wandy route ros

7/28/2019 Wandy Route Ros

1/462

Wandy RouterOS v2.8 Reference Manual- Written by Mikrotik -

Table Of Contents

Basic Setup Guide................................................................................ 1General Information ................................................................................................................ 1Setting up Wandy RouterOS............................................................................................ 2

Logging into the Wandy Router...........................................................................................5Adding Software Packages.......................................................................................................6

Navigating The Terminal Console........................................................................................... 6Basic Configuration Tasks....................................................................................................... 8Basic Examples...................................................................................................................... 10Advanced Configuration Tasks..............................................................................................13

Terminal Console................................................................................ 15General Information .............................................................................................................. 15Common Console Functions.................................................................................................. 16

Lists and Item Names.............................................................................................................17Quick 18Additional Information...........................................................................................................19

General Commands................................................................................................................ 19Safe Mod21

Package Management.........................................................................23General Information .............................................................................................................. 23Installation (Upgrade).............................................................................................................24Uninstal 25

Downg26Software Package List............................................................................................................26

Specifications Sheet........................................................................... 29General Information .............................................................................................................. 29

Device Driver List................................................................................33General Information .............................................................................................................. 33

Ethernet. ................................................................................................................ 34


2/462

Wireless .................................................................................................................41Aironet Arlan..........................................................................................................................43RadioL 43

Synchr 44Async ............................................................................................................44ISDN..... ................................................................................................................44VoIP....... ...............................................................................................................45xDSL..... ............................................................................................................... 45

HomeP ............................................................................................................ 45LCD....... ...............................................................................................................45PCMCIA Adapters................................................................................................................. 46

Driver Management.............................................................................47General Information .............................................................................................................. 47Loading Device Drivers......................................................................................................... 48Removing Device Drivers......................................................................................................49Notes on PCMCIA Adapters..................................................................................................50

General Interface Settings..................................................................51General Information .............................................................................................................. 51Interface Status.......................................................................................................................52

Traffic Monitoring..................................................................................................................52

FarSync X.21 Interface........................................................................54General Information............................................................................................................... 54Synchronous Interface Configuration.................................................................................... 55Troub56Synchronous Link Applications............................................................................................. 56

L2TP Interface..................................................................................... 62General Information............................................................................................................... 62L2TP Client Setup..................................................................................................................64Monitoring L2TP Client.........................................................................................................64

L2TP Server Setup................................................................................................................. 65L2TP Server Users................................................................................................................. 65L2TP Application Examples.................................................................................................. 66Troub71

CISCO/Aironet 2.4GHz 11Mbps Wireless Interface..........................73General Information .............................................................................................................. 73Wireless Interface Configuration........................................................................................... 74

Troub77Application Examples............................................................................................................ 77


3/462

IPIP Tunnel Interfaces.........................................................................82

General Information............................................................................................................... 82IPIP Setu83

IPIP Configuration................................................................................................................. 83

Ethernet Interfaces..............................................................................85General Information............................................................................................................... 85Ethernet Interface Configuration............................................................................................86Monitoring the Interface Status..............................................................................................87Troub87

MOXA C502 Dual-port Synchronous Interface.................................88General Information............................................................................................................... 88Synchronous Interface Configuration.................................................................................... 89Troub90Synchronous Link Application Examples..............................................................................90

VLAN Interface.................................................................................... 95General Information............................................................................................................... 95VLAN 96Application Example..............................................................................................................97

RadioLAN 5.8GHz Wireless Interface................................................99General Information............................................................................................................... 99Wireless Interface Configuration......................................................................................... 100

Tro102Wireless Network Applications............................................................................................102

FrameRelay (PVC, Private Virtual Circuit) Interface.......................105General Information............................................................................................................. 105Configuring Frame Relay Interface......................................................................................106

Frame Relay Configuration..................................................................................................106Tro110

ISDN (Integrated Services Digital Network) Interface....................111General Information............................................................................................................. 111ISDN Hardware and Software Installation...........................................................................112ISDN Client Interface Configuration................................................................................... 113

ISDN Server Interface Configuration...................................................................................114ISDN Examples....................................................................................................................115


4/462

PPTP Interface...................................................................................120General Information............................................................................................................. 120

PPTP Client Setup................................................................................................................122Monitoring PPTP Client.......................................................................................................122

PPTP Server Setup............................................................................................................... 123PPTP Server Users............................................................................................................... 124PPTP Application Examples................................................................................................ 124Tro129

Wireless Client and Wireless Access Point Manual...................... 131General Information............................................................................................................. 132Wireless Interface Configuration......................................................................................... 134Registration Table................................................................................................................ 137Access List........................................................................................................................... 138Info....... 139

Virtual Access Point Interface..............................................................................................141WDS Interface Configuration.............................................................................................. 142Align.....143Align Monitor.......................................................................................................................145Network Scan....................................................................................................................... 145

Wireless Security..................................................................................................................146Wireless Aplication Examples............................................................................................. 147Tro152

EoIP Tunnel Interface....................................................................... 154General Information............................................................................................................. 154EoIP S155EoIP Application Example...................................................................................................156Tro158

Xpeed SDSL Interface.......................................................................159General Information............................................................................................................. 159Xpeed Interface Configuration.............................................................................................160

Frame Relay Configuration Examples................................................................................. 161Tro .............................................................................................................. 162

ARLAN 655 Wireless Client Card.....................................................164General Information............................................................................................................. 164Installan .............................................................................................................. .165Wireless Interface Configuration......................................................................................... 165

Tro ............................................................................................................166


5/462

Bridge.................................................................................................168General Information............................................................................................................. 168

Bridge Interface Setup..........................................................................................................170Port S ............................................................................................................. 171

Bridge Monitoring................................................................................................................171Bridge Port Monitoring........................................................................................................ 172Bridge Host Monitoring....................................................................................................... 173Bridge Firewall.....................................................................................................................173Application Example............................................................................................................175

Tro177

MOXA C101 Synchronous Interface................................................178General Information............................................................................................................. 178Synchronous Interface Configuration.................................................................................. 179Tro181

Synchronous Link Application Examples............................................................................181

Cyclades PC300 PCI Adapters.........................................................186General Information............................................................................................................. 186Synchronous Interface Configuration.................................................................................. 187Tro188RSV/V.35 Synchronous Link Applications......................................................................... 188

