Russian Users MikroTik | Форум пользователей MikroTik

Код: Выделить всё

# aug/21/2015 10:27:01 by RouterOS 6.5
# software id = Y0TB-U7VC
#
/interface ethernet
set [ find default-name=ether1 ] comment=WAN l2mtu=1450 mac-address=\
    D4:CA:6D:4A:AE:D8 mtu=1450
set [ find default-name=ether2 ] comment=LAN mac-address=D4:CA:6D:4A:AE:D9
set [ find default-name=ether3 ] mac-address=D4:CA:6D:4A:AE:DA master-port=\
    ether2
set [ find default-name=ether4 ] mac-address=D4:CA:6D:4A:AE:DB master-port=\
    ether2
set [ find default-name=ether5 ] mac-address=D4:CA:6D:4A:AE:DC master-port=\
    ether2
set [ find default-name=ether6 ] mac-address=D4:CA:6D:4A:AE:DD
set [ find default-name=ether7 ] mac-address=D4:CA:6D:4A:AE:DE
set [ find default-name=ether8 ] mac-address=D4:CA:6D:4A:AE:DF
set [ find default-name=ether9 ] mac-address=D4:CA:6D:4A:AE:E0
set [ find default-name=ether10 ] mac-address=D4:CA:6D:4A:AE:E1
/ip neighbor discovery
set ether1 comment=WAN
set ether2 comment=LAN
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \
    mac-cookie-timeout=3d
/ip pool
add name=dhcp_pool1 ranges=192.168.88.2-192.168.88.254
/queue simple
add dst=10.10.64.68/32 max-limit=20M/1M name=OLYA target=""
add dst=10.10.64.53/32 max-limit=40M/1M name=SAHA target=""
add dst=10.10.64.22/32 max-limit=8M/1M name=nazarenko target=""
add dst=10.10.64.9/32 max-limit=8M/1M name=memed target=""
add dst=10.10.64.52/32 max-limit=6M/1M name=savopulo target=""
add dst=10.10.64.21/32 max-limit=6M/1M name=ab163 target=""
add dst=10.10.64.57/32 max-limit=40M/10M name=ab239 target=""
add dst=10.10.64.32/32 max-limit=10M/1M name=ab281 target=""
add dst=10.10.64.248/32 max-limit=4M/1M name=ab303 target=""
add dst=10.10.64.37/32 max-limit=9M/1M name=ab304 target=""
add dst=10.10.64.219/32 max-limit=4M/1M name=ab311 target=""
add dst=10.10.64.23/32 max-limit=10M/1M name=ab314 target=""
add dst=10.10.64.243/32 max-limit=8M/1M name=ab343 target=""
add dst=10.10.64.111/32 max-limit=6M/1M name=ab381 target=""
/queue type
set 6 pcq-total-limit=20000
/queue simple
add dst=10.10.64.235/32 max-limit=4M/1M name=ab378 queue=default/default \
    target=""
add dst=10.10.64.100/32 max-limit=6M/1M name=antonina queue=default/default \
    target=""
add dst=10.10.64.212/32 max-limit=6M/1M name=koval queue=default/default \
    target=""
add dst=10.10.64.33/32 max-limit=40M/1M name=lesha queue=default/default \
    target=""
add dst=10.10.64.25/32 max-limit=6M/1M name=lesha1 queue=default/default \
    target=""
/system logging action
set 1 disk-lines-per-file=10
set 3 remote=192.168.131.30
add name=action1 remote=192.168.131.30 target=remote
add disk-file-name=lg name=action2 target=disk
add name=action3 remote=192.168.131.10 target=remote
/interface pppoe-server server
add disabled=no interface=ether1 max-mru=1500 max-mtu=1500 \
    one-session-per-host=yes service-name=service1
add disabled=no interface=ether2 keepalive-timeout=60 max-mru=1500 max-mtu=\
    1500 one-session-per-host=yes service-name=service2
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 enabled=yes
/ip address
add address=195.5.109.102/28 comment="\C2\F5\EE\E4 WAN" disabled=yes \
    interface=ether1 network=195.5.109.96
add address=192.168.88.1/24 comment="LAN \EF\EE \F3\EC\EE\EB\F7\E0\ED\E8\FE" \
    disabled=yes interface=ether2 network=192.168.88.0
add address=192.168.244.1/24 comment="\CA\EE\ED\F1\EE\EB\E8" disabled=yes \
    interface=ether2 network=192.168.244.0
add address=192.168.131.1/24 comment=\
    "\C2\ED\F3\F2\F0\E5\ED\ED\FF\FF LAN \F1\E5\F2\FC" interface=ether2 \
    network=192.168.131.0
add address=77.109.22.230/29 comment="\C2\F5\EE\E4 \D2\D1\D3" disabled=yes \
    interface=ether1 network=77.109.22.224
add address=xxx.xx.xxx.230/29 comment="\C8\ED\F4\EE\EA\EE\EC" interface=\
    ether1 network=xxx.xx.xxx.xxx
add address=192.168.131.4/24 interface=ether2 network=192.168.131.0
/ip dhcp-server network
add address=192.168.88.0/24 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=xxx.xx.xxx.xx,8.8.8.8
/ip firewall address-list
add address=78.96.174.219 list=1
/ip firewall filter
add chain=input comment=\
    "\D0\E0\E7\F0\E5\F8\E8\F2\FC \E2\F1\E5 \EF\EE\E4\EA\EB\FE\F7\E5\ED\E8\FF" \
    connection-state=established
add chain=input comment="\D0\E0\E7\F0\E5\F8\E8\F2\FC ICMP" protocol=icmp
add action=drop chain=input comment=\
    "\D1\E1\F0\EE\F1 \ED\E5\F3\E4\E0\F7\ED\FB\E5 \F1\E5\F1\F1\E8\E8" \
    connection-state=invalid
