https://www.facebook.com/866366057049374/

Jasa Setting Mikrotik daerah Cikarang, Perumahan Mutiara Bekasi Jaya B7 no 7, Cibarusah, Bekasi (2026)

Q: What is the address?

Perumahan Mutiara Bekasi Jaya B7 No 7, Cibarusah

07/07/2026

🎯 IP POOLS: PONDASI DHCP & PPP YANG SERING DILUPAKAN!

Setup DHCP tapi addresses berantakan? 🤔

IP Pools adalah backbone yang harus di-configure dengan benar!
IPv4, IPv6, ranges, next-pool - semua ada di sini! 📚

───────────────────────────────────────────────────

❓ APA ITU IP POOL?

= Central repository dari IP address ranges
= Used by DHCP server, PPPoE, L2TP, Point-to-Point servers
= Manage & allocate addresses ke clients
= Separate list untuk IPv4 dan IPv6

Analogi: Inventory gudang IP addresses!

───────────────────────────────────────────────────

📊 IPv4 POOL BASICS

Properties:
• name = pool identifier (e.g., "dhcp-pool", "ppp-pool")
• ranges = IP address ranges (dari-sampai format)
• next-pool = fallback pool (jika pool ini habis)
• comment = description

Format ranges: 10.0.0.1-10.0.0.127,10.0.0.200-10.0.0.250

Multiple ranges allowed! (non-overlapping!)

───────────────────────────────────────────────────

⚡ EXAMPLE IPv4 POOL SETUP

Scenario: ISP dengan 3 subnets

Pool 1 (DHCP clients):
/ip pool add name=dhcp-clients ranges=10.0.1.100-10.0.1.200

Pool 2 (PPPoE users):
/ip pool add name=pppoe-users ranges=10.0.2.100-10.0.2.200

Pool 3 (Hotspot):
/ip pool add name=hotspot-users ranges=10.0.3.100-10.0.3.200

List pools:
/ip pool print

───────────────────────────────────────────────────

🔗 NEXT-POOL (CASCADING POOLS!)

Jika Pool A habis → automatically ambil dari Pool B!

Example setup:

Pool A (primary):
/ip pool add name=pool-primary ranges=10.0.0.1-10.0.0.50

Pool B (overflow):
/ip pool add name=pool-overflow ranges=10.0.0.51-10.0.0.100

Link Pool B ke Pool A (fallback):
/ip pool set pool-primary next-pool=pool-overflow

= Smart address management! 🎯

───────────────────────────────────────────────────

📋 MONITORING POOL USAGE

See which addresses dari pool yg sudah digunakan:

/ip pool used print

Output:
address=10.0.0.5, owner=dhcp, info=AA:BB:CC:DD:EE:FF
address=10.0.0.6, owner=pppoe, info=username1
address=10.0.0.7, owner=l2tp, info=username2

= Track siapa ambil IP dari mana!

───────────────────────────────────────────────────

🌍 IPv6 POOL SETUP

Prefix-based allocation (bukan individual addresses!)

Properties:
• name = pool name
• prefix = IPv6 prefix (e.g., 2001:db8::/60)
• prefix-length = size yang di-allocate ke client (/62, /64, dll)
• from-pool = optional (dynamic prefix dari pool lain)

Example:
/ipv6 pool add name=ipv6-clients prefix=2001:db8::/60 prefix-length=64

= Allocate /64 prefixes dari /60 pool ke clients!

───────────────────────────────────────────────────

💡 REAL-WORLD SCENARIO

ISP dengan 1000 clients, 3 subnets:

NETWORK 1: 10.0.1.0/24 (DHCP LAN clients)
Pool: 10.0.1.100-10.0.1.250
Command:
/ip pool add name=lan-dhcp ranges=10.0.1.100-10.0.1.250

NETWORK 2: 10.0.2.0/24 (PPPoE dial-up users)
Pool: 10.0.2.1-10.0.2.250
Command:
/ip pool add name=pppoe-dial ranges=10.0.2.1-10.0.2.250

NETWORK 3: 10.0.3.0/24 (Hotspot public)
Pool: 10.0.3.1-10.0.3.250
Command:
/ip pool add name=hotspot-public ranges=10.0.3.1-10.0.3.250

= 3 pools, 3 purposes, 750 total addresses!

───────────────────────────────────────────────────

🔧 ADVANCED: EXCLUDING ADDRESSES

Need to exclude gateway, DNS, servers dari pool?

Gunakan MULTIPLE RANGES!

Example: 10.0.0.0/24 network
• Gateway: 10.0.0.1 (exclude)
• DNS: 10.0.0.2 (exclude)
• Server: 10.0.0.100 (exclude)
• DHCP Pool: rest

Setup:
/ip pool add name=dhcp ranges=10.0.0.3-10.0.0.99,10.0.0.101-10.0.0.254

= Gateway, DNS, Server excluded! ✅

───────────────────────────────────────────────────

📊 IPv6 POOL EXAMPLE

ISP dengan 2001:db8::/32 allocation

Create /60 prefix pool:
/ipv6 pool add name=client-prefixes prefix=2001:db8::/60 prefix-length=64

= Clients automatically dapat /64 dari /60 pool!