PPPoE................................................................................................ 191General Information............................................................................................................. 191PPPoE Client Setup..............................................................................................................193Monitoring PPPoE Client.....................................................................................................194PPPoE Server Setup (Access Concentrator)........................................................................ 195

PPPoE Server Users............................................................................................................. 196Tro197Application Examples.......................................................................................................... 197

PPP and Asynchronous Interfaces................................................. 201General Information............................................................................................................. 201Serial Port Configuration......................................................................................................202

PPP Server Setup..................................................................................................................203PPP Client Setup.................................................................................................................. 204PPP Application Example.................................................................................................... 205

IP Addresses and ARP..................................................................... 207General Information ............................................................................................................ 207

IP A 208


6/462

Address Resolution Protocol................................................................................................209Proxy-ARP feature............................................................................................................... 210Unnumbered Interfaces........................................................................................................ 211

IP Security..........................................................................................213General Information ............................................................................................................ 213Policy Settings......................................................................................................................216Peers..... 218Remote Peer Statistics..........................................................................................................220Installed SAs.........................................................................................................................220

Flushing Installed SA Table.................................................................................................221Counters222General Information ............................................................................................................ 223

Routes, Equal Cost Multipath Routing, Policy Routing.................229General Information ............................................................................................................ 229

Static Routes.........................................................................................................................230Routing Tables..................................................................................................................... 232Policy Rules..........................................................................................................................233Application Examples.......................................................................................................... 234

Connection Tracking and Service Ports......................................... 237General Information ............................................................................................................ 237

Connection Tracking............................................................................................................ 238

Service Ports.........................................................................................................................239

Packet Marking (Mangle).................................................................. 241General Information............................................................................................................. 241Mangle..241

General Information ............................................................................................................ 244

MNDP..................................................................................................245General Information ............................................................................................................ 245Setup.....246Neighbour List......................................................................................................................246

Firewall Filters................................................................................... 248General Information............................................................................................................. 248Packet Flow.......................................................................................................................... 249Firewall Rules.......................................................................................................................250Firewall Chains.....................................................................................................................253IP Firewall Applications.......................................................................................................254


7/462

IP Pools.............................................................................................. 261General Information ............................................................................................................ 261

Setup.....262

Peer-to-Peer Traffic Control............................................................. 263General Information ............................................................................................................ 263Traffic Marking.................................................................................................................... 264Traffic Filtering.................................................................................................................... 265Traffic Limiting....................................................................................................................265Point-to-Point Traffic Control Examples............................................................................. 265

VRRP.................................................................................................. 269

General Information............................................................................................................. 269VRRP Routers...................................................................................................................... 270Virtual IP addresses..............................................................................................................271A simple example of VRRP fail over...................................................................................272

Network Address Translation.......................................................... 275General Information............................................................................................................. 275Common NAT Parameters................................................................................................... 277Source NAT..........................................................................................................................278Destination NAT.................................................................................................................. 279

UPnP...................................................................................................281 General Information ............................................................................................................ 281

Enabling Universal Plug-n-Play...........................................................................................282UPnP Interfaces....................................................................................................................282

M3P.....................................................................................................284General Information ............................................................................................................ 284Setup.....285

DNS Client and Cache...................................................................... 287General Information ............................................................................................................ 287Client Configuration and Cache Setup.................................................................................288Cache Monitoring.................................................................................................................289Static DNS Entries................................................................................................................289Flushing DNS cache.............................................................................................................289

Services, Protocols, and Ports........................................................ 291General Information ............................................................................................................ 291Modifying Service Settings..................................................................................................291


8/462

List of Services.....................................................................................................................292

HotSpot Gateway.............................................................................. 294General Information............................................................................................................. 295Question&Answer-Based Setup...........................................................................................300HotSpot Gateway Setup....................................................................................................... 301HotSpot User Profiles...........................................................................................................303HotSpot Users.......................................................................................................................305HotSpot Active Users...........................................................................................................306HotSpot Remote AAA..........................................................................................................307HotSpot Server Settings....................................................................................................... 308HotSpot Cookies.................................................................................................................. 309Walled Garden......................................................................................................................309

Customizing HotSpot Servlet...............................................................................................310Possible Error Messages.......................................................................................................315HotSpot Step-by-Step User Guide for dhcp-pool Method................................................... 317HotSpot Step-by-Step User Guide for enabled-address Method..........................................320

DHCP Client and Server................................................................... 324General Information ............................................................................................................ 324DHCP Client Setup.............................................................................................................. 325

DHCP Client Lease.............................................................................................................. 326DHCP Server Setup..............................................................................................................327

DHCP Networks...................................................................................................................329DHCP Leases....................................................................................................................... 329DHCP Relay.........................................................................................................................331

Question&Answer-Based Setup...........................................................................................332

Universal Client Interface................................................................. 334General Information ............................................................................................................ 334Universal Client Interface Setup.......................................................................................... 335Universal Host List...............................................................................................................336

Universal Access List...........................................................................................................336

Service Port.......................................................................................................................... 337

IP Telephony......................................................................................338General Information ............................................................................................................ 339General Voice port settings.................................................................................................. 341Voicetronix Voice Ports....................................................................................................... 342

LineJack Voice Ports............................................................................................................343PhoneJack Voice Ports......................................................................................................... 345Zaptel Voice Ports................................................................................................................347ISDN Voice Ports.................................................................................................................348


9/462

Voice Port for Voice over IP (voip)..................................................................................... 350Number 350Regional Settings..................................................................................................................353

Audio CODECs....................................................................................................................354AAA..... 354Gateke356Tro359A simple example.................................................................................................................359

OSPF.................................................................................................. 366General Information ............................................................................................................ 366General Setup....................................................................................................................... 367Areas.....369

Networ 370Interfac 370Virtual Links.........................................................................................................................371Neigh 372General Information ............................................................................................................ 373

RIP...................................................................................................... 374General Information............................................................................................................. 374

General Setup....................................................................................................................... 375Interfac 376

Networ 377Neighb 378Routes...378

General Information ............................................................................................................ 379

BGP (Border Gateway Protocol)......................................................382General Information............................................................................................................. 382BGP S 383BGP Network....................................................................................................................... 384

BGP Pe385

Tro385

Prefix Lists.........................................................................................387General Information............................................................................................................. 387Setup.....388Prefix List Rules...................................................................................................................388

