MikroTik RB951-2n Configuration

Upgrade firmware

Upgrade base firmware

• Go to MikroTik download page
• Select 'mipsbe'
• Select 'Upgrade package' (will download something like 'routeros-mipsbe-5.22.npk')
• Select 'All packages' (will download something like 'all_packages-mipsbe-5.22.zip')
• Unzip the 'all_packages-mipsbe-5.22.zip' file
• Extract 'ntp-5.22-mipsbe.npk' to same directory where 'routeros-mipsbe-5.22.npk' is located
• Connect to router with web browser
• Click the 'Files' tab on the left to expand
• Click 'Choose File'
• Upload 'routeros-mipsbe-5.22.npk'
• Click 'Choose File'
• Upload 'ntp-5.22-mipsbe.npk'
• Click 'System' tab on the left
• Click 'Reboot'

(Wait for router to restart)

Verify bootloader upgraded

• Connect to router with web browser
• Click 'System' tab on the left to expand
• Click 'RouterBoard' tab on the left

(If 'Current Firmware' same as 'Upgrade Firmware', no action is necessary)

• Click 'Upgrade'

(Router may restart, can't remember)

Configuration

• Connect to router with web browser

Enable NTP server

• Click on the 'System' tab on the left to expand
• Click on the 'NTP Client' tab on the left
• Check 'Enabled'
• Change 'Mode' to 'Unicast'
• Enter FQDN or IP address of NTP server
• Click 'Apply'

Disable Telnet management service

• Click 'IP' tab on the left to expand
• Click 'Services' tab on the left
• Click on the 'D' next to 'Telnet' to disable Telnet (disable any other undesired services)

Disable UPnP service

• Click 'IP' tab on the left to expand
• Click 'UPnP' tab on the left
• Uncheck 'Enabled'
• Click 'Apply'

Disable Firewall & NAT

• Click 'IP' tab on the left to expand
• Click on 'Firewall' tab
• Delete any rules present by clicking '-' next to rule
• Click on the 'NAT' tab
• Delete any items by clicking on '-' next to item

Set basic parameters

(This is done last so as not to have to reconnect to the router again)

• Click on 'Quickset' tab on left
• Click 'Bridge' radio button next to 'Mode'
• Click 'DHCP' radio button next to 'Address'
• Click 'Any' next to 'Address Source'
• Change 'Router Identify' to identify this router uniquely
• Change 'SSID' to desired SSID
• Change 'Frequency' to desired channel (see this list)
• Change 'Country' to 'united states'
• Check 'WPA2' box next to 'Security'
• Check 'aes ccm' box next to 'Encryption'
• Enter secret phrase for 'Pre-Shared Key'
• Click 'Apply Configuration' button
• (Router will reboot with new parameters)

Backup router configuration

• Connect to router with a web browser
• Click 'Files' tab on the left
• Click 'Backup' button
• Click 'Download' button next to most recent back-up file

Restore router configuration

• Connect to router with a web browser
• Click 'Files' tab on left
• Click 'Choose File'
• Select a previously downloaded backup file
• Click on uploaded file name
• Click 'Restore'
• Click 'OK' to restore and reboot