Default configurations
All MikroTik devices come with some kind of default configuration. There are several different configurations depending on the board type:
- CPE Router
- LTE CPE AP router
- AP Router (single or dual-band)
- PTP Bridge, W60G Bridge (AP or CPE)
- WISP Bridge (AP in ap_bridge mode)
- Switch
- IP Only
- CAP
You can run the command /system/default-configuration/print to see the exact applied default configuration commands.
CPE Router
In this type of configuration, the router is set up as a wireless client device. The WAN interface is a Wireless interface. The WAN port has a DHCP client configured, is protected by an IP firewall, and MAC discovery and connection are disabled.
List of routers using this type of configuration:
- RB 711,911,912,921,922 - with level3 license
- SXT
- QRT
- SEXTANT
- LHG
- LDF
- DISC
- Groove
- Metal
CPE Router Mode
- wireless interface is connected to the provider's network (WAN port);
- WAN port is protected by a firewall and has DHCP client enabled
wlan1 Configuration
| mode | station |
| band | 2ghz-b/g/n |
| tx-chains | 0;1 |
| rx-chains | 0;1 |
| installation | outdoor |
| wpa2 | no |
| ht-extension | 20/40mhz-XX |
LAN Configuration:
| IP address | 192.168.88.1/24 is set on ether1 (LAN port) |
| DHCP Server | enabled |
| DNS | enabled |
WAN (gateway) Configuration
| gateway | wlan1 |
| ip4 firewall | enabled |
| ip6 firewall | enabled |
| NAT | enabled |
| DHCP Client | enabled |
Login
- admin user is protected by a password
Configuration preview:
CPE_Router.txt.
LTE CPE AP router
This configuration type is applied to routers that have both LTE and wireless interfaces. The LTE interface is the WAN port, protected by a firewall and with MAC discovery and connection disabled. The IP address on the WAN port is acquired automatically. The wireless interface is configured as an access point and bridged with all available Ethernet ports.
List of routers using this type of configuration:
- wAP LTE Kit
- SXT LTE
- LtAP 4G kit
- LtAP LTE kit
- Chateau
LTE CPE AP Router Mode
- wireless interface is connected to the provider's network (WAN)
This refers to the LTE interface, not a wireless interface.
- WAN port is protected by the firewall and has DHCP client enabled
LAN Configuration
| IP address | 192.168.188.1/24 is set on the bridge (LAN port) |
| DHCP Server | enabled |
| DNS | enabled |
WAN (gateway) Configuration
| gateway | lte1 |
| ip4 firewall | enabled |
| ip6 firewall | enabled |
| NAT | enabled |
Login
- admin user is protected by a password
Configuration preview :
LTE_CPE_AP_router.txt.
AP Router
This configuration type is applied to home access point routers to be used without additional configuration (except router passwords and wireless keys).
The first Ethernet interface is configured as a WAN port (protected by a firewall, DHCP client enabled, and MAC connection and discovery disabled). Other Ethernet ports and wireless interfaces are added to the LAN bridge with IP address 192.168.88.1/24 set and a DHCP server configured. In the case of dual-band routers, one wireless interface is configured as a 5 GHz access point and the other as a 2.4 GHz access point.
List of routers using this type of configuration:
- RB 450,751,850,951,953,2011,3011,4011
- hEX, PowerBox
- mAP
- wAP, wAP R (without LTE card)
- hAP
- cAP
- OmniTIK
- CRS series with wireless interface
- L009 series
- Audience
- Knot
- PWR
AP Router Mode
- WAN port is protected by a firewall and has DHCP client enabled
- Wireless and Ethernet interfaces (except WAN port/s) are part of the LAN bridge
LAN Configuration:
| IP address | 192.168.88.1/24 is set on the bridge (LAN port) |
| DHCP Server | enabled |
| DNS | enabled |
wlan1 Configuration
| mode | ap-bridge |
| band | 2ghz-b/g/n |
| tx-chains | 0;1 |
| rx-chains | 0;1 |
| installation | indoor |
| wpa2 | no |
| ht-extension | 20/40mhz-XX |
WAN (gateway) Configuration
| ip4 firewall | enabled |
| ip6 firewall | enabled |
| NAT | enabled |
| DHCP Client | enabled |
Login
- admin user is protected by a password
Configuration preview:
RouterMode.txt
PTP Bridge
Ethernet is bridged with a wireless interface. IP address 192.168.88.1/24 is set on the bridge interface. There are two options - CPE and AP. For CPE, the wireless interface uses "station-bridge" mode, and for AP, it uses "bridge" mode.