Monitor IPv6 usage:
/ipv6 pool used print

Output:
owner=dhcpv6, prefix=2001:db8::1::/64, info=DUID-hash

───────────────────────────────────────────────────

⚠️ COMMON MISTAKES

❌ Overlapping ranges (conflict!)
✅ /ip pool add name=p1 ranges=10.0.0.1-10.0.0.100
✅ /ip pool add name=p2 ranges=10.0.0.101-10.0.0.200
❌ /ip pool add name=p3 ranges=10.0.0.50-10.0.0.150 (OVERLAP!)

❌ Pool too small (addresses run out)
✅ Plan untuk 30% growth buffer

❌ Not excluding gateway/DNS/servers
✅ Always exclude important IPs dari pool ranges

❌ Jangan mix IPv4 & IPv6 dalam configuration
✅ Separate IPv4 pools (/ip pool)
✅ Separate IPv6 pools (/ipv6 pool)

───────────────────────────────────────────────────

✅ BEST PRACTICES

☑️ Plan addressing BEFORE pool setup
☑️ Document pools (name, purpose, range)
☑️ Exclude critical IPs (gateway, DNS, servers)
☑️ Size pools untuk growth (30% buffer)
☑️ Use next-pool untuk overflow management
☑️ Monitor pool usage regularly
☑️ IPv4 & IPv6 pools separate
☑️ Use descriptive pool names (dhcp-lan, pppoe-wan, dll)

───────────────────────────────────────────────────

📋 POOL CONFIGURATION CHECKLIST

☑️ Define subnets & ranges
☑️ Create IPv4 pools
☑️ Create IPv6 pools (if applicable)
☑️ Exclude critical IPs
☑️

07/07/2026

🔧 ROUTERBOOT FIRMWARE: JANGAN ABAIKAN SAAT UPGRADE ROUTEROS!

Kamu upgrade RouterOS tapi lupa upgrade RouterBOOT? ⚠️

Ini sering terlewat padahal CRITICAL untuk device stability & compatibility!

───────────────────────────────────────────────────

❓ APA ITU ROUTERBOOT?

= Bootloader firmware yang run SEBELUM RouterOS
= Responsible for starting RouterOS di RouterBOARD devices
= Terpisah dari RouterOS (beda firmware)
= Update setiap kali ada RouterOS major update

Analogi: BIOS di komputer, load sebelum Windows/Linux!

───────────────────────────────────────────────────

⚠️ MAIN vs BACKUP BOOTLOADER

MAIN BOOTLOADER:
= Default bootloader untuk boot
= Bisa di-upgrade
= Jika rusak → use backup bootloader

BACKUP BOOTLOADER:
= Secondary bootloader (fail-safe)
= Automatically used jika main fails
= Cannot di-upgrade (read-only)
= Lifesaver jika main bootloader corrupt!

Emergency access: Hold RESET button saat power on!

───────────────────────────────────────────────────

🔘 RESET BUTTON FUNCTIONS (3 DALAM 1!)

HOLD 5 SECONDS (LED flashing):
→ Reset RouterOS configuration (keep system)
→ Password reset ke factory default!

HOLD 10 SECONDS (LED solid):
→ Enter CAPsMAN mode
→ Advanced access mode

HOLD 15 SECONDS (LED off):
→ Enable Netinstall mode
→ Device cari Netinstall server untuk recovery!

HOLD BEFORE POWER ON + Button:
→ Force BACKUP bootloader to load!
→ Use jika main bootloader corrupt

───────────────────────────────────────────────────

⚡ ROUTERBOOT SETUP MENU (SERIAL CONSOLE)

Access via serial port dengan Ctrl+E atau key press during boot

Konfigurasi tersedia:
d - boot delay (tunggu interface initialize)
k - boot key (tombol setup)
s - serial console (baud rate)
n - silent boot (no output, useful untuk GPS/sensors)
o - boot device (NAND, Ethernet, Netinstall)
z - extra kernel parameters
r - reset booter configuration
e - format storage (WIPE ALL DATA!)
w - repartition NAND
g - upgrade firmware
i - board info (lihat serial, MAC, memory)
p - boot protocol (BOOTP vs DHCP)
b - booter options (main vs backup bootloader)

───────────────────────────────────────────────────

✅ 3 LANGKAH UPGRADE ROUTERBOOT AMAN

STEP 1️⃣ - BACKUP CONFIGURATION FIRST
/system/backup/save name=backup-before-bootloader-upgrade password=SecurePass!
= Jaga-jaga jika ada issue!

