: 00:40:88:23:91:F9
[admin@MikroTik] interface arlan>
Troubleshooting
Description
L 
 
 
	
 

 	 
	

  *1  	 	 	
 *@ 	  
 	
	

	 *
  
 
	
   	
 *@ 

  
  
 	
 

 
 
 
 	

	
	 *1  	 	 


 + 
 	 
 ( 
 *@ < 	
 *1  .:..  ./C.   


 	
•#  
 
    
  
  
  :
 43;%
 
 
 

 *@ 
 
 5*$ 

•#  :
 4<   
     
 %
 
 	
 
 *1  	 	 
 
 5*$ 

•#   

	  
  $   
  

	 

 
	
 
 8 
  -D1
						

							Interface Bonding
Document revision 1.2 (September 10, 2007, 14:35 GMT)
This document applies to MikroTik RouterOS V3.0
Table of Contents
TableofContents
Summary
QuickSetupGuide
Specifications
RelatedDocuments
Description
PropertyDescription
Notes
BondingtwoEoiptunnels
General Information
Summary
)

  	 

 
	
 	 
 		
 
 


7 

	 

 	 
 (
	 


 


  	
	 	
 	
 (
 	(
Quick Setup Guide
A
  	 
	
  	( - 9*3 
 	 
 &3
!	
3
& 	
 	

 
 
 	 	
	
	
 

 - 
  	 
   
 

1.	  
	
   

 	( *$ 	 
 

	    
	(  




	M
2.+


	 
3
!
[admin@Router1] interface bonding> add slaves=ether1,ether2
+
 
3
&
[admin@Router2] interface bonding> add slaves=ether1,ether2
3.+ 	 
 

 

	
[admin@Router1] ip address> add address=172.16.0.1/24 interface=bonding1
[admin@Router2] ip address> add address=172.16.0.2/24 interface=bonding1
4.
 
 
 3
!
[admin@Router1] interface bonding> /pi 172.16.0.2172.16.0.2 ping timeout172.16.0.2 ping timeout172.16.0.2 ping timeout172.16.0.2 64 byte ping: ttl=64 time=2 ms172.16.0.2 64 byte ping: ttl=64 time=2 ms
Page 48 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							

	
 

 

	 
 	   
 
 
 


(
 
 
 
Specifications
Packages required:system
License required:level1
Home menu level:/interface bonding
Standards and Technologies:None
Hardware usage:Not significant
Related Documents
•A
F


)

5(
7

Description
 ( 	  	(   



		
 *
 	
 
•** &	 *



 *

	 
/  
- 7 	 *



 *

	  	
 	
	
 	


 
 	

 
 	
 
 9*3  

 
 
 
  


 &
  	

 


 
 
  	 
  
 
 
	


•+$ 7 + 

 $
 	 &


  
 
 
	





  
  
 
 
    


Property Description
arp(disabled|enabled|proxy-arp|reply-only; default:enabled) - Address Resolution Protocol for
the interface
•disabled- the interface will not use ARP
•enabled- the interface will use ARP
•proxy-arp- the interface will use the ARP proxy feature
•reply-only- the interface will only reply to the requests originated to its own IP addresses.
Neighbour MAC addresses will be resolved using /ip arp statically set table only
arp-interval(time; default:00:00:00.100) - time in milliseconds which defines how often to
monitor ARP requests
arp-ip-targets(IP address; default:) - IP target address which will be monitored if
link-monitoring is set to arp. You can specify multiple IP addresses, separated by comma
down-delay(time; default:00:00:00) - if a link failure has been detected, bonding interface is
disabled for down-delay time. Value should be a multiple of mii-interval
lacp-rate(1sec|30secs; default:30secs) - Link Aggregation Control Protocol rate specifies how
often to exchange with LACPDUs between bonding peer. Used to determine whether link is up or
other changes have occured in the network. LACP tries to adapt to these changes providing failover.
link-monitoring(arp|mii-type1|mii-type2|none; default:none) - method to use for monitoring
the link (whether it is up or down)
•arp- uses Address Resolution Protocol to determine whether the remote interface is reachable
Page 49 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.