Russian Users MikroTik | Форум пользователей MikroTik

Код: Выделить всё

# model = RouterBOARD 3011UiAS

/caps-man channel
add band=2ghz-g/n extension-channel=disabled name=channel2,4
add band=5ghz-a/n/ac name=channel5

/interface bridge
add admin-mac=64:D1:54:40:62:7B auto-mac=no comment=\
    "created from master port" name=bridge1 protocol-mode=none
add name=bridge_Guest_WiFi

/caps-man datapath
add bridge=bridge1 client-to-client-forwarding=yes local-forwarding=yes name=\
    datapath1
add bridge=bridge_Guest_WiFi client-to-client-forwarding=yes \
    local-forwarding=no name=datapath_Guest_WiFi

/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=AGRO passphrase=******
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=security_Guest_WiFi passphrase=*******

/caps-man configuration
add channel=channel2,4 datapath=datapath1 mode=ap name=cfg2,4 rx-chains=\
    0,1,2,3 security=AGRO ssid=AGRO tx-chains=0,1,2,3
add channel=channel5 datapath=datapath1 mode=ap name=cfg5 rx-chains=0,1,2,3 \
    security=AGRO ssid=AGRO5 tx-chains=0,1,2,3
add channel=channel2,4 datapath=datapath_Guest_WiFi mode=ap name=\
    cfg2,4_Guest_WiFi rx-chains=0,1,2,3 security=security_Guest_WiFi ssid=\
    Guest_WiFi tx-chains=0,1,2,3

/ip pool
add name=POOL-LAN ranges=192.168.0.2-192.168.0.199
add name=POOL_Guest_WiFi ranges=192.168.155.2-192.168.155.254

/ip dhcp-server
add address-pool=POOL-LAN authoritative=after-2sec-delay disabled=no \
    interface=bridge1 lease-time=1d name=DHCL-LAN
add address-pool=POOL_Guest_WiFi disabled=no interface=bridge_Guest_WiFi \
    lease-time=3h10m name=DHCP_Guest-WiFi

/caps-man access-list
add action=accept allow-signal-out-of-range=10s comment=\
    "\D0\F3\E4\EE\EC\F1\FC\EA\E0 \ED\EE\F3\F2" disabled=no interface=any \
    mac-address=2A:56:5E:87:B4:C9 ssid-regexp=AGRO
*
*
*
add action=reject allow-signal-out-of-range=10s comment=\
    "DENY \"AGRO\" ANY ANY" disabled=yes ssid-regexp=AGRO

/caps-man manager
set enabled=yes

/caps-man provisioning
add action=create-dynamic-enabled comment=cfg2.4/guest_wificfg2.4 \
    hw-supported-modes=gn master-configuration=cfg2,4 name-format=\
    prefix-identity name-prefix=cfg2.4 slave-configurations=cfg2,4_Guest_WiFi
add action=create-dynamic-enabled comment=cfg5an hw-supported-modes=an,a,ac \
    master-configuration=cfg5 name-format=prefix-identity name-prefix=cfg5
add action=create-dynamic-enabled comment=cfg4ac disabled=yes \
    hw-supported-modes=ac master-configuration=cfg5 name-format=\
    prefix-identity name-prefix=cfg5


/ip address
add address=192.168.0.1/24 interface=bridge1 network=192.168.0.0
add address=192.168.155.1/24 interface=bridge_Guest_WiFi network=\
    192.168.155.0

/ip dhcp-server network
add address=192.168.0.0/24 dns-server=8.8.8.8 gateway=192.168.0.1 netmask=24
add address=192.168.155.0/24 gateway=192.168.155.1

/ip firewall filter
add action=accept chain=input comment=UnblockCapsman dst-address-type=local \
    src-address-type=local
*
*
*