AAA.................................................................................................... 390General Information ............................................................................................................ 391Router User Groups..............................................................................................................392


10/462

Router Users.........................................................................................................................393Monitoring Active Router Users.......................................................................................... 394Router User Remote AAA................................................................................................... 394

Local Point-to-Point AAA....................................................................................................395Local P2P User Profiles....................................................................................................... 395Local P2P User Database..................................................................................................... 397Monitoring Active P2P Users...............................................................................................397P2P User Remote AAA........................................................................................................398

Local IP Traffic Accounting.................................................................................................399Local IP Traffic Accounting Table...................................................................................... 400Web Access to the Local IP Traffic Accounting Table........................................................400RADIUS Client Setup.......................................................................................................... 401Suggested RADIUS Servers.................................................................................................402

Supported RADIUS Attributes.............................................................................................402

Certificate Management....................................................................406General Information ............................................................................................................ 406Certific407

FTP (File Transfer Protocol) Server.................................................410General Information ............................................................................................................ 410

File Transfer Protocol Server............................................................................................... 410

Ping.................................................................................................... 412General Information............................................................................................................. 412The Ping Command..............................................................................................................413MAC Ping Server................................................................................................................. 413

Bandwidth Control............................................................................ 415General Information ............................................................................................................ 415Queue Types.........................................................................................................................419Interface Default Queues......................................................................................................420Configuring Simple Queues................................................................................................. 420

Configuring Queue Trees..................................................................................................... 422Tro423Queue Applications.............................................................................................................. 423

Configuration Export and Import.....................................................429General Information ............................................................................................................ 429The Export Command.......................................................................................................... 430The Import Command.......................................................................................................... 430


11/462

SNMP Service.................................................................................... 432General Information............................................................................................................. 432

SNMP Setup.........................................................................................................................433SNMP Communities............................................................................................................ 433

Available OIDs.....................................................................................................................434Available MIBs.................................................................................................................... 435Tools for SNMP Data Collection and Analysis................................................................... 438

MAC Telnet Server and Client..........................................................441General Information ............................................................................................................ 441

MAC Telnet Server.............................................................................................................. 441Monitoring Active Session List............................................................................................442MAC Telnet Client...............................................................................................................442

Ping.................................................................................................... 443General Information............................................................................................................. 443The Ping Command..............................................................................................................444

MAC Ping Server................................................................................................................. 444

DDNS Update Tool............................................................................ 446General Information ............................................................................................................ 446Dynamic DNS Update..........................................................................................................447

Torch (Realtime Traffic Monitor)......................................................448General Information............................................................................................................. 448

The Torch Command............................................................................................................448

Bandwidth Test................................................................................. 451General Information............................................................................................................. 451Server Configuration............................................................................................................ 452Client Configuration.............................................................................................................453

Packet Sniffer.................................................................................... 455General Information............................................................................................................. 455Packet Sniffer Configuration................................................................................................456Running Packet Sniffer........................................................................................................ 457Sniffed Packets.....................................................................................................................458Packet Sniffer Protocols....................................................................................................... 459

Packet Sniffer Host...............................................................................................................461Packet Sniffer Connections.................................................................................................. 461

Traceroute..........................................................................................463


12/462

General Information............................................................................................................. 463The Traceroute Command....................................................................................................464

ICMP Bandwidth Test....................................................................... 465General Information ............................................................................................................ 465ICMP Bandwidth Test..........................................................................................................465

System Resource Management....................................................... 467General Information ............................................................................................................ 468System Resource.................................................................................................................. 468IRQ Usage Monitor..............................................................................................................469

IO Port Usage Monitor.........................................................................................................469

USB Port Information.......................................................................................................... 470PCI Information....................................................................................................................470Reboot.. 471Shutdo471

Configuration Reset..............................................................................................................472Router Identity......................................................................................................................472Date and Time...................................................................................................................... 472Configuration Change History............................................................................................. 473

LCD Management..............................................................................475General Information ............................................................................................................ 475Configuring the LCD's Settings........................................................................................... 477LCD Information Display Configuration.............................................................................478LCD Troubleshooting...........................................................................................................479

Support Output File.......................................................................... 480General Information ............................................................................................................ 480

Generating Support Output File........................................................................................... 480

SSH (Secure Shell) Server and Client............................................. 481

General Information ............................................................................................................ 481SSH S 482SSH Cl483

Configuration Backup and Restore.................................................484General Information ............................................................................................................ 484General Information ............................................................................................................ 485Configuration Load Command.............................................................................................485

Serial Console and Terminal............................................................486


13/462

General Information ............................................................................................................ 486Serial Console Configuration............................................................................................... 487Setting Serial Console.......................................................................................................... 487

Using Serial Terminal.......................................................................................................... 488

GPS Synchronization........................................................................490General Information ............................................................................................................ 490Synchronizing with a GPS Receiver.................................................................................... 491GPS Monitoring................................................................................................................... 492

Scripting Host and Complementary Tools......................................493General Information ............................................................................................................ 494

Console Command Syntax................................................................................................... 495Expression Grouping............................................................................................................496Variable497Command Substitution and Return Values.......................................................................... 497

Operato 498Data ty501Internal Console Expressions (ICE).....................................................................................502Special Actions.....................................................................................................................504Additional Features.............................................................................................................. 505

Scripts...505Task Management................................................................................................................ 506

Script Editor......................................................................................................................... 507System Scheduler................................................................................................................. 508Network Watching Tool.......................................................................................................511

Traffic Monitor.....................................................................................................................512Sigwatc 513

UPS Monitor.......................................................................................516General Information ............................................................................................................ 516UPS Monitor Setup.............................................................................................................. 517

Runtime Calibration............................................................................................................. 518

UPS Monitoring................................................................................................................... 519

NTP (Network Time Protocol).......................................................... 521General Information ............................................................................................................ 521Client.... 522Server....523

Time 523

RouterBoard-specific functions...................................................... 525General Information ............................................................................................................ 525


14/462

BIOS upgrading....................................................................................................................526BIOS Configuration............................................................................................................. 526System Health Monitoring................................................................................................... 527

LED Managment.................................................................................................................. 528Console Reset Jumper.......................................................................................................... 529

License Management........................................................................530General Information............................................................................................................. 530License Management............................................................................................................532

