Skip to main content
Version: 7.25

SMB

CLI reference:/ip/smb/ip/smb/shares/ip/smb/users/disk

RouterOS includes a built-in SMB server for sharing folders of the router with network clients. In addition, the Storage package adds an SMB client that lets RouterOS mount remote SMB shares as disks.

SMB server​

Sub-menu: /ip/smb Packages required: system

SMB server provides file sharing access to configured folders of the router, allowing network clients to browse, read, write, and manage files stored on the router's storage media over the SMB/CIFS protocol. This enables the router to function as a simple network-attached storage (NAS) device for local network sharing of files, backups data, or router configuration backups files.

warning

RouterOS only supports SMB2.1, SMB3.0, and SMB3.1.1. SMB1 is not supported due to security vulnerabilities.

SMB is not supported on SMIPS devices.

The server starts on its own once the first share is added (enabled=auto is the default; see /ip/smb for the settings), it can also be limited to specific interfaces and renamed.

Shares​

Sub-menu: /ip/smb/shares

/ip/smb/shares configures the share names and directories accessible over SMB. If the directory provided in the configuration does not exist, it will be created automatically. Access can be limited per share with valid-users / invalid-users, enforced encryption with require-encryption (recommended for macOS clients), and read-only access with read-only.

Users​

Sub-menu: /ip/smb/users

/ip/smb/users sets up the users that can access the router's SMB shares. Each user has a name, a password, and a read-only restriction (default: yes) that applies across all shares. A default guest user is created automatically and is disabled by default.

Example​

To make the RouterOS folder available through the SMB service follow these steps:

  • Create a user.
/ip/smb/users/add read-only=no name=mtuser password=mtpasswd
  • add shared folder.
/ip/smb/shares/add directory=backup name=backup
  • enable SMB service:
#this step is optional, as the default is "enabled=auto"
/ip/smb/set enabled=yes

Now check for results:

  • Check general service settings.
/ip/smb/print
      enabled: yes
        status: enabled
        domain: MSHOME
       comment: MikrotikSMB
    interfaces: all
  • SMB user settings
/ip/smb/users/print
Flags: X - DISABLED; * - DEFAULT; r - READ-ONLY
Columns: NAME, PASSWORD
#     NAME    PASSWORD
0 X*r guest          
1     mtuser  mtpasswd
  • And finally SMB shares settings.
/ip/smb/shares/print
Flags: X - DISABLED; * - DEFAULT
Columns: NAME, DIRECTORY, REQUIRE-ENCRYPTION
#    NAME    DIRECTORY  REQUIRE-ENCRYPTION
;;; default share
0 X* pub     /pub       no               
1    backup  backup     no

Now, additional configuration changes can be done, like disabling the default user and share, etc.

SMB client​

Sub-menu: /disk Packages required: Storage package

The Storage package adds an SMB client that mounts a remote SMB share as a local disk on the router. The package currently supports SMB2.1, SMB3.0, and SMB3.1.1 dialects (SMB1 is not supported due to security vulnerabilities).

Configuration example​

/disk/add smb-address=10.155.145.11 smb-share=share1 smb-user=user smb-password=password type=smb

The mounted share then appears as a disk in /file and can be managed like any other disk.