Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- /interface bridge
- add admin-mac= auto-mac=no comment=defconf name=bridge
- /interface wireless
- set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
- disabled=no distance=indoors frequency=auto mode=ap-bridge ssid= \
- wireless-protocol=802.11
- /interface ethernet
- set [ find default-name=ether2 ] name=ether2-master
- set [ find default-name=ether3 ] master-port=ether2-master
- set [ find default-name=ether4 ] master-port=ether2-master
- /interface pppoe-client
- add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 \
- password= use-peer-dns=yes user=
- /ip neighbor discovery
- set ether1 discover=no
- set bridge comment=defconf
- /interface wireless security-profiles
- set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
- dynamic-keys wpa2-pre-shared-key=
- /ip pool
- add name=dhcp ranges=192.168.1.151-192.168.1.190
- /ip dhcp-server
- add address-pool=dhcp disabled=no interface=bridge name=defconf
- /interface bridge port
- add bridge=bridge comment=defconf interface=ether2-master
- add bridge=bridge comment=defconf interface=wlan1
- /ip address
- add address=192.168.1.3/24 comment=defconf interface=ether2-master network=\
- 192.168.1.0
- /ip dhcp-client
- add comment=defconf dhcp-options=hostname,clientid interface=ether1
- /ip dhcp-server lease
- add address=192.168.1.33 client-id=1:0:23:63:55:74:1f mac-address=\
- server=defconf
- add address=192.168.1.154 client-id=1:28:c2:dd:f4:1b:fc mac-address=\
- server=defconf
- add address=192.168.1.157 client-id=1:b0:c0:90:6c:f5:f4 mac-address=\
- server=defconf
- add address=192.168.1.156 client-id=1:48:bf:6b:4b:b6:14 mac-address=\
- server=defconf
- add address=192.168.1.159 client-id=1:68:a3:c4:f5:54:da mac-address=\
- server=defconf
- add address=192.168.1.151 client-id=1:48:27:ea:ca:e:24 mac-address=\
- server=defconf
- add address=192.168.1.160 mac-address= server=defconf
- /ip dhcp-server network
- add address=192.168.1.0/24 comment=defconf gateway=192.168.1.3 netmask=24
- /ip dns static
- add address=192.168.1.3 name=router
- /ip firewall address-list
- add address=192.168.1.150 list=Black
- add address=192.168.1.151 list=Black
- add address=192.168.1.156 list=Black
- add address=192.168.1.159 list=Black
- add address=192.168.1.157 list=Black
- add address=192.168.1.160 list=Black
- /ip firewall filter
- add action=drop chain=forward src-address-list=Black
- add chain=input dst-port=8291 in-interface=pppoe-out1 protocol=tcp \
- src-address=x.x.x.x
- add action=drop chain=input dst-port=53 in-interface=pppoe-out1 protocol=udp
- add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
- connection-state=established,related
- add chain=forward comment="defconf: accept established,related" \
- connection-state=established,related
- add action=drop chain=forward comment="defconf: drop invalid" \
- connection-state=invalid
- add action=drop chain=forward comment=\
- "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
- connection-state=new in-interface=pppoe-out1
- add chain=input protocol=icmp
- add chain=input connection-state=established
- add chain=input connection-state=related
- add action=drop chain=input in-interface=pppoe-out1
- /ip firewall nat
- add action=masquerade chain=srcnat comment="defconf: masquerade" \
- out-interface=pppoe-out1
- /system clock
- set time-zone-name=Asia
- /system routerboard settings
- set cpu-frequency=650MHz protected-routerboot=disabled
- /tool mac-server
- set [ find default=yes ] disabled=yes
- add interface=bridge
- /tool mac-server mac-winbox
- set [ find default=yes ] disabled=yes
- add interface=bridge
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement