Depending on the RouterBOARD model, there are several ways to reset the settings. You can reset the password and MikroTik RouterBOARD settings using the Reset button or a special hole on the device board.

Resetting MikroTik with the Reset button

Most RouterBOARDs are equipped with a button reset.

To reset the MikroTik configuration to factory settings, do the following:

1. Turn off the power of the router;
2. Press and hold the button reset;
3. Turn on the power of the router;
4. Wait until the indicator flashes ACT, and release the button reset.

Note: If you don't release the button reset and wait until the indicator ACT stops blinking, the device will enter Netinstall mode to reinstall the RouterOS operating system.

Reset MikroTik through a special hole

All modern RouterBOARD boards have a special reset hole. Some MikroTik models will require you to open the case to use this opening. Other devices have a hole on the case to access the reset on the board.

To reset the MikroTik configuration through a special hole on the board, do the following:

1. Turn off the power of the router;
2. Close the reset hole with a metal screwdriver;
3. Turn on the power of the router;
4. Wait for the configuration to reset and remove the screwdriver.

After resetting the router, you can enter its settings with the standard username admin without a password.

Resetting MikroTik with a jumper on older models

The figure shows the location of the reset jumper in older RouterBOARD models, such as RB133C.

To reset settings in older MikroTik models do the following:

1. Turn off the power of the router;
2. Close the jumper with a metal jumper;
3. Turn on the power of the router;
4. Wait for the configuration to reset and remove the jumper.

After resetting the router, you can enter its settings with the standard username admin without a password.

Note: Do not forget to remove the jumper after resetting the settings, otherwise the device will be reset every time you reboot.

Reset RouterOS installed on x86

To reset passwords and settings for the RouterOS operating system installed on an x86 computer, you must boot from the RouterOS installation disk. When the package selection window appears, click i and answer n to the question Do you want to keep old configuration? Confirm the reset by pressing y.

In today's article, we will learn how to competently “wipe” MikroTik devices. In simple terms - clean and reset to factory settings.

It would seem - nothing special, but let's think about why this might be important. The fact is that MikroTik devices are very cost-effective - some might even say obscenely cheap - so capital costs for network upgrades are usually quite low. Therefore, at one moment a situation may happen when you have a stack of MikroTiks taken out of production, which will rest on a shelf and collect dust. These unclaimed devices may end up being given to someone for testing, used in a lab, or repurposed for other uses.

Once in the "wrong" hands, the MikroTik router can reveal a lot of confidential and sensitive information if it is not first erased. Despite the fact that a lot of this information is hidden in the configuration and you can’t get to it just like that through the console, the files .rsc, .backup, .rif, which are located in the file storage, will allow a potential attacker to gain access to it. We will deal with these files first.

So, in order to delete these files through the console, enter the following commands:

/file remove remove remove remove

You can also use the WinBox utility, for this, in the left menu, select the option Files, the file storage will open in front of you:

If there are too many files, you can use the filter for each file type - .rsc, .backup, .rif and .txt

Make sure that no files with the formats listed above are left in the file storage.

Attention! Performing the following steps to reset the configuration without first clearing the file storage shown above will not delete files with sensitive information!

Now we just have to erase the device configuration, for this we will use the following command:

/system reset-configuration keep-users=no skip-backup=yes

Or, through the WinBox utility in the menu on the left, open System → Reset Configuration

Confirm this action, after which the device will delete the configuration, reboot and regenerate SSH keys. After all the above steps, we can assume that the router has been successfully reset to factory settings.

General advice - if you take the device out of service and send it to the shelf until better times, then make sure that there is no sensitive information left on it, make a full wipe, and store its backup in case you suddenly need it again, store it in an egg an egg in a duck, a duck in a hare, a hare in a chest somewhere else :)

Is this article helpful to you?

Please tell me why?

We are sorry that the article was not useful to you: (Please, if it’s not difficult, indicate for what reason? We will be very grateful for a detailed answer. Thank you for helping us become better!