add action=drop chain=forward comment="\C7\E0\EF\F0\E5\F2 \F4\EE\F0\E2\E0\F0\
    \E4\E8\ED\E3\E0 \E4\EB\FF \E2\F1\E5\F5 \E8\ED\F2\E5\F0\F4\E5\E9\F1\EE\E2 \
    \EF\EE \F3\EC\EE\EB\F7\E0\ED\E8\FE" disabled=yes out-interface=ether2 \
    src-mac-address=1C:AF:F7:7B:9A:E4
add chain=output dst-address=192.168.244.2 out-interface=ether2
add chain=output comment="\C4\EB\FF \E2\F5\EE\E4\E0 \F1\ED\E0\F0\F3\E6\E8" \
    dst-address=10.10.10.2 out-interface=ether2
add action=drop chain=input src-address=178.167.106.138
add chain=forward comment="RADMIN \E2\F5\EE\E4" disabled=yes dst-address=\
    192.168.131.11 dst-port=11125 in-interface=ether1 protocol=tcp
add action=drop chain=input src-address=78.96.174.219
add action=log chain=forward disabled=yes
add chain=input disabled=yes dst-address=77.109.22.228 dst-port=514 \
    in-interface=ether1 protocol=tcp src-address=77.109.22.228
add action=drop chain=forward disabled=yes
/ip firewall nat
add action=masquerade chain=srcnat comment=\
    "\C4\EB\FF \E0\E1\EE\ED\E5\ED\F2\EE\E2" out-interface=ether1 src-address=\
    10.10.64.0/24
add action=masquerade chain=srcnat comment=\
    "\C4\EB\FF \E2\F5\EE\E4\E0 \F1\ED\E0\F0\F3\E6\E8 \EF\EE VPN" \
    out-interface=ether2 src-address=192.168.131.15
add action=masquerade chain=srcnat comment="\C4\EB\FF \E2\F5\EE\E4\E0 \F1\ED\
    \E0\F0\F3\E6\E8 \EF\EE VPN \EA\EE\ED\F1\EE\EB\E8" out-interface=ether2 \
    src-address=192.168.244.2
add action=dst-nat chain=dstnat comment="\C4\EB\FF \E2\F5\EE\E4\E0 RADMIN" \
    disabled=yes dst-port=11124 in-interface=ether1 protocol=tcp \
    to-addresses=192.168.131.11 to-ports=4899
add action=dst-nat chain=dstnat comment="RADMIN \E2\F5\EE\E4" disabled=yes \
    dst-port=11125 protocol=tcp to-addresses=192.168.131.5 to-ports=4889
add action=masquerade chain=srcnat disabled=yes dst-port=514 out-interface=\
    ether1 protocol=tcp src-address=77.109.22.228
/ip proxy
set parent-proxy=0.0.0.0
/ip route
add distance=1 gateway=xxx.xx.xxx.xxx
add disabled=yes distance=1 gateway=195.5.109.97
add disabled=yes distance=1 gateway=77.109.22.225
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip traffic-flow
set active-flow-timeout=1m cache-entries=32k enabled=yes
/ip traffic-flow target
add address=192.168.131.30:9996 version=9
add address=192.168.131.10:9996 version=9
/ppp aaa
set use-radius=yes
/ppp secret
add comment=592-250 local-address=10.10.64.1 name=sachar password=592250 \
    remote-address=10.10.64.8
add comment=593-031 local-address=10.10.64.1 name=admin password=renbow123 \
    remote-address=10.10.64.6
add comment=592-047 local-address=10.10.64.1 name=strokach password=159357 \
    remote-address=10.10.64.62
add comment=592-200 local-address=10.10.64.1 name=ibrashev password=592200 \
    remote-address=10.10.64.91
add comment=592-225 local-address=10.10.64.1 name=OLYA password=DOGS06 \
    remote-address=10.10.64.68
add comment=592-252 local-address=10.10.64.1 name=ab252 password=592252 \
    remote-address=10.10.64.225
add comment=592-267 local-address=10.10.64.1 name=barilo password=592267 \
    remote-address=10.10.64.226
add comment=592-271 local-address=10.10.64.1 name=vlad password=592271 \
    remote-address=10.10.64.227
add comment=592-115 local-address=10.10.64.1 name=kate password=592115 \
    remote-address=10.10.64.229
add comment=592-019 local-address=10.10.64.1 name=vladimir password=592019 \
    remote-address=10.10.64.230
add comment=592-294 local-address=10.10.64.1 name=arhipov password=592294 \
    remote-address=10.10.64.231
/system clock manual
set time-zone=+03:00
/system identity
set name=Per-MTK
/system logging
add action=action1 topics=info
add action=action1 topics=error
add action=action1 topics=warning
add action=action2 topics=info
add action=action2 topics=error
add action=action2 topics=warning
add action=action3 topics=info
add action=action3 topics=warning
add action=action3 topics=error
add action=action3 topics=critical
add action=action2 topics=critical
add action=action2 disabled=yes topics=system
/system ntp client
set enabled=yes mode=unicast primary-ntp=91.202.22.11
/system scheduler
add comment="This script reboots router every 24 hours. Every reboot reset exp\
    ire time to 24h. Script must be enabled, set time on your own. " \
    interval=1d name=restart on-event=reboot policy=\
    ftp,read,write,test,winbox,api start-date=jan/01/2013 start-time=04:00:00
/tool graphing interface
add
/tool graphing resource
add