STEP 2️⃣ - UPGRADE ROUTERBOOT
/system/routerboard/upgrade
(Confirm: y/n)

STEP 3️⃣ - REBOOT DEVICE
/system/reboot
= Reboot untuk apply firmware

───────────────────────────────────────────────────

📊 CHECK ROUTERBOOT VERSION

Command:
/system/routerboard/print

Output contoh:
routerboard: yes
board-name: hAP ac
model: RouterBOARD 962UiGS-5HacT2HnT
serial-number: 6737057562DD
factory-firmware: 3.29
current-firmware: 6.49.5
upgrade-firmware: 7.4beta5 ← NEW version available!

Jika ada "upgrade-firmware" = ada versi baru! 🔔

───────────────────────────────────────────────────

💡 BEST PRACTICES

✅ Always upgrade RouterBOOT after RouterOS update
✅ Backup config BEFORE bootloader upgrade
✅ Use stable power supply (jangan mati saat upgrade!)
✅ Don't interrupt during upgrade (patience!)
✅ Reboot fully setelah upgrade
✅ Verify dengan /system/routerboard/print

❌ JANGAN LAKUKAN:

❌ Skip RouterBOOT upgrade (akan cause issues!)
❌ Upgrade bootloader tanpa backup config
❌ Power off saat upgrade (CORRUPT RISK!)
❌ Upgrade ke development/beta bootloader (stability risk)

───────────────────────────────────────────────────

⚠️ EMERGENCY: CORRUPT BOOTLOADER

Problem: Device tidak bisa boot!

Solution:
1. Hold RESET button SEBELUM power on (5+ sec)
2. Press power → LED akan flashing
3. Release RESET button
4. Backup bootloader akan load
5. Connect via serial/telnet/ssh
6. Downgrade main bootloader atau re-upload firmware
7. Use Netinstall untuk recovery (hold RESET 15 sec)

= Backup bootloader = lifesaver! 🎯

───────────────────────────────────────────────────

📋 UPGRADE CHECKLIST

☑️ Check current & available version
/system/routerboard/print

☑️ Backup config
/system/backup/save

☑️ Upgrade RouterBOOT
/system/routerboard/upgrade

☑️ Confirm upgrade
Type: y

☑️ Reboot
/system/reboot

☑️ Verify success
/system/routerboard/print

☑️ Monitor logs
/log print

───────────────────────────────────────────────────

🔧 SERIAL CONSOLE CONFIG (ADVANCED)

Jika need advanced settings via serial:
1. Connect serial cable (115200 baud, 8N1)
2. Press key during boot
3. Access RouterBOOT menu
4. Configure d/k/s/o/z parameters
5. Exit (x) & boot

Useful untuk:
• Silent boot (disable serial output)
• Boot delay tuning
• Device recovery
• Extra kernel parameters

───────────────────────────────────────────────────

📞 ROUTERBOOT PERLU BANTUAN?

Bootloader corrupt? Tidak bisa boot?
Perlu Netinstall recovery?

Chat WA → 081296140453
Kami recovery & fix bootloader issues! ✅

07/07/2026

🚀 ROUTEROS V6 → V7 UPGRADE: MAJOR RELEASE - PERHATIAN DIPERLUKAN!

Masih pakai RouterOS v6? 2026 ini harus upgrade ke v7! 📈

Tapi UPGRADE BESAR INI bukan sekedar click & go - ada persiapan & perhatian khusus!

───────────────────────────────────────────────────

⚠️ ROUTING REDESIGN (BIGGEST CHANGE!)

v6 Routing:
/routing bgp → simple menu
/routing ospf/instance → basic config

v7 Routing (COMPLETE REDESIGN):
/routing/bgp/connection → connection-based
/routing/bgp/template → template system
/routing/bgp/session → session monitoring
/routing/ospf → merged OSPFv2 + OSPFv3

= Lebih powerful tapi CONFIG BERUBAH! ⚠️

───────────────────────────────────────────────────

📋 FITUR COMPATIBILITY CHECKLIST

✅ AMAN (Auto-convert):
• Interfaces, Bridges, Tunnels, IPv6
• Static Routing, Firewall, HotSpot
• IGMP Proxy, CAPsMAN, Tools, Queues

⚠️ NEEDS ATTENTION (Manual review):
• BGP (complete redesign)
• OSPF (templates system)
• MPLS (backup before upgrade!)
• Routing filters (if..then syntax)

❌ NOT PRESERVED:
• PIM-SM (reconfigure manually)
• User Manager (migrate database or start fresh)

───────────────────────────────────────────────────

🔧 BGP CHANGES (JIKA PAKAI BGP)

v6 BGP:
/routing bgp instance default set as=65000
/routing bgp peer add remote-address=10.0.0.1

v7 BGP (NEW):
/routing/bgp/template set default as=65000
/routing/bgp/connection add remote.address=10.0.0.1 template=default

BGP config COMPLETELY DIFFERENT!
= Harus manual reconfigure atau use migration guide

───────────────────────────────────────────────────

🔄 OSPF CHANGES (JIKA PAKAI OSPF)

v6 OSPF:
/routing ospf instance default set router-id=1.1.1.1
/routing ospf area default add network=10.0.0.0/24

v7 OSPF (MERGED):
OSPFv2 + OSPFv3 merged in /routing/ospf
= Instance & area WAJIB dibuat manual
= Templates untuk interface matching

