API tools faq
paste
Advertisement
Guest User

netserv

a guest
Sep 21st, 2018
586
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.98 KB | None | 0 0
raw download clone embed print report
  1.  
  2.  
  3.  
  4.  
  5.  
  6.  
  7.  
  8.  
  9.  
  10.  
  11.  
  12.  
  13.  
  14.  
  15.  
  16.  
  17.  
  18.  
  19.  
  20.  
  21.  
  22.  
  23.  
  24.  
  25.  
  26.  
  27.  
  28.  
  29. MMM MMM KKK TTTTTTTTTTT KKK
  30. MMMM MMMM KKK TTTTTTTTTTT KKK
  31. MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
  32. MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
  33. MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
  34. MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
  35.  
  36. MikroTik RouterOS 6.43.1 (c) 1999-2018 http://www.mikrotik.com/
  37.  
  38. [?] Gives the list of available commands
  39. command [?] Gives help on the command and list of arguments
  40.  
  41. [Tab] Completes the command/word. If the input is ambiguous,
  42. a second [Tab] gives possible options
  43.  
  44. / Move up to base level
  45. .. Move up one level
  46. /command Use command at the base level
  47. [admin@MikroTik] > export hide-sen=yes
  48. expected end of command (line 1 column 16)
  49. [admin@MikroTik] > /export hide
  50. compact file terse verbose
  51. [admin@MikroTik] > /export hide
  52. [admin@MikroTik] > /export
  53. # sep/21/2018 17:36:12 by RouterOS 6.43.1
  54. # software id = KFMF-AWZ7
  55. #
  56. # model = RouterBOARD 3011UiAS
  57. # serial number = 8EEA08624D5C
  58. /interface pptp-client
  59. add add-default-route=yes connect-to=vpn.ivedu.ru max-mtu=1420 name=pptp-out1 password=A734834TT user=tehnopark
  60. /interface bridge
  61. add admin-mac=CC:2D:E0:16:DA:52 auto-mac=no comment=defconf disabled=yes name=bridge
  62. /interface ethernet
  63. set [ find default-name=ether1 ] speed=100Mbps
  64. set [ find default-name=ether2 ] name=ether2-master speed=100Mbps
  65. set [ find default-name=ether3 ] speed=100Mbps
  66. set [ find default-name=ether4 ] speed=100Mbps
  67. set [ find default-name=ether5 ] speed=100Mbps
  68. set [ find default-name=ether6 ] name=ether6-master speed=100Mbps
  69. set [ find default-name=ether7 ] speed=100Mbps
  70. set [ find default-name=ether8 ] speed=100Mbps
  71. set [ find default-name=ether9 ] speed=100Mbps
  72. set [ find default-name=ether10 ] speed=100Mbps
  73. set [ find default-name=sfp1 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
  74. /interface vlan
  75. add comment=adm interface=ether5 name=ether5.10 vlan-id=10
  76. add comment=stud interface=ether5 name=ether5.20 vlan-id=20
  77. add comment=guest interface=ether5 name=ether5.30 vlan-id=30
  78. /interface list
  79. add exclude=dynamic name=discover
  80. add name=mactel
  81. add name=mac-winbox
  82. add name=LAN
  83. add name=WAN
  84. /interface wireless security-profiles
  85. set [ find default=yes ] supplicant-identity=MikroTik
  86. /ip neighbor discovery-settings
  87. set discover-interface-list=discover
  88. /interface list member
  89. add interface=ether3 list=discover
  90. add interface=ether2-master list=WAN
  91. add interface=ether5.10 list=LAN
  92. add interface=ether5.20 list=LAN
  93. add interface=ether5 list=LAN
  94. add interface=ether5.30 list=LAN
  95. add interface=ether3 list=mac-winbox
  96. add interface=ether3 list=mactel
  97. /ip address
  98. add address=172.16.94.202/29 interface=ether2-master network=172.16.94.200
  99. add address=10.136.1.1/24 interface=ether5.10 network=10.136.1.0
  100. add address=10.136.2.1/24 interface=ether5.20 network=10.136.2.0
  101. add address=10.136.3.1/24 interface=ether5.30 network=10.136.3.0
  102. add address=10.136.0.1/24 interface=ether5 network=10.136.0.0
  103. /ip dhcp-server
  104. add address-pool=adm disabled=no interface=ether5.10 lease-time=3d name=adm
  105. add address-pool=stud disabled=no interface=ether5.20 lease-time=3d name=stud
  106. add address-pool=guest disabled=no interface=ether5.30 lease-time=3d name=guest
  107. /ip dhcp-server network
  108. add address=10.136.1.0/24 dns-server=10.136.1.1 gateway=10.136.1.1 netmask=24
  109. add address=10.136.2.0/24 dns-server=10.136.2.1 gateway=10.136.2.1 netmask=24
  110. add address=10.136.3.0/24 dns-server=10.136.3.1 gateway=10.136.3.1 netmask=24
  111. /ip dns
  112. set allow-remote-requests=yes servers=172.16.94.201
  113. /ip firewall address-list
  114. add address=172.16.94.202 list=allowed
  115. /ip firewall filter
  116. add action=accept chain=input comment="accept established, related" connection-state=established,related
  117. add action=accept chain=input comment="allowed ssh and winbox allowed list" dst-port=22,8291 protocol=tcp src-address-list=allowed
  118. add action=add-src-to-address-list address-list=allowed address-list-timeout=10m chain=input log=yes log-prefix=ALLOW packet-size=151 protocol=icmp
  119. add action=reject chain=input packet-size=151 protocol=icmp reject-with=icmp-admin-prohibited
  120. add action=drop chain=input comment="drop all from WAN" in-interface-list=WAN
  121. add action=accept chain=forward comment="accept established, related" connection-state=established,related
  122. add action=drop chain=forward comment="drop invalid" connection-state=invalid
  123. add action=drop chain=forward comment="drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
  124. add action=drop chain=forward dst-port=137-139,445 out-interface-list=WAN protocol=tcp
  125. add action=drop chain=forward dst-port=137-139,445 out-interface-list=WAN protocol=udp
  126. add action=drop chain=forward dst-port=!80,443,1688 in-interface=ether5.20 out-interface-list=WAN protocol=tcp
  127. add action=drop chain=forward dst-port=!80,443 in-interface=ether5.30 out-interface-list=WAN protocol=tcp
  128. /ip firewall nat
  129. # pptp-out1 not ready
  130. add action=src-nat chain=srcnat out-interface=pptp-out1 to-addresses=192.168.1.230
  131. /ip pool
  132. add name=adm next-pool=adm ranges=10.136.1.100-10.136.1.200
  133. add name=stud next-pool=stud ranges=10.136.2.100-10.136.2.200
  134. add name=guest next-pool=guest ranges=10.136.3.100-10.136.3.200
  135. /ip route
  136. add check-gateway=ping distance=2 gateway=172.16.94.201
  137. /ip service
  138. set telnet disabled=yes
  139. set ftp disabled=yes
  140. set www disabled=yes
  141. set api disabled=yes
  142. set api-ssl disabled=yes
  143. /system clock
  144. set time-zone-name=Europe/Moscow
  145. /system ntp client
  146. set enabled=yes primary-ntp=194.190.168.1 secondary-ntp=195.211.77.74
  147. /system routerboard settings
  148. set silent-boot=no
  149. /tool mac-server
  150. set allowed-interface-list=mactel
  151. /tool mac-server mac-winbox
  152. set allowed-interface-list=mac-winbox
  153. [admin@MikroTik] >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!