MikroTik Router Setup for the Mining Industry

MikroTik Router Setup for the Mining Industry
Mining environments are demanding by nature. Whether you're managing a cryptocurrency mining farm, an industrial mining operation (gold, coal, or data center), or a remote camp network, the network infrastructure must be built to match that same level of toughness.

A proper MikroTik setup for a mining site depends on three key factors: the size of the site, the available internet sources, and the required security level. No two mining environments are identical, but the core network requirements almost always share the same foundation.

What Every Mining Network Needs****

**1. Stable Internet

1. High Uptime
2. Strong Security
3. VLAN Separation
4. Monitoring
5. Redundancy & Failover
6. Remote Management**

Mikrotik router configuration step by step
Step 1: Initial MikroTik Setup
a. First Login

• Connect your PC to MikroTik via ethernet (ether1)
• Download WinBox from mikrotik.com (easiest management tool)
• Default IP address, Username and password IP address: 192.168.88.1/24 Username: admin password: blank b. Update RouterOS First
• System > Packages > Check for Updates > Update Always update before configuring -- fixes security vulnerabilities.

C. Change Default Credentials Immediately
System > Users > admin > Change Password
*Step 2: Network Design for Mining*
* VLAN segmentation --> (Separate all systems for security and performance.)

_Why VLANs Matter in Mining? _

• Isolates critical industrial systems from general traffic
• Prevents a compromised device from affecting miners
• Easier to monitor and troubleshoot per segment Step 3: Configure VLANs on MikroTik Create VLANs: Bash: /interface vlan add name=vlan10-miners vlan-id=10 interface=ether3 add name=vlan20-mgmt vlan-id=20 interface=ether3 add name=vlan30-ops vlan-id=30 interface=ether3

Set Up DHCP per VLAN
/ip pool
add name=pool-miners ranges=10.10.10.10-10.10.10.254
add name=pool-ops ranges=10.10.30.10-10.10.30.254

/ip dhcp-server
add name=dhcp-miners interface=vlan10-miners address-pool=pool-miners
add name=dhcp-ops interface=vlan30-ops address-pool=pool-ops

Step 4: Internet & WAN Setup

• Redundant link is required as it must run 24/7
• Set Up LTE Failover (Common in Mining) /ip route add dst-address=0.0.0.0/0 gateway=fiber-gateway distance=1 add dst-address=0.0.0.0/0 gateway=lte-gateway distance=2

Step 5: Security Hardening
Firewall Rules for Mining Environment

Drop invalid connections

/ip firewall filter
add chain=input connection-state=invalid action=drop

Allow established connections

add chain=input connection-state=established,related action=accept

Block SCADA VLAN from accessing others

add chain=forward src-address=10.10.40.0/24 dst-address=!10.10.40.0/24 action=drop

Allow only management IP to access router

add chain=input src-address=10.10.20.0/24 action=accept
add chain=input action=drop

Disable Unused Services
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes

Keep only SSH and WinBox

set ssh port=2222

Step 6: Monitoring & Alerts
Enable SNMP for Network Monitoring
/snmp
set enabled=yes contact="[e-mail]"
location="Mine Site A"
Set Up Email Alerts for Link Failures
/tool e-mail
set server=smtp.gmail.com port=587
from=[e-mail]
user=[e-mail] password=yourpassword

/system script
add name=link-down-alert source={
:local msg "WAN Link Down at Mine Site!"
/tool e-mail send to="[e-mail]"
subject="ALERT" body=$msg
}

Step 7: Mining-Specific Optimizations
QoS — Prioritize Mining Traffic
/ip firewall mangle
add chain=prerouting src-address=10.10.10.0/24
action=mark-packet new-packet-mark=miners-traffic

/queue tree
add name=miners-priority packet-mark=miners-traffic
priority=1 max-limit=100M