Manual reconfiguration REQUIRED! ⚠️

───────────────────────────────────────────────────

📦 NEW FEATURES DI v7

✅ Performance improvements (new kernel + route cache)
✅ WireGuard support (VPN modern)
✅ Let's Encrypt certificates (free SSL)
✅ REST API (automation ready)
✅ IPv6 NAT support
✅ VXLAN support (network virtualization)
✅ Hardware offloading (Prestera, RTL8367, MT7621)
✅ WiFiWave2 (802.11ac Wave2, WPA3)
✅ ZeroTier support (mesh networking)

= v7 jauh lebih powerful! 💪

───────────────────────────────────────────────────

⚡ 5 LANGKAH UPGRADE AMAN

STEP 1️⃣ - BACKUP FIRST (CRITICAL!)
/system/backup/save name=backup-v6-final password=SecurePass@2026!
Download & store safely!

STEP 2️⃣ - UPDATE v6 DULU
Upgrade ke v6 LATEST terlebih dahulu
(v6.48.x atau v6.49.x)

STEP 3️⃣ - ENABLE SAFE MODE (F4)
Jangan lupa safe mode sebelum upgrade!

STEP 4️⃣ - UPGRADE KE v7
Use "Check for Updates" untuk upgrade
(Internet connection STABLE!)

STEP 5️⃣ - VERIFY CONFIGURATION
Check semua setting setelah reboot
Terutama: routing, firewall, interfaces

───────────────────────────────────────────────────

⚙️ ROUTING PROTOCOLS - ACTION REQUIRED

BGP Users:
→ Read BGP migration guide
→ Manual reconfigure atau use script
→ Test di lab environment first!

OSPF Users:
→ OSPFv2 + OSPFv3 now merged
→ Must create instance & area manually
→ Interface templates untuk matching

MPLS Users:
⚠️ BACKUP BEFORE UPGRADE!
→ Complex migration, test thoroughly

───────────────────────────────────────────────────

❌ JANGAN LAKUKAN

❌ Upgrade tanpa backup (DISASTER!)
❌ Upgrade production router langsung
❌ Upgrade BGP router tanpa migrasi plan
❌ Abaikan routing protocol changes
❌ Upgrade device dengan

07/07/2026

🔍 SUPOUT.RIF FILE: DIAGNOSTIC TOOL UNTUK TROUBLESHOOT ROUTER!

Router problem? Butuh support dari MikroTik? 🤔

Supout.rif adalah file MAGIC untuk debug RouterOS dengan cepat! Ini yang MikroTik minta setiap kali troubleshoot!

───────────────────────────────────────────────────

❓ APA ITU SUPOUT.RIF?

= Binary file yang contain ALL router information
= Config, logs, system details, network stats
= Safe untuk share ke support (NO PASSWORDS!)
= Tool untuk diagnostik & troubleshooting

Ukuran: biasanya 50KB - 5MB (depends on logs)

───────────────────────────────────────────────────

📋 SUPOUT.RIF CONTAIN:

✅ Router configuration (semua setting)
✅ System logs (history of events)
✅ Network statistics (interface data)
✅ Memory & resource usage
✅ Running processes & services
✅ Error messages & warnings

❌ NOT included:
✅ Passwords (aman!)
✅ Sensitive data
✅ Encryption keys
✅ User credentials

Safe untuk share ke MikroTik support! 🔒

───────────────────────────────────────────────────

⚡ 3 CARA GENERATE SUPOUT.RIF

METHOD 1️⃣ - WINBOX (EASIEST)

1. Open WinBox
2. Click "Make Supout.rif" button
3. Right-click file → Download
4. File saved ke computer!

METHOD 2️⃣ - WEBFIG

1. Login ke Webfig (http://router-ip)
2. Click "Make Supout.rif"
3. Click "Download"

METHOD 3️⃣ - CLI (COMMAND LINE)

Generate file:
/system sup-output name=supout.rif

Output width (jika tampilan sempit):
/system sup-output name=supout.rif output-width=300

Download via FTP atau WinBox File menu

───────────────────────────────────────────────────

💡 KAPAN HARUS GENERATE SUPOUT.RIF?

✅ Router problem (cannot troubleshoot sendiri)
✅ Performance issue (butuh diagnose)
✅ Error messages (MikroTik perlu lihat logs)
✅ Network problem (config analysis needed)
✅ Support ticket (MikroTik minta file ini!)
✅ Before & after configuration (compare changes)

Anytime kamu stuck → Generate & analyze!

