{"id":262,"date":"2020-10-20T18:35:57","date_gmt":"2020-10-20T15:35:57","guid":{"rendered":"http:\/\/mamkinitshnik.ru\/?page_id=262"},"modified":"2020-10-20T18:36:56","modified_gmt":"2020-10-20T15:36:56","slug":"def_mikrotik","status":"publish","type":"page","link":"https:\/\/mamkinitshnik.ru\/?page_id=262","title":{"rendered":"def_mikrotik"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

# jan\/02\/1970 17:43:46 by RouterOS 6.45.3<\/p>\n


<\/p>\n

#<\/p>\n

# model = RB962UiGS-5HacT2HnT<\/p>\n

# serial number = BEC40B23841F<\/p>\n

\/interface bridge<\/p>\n

add admin-mac=C4:AD:34:34:3A:5D auto-mac=no comment=defconf name=bridge<\/p>\n

\/interface wireless<\/p>\n

set [ find default-name=wlan1 ] band=2ghz-b\/g\/n channel-width=20\/40mhz-XX \\<\/p>\n

    disabled=no distance=indoors frequency=auto installation=indoor mode=\\<\/p>\n

    ap-bridge ssid=MikroTik-343A63 wireless-protocol=802.11<\/p>\n

set [ find default-name=wlan2 ] band=5ghz-a\/n\/ac channel-width=\\<\/p>\n

    20\/40\/80mhz-XXXX disabled=no distance=indoors frequency=auto \\<\/p>\n

    installation=indoor mode=ap-bridge ssid=MikroTik-343A62 \\<\/p>\n

    wireless-protocol=802.11<\/p>\n

\/interface list<\/p>\n

add comment=defconf name=WAN<\/p>\n

add comment=defconf name=LAN<\/p>\n

\/interface wireless security-profiles<\/p>\n

set [ find default=yes ] supplicant-identity=MikroTik<\/p>\n

\/ip pool<\/p>\n

add name=default-dhcp ranges=192.168.88.10-192.168.88.254<\/p>\n

\/ip dhcp-server<\/p>\n

add address-pool=default-dhcp disabled=no interface=bridge name=defconf<\/p>\n

\/interface bridge port<\/p>\n

add bridge=bridge comment=defconf interface=ether2<\/p>\n

add bridge=bridge comment=defconf interface=ether3<\/p>\n

add bridge=bridge comment=defconf interface=ether4<\/p>\n

add bridge=bridge comment=defconf interface=ether5<\/p>\n

add bridge=bridge comment=defconf interface=sfp1<\/p>\n

add bridge=bridge comment=defconf interface=wlan1<\/p>\n

add bridge=bridge comment=defconf interface=wlan2<\/p>\n

\/ip neighbor discovery-settings<\/p>\n

set discover-interface-list=LAN<\/p>\n

\/interface list member<\/p>\n

add comment=defconf interface=bridge list=LAN<\/p>\n

add comment=defconf interface=ether1 list=WAN<\/p>\n

\/ip address<\/p>\n

add address=192.168.88.1\/24 comment=defconf interface=bridge network=\\<\/p>\n

    192.168.88.0<\/p>\n

\/ip dhcp-client<\/p>\n

add comment=defconf dhcp-options=hostname,clientid disabled=no interface=\\<\/p>\n

    ether1<\/p>\n

\/ip dhcp-server network<\/p>\n

add address=192.168.88.0\/24 comment=defconf gateway=192.168.88.1<\/p>\n

\/ip dns<\/p>\n

set allow-remote-requests=yes<\/p>\n

\/ip dns static<\/p>\n

add address=192.168.88.1 comment=defconf name=router.lan<\/p>\n

\/ip firewall filter<\/p>\n

add action=accept chain=input comment=\\<\/p>\n

    «defconf: accept established,related,untracked» connection-state=\\<\/p>\n

    established,related,untracked<\/p>\n

add action=drop chain=input comment=»defconf: drop invalid» connection-state=\\<\/p>\n

    invalid<\/p>\n

add action=accept chain=input comment=»defconf: accept ICMP» protocol=icmp<\/p>\n

add action=accept chain=input comment=\\<\/p>\n

    «defconf: accept to local loopback (for CAPsMAN)» dst-address=127.0.0.1<\/p>\n

add action=drop chain=input comment=»defconf: drop all not coming from LAN» \\<\/p>\n

    in-interface-list=!LAN<\/p>\n

add action=accept chain=forward comment=»defconf: accept in ipsec policy» \\<\/p>\n

    ipsec-policy=in,ipsec<\/p>\n

add action=accept chain=forward comment=»defconf: accept out ipsec policy» \\<\/p>\n

    ipsec-policy=out,ipsec<\/p>\n

add action=fasttrack-connection chain=forward comment=»defconf: fasttrack» \\<\/p>\n

    connection-state=established,related<\/p>\n

add action=accept chain=forward comment=\\<\/p>\n

    «defconf: accept established,related, untracked» connection-state=\\<\/p>\n

    established,related,untracked<\/p>\n

add action=drop chain=forward comment=»defconf: drop invalid» \\<\/p>\n

    connection-state=invalid<\/p>\n

add action=drop chain=forward comment=\\<\/p>\n

    «defconf: drop all from WAN not DSTNATed» connection-nat-state=!dstnat \\<\/p>\n

    connection-state=new in-interface-list=WAN<\/p>\n

\/ip firewall nat<\/p>\n

add action=masquerade chain=srcnat comment=»defconf: masquerade» \\<\/p>\n

    ipsec-policy=out,none out-interface-list=WAN<\/p>\n

\/tool mac-server<\/p>\n

set allowed-interface-list=LAN<\/p>\n

\/tool mac-server mac-winbox<\/p>\n

set allowed-interface-list=LAN<\/p>\n

 <\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

# jan\/02\/1970 17:43:46 by RouterOS 6.45.3 # # model = RB962UiGS-5HacT2HnT # serial number = BEC40B23841F \/interface bridge add admin-mac=C4:AD:34:34:3A:5D auto-mac=no comment=defconf name=bridge \/interface wireless set [ find default-name=wlan1 ] band=2ghz-b\/g\/n channel-width=20\/40mhz-XX     disabled=no distance=indoors frequency=auto installation=indoor mode=   \u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u044c\u0448\u0435 …<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-262","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/mamkinitshnik.ru\/index.php?rest_route=\/wp\/v2\/pages\/262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mamkinitshnik.ru\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mamkinitshnik.ru\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mamkinitshnik.ru\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mamkinitshnik.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=262"}],"version-history":[{"count":2,"href":"https:\/\/mamkinitshnik.ru\/index.php?rest_route=\/wp\/v2\/pages\/262\/revisions"}],"predecessor-version":[{"id":266,"href":"https:\/\/mamkinitshnik.ru\/index.php?rest_route=\/wp\/v2\/pages\/262\/revisions\/266"}],"wp:attachment":[{"href":"https:\/\/mamkinitshnik.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}