Starting an ISP with MikroTik & OPNsense as DNS Filtering

Name: Starting an ISP with MikroTik & OPNsense as DNS Filtering
Rating: 4.5 (689 reviews)

Building an ISP with MikroTik to distribute internet via different protocols such as DHCP & PPPoE using VLAN's & QOS

Created byMy Network Training

Last updated 6/2025

English

English [Auto],Korean [Auto],

What you'll learn

Understanding in depth what is DHCP and how it works
Understanding in depth what is PPPoE and how it works
Understanding how to use DHCP and PPPoE to distribute internet to customers
Understanding how to use Mangle with QOS queeing to assign each customer a bandwidth speed on upload and download
Understanding what VLAN is and how to configure it on MikroTik
Understanding what is the function of Access ports and Trunk ports when using VLAN's
Understanding how to use VLAN together with DHCP and PPPoE to distribute internet to customers
Understanding what is the need of Network Address Translation (NAT) and why we need to use it
Understand the TCP MSS Clamping
Install and configure OPNsense for DNS Filtering

Course content

5 sections • 17 lectures • 3h 13m total length

Understand how DHCP client and Server work7:39
Configure DHCP server and Client on the MikroTik and connect the 1st customer12:30
Adding more customers to the ISP12:49
Discover how to add a new customer in MikroTik by isolating them with separate interfaces, configuring the DHCP client and NAT, and preparing for VLAN separation.

Understand the usage of VLANs in a network14:58
Learn how VLANs segment a network, create separate DHCP scopes per VLAN, and distinguish trunk and access ports for scalable ISP deployments with MikroTik devices.
Provide internet via DHCP to 2 different customers using VLANs18:36
In this LAB, I am going to show how you can configure the MainRouter to have internet and to offer DHCP IP addresses to the routers of Customer1 and Customer 2
Disallow communications between customers on VLANs6:23
Learn to block inter-VLAN traffic between customers with a firewall filter on the ISP router, and understand router on a stick and how the router routes between VLANs.

Assign a bandwidth for each customer using Simple Queues13:39
Learn to assign per-client bandwidth with Mikrotik simple queues after configuring dhcp with vlans and packages, then compare simple queues with queue trees and radius server.
Assign a bandwidth for each customer using Queue trees17:03
Assign per-customer bandwidth with queue trees (Q3), using prerouting and postrouting labels for upload and download, and verify two customers get 2 Mbps (1 Mbps up, 1 Mbps down).

What is PPPoE protocol and how it works11:31
Explain PPPoE as point-to-point over Ethernet that authenticates customers with usernames and passwords, creates isolated tunnels, assigns a single IP, and supports radius, billing, and QoS.
Configure the PPPoE server on MikroTik in a correct way using TCP MSS Claming17:05
Configuring the Switch to pass the PPPoE VLAN and connect the customer using PPP7:15
Configure the switch to pass VLAN 30 via trunk and access ports, enable PoE client, disable DHCP on the customer edge, and verify PPP connectivity and speed.

Introduction to OPNsense as a Firewall for our ISP10:14
Explore OPNsense as an open source firewall and router for an ISP, enabling DNS filtering, stateful packet filtering, intrusion detection and prevention, and VPN, accessible via a user-friendly web interface.
What will be the main fuction of the OPNsnese and where to install it5:58
Configure the OPNsense device as a DNS filtering firewall between the ISP router and the LAN, with Mikrotik redirecting DNS to enforce content filtering for all devices.
First time connecting to the OPNsense7:26
Connect to OPNsense via the web interface, log in with the default root/open credentials, and verify the LAN and WAN interfaces to enable dns filtering in this course.
Configure the OPNsense device as a DNS Filtering appliance6:11
Configure the OPNsense device as a DNS filtering appliance by enabling unbound DNS and applying a blocklist to filter ads, malware, and phishing.
Installing the OPNsense appliance in our ISP network13:40
Install and configure the OPNsense appliance in an ISP network, enable DNS filtering, and route DNS to the Mikrotik router with DHCP and destination NAT to block sites like Facebook.
Bonus Lecture10:38
Discover how to stay connected with the instructor and access resources, including my network training courses, bundles, Amazon books, and network.com content, plus tips to practice labs for long-term retention.

Requirements

You should be familiar with TCP/IP Protocol
You should have basic networking knowledge
You should have a beginner knowledge level in MikroTik
You should have Routing & Switching knowledge

Description

Many of you would like to start an ISP or possibly are working for an ISP to distribute internet service to customers. For this, it requires a lot of technical knowledge to be able to:

Reach the internet to the customer premises using technology such as DHCP or PPPoE
Assign each customer a bandwidth speed
Configure the ISP router to be able to divide the bandwidth per customer using VLAN's and QOS.
Sometimes, helping the customer to configure Queuing on his bandwidth to assign each user in his LAN an equal/unequal bandwidth.
Use DNS Filtering to protect your customers from unwanted contents.

For this, I have designed this course to explain in deep of all those topics. My lectures will be based on theory following practical LABs to show you how you can configure those things on the MikrotTik router. The LABs are based on step-by-step with a very friendly way so you can understand the contents in an easy way.
All LABs will be based on real MikroTik equipments and every LAB will be tested by end of each configuration to check if the goal is achieved the way we want.

During the course, I will explain in details and with LABS everything about DHCP, PPPoE, NAT, VLAN, QOS, Mangle using Prerouting/Postrouting, OPNsense DNS Filtering and much more.

If you want to master all those topics, don't be late and register in my course and get started.

Who this course is for:

Anyone who wants to start an Internet Service Provider (ISP) using MikroTik routers
Anyone who works in an ISP and would like to gain more knowledge in way to distribute internet via MikroTik routers

Starting an ISP with MikroTik & OPNsense as DNS Filtering

What you'll learn

Explore related topics

Course content

Introduction to DHCP3 lectures • 33min

VLANs in an ISP network3 lectures • 40min

MikroTik QOS in an ISP: Simple Queue and Queue Tree2 lectures • 31min

Distribute Internet service using PPPoE protocol3 lectures • 36min

Integrate OPNsense for DNS Filtering in your ISP6 lectures • 54min

Requirements

Description

Who this course is for: