Sector Radio Configuration

Incomplete needs LOTS of work.

Configuration Steps

When programming this radio for the first time it is generally easier to use the Mac Address of the device to connect to it from winbox, This will ensure that if you remove the current IP address you remain connected to the radio. You can do this by either typing the mac address into the address field or selecting a detected radio by clicking on the mac address column.

1. Upgrade your modem to the latest version of RouterOS
   • If you have connected the modem to your LAN in a way that provides Internet access, the following two command can be used:

   /system package update install

   Once the system is don upgrading and rebooting run

   /system routerboard upgrade

   • Otherwise, use the standalone upgrade method: http://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS (also works on older ROS 5.xx that does not support the upgrade command) \
2. Reset the modem/radio to a blank configuration

   /system reset-configuration no-defaults=yes

3. Give the modem/radio a name, for standard sectors this takes the form of RADIOaz.site for example RADIO120.LMK

   /system identity set name=RADIO120.SITE

4. Set a password for the admin user

   /user set admin password=

   /console clear-history

   This is an example password generated in your browser.

5. To support shared administration, add the following HamWAN Network Administration accounts into the "full" group. Usernames are case sensitive.

   /user add group=full name=manage password=

   /console clear-history

   This is an example password generated in your browser.

6. Enable Ethernet boot in case you ever need to reinstall the router with NetInstall (this could save you a trip up to your roof, its a good idea)

   /system routerboard settings set boot-device=try-ethernet-once-then-nand

   Caution this no longer seems to persist past the next reboot.

7. Configure Remote Central Logging

   /system logging action set 3 bsd-syslog=no name=remote remote=44.135.216.4 remote-port=514 src-address=0.0.0.0 syslog-facility=daemon syslog-severity=auto target=remote

   /system logging add action=remote disabled=no prefix="" topics=info

   /system logging add action=remote disabled=no prefix="" topics=warning

   /system logging add action=remote disabled=no prefix="" topics=error

8. Configure Central Authentication

   /radius add address=44.135.217.99 secret=AmprNET service=login

   /user aaa set use-radius=yes

9. Configure SNMP Monitoring

   /snmp set enabled=yes contact="#HamWAN on irc.freenode.org"

   /snmp community set name=hamwan addresses=44.135.216.0/23 read-access=yes write-access=no numbers=0

10. Setup NTP

    /system clock set time-zone-name=America/Vancouver

    /ip cloud set update-time=no

    /system ntp client set enabled=yes primary-ntp=208.73.56.29 secondary-ntp=45.76.244.193

11. Clear the firewall rules

    /ip firewall filter remove [find dynamic=no]