API tools faq
paste
Guest User

Untitled

a guest
Jan 29th, 2019
166
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.04 KB | None | 0 0
raw download clone embed print report
  1. add admin-mac=xxxxx auto-mac=no comment=defconf name=bridge
  2. add fast-forward=no name=bridge-vlan2 protocol-mode=none
  3. /interface wireless
  4. set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=MikroTik-6E1E3F wireless-protocol=802.11
  5. /interface vlan
  6. add interface=ether2 name=VLAN2 vlan-id=2
  7. /interface ethernet switch port
  8. set 1 default-vlan-id=2 vlan-mode=fallback
  9. /interface list
  10. add comment=defconf name=WAN
  11. add comment=defconf name=LAN
  12. /interface wireless security-profiles
  13. set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=xxxxxx wpa2-pre-shared-key=xxxxx
  14. /ip pool
  15. add name=default-dhcp ranges=192.168.88.10-192.168.88.254
  16. add name=dhcp ranges=10.250.2.100-10.250.2.250
  17. /ip dhcp-server
  18. add address-pool=default-dhcp disabled=no interface=bridge name=defconf
  19. add address-pool=dhcp disabled=no interface=bridge-vlan2 name=dhcp-vlan2
  20. /interface pptp-client
  21. add connect-to=xxxxx disabled=no name=pptp-voip password=xxxxx profile=default user=xxxxx
  22. /interface bridge port
  23. add bridge=bridge comment=defconf interface=ether3
  24. add bridge=bridge comment=defconf interface=ether4
  25. add bridge=bridge comment=defconf interface=ether5
  26. add bridge=bridge comment=defconf interface=wlan1
  27. add bridge=bridge-vlan2 interface=VLAN2 pvid=2
  28. add bridge=bridge-vlan2 interface=ether2 pvid=2
  29. /ip neighbor discovery-settings
  30. set discover-interface-list=LAN
  31. /interface ethernet switch vlan
  32. add disabled=yes ports=ether2 switch=switch1 vlan-id=2
  33. /interface list member
  34. add comment=defconf interface=bridge list=LAN
  35. add comment=defconf interface=ether1 list=WAN
  36. /ip address
  37. add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
  38. add address=10.250.2.100/24 interface=ether2 network=10.250.2.0
  39. /ip dhcp-client
  40. add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
  41. /ip dhcp-server network
  42. add address=10.250.2.0/24 comment=VLAN2 gateway=10.250.2.1
  43. add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
  44. /ip dns
  45. set allow-remote-requests=yes
  46. /ip dns static
  47. add address=10.250.2.100 name=router.lan
  48. /ip firewall address-list
  49. add address=172.16.4.5 list=remote
  50. add address=185.29.200.70 list=remote
  51. /ip firewall filter
  52. add action=accept chain=input src-address-list=remote
  53. add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
  54. add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
  55. add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
  56. add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
  57. add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
  58. add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
  59. add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
  60. add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
  61. add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
  62. add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
  63. /ip firewall nat
  64. add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
  65. add action=masquerade chain=srcnat out-interface=pptp-voip
  66. /ip route
  67. add disabled=yes distance=1 gateway=pptp-voip routing-mark=voip
  68. /ip route rule
  69. add action=lookup-only-in-table dst-address=91.205.215.67/32 table=voip
  70. add action=lookup-only-in-table dst-address=185.29.200.70/32 table=voip
  71. add action=lookup-only-in-table dst-address=172.16.4.5/32 table=voip
  72. /system clock
  73. set time-zone-name=Europe/Amsterdam
  74. /system routerboard settings
  75. set silent-boot=no
  76. /tool mac-server
  77. set allowed-interface-list=LAN
  78. /tool mac-server mac-winbox
  79. set allowed-interface-list=LAN
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!