diff --git a/Mikrotik-RouterOS.md b/Mikrotik-RouterOS.md new file mode 100644 index 0000000..bfb719f --- /dev/null +++ b/Mikrotik-RouterOS.md @@ -0,0 +1,20 @@ +RouterOS is an embedded operating system used on various appliances from Mikrotik. Depending on the version of RouterOS, not all commands may be available, and if major differences are known, they are combined in a version-specific section. + +SSH into an appliance or virtual machine running RouterOS, or in case of a physical device use a local serial connection in order to apply these options. + +## RouterOS >= 7.7 + +RouterOS 7.7 was the first release supporting ``ed25519`` host keys. + +``` +/ip ssh set host-key-size=4096 host-key-type=ed25519 strong-crypto=yes +/ip/ssh/regenerate-host-key +``` + +## Limitations + +In most versions of RouterOS the options available don't permit reaching a perfect score, here are some of the reasons: + +* Host-key algorithms: Not (yet) adjustable. +* Key exchange algorithms: Offers only limited adjustability (``strong-crypto=yes``) +* Message authentication codes: Not (yet) adjustable. \ No newline at end of file