API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Feb 25th, 2019
127
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.34 KB | None | 0 0
raw download clone embed print report
  1.  
  2.  
  3.  
  4.  
  5.  
  6.  
  7.  
  8.  
  9.  
  10.  
  11.  
  12.  
  13.  
  14.  
  15.  
  16.  
  17.  
  18.  
  19.  
  20.  
  21.  
  22.  
  23.  
  24.  
  25.  
  26.  
  27.  
  28.  
  29.  
  30.  
  31.  
  32.  
  33.  
  34.  
  35.  
  36.  
  37.  
  38.  
  39.  
  40.  
  41.  
  42.  
  43.  
  44.  
  45.  
  46.  
  47.  
  48. MMM MMM KKK TTTTTTTTTTT KKK
  49. MMMM MMMM KKK TTTTTTTTTTT KKK
  50. MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
  51. MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
  52. MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
  53. MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
  54.  
  55. MikroTik RouterOS 6.43.12 (c) 1999-2018 http://www.mikrotik.com/
  56.  
  57. [?] Gives the list of available commands
  58. command [?] Gives help on the command and list of arguments
  59.  
  60. [Tab] Completes the command/word. If the input is ambiguous,
  61. a second [Tab] gives possible options
  62.  
  63. / Move up to base level
  64. .. Move up one level
  65. /command Use command at the base level
  66. [admin@MikroTik] > export
  67. # feb/25/2019 20:44:54 by RouterOS 6.43.12
  68. # software id = L1VG-A1FB
  69. #
  70. # model = RouterBOARD 952Ui-5ac2nD
  71. # serial number = 9249090B15CA
  72. /interface bridge
  73. add admin-mac=B8:69:F4:2C:C9:F1 auto-mac=no comment=defconf name=bridge
  74. /interface ethernet
  75. set [ find default-name=ether1 ] mac-address=14:DA:E9:22:26:E2
  76. /interface pppoe-client
  77. add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 password=27081985 use-peer-dns=yes user=smith27
  78. /interface wireless
  79. set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX country=ukraine disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=Wi-Fi_Dubai_2 wireless-protocol=802.11
  80. set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country=ukraine disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=Wi-Fi_Dubai_5 wireless-protocol=802.11
  81. /interface list
  82. add comment=defconf name=WAN
  83. add comment=defconf name=LAN
  84. /interface wireless security-profiles
  85. set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=0675200577 wpa2-pre-shared-key=0675200577
  86. /ip hotspot profile
  87. set [ find default=yes ] html-directory=flash/hotspot
  88. /ip pool
  89. add name=dhcp ranges=192.168.88.10-192.168.88.254
  90. /ip dhcp-server
  91. add address-pool=dhcp disabled=no interface=bridge name=defconf
  92. /interface bridge port
  93. add bridge=bridge comment=defconf interface=ether2
  94. add bridge=bridge comment=defconf interface=ether3
  95. add bridge=bridge comment=defconf interface=ether4
  96. add bridge=bridge comment=defconf interface=ether5
  97. add bridge=bridge comment=defconf interface=wlan1
  98. add bridge=bridge comment=defconf interface=wlan2
  99. /ip neighbor discovery-settings
  100. set discover-interface-list=LAN
  101. /interface list member
  102. add comment=defconf interface=bridge list=LAN
  103. add comment=defconf interface=ether1 list=WAN
  104. add interface=pppoe-out1 list=WAN
  105. /ip address
  106. add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
  107. /ip dhcp-client
  108. add comment=defconf dhcp-options=hostname,clientid interface=ether1
  109. add dhcp-options=hostname,clientid disabled=no interface=ether1
  110. /ip dhcp-server network
  111. add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
  112. /ip dns
  113. set allow-remote-requests=yes
  114. /ip dns static
  115. add address=192.168.88.1 name=router.lan
  116. /ip firewall filter
  117. add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
  118. add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
  119. add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
  120. add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
  121. add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
  122. add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
  123. add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
  124. add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
  125. add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
  126. add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
  127. /ip firewall nat
  128. add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
