Mikrotik

what is a VLAN?

Fadıl

VLAN(Virtual Local Area Network)

VLAN   on what is a VLAN and we’re going to go ahead, jump right in here and answer that question real fast and just say a VLAN is a virtual local area network well, no we’re not going to just stop there, but I wanted to preface with that it’s called a virtual local area network, now we’ll define that a lot more here in minute but before we do I’d like to make sure you understand how traffic flows for regular lands without VLANs now the aliens have been around for a long time since the 90s so they’ve been used for a long time we use them all the time they’re a huge important topic and networking, but before we can understand VLANs, we need to understand pre VLANs so before we add VLANs, we would create separate networks like this laying one and LAN two and the point here is we have to physically separate switches so the host connected to land one cannot communicate with the hosts over a LAN 2 now I think we can all agree on that right because there’s no connection between these two switches they’re physically separated their own physical different Networks so before VLANs,this is the way things work now, why would we want to have hosts in different Networks we’ll take for example if we have a finance department for, you will sail and one is our finance department, we’ll sail and two were our guest network for any guests coming so it’s obvious that we would never want our guests network traffic or hosts on the guest network to be able to reach the host in our finance department right that wouldn’t be good for a company so in that case we need to separate those networks and before VLANs we had to do that physically the hosts needed to be physically Connected to separate networking, Hardware in this case switches write separate networking switches so that’s a great point in order to separate the traffic from LAN one tool and two we would have to have them connected to separate switches Mitch making sure that you understand that point, so interview lands with VLANs again they’re called virtual local area networks but what does that exactly mean it means they provide us lot call separation or segmentation of our Networks so we can take a single switch, for example, and chop it up into multiple logical networks where there’s different where the traffic is actually separate in each one of those Networks all right, so let’s define that a bit more further, we can have multiple networks or VLANs all on the same networking hardware or networking switch so taking our example here where we have two completely separate Networks well if we were to use VLANs we could actually have them all on the same hardware but still be separated so we could have our single switch here and implement VLANs and then we could have our two separate lands or two separate Networks attached the same physical device the same networking hardware but we can still keep their traffic completely separate and implement our own security controls on those networks individually and separately so you can see the importance of VLANs here now you’re good the light bulbs are going to go off a lot more here in a searchwhenever we describe more of a real-world scenario but this is the basics of it, this is the gist of it so the traffic is still completely separated from VLAN wine and VLAN two, but it’s done logically inside the switch rather than physically all right, so that should make some sense for you now the last point I wanted to make for we move on to the next topic is that our VLANs provide us with logical segmentation of Networks that’s kind of my final definition for you on VLANs provide logical segmentation of Networks okay so how can this apply to more of a real-world scenario?

What is NAT?

Fadıl

NAT stands for Network Address Translation and it is used to convert a private IP address into a public and a public IP address into a private, but the question is why do we need to convert the private IP address into the public or a public IP address into private I am going to explain you everything including this I will also explain to you what are the advantages and disadvantages of NAT in a computer network.

Mimosa Link Setup and Considerations Points

Fadıl

Mimosa Menu Structure

  • WIRELESS

All settings to be made with the wireless side are in this area.

  • PREFERENCES

This is the part of the device with non-wireless management tools.

  • DIAGNOSTICS

It is the area where the tests are performed, ping, bandwidth and traceroute tests are performed and the logos can be followed with the device.

Wireless /Link

Note:

2 Ms: This mode is for connections over 25.0 km / 15.5 miles

Mikrotik Limit Youtube and All Download and Unlimit Browsing

Fadıl

At the Mikrotik router firewall layer 7 levels, we will now see how to restriction youtube or all downloads.

Code is written in the new terminal winbox. Restrictions are made in layer 7 on the firewall side.

Here is a code:

/ip firewall layer7-protocol
add name=L7-Youtube regexp=youtube.com|googlevideo.com

/ip firewall mangle
add action=mark-connection chain=prerouting connection-bytes=\
262146-4294967295 in-interface=ether1-gateway new-connection-mark=\
All_Download protocol=tcp src-port=21,80
add action=mark-packet chain=prerouting connection-mark=All_Download \
in-interface=ether1-gateway new-packet-mark=All_Download passthrough=no
add action=mark-packet chain=forward comment=youtube layer7-protocol=\
L7-Youtube new-packet-mark=Youtube-Packet

/queue simple
add max-limit=3M/3M name=Youtube packet-marks=Youtube-Packet queue=\
default/default target=""
add max-limit=1M/1M name=Download packet-marks=All_Download queue=\
default/default target=""

Let’s see how to apply speed limit to youtube in winbox without code in Mikrotik router firewall.

How to Access the Remote UBNT Antennas Via Mikrotik?

Fadıl

If UBNT antennas are located in our Mikrotik network, we need to make certain configurations in the firewall of Mikrotik routers in order to reach UBNT antenna over the web.

Now let’s see how these configurations are made step by step.

Step 1.
In the network tab of the UBNT antenna, enter the required IP addresses in Management Network Settings.

Step2.

  1. winbox is on the ip address.
  2. Enter the firewall settings.
  3. Nat rule enters the following code.

Mikrotik open new terminal