───────────────────────────────────────────────────

📊 SUPOUT VIEWER (ONLINE TOOL)

MikroTik provide free online viewer:

1. Generate supout.rif file
2. Go to: account.mikrotik.com → Supout.rif Viewer
3. Upload file
4. View contents (formatted, readable)

Can compare multiple files (open 5 at once!)
Useful untuk: analyze config, check logs, see stats

───────────────────────────────────────────────────

🔧 USEFUL INFO DI SUPOUT.RIF

Logs:
/system history → recent actions
/log print → all system logs

Configuration:
/interface print → all interfaces
/ip address print → IP configuration
/routing → routing configuration

Resources:
/system resource print → memory, CPU, disk usage
/system health print → temperature, voltages

───────────────────────────────────────────────────

⚠️ WHEN SENDING TO SUPPORT

❌ DO NOT send via WhatsApp/Telegram (file besar!)
✅ DO upload ke MikroTik support ticket
✅ DO explain problem clearly (context!)
✅ DO include supout.rif + error messages

Format: Supout.rif + Detailed problem description

───────────────────────────────────────────────────

💾 AUTO-SUPOUT.RIF (BONUS!)

RouterOS juga generate auto-supout.rif when:
• Router crash/reboot
• Error conditions
• System problems

File stored: /auto-supout.rif
Check this file untuk see WHAT happened before crash!

───────────────────────────────────────────────────

✅ BEST PRACTICES

☑️ Generate supout.rif saat problem terjadi
☑️ Keep file for future reference
☑️ Share to support dengan context
☑️ Use Supout Viewer untuk self-diagnose
☑️ Compare before/after changes
☑️ Archive old files (historical data)

───────────────────────────────────────────────────

📞 STUCK DENGAN DIAGNOSTIK?

Chat WA → 081296140453
Kami analyze supout.rif + solve problems! ✅

07/07/2026

💾 ROUTEROS BACKUP: CONFIG KAMU HARUS DIBACKUP (WAJIB!)

Router kamu rusak? Data config hilang? 😱

Backup adalah SATU-SATUNYA cara recover configuration! Tapi banyak yang lupa atau salah backup!

───────────────────────────────────────────────────

⚠️ KENAPA BACKUP PENTING?

Hardware rusak → Backup bisa restore config di device baru ✅
Update RouterOS error → Config bisa di-restore ✅
Lupa setting → Backup jadi reference ✅
Disaster recovery → Data tidak hilang ✅

Tanpa backup = START FROM ZERO! 😭

───────────────────────────────────────────────────

🔄 .BACKUP vs .RSC (APA BEDANYA?)
BACKUP (Binary format):
✅ Full configuration (semua setting, users, certs, MAC)
✅ User configuration
✅ Sensitive data (ENCRYPTED!)
✅ Hanya restore ke RouterOS SAME version
❌ Tidak bisa di-edit (binary format)
RSC (Text format):
✅ Text-based (bisa dibuka di text editor)
✅ Bisa di-edit manual
✅ Lebih portable (berbagai version)
❌ Tidak include semua setting (incomplete)

Recommended: Use .BACKUP untuk full recovery!

───────────────────────────────────────────────────

💡 3 LANGKAH BACKUP YANG BENAR

STEP 1️⃣ - SAVE BACKUP FILE

/system/backup/save name=my-router password=YourSecurePass123!

Output: File saved → /file menu

STEP 2️⃣ - DOWNLOAD BACKUP

WinBox: File menu → Download backup file
CLI: FTP to get file

STEP 3️⃣ - STORE SAFELY

✅ Local storage (external drive)
✅ Cloud storage (encrypted!)
✅ Multiple locations
❌ Jangan share ke orang lain (ADA PASSWORD!)

───────────────────────────────────────────────────

🔐 ENCRYPTION SETTINGS

Parameter | Value | Notes
-----------|-------|------
dont-encrypt | yes/no | Disable encryption (not recommended!)
encryption | aes-sha256 | Best method (default)
password | your-password | WAJIB set password!

⚠️ WARNING: Tanpa password = backup UNENCRYPTED!
= Siapa saja bisa buka file & liat config!

Always use PASSWORD! 🔒

───────────────────────────────────────────────────

💾 CONTOH BACKUP COMMAND

Save dengan password:
/system/backup/save name=backup-$(date) password=SecurePass@2026!

List backup files:
/file print

Load backup (restore):
/system/backup/load name=my-router.backup password=SecurePass@2026!
(Will reboot & restore config!)

───────────────────────────────────────────────────

⚡ CLOUD BACKUP (BONUS!)

RouterOS v6.44+: Backup bisa simpan di MikroTik Cloud!

/ip/cloud backup upload → Upload ke cloud MikroTik
= Aman & encrypted
= Access from anywhere
= Auto-managed versioning

───────────────────────────────────────────────────

❌ KESALAHAN UMUM

❌ Tidak backup sebelum major change
❌ Password terlalu mudah (use strong!)
❌ Backup simpan di 1 tempat saja (no redundancy!)
❌ Forget password backup (file jadi unusable!)
❌ Encrypt dengan RC4 (deprecated, use AES!)