Telnet Server and Client................................................................... 535General Information ............................................................................................................ 535

Telnet Server........................................................................................................................ 535Telnet Client.........................................................................................................................536

Log Management...............................................................................537General Information ............................................................................................................ 537

General Settings................................................................................................................... 538Log Classification.................................................................................................................538Log Messages.......................................................................................................................539

Basic Setup GuideDocument revision 0.3.0 (Fri Mar 05 07:52:32 GMT 2004)This document applies to Wandy RouterOS V2.8

Table of ContentsTable of ContentsSummaryRelated Documents

DescriptionSetting up Wandy RouterOS


15/462

DescriptionNotesLogging into the Wandy Router

DescriptionAdding Software PackagesDescriptionNavigating The Terminal Console

DescriptionNotesBasic Configuration TasksDescription

NotesBasic ExamplesExample

Viewing RoutesAdding Default RoutesTesting the Network ConnectivityAdvanced Configuration TasksDescriptionApplication Example with Masquerading

Example with Bandwidth ManagementExample with NAT

General Information

SummaryWandy RouterOS is independent Linux-based Operating System for IA-32 routers andthinrouters. It does not require any additional components and has no software prerequirements. Itis designed with easy-to-use yet powerful interface allowing network administrators to deploynetwork structures and functions, that would require long education elsewhere simply by followingthe Reference Manual (and even without it).

Related Documents

Package ManagementDevice Dr iver List License ManagementPingQuali ty of Service Fi rewall Fi ltersWinbox

DescriptionWandy RouterOS turns a standard PC computer into a powerful network router. Just add


16/462

standard network PC interfaces to expand the router capabilities. Remote control with easyreal-time Windows application (WinBox) Advanced Quality of Service control with burst support

Stateful firewall with P2P protocol filtering, tunnels and IPsec STP bridging with filtering capabilities Super high speed 802.11a/b/g wireless with WEP WDS and Virtual AP features

HotSpot for Plug-and-Play access RIP, OSPF, BGP routing protocols Gigabit Ethernet ready V.35, X.21, T1/E1 synchronous support

async PPP with RADUIS AAA IP Telephony remote winbox GUI admin

telnet/ssh/serial console admin real-time configuration and monitoring and much more (please see the Specifications Sheet)The Guide describes the basic steps of installing and configuring a dedicated PC router runningWandy RouterOS.

Setting up Wandy RouterOS

Description

Downloading and Installing the Wandy RouterOSThe download and installation process of the Wandy RouterOS is described in the followingdiagram:1. Download the basic installation archieve file.Depending on the desired media to be used for installing the Wandy RouterOS pleasechose one of the following archive types for downloading: ISO image - of the installation CD, if you have a CD writer for creating CDs. The ISO image isin the MTcdimage_v2-8-x_dd-mmm-yyyy_(build_z).zip archive file containing a bootable CDimage. The CD will be used for booting up the dedicated PC and installing the Wandy

RouterOS on its hard-drive or flash-drive. Netinstall - if you want to install RouterOS over a LAN with one floppy boot disk, oralternatively using PXE or EtherBoot option supported by some network interface cards, thatallows truly networked installation. Netinstall program works on Windows 95/98/NT4/2K/XP. Wandy Disk Maker - if you want to create 3.5" installation floppies. The Disk Maker is aself-extracting archive DiskMaker_v2-8-x_dd-mmm-yyyy_(build_z).exe file, which should berun on your Windows 95/98/NT4/2K/XP workstation to create the installation floppies. Theinstallation floppies will be used for booting up the dedicated PC and installing the WandyRouterOS on its hard-drive or flash-drive.2. Create the installation media.Use the appropriate installation archive to create the Installation CD or floppies.


17/462

For the CD, write the ISO image onto a blank CD. For the floppies, run the Disk Maker on your Windows workstation to create theinstallation floppies. Follow the instructions and insert the floppies in your FDD as

requested, label them as Disk 1,2,3, etc.3. Install the Wandy RouterOS software.Your dedicated PC router hardware should have: CPU and motherboard - advanced 4th generation (core frequency 100MHz or more), 5th

generation (Intel Pentium, Cyrix 6X86, AMD K5 or comparable) or newer uniprocessor IntelIA-32 (i386) compatible (multiple processors are not supported) RAM - minimum 48 MB, maximum 1 GB; 64 MB or more recommended Hard Drive/Flash - standard ATA interface controller and drive (SCSI and USB controllers

and drives are not supported; RAID controllers that require additional drivers are not supported)with minimum of 64 MB spaceHardware needed for installation time only

Depending on installation method chosen the router must have the following hardware: Floppy-based installation - standard AT floppy controller and 3.5'' disk drive connected as thefirst floppy disk drive (A); AT, PS/2 or USB keyboard; VGA-compatible video controller cardand monitor CD-based installation - standard ATA/ATAPI interface controller and CD drive supporting"El Torito" bootable CDs (you might need also to check if the router's BIOS supports booting

from this type of media); AT, PS/2 or USB keyboard; VGA-compatible video controller cardand monitor Floppy-based network installation - standard AT floppy controller and 3.5'' disk driveconnected as the first floppy disk drive (A); PCI Ethernet network interface card supported by

Wandy RouterOS (see the Device Driver List for the list)

Full network-based installation - PCI Ethernet network interface card supported by WandyRouterOS (see the Device Driver List for the list) with PXE or EtherBoot extension bootingROM (you might need also to check if the router's BIOS supports booting from network)

Note that if you use Netinstall, you can license the software during the installation procedure(the next point of this section describes how to do it).Boot up your dedicated PC router from the Installation Media you created and follow theinstructions on the console screen while the HDD is reformatted and Wandy RouterOSinstalled on it. After successful installation please remove the installation media from your CD

or floppy disk drive and hit 'Enter' to reboot the router.4. License the software.When booted, the software allows you to use all its features for 24 hours. If the license key

will not be enteres during this period of time, the router will become unusable, and will need acomplete reinstallation.RouterOS licensing scheme is based on software IDs. To license the software, you must knowthe software ID. It is shown during installation procedures, and also you can get it from systemconsole or Winbox. To get the software ID from system console, type: /system license print

(note that you must first log in the router; by default there is useradmin with no password(just press [Enter] key when prompted for password)). See sections below on basicconfiguration of your routerOnce you have the ID, you can obtain a license:

You shoud have an account on our account server. If you do not have an account at


18/462

www.Wandy.com, just press the 'New' button on the upper right-hand corner of theWandy's web to create your account Choose the appropriate licence level that meets your needs. Please see the LicenseManualor the Software price li st. Note that there is a free license with restrictedfeatures (no time limitation) There are different methods how to get a license from the accout server:1. Enter the software ID in the account server, and get the license key by e-mail. You

can upload the file received on the router's FTP server, or drag-and-drop it intoopened Winbox window2. You can open the file with a text editor, and copy the contents. Then paste the textinto system console (in any menu - you just should be logged in), or into

System->License window of Winbox3. If the router has Internet connection, you can obtain the license directly fromwithin it. The commands are described in the License Manual. Note that you must

have Allow to use my account in netinstall option enabled for your account. Youcan set it by following change user information link on the main screen of theaccount server.

