MikroTik Commands

MikroTik RouterOS CLI commands for router and switch configuration.

Device Startup Procedure

Step 1: Power on device

Connect power to boot MikroTik device

Step 2: Wait for boot

Wait 1-3 minutes for RouterOS to load

Step 3: Verify system

Check system status after boot

/system resource print

Display system resources and uptime

/system routerboard print

Verify hardware information

Step 4: Check interfaces

Verify interface states

/interface print

Display all interface status

Step 5: Verify configuration

Ensure configuration is loaded

/system backup save name=startup-check

Create backup after successful boot

Device Shutdown Procedure

Step 1: Save configuration

Ensure configuration is saved before shutdown

/system backup save name=pre-shutdown

Create backup before shutdown

/export file=config-backup

Export configuration to file

Step 2: Check active connections

Review current sessions if needed

/ip firewall connection print count-only

Count active connections

Step 3: Graceful shutdown

Shutdown or reboot the device

/system shutdown

Shutdown the device

/system reboot

Reboot the device

Step 4: Alternative - scheduled shutdown

Schedule shutdown for later

/system scheduler add name=shutdown on-event="/system shutdown" start-time=<time>

Schedule shutdown at specific time

System Information

/system resource print

Display system resources and uptime

/system routerboard print

Display RouterBOARD information

/system license print

Display license information

/system identity print

Display system identity/hostname

/system identity set name=<name>

Set system identity/hostname

/system clock print

Display system time

/system package print

List installed packages

/system history print

Display command history

Interface Configuration

/interface print

List all interfaces

/interface print stats

Display interface statistics

/interface ethernet print

List Ethernet interfaces

/interface enable <interface>

Enable interface

/interface disable <interface>

Disable interface

/interface set <interface> name=<newname>

Rename interface

/interface ethernet set <interface> speed=<speed>

Set interface speed

/interface ethernet set <interface> auto-negotiation=yes

Enable auto-negotiation

/interface monitor-traffic <interface>

Monitor real-time traffic

IP Address & Routing

/ip address print

Display IP addresses

/ip address add address=<ip/mask> interface=<interface>

Add IP address to interface

/ip address remove <id>

Remove IP address

/ip route print

Display routing table

/ip route add dst-address=0.0.0.0/0 gateway=<gateway>

Add default route

/ip route add dst-address=<network/mask> gateway=<gateway>

Add static route

/ip route remove <id>

Remove route

/ip dhcp-client print

Display DHCP client status

/ip dhcp-client add interface=<interface> disabled=no

Enable DHCP client on interface

/ip dns print

Display DNS configuration

/ip dns set servers=<dns1>,<dns2>

Set DNS servers

Bridge & VLAN

/interface bridge print

List bridges

/interface bridge add name=<name>

Create bridge

/interface bridge port print

List bridge ports

/interface bridge port add bridge=<bridge> interface=<interface>

Add interface to bridge

/interface bridge port remove <id>

Remove interface from bridge

/interface vlan print

List VLAN interfaces

/interface vlan add name=<name> vlan-id=<id> interface=<interface>

Create VLAN interface

/interface bridge vlan print

Display bridge VLAN configuration

/interface bridge vlan add bridge=<bridge> tagged=<ports> vlan-ids=<id>

Add VLAN to bridge

Wireless Configuration

/interface wireless print

List wireless interfaces

/interface wireless scan <interface>

Scan for wireless networks

/interface wireless set <interface> ssid=<ssid>

Set wireless SSID

/interface wireless set <interface> frequency=<freq>

Set wireless frequency

/interface wireless set <interface> band=<band>

Set wireless band

/interface wireless security-profiles print

List wireless security profiles

/interface wireless security-profiles add name=<name> mode=dynamic-keys authentication-types=wpa2-psk wpa2-pre-shared-key=<key>

Create WPA2 security profile

/interface wireless registration-table print

Display connected wireless clients

Firewall

/ip firewall filter print

Display firewall filter rules

/ip firewall filter add chain=<chain> action=<action> src-address=<ip>

Add firewall filter rule

/ip firewall filter remove <id>

Remove firewall rule

/ip firewall nat print

Display NAT rules

/ip firewall nat add chain=srcnat out-interface=<interface> action=masquerade

Add masquerade NAT rule

/ip firewall nat add chain=dstnat dst-port=<port> protocol=tcp action=dst-nat to-addresses=<ip> to-ports=<port>

Add port forwarding rule

/ip firewall address-list print

Display firewall address lists

/ip firewall address-list add list=<name> address=<ip>

Add address to list

/ip firewall mangle print

Display mangle rules

DHCP Server

/ip dhcp-server print

Display DHCP servers

/ip dhcp-server setup

Run DHCP server setup wizard

/ip dhcp-server add name=<name> interface=<interface> address-pool=<pool>

Create DHCP server

/ip dhcp-server network print

Display DHCP networks

/ip dhcp-server network add address=<network/mask> gateway=<gateway> dns-server=<dns>

Add DHCP network

/ip dhcp-server lease print

Display DHCP leases

/ip dhcp-server lease make-static <id>

Make lease static

/ip pool print

Display IP pools

/ip pool add name=<name> ranges=<start>-<end>

Create IP pool

User & Security

/user print

List user accounts

/user add name=<username> password=<password> group=<group>

Add user account

/user remove <username>

Remove user account

/user set <username> password=<newpassword>

Change user password

/user active print

Display active user sessions

/ip service print

Display enabled services

/ip service set <service> disabled=yes

Disable service

/ip service set <service> port=<port>

Change service port

/ip ssh print

Display SSH settings

/ip ssh set strong-crypto=yes

Enable strong SSH crypto

Bandwidth Management

/queue simple print

Display simple queues

/queue simple add name=<name> target=<ip/mask> max-limit=<up>/<down>

Add simple queue with bandwidth limit

/queue simple remove <id>

Remove simple queue

/queue tree print

Display queue tree

/interface ethernet switch rule print

Display switch rules (CRS)

Logging & Monitoring

/log print

Display system logs

/log print follow

Follow system logs in real-time

/log print where topics~"<topic>"

Filter logs by topic

/system logging print

Display logging configuration

/system logging add topics=<topic> action=<action>

Add logging rule

/tool torch <interface>

Real-time traffic monitor

/tool bandwidth-test <address> protocol=<protocol>

Run bandwidth test

/tool ping <address>

Ping host

/tool traceroute <address>

Traceroute to host

/tool sniffer quick

Quick packet sniffer

Backup & System

/system backup save name=<filename>

Create system backup

/system backup load name=<filename>

Restore from backup

/export file=<filename>

Export configuration to file

/export compact

Export compact configuration

/import file-name=<filename>

Import configuration from file

/system reset-configuration

Reset configuration to default

/system reset-configuration no-defaults=yes skip-backup=yes

Reset with no defaults (clean slate)

/system reboot

Reboot system

/system shutdown

Shutdown system

Routing Protocols

/routing ospf instance print

Display OSPF instances

/routing ospf network add network=<network/mask> area=<area>

Add OSPF network

/routing bgp instance print

Display BGP instances

/routing bgp peer print

Display BGP peers

/routing bgp peer add remote-address=<ip> remote-as=<asn>

Add BGP peer

/routing rip instance print

Display RIP instances

/routing route print

Display active routes