Analysis of many small, relatively related topics: software and hardware reset, the Protected RouterBoot function, backups and configuration export, flash memory partitioning.

Soft reset

If there is access to the router from a user with full rights, then you can reset all settings via →

What is there:

• Keep user setting - do not delete user accounts.
• CAPS mode - after reset, look for the CAPsMAN controller.
• No Default Configuration - do not create a default configuration after a reset.
• Do Not backup - do not create a backup before resetting. If not checked, the created backup will not be password-protected.
• Run After Reset - a script that will be executed after resetting and rebooting the router.
• During a reset, the contents of the flash memory are not overwritten.

Console option:

/system reset-configuration no-defaults=yes skip-backup=yes

Hard reset

It all depends on the model of the router, there are three options:

There is a reset button

First, turn off the power, hold reset and turn on the power. Release via:

• 3 seconds (until flashing ACT) - loading from a spare bootloader. Helps if there was a failure when updating the system or firmware.
• 5 seconds (ACT blinking) - Reset settings.
• 10 seconds (ACT stops flashing) - search for the CAPsMAN controller.
• 15 seconds (ACT off) - searching for the netinstall server.

contact pad

The wiki claims that all devices are equipped with a similar platform. For the sake of interest, I opened the RB491-2nD and did not find one.

Reset technology: turn off the power, close the pad (the beeper makes a wheezing squeak) and do not let go until it is fully loaded.

Jumper

Present on older models.

Reset technology: turn off the power, close the jumper, wait for the full load, remove the jumper.

Protected Router Boot

A situation may happen when, after resetting someone else's (otherwise you would know) router, it will not load further than the "first peak" - this is a new feature from Mikrotik that overwrites all flash memory (including RouterOS), netinstall is required for recovery.

About RouterBoot

RouterBoot is a bootloader on Mikrotik devices, you can interact with it via the Serial interface and one of the purposes of Protected RouterBoot is to prevent it from interfering with the boot process.

The bootloader is divided into two parts:

• Recovery - comes with the device and matches the Factory Firmware.
• Current - comes with the system package, but is updated separately.

You can view the current versions in → . The button updates the Current bootloader. If the system works poorly and only boots from a backup (as described in the section above), then you can explicitly specify the recovery bootloader as a permanent one, the Auto Upgrade option to update the current bootloader along with RouterOS. And since we're here, the Silent Boot option disables sounds during boot.

Console variant

# View information /system routerboard print /system routerboard setting print # Update bootloader /system routerboard upgrade # Enable boot from Recovery /system routerboard setting set force-backup-booter=yes # Disable beeper /system routerboard setting set silent-boot=yes

What Firmware Versions does Protected RouterBoot run on?

Guaranteed work is promised for devices with Factory Firmware 3.24 and higher, if your device is older, then the function can be activated by updating the firmware.

Recovery firmware update on RB951G

The forum and wiki warn that everything is experimental and done at your own peril and risk. Read the topic, there is a list of models and update files, I will write using the example of RB951G.

The error looks like this:

To get started, download:

They will be needed later.

Updating the bootloader will only work on the BugFix firmware version, so you will need to roll back to version 6.40.x.
Option 1
→ →
Channel: Bugfix Only
press
Console option:

/system package update set channel=bugfix /system package update check-for-updates /system package update install

Option 2
We download the required version (6.40.8 at the moment) of RouterOS from the archive, unpack and copy the necessary packages to MikroTik.
Next: → →

Console option:

/system package downgrade

Result:

We return to the files loaded earlier.
We upload the .fwf * file to the device and start the firmware update via:
->->
->
Console option:

/system routerboard upgrade /system reboot

After a reboot, Current Firmware will be 3.41. Delete the .fwf* file.

We upload the .dpk* file to the device and send it to reboot.
We get an updated version of Factory Firmware.

Now you can update RouterOS to the latest version, then update the bootloader and use all the functionality.

