Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # sep/11/2016 16:56:09 by RouterOS 6.23
- # software id = SKZ4-RI2D
- #
- /interface bridge
- add name=bridge1
- /interface wireless
- set [ find default-name=wlan1 ] disabled=no l2mtu=2290 mode=ap-bridge ssid=evil
- /interface ethernet
- set [ find default-name=ether1 ] mac-address=4C:5E:0C:F8:BD:96
- set [ find default-name=ether2 ] mac-address=4C:5E:0C:F8:BD:97
- set [ find default-name=ether3 ] mac-address=4C:5E:0C:F8:BD:98
- set [ find default-name=ether4 ] mac-address=4C:5E:0C:F8:BD:99
- set [ find default-name=ether5 ] mac-address=4C:5E:0C:F8:BD:9A
- /interface wireless security-profiles
- set [ find default=yes ] supplicant-identity=MikroTik
- /ip hotspot profile
- set [ find default=yes ] login-by=mac,cookie,mac-cookie mac-auth-password=testpassword \
- use-radius=yes
- add hotspot-address=192.168.88.1 login-by=mac,cookie,mac-cookie mac-auth-password=\
- testpassword name=hsprof1 use-radius=yes
- /ip hotspot user profile
- set [ find default=yes ] add-mac-cookie=no idle-timeout=6h session-timeout=6h \
- shared-users=unlimited
- /ip pool
- add name=hs-pool-7 ranges=192.168.88.100-192.168.88.254
- /ip dhcp-server
- add address-pool=hs-pool-7 disabled=no interface=bridge1 lease-time=1h name=dhcp1
- /ip hotspot
- add address-pool=hs-pool-7 disabled=no interface=bridge1 name=hotspot1 profile=hsprof1
- /interface l2tp-client
- add add-default-route=no allow=pap,chap,mschap1,mschap2 connect-to=51.254.189.14 \
- dial-on-demand=no disabled=no keepalive-timeout=60 max-mru=1450 max-mtu=1450 mrru=\
- disabled name=l2tp-out1 password=simon1 profile=default-encryption user=simon1
- /interface bridge port
- add bridge=bridge1 interface=ether4
- add bridge=bridge1 interface=ether3
- add bridge=bridge1 interface=ether2
- add bridge=bridge1 interface=ether5
- add bridge=bridge1 interface=wlan1
- /ip address
- add address=192.168.1.2/24 disabled=yes interface=ether1 network=192.168.1.0
- add address=192.168.88.1/24 interface=bridge1 network=192.168.88.0
- /ip dhcp-client
- add dhcp-options=hostname,clientid disabled=no interface=ether1
- /ip dhcp-server network
- add address=192.168.88.0/24 comment="hotspot network" gateway=192.168.88.1
- /ip dns
- set servers=8.8.8.8
- /ip firewall filter
- add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
- disabled=yes
- /ip firewall nat
- add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
- disabled=yes
- add action=masquerade chain=srcnat disabled=yes out-interface=ether1
- add action=masquerade chain=srcnat comment="masquerade hotspot network" out-interface=\
- ether1 src-address=192.168.88.0/24
- /ip hotspot user
- add comment="counters and limits for trial users" name=default-trial
- add name=admin
- /ip hotspot walled-garden
- add comment="place hotspot rules here" disabled=yes
- add comment="place hotspot rules here" disabled=yes
- add comment="place hotspot rules here" disabled=yes
- add comment="place hotspot rules here" disabled=yes
- add dst-host=*akamaihd*
- add dst-host=*twimg*
- add dst-host=*twitter*
- add dst-host=*facebook*
- add dst-host=*google*
- add dst-host=*linkedin*
- add dst-host=*instagram*
- add dst-host=*googleapis*
- add dst-host=*fontawesome*
- add dst-host=*cloudflare*
- /ip hotspot walled-garden ip
- add action=accept disabled=no dst-host=fbcdn-profile-a.akamaihd.net
- add action=accept disabled=no dst-host=.*-edge-chat.facebook.com
- add action=accept disabled=no dst-host=fbcdn-profile-a.akamaihd.net
- add action=accept disabled=no dst-address=192.168.77.0/24
- add action=accept disabled=no dst-host=example.com
- add action=accept disabled=no dst-host=astrofi.com
- add action=accept disabled=no dst-host=astrofi.clic.agency/login
- add action=accept disabled=no dst-host=example.com
- add action=accept disabled=no dst-host=www.twitter.com
- add action=accept disabled=no dst-host=*twitter.com
- add action=accept disabled=no dst-host=*twimg.com
- add action=accept disabled=no dst-host=*abs.twitter.com
- add action=accept disabled=no dst-host=*twitter.com*
- /ip service
- set www-ssl disabled=no
- /radius
- add address=104.155.113.199 secret=secret service=hotspot timeout=2s
- /system identity
- set name=Clic.Agency
- /system logging
- add topics=dhcp,debug
- /system scheduler
- add interval=15s name=cronjob1 on-event="/ip hotspot host remove [find authorized=no]" \
- policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive start-time=\
- startup
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement