SwOS · Topic 1 of 3

Introduction to SwOS

Learn what SwOS is, how dual boot RouterBOARDs choose between RouterOS and SwOS, how SwOS is installed, and how to reach and manage it in a browser.

  • 5 min
In a nutshell
  • SwOS is a switching only operating system with a web interface.
  • Dual boot devices select the system with boot-os in the routerboard settings.
  • The RouterOS configuration is not shared with SwOS.

What it is

SwOS is a small operating system from MikroTik that does switching and nothing else.

It has a web interface with a fixed set of pages, and no command line, scripting or routing. Because it is so small, it boots quickly and it is simple to learn. Some devices run only SwOS, and some can run either SwOS or RouterOS.

Switch devicedual boot hardwareboot optionSwOSswitching onlymanaged byBrowserweb interface

Use SwOS when you need a plain managed switch. Use RouterOS when you need routing, firewalling, queues or scripting on the same device.

How it works

You choose the operating system, install it if needed, and then manage the switch from a browser.

SwOS compared with RouterOS

AspectSwOSRouterOS
ManagementWeb interfaceConsole, web and tools
Layer 3NoneFull routing
Firewall and queuesNoYes
Switching featuresA fixed setMany, with bridge and chip menus
ComplexityLowHigher

SwOS suits access switches in a plain Layer 2 role. Anything beyond switching needs RouterOS.

Dual boot compatibility

Some RouterBOARD switches carry both systems and choose one at boot.

The choice is a setting of the routerboard. From RouterOS, you select SwOS as the next boot system, and then restart.

/system routerboard settings set boot-os=swos
/system reboot

Setting boot-os=router-os selects RouterOS again. How you reach that setting once SwOS is running depends on the model, so read the documentation before you switch.

Not every device supports dual boot. Some run only SwOS, and some run only RouterOS, so check the product documentation first.

Watch out

Changing the boot system gives a different configuration environment. The RouterOS configuration is not shared with SwOS, so plan to configure the device again.

Installing SwOS

SwOS is installed as a package, and a dual boot device needs it present before it can boot into it.

  • A device that ships with SwOS needs no installation.
  • A dual boot device may need the SwOS package installed first, for example with the Netinstall tool.
  • Later upgrades are uploaded from the SwOS web interface.

Always use the SwOS package that matches the device family. A package for another model is not valid.

Reaching SwOS

SwOS starts with a default address and no password.

The default address is 192.168.88.1, and the default user is admin with an empty password. If a DHCP server is present on the network, SwOS can take an address from it instead. Connect a computer with an address in the same subnet, and open the address in a browser.

Set a password at once. An empty password on a switch is an open door.

Managing SwOS

The web interface is organised in tabs.

TabPurpose
LinkPort state, speed and basic port options
VLAN and VLANsPort VLAN settings and the VLAN table
HostsLearned and static MAC addresses
ForwardingPort isolation and related forwarding options
ACLAccess control rules
SystemIdentity, address, password and access limits

Other tabs exist, such as statistics and SNMP, and the exact set depends on the model and version. Some options, such as rate limits, flood limits, trunking and spanning tree, sit on different tabs from one version to the next. A switch without PoE has no PoE tab, for instance.

Backup and reset

You can save the whole configuration to a file, and load it later.

The backup file lets you copy a configuration to another switch of the same type, or restore it after a mistake. A reset returns the device to the defaults, and the default address works again.

Limiting management access

The System tab can limit who may manage the switch.

You can restrict management to an address range, to certain ports, or to a certain VLAN. Use these limits on every switch. Without them, any host on any port can try to log in.

Exam tip

Put management on a dedicated VLAN, allow management only from that VLAN, and keep a note of the password in a safe place.

Version differences

Features are added with new versions.

Read the release notes before an upgrade, and keep a backup of the configuration before you start.

What to remember for the exam

Seven facts cover most questions on this topic.

  • SwOS is a switching only operating system with a web interface.
  • Dual boot devices select the system with boot-os in the routerboard settings.
  • The RouterOS configuration is not shared with SwOS.
  • The default SwOS address is 192.168.88.1, with user admin and no password.
  • Upgrades are uploaded in the SwOS web interface.
  • The configuration can be saved to a file and restored.
  • The System tab limits management by address, port and VLAN.

Common mistakes

These four mistakes appear often.

Leaving the default empty password. Anyone with access to the network can change the switch.

Expecting RouterOS settings after a switch to SwOS. The two systems have separate configurations.

Installing the wrong package. A package for another device family is not valid.

Skipping the backup before an upgrade. A failed upgrade can leave you without the old settings.

Check yourself

Work through these three questions.

  • What is the default address of a SwOS device?

    192.168.88.1, with user admin and an empty password.

  • Which setting selects SwOS on a dual boot device?

    boot-os=swos in /system routerboard settings.

  • Why back up the configuration before an upgrade?

    A failed upgrade or a mistake can lose the settings, and the file lets you restore them.

Topic 1 of 3 in SwOS

Test yourself on SwOS

The full MikroTik MTCSWE question bank has 484 questions, with timed practice exams and an explanation for every answer.

This study guide is independent and is not affiliated with, endorsed by, or sponsored by MikroTik. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.