→ →

Enable Protected RouterBoot=yes, what now

• Interaction with RouterBoot during the boot phase will not be possible.
• The Reset button will work in the only mode - overwrite the flash memory. The reformat-hold-button and reformat-hold-button-max options determine the minimum and maximum time the Reset button is held. It is necessary to fall within the established interval. Formatting the memory can take up to 5 minutes.
• etherboot won't work.
• Reset via contact closures on the board will not work.

I do not urge you to enable this option without fail, think for yourself when you need it, and when you can do without such measures.

Firmware recovery using netinstall

Netinstall is a universal tool for flashing and pre-configuring MikroTik routers. When used, the internal memory and configuration are formatted, only the settings in →

Available only for Windows OS at the link . Conflicts with some firewalls and antiviruses (add to exceptions), there may be problems when starting from users with limited rights - run "As administrator".

Procedure:

• You will need firmware files from here. you can take the whole main, or unpack the necessary packages from extra, only the system package is required.
• Wired connection to the router. Moreover, the PC and the router must be within the same network segment, it is better to connect the cable directly.
• It is recommended to disable all unnecessary network interfaces on the PC. In practice, there are usually no problems with this.
• Set a static ip on the wired interface to which the router is connected, for example: 192.168.100.1/24.
• If there is a port labeled Boot on Mikrotik, then connect to it, if not, to the first port.
• We start Netinstall, you need to enable Boot Server Enabled and specify ip from the previously selected subnet, for example: 192.168.100.10.

What else can netinstall do?

• Key - you can update the license. SoftID is required to order a key.
• Keep old configuration - save the configuration and restore it after flashing.
• IP address/Netmask & gateway - configure ip.
• Baud rate - set the speed of the Serial interface.
• Configure script - script that will be run after tailoring.
• Apply default config - load the default configuration. Works if the previous three items are not set.
• Flashfig is a mass configuration utility for new devices.

Backup and export configuration to Mikrotik

Binary backup

• Includes an almost complete (does not transfer files, certificates and ipsec keys) copy of the RouterOS settings.
• Only system accounts are encrypted in backups.
• Not editable.
• Restoring overwrites the current configuration.
• It is advisable to restore to a similar Mikrotik model.
• It is possible to restore on models other than the original. But in a binary backup, the interface settings are tied to the internal id, and when restoring, the real and system ethernet port numbers will be confused. If there are not enough physical interfaces on the new device, the settings will be restored, but will refer to unknown.

Backup creation:
→

Tags: Add tags

I think it's not a secret for anyone that the mikrotik default password is missing, so when connecting to a new piece of hardware, we enter only the admin login and leave the password field empty. And this applies to absolutely all of their devices, whether it's a hab lite or some kind of hab ac2, you get the idea. Once again I repeat the standard password mikrotik - missing (it does not exist).

Mikrotik default ip

As with the password, everything is also simple here, by default, mikrotik ip sets all its devices to 192.168.88.1, so feel free to set any address from this subnet in our network card settings, for example, 192.168.88.10 and go to the device via winbox, web- interface, telnet or ssh.

How to reset password on mikrotik

There is also nothing difficult here, to reset the password on Mikrotik, you need to use the reset button. It is worth noting here that not all settings will be reset to factory settings. So the instruction:

• Power off the device completely.
• Press and hold the reset button.
• We turn on the power, but the button continues to be pressed.
• Wait until the ACT LED flashes and release the Reset button.

Be sure to release the reset button when it starts flashing, if you overdo it and ACT stops flashing, the device will go into Netinstall mode to reinstall RouterOS (operating system).

Outcome

I didn’t write a long article about how to gradually reset the password, or what mikrotik’s default ip and password, I think here, and so everything is extremely simple and clear. I also want to say this, if you are just a beginner microtik 😊 or already experienced and want to practice configuring it, then there is a wonderful eve-ng emulator, I wrote here how to start it, so try it. You can add a lot of devices in it and make various labs, for example, before I go and implement any project, I assemble it first there, and if everything is ok, then it will be ok in place. That's all thank you all for now.

