Mikrotik setup complete guide for 100 users

Setting up a network for 100 users is not a simple task. It takes careful planning and proper configuration so that the network can run optimally. This article will discuss in detail step by step how to setup Mikrotik for 100 users, from hardware selection to the implementation of advanced features.

Hardware preparation and specifications

Mikrotik router recommendations

Before starting the configuration, make sure you choose the right router. Here’s a comparison of MikroTik routers that are suitable for 100 users:

Perbandingan Komprehensif Router Mikrotik dan Kapasitas Pengguna

Mikrotik router specifications and capacity

*Important notes on user capacity:

• The estimated user capacity depends on:
  1. Type of use (browsing, streaming, downloading)
  2. Bandwidth per user allocated
  3. QoS implementation
  4. Peak Time Usage

recommendations based on usage scenarios

Small office/home office (5-30 users)

• RB750GR3 (hex)
• RB951G-2HND Suitable for:
• Basic Internet Sharing
• Simple QoS
• Basic Firewall

Medium Business (31-100 users)

• RB450GX4
• RB4011IGS+ suitable for:
• Advanced QoS
• VPN server
• Bandwidth Management

Large Enterprise (101-300 users)

• CCR1009-7G-1C
• CCR1016-12G is suitable for:
• Multiple WAN
• Complex routing
• High Availability Setup

ISP/Data Center (300+ users)

• CCR1036-8G-2S+
• CCR2004-16G-2S+ suitable for:
• BGP Routing
• MPLS
• High-throughput applications

Performance Details RB750GR3 (HEX)

Since the RB750GR3 is a popular model, here are the specific performance details:

Limitation Rb750gr3:

1. Limited memory (256MB)
2. No built-in wifi
3. Performance decreased significantly when:
   • using the complex QoS feature
   • Lots of firewall rules
   • Active VPN
   • Hotspot with many users

Bandwidth Estimation

For 100 users, consider the following bandwidth allocation:

• Browsing & Email: 1-2 Mbps per user
• Streaming video: 3-5 Mbps per user
• Minimum total bandwidth: 100-200 Mbps

Basic configuration steps

1. Reset and Initial Setup

After reset, do the initial configuration:

1. Connect the computer to port 1
2. Access Winbox Using MAC Address
3. Set Password#atfp_close_translate_span# strong admin

2. Interface Setting

# Create Bridge Interface
/bridge interface
Add name=bridge-local

# Add a port to the bridge
/bridge port interface
add bridge=bridge-local interface=ether2
add bridge=bridge-local interface=ether3
add bridge=bridge-local interface=ether4
add bridge=bridge-local interface=ether5

Baca Juga

• 
  Sacred VM Meme Goes Viral: The Fatal Danger of Sudo Rebooting Old Uptime Servers Revealed!

  27 August 2026
• 
  Tips for choosing a MacBook according to your needs, avoid selection mistakes

  26 August 2026

# IP address configuration
/ip address
Add address=192.168.1.1/24 interface=bridge-local
Add address=10.0.0.1/24 interface=ether1

3. Setup DHCP Server

# Create IP Pool
/ip pool
Add name=DHCP-Pool ranges=192.168.1.10-192.168.1.254

# DHCP Server Configuration
/ip dhcp-server
add address-pool=dhcp-pool interface=bridge-local name=dhcp1 disabled=no

# Add DHCP Network
/ip dhcp-server network
ADD address=192.168.1.0/24 Gateway=192.168.1.1 DNS-Server=8.8.8.8.8.8.4.4

Bandwidth and QoS Management

1. Implementation of Queue Tree

# Create Mangle Rules
/ip firewall mangle
add chain=forward action=mark-connection new-connection-mark=conn_mark1 passthrough=yes
add chain=forward action=mark-packet new-packet-mark=packet_mark1 connection-mark=conn_mark1 passthrough=no

# setup queue tree
/queue tree
add name=”total download” parent=global-in
add name=”total upload” parent=global-out
add name=”download 100user” parent=”total download” limit-at=512k max-limit=2m
add name=”upload 100user” parent=”total upload” limit-at=256k max-limit=1m

2. PCQ Configuration (Per Connection Queue)

# Create Queue Type
/queue type
add kind=pcq name=pcq_download pcq-classifier=dst-address
add kind=pcq name=pcq_upload pcq-classifier=src-address

