MikroTik951G2HnD

EdgeDeviceDocumentationwithInveneoCustom
Configuration
LastUpdatedApril12,2013
1
TableofContents
AbouttheMikrotik951G2HnD 3
Overview 3
ProductFeatures 3
EngineeringGuidelines 4
BeforeyouStart 4
InitialSetup 4
OperationsandMaintenance 6
CommonConfigurationChanges 6
CommonOperations 7
UsefulResources 7
Changelog 7
2
AbouttheMikrotik951G2HnD
Overview
TheMikrotik951G2HnDisacapablerouterand,alongwithInveneoscustomconfigurationfile,
makesforanappropriateedgedeviceinmostLANscenarios.Therouterisfarmore
customizableandpowerfulthattypicalhomebaseddevices,andcheaperthanInveneos
previousoffering,theR4.Thedeviceiseasytomaintain,doesnotrequirelinuxcommandline
experienceandfeaturesawebaccessiblegraphicaluserinterface.Itservesasadirect
replacementforroutingfunctionalityofR4and,withusagegraphsavailabletotrackbandwidth
usageacrossdifferentports,offersanexceptionallevelofvalue.
TheconfiguredMikrotik951G2HnDhasthefollowingfeatures:
Apreconfiguredfirewall
Wirelessaccesspointandconfiguredwirelesssecurity,includingbruteforceand
portscanningprotection
DHCPclientandserversetup
RemoteaccessviaWinboxandSSH
Basicfilesharing
WiFiaccesspointupto20users
ProductFeatures
WirelessAccessPoint
Itisrecommendedthatnomorethan20clientsshouldbeconnectedviathewireless
simultaneouslyduetobandwidthlimitations.
FileSharing
Itisrecommendedthatthefilesharingfunctionalitybeutilizedwhenuserswishtooccasionally
accessfilesviathenetwork.Ifmorededicateduseisrequired,itisrecommendedtousea
dedicatedNAS(networkattachedserver)orlocalserversolution.
ItshouldalsobenotedthatthefilesharingcapabilitiesareonlyavailableviatheLANinterfaces.
3
EngineeringGuidelines
BeforeYouStart
Requiredfiles
InveneoMikrotik951G2HnDConfigurationandMikrotikFirmwarev5.20canbedownloaded
fromhttp://www.inveneo.org/products.
InitialSetup
LoadConfiguration
ThefollowingdirectionsconveyhowtoloadtheInveneoConfigurationonaMikroTik951G2HnD
thatissettofactorydefaults.
1. Pluganethernetcablefromport25ontheMikroTiktoacomputer
2. Openawebbrowseronthecomputerandnavigateto192.168.88.1
3. LogintotheMikroTik
a. Usernameisadmin
b. Leavepasswordblank
4. Ontheleftsidebar,selectFiles
5. ChecktheupperrightcornertoverifythattheWebfigversionis5.20
a. IfitnotWebFigv5.20,uploadtheappropriatefirmwarefileobtainedfromInveneo
(ithasa.npkextension)totheMikrotikfromtheUploadfieldatthetopofthe
page
b. Afteritsuploaded,gotoSystem>Packagesandfindthe.npkfilethatwas
uploadedandrestoreit
6. Downloadthemikrotik_951g2hnd_v2.1.1.rscfromInveneoastheMikrotik951G2HnD
ConfigurationFilev2.1athttp://www.inveneo.org/products/.
7. Uploadthemikrotik_951g2hnd_v2.1.1.rscfilethatcontainstheconfigurationfromthe
Uploadfieldattopofthepage.
8. Afterthefilegetsuploaded,selectNewTerminalontheleftsidebar.
9. Intheterminalwindow,typeimportmikrotik_951g2hnd_v2.1.1.rsc
10. Pressenterandthenwaitforaroundaminute.Youmaynowhavetogoto
192.168.100.1inyourwebbrowsertogetbacktotheconfigurationscreenastheIP
addressoftherouterhaschangedviatheconfiguration.
11. Changetheadminpassword.Thisisveryimportant.Seebelowforinstructions.
*Note:IfyouusetheresetbuttontoresettheMikrotiktodefault,youwilllosetheInveneoconfigurationsettingsand
willneedtoreloadtheInveneoconfigurationfiletorecoverthem.
