I have recently upgraded my router from a nearly 7 year old consumer “gaming” router to a Mikrotik RB960PGS router.

So far I have been able to:

  • Remove all configurations
  • Set a long admin password
  • Create a bridge
  • Setup DHCP server
  • Set up NAT
  • Set up Spark NZ fibre connection
  • Update to latest stable firmware (7.15.2)
  • Set up basic IPv4 & IPv6 firewalls
  • Setup NTP & disable cloud/update time
  • Set DNS to my Pi-hole
  • Disabled the following IP services API, API-SSL, FTP, SSH, Telnet, & WWW-SSL
  • Turned off “detect internet”
  • Turned off “use peer dns” so all DNS goes through the Pi-Hole instead of the ISP’s DNS servers.

Is there any other “gotcha’s” or things that I should be setting up?