NotesThe hard disk will be entirely reformatted during the installation and all data on it will be lost!You can move the hard drive with Wandy RouterOS installed to a new hardware without loosinga license, but you cannot move the RouterOS to a different hard drive without purchasing ananother license (except hardware failure situations). For additional information write [email protected]! Do not use MS-DOS format command or other disk format utilities to reinstall yourWandy router! This will cause the Software-ID to change, so you will need to buy another licensein order to get Wandy RouterOS running.

Logging into the Wandy Router

DescriptionWhen logging into the router via terminal console, you will be presented with the WandyRouterOS login prompt. Use 'admin' and no password (hit 'Enter') for logging in the router for the

first time, for example:Wandy v2.8Login: adminPassword:

The password can be changed with the /password command.[admin@Wandy] > passwordold password:new password: ************retype new password: ************[admin@Wandy] >


19/462

Adding Software Packages

DescriptionThe basic installation comes only with the systempackage. This includes basic IP routing androuter administration. To have additional features such as IP Telephony, OSPF, wireless and so on,

you will need to downloadadditional software packages.The additional software packages should have the same version as the system package. If not, thepackage won't be installed. Please consult the Wandy RouterOS Software Package Installationand Upgrading Manual for more detailed information about installing additional software packages.

To upgrade the router packages, simply upload the packages to the router via ftp, using the binarytransfer mode. After you have uploaded the packages, reboot the router, and the features that areprovided by those packages will be available (regarding your license type, of course).

Navigating The Terminal Console

Description

Welcome Screen and Command PromptAfter logging into the router you will be presented with the Wandy RouterOS Welcome Screenand command prompt, for example:MMM MMM KKK TTTTTTTTTTT KKKMMMM MMMM KKK TTTTTTTTTTT KKK

MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKKMMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKKMMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKKMMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKKWandy RouterOS 2.8 (c) 1999-2004 http://www.Wandy.com/Terminal xterm detected, using multiline input mode[admin@Wandy] >

The command prompt shows the identity name of the router and the current menu level, forexample:[admin@Wandy] > Base menu level[admin@Wandy] interface> Interface management[admin@Wandy] ip address> IP address manangement

CommandsThe list of available commands at any menu level can be obtained by entering the question mark '?',for example:[admin@Wandy] >certificate Certificate managementdriver Driver manageentfile Local router file storage.import Run exported configuration scriptinterface Interface configurationlog System logspassword Change passwordping Send ICMP Echo packetsport Serial portsquit Quit console


20/462

radius Radius client settingsredo Redo previosly undone actionsetup Do basic setup of systemsnmp SNMP settings

special-login Special login usersundo Undo previous actionuser User managementip IP optionsqueue Bandwidth managementsystem System information and utilitiestool Diagnostics toolsexport Print or save an export script that can be used to restoreconfiguration[admin@Wandy] >[admin@Wandy] ip>accounting Traffic accountingaddress Address managementarp ARP entries managementdns DNS settings

firewall Firewall managementneighbor Neighborspacking Packet packing settingspool IP address poolsroute Route managementservice IP servicespolicy-routing Policy routingupnp Universal Plug and Playvrrp Virtual Router Redundancy Protocolsocks SOCKS version 4 proxyhotspot HotSpot managementipsec IP securityweb-proxy HTTP proxyexport Print or save an export script that can be used to restoreconfiguration

[admin@Wandy] ip>

The list of available commands and menus has short descriptions next to the items. You can moveto the desired menu level by typing its name and hitting the [Enter] key, for example:[admin@Wandy] > Base level menu[admin@Wandy] > driver Enter 'driver' to move to the driver levelmenu[admin@Wandy] driver> / Enter '/' to move to the base level menufrom any level[admin@Wandy] > interface Enter 'interface' to move to the interfacelevel menu[admin@Wandy] interface> /ip Enter '/ip' to move to the IP level menufrom any level[admin@Wandy] ip>

A command or an argument does not need to be completed, if it is not ambiguous. For example,instead of typing interface you can type just in orint. To complete a command use the [Tab] key.The commands may be invoked from the menu level, where they are located, by typing its name. Ifthe command is in a different menu level than the current one, then the command should be invokedusing its full (absolute) or relative path, for example:[admin@Wandy] ip route> print Prints the routing table[admin@Wandy] ip route> .. address print Prints the IP address table[admin@Wandy] ip route> /ip address print Prints the IP address table

The commands may have arguments. The arguments have their names and values. Some

commands, may have a required argument that has no name.

Summary on executing the commands and navigating the menus


21/462

Command Action

command [Enter] Executes the command[?] Shows the list of all available commands

command [?] Displays help on the command and the list of

arguments

command argument [?] Displays help on the command's argument[Tab]

Completes the command/word. If the input is

ambiguous, a second [Tab] gives possible

options/ Moves up to the base level

/command Executes the base level command

.. Moves up one level

"" Specifies an empty string

"word1 word2" Specifies a string of 2 words that contain aspace

You can abbreviate names of levels, commands and arguments.For the IP address configuration, instead of using the 'address' and 'netmask' arguments, in mostcases you can specify the address together with the number of true bits in the network mask, i.e.,there is no need to specify the 'netmask' separately. Thus, the following two entries would be

equivalent:/ip address add address 10.0.0.1/24 interface ether1/ip address add address 10.0.0.1 netmask 255.255.255.0 interface ether1

