API tools faq
paste
Advertisement
Guest User

MKconf

a guest
Dec 16th, 2013
171
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.29 KB | None | 0 0
raw download clone embed print report
  1. Flags: X - disabled, I - invalid, D - dynamic
  2. # ADDRESS NETWORK INTERFACE
  3. 0 192.168.0.2/24 192.168.0.0 LAN
  4. 1 D 85.70.8.155/32 88.103.200.44 ADSL
  5. 2 D 192.168.100.100/32 46.36.37.99 plsikover.hukot.net
  6.  
  7. /ip dhcp-server lease
  8. add address=192.168.0.146 client-id=1:8:0:27:50:19:2e disabled=no \
  9. mac-address=08:00:27:50:19:2E server=DHCP_SERVER_LAN
  10. add address=192.168.0.148 client-id=1:8:0:27:36:45:13 disabled=no \
  11. mac-address=08:00:27:36:45:13 server=DHCP_SERVER_LAN
  12. add address=192.168.0.107 disabled=no mac-address=08:00:27:91:0D:C5 server=\
  13. DHCP_SERVER_LAN
  14. add address=192.168.0.109 disabled=no mac-address=08:00:27:79:A8:3B server=\
  15. DHCP_SERVER_LAN
  16. add address=192.168.0.147 client-id=1:8:0:27:c1:7a:df disabled=no \
  17. mac-address=08:00:27:C1:7A:DF server=DHCP_SERVER_LAN
  18. add address=192.168.0.149 client-id=1:8:0:27:69:3f:ee disabled=no \
  19. mac-address=08:00:27:69:3F:EE server=DHCP_SERVER_LAN
  20. add address=192.168.0.110 client-id=1:8:0:27:31:4f:2b disabled=no \
  21. mac-address=08:00:27:31:4F:2B server=DHCP_SERVER_LAN
  22. add address=192.168.0.111 client-id=1:8:0:27:a0:4:5e disabled=no mac-address=\
  23. 08:00:27:A0:04:5E server=DHCP_SERVER_LAN
  24. add address=192.168.0.106 disabled=no mac-address=08:00:27:49:3F:39 server=\
  25. DHCP_SERVER_LAN
  26. add address=192.168.0.108 disabled=no mac-address=08:00:27:06:D4:01 server=\
  27. DHCP_SERVER_LAN
  28. add address=192.168.0.112 client-id=1:8:0:27:d:5d:9a disabled=no mac-address=\
  29. 08:00:27:0D:5D:9A server=DHCP_SERVER_LAN
  30. add address=192.168.0.113 client-id=1:8:0:27:4f:a3:44 disabled=no \
  31. mac-address=08:00:27:4F:A3:44 server=DHCP_SERVER_LAN
  32. add address=192.168.0.114 client-id=1:8:0:27:a4:52:18 disabled=no \
  33. mac-address=08:00:27:A4:52:18 server=DHCP_SERVER_LAN
  34. add address=192.168.0.11 disabled=no mac-address=54:04:A6:66:D0:F3 server=\
  35. DHCP_SERVER_LAN
  36. add address=192.168.0.10 disabled=no mac-address=00:1E:8C:62:2B:B9 server=\
  37. DHCP_SERVER_LAN
  38. add address=192.168.0.120 client-id=1:8:0:27:bd:ad:48 disabled=no \
  39. mac-address=08:00:27:BD:AD:48 server=DHCP_SERVER_LAN
  40. add address=192.168.0.121 client-id=1:8:0:27:e:be:53 disabled=no mac-address=\
  41. 08:00:27:0E:BE:53 server=DHCP_SERVER_LAN
  42. add address=192.168.0.200 disabled=no mac-address=00:1F:D0:0B:3D:47 server=\
  43. DHCP_SERVER_LAN
  44. add address=192.168.0.201 client-id=1:0:13:72:a1:ce:b8 disabled=no \
  45. mac-address=00:13:72:A1:CE:B8 server=DHCP_SERVER_LAN
  46. add address=192.168.0.202 client-id=1:0:13:72:a1:c9:ca disabled=no \
  47. mac-address=00:13:72:A1:C9:CA server=DHCP_SERVER_LAN
  48. add address=192.168.0.203 client-id=1:0:13:72:a2:ba:15 disabled=no \
  49. mac-address=00:13:72:A2:BA:15 server=DHCP_SERVER_LAN
