Mikrotik - Network Layout using Mikrotik & Firewall
**DISCLAIMER: The implementation described in this article has several pros and cons. It will help route VoIP traffic around an existing router or firewall that is conflicting with the VoIP service. It will also provide additional support tools like remote PCAP abilities. HOWEVER, it can introduce network security vulnerabilities should access to the Mikrotik be compromised. If the local network has a dedicated UTM appliance/firewall you should NOT consider this implementation and instead work with the vendor/admin/manufacture to help alleviate any VoIP related issues you are experiencing.
The following is an illustration of a basic network setup with a Miktrotik and a Firewall. The idea is to have the Miktrotik provide QoS for the phones on a seprate network from computers and other network devices.
This is accomplished by setting static IPs on the IP phones (192.168.88.X) and use the Mikrotik as their gateway (192.168.88.1). Computers and other network devices will receive an IP from the DHCP server or Firewall (192.168.1.X). Computers and network devices obtaining an IP from the DHCP server or Firewall will use the Firewall for their gateway (192.168.1.1).
Related Articles
Mikrotik - Complete Setup Guide
**Disclaimer: This guide is provided by 3NG as a courtesy to its partners. You are using this guide at your own risk and 3NG is NOT responsible or liable for any issues that may occur from the use of this guide or a Mikrotik device. While we ...Mikrotik Site to Site Ipsec VPN
*Information on this page was taken directly from http://wiki.mikrotik.com/wiki/Manual:IP/IPsec. We did not create this document and do not take responsibility for any possible outcome of using these directions. Site to Site IpSec Tunnel Consider ...Mikrotik - DNS DoS Attack Prevention
If you are experiencing high ping times and/or slower than normal internet speeds, you might be a victim fo a DNS DoS attack. This article will walk you through creating a firewall rule on Mikrotik routers to block this attack. Log into your Mikrotik ...Mikrotik - Configuring QoS
To configure QoS (Quality of Service) on a router successfully, you first need to know the speed that the internet circuit is consistently stable at. To find the stable speeds of the circuit, we recommend using an internet speed test, running it at ...Mikrotik - NAT Rule (Port Forwarding)
In the event port forwarding is needed, a NAT Rule will need to be created in the Mikrotik. For this example, the NAT Rule is to allow access to a device on IP 192.168.88.100 using port 80 (extension 100). For devices such as onsite PBX that have ...