List of routers using this type of configuration:
- DynaDish - as CPE
PTP Bridge Mode
- Wireless and LAN interfaces are bridged;
LAN Configuration:
Login
- admin user is protected by a password
Configuration preview:
PTP_Bridge.txt
W60G Bridge
This configuration type is applied to routers that have a 60 GHz point-to-point link.
List of routers using this type of configuration:
- Cube, Cube Pro
- nRAY, Dish
- Wireless Wire kit
- wAP 60G - with level3 license
W60G Bridge Mode
- W60G and LAN interfaces are bridged;
wlan60-1 Configuration
| SSID | MikroTik |
| mode | station-bridge |
| password | no |
| IP address | 192.168.88.1/24 is set on the bridge |
Login
- admin user is protected by a password
Configuration preview:
W60G_Bridge.txt
WISP Bridge
The configuration matches PTP Bridge in AP mode, except that wireless mode is set to ap_bridge for PTMP setups. You can access the router directly by using a MAC address. If the device is connected to a network with an enabled DHCP server, a DHCP client configured on the bridge interface gets an IP address that you can use to access the router.
List of routers using this type of configuration:
- RB 911,912,921,922 - with Level4 license.
- Groove A, RB 711 A
- BaseBox, NetBox
- mANTBox, NetMetal
- wAP 60G AP - with level4 license.
- LtAP
- CME
WISP Bridge Mode
- wireless and LAN interfaces are bridged;
wlan1 Configuration
| mode | ap-bridge |
| band | 2ghz-b/g/n |
| tx-chains | 0;1 |
| rx-chains | 0;1 |
| installation | outdoor |
| wpa2 | no |
| ht-extension | 20/40mhz-XX |
wlan2 Configuration
| mode | ap-bridge |
| band | 5ghz-a/n/ac |
| tx-chains | 0;1 |
| rx-chains | 0;1 |
| installation | outdoor |
| wpa2 | no |
| ht-extension | 20/40/80mhz-XXXX |
LAN Configuration:
| DHCP Client | enabled on bridge (LAN port) |
Login
- admin user is protected by a password
Configuration preview:
WISP_Bridge.txt
Switch
This configuration uses switch chip features to configure a basic switch. All Ethernet ports are added to the switch group and IP address 192.168.88.1/24 is set on the bridge interface.
List of routers using this type of configuration:
- FiberBox
- CRS without wireless interface
Switch Mode
- All interfaces are switched;
Login
- admin user is protected by a password
Configuration preview:
switch.txt
IP Only
When no specific configuration is found, IP address 192.168.88.1/24 is set on ether1, or combo1, or sfp1.
List of routers using this type of configuration:
- RB 411,433,435,493,800,M11,M33,1100
- CCR, ROSE Data server
LAN
| IP on etherx | 192.168.88.1/24 |
Login
- admin user has no password.
Configuration preview:
ccr.txt
CAP
This configuration type is used when a device needs to operate as a wireless client device controlled by CAPsMAN.
When the CAP default configuration is loaded, ether1 is the management port with a DHCP client configured. All other Ethernet interfaces are bridged, and wlan1 is managed by CAPsMAN.
To load the CAP configuration, refer to Reset Button manual.