MikroTik Interfaces: WebFig, SSH, and CLI Basics

WebFig, SSH, and CLI: Three Ways to Configure RouterOS

RouterOS can be configured in three main ways beyond Winbox: WebFig (browser-based GUI), SSH (secure remote terminal), and the CLI (command-line interface). Each has its strengths, and knowing all three makes you a more capable network engineer.

Comparing Configuration Methods

WebFig — Browser-Based Configuration

WebFig is built into RouterOS and accessible from any web browser. No software installation needed.

Accessing WebFig

1. Make sure your computer can reach the MikroTik
2. Open your browser and go to: http://192.168.88.1
3. Log in with admin and your password
4. You will see the WebFig interface — similar layout to Winbox but in a browser

Security Note

By default, WebFig uses plain HTTP. For production environments, consider disabling HTTP and using HTTPS:

/ip service set www disabled=yes
/ip service set www-ssl disabled=no

Restrict which IPs can access it:

/ip service set www-ssl address=192.168.88.0/24

SSH — Secure Remote CLI Access

SSH gives you command-line access to RouterOS from any SSH client.

Checking SSH Service

/ip service print

SSH runs on port 22 by default. To ensure it is enabled:

/ip service set ssh disabled=no

Connecting via SSH

On Linux/macOS:

ssh admin@192.168.88.1

On Windows, use PuTTY, Windows Terminal, or any SSH client.

After login you will see the RouterOS CLI prompt:

[admin@MikroTik] >

CLI Navigation Basics

The RouterOS CLI is organized as a hierarchy of menus. Understanding navigation is essential.

Entering a Menu

Type the menu path and press Enter:

[admin@MikroTik] > /ip address
[admin@MikroTik] /ip/address>

The prompt changes to show your current location.

Going Back to Root

Type / to jump back to root from anywhere:

[admin@MikroTik] /ip/address> /
[admin@MikroTik] >

Type .. to go up one level:

[admin@MikroTik] /ip/address> ..
[admin@MikroTik] /ip>

The ? Help System

Type ? to see available options at any point:

[admin@MikroTik] > ?

This lists all top-level menus. Inside a menu, ? shows available subcommands.

Tab Completion

Press Tab after typing a partial command to auto-complete:

/ip add[TAB]              becomes  /ip address
/ip address add int[TAB]  becomes  /ip address add interface=

The print Command

[admin@MikroTik] /ip/address> print
Flags: X - disabled, I - invalid, D - dynamic
 #   ADDRESS            NETWORK         INTERFACE
 0   192.168.88.1/24    192.168.88.0    bridge

The set Command

/ip address set 0 address=10.0.0.1/24

The add Command

/ip address add address=10.0.0.1/24 interface=ether1

The remove Command

/ip address remove 0

Useful CLI Commands for Beginners

# View system resource usage
/system resource print

# View all interfaces
/interface print

# View IP addresses
/ip address print

# View routing table
/ip route print

# Ping a host
/ping 8.8.8.8 count=4

# Export config to file (backup)
/export file=my-backup

# Undo last change
/undo

Absolute Paths vs Relative Navigation

You can run any command from root using its full path without navigating into the menu first:

/ip address print
/ip address add address=192.168.1.1/24 interface=ether2
/ip dhcp-server print

This is very useful in scripts where you want to be explicit about location.

print detail and print where

For more verbose output showing all parameters:

/ip address print detail

To filter output:

/ip address print where interface=ether1

CLI Tips

• Use /export to back up before making major changes
• Use tab completion — it saves time and prevents typos
• Commands are case-insensitive in RouterOS CLI
• Use print count-only to count entries without listing them

Summary

WebFig is great when you need browser access without installing Winbox. SSH and CLI are essential for automation, scripting, and managing remote routers. Master the basic navigation (/, .., print, set, add, remove, ?, Tab) and you will be comfortable with RouterOS in no time.