MikroTik birinchi marta sozlash: bosqichma‑bosqich qo‘llanma

⏱ O‘qish vaqti: 3 daqiqa

Qisqacha

Routerga fizikal ulanish va WinBox orqali kirish.
Bridge yaratib, lokal IP manzilini belgilash.
DHCP serverni sozlab, ichki qurilmalarga avtomatik IP taqsimlash.
ISP dan DHCP client orqali internetga ulanish.
NAT va port forward bilan tarmoqni internetga chiqishini ta’minlash.

MikroTik routerini birinchi marta ishga tushirayotganda, asosiy tarmoq infratuzilmasini yaratish va internetga ulash kerak bo‘ladi. Ushbu qo‘llanma sizga fizikal ulanishdan boshlab, lokal tarmoq, DHCP, NAT va xavfsizlik sozlamalarigacha bo‘lgan barcha bosqichlarni ko‘rsatadi.

Talablar

MikroTik router
Ethernet kabel
Kompyuter (Ethernet yoki Wi‑Fi)
ISP internet ulanishi
30‑60 daqiqa vaqt

Sozlash bosqichlari

1. Routerga fizikal ulanish va WinBox orqali kirish

Ethernet kabelini kompyuteringizdan routerning ether2‑5 portlaridan biriga ulang, internet kabelini ether1 ga ulang. Routerni yoqing va bir daqiqa kuting. WinBoxni mikrotik.com/download sahifasidan yuklab oling, ishga tushiring. WinBoxda «…» tugmasini bosib «Neighbors» tabida routerni toping va MAC yoki IP manzil orqali ulaning. Foydalanuvchi nomi: admin, parol: bo‘sh qoldiring.

2. Zaxira yaratish

Har bir asosiy bo‘limdan keyin konfiguratsiyani zaxiralash tavsiya etiladi. WinBoxda Files → Backup tanlang, fayl nomini (masalan, «after‑bridge») kiriting va Backup tugmasini bosing. Keyin faylni restore qilish uchun Files → Backup → Restore ni tanlang.

3. Bridge yaratish va lokal IP belgilash

Bridge interfeysini yaratish va unga portlarni qo‘shish uchun quyidagi kod blokini ishlating. Bu blok bridge1 ni yaratadi, ether2 ni unga qo‘shadi va 192.168.88.1/24 manzilini belgilaydi. /interface bridge add name=bridge1 /interface bridge port add interface=ether2 bridge=bridge1 /ip address add address=192.168.88.1/24 interface=bridge1

/interface bridge add name=bridge1
/interface bridge port add interface=ether2 bridge=bridge1
/ip address add address=192.168.88.1/24 interface=bridge1

4. DHCP serverni sozlash

Lokal tarmoqdagi qurilmalarga avtomatik IP manzillarni taqsimlash uchun DHCP serverni sozlang. Quyidagi interaktiv buyruq DHCP serverni bridge1 interfeysida yaratadi va kerakli parametrlarni avtomatik tanlaydi. ip dhcp-server/ setup

[admin@MikroTik] > ip dhcp-server/ setup [enter]
Select interface to run DHCP server on 

dhcp server interface: bridge1 [enter]
Select network for DHCP addresses 

dhcp address space: 192.168.88.0/24 [enter]
Select gateway for given network 

gateway for dhcp network: 192.168.88.1 [enter]
Select pool of ip addresses given out by DHCP server 

addresses to give out: 192.168.88.2-192.168.88.254 [enter]
Select DNS servers 

dns servers: 192.168.88.1 [enter]               
Select lease time 

lease time: 1800 [enter]

5. Internetga DHCP client orqali ulanish

WAN interfeysi (ether1) orqali ISP ning DHCP serveridan IP olish uchun quyidagi buyruqni bajaring. /ip dhcp-client add disabled=no interface=ether1

/ip dhcp-client add disabled=no interface=ether1

6. NAT masquerade qo‘shish

Ichki tarmoq qurilmalari internetga chiqishi uchun NAT (masquerade) qo‘shing. /ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

/ip firewall nat
  add chain=srcnat out-interface=ether1 action=masquerade

7. RDP uchun port forward qo‘shish (ixtiyoriy)

Ichki tarmoqdagi 192.168.88.254 manziliga 3389 port orqali RDP ulanishini yo‘lga qo‘ying. Bu NAT qoidasi dst-nat turini ishlatadi.

/ip firewall nat
  add chain=dstnat protocol=tcp port=3389 in-interface=ether1 \
    action=dst-nat to-address=192.168.88.254

8. Admin parolini o‘zgartirish

Router xavfsizligini oshirish uchun admin foydalanuvchisining parolini yangilang. /user set 0 password="!={Ba3N!40TуX+GvKBzjTLIUcx/,"

/user set 0 password="!={Ba3N!40TуX+GvKBzjTLIUcx/,"

Tekshirish

Internetga ulanishni tekshirish uchun 8.8.8.8 manziliga ping yuboring; javob kelishi kerak.

[admin@MikroTik] > /ping 8.8.8.8
  SEQ HOST                                     SIZE TTL TIME       STATUS             
    0 8.8.8.8                                    56  55 14ms399us 
    1 8.8.8.8                                    56  55 18ms534us 
    2 8.8.8.8                                    56  55 14ms384us

Diqqat:

Default konfiguratsiyani o‘chirib tashlamang – u xavfsizlik va DHCPni o‘z ichiga oladi.
Admin parolini darhol o‘zgartiring, aks holda router xavfsizligi tahdid ostida qoladi.
NAT qo‘shishda out-interface nomini to‘g‘ri tanlang, aks holda internetga chiqish ishlamasligi mumkin.
Port forward faqat kerak bo‘lganda qo‘llang, ortiqcha ochiq portlar xavfsizlikka tahdid bo‘lishi mumkin.

Muammolar va yechimlar

DHCP client IP olmagan

ip dhcp-client print buyrug‘i (kod 5) bilan holatni tekshiring; kabel va ether1 interfeysini tekshiring, ISP DHCP server faol ekanligiga ishonch hosil qiling.

Xulosa

Ushbu bosqichlarni bajarganingizdan so‘ng, router lokal tarmoqni yaratadi, qurilmalar avtomatik IP oladi, internetga chiqadi va NAT orqali xavfsiz ishlaydi. Endi Wi‑Fi yoki qo‘shimcha xizmatlarni sozlashingiz mumkin.

Manba: First Time Configuration — help.mikrotik.com