  50. add address=192.168.0.204 client-id=1:0:16:e6:df:44:c2 disabled=no \
  51. mac-address=00:16:E6:DF:44:C2 server=DHCP_SERVER_LAN
  52. add address=192.168.0.205 client-id=1:0:13:72:9d:3a:c7 disabled=no \
  53. mac-address=00:13:72:9D:3A:C7 server=DHCP_SERVER_LAN
  54. add address=192.168.0.206 client-id=1:0:13:72:9e:4b:75 disabled=no \
  55. mac-address=00:13:72:9E:4B:75 server=DHCP_SERVER_LAN
  56. add address=192.168.0.155 disabled=no mac-address=08:00:27:C0:9C:2A server=\
  57. DHCP_SERVER_LAN
  58. add address=192.168.0.156 disabled=no mac-address=08:00:27:0F:2B:16 server=\
  59. DHCP_SERVER_LAN
  60.  
  61.  
  62. /ip dhcp-server network
  63. add address=192.168.0.0/24 dhcp-option="" dns-server="" gateway=192.168.0.2 \
  64. ntp-server="" wins-server=""
  65.  
  66.  
  67. /ip dns
  68. set allow-remote-requests=no cache-max-ttl=1w cache-size=2048KiB \
  69. max-udp-packet-size=4096 servers=194.228.41.113,160.218.161.54
  70.  
  71.  
  72. /ip firewall connection tracking
  73. set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
  74. tcp-close-wait-timeout=10s tcp-established-timeout=1d \
  75. tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
  76. tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
  77. tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
  78.  
  79.  
  80. /ip firewall filter
  81. add action=accept chain=input connection-state=established disabled=no
  82. add action=accept chain=input connection-state=related disabled=no
  83. add action=drop chain=input connection-state=invalid disabled=no
  84. add action=accept chain=input disabled=no protocol=udp
  85. add action=accept chain=input disabled=no limit=50,5 protocol=icmp
  86. add action=drop chain=input disabled=no protocol=icmp
  87. add action=accept chain=input disabled=no in-interface=LAN src-address=\
  88. 192.168.0.0/24
  89. add action=log chain=input disabled=no log-prefix="DROP INPUT"
  90. add action=drop chain=input disabled=no
  91.  
  92.  
  93. /ip firewall nat
  94. add action=dst-nat chain=dstnat disabled=no dst-address=46.36.37.99 \
  95. to-addresses=192.168.0.155
  96. add action=src-nat chain=srcnat disabled=no src-address=192.168.0.155 \
  97. to-addresses=46.36.37.99
  98. add action=masquerade chain=srcnat disabled=no src-address=192.168.0.0/24
  99.  
  100.  
  101. /ip firewall service-port
  102. set ftp disabled=no ports=21
  103. set tftp disabled=no ports=69
  104. set irc disabled=no ports=6667
  105. set h323 disabled=no
  106. set sip disabled=no ports=5060,5061 sip-direct-media=yes
  107. set pptp disabled=no
  108.  
  109. /ip neighbor discovery
  110. set WAN_ADSL disabled=no
  111. set LAN disabled=no
  112. set ADSL disabled=yes
  113. set plsikover.hukot.net disabled=yes
  114.  
  115. /ppp aaa
  116. set accounting=yes interim-update=0s use-radius=no
  117.  
  118. /queue interface
  119. set WAN_ADSL queue=ethernet-default
  120. set LAN queue=ethernet-default
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!