───────────────────────────────────────────────────

✅ BACKUP CHECKLIST

☑️ Backup saved dengan password
☑️ Encryption: AES-SHA256
☑️ File downloaded & stored safely
☑️ Multiple copies (local + cloud)
☑️ Password noted somewhere safe
☑️ Test restore (sanity check!)
☑️ Regular backup schedule (weekly/monthly)

───────────────────────────────────────────────────

📋 BACKUP STRATEGY

BEST PRACTICE:
✅ Daily backup (scheduler)
✅ Password protected
✅ Cloud backup (auto-sync)
✅ Local backup (external drive)
✅ Version control (date-stamped files)

Example scheduler:
/system/scheduler/add name=backup on-event=/system/backup/save name=router-$(date) password=SecurePass! interval=1d

───────────────────────────────────────────────────

📞 BACKUP PERLU DITEST?

Chat WA → 081296140453
Kami setup automated backup + verify restore! ✅

07/07/2026

💻 ROUTEROS CLI CONSOLE: COMMAND LINE BASICS YANG WAJIB KAMU TAHU!

SSH, Telnet, atau Serial terminal terasa asing? 😅

Ini guide lengkap CLI console navigation + shortcuts yang bikin kamu expert user! 🚀

───────────────────────────────────────────────────

🎯 APA ITU CLI CONSOLE?

= Text-based interface untuk manage router via terminal
= Alternative ke WinBox (GUI)
= Lebih powerful & faster untuk automation/scripting

Akses via:
✅ SSH (recommended, encrypted)
✅ Telnet (legacy, unencrypted)
✅ Serial port (direct connection)
✅ WinBox terminal (embedded)

───────────────────────────────────────────────────

📊 MENU HIERARCHY = FOLDER STRUCTURE

CLI organize commands dalam HIERARCHY (tree structure)

Contoh:
/ip/address → IP addresses menu
/interface → Interfaces menu
/routing/bgp → BGP routing menu

Navigasi:
[admin@MikroTik] > ip address
[admin@MikroTik] ip address> print
(Prompt berubah menunjukkan current level!)

───────────────────────────────────────────────────

🔄 NAVIGATION COMMANDS (WAJIB TAHU!)

Command | Function | Example
---------|----------|----------
/ | Go to root level | ip address > / → [admin@MikroTik] >. | Go up one level | ip address > .. → [admin@MikroTik] ip>
/command | Run from any level | ip address > /ping 8.8.8.8
TAB | Auto-complete | /in[TAB] → /interface. | Go up level | ip firewall > ..

───────────────────────────────────────────────────

🔧 UNIVERSAL COMMANDS (HAMPIR SEMUA MENU)

✅ print = list/show items
/ip address print → tampil semua IP address

✅ add = tambah item baru
/ip address add address=192.168.1.1/24 interface=ether1

✅ set = ubah properties
/ip address set 0 address=192.168.1.2/24

✅ remove = hapus item
/ip address remove 0

✅ find = cari items dengan criteria
/ip address find interface=ether1

✅ enable/disable = aktif/non-aktif item
/interface set 0 disabled=no

✅ export = export config ke file
/export file=backup-config

───────────────────────────────────────────────────

⚡ SHORTCUT KEYBOARD (GAME CHANGER!)

F1 → Help menu (list semua commands)
F4 / CTRL+X → Safe Mode (undo changes jika error!)
F7 → HotLock Mode (auto-complete)
TAB → Auto-complete command
TAB TAB → Show all options
CTRL+A → Go to line start
CTRL+E → Go to line end
CTRL+K → Delete to end of line
CTRL+U → Delete to start of line
CTRL+C → Cancel current command
CTRL+D → Exit session

───────────────────────────────────────────────────

💡 SMART TYPING SHORTCUTS

Abbreviation = type partial command, router auto-complete!

Contoh:
/ip address print
= bisa disingkat: /ip add pri
= atau: /ip addr p

Asal tidak ambiguous, router accept!

TAB auto-complete:
/inte[TAB] → /interface
/interface set e[TAB] → /interface set ether

───────────────────────────────────────────────────

🛡️ SAFE MODE = LIFESAVER!

Problem: Salah konfigurasi → router unreachable!

Safe Mode = automatic undo jika connection lost!

Enable: F4 atau CTRL+X
Prompt jadi: [admin@MikroTik] ip route

Kalau connection cut → changes auto-undo!

───────────────────────────────────────────────────

📋 ITEM NUMBERS vs ITEM NAMES

Numbers (temporary, session-based):
/interface print → 0 ether1, 1 ether2, 2 ether3
/interface set 0 mtu=1460 → set by number

Names (permanent, more reliable):
/interface set ether1 mtu=1460 → set by name

⚠️ Pro tip: Use NAMES di scripts (numbers berubah-ubah!)