# Implementation on Queue Tree
/queue tree
add name=pcq_down parent=global-in queue=pcq_download
add name=pcq_up parent=global-out queue=pcq_upload

Network security setup

1. Basic Firewall Configuration

# Basic Protection Rules
/ip firewall filter
add chain=input protocol=tcp dst-port=23 action=drop comment=”block telnet”
add chain=input protocol=tcp dst-port=22 src-address-list=allowed_ssh action=accept comment=”allow ssh”
add chain=input protocol=tcp dst-port=22 action=drop comment=”block other ssh”

# Anti-DOS Protection
Add chain=input protocol=TCP psd=21,3s,3,1 action=add-src-to-address-list address-list=port_scanners address-list-timeout=2w comment=”port scanner detection”
add chain=input src-address-list=port_scanners action=drop comment=”drop scanners”

2. Setup Access List

# Create Access List for Wifi
/Wireless Access-List Interface
add interface=wlan1 mac-address=xx:xx:xx:xx:xx:xx comment=”user 1″
add interface=wlan1 mac-address=yy:yy:yy:yy:yy:yy comment=”user 2″

Implementation of Monitoring and Cache

1. DNS Cache Setup

# DNS cache configuration
/ip dns
Set allow-remote-requests=yes cache-size=2048kib max-udp-packet-size=512
Set servers=8.8.8.8,8.8.4.4

# Enable DNS Cache
/ip dns cache
Set Enabled=Yes

2. IMPLEMENTATION OF WEB PROXY

# Web Proxy Setup
/ip proxy
Set enabled=yes port=8080 max-client-connections=100
set cache-administrator=admin@local.net max-cache-size=unlimited

# add access list
/ip proxy access
Add action=allow dst-host=*.google.com
Add action=allow dst-host=*.microsoft.com

Optimization of wireless performance

1. Access Point Configuration

# setup wireless interface
/Wireless Interface
set[ find default-name=wlan1 ]mode=AP-Bridge SSID=Network-100\
Frequency=2442 band=2GHz-b/g/n channel-width=20/40Mhz-ce\
Distance=Indoors Installation=Indoor

# Security Settings
/Wireless Security-Profiles Interface
add authentication-types=wpa2-psk mode=dynamic-keys \
name=security1 wpa2-pre-shared-key=strongpassword

2. TX Power and Channel Settings

# Optimize power and channel
/Wireless Interface
set[ find default-name=wlan1 ]FREQUENCY=AUTO \
Channel-width=20/40MHz-CE TX-POWER=17
Wireless-Protocol=802.11 distance=indoors

Maintenance and Backup

1. Automatic Backup Setup

# Create a backup script
/system script
add name=autobackup source={
/system backup save name=([/system identity get name] . “-” . \
[:pick [/system clock get date] 0 6])
}

# Schedule a backup
/system scheduler
Add interval=7d name=backupschedule on-event=autobackup \
start-date=Jan/01/2024 start-time=00:00:00

2. Monitoring Tools Setup

# Enable SNMP
/snmp
Set enabled=yes contact=admin@local.net location=”Server Room” \
trap-community=public trap-version=2

# Graphing setup
/tool graphing interface
Add Interface=Ether1
Add Interface=bridge-local

Routine maintenance tips

Weekly Maintenance Checklist

1. Check resource usage:

/System Resource Print

2. Active connection monitor:

IP Hotspot Active Print

3. Check memory status:

/System Resource Print

4. System Log Review:

/log print

conclusions and best practices

Configuring MikroTik for 100 users requires attention to the following details:

1. Bandwidth Planning
   • Minimum allocation of 1 Mbps per user
   • Buffer 20% for Peak Usage
   • Monitoring regular use
2. Security
   • Update RouterOS regularly
   • Weekly configuration backup
   • Firewall Rules Review Every Month
   • Monitor Unusual Traffic Patterns
3. Documentation
   • Record any configuration changes
   • Save backup in a safe location
   • Update network diagrams regularly

Additional Resources

• Official Mikrotik Wiki
• Indonesian Mikrotik Forum
• RouterOS documentation
• Mikrotik Tutorial Video

By following this step-by-step guide, you can build a Mikrotik network for 100 users. Remember to always do testing after every configuration change and backup regularly.