MikrotTik setup
===============

Tutorials:
https://www.youtube.com/user/ISPSupplies/playlists
https://www.youtube.com/user/rodrick4u/playlists

Router a wireless station & an access point bridge
https://www.youtube.com/watch?v=SrW4OVa84O8


Default config:
    ETH 1           WAN + firewall
    ETH 2, 3, ...   LAN

    192.168.88.1 / 24
    admin / (no password)


--------------------------------------------------

1)  Quick Set
    https://wiki.mikrotik.com/wiki/Manual:Quickset

    CAP: Controlled Access Point, managed by a centralised CAPsMAN server.
    CPE: Client device, which will connect to an Access Point (AP) device.
    HomeAP: The default Access Point config page for most home users.
    HomeAP dual: Dual band devices (2GHz/5GHz). The default Access Point config page for most home users.
    Home Mesh: Made for making bigger WiFi networks. Enables the CAPsMAN server in the router,
               and places the local WiFi interfaces under CAPsMAN control.
    PTP Bridge AP: When you need to transparently interconnect two remote locations together in the same network,
                   set one device to this mode, and the other device to the next (PTP Bridge CPE) mode.
    PTP Bridge CPE: When you need to transparently interconnect two remote locations together in the same network,
                    set one device to this mode, and the other device to the previous (PTP Bridge AP) mode.
    WISP AP: Similar to the HomeAP mode, but provides more advanced options and
             uses industry standard terminology, like SSID and WPA.

2)  Interfaces
        Interface (do jména přidat význam)
        Interface List (pojmenování WAN, LAN)

    Bridge
    Switch

    Wireless
        Security Profiles
        Interfaces
            ap bridge

3)  IP addresses
    Routes (Gateway)
        0.0.0.0/0 to ISP (Internet Service Provider)

4)  DHCP Client

5)  DHCP Server
        [ DHCP Setup ]

6)  DNS
        [ ] Allow Remote Requests (nepovolovat, bezpečnostní riziko)

7)  Firewall
        Filter Rules
        NAT
        Mangle
        Address List


Default config for HomeAP:

/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface-list=!LAN comment=drop

/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN


--------------------------------------------------

1)  PPP
        PPTP Server
        L2TP Server

2)  Queues
        WAN Interface:
            Upload Max Limit        (download)
            Download Max Limit      (upload)


--------------------------------------------------

1)  Neighbors (kde bude router viditelný)

2)  Services
        ssh, winbox

3)  Clock
        SNTP Client
            ntp.nic.cz
            ntp.cesnet.cz

        Clock
            Europe/Prague

        NTP Server (doinstalovat balíček)

4)  Identity

5)  Password
    Users


--------------------------------------------------

1)  Backup
        Files / Backup


--------------------------------------------------

1)  Update
        Packages / Check For Updates

2)  Reset Configuration
        https://wiki.mikrotik.com/wiki/Manual:Reset_button

        Po zapnutí držet resetovací tlačítko 5 sekund (než se rozblikají LED)