───────────────────────────────────────────────────

✅ QUICK EXAMPLES

List all routes:
/ip route print

Add route:
/ip route add dst-address=10.0.0.0/24 gateway=192.168.1.1

Find interface named ether1:
/interface find name=ether1

Disable interface:
/interface set ether2 disabled=yes

Print dengan filter:
/ip address print where interface=ether1

───────────────────────────────────────────────────

📌 BEST PRACTICES

1. Use item NAMES (not numbers) di scripts
2. Enable Safe Mode (F4) sebelum big changes
3. Backup config sebelum eksperimen
4. Use abbreviations + TAB untuk faster typing
5. F1 = friend kamu untuk lihat available commands

───────────────────────────────────────────────────

❓ STUCK DI CLI?

Press F1 untuk built-in help!
(Help menunjukkan semua commands available di current level)

───────────────────────────────────────────────────

📞 PERLU BANTUAN CLI?

Chat WA → 081296140453
Kami ajarkan CLI basics + advanced scripting! ✅

07/07/2026

🔐 SENSITIVE PARAMETERS MIKROTIK: JANGAN SHARE PASSWORDS!

Router kamu punya PULUHAN password & keys yang BISA TERLIHAT tanpa kamu sadari! ⚠️

───────────────────────────────────────────────────

🔑 SENSITIVE DATA DI ROUTER KAMU:

• User passwords (/user)
• WiFi passwords (WPA2/WPA3)
• VPN keys (WireGuard, L2TP, OpenVPN, SSTP)
• BGP/OSPF/VRRP authentication keys
• SMB, NVMe, Backup encryption passwords
• SSH keys, Certificates, API secrets
• Hotspot & IoT passwords
• RADIUS, SNMP, Email passwords

Semua ini HIDDEN by default (aman!), tapi kalau export = KELIHATAN!

───────────────────────────────────────────────────

❌ JANGAN LAKUKAN:

❌ Export config & share ke WhatsApp/Telegram/Forum
= /export output INCLUDE semua passwords!

❌ Paste /export output ke mana-mana
= Hacker bisa liat sensitive data!

❌ Backup tanpa password protection
= File bisa dibuka & lihat secrets

───────────────────────────────────────────────────

✅ PROTECT SECRETS (WAJIB):

1. WinBox: Settings → Advanced → Hide Passwords ✅

2. /system/backup → set password setiap backup

3. JANGAN share exported config (keep local only!)

4. WiFi password: 12+ chars (UPPERCASE + lowercase + numbers + symbols)

5. Show-sensitive hanya untuk debugging saja!

───────────────────────────────────────────────────

💡 PERLU TAHU:

• Default: Semua sensitive parameters = HIDDEN ✅
• WinBox auto-hide passwords (aman!)
• /export file=config → ALL passwords visible! ⚠️
• Kalau perlu debug: WinBox → Show Sensitive (disable after!)

───────────────────────────────────────────────────

📋 CHECKLIST AMAN:

☑️ Hide passwords di WinBox
☑️ Backup file password-protected
☑️ Config exported hanya local backup
☑️ Strong passwords (12+, mixed)
☑️ VPN keys tidak dishare
☑️ Show-sensitive disabled (default)

Kalau ada pertanyaan atau security audit needed:
📞 Chat WA → 081296140453

07/07/2026

🎛️ MIKROTIK DEFAULT CONFIGURATION: MANA YANG PUNYA ROUTER KAMU?

Router Mikrotik beda-beda! Ada yang jadi CPE, ada yang AP, ada yang bridge.

Tergantung device & default config yang di-load. Ketahui mana punya kamu! 🎯

───────────────────────────────────────────────────

❓ APA ITU DEFAULT CONFIGURATION?

Default configuration = Pre-loaded settings di pabrik sesuai device type
Berguna karena:
✅ Plug-and-play (bisa langsung pakai)
✅ Sesuai dengan use case device
✅ Sudah ada firewall + security dasar
✅ Tidak perlu setup dari 0

Setiap device = punya default config berbeda!

───────────────────────────────────────────────────

🔍 CIRI-CIRI DEFAULT CONFIGURATION:

CPE Router:
❌ Wireless = client (station mode)
❌ Wireless connect ke ISP
✅ Ethernet port = LAN (AP)
✅ Setup: ISP → Wireless → Router → Ethernet clients

LTE CPE AP Router:
❌ LTE atau wireless = WAN (ISP uplink)
✅ Wireless AP + Ethernet = LAN (bridge)
✅ Setup: ISP (LTE/WiFi) → Router → WiFi + Ethernet clients

AP Router (ACCESS POINT):
❌ Ethernet port 1 = WAN (DHCP client)
✅ Ethernet port 2-5 + Wireless = LAN (bridge + AP)
✅ Setup: ISP → Ethernet 1 → Router → WiFi + Ethernet clients

PTP Bridge:
❌ Wireless + Ethernet = bridge (same network)
❌ Setup: Pointto-point link (outdoor wireless link)

WISP Bridge (PTMP):
❌ Wireless = AP (point-to-multipoint)
❌ Ethernet + Wireless = bridge
✅ Setup: Base station untuk outdoor clients

Switch:
❌ Semua Ethernet = switched (layer 2)
❌ Hanya 1 IP address di management port
✅ Setup: Dumb switch (network switching)