Notes

You must specify the size of the network mask in the address argument, even if it is the 32-bitsubnet, i.e., use 10.0.0.1/32 foraddress=10.0.0.1 netmask=255.255.255.255

Basic Configuration Tasks

Description

Interface Management

Before configuring the IP addresses and routes please check the /interface menu to see the list ofavailable interfaces. If you have Plug-and-Play cards installed in the router, it is most likely that thedevice drivers have been loaded for them automatically, and the relevant interfaces appear on the/interface print list, for example:[admin@Wandy] interface> printFlags: X - disabled, D - dynamic, R - running# NAME TYPE RX-RATE TX-RATE MTU0 R ether1 ether 0 0 15001 R ether2 ether 0 0 15002 X wavelan1 wavelan 0 0 15003 X prism1 wlan 0 0 1500[admin@Wandy] interface>

The interfaces need to be enabled, if you want to use them for communications. Use the /interface


22/462

enable name command to enable the interface with a given name or number, for example:[admin@Wandy] interface> printFlags: X - disabled, D - dynamic, R - running

# NAME TYPE RX-RATE TX-RATE MTU0 X ether1 ether 0 0 15001 X ether2 ether 0 0 1500[admin@Wandy] interface> enable 0[admin@Wandy] interface> enable ether2[admin@Wandy] interface> printFlags: X - disabled, D - dynamic, R - running# NAME TYPE RX-RATE TX-RATE MTU0 R ether1 ether 0 0 15001 R ether2 ether 0 0 1500[admin@Wandy] interface>

The interface name can be changed to a more descriptive one by using /interface set command:[admin@Wandy] interface> set 0 name=Local; set 1 name=Public[admin@Wandy] interface> printFlags: X - disabled, D - dynamic, R - running

# NAME TYPE RX-RATE TX-RATE MTU0 R Local ether 0 0 15001 R Public ether 0 0 1500[admin@Wandy] interface>

Use of the 'setup' CommandThe initial setup of the router can be done by using the /setup command which enables an interface,

assigns an address/netmask to it, and configures the default route. If you do not use the setupcommand, or need to modify/add the settings for addresses and routes, please follow the stepsdescribed below.

NotesThe device drivers for NE2000 compatible ISA cards need to be loaded using the add commandunder the /drivers menu. For example, to load the driver for a card with IO address 0x280 and IRQ5, it is enough to issue the command:[admin@Wandy] driver> add name=ne2k-isa io=0x280[admin@Wandy] driver> printFlags: I - invalid, D - dynamic# DRIVER IRQ IO MEMORY ISDN-PROTOCOL0 D RealTek 81391 D Intel EtherExpressPro2 D PCI NE20003 ISA NE2000 2804 Moxa C101 Synchronous C8000[admin@Wandy] driver>

There are some other drivers that should be added manually. Please refer to the respective manualsections for the detailed information on how drivers are to be loaded.

Basic Examples

ExampleAssume you need to configure the Wandy router for the following network setup:In the current example we use two networks:


23/462

The local LAN with network address 192.168.0.0 and 24-bit netmask: 255.255.255.0. Therouter's address is 192.168.0.254 in this network The ISP's network with address 10.0.0.0 and 24-bit netmask 255.255.255.0. The router's

address is 10.0.0.217 in this networkThe addresses can be added and viewed using the following commands:[admin@Wandy] ip address> add address 10.0.0.217/24 interface Public [admin@Wandy] ip address> add address 192.168.0.254/24 interface Local[admin@Wandy] ip address> printFlags: X - disabled, I - invalid, D - dynamic# ADDRESS NETWORK BROADCAST INTERFACE0 10.0.0.217/24 10.0.0.217 10.0.0.255 Public1 192.168.0.254/24 192.168.0.0 192.168.0.255 Local[admin@Wandy] ip address>

Here, the network mask has been specified in the value of the address argument. Alternatively, theargument 'netmask' could have been used with the value '255.255.255.0'. The network andbroadcast addresses were not specified in the input since they could be calculated automatically.

Please note that the addresses assigned to different interfaces of the router should belong todifferent networks.

Viewing RoutesYou can see two dynamic (D) and connected (C) routes, which have been added automaticallywhen the addresses were added in the example above:[admin@Wandy] ip route> printFlags: X - disabled, I - invalid, D - dynamic, J - rejected,C - connect, S - static, R - rip, O - ospf, B - bgp# DST-ADDRESS G GATEWAY DISTANCE INTERFACE0 DC 192.168.0.0/24 r 0.0.0.0 0 Local1 DC 10.0.0.0/24 r 0.0.0.0 0 Public

[admin@Wandy] ip route> print detailFlags: X - disabled, I - invalid, D - dynamic, J - rejected,C - connect, S - static, R - rip, O - ospf, B - bgp0 DC dst-address=192.168.0.0/24 preferred-source=192.168.0.254gateway=0.0.0.0 gateway-state=reachable distance=0 interface=Local1 DC dst-address=10.0.0.0/24 preferred-source=10.0.0.217 gateway=0.0.0.0gateway-state=reachable distance=0 interface=Public[admin@Wandy] ip route>

These routes show, that IP packets with destination to 10.0.0.0/24 would be sent through theinterface Public, whereas IP packets with destination to 192.168.0.0/24 would be sent through theinterface Local. However, you need to specify where the router should forward packets, which havedestination other than networks connected directly to the router.

Adding Default RoutesIn the following example the default route (destination 0.0.0.0 (any), netmask 0.0.0.0 (any)) willbe added. In this case it is the ISP's gateway 10.0.0.1, which can be reached through the interface

Public[admin@Wandy] ip route> add gateway=10.0.0.1[admin@Wandy] ip route> printFlags: X - disabled, I - invalid, D - dynamic, J - rejected,C - connect, S - static, R - rip, O - ospf, B - bgp# DST-ADDRESS G GATEWAY DISTANCE INTERFACE0 S 0.0.0.0/0 r 10.0.0.1 1 Public1 DC 192.168.0.0/24 r 0.0.0.0 0 Local2 DC 10.0.0.0/24 r 0.0.0.0 0 Public[admin@Wandy] ip route>


24/462

Here, the default route is listed under #0. As we see, the gateway 10.0.0.1 can be reached throughthe interface 'Public'. If the gateway was specified incorrectly, the value for the argument 'interface'would be unknown.

