Secure Mikrotik RouterOS ISP template
Core settings
Routerboard
- Auto-upgrade: Enable
Services
If you want to see what ports Mikrotik uses and the matching ports: https://help.mikrotik.com/docs/spaces/ROS/pages/103841820/Services
Hiding services
Sometimes you want to keep running a service but not expose it
SSH
- Strong Crypto: Enable
- Host Key Type: Ed25519
After changing the “Host Key Type” regenerate the host key.
ISP Specific
Extra packages
- calea
- container
- gps
- rose-storage
- tr069-client
- ups
- user-manager
- zerotier
Interface lists
1
2
/interface list
add name=exclude_discovery
Neighbor discovery
Services
This post is licensed under CC BY 4.0 by the author.