Mirkotik notes
Interacting with the system
RouterOS is like a Unix filesystem.
Grey items are folders, pink items are programs.
####View config
View interfaces
interface printview values
printview config (show run)
/export##### show mac address table
#This one is horrible. We have to show mac table for the bridge then ‘where’ for our interface? I guess its not that bad, I am just frustrated that good old regex won’t work.
#Find MAC addresses on interface1 on the bridge
interface/bridge/host/print where on-interface=ether1#### Help
F1 shows help for all commands on screen.
#### “Safe mode” (commit confirm)
F4 enables “Safe mode” which is equivalent to a commit confirm. If you enter safe mode and make changes but get disconnected all changes will revert.
#### Interactive edit
#There is an interactive edit mode, its edit
#### Grep
#The miktotik falls short with the grep command. There is something called ‘message’ but it sucks. You must search by column name.
#I have not found the reverse of this.
print where message~"[regex here]"#### LLDP Neighbor discovery
/ip neighbor/printInterface commands
#### view interfaces
#View all interfaces
/interface/print#View only admin down interfaces
/interface/print where disabled#View only up interfaces
/interface/print where running#### Show interface status
#Up/down is set with a flag here
/interface/print stats#Show interface status verbose
/interface/print stats-detail#### Setting interface admin status
#Set interface to admin down
/interface/ethernet/disable [interface name]#Set interface to admin up
/interface/ethernet/enable [interface name]#### Show link status (speed/duplex)
/interface/ethernet/monitor [interface name]#### Show interface status for individual interface
/interface/print stats-detail where name=[port name]#### Show SFP module and information
/interface/ethernet/monitor [sfp port name]Configuration
#### Changing hostname
/system identity set name=[new name]#### Networking
Set DHCP management address
/ip dhcp-client add interface=bridgeSet static IP address:
/ip address add address=192.168.88.1/24 interface=bridge network=192.168.88.0#### DHCP snooping
#Set an existing interface on the bridge to be trusted
/interface bridge port set interface=ether1 trusted=yesnumbers: *#Enable DHCP snooping
/interface bridge set [find where name="bridge"] dhcp-snooping=yes#Verify this with export
/interface bridge export#### Reboot the switch
/system reboot#### Updates
Updates take about 5 minuites
#### L2 hardware offloading
#L2 hardware offloading is enabled by default. This can be viewed with
/interface/bridge/port printIt looks like there are some limitations to this, onely one bridge can be hardware offloaded. This does not apply to CRS 3XX switches.
#### Spanningtree
#View spanningtree - We will be running RSTP, so all bridges will have the same setup.
/interface/bridge/monitor bridge/interface/bridge/port/print#Set portfast - Enabled by default untill a BPDU is found.
/interface/bridge/port set edge=yes#Enable bpdu-guard
/interface/bridge/port set bpdu-guard=yes#Define interface priority
/interface/bridge/edit bridge priorityVlans
#CRS 3XX switches do this all in hardware by default
#vlan-filtering must be enabled on the bridge (set to default)
/interface/bridge/set vlan-filtering=yes#Set copper ports to access ports
/interface/bridge/port set frame-types=admit-only-untagged-and-priority-tagged [find where interface~"ether"]#Set SFP ports to trunk ports
/interface/bridge/port set frame-types=admit-only-vlan-tagged [find where interface~"sfp-sfpplus"]#Set our port per-vlan-id, the vlan untagged traffic will be on (we have to kind of do this part twice…)
/interface/bridge/port set pvid=(insert pvid)Manipulateing multiple interfaces at once
#Set command on all ethernet interfaces
/interface/bridge/port set [find where interface~"ether"]#Set command on all SFP interfaces
/interface/bridge/port set [find where interface~"sfp-sfpplus"]