Гарант Гомель

[admin@MikroTik] > export compact
# dec/22/2015 15:46:34 by RouterOS 6.33.3
# software id = LL20-A94A
#
/interface bridge
add admin-mac=xx:xx:xx:xx:xx:xx name=bridge-ext
add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no name=bridge-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
country=belarus default-forwarding=no disabled=no distance=indoors \
frequency=auto mode=ap-bridge multicast-helper=full wireless-protocol=\
802.11 wmm-support=enabled
add disabled=no mac-address=xx:xx:xx:xx:xx:xx master-interface=wlan1 name=wlan2 \
ssid=M wds-cost-range=0 wds-default-cost=0 wmm-support=enabled
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=\
ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=\
ether4-slave-local
set [ find default-name=ether5 ] name=ether5-IPTV
/ip neighbor discovery
set ether1-gateway discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
group-ciphers=tkip,aes-ccm mode=dynamic-keys unicast-ciphers=tkip,aes-ccm \
wpa-pre-shared-key=11223344 wpa2-pre-shared-key=11223344
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.111.2-192.168.111.254
/ip dhcp-server
add address-pool=dhcp authoritative=yes disabled=no interface=bridge-local \
lease-time=3h name=default
add address-pool=dhcp_pool1 authoritative=yes disabled=no interface=wlan2 \
lease-time=3h name=dhcp1
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
add bridge=bridge-ext interface=ether1-gateway
add bridge=bridge-ext interface=ether5-IPTV
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=\
ether2-master-local network=192.168.88.0
add address=192.168.111.1/24 interface=wlan2 network=192.168.111.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=no \
interface=bridge-ext
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" gateway=\
192.168.88.1
add address=192.168.111.0/24 gateway=192.168.111.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input in-interface=bridge-ext protocol=udp
add chain=input in-interface=bridge-ext protocol=igmp
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=\
established,related
add action=drop chain=input comment="default configuration" disabled=yes \
in-interface=bridge-ext
add action=fasttrack-connection chain=forward comment="default configuration" \
connection-state=established,related
add chain=forward comment="default configuration" connection-state=\
established,related
add action=drop chain=forward comment="default configuration" connection-state=\
invalid disabled=yes
add action=drop chain=forward comment="default configuration" \
connection-nat-state=!dstnat connection-state=new disabled=yes \
in-interface=bridge-ext
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
out-interface=bridge-ext
add action=masquerade chain=srcnat out-interface=bridge-ext src-address=\
192.168.111.0/24
/ip route
add distance=1 gateway=10.99.12.1
/routing igmp-proxy
set quick-leave=yes
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface=bridge-ext upstream=yes
add interface=bridge-local
/system clock
set time-zone-name=Europe/Minsk
/system leds
set 0 interface=wlan1
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-IPTV
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-IPTV
add interface=wlan1
add interface=bridge-local
[admin@MikroTik] >