Mikrotik Tools

Documentation

Learn how to use MikroTik Tools safely and effectively. Follow these guidelines to ensure successful network configuration.

What You Should Do

Backup Before Changes
Always create a backup of your RouterOS configuration before applying any scripts or changes generated by these tools.
/system backup save name=backup-before-changes
Review Generated Scripts
Carefully review all generated scripts before executing them. Understand what each command does and verify IP addresses, interfaces, and parameters match your network setup.
Test in Non-Production
Test scripts on a non-production router or in a lab environment first. This helps identify issues before applying changes to your live network.
Verify RouterOS Version
Ensure the generated scripts are compatible with your RouterOS version. Some tools support both ROS6 and ROS7 - select the correct version before generating scripts.
Use Copy Function
Use the "Copy Full Script" button to copy generated scripts. This ensures you get the complete script without missing any lines. Paste directly into Winbox Terminal or RouterOS CLI.
Validate Input Parameters
Double-check all input parameters such as IP addresses, MAC addresses, interface names, and bandwidth values. Incorrect values can cause network outages or security issues.

What You Shouldn't Do

Don't Run Scripts Blindly
Never execute generated scripts without understanding what they do. Blindly running scripts can lock you out of your router, break network connectivity, or create security vulnerabilities.
Don't Skip Backups
Never skip creating backups, even for "simple" changes. RouterOS configuration changes can have immediate effects, and backups are your only way to quickly recover from mistakes.
Don't Use on Production Without Testing
Avoid applying scripts directly to production routers without testing. Always test in a lab environment or during maintenance windows with a rollback plan.
Don't Modify Scripts Incorrectly
If you need to modify generated scripts, ensure you understand RouterOS syntax. Incorrect modifications can cause syntax errors, unexpected behavior, or security issues.
Don't Ignore Version Compatibility
Don't use ROS6 scripts on ROS7 routers or vice versa without verifying compatibility. RouterOS 7 has significant changes that may cause scripts to fail or behave unexpectedly.
Don't Share Sensitive Information
Never share generated scripts containing passwords, API keys, or sensitive network information publicly. These tools generate scripts with your credentials - keep them secure.

Best Practices

General Guidelines

1. Script Execution

  • Execute scripts during maintenance windows when possible
  • Have physical or out-of-band access to the router
  • Keep a copy of the original configuration
  • Monitor the router after applying changes

2. Calculator Tools

  • Use calculators to plan bandwidth allocation before implementation
  • Verify calculations match your actual network requirements
  • Consider overhead and burst requirements in your calculations
  • Export results for documentation and future reference

3. Security Considerations

  • Change default passwords before applying any scripts
  • Use strong passwords for API keys and bot tokens
  • Review firewall rules generated by tools
  • Test security configurations in isolated environments

4. Troubleshooting

  • Check RouterOS logs after applying scripts: /log print
  • Verify interface names match your router's actual interfaces
  • Test connectivity after applying routing or firewall changes
  • Use /export to compare configurations

Tool-Specific Notes

Script Generators
Route, Mangle, NAT, VPN, Queue, Hotspot tools
  • Generated scripts are ready to paste into RouterOS Terminal
  • Some tools require specific RouterOS packages (e.g., routing, ppp, hotspot)
  • Verify all IP addresses and interface names are correct
  • Check that required packages are installed before running scripts
Calculators
Bandwidth, IP, Burst, Queue calculators
  • Calculators provide estimates - actual performance may vary
  • Consider network overhead and protocol overhead in calculations
  • Use calculators to plan capacity, not as absolute guarantees
  • Export calculation results for documentation
Configuration Wizards
Hotspot, VPN, Protection wizards
  • Wizards generate complete configuration scripts
  • Review all generated settings before applying
  • Some wizards may require additional manual configuration
  • Test wizard-generated configs in non-production first
Important Warnings
WARNING

Network Outages: Incorrect routing, firewall, or NAT configurations can cause complete network outages. Always have a rollback plan.

WARNING

Lockout Risk: Firewall rules or access list changes can lock you out of the router. Ensure you have alternative access methods (physical console, out-of-band management).

WARNING

Security Vulnerabilities: Incorrectly configured scripts can create security holes. Review firewall rules and access controls carefully.

WARNING

Data Loss: Some scripts may reset or clear existing configurations. Always backup before applying any changes.

These tools are provided as-is for educational and administrative purposes. Always verify and test configurations in non-production environments before applying to live networks.