best Basic Mikrotik Routers security primer
- 1. Basic MikroTik Router’s Security Tsoft IT 1
- 2. Presented by: Titas Sarker Founder (Tsoft IT) System administrator (Enosis Solutions) Certificates:(MTCNA,MTCRE,RHCE) Basic MikroTik Router’s Security Tsoft IT 2
- 3. LCMC Agenda Page no Reason for security 04 How to secure our network? 05 Administrative Users credentials 06-07 Winbox default ports 08-09 MAC-access restriction 10-11 Site restriction 12-15 Virus port filtering 16-17 Log server 19-21 Reference 22 Conclusion 23 3
- 4. Reason for security 4 Basic MikroTik Router’s Security Tsoft IT Remedy unauthorized people to access to the network Intruder detection purpose Taking necessary action for fix the issue. Protect information and infrastructure.
- 5. How to secure our network? 5 Basic MikroTik Router’s Security Tsoft IT Administrative Users credentials Winbox default ports MAC-access restriction Site restriction Virus port filtering Log server
- 6. Administrative Users credentials Basic MikroTik Router’s Security Tsoft IT 6 Mikrotik router’s default username is “admin”. If it is kept to the default username, it can be assumed very easily. So it is recommended to change the username and set a strong password for the admin privileged user.
- 7. Administrative Users credentials Basic MikroTik Router’s Security Tsoft IT 7 How to change credentials? Log in Winbox Click on System Click on Users Note: user & Password
- 8. Winbox default ports Basic MikroTik Router’s Security Tsoft IT 8 Usually we use Winbox application to log in to MikroTik router’s admin panel. Winbox runs on default port 8291. If the default port is changed to a custom port it would require the exact port number to browse the admin panel. It will be a secured way when logging in using IP, username and password.
- 9. Winbox default ports Basic MikroTik Router’s Security Tsoft IT 9 How to change defaults ports numbers? Log in Winbox Click on IP Click on Services
- 10. MAC-access restriction Basic MikroTik Router’s Security Tsoft IT 10 MAC access RouterOS has built-in options for easy management access to network devices. But the particular services should be shutdown on production networks for security purpose.
- 11. MAC-access restriction Basic MikroTik Router’s Security Tsoft IT 11 How we can configure it? Log in Winbox Click on Tools Select Winbox Interfaces Finally disable “all”
- 12. Site restriction Basic MikroTik Router’s Security Tsoft IT 12 How to configure it? Log in Winbox Click on IP Click on Firewall Click on layer 7 Protocols ’+’ Mikrotik router can be used to prevent access to selected websites if required (i.e. adult sites, social media, entertainment websites etc.).
- 13. Site restriction Basic MikroTik Router’s Security Tsoft IT 13 Filter rule> General>src addreess
- 14. Site restriction Basic MikroTik Router’s Security Tsoft IT 14 Advanced>Layer7 protocol
- 15. Site restriction Basic MikroTik Router’s Security Tsoft IT 15 Action>drop
- 16. Site restriction result Basic MikroTik Router’s Security Tsoft IT 16 So that if he/she try to visit Facebook now. He/she will not able to visit it.
- 17. Firewalls filter keep outside threats away from sensitive data available inside the network. Whenever different networks are joined together, there is always a threat that someone from outside of your network will break into your LAN. MikroTik router’s firewall easily filter virus ports and we can drop it. Basic MikroTik Router’s Security Tsoft IT 17 Virus port filtering
- 18. Basic MikroTik Router’s Security Tsoft IT 18 How to block all the virus ports in MikroTik? Log in Winbox Click on IP Click on Firewall Filter rules “+” Virus port filtering
- 19. Log server Basic MikroTik Router’s Security Tsoft IT 19 How to configure it? Log in Winbox Click on System Click on Logging Click on Actions MikroTik RouterOS is capable of logging various system events and status information. As well, MikroTik router’s Logging is configured for view who is visiting which website. If anyone tries to visit any unauthorized site then we can easily track it.
- 20. Log server Basic MikroTik Router’s Security Tsoft IT 20 Steps: Log in Winbox Click on System Click on Logging Click on Rules
- 21. Log server’s output Basic MikroTik Router’s Security Tsoft IT 21 Here we are use Kiwi Syslog for view purpose
- 22. Reference Basic MikroTik Router’s Security Tsoft IT 22 MikroTik wiki (https://wiki.mikrotik.com/wiki/) MikroTik website(https://mikrotik.com/) MikroTik Forum (https://forum.mikrotik.com/)
- 23. Conclusion Basic MikroTik Router’s Security Tsoft IT 23 Awareness is the key to security.
- 24. THANK YOU MUM, Dhaka, Bangladesh 24 www.tsoftit.com