IP Only:
❌ Simple config (1 IP di ether1)
❌ Minimal default setup
✅ Setup: Manual everything (expert users)

CAP (Cloud Access Point):
❌ Managed oleh CAPsMAN
❌ Wireless = controlled remotely
✅ Setup: Centralized AP management

───────────────────────────────────────────────────

📋 DEVICE TYPE × DEFAULT CONFIG

───────────────────────────────────────────────────

1️⃣ CPE ROUTER (OUTDOOR WIRELESS CLIENT)

Devices:
• RB 711, 911, 912, 921, 922 (level 3 license)
• SXT, QRT, SEXTANT, LHG
• LDF, DISC, Groove, Metal

Mode:
✅ Wireless = WAN (connect ke ISP AP)
✅ Ethernet = LAN (clients)

Setup:
ISP AP (outdoor)
↓ wireless signal
┌─────────────────┐
│ MikroTik CPE │
│ (wireless RX) │
└─────────────────┘
↓ ethernet
[Client devices]

Config:
• wlan1: station mode (client)
• ether1: 192.168.88.1/24 (LAN)
• DHCP server: enabled
• Firewall: enabled
• NAT: enabled

Use case:
• Outdoor wireless client (line-of-sight ISP)
• Remote area (no fiber)
• Backup connectivity

───────────────────────────────────────────────────

2️⃣ LTE CPE AP ROUTER (LTE + WIRELESS AP)

Devices:
• wAP LTE Kit
• SXT LTE
• LtAP 4G kit, LtAP LTE kit
• Chateau

Mode:
✅ LTE atau Wireless = WAN (ISP uplink)
✅ Wireless AP + Ethernet = LAN (bridge)

Setup:
ISP (LTE/WiFi signal)
↓
┌─────────────────────┐
│ LTE CPE AP Router │
│ (LTE/WiFi RX) │
└─────────────────────┘
↓ wireless AP + ethernet
[Clients: WiFi + Wired]

Config:
• lte1 atau wlan1: station mode (WAN)
• ether2-5 + wlan2: bridge
• Bridge IP: 192.168.88.1/24
• DHCP server: enabled
• Firewall: enabled

Use case:
• Mobile/4G internet + WiFi sharing
• Backup cellular connectivity
• WiFi hotspot with wired extension

───────────────────────────────────────────────────

3️⃣ AP ROUTER (HOME ROUTER / STANDARD)

Devices:
• RB 450, 751, 850, 951, 953, 2011, 3011, 4011
• hEX, PowerBox
• mAP, wAP, hAP, cAP
• OmniTIK, Knot, PWR

Mode:
✅ ether1 = WAN (DHCP client dari ISP modem)
✅ ether2-5 + Wireless = LAN (bridge + AP)

Setup:
ISP Modem
↓ ethernet
[ether1 = WAN]
┌──────────────────┐
│ AP ROUTER │
│ (default: HOME) │
└──────────────────┘
[ether2-5 + WiFi = LAN bridge]
↓ ethernet + wireless
[Client devices]

Config:
• ether1: DHCP client (WAN)
• ether2-5: bridge
• wlan1 (2.4GHz): AP mode, bridge
• wlan2 (5GHz): AP mode, bridge (dual-band)
• Bridge IP: 192.168.88.1/24
• DHCP server: enabled
• NAT: enabled
• Firewall: enabled

Use case:
• Home router (PALING UMUM!)
• Small office
• Warnet / WiFi hotspot
• ISP residential

───────────────────────────────────────────────────

4️⃣ PTP BRIDGE (POINT-TO-POINT WIRELESS)

Devices:
• DynaDish (CPE)
• Cube, Cube Pro (W60G)
• nRAY, Dish (W60G)
• Wireless Wire kit
• wAP 60G (level 3 license)

Mode:
✅ Wireless + Ethernet = bridge (SAME network)
✅ Direct connectivity (no separate WAN/LAN)

Setup:
Link A ←→ Link B
(Point-to-point wireless bridge)
↓
Bridge interface (all in same subnet)

Use case:
• Outdoor point-to-point link (ISP carrier)
• Long-distance wireless bridge
• Network extension over distance

───────────────────────────────────────────────────

5️⃣ WISP BRIDGE (POINT-TO-MULTIPOINT)

Devices:
• RB 911, 912, 921, 922 (level 4)
• Groove A, RB 711 A
• BaseBox, NetBox, mANTBox
• NetMetal, wAP 60G AP (level 4)
• LtAP, CME

Mode:
✅ Wireless = AP mode (point-to-multipoint)
✅ Ethernet + Wireless = bridge
✅ DHCP client enabled (get IP automatically)

Setup:
Base Station (WISP)
↓ wireless (P

Jasa Setting Mikrotik daerah Cikarang

07/07/2026

07/07/2026

07/07/2026

07/07/2026

07/07/2026

07/07/2026

07/07/2026

07/07/2026

Address

Website

Alerts

Shortcuts

Share

Category

Listing takedown request