NotesYou cannot add two routes to the same destination, i.e., destination-address/netmask! It applies tothe default routes as well. Instead, you can enter multiple gateways for one destination. For moreinformation on IP routes, please read the Routes, Equal Cost Multipath Routing, Poli cy Routing

manual.If you have added an unwanted static route accidentally, use the remove command to delete theunneeded one. You will not be able to delete dynamic (DC) routes. They are added automaticallyand represent routes to the networks the router connected directly.

Testing the Network Connectivity

From now on, the /ping command can be used to test the network connectivity on both interfaces.You can reach any host on both connected networks from the router.How the /ping command works:[admin@Wandy] ip route> /ping 10.0.0.410.0.0.4 64 byte ping: ttl=255 time=7 ms10.0.0.4 64 byte ping: ttl=255 time=5 ms10.0.0.4 64 byte ping: ttl=255 time=5 ms3 packets transmitted, 3 packets received, 0% packet lossround-trip min/avg/max = 5/5.6/7 ms[admin@Wandy] ip route>[admin@Wandy] ip route> /ping 192.168.0.1192.168.0.1 64 byte ping: ttl=255 time=1 ms192.168.0.1 64 byte ping: ttl=255 time=1 ms192.168.0.1 64 byte ping: ttl=255 time=1 ms3 packets transmitted, 3 packets received, 0% packet lossround-trip min/avg/max = 1/1.0/1 ms[admin@Wandy] ip route>

The workstation and the laptop can reach (ping) the router at its local address 192.168.0.254, If therouter's address 192.168.0.254 is specified as the default gateway in the TCP/IP configuration ofboth the workstation and the laptop, then you should be able to ping the router:C:\>ping 192.168.0.254Reply from 192.168.0.254: bytes=32 time=10ms TTL=253Reply from 192.168.0.254: bytes=32 time


25/462

To set up routing, it is required that you have some knowledge of configuring TCP/IP networks.There is a comprehensive list of IP resources compiled by Uri Raz athttp://www.private.org.il/tcpip_rl.html. We strongly recommend that you obtain more knowledge,

if you have difficulties configuring your network setups.

Advanced Configuration Tasks

DescriptionNext will be discussed situation with 'hiding' the private LAN 192.168.0.0/24 'behind' one address10.0.0.217 given to you by the ISP.

Application Example with MasqueradingIf you want to 'hide' the private LAN 192.168.0.0/24 'behind' one address 10.0.0.217 given to youby the ISP, you should use the source network address translation (masquerading) feature of theWandy router. Masquerading is useful, if you want to access the ISP's network and the Internetappearing as all requests coming from the host 10.0.0.217 of the ISP's network. The masquerading

will change the source IP address and port of the packets originated from the network192.168.0.0/24 to the address 10.0.0.217 of the router when the packet is routed through it.Masquerading conserves the number of global IP addresses required and it lets the whole networkuse a single IP address in its communication with the world.

To use masquerading, a source NAT rule with action 'masquerade' should be added to the firewallconfiguration:

[admin@Wandy] ip firewall src-nat> add action=masquerade out-interface=Public[admin@Wandy] ip firewall src-nat> printFlags: X - disabled, I - invalid, D - dynamic0 out-interface=Public action=masquerade src-address=192.168.0.0/24[admin@Wandy] ip firewall src-nat>

Notes

Please consult Network Address Translationfor more information on masquerading.

Example with Bandwidth ManagementAssume you want to limit the bandwidth to 128kbps on downloads and 64kbps on uploads for allhosts on the LAN. Bandwidth limitation is done by applying queues for outgoing interfacesregarding the traffic flow. It is enough to add a single queue at the Wandy router:

[admin@Wandy] queue simple> add max-limit=64000/128000 interface=Local[admin@Wandy] queue simple> printFlags: X - disabled, I - invalid, D - dynamic0 name="queue1" target-address=0.0.0.0/0 dst-address=0.0.0.0/0interface=Local queue=default priority=8 limit-at=0/0max-limit=64000/128000[admin@Wandy] queue simple>

Leave all other parameters as set by default. The limit is approximately 128kbps going to the LAN(download) and 64kbps leaving the client's LAN (upload).

Example with NATAssume we have moved the server in our previous examples from the public network to our local


26/462

one:The server's address is now 192.168.0.4, and we are running web server on it that listens to the TCPport 80. We want to make it accessible from the Internet at address:port 10.0.0.217:80. This can be

done by means of Static Network Address translation (NAT) at the Wandy Router. The Publicaddress:port 10.0.0.217:80 will be translated to the Local address:port 192.168.0.4:80. Onedestination NAT rule is required for translating the destination address and port:[admin@Wandy] ip firewall dst-nat> add action=nat protocol=tcp \dst-address=10.0.0.217/32:80 to-dst-address=192.168.0.4[admin@Wandy] ip firewall dst-nat> printFlags: X - disabled, I - invalid, D - dynamic0 dst-address=10.0.0.217/32:80 protocol=tcp action=natto-dst-address=192.168.0.4[admin@Wandy] ip firewall dst-nat>

Notes

Please consult Network Address Translationfor more information on Network AddressTranslation.

Terminal ConsoleDocument revision NaN (Tue Apr 20 16:17:53 GMT 2004)This document applies to Wandy RouterOS V2.8

Table of ContentsTable of Contents

SummarySpecificationsRelated DocumentsCommon Console Functions

DescriptionExampleLists and Item Names

DescriptionNotesExampleQuick TypingDescriptionNotesAdditional InformationDescriptionGeneral CommandsDescription


27/462

Command DescriptionSafe ModeDescription

General Information

SummaryThe Terminal Console is used for accessing the Wandy Router's configuration and managementfeatures using text terminals, id estremote terminal clients or locally attached monitor andkeyboard. The Terminal Console is also used for writing scripts. This manual describes the general

console operation principles. Please consult the Scripting Manual on some advanced console

commands and on how to write scripts.

SpecificationsPackages required: systemLicense required: level1

Hardware usage: Not signif icant

Related DocumentsScripting H ost and Complementary Tools

Common Console Functions

DescriptionThe console allows configuration of the router's settings using text commands. Although thecommand structure is similar to the Unix shell, you can get additional information about thecommand structure in the Scripting Host and Complementary Tools manual. Since there is a lotof available commands, they are split into groups organized in a way of hierarchical menu levels.The name of a menu level reflects the configuration information accessible in the relevant section,

exempli gratia /ip hotspot.In general, all menu levels hold the same commands. The difference is expressed mainly incommand parameters.