  129. /ip upnp
  130. set enabled=yes
  131. /ip upnp interfaces
  132. add interface=bridge type=internal
  133. add interface=pppoe-out1 type=external
  134. /system clock
  135. set time-zone-name=Europe/Kiev
  136. /tool mac-server
  137. set allowed-interface-list=LAN
  138. /tool mac-server mac-winbox
  139. set allowed-interface-list=LAN
  140. [admin@MikroTik] > ip route print
  141. Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
  142. # DST-ADDRESS PREF-SRC GATEWAY DISTANCE
  143. 0 ADS 0.0.0.0/0 pppoe-out1 1
  144. 1 ADS 100.64.0.0/24 172.18.65.1 1
  145. 2 ADS 172.17.0.0/16 172.18.65.1 1
  146. 3 ADS 172.18.0.0/16 172.18.65.1 1
  147. 4 ADC 172.18.65.0/24 172.18.65.9 ether1 0
  148. 5 ADS 172.19.0.0/16 172.18.65.1 1
  149. [admin
  150. @Mikro
  151. Tik] >
  152. [admin@MikroTik] > export
  153. # feb/25/2019 20:51:54 by RouterOS 6.43.12
  154. # software id = L1VG-A1FB
  155. #
  156. # model = RouterBOARD 952Ui-5ac2nD
  157. # serial number = 9249090B15CA
  158. /interface bridge
  159. add admin-mac=B8:69:F4:2C:C9:F1 auto-mac=no comment=defconf name=bridge
  160. /interface ethernet
  161. set [ find default-name=ether1 ] mac-address=14:DA:E9:22:26:E2
  162. /interface pppoe-client
  163. add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 password=27081985 use-peer-dns=yes user=smith27
  164. /interface wireless
  165. set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX country=ukraine disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=Wi-Fi_Dubai_2 wireless-protocol=802.11
  166. set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country=ukraine disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=Wi-Fi_Dubai_5 wireless-protocol=802.11
  167. /interface list
  168. add comment=defconf name=WAN
  169. add comment=defconf name=LAN
  170. /interface wireless security-profiles
  171. set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=0675200577 wpa2-pre-shared-key=0675200577
  172. /ip hotspot profile
  173. set [ find default=yes ] html-directory=flash/hotspot
  174. /ip pool
  175. add name=dhcp ranges=192.168.88.10-192.168.88.254
  176. /ip dhcp-server
  177. add address-pool=dhcp disabled=no interface=bridge name=defconf
  178. /interface bridge port
  179. add bridge=bridge comment=defconf interface=ether2
  180. add bridge=bridge comment=defconf interface=ether3
  181. add bridge=bridge comment=defconf interface=ether4
  182. add bridge=bridge comment=defconf interface=ether5
  183. add bridge=bridge comment=defconf interface=wlan1
  184. add bridge=bridge comment=defconf interface=wlan2
  185. /ip neighbor discovery-settings
  186. set discover-interface-list=LAN
  187. /interface list member
  188. add comment=defconf interface=bridge list=LAN
  189. add comment=defconf interface=ether1 list=WAN
  190. add interface=pppoe-out1 list=WAN
  191. /ip address
  192. add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
  193. /ip dhcp-client
  194. add comment=defconf dhcp-options=hostname,clientid interface=ether1
  195. add dhcp-options=hostname,clientid disabled=no interface=ether1
  196. /ip dhcp-server network
  197. add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
  198. /ip dns
  199. set allow-remote-requests=yes
  200. /ip dns static
  201. add address=192.168.88.1 name=router.lan
  202. /ip firewall filter
  203. add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
  204. add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
  205. add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
  206. add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
  207. add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
  208. add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
  209. add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
  210. add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
  211. add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
  212. add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
  213. /ip firewall nat
  214. add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
  215. /ip upnp
  216. set enabled=yes
  217. /ip upnp interfaces
  218. add interface=bridge type=internal
  219. add interface=pppoe-out1 type=external
  220. /system clock
  221. set time-zone-name=Europe/Kiev
  222. /tool mac-server
  223. set allowed-interface-list=LAN
  224. /tool mac-server mac-winbox
  225. set allowed-interface-list=LAN
  226. [admin@MikroTik] >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!