Sector Radio Configuration

From OCARC
Revision as of 15:57, 5 July 2020 by Va7stv (talk | contribs)
Jump to navigation Jump to search
Incomplete needs LOTS of work.

Configuration Steps

When programming this radio for the first time it is generally easier to use the Mac Address of the device to connect to it from winbox, This will ensure that if you remove the current IP address you remain connected to the radio. You can do this by either typing the mac address into the address field or selecting a detected radio by clicking on the mac address column.


  1. Upgrade your modem to the latest version of RouterOS
    • If you have connected the modem to your LAN in a way that provides Internet access, the following two command can be used:
    /system package update install
    Once the system is don upgrading and rebooting run
    /system routerboard upgrade
  2. Reset the modem/radio to a blank configuration
    /system reset-configuration no-defaults=yes
  3. Give the modem/radio a name, for standard sectors this takes the form of RADIOaz.site for example RADIO120.LMK
    /system identity set name=RADIO120.SITE
  4. Set a password for the admin user
    /user set admin password=
    /console clear-history
    This is an example password generated in your browser.
  5. To support shared administration, add the following HamWAN Network Administration accounts into the "full" group. Usernames are case sensitive.
    /user add group=full name=manage password=
    /console clear-history
    This is an example password generated in your browser.
  6. Enable Ethernet boot in case you ever need to reinstall the router with NetInstall (this could save you a trip up to your roof, its a good idea)
    /system routerboard settings set boot-device=try-ethernet-once-then-nand
    Caution this no longer seems to persist past the next reboot.
  7. Configure Remote Central Logging
    /system logging action set 3 bsd-syslog=no name=remote remote=44.135.216.4 remote-port=514 src-address=0.0.0.0 syslog-facility=daemon syslog-severity=auto target=remote
    /system logging add action=remote disabled=no prefix="" topics=info
    /system logging add action=remote disabled=no prefix="" topics=warning
    /system logging add action=remote disabled=no prefix="" topics=error
  8. Configure Central Authentication
    /radius add address=44.135.217.99 secret=AmprNET service=login
    /user aaa set use-radius=yes
  9. Configure SNMP Monitoring
    /snmp set enabled=yes contact="#HamWAN on irc.freenode.org"
    /snmp community set name=hamwan addresses=44.135.216.0/23 read-access=yes write-access=no numbers=0
  10. Setup NTP
    /system clock set time-zone-name=America/Vancouver
    /ip cloud set update-time=no
    /system ntp client set enabled=yes primary-ntp=208.73.56.29 secondary-ntp=45.76.244.193
  11. Clear the firewall rules
    /ip firewall filter remove [find dynamic=no]