89 MikroTik setup questions

Are you good at Mikrotik? Or have you recently encountered this equipment for the first time and do not know which side to approach it from? In both cases, you will find useful information in the course "

Judging by the sales statistics, this is the most popular router from our range. There are a great many reasons for this, but two of them, in our opinion, are the most significant: firstly, it only costs $20, Secondly, this is Mikrotik. In total it turns out "Mikrotik for $20", which is really impressive.

We will express our opinion about it in advance: the router is more than worthy of attention. It works very stably, the speeds of wired and wireless connections are quite consistent with the declared ones, and its functionality is comparable to the top-end Cisco / Juniper routers, which cost sky-high thousands of dollars in price tags. There are also disadvantages: it has only 4 Ethernet ports (including the WAN port), the radio module is rather weak and does not support the 802.11ac standard. However, here, as in a well-known vulgar joke: "Well, what did you want for 20 dollars?"

So, let's tame the hero of our material. Our prerequisite is an ISP giving us a dynamic IP address. Let's get started:
1. Turn on the provider's cable in 1st router port
2. We turn on the cable from the computer to any remaining free port
3. Like all Mikrotik devices, hAP Lite default IP address is 192.168.88.1. Let's assign our computer network settings from the same subnet. For example, address 192.168.88.10, mask 255.255.255.0, gateway 192.168.88.1, DNS 192.168.88.1:

4. Let's go to the router via browser:

Here we will make a small digression: in hAP Lite, Mikrotik has implemented a default configuration that provides for a quick start. The router is already configured to receive a dynamic address on the 1st interface, the DHCP server is enabled, the bridge between the ports is configured. In fact, in our topology, the router worked as expected immediately after being turned on. That's not what we're here for though, so...

5. Let's reset the router to factory settings. To do this, click on the section System button Reset Configuration:

6. Tick ​​the option No Default Configuration and press Reset Configuration:

7. We confirm our intention:

8. After about a minute, the router will reboot. Here there is a slight hitch: after resetting the router with the removal of the default configuration, it will no longer be assigned an IP address, and it will not be possible to access it with a browser. No problem, in this case, Mikrotik has a special configuration application - WinBox. Download it from the site http://www.mikrotik.com/download in the section Useful tools and utilities:

9. WinBox does not require installation. Let's run it and click on the tab at the bottom Neighbors. All Mikrotik devices within the broadcast domain should appear in the list below. In our case, this will be the only hero of the article. Click on its MAC address (it is important!), then press the button Connect at the top of the screen:

10. Before us appears in all its glory the interface of the router. R window outerOS Default Configuration close by pressing OK:

11. Click on the menu on the left Interfaces. Note that in an empty configuration on the router, the wireless interface is disabled. It is called wlan1. Select it and click the blue checkmark at the top of the window. This will be useful to us in the near future:

12. double click open ether2 interface, change its name to ether2-master and press OK:

13. Now open ether3 interface, and change the parameter Master Port on the ether2-master:

14. We repeat the same action for the ether4 interface: open it and change the Master Port parameter to ether2-master.

This paragraph should be read only by those who are very interested in the technical side of the issue! If you opened the article just to have a setup cheat sheet in front of your eyes, then you can skip it!
And now let's decipher what was done in paragraphs 12-14: unlike more familiar household routers, ports in Mikrotik routers are not included in a single switching matrix by default, i.e. are not part of the switch as such. To "assemble" them into a logical switch, there are 2 ways: software and hardware. Software - bridge - uses the central processor of the router for switching. The hardware one uses a special hardware switching chip, while the CPU is not used. Thus, for the ports to work in switch mode, the use of a switching chip suggests itself. Now back to what we did earlier: we renamed the ether2 port to ether2-master so that we can clearly see in the configuration console which port is the master port for the others, and we told the router that the ether2 port is the master port for the other two. Using the master port, we have enabled the switching chip, and the CPU is no longer involved in calculating packet switching between the ether2-ether4 ports. You can read more about switching chips and their capabilities here: http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features

