Russian Users MikroTik | Форум пользователей MikroTik

Код: Выделить всё

export 
# jan/02/1970 00:27:02 by RouterOS 6.35.1 
# software id = ANL6-L1PZ 
# 
/interface bridge 
add admin-mac=E4:8D:8C:7C:AA:FC auto-mac=no comment=defconf name=\ 
bridge 
/interface ethernet 
set [ find default-name=ether2 ] name=ether2-master 
set [ find default-name=ether3 ] master-port=ether2-master 
set [ find default-name=ether4 ] master-port=ether2-master 
set [ find default-name=ether5 ] master-port=ether2-master 
set [ find default-name=ether6 ] name=ether6-master 
set [ find default-name=ether7 ] master-port=ether6-master 
set [ find default-name=ether8 ] master-port=ether6-master 
set [ find default-name=ether9 ] master-port=ether6-master 
set [ find default-name=ether10 ] master-port=ether6-master 
/ip neighbor discovery 
set ether1 discover=no 
set bridge comment=defconf 
/ip pool 
add name=default-dhcp ranges=192.168.88.10-192.168.88.254 
/ip dhcp-server 
add address-pool=default-dhcp disabled=no interface=bridge name=\ 
defconf 
/interface bridge port 
add bridge=bridge comment=defconf interface=ether2-master 
add bridge=bridge comment=defconf interface=ether6-master 
/ip address 
add address=192.168.88.1/24 comment=defconf interface=bridge \ 
network=192.168.88.0 
add address=172.116.208.46/27 interface=ether1 network=\ 
172.116.208.32 
/ip dhcp-client 
add comment=defconf dhcp-options=hostname,clientid interface=ether1 
/ip dhcp-server network 
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1 
/ip dns 
set allow-remote-requests=yes servers=176.116.209.2,176.116.210.2 
/ip dns static 
add address=192.168.88.1 name=router 
/ip firewall filter 
add chain=input comment="defconf: accept ICMP" protocol=icmp 
add chain=input comment="defconf: accept established,related" \ 
connection-state=established,related 
add action=drop chain=input comment="defconf: drop all from WAN" \ 
in-interface=ether1 
add action=fasttrack-connection chain=forward comment=\ 
"defconf: fasttrack" connection-state=established,related 
add chain=forward comment="defconf: accept established,related" \ 
connection-state=established,related 
add action=drop chain=forward comment="defconf: drop invalid" \ 
connection-state=invalid 
add action=drop chain=forward comment=\ 
"defconf: drop all from WAN not DSTNATed" \ 
connection-nat-state=!dstnat connection-state=new in-interface=\ 
ether1 
/ip firewall nat 
add action=masquerade chain=srcnat out-interface=ether1 
/ip route 
add check-gateway=ping distance=1 gateway=172.116.208.33 
/system routerboard settings 
set protected-routerboot=disabled 
/tool mac-server 
set [ find default=yes ] disabled=yes 
add interface=bridge 
/tool mac-server mac-winbox 
set [ find default=yes ] disabled=yes 
add interface=bridge