Enforcer Script Instruction Guide
Access to the LucidView MikroTik Enforcer Portal will allow you to configure any MikroTik router running RouterOS to make use of the Enforcer Scripts — giving you access to our powerful Internet IP database and feature set including content filtering, Intrusion Prevention, content-based traffic shaping, and detailed reports, dashboards and traffic flow analysis.
We call such a configured MikroTik an Enforcer™.
Please note: Running the Enforcer scripts will not change your RouterOS configs.
Generating & Downloading the Enforcer Script
Once you have created your account and logged in, you will be directed to the Enforcer Management Portal Home Page.
Click on the View All button.
From the Enforcer Management Portal Home Page, click View All.
Click on Create New.
Select Create New from the list view.
Fill in the relevant information, then click Create.
A pop-up will appear to confirm all the details. Click Continue. After confirming, your Enforcer will appear in the list.
Download the script.
Locate your new Enforcer and click the download arrow.
Click Generate.
You will be taken to the script page. Click Generate — the script will be downloaded for the MikroTik.
Save the file.
Save the file somewhere easy to find. It will be in a format similar to yourlui.rsc — a unique combination of 8 letters and numbers with the extension .rsc. This is also known as the LUI (LucidView Unique Identifier).
Applying the Enforcer Script to Your MikroTik Router
Connecting to the MikroTik Router
Download Winbox.
Winbox is a utility used to configure MikroTiks. Download the latest version from:
mikrotik.com/downloadRun the application.
Double-click the application to run it. Windows may ask for permission to run the program.
Connect the MikroTik to your ethernet port.
Connecting with either the MAC address or IP address is acceptable. The Winbox application will discover the MikroTik automatically — if not shown, give it a few seconds or manually enter the IP address and credentials.
Click on the MAC address to populate the Connect To field. Use the correct login credentials for your MikroTik.
Click Connect.
Once successfully connected, the MikroTik configuration interface will open.
Uploading the Configuration Script
Click on the Files menu icon.
You may see a few existing files listed in the Files view.
Click Upload and upload your .rsc file.
Upload yourlui.rsc — the configuration script that allows the MikroTik to be controlled from the LucidView Cloud.
Click on New Terminal.
Open a new terminal from the MikroTik configuration interface.
Running the Enforcer Script
Update the MikroTik.
Before running the script, the MikroTik must be updated to the latest version. If the version is too old, the script will fail.
In the terminal, run:
/system package update installRun the script after reboot.
Once the MikroTik has rebooted, open a terminal and run:
/import ce03dafb.rsc(Use the filename you downloaded earlier.) Press enter and observe the screen for any errors. If errors occur, please contact us.
If no errors are observed, the MikroTik should be configured and ready. Log on to the LucidView Enforcer portal and confirm the device shows as Online.
Please allow up to 15 minutes after running the script before checking online status.
Special Cases
VLANs
If there are VLANs on your MikroTik, consider adding an intercept per VLAN to direct incoming DNS requests to the IP address of the MikroTik in that VLAN.
For example, if you have a VLAN called VLAN1 with the MikroTik IP configured as 10.31.0.1, add two rules — one for TCP and one for UDP — with the destination NAT action pointing to that IP address.
Two rules are required for every VLAN: one for TCP and one for UDP. Both are necessary for DNS to work correctly. This is also described in more technical detail in the actual script supplied by the LucidView portal. Please contact us if you need assistance.
Testing the MikroTik
Check connectivity from the LucidView Portal.
Click on the Enforcer's LucidView ID in the Portal (this can take up to 15 minutes). You will be directed to your Device Status — confirm it shows Online.
Confirm netflow data is being received.
Login to the Enforcer to configure the Content Filter, IPS, Saturation Manager, reporting, dashboards and traffic flow analysis tool.
Enforcer Technical Checklist
Download the PDF technical checklist for reference during setup.
