Scribd
Upload
13 views32 pages

Secure Your MikroTik RouterOS Guide

This document provides guidelines for securing a MikroTik RouterOS router. It recommends keeping the router updated with the latest software version, securing user accounts with strong unique passwords, securing physical access to the router, disabling unused packages and services, loading a firewall, enabling logging, synchronizing the time through NTP, and other miscellaneous security measures like backup configuration encryption. The guidelines aim to prevent unauthorized access to the router and protect the network resources it provides.

Uploaded by

Ahmad Sofian
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
13 views32 pages

Secure Your MikroTik RouterOS Guide

This document provides guidelines for securing a MikroTik RouterOS router. It recommends keeping the router updated with the latest software version, securing user accounts with strong unique passwords, securing physical access to the router, disabling unused packages and services, loading a firewall, enabling logging, synchronizing the time through NTP, and other miscellaneous security measures like backup configuration encryption. The guidelines aim to prevent unauthorized access to the router and protect the network resources it provides.

Uploaded by

Ahmad Sofian
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Securing RouterOS router

EASY GUIDELINE TO PROTECT YOUR MIKROTIK ROUTEROS ROUTER


Me:
Anuwat Ngowchieng
อนุวัตร โง้วเชียง
Consulting Engineer
Internet Thailand Public Company Limited (INET)
too101@[Link]
Certificate:
◦ MikroTik: MCTNA, MTCWE
◦ Microsoft: MCP, MCSA, MCSE
◦ VMWare: VCP5-DCV
Why ?
Why ?
Prevent un-authorized people to access to the
system
Intruder can steal information from you, or
even deny you access to your resources
Intruder can use your resources to access to
the other system
Why ?
How ?
Keeping router up-to-date
Securing user & password
Securing physical access
Configuring packages
Hardening services
How ? (continue)
Loading firewall
Logging
NTP Sync
Misc
Keeping router up-to-date
Keeping router up-to-date
Use current version
Check Changelog before upgrade
to newer version
Download from trusted source
Check file (MD5) when
download from third party site
Keeping router up-to-date
Keeping router up-to-date
Securing user & password
Change admin account name
Set complex password
Create separate account for each
user
Set allowed address
Put read-only user in “read”
group
Securing user & password
Securing physical access
Disable Console (optional)
Always logout console
session
Disable Unused interface
Don’t config unused
interface (optional)
Securing physical access
Configuring packages
Disable unused packages
Check packages installed
Check version of each package
Configuring packages
Hardening services
Disable unsecured service (Ex. Telnet)
Change service port (optional)
Disable unused service
Define access lists for each service
Hardening services
Hardening services
Loading firewall
Loading up a firewall will add layer of security
Setup port knocking (optional)
Loading firewall
Loading firewall
Logging
Monitor log
Log to disk (Default RouterOS log to memory)
Send log to syslog server
Logging
NTP sync
Set time zone
Sync time with NTP server or IP cloud service
NTP sync
NTP sync
NTP sync
Misc
Static DHCP lease
Wi-Fi security
Backup config with password encrypted
Block Winbox Discovery
Disable Network Neighbor Discovery
Reference:
[Link]
[Link]
[Link]
[Link]
prevent-mt-host-from-invalid-login-attempts-from-lanwan-users/
[Link]
Thank you

You might also like