MikroTik Traffic Control with LABS

Explore how MikroTik DHCP provides IP addresses through a server pool, with options like gateway and DNS, and how to configure per-interface servers and classless routes.

Configure a MikroTik router as a DHCP server on a bridge interface, create an IP pool, assign gateway and DNS, and enable option 121 for a classless route.

Configure the MikroTik router as a dhcp server to provide option 121, using an option set and authoritative mode. Verify client ip addresses and routes from the classless static assignment.

Demonstrate DHCP snooping on a MikroTik network by building a bridge, designating the DHCP server port as trusted, and testing IP assignment from the server.

Configure dhcp relay on MikroTik routers to forward dhcp broadcasts between networks, allowing clients on one subnet to receive ip addresses from a central dhcp server.

Demystify Mikrotik packet flow by tracing how packets move from an Ethernet port to the internet, through routing and bridges, with practical flow charts and five examples.

Explore MikroTik packet flow by breaking it into routing and bridging stages, enabling you to implement mangle rules, QoS, and firewall decisions along the pipeline.

Explore MikroTik packet flow across routing and bridging, through input, output, pre-routing, and post-routing chains, with practical examples and firewall considerations.

Explore the MikroTik firewall: what it is, how to create rules, and how rule sequence and connection tracking control traffic to stop intrusions and mitigate DoS and DDoS attacks.

Explore how MikroTik RouterOS firewall filters, mangles, and marks traffic using input, output, and forward chains, including source and destination address translation, pre-routing, and connection tracking for secure access.

Explore MikroTik RouterOS connection states—new, established, related, and invalid—and how the firewall treats each, with practical lab scenarios for allowing or dropping traffic.

Configure the MikroTik firewall with connection states to allow new, established, and related traffic and drop invalid packets, with MAC address filtering for single-host access.

Apply MikroTik firewall rules to protect against ICMP flood, limiting ICMP traffic to two packets per second with a burst of five and a final drop rule.

Learn to configure a MikroTik firewall to accept essential icmp types by using an icmp chain with input/forward rules that jump to it, allowing ping, time-exceeded, and destination-unreachable messages.

Block bogon IP addresses on MikroTik firewall by grouping them in an address list, then create a forward filter to drop inbound traffic from those addresses on the internet-facing interface.

Enable port scan detection on MikroTik firewall, add offending IPs to an address list, and drop all traffic from those sources in forward and input chains.

Block syn flood and ddos with the MikroTik firewall by using forward and input rules, per-IP connection limits, tarpit, and cookies.

Learn how the MikroTik role firewall filters traffic before connection tracking using pre-routing and input/output chains, dropping ICMP from a specific source and comparing with the normal firewall.

Redirect DNS traffic to the router's DNS using destination-not rules on port 53 (tcp/udp), enabling remote requests, centralized caching, and controlled DNS queries.

Use dst-nat to translate the destination IP to the router’s IP for selected web traffic, routing sites like moskati, BBC, and Facebook through port 80.

Learn to use mangle inside the IP firewall to mark connections and related packets, enabling quality of service and bandwidth control for users.

Use MikroTik mangle rules in a pre-routing chain to increment TTL and hide the router's IP from traceroute while exploring TTL thresholds and marking for traffic control.

the lecture introduces the MikroTik router web proxy, explains its limited caching scope to HTTP, and demonstrates transparent configuration, redirect rules, and name filtering for traffic.

Configure a transparent web proxy on a MikroTik router, redirecting all http traffic to port 880, with RAM caching and optional USB storage, plus proxy access rules.

Master quality of service on MikroTik to allocate bandwidth, prioritize critical apps, and block nonessential traffic, using two configuration paths: schipperke and the countries.

Discover how HTB quality of service works on MikroTik, using parent and child queues with minimum and maximum limits, and prioritize traffic (1–8) to allocate leftover bandwidth.

Configure HTB queue tree on a MikroTik router to manage upload and download traffic. Mark connections and packets with mangle, assign per-traffic buckets for HTTP, ICMP, and other traffic.

Configure an HTB queue tree on a MikroTik router by creating download and upload queues, allocating 2 Mbps total, and dividing it into 1 Mbps per path with packet marks.

Explore MikroTik traffic control by examining queue types—fifo, sfq, red, and pcq—and learn how bursts, thresholds, and per-connection distribution shape fair, efficient bandwidth management.

Configure a PCQ queue tree on MikroTik in Lab 19 to shape internal network traffic across a bridge, with separate upload and download queues totaling two megabits and 512 kbps per device, and verify performance with speed tests on a PC and a phone.

Learn how CoDel, FQ-CoDel, and cake queue types in RouterOS v7 reduce buffering and latency, enable per-flow and per-user fairness, and support traffic shaping for gaming and calls.

Understand the settings for codel, fq_codel, and cake queues, including target, interval, limit, quantum, and diffserv options, with practical lab explanations and examples.

Explore MikroTik RouterOS v7 traffic control by applying cuddle, fq cuddle, and cake queue types in a lab, testing simple queues and a queue tree while assessing bufferbloat and latency.

Join official MikroTik trainings with Maher Haddad to become a certified micro tech engineer through hands-on labs and an in-person final exam.

Configure a DHCP server and client on MikroTik routers in part 1, create an IP pool, and capture DHCP packets to understand the discover, offer, request, and acknowledge flow.