15. Let's create a bridge for the interfaces that form the loop of the local network. Click on the menu on the left Bridge, in the first tab Bridge press + , in the opened window enter bridge name(for example, LAN) and press Ok:

16. Let's move on to the Ports tab, press + , choose Interface- wlan1, Bridge- LAN, press OK:

17. Repeat the procedure for the ether2-master interface.

18. Your the final list of ports in the bridge should look like this:

19. As mentioned above, in our topology, the provider provides us with a dynamic IP address. Enable the DHCP client on the WAN port of the router. To do this, open the menu on the left IP-> DHCP Client and in the window that appears, click + :

20. The provider cable is inserted into the 1st port of the router. Choose Interface- ether1, necessarily set the parameter Add default route into position Yes and press OK:

21. Now in the DHCP client window you will see on which interface the DHCP client is enabled and what address it received:

22. Enable NAT. To do this, in the menu on the left, open IP-> firewall, go to the tab NAT, press + , in the window that appears, set the parameter Chain into position srcnat, parameter out. Interface into position ether1:

23. Without leaving the New NAT Rule window, go to Action tab, and set the parameter Action into position masquerade, then press Ok:

24. Set up DNS. Menu on the left IP-> DNS. Our provider has already given us 2 dynamic servers, but their list can be supplemented (filled in the Servers parameter) with our own hands. The main thing in this window do not forget to check the Allow Remote Requests checkbox, after which you can press Ok:

25. It's time to assign an IP address to the router to work on the local network. Go to the menu on the left IP-> Addresses, in the window that opens, click + and enter IP address/subnet mask. In our case we will use 192.168.88.1/24. Parameter Interface should be set to LAN(this is our Bridge created in step 15; your name may be different), after which you can press OK:

Now our list of IP addresses should look something like this(of course, the address on the ether1 interface will be different for you):

26. By the way, we should already have access to the Internet on our computer! Let's check:

Really showed up! But the celebration will be postponed until later.

27. Now let's configure the DHCP server. Go to the menu on the left IP-> DHCP Server, in the window that opens, click DHCP Setup:

28. We choose as the interface on which DHCP will work, our bridge is LAN, press Next:

29. Set the address space. We plan to issue addresses on the 192.168.88.0 network with a mask of 255.255.255.0, that's why enter 192.168.88.0/24 and press Next:

30. Specify the gateway. Ours is 192.168.88.1. Click Next:

31. Determine the pool of IP addresses that will be issued to clients. Here we advise you to make a decision yourself, based on the network topology. We will use the range 192.168.88.2-192.168.88.254, enter and press Next:

32. Enter DNS servers(you can have your own, or use public DNS from Google or Yandex), click Next:

33. Enter the lease term for IP addresses(you can not change the default one), click Next:

On this DHCP server setup completed:

34. Now let's set up WiFi. Click on the menu on the left Wireless, in the opened window double-click to open the wlan1 interface, and set parameters:
- mode- ap bridge
- Band- 2GHz-B/G/N
- SSID- enter the name of your WiFi network
- Wireless Protocol - 802.11
- WPS Mode - disabled

Thereafter press OK:

35. Now let's set a password for our network. let's move on to the Security Profiles tab, open default profile. Now:
-set the Mode parameter into position dynamic keys
- tick WPA2 PSK in parameter Authentication Types
- put all the checkboxes in Unicast Ciphers and Group Ciphers
- in the WPA2 Pre-Shared Key field, enter the password from WiFi network
- press OK

36. Connect to WiFi, check its performance. Active connections can be viewed in the Registration tab:

37. Now disable all router management interfaces, except for WinBox(if necessary, leave the ones you need, but from a security point of view, we do not recommend using a firewall without using a firewall). For this we go to IP-> Services, select unnecessary services and click the red cross:

38. It remains to set the administrator password. Let's go to System-> Users, login to admin user profile, press Password, enter the password twice in the fields New Password and Confirm Password and click OK: