MPLS L3VPN is how service providers deliver private, isolated routing to customers over one shared core network. It is also one of the least documented corners of RouterOS v7 — the syntax changed significantly from v6, and most existing guides still show the old command structure. This guide covers a full MPLS L3VPN build on…
NAT is the first thing every MikroTik router needs to reach the internet, and the first thing every misconfigured router gets wrong. One missing rule, and the whole LAN loses connectivity. One rule in the wrong order, and port forwarding silently fails. This guide covers NAT on RouterOS 7 from the ground up: masquerade, source…
Every network design conversation eventually hits this question: does this segment need a Layer 2 switch, or a Layer 3 switch? Get it wrong and you either overpay for routing features that sit unused, or you bolt a router onto a flat network that needed segmentation from day one. This guide breaks down what each…
GRE is the tunnel protocol you reach for when a VPN alone will not do the job. It carries routing protocols across the internet, connects two private networks over a public link, and gives BGP peers a stable path independent of the underlying ISP topology. MikroTik GRE tunnel is simple to configure — the hard…
WinBox shows you what a router looks like. The CLI shows you what a router is doing. When a ticket says “the network is slow” or “it works sometimes,” the GUI runs out of answers fast — the CLI does not. This guide covers advanced diagnostic techniques on RouterOS: a troubleshooting methodology, resource and process…
IPv6 is not optional anymore. ISPs delegate it by default, mobile carriers run IPv6-only cores, and IPv4 exhaustion keeps pushing more networks toward dual-stack. If your MikroTik router still runs IPv4-only, you are one ISP policy change away from a support ticket you cannot explain. This guide covers a full IPv6 deployment on RouterOS: addressing,…
When securing your computer network, using a software firewall is essential. A software firewall is a program that monitors and controls the incoming and outgoing network traffic based on predetermined security rules. It helps prevent unauthorized access and protects your system from malware and cyber-attacks. Built-in operating system firewalls have improved significantly since 2023, but…
Your network has a public attack surface. Shodan already scanned it. The question is whether you checked before someone else did. Shodan indexes internet-connected devices, not web pages. It crawls open ports and stores the raw banner each device returns. That includes routers, firewalls, VPN concentrators, IoT sensors, and databases your team forgot were exposed….
DNS problems cause more network outages than most engineers admit. A user reports “the internet is down.” You check the gateway. You check the firewall. Everything routes fine. Then you find it: a DNS server that never answers, or answers with the wrong record. Wireshark shows you the DNS conversation packet by packet. This guide…
You manage MikroTik devices through WinBox and track IP addresses in a spreadsheet. You configure each CRS switch and CCR router by hand. This process does not scale. Config drift creeps in. Documentation goes stale. One typo in a VLAN ID breaks a site.This guide shows you how to fix that problem. You will connect…
Please support our work…
T-Shirts, Mugs and more for Network and Systems Engineers