Russian Users MikroTik | Форум пользователей MikroTik

# apr/04/2017 12:45:54 by RouterOS 6.38.5
# software id =
#
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] mac-address=C8:6C:87:3F:25:C8
set [ find default-name=ether2 ] advertise=10M-half,10M-full,100M-half,100M-full name=ether2-master
set [ find default-name=ether3 ] advertise=10M-half,10M-full,100M-half,100M-full
/interface l2tp-client
add add-default-route=yes connect-to=10.255.255.254 disabled=no max-mtu=1460 mrru=1600 name=flex password=**** user=****
/ip neighbor discovery
set ether1 discover=no
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.0.10-192.168.0.254
add name=dhcp_pool1 ranges=192.168.0.2-192.168.0.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge1 lease-time=51w3d6h name=dhcp1
/interface bridge port
add bridge=bridge1 interface=ether2-master
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
/ip address
add address=192.168.0.1/24 comment=defconf interface=ether2-master network=192.168.0.0
add address=172.18.248.94/24 interface=ether1 network=172.18.248.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server alert
add alert-timeout=1m disabled=no interface=bridge1 on-alert="/log info \"unknown dhcp-server\"" valid-server=6C:3B:6B:70:43:4D
/ip dhcp-server lease
add address=192.168.0.3 client-id=1:b0:5a:da:87:c7:90 mac-address=B0:5A:DA:87:C7:90 server=dhcp1
add address=192.168.0.40 client-id=1:0:25:22:38:86:ad mac-address=00:25:22:38:86:AD server=dhcp1
add address=192.168.0.46 client-id=1:0:25:ab:5e:81:2e mac-address=00:25:AB:5E:81:2E server=dhcp1
add address=192.168.0.51 client-id=1:dc:4a:3e:ed:c9:c1 mac-address=DC:4A:3E:ED:C9:C1 server=dhcp1
add address=192.168.0.54 always-broadcast=yes client-id=1:0:15:17:b3:88:47 mac-address=00:15:17:B3:88:47 server=dhcp1
add address=192.168.0.33 client-id=1:0:25:ab:5d:2e:3e mac-address=00:25:AB:5D:2E:3E server=dhcp1
add address=192.168.0.100 mac-address=00:11:32:4D:95:8C server=dhcp1
/ip dhcp-server network
add address=192.168.0.0/24 comment=defconf gateway=192.168.0.1 netmask=24
/ip dns
set servers=80.252.130.254,80.252.130.253
/ip dns static
add address=192.168.0.1 name=router
/ip firewall filter
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface=ether1
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface=ether1
/ip firewall mangle
add action=mark-routing chain=prerouting in-interface=flex new-routing-mark=l2tp_m passthrough=yes src-address=192.168.0.2-192.168.0.254
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether1
add action=masquerade chain=srcnat out-interface=flex
/ip route
add distance=1 gateway=flex routing-mark=l2tp_m
add distance=1 gateway=172.18.248.254
add distance=10 dst-address=192.168.1.0/24 gateway=192.168.0.4
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=192.168.0.0/24
set ssh disabled=yes
set winbox address=192.168.0.0/24
/ip traffic-flow
set cache-entries=256k enabled=yes interfaces=flex
/ip traffic-flow target
add dst-address=192.168.0.54 port=1234
/snmp
set enabled=yes trap-version=2
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=Zenit
/system logging
add disabled=yes topics=dhcp,debug
/system routerboard settings
# Warning: memory not running at default frequency
set memory-frequency=1200DDR
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master