4
InitialSettings
Thesearetheinitialsettingsothedevicewiththelatestversionofthecustomconfigurationfile
installed.
InterfaceSettings
WANIP:<ReceivedviaDHCP>
LANIP:192.168.100.1,DHCPserverenabledfortherange192.168.100.100254
Port# Function
1 WAN
2 LAN
3 LAN
4 LAN
5 LAN
WirelessnetworkSchool LAN
SecuritySettings
Foraddedsecurityandprotection,afirewallhasbeeninstatedontheWANinterface.The
followingsettingsareinplacethatshouldbenoted:
Winbox,andSSHarepermittedviaWANinterface
Telnetaccessisdisabled
Bruteforcepreventionisenabled
After3invalidsshloginattempts,theusersIPisbannedfor10days
Portscanprotection
BlockIPsofusersscanningports
DenialofService(DoS)protection
Settothrottleexcessivepings
NATisenabledontheWANinterface
WirelessNetworkSettings
Awirelessnetworkwiththefollowingsettings:
SSID:school
WPA2security:enabled
Password:1nvene00
5
OperationsandMaintenance
CommonConfigurationChanges
Afewtypicalthingsusersmaywanttodo.TheinstructionsassumetheInveneoConfiguration
hasbeenloaded.
ChangeSSID
1. Pluganethernetcablefromport25ontheMikroTiktoacomputer
2. LogintoWebFigat192.168.100.1
3. Onthepagethatappears,oneshouldbeabletoseetheSSIDfieldundertheWireless
column
4. ChangetheSSIDtowhatispreferredandthenselectApplyConfiguration
ChangeWifiSecurityPassword
Thefollowingisreferringtohowtochangethepasswordthatisneededtojointhewireless
network:
1. Pluganethernetcablefromport25ontheMikroTiktoacomputer
2. LogintoWebFigat192.168.100.1
3. Onthepagethatappears,oneshouldbeabletoseetheSharedKeyfieldunderthe
Wirelesscolumn
4. InputthepreferredpasswordandselectApplyConfiguration
ChangeMikroTikLoginPassword
ThefollowingisreferringtohowtochangethepasswordthatisneededtologintotheMikrotik:
1. Pluganethernetcablefromport25ontheMikroTiktoacomputer
2. LogintoWebFigat192.168.100.1
3. Ontheleftsidebar,selectSystemthenPassword
4. FortheOldPasswordfield,typeinthepasswordusedtologintoWebFig
5. FortheNewPasswordfield,typeyourpreferredpassword.
6. RetypethenewpasswordintheConfirmPasswordfield,thenselectChange
CommonOperations
6
Connectdevices
JoinnetworkdevicestoeithertheethernetLANportsorthewirelessnetwork.
UsinganExternalHardDrive
TheMikroTik951GcanutilizeanexternalharddriveusingtheSMBprotocolwhichisthe
standardprotocolforWindowsFileSharing.Thisallowsforthesharingoffilestoallusersthat
areconnectedviathelocalareanetwork.Toenablethisfeature,dothefollowing:
1. InsertanexternalUSBstoragedeviceintotheUSBportontheMikroTik
2. Pluganethernetcablefromport25ontheMikroTiktoacomputer
3. LogintoWebFigat192.168.100.1
4. Ontheleftsidebar,selectSystemthenStores
5. SelecttheDiskstab
6. Clickonthedevicewiththenameusb1andthenselectFormat
a. Note:Alldatawillbelost.Pleasebackupbeforedoingthis.
7. Mapthedrivetoyouroperatingsystem
a. ForWindows7
i. OpentheComputerwindowfromtheStartMenuandthenrightclickand
selectAddnetworklocation
ii. Typein\\192.168.100.1\
Accessingtheusagegraphs
GraphingwillbeenabledontheLANportatthefollowingaddress:http://192.168.100.1/graphs/
UsefulResources
Manufacturerinfo:http://routerboard.com/RB951G2HnD
Changelog
2013.02.20Initialproductanddocumentationrelease
7