ExampleFor example, you can issue the /ip route print command:[admin@Wandy] > /ip route printFlags: X - disabled, I - invalid, D - dynamic, J - rejected,C - connect, S - static, r - rip, o - ospf, b - bgp# DST-ADDRESS G GATEWAY DISTANCE INTERFACE0 S 0.0.0.0/0 r 192.168.2.1 1 WAN1 DC 192.168.124.0/24 r 0.0.0.0 0 LAN2 DC 192.168.2.0/24 r 0.0.0.0 0 WAN3 DC 192.168.0.0/24 r 0.0.0.0 0 LAN


28/462

[admin@Wandy] >

Instead of typing ip routepath before each command, the path can be typed only once to move into

this particular branch of menu hierarchy. Thus, the example above could also be executed like this:

[admin@Wandy] > ip route[admin@Wandy] ip route> printFlags: X - disabled, I - invalid, D - dynamic, J - rejected,C - connect, S - static, r - rip, o - ospf, b - bgp# DST-ADDRESS G GATEWAY DISTANCE INTERFACE0 S 0.0.0.0/0 r 192.168.2.1 1 WAN1 DC 192.168.124.0/24 r 0.0.0.0 0 LAN2 DC 192.168.2.0/24 r 0.0.0.0 0 WAN3 DC 192.168.0.0/24 r 0.0.0.0 0 LAN[admin@Wandy] ip route>

Notice that the prompt changes in order to reflect where you are located in the menu hierarchy atthe moment . To move to the top level again, type /:[admin@Wandy] > /ip route[admin@Wandy] ip route> /

[admin@Wandy] >To move up one command level, type ..:[admin@Wandy] ip route> ..[admin@Wandy] ip>

You can also use / and .. to execute commands from other menu levels without changing the currentlevel:[admin@Wandy] ip route> /ping 10.0.0.110.0.0.1 ping timeout2 packets transmitted, 0 packets received, 100% packet loss[admin@Wandy] ip route> .. firewall print# NAME POLICY0 input accept1 forward accept2 output accept

3 ;;; Limit unauthorized HS clientshs-temp none4 ;;; account auth HS clientshotspot none[admin@Wandy] ip route>

Lists and Item Names

Description

ListsMany of the command levels operate with arrays of items: interfaces, routes, users etc. Such arraysare displayed in similarly looking lists. All items in the list have an item number followed by itsparameter values.To change parameters of an item, you have to specify it's number to the set command.

Item NamesSome lists have items that have specific names assigned to each. Examples are interface oruserlevels. There you can use item names instead of item numbers.You do not have to use the print command before accessing items by name. As opposed to


29/462

numbers, names are not assigned by the console internally, but are one of the items' properties.Thus, they would not change on their own. However, there are all kinds of obscure situationspossible when several users are changing router's configuration at the same time. Generally, item

names are more "stable" than the numbers, and also more informative, so you should prefer them tonumbers when writing console scripts.

NotesItem numbers are assigned by print command and are not constant - it is possible that two

successive print commands will order items differently. But the results of last print commands arememorized and thus, once assigned, item numbers can be used even afteradd, remove and moveoperations (aftermove operation item numbers are moved with the items). Item numbers areassigned on per session basis, they will remain the same until you quit the console or until the next

print command is executed. Also, numbers are assigned separately for every item list, so ip

address print would not change numbers forinterface list.

Example[admin@Wandy] interface> set 0 mtu=1200ERROR: item number must be assigned by a print commanduse print command before using an item number in a command[admin@Wandy] interface> printFlags: X - disabled, D - dynamic, R - running# NAME TYPE RX-RATE TX-RATE MTU0 R Public ether 0 0 15001 R Local ether 0 0 15002 R wlan1 wlan 0 0 1500[admin@Wandy] interface> set 0disabled mtu name rx-rate tx-rate

[admin@Wandy] interface> set 0 mtu=1200[admin@Wandy] interface> set wlan1 mtu=1300[admin@Wandy] interface> printFlags: X - disabled, D - dynamic, R - running# NAME TYPE RX-RATE TX-RATE MTU0 R Public ether 0 0 12001 R Local ether 0 0 15002 R wlan1 wlan 0 0 1300[admin@Wandy] interface>

Quick Typing

DescriptionThere are two features in the console that help entering commands much quicker and easier - the[Tab] key completions, and abbreviations of command names. Completions work similarly to the

bash shell in UNIX. If you press the [Tab] key after a part of a word, console tries to find thecommand within the current context that begins with this word. If there is only one match, it isautomatically appended, followed by a space:

/inte[Tab]_ becomes /interface _If there is more than one match, but they all have a common beginning, which is longer than thatwhat you have typed, then the word is completed to this common part, and no space is appended:

/interface set e[Tab]_ becomes /interface set ether_


30/462

If you've typed just the common part, pressing the tab key once has no effect. However, pressing itfor the second time shows all possible completions in compact form:[admin@Wandy] > interface set e[Tab]_

[admin@Wandy] > interface set ether[Tab]_[admin@Wandy] > interface set ether[Tab]_ether1 ether5[admin@Wandy] > interface set ether_

The [Tab] key can be used almost in any context where the console might have a clue aboutpossible values - command names, argument names, arguments that have only several possiblevalues (like names of items in some lists or name of protocol in firewall and NAT rules).Youcannot complete numbers, IP addresses and similar values.

Another way to press fewer keys while typing is to abbreviate command and argument names. Youcan type only beginning of command name, and, if it is not ambiguous, console will accept it as afull name. So typing:[admin@Wandy] > pi 10.1 c 3 s 100equals to:[admin@Wandy] > ping 10.0.0.1 count 3 size 100

NotesPressing [Tab] key while entering IP address will do a DNS lookup, instead of completion. If whatis typed before cursor is a valid IP address, it will be resolved to a DNS name (reverse resolve),otherwise it will be resolved directly (i.e. to an IP address). To use this feature, DNS server must beconfigured and working. To avoid input lockups any such lookup will timeout after half a second,

so you might have to press [Tab] several times, before the name is actually resolved.It is possible to complete not only beginning, but also any distinctive substring of a name: if there isno exact match, console starts looking for words that have string b