If a version update is found, update the device. Vulnerabilities are periodically found in MikroTik equipment (as in the equipment of other network vendors) – timely updates are a necessary measure to ensure device security. Disable unused services and change Winbox port Update When changing the port, make sure not to assign Winbox a port used by another service, the list is here.

www (port 80) – if we do not use access via a Web browser (http), disable it.

telnet (port 23) – if we do not use Telnet access, disable it.

ssh (port 22) – if we do not use SSH access, disable it.

ftp (port 21) – if we do not use FTP access, disable it.

api-ssl (port 8729) – if we do not use API access with a certificate, disable it.

api (port 8728) – if we do not use API access, disable.

> -> -> Services Disable unused servicesĭisable MikroTik services that we do not plan to use. Create a new group and define the rights of users of this group. If several users have access to the device, you can specify the rights to the selected user in more detail. > ĭo not use simple usernames, the password must meet security requirements.

🇳🇱 – MikroTik Protection (basisinstelling apparaatbeveiliging) UsersĬreate a new user with a unique name and remove the built-in default system user account – admin. 🇩🇪 – MikroTik-Schutz (grundlegende Geräte Sicherheitseinstellung) 🇫🇷 – MikroTik Protection (paramètre de sécurité de base de l’appareil) 🇪🇸 – Protección MikroTik (configuración básica de seguridad del dispositivo) If, when pasting a command into the terminal, commands are automatically inserted (while executing you get a bad command name or expected end of command error), press Ctrl+V to disable this feature.

🔔 The article gives examples of commands in the MikroTik terminal. Basic configuration of MikroTik router protection: device configuration, firewall configuration, port scan protection, password guessing protection.

Mikrotik ip firewall