Welcome to RouterOS guide. You can get a RouterOS/MikroTik device for as low as $22 (USD).

This tutorial is to setup MikroTik router by PPPoE Username and Password. If you need to setup with “Static IP address” provided by your internet service provider then visit our Static IP Setup Guide.

To better and clear understanding please click on the respected image in each step from this tutorial.

RouterOS/MikroTik can be configured by Winbox. Download Winbox software from MikroTik website, to access and configure your router.

Keep Winbox software in your Computer to manage the router. Now, we can start setup the MikroTik, follow the step by step instructions to setup the MikroTik router.

Look at the connection chart image below:


1) Connect your ISP-1 (primary Internet service provider) cable to port-1

2) Connect your Switch/Computer cable to port-3

3) Power on the MikroTik router

4) Run Winbox, double-click on the MAC address of new MikroTik and click Connect

5) Winbox will be connected with router and notice you to keep or remove default configuration, please click on Remove Configuration

6) Winbox will automatically logged-out, close/quit the Winbox and wait a minute(s) to re-login

7) Open Winbox, double-click on the new MAC address again, and click Connect

8) Give each Interface to their respective name first

If Wireless interface available in your MikroTik, we will setup WiFi at the last step in this tutorial.

9) Close Interface window and create a new Bridge interface

10) Add port in the bridge

after adding the ether3 port on Bridge network, the Winbox logged out automatically because we were connected on the ether3 port already, reconnect Winbox and add Wireless port (if available) in the bridge

11) Close the bridge window, and open IP addresses window

12) Add private IP series (192.168.xx.x/xx) on the bridge port, must be a IP block (/30, /28, /24, etc.)

As example, I’m using IP block for LAN IP series, so the maximum of 254 devices (Computers, printers, mobile phones, etc.) can be connected on the network.

If you have more than 254 devices, you can add block which will connect up to 2046 devices.

Here is the two IP block example details (for LAN network): = 254 devices

IP address:
Subnet mask:
Gateway: = 2046 devices

IP address:
Subnet mask:

13) Close IP Addresses window, and open DHCP server window

then click DHCP Setup button

select the bridge interface for DHCP

keep an IP block for addresses, you should use the same block which was assigned in the previous step (/24, or /21 block)

choose a gateway IP and click Next

select addresses to give out to devices for automatic IP, start from IP number 51 so that the first 50 IP addresses can be reserved for static IP for your special devices

set DNS addresses

please use Google DNS for a better browsing experience, and it will help you to advance configure your MikroTik in future

set Google DNS secondary IP

set automatic IP lease time as one day

now, the DHCP server setup is completed in bridge interface

and your computer is already assigned in DHCP server lease time

close the DHCP window

14) It’s time to add your ISP provided username/password to PPPoE interface, open PPP interface

PPPoE Window

Click PPPoE Client to create a new PPPoE connection interface

New PPPoE Connection

Select ether1 from General TAB and then click Dial Out

PPPoE on Ether1 port

Write your ISP provided username and password

PPPoE Username and Password

Enable all tick-mark

Enable all option

Click Apply and OK

PPPoE Apply

Close the PPP window

15) Remove or delete DHCP client, if any

16) Now is the time to enable Internet to the router

go to Firewall to add Masquerade entry to access Internet

add a NAT entry

select “srcnat”

Select Out Interface to the PPPoE profile

PPPoE Out Interface


Now you got the Internet, connect one other device to your MikroTik router and test Internet access

17) Add necessary firewall to keep  safe your Router

add ICMP ping rule

now add a comment for the rule

forward all connection via bridge, add a new firewall rule

add a comment on bridge forward rule

accept input for established and related connection only, add a new firewall rule

add a comment on input accepted rule

add a new rule for accept forward connection

add a new rule to block all other input connection

add a new rule to block all other forward traffic

and add a new rule for block invalid connection

now, the router is safe from hacker

close firewall window and we are at the WiFi setup step (if your MikroTik is wireless capable)

18) Enable Wireless interface

do some settings on wireless interface

go to wifi security profiles

setup your WiFi password and security

close wireless window and set some basic settings

19) Configure SNTP Client to sync system time

set your MikroTik identity/name

finally, change your MikroTik password

20) Restart your router and enjoy !

# Feel free to post a comment if you have any question regarding this post.