Russian Users MikroTik | Форум пользователей MikroTik

/interface bridge
add admin-mac=********* auto-mac=no mtu=1500 name=bridge-local
add name=inet1
add name=inet2
/interface ethernet
set [ find default-name=ether5 ] poe-out=off
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors \
l2mtu=1600 mode=ap-bridge ssid=SOSOK
/ip neighbor discovery
set ether1 discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys wpa2-pre-shared-key=*******
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.20.2-192.168.20.254
add name=dhcp_pool2 ranges=192.168.3.210-192.168.3.220
add name=dhcp_pool3 ranges=192.168.3.200-192.168.3.254
/ip dhcp-server
add address-pool=dhcp_pool3 disabled=no interface=bridge-local lease-time=3d name=dhcp1
/interface pppoe-client
add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 dial-on-demand=no disabled=no \
interface=inet1 keepalive-timeout=30 max-mru=1480 max-mtu=1480 mrru=disabled name=inet1-ppp password=\
******** profile=default service-name=pppoe use-peer-dns=no user=*****
/interface pptp-client
add add-default-route=no allow=mschap1,mschap2 connect-to=******** dial-on-demand=no disabled=no \
keepalive-timeout=disabled max-mru=1450 max-mtu=1450 mrru=disabled name=vpn-olimp password=\
********** profile=default-encryption user=******
/system logging action
set 2 remember=yes
set 3 src-address=0.0.0.0
/tool user-manager customer
set admin access=own-routers,own-users,own-profiles,own-limits,config-payment-gw
/interface bridge port
add bridge=bridge-local interface=wlan1
add bridge=inet2 interface=ether3
add bridge=bridge-local interface=ether4
add bridge=bridge-local interface=ether5
add bridge=inet1 interface=ether2
/ip address
add address=192.168.3.1/24 interface=bridge-local network=192.168.3.0
add address=**********/32 interface=inet2 network=255.255.255.252
/ip dhcp-client
add add-default-route=no comment="default configuration" dhcp-options=hostname,clientid disabled=no \
interface=inet1
/ip dhcp-server lease
add address=192.168.3.3 client-id=1:0:b:82:5e:2a:f5 mac-address=00:0B:82:5E:2A:F5 server=dhcp1
add address=192.168.3.2 client-id=1:0:b:82:28:34:25 mac-address=00:0B:82:28:34:25 server=dhcp1
/ip dhcp-server network
add address=192.168.3.0/24 dns-server=192.168.3.1,8.8.8.8 gateway=192.168.3.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,192.168.1.1
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input connection-state=established
add chain=input connection-state=related
add action=drop chain=input connection-state=invalid
add chain=input in-interface=bridge-local
add chain=input connection-state=new in-interface=vpn-olimp
add chain=input protocol=icmp
add chain=input connection-state=new dst-port=80 protocol=tcp
add chain=input dst-port=2295 protocol=tcp
add action=drop chain=input
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration"
/ip ipsec policy
set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0
/ip proxy
set cache-path=web-proxy1
/ip route
add comment=inet1 distance=1 gateway=inet1-ppp
add comment=inet2 disabled=yes distance=1 gateway=inet2
add distance=1 dst-address=8.8.4.4/32 gateway=inet1-ppp
add distance=1 dst-address=192.168.0.0/16 gateway=vpn-olimp
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh port=2295
set api disabled=yes
set winbox disabled=yes
set api-ssl disabled=yes
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set bridge-local disabled=yes display-time=5s
set inet1-ppp disabled=yes display-time=5s
set vpn-olimp disabled=yes display-time=5s
set inet1 disabled=yes display-time=5s
set inet2 disabled=yes display-time=5s
set wlan1 disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2 disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
/system leds
set 5 interface=wlan1
/system ntp client
set enabled=yes primary-ntp=91.226.136.136
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=wlan1
add interface=bridge-local
/tool netwatch
add down-script="/log error message=\"PPTP server ATK down\"\
\n/interface pptp-client set vpn-olimp connect-to=*******" host=******** interval=30s \
up-script="/log error message=\"PPTP server ATK up\"\
\n/interface pptp-client set vpn-olimp connect-to=********"
add down-script="/ip route set [find comment=\"inet2\"] disabled=no\
\n/ip route set [find comment=\"inet1\"] disabled=yes" host=8.8.4.4 interval=30s up-script="/ip route s\
et [find comment=\"inet1\"] disabled=no\
\n/ip route set [find comment=\"inet2\"] disabled=yes"
/tool user-manager database
set db-path=web-proxy1