API tools faq
paste
Guest User

mikrotik-ETH-IPTV-default

a guest
Feb 14th, 2018
248
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.36 KB | None | 0 0
raw download clone embed print report
  1. /interface vlan
  2. add interface=sfp1 name=vlan-internet vlan-id=300
  3. add interface=sfp1 name=vlan-iptv vlan-id=640
  4. add interface=sfp1 name=vlan-mgmt vlan-id=100
  5. /interface list
  6. add comment=defconf name=WAN
  7. add comment=defconf name=LAN
  8. /interface wireless security-profiles
  9. set [ find default=yes ] supplicant-identity=MikroTik
  10. /ip pool
  11. add name=default-dhcp ranges=192.168.88.10-192.168.88.254
  12. /ip dhcp-server
  13. add address-pool=default-dhcp disabled=no interface=bridge name=defconf
  14. add address-pool=default-dhcp disabled=no name=server1
  15. /interface bridge port
  16. add bridge=bridge comment=defconf interface=ether2
  17. add bridge=bridge comment=defconf ingress-filtering=yes interface=ether3 pvid=640
  18. add bridge=bridge comment=defconf interface=ether4
  19. add bridge=bridge comment=defconf interface=ether5
  20. add bridge=bridge comment=defconf interface=ether6
  21. add bridge=bridge comment=defconf interface=ether7
  22. add bridge=bridge comment=defconf interface=ether8
  23. add bridge=bridge comment=defconf interface=ether9
  24. add bridge=bridge comment=defconf interface=sfp1
  25. add bridge=bridge comment=defconf interface=wlan1
  26. /ip neighbor discovery-settings
  27. set discover-interface-list=LAN
  28. /interface bridge vlan
  29. add bridge=bridge tagged=sfp1 untagged=ether3 vlan-ids=640
  30. /interface ethernet switch vlan
  31. add independent-learning=no ports=ether2,ether3,sfp1 switch=switch1 vlan-id=300
  32. add independent-learning=yes ports=ether2,ether3 switch=switch1 vlan-id=640
  33. /interface list member
  34. add comment=defconf interface=bridge list=LAN
  35. add comment=defconf interface=sfp1 list=WAN
  36. add list=LAN
  37. /ip address
  38. add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
  39. /ip dhcp-client
  40. add comment=defconf dhcp-options=hostname,clientid disabled=no interface=vlan-internet
  41. /ip dhcp-server network
  42. add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
  43. /ip dns
  44. set allow-remote-requests=yes
  45. /ip dns static
  46. add address=192.168.88.1 name=router.lan
  47. /ip firewall filter
  48. add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
  49. add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
  50. add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
  51. add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
  52. add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
  53. add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
  54. add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
  55. add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
  56. add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
  57. add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
  58. /ip firewall nat
  59. add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
  60. add action=masquerade chain=srcnat out-interface=vlan-internet
  61. /system clock
  62. set time-zone-name=Europe/Amsterdam
  63. /tool mac-server
  64. set allowed-interface-list=LAN
  65. /tool mac-server mac-winbox
  66. set allowed-interface-list=LAN
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!