API tools faq
paste
Guest User

Not working Mikrotik config...

a guest
Nov 12th, 2016
153
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 2.82 KB | None | 0 0
raw download clone embed print report
  1. [admin@MikroTik] > export compact
  2. # jan/02/1970 01:27:08 by RouterOS 6.37.1
  3. #
  4. # Default setup with some modifications. Doesn't work anymore :(
  5. /interface bridge
  6. add admin-mac=XX:XX:XX:XX:XX:XX auto-mac=no comment=LAN name=bridge_lan
  7. /interface wireless
  8. set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-eC distance=indoors frequency=auto mode=ap-bridge ssid=\
  9.     "WIFI" wireless-protocol=802.11 wps-mode=disabled
  10. /interface ethernet
  11. set [ find default-name=ether1 ] name=e1_wan
  12. set [ find default-name=ether2 ] name=e2_silver
  13. set [ find default-name=ether3 ] name=e3_libre
  14. set [ find default-name=ether4 ] name=e4_berry
  15. set [ find default-name=ether5 ] name=e5_reserve
  16. /ip neighbor discovery
  17. set e1_wan discover=no
  18. set bridge_lan comment=LAN
  19. /interface wireless security-profiles
  20. set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys wpa2-pre-shared-key=keyhere
  21. /ip pool
  22. add name=pool_lan ranges=10.0.1.2-10.0.1.5
  23. add name=pool_wlan ranges=10.0.2.1-10.0.2.7
  24. /ip dhcp-server
  25. add address-pool=pool_lan disabled=no interface=bridge_lan name=dhcp_lan
  26. /interface bridge port
  27. add bridge=bridge_lan interface=e2_silver
  28. add bridge=bridge_lan interface=e3_libre
  29. add bridge=bridge_lan interface=e5_reserve
  30. add bridge=bridge_lan interface=e4_berry
  31. /ip address
  32. add address=10.0.1.0/29 comment=LAN interface=bridge_lan network=10.0.1.0
  33. /ip dhcp-client
  34. add comment=defconf dhcp-options=hostname,clientid disabled=no interface=e1_wan
  35. /ip dhcp-server network
  36. add address=10.0.1.0/29 comment=LAN gateway=10.0.1.0
  37. /ip dns
  38. set allow-remote-requests=yes
  39. /ip dns static
  40. add address=192.168.88.1 name=router # Not sure how it ended up here...
  41. #
  42. #  Rules from the default setup
  43. /ip firewall filter
  44. add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
  45. add action=accept chain=input comment="defconf: accept established,related" connection-state=established,related
  46. add action=drop chain=input comment="defconf: drop all from WAN" in-interface=e1_wan
  47. add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
  48. add action=accept chain=forward comment="defconf: accept established,related" connection-state=established,related
  49. add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
  50. add action=drop chain=forward comment="defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=\
  51.     new in-interface=e1_wan
  52. /ip firewall nat
  53. add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=e1_wan
  54. /system routerboard settings
  55. set init-delay=0s protected-routerboot=disabled
  56. /tool mac-server
  57. set [ find default=yes ] disabled=yes
  58. add interface=bridge_lan
  59. /tool mac-server mac-winbox
  60. set [ find default=yes ] disabled=yes
  61. add interface=bridge_lan
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!