Форум поддержи и обмена опытом пользователей оборудования RouterBOARD и операционной системы RouterOS Латвийского производителя MikroTik
https://forummikrotik.ru/
Код: Выделить всё
/interface wireless spectral-history wlan1
Код: Выделить всё
/interface bridge
add name=br1-lan
/interface ethernet
set [ find default-name=ether1 ] mac-address=00:24:81:4F:83:23 name=eth1-wan
set [ find default-name=ether4 ] name=eth4-lan
/interface pptp-client
add add-default-route=yes connect-to=172.26.62.5 default-route-distance=1 \
disabled=no name=pptp1-wan user=test
/interface ethernet
set [ find default-name=ether2 ] master-port=eth4-lan name=eth2-lan
set [ find default-name=ether3 ] master-port=eth4-lan name=eth3-lan
/interface wireless security-profiles
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=wpa2-protect \
supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge security-profile=\
wpa2-protect ssid=wlan24 tx-power-mode=all-rates-fixed wireless-protocol=\
802.11
/interface wireless nstreme
set wlan1 enable-polling=no
/ip pool
add name=dhcp-pool ranges=192.168.11.100-192.168.11.199
/ip dhcp-server
add address-pool=dhcp-pool disabled=no interface=br1-lan lease-time=8h name=\
dhcp-server src-address=192.168.11.1
/interface bridge port
add bridge=br1-lan interface=eth4-lan
add bridge=br1-lan interface=wlan1
/ip address
add address=172.17.2.10/24 interface=eth1-wan network=172.17.2.0
add address=192.168.11.1/24 interface=br1-lan network=192.168.11.0
/ip dhcp-server network
add address=192.168.11.0/24 dns-server=192.168.11.1 gateway=192.168.11.1 \
netmask=24
/ip dns
set allow-remote-requests=yes servers=172.22.0.1,8.8.8.8
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=eth1-wan log=yes \
log-prefix=query_in_drop protocol=udp
add action=drop chain=input dst-port=53 in-interface=pptp1-wan log=yes \
log-prefix=query_in_drop protocol=udp
/ip firewall nat
add action=masquerade chain=srcnat
/ip route
add distance=1 dst-address=172.16.0.0/12 gateway=172.17.2.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Moscow
/system ntp client
set enabled=yes primary-ntp=212.164.119.161 secondary-ntp=83.143.51.50
/system routerboard settings
set cpu-frequency=650MHz protected-routerboot=disabled