Connecting to MikroTik with Winbox: Your First Steps

Connecting to Your MikroTik for the First Time Using Winbox

Winbox is MikroTik official graphical configuration tool. It is a small Windows application (also runs on Linux/macOS via Wine) that gives you a full graphical interface to RouterOS. For beginners, Winbox is the easiest way to start configuring a MikroTik device.

Downloading Winbox

1. Go to https://mikrotik.com/download in your browser.
2. Find the Winbox section and download the latest version for your operating system.
3. Winbox is a single .exe file — no installation needed. Just download and run it.

On Linux/macOS, you can run Winbox with Wine, or use WebFig (covered in the next lesson) which runs in any browser.

Factory Default State

A brand-new MikroTik device (or one that has been reset to factory defaults) will have:

• Login: admin
• Password: empty (just press Enter) — on newer devices running RouterOS 7.x, the password may be printed on the device label
• Default IP: 192.168.88.1 on the LAN port (ether2 and higher, depending on model)
• DHCP server active on LAN ports — your computer will get an IP like 192.168.88.x

Connecting via MAC Address (Recommended for First Connection)

The safest way to connect to a fresh MikroTik is via MAC address, not IP. This works even if the device has no IP address configured.

Steps:

1. Connect your computer directly to the MikroTik using an Ethernet cable (use ether2 or any LAN port).
2. Open Winbox.
3. Click the "..." button next to the Connect To field — this opens the neighbor discovery window.
4. Wait a few seconds. Your MikroTik should appear in the list with its MAC address.
5. Click on the device row to fill in the MAC address automatically.
6. Enter admin as the username and leave the password blank.
7. Click Connect.

You are now connected via MAC address!

The Quick Set / Default Configuration

When you connect for the first time, RouterOS may show you a Quick Set dialog. This is a simplified setup wizard. For learning purposes, it is often better to close it and configure things manually. If you want to use it, fill in the fields and click Apply.

Setting the Admin Password (Critical Safety Step)

The very first thing you should do on any MikroTik is set a strong admin password. Leaving it blank is a serious security risk.

In Winbox:

1. Go to System > Users
2. Double-click the admin user
3. Click Password button
4. Enter your new password twice and click OK

Or via CLI:

/user set admin password=YourStrongPassword123

Write down this password. If you forget it, you will need to reset the device.

Basic Safety Steps — Avoid Locking Yourself Out

Do Not Remove the Default Firewall Rules Immediately

A factory-default MikroTik has firewall rules that protect it. Do not delete all firewall rules unless you understand what you are doing.

Keep at Least One Management Access Method

• Keep an Ethernet cable connected to a LAN port
• Do not block port 8291 (Winbox) or port 22 (SSH) in the firewall INPUT chain on the LAN interface

Know How to Reset to Factory Defaults

If you lock yourself out:

• Software reset: In Winbox go to System > Reset Configuration
• Hardware reset: Hold the reset button on the device for 5 seconds while powered on

After a hardware reset, the device returns to factory defaults and you can connect again with admin and no password.

Winbox Interface Overview

Once connected, Winbox shows:

• Left menu: All RouterOS configuration sections (IP, Interfaces, Wireless, etc.)
• Top toolbar: Buttons for safe mode, terminal, neighbors
• Main area: Configuration windows open here

Safe Mode

Winbox has a Safe Mode feature (click the Safe button or press Ctrl+X). When safe mode is active:

• Any changes you make are held temporarily
• If your Winbox connection drops, RouterOS automatically rolls back all changes
• This prevents you from accidentally locking yourself out

Always enable Safe Mode before making firewall or IP address changes!

Connecting via IP Address

Once the device has an IP address (default is 192.168.88.1):

1. Make sure your computer gets an IP from the MikroTik DHCP server
2. In Winbox, type 192.168.88.1 in the Connect To field
3. Enter admin and your password
4. Click Connect

Summary

Winbox makes it easy to configure MikroTik without knowing any CLI commands. Key points:

• Download from https://mikrotik.com/download
• Connect via MAC address for the safest first connection
• Set the admin password immediately
• Use Safe Mode when making risky changes
• Know how to reset to factory defaults if needed