Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # aug/22/2020 17:46:53 by RouterOS 6.45.7
- # software id = YITH-96AI
- #
- # model = RB952Ui-5ac2nD
- # serial number = 9E940A3891AB
- /interface bridge
- add name=bridge-LAN
- add name=bridge-eoip
- /interface ethernet
- set [ find default-name=ether1 ] comment="WAN"
- set [ find default-name=ether2 ] comment="RETE diretta su SIM >>sede3"
- set [ find default-name=ether5 ] comment="EOIP>>rete SEDE1" poe-out=off
- /interface l2tp-client
- add connect-to=xx.xxx.xx.xx. disabled=no ipsec-secret=xxxxxx name=\
- l2tp-client<<sede1 password=m@rio_sede5 use-ipsec=yes user=sede5
- /interface wireless
- set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=auto \
- frequency-mode=superchannel mode=station-pseudobridge ssid=Obd
- set [ find default-name=wlan2 ] ssid=MikroTik
- /interface eoip
- add allow-fast-path=no local-address=10.10.121.1 mac-address=\
- 02:D3:29:FA:DF:24 name=eoip-tunnel remote-address=10.108.1.1 tunnel-id=40
- /interface wireless security-profiles
- set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
- mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=\
- 12345678 wpa2-pre-shared-key=12345678
- /ip pool
- add name=pool-dhcp ranges=10.10.121.100-10.10.121.200
- /ip dhcp-server
- add address-pool=pool-dhcp disabled=no interface=bridge-LAN lease-time=12h10m \
- name=server-dhcp
- /interface bridge port
- add bridge=bridge-LAN interface=ether2
- add bridge=bridge-LAN interface=ether3
- add bridge=bridge-LAN interface=ether4
- add bridge=bridge-eoip interface=ether5
- add bridge=bridge-eoip interface=eoip-tunnel
- /ip address
- add address=10.10.121.1/24 interface=bridge-LAN network=10.10.121.0
- /ip dhcp-client
- add dhcp-options=hostname,clientid disabled=no interface=wlan1
- add dhcp-options=hostname,clientid disabled=no interface=ether1
- /ip dhcp-server network
- add address=10.10.121.0/24 dns-server=1.1.1.1,1.0.0.1 gateway=10.10.121.1 \
- netmask=24
- /ip dns
- set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8
- /ip firewall filter
- add action=accept chain=forward connection-state=\
- established,related,untracked
- add action=drop chain=forward connection-state=invalid
- /ip firewall nat
- add action=masquerade chain=srcnat out-interface=wlan1
- add action=masquerade chain=srcnat out-interface=ether1
- /ip route
- add distance=1 dst-address=10.10.120.0/24 gateway=172.16.26.1
- add distance=1 dst-address=10.108.1.0/24 gateway=172.16.26.1
- /system clock
- set time-zone-name=Europe/Rome
- /system identity
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement