COURSE O V E R V I E W

Transcription

1 COURSE O V E R V I E W This training course will provide you with the skills to configure Mikrotic Router OS Router Board as a dedicated router, a bandwidth manager, a secure firewall appliance, a simple wireless access point, a VPN server, or Client or an Internet Hotspot concentrator etc. It is a course that covers the basics for those that new to MikroTik RouterOS (or is struggling to understand it!) and concentrates on the basics of setting up a MikroTik device.

2 Objectives After successfully completing the course attendees will be able to installing and upgrading the RouterOS, first login to the RouterOS using RouterBOARD, creating a simple network, static IP addressing and routing, basic dynamic routing using OSPF, creating a DHCP server and client, firewall filters and NAT rules, various VPN Tunnel types, simple queues for bandwidth control, hotspot configuration, wireless networks, web proxy for URL Filtering control and caching and The Dude. Who should attend Anybody who wish to develop career in IT, computer networking or ISP management or CSE, ITEE, IEE students, Network administrators, integrators, managers and other technical users who already use or would like to start using Mikrotik RouterOS for their routing, firewall, hotspot and wireless projects. It is also a good introduction to routing and firewall systems, especially in a wireless environment.

3 Course Prerequisites No specific prerequisite Basic knowledge of computer networking is additive. Basic knowledge of TCP/IP and routing is additive. We will be expanding on this during the course, but we suggest that the participants have a good working knowledge of IP addressing and routing. 1. How to configure ISP link: ISP may give you IP in any one ways of 3 types: a. Static IP, b. DHCP IP, c. PPPoE user password 2. How to configure your LAN Network: You can give IP / Internet to your clients in 4 ways: a. Static b. DHCP c. PPPoE d. Hotspot

4 3. Bandwidth Control in different ways: a) Normal control per IP/dhcp-user/PPPoE/Hotspot user, b) Pick-Off pick different speed (like day= 256k, night= 1mb), c) Brust limit (speed will up-down, like from 128k to 512k: for shared users), d) Equal share in live users (your total bandwidth will equally divide in live users). e) Dedicate / Shared (Different group but shared user will get idle bandwidth of dedicate users) f) Higher Priority for VIP clients (VIP will get given speed confirm, then rest of others) g) High bandwidth for FTP or Mail service(like 256k for browsing but 1mb for mailing). h) Slow speed for auto-update windows, antivirus or Facebook or YouTube at office hour). i) LAN open speed (Within LAN user/work group/vpn, speed will not control) j) Ping time will be normal even at bandwidth full consumption. k) Proxy cache files speed will get at high speed like 10/100mbps l) Department/group wise parent control with priority, then per user control with priority. m) and much more 4. MAC Address Restrict for Static, DHCP, PPPoE, hotspot User will not able to change his IP to get high speed or to bypass filter. 5. Bandwidth uses/consumption graph: Interface wise, per client, per group, with restriction/security. 6. Administrative User Password and its security. Read only, write permission, full permission user create with allowed IP restriction, login will not allowed if allowed IP does not match even you know correct user password. 7. Firewall: Web site filter(per user/group wise/all user): Web site including https per user or group wise or for all users, filter bypass blocking process,

5 adult site filter. 8. Firewall: LAN user control, Common Virus Ports blocking, firewall / destination wise or port no wise filter for clients, 9. Firewall: outgoing spam mail auto control: Auto blocking virus affected PC and auto unblock after clean virus. 10. Firewall: Router s self-protection from any hacking attack. All types of hacking and un expected access attempt will be confirm to deny. 11. Configuration Backup creates and restore. Total configure backup or partial like only MAC, IP, firewall, and bandwidth control backup. 12. NTP Client (Time Server IP) Configure NTP to update router s time automatically. 13. Bridge mode configure:: Bridge required for control bandwidth without change previous router like cisco and there are so many utilization of bridge like EoIP purpose, VLAN purpose. 14. Log/History keeping: Client s connect/disconnect, Browsing log view and all others log store in windows PC. 15. Live monitoring: Source destination IP, Port, bandwidth consumption, broadcast, monitoring network problem detect and control. 16. VPN for LAN or Data Server share from remote office: Head office to Branch office connectivity through encrypted and secured tunnel with VPN server, VPN client, VPN windows dialer to connect any PC with private IP of head office, EoIP, IPIP, IPsec Tunnel. PPTP, SSTP, Security Leakage, By pass VPN Port blocked problem. 17. Data link redundancy: Auto Data link redundancy from Head office to Branch office.

6 18. OSPF: Auto redundancy and auto routing table update, 19. Internet Link Redundancy with fail over: 20. BGP: Load Balance, Bandwidth merge of different ISP with auto fail over, Auto redundancy, Load balance with two IIG like BTCL, MANGO, BDIX ( own Real IP and AS number required). 21. Hotspot: Hotspot solution for auto login page display at client PC, Prepaid Card Pin generate for different speed & validity with Data limit like 256k, 30 days, 10gb data limit, 22. Mikrotik Wireless: Access point, Client restriction, Radio Link P2P or Multi Point. 23. PC Based Mikrotik: OS Install, License, Version upgrade, version downgrade, New package install, 24. VLAN Configure: Sub Interface Create with VLAN ID, connect to Trunk port of manageable switch. 25. Scheduling: Auto backup create and auto send to your address with backup file attachment, 26. Command mode: Partial backup like: simple queue, PPPoE user or MAC backup all other configure with command 27. IP, Subnet mask calculation, supernet, subnet in Details. 28. And much more including your problems & troubleshooting of your running network.