Posts

MTCRE-Module-01: Static Routing

Image
  OBJECTIVES-  Static Routing/Default Route ECMP(Equal Cost Multi-Path) How to force gateway over specific interface. Gateway reachability check and route distance. Routing mark and route policy. Recursive next-hop and scope/target-scope usages. 1. Static Routing in MikroTik RouterOS Static routing in MikroTik means manually defining the path that packets should use to reach a destination network. It is mainly used in: Enterprise networks ISP environments Multi-WAN setups VPN routing Traffic engineering Backup internet links MikroTik routing configuration is done mainly from:  /ip route "or" BASIC STATIC ROUTING CONFIGURATION: TOPOLOGY INFO - LAN NETWORK:  10.0.100.0/24 ROUTER GATEWAY:  10.0.100.254 ISP GATEWAY:  192.168.68.1 WAN IP  : 192.168.68.100/24 Example for Basic Static Route (GUI/TERMINAL): Step-01: Click on "IP" => Routes => Click on "NEW", and fill the following field for basic static/default routes=> Apply + OK. Step-02: Ultimat...

WINDOWS-PRINTER: A COMPLETE SOLUTION OF PRINTER DRIVERS REMOVAL WITH THE INSTRUCTIONS

Image

MTCNA Class 06: Security Management

Image
  Class 06: Security Management Objectives - Firewall rules & port blocking Site blocking VPN/Tunnels overview PPPoE system Load balancing 1. Firewall Rules & Port Blocking (Baseline Security) Step 1: Basic Firewall Protection /ip firewall filter # Allow established & related traffic add chain=input connection-state=established,related action=accept comment="Allow established" # Drop invalid packets add chain=input connection-state=invalid action=drop comment="Drop invalid" # Allow LAN access to router add chain=input src-address=192.168.0.0/16 action=accept comment="Allow LAN" # Drop all other access (WAN protection) add chain=input in-interface=WAN action=drop comment="Block WAN access" Step 2: Block Dangerous Ports (Example) # Block Telnet (23), FTP (21), SMB (445) add chain=forward protocol=tcp dst-port=21,23,445 action=drop comment="Block risky ports" # Block Torrent ports (common range) add chain=forward protocol=tcp ...