ООО "Домашняя сеть" - Infolan.by. Обсуждение.

#
/caps-man channel
add band=2ghz-b/g/n control-channel-width=20mhz extension-channel=Ce \
frequency=2412 name=channel1 tx-power=18
add band=2ghz-b/g/n control-channel-width=20mhz extension-channel=Ce \
frequency=2412 name=channelguest tx-power=18
/interface bridge
add fast-forward=no name=bridge1
/interface ethernet
set [ find default-name=ether1 ] mac-address=11:11:11:11:11:00
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=belarus disabled=no \
frequency=auto mode=ap-bridge multicast-helper=full ssid=U3 \
wireless-protocol=802.11 wmm-support=enabled
/interface vlan
add interface=bridge1 name=vlan2 vlan-id=2
/caps-man datapath
add bridge=bridge1 local-forwarding=no name=datapath1
add bridge=bridge1 name=datapathguest vlan-id=2 vlan-mode=use-tag
/caps-man security
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm \
group-encryption=aes-ccm name=security1 passphrase=12345678
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=securityguest passphrase=12345678
/caps-man configuration
add channel=channel1 datapath=datapath1 mode=ap multicast-helper=full name=\
cfg1 rx-chains=0,1,2 security=security1 ssid=U4 tx-chains=0,1,2
add channel=channelguest datapath=datapathguest mode=ap name=cfgguest \
security=securityguest ssid=Uguest
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
dynamic-keys wpa2-pre-shared-key=12345678
/ip pool
add name=dhcp ranges=172.16.0.100-172.16.0.200
add name=poolguest ranges=192.168.11.100-192.168.11.150
/ip dhcp-server
add address-pool=dhcp authoritative=after-2sec-delay disabled=no interface=\
bridge1 lease-time=3d name=dhcp1
add address-pool=poolguest authoritative=after-2sec-delay disabled=no \
interface=vlan2 lease-time=1d name=serverguest
/queue simple
add dst=10.25.0.0/16 max-limit=100M/100M name=LAN priority=7/7 target=bridge1
add dst=192.168.0.0/16 max-limit=100M/100M name=LAN2 priority=7/7 target=\
bridge1
add max-limit=2M/2M name=ALL target=172.16.0.0/24
/system logging action
set 3 bsd-syslog=yes remote=172.16.0.171 syslog-facility=syslog
/caps-man access-list
add disabled=yes signal-range=-70..120 ssid-regexp=""
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=cfg1 \
slave-configurations=cfgguest
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=wlan1
/interface l2tp-server server
set caller-id-type=ip-address
/interface wireless cap
set bridge=bridge1 caps-man-addresses=172.16.0.1 interfaces=wlan1
/ip address
add address=172.16.0.1/24 interface=ether2 network=172.16.0.0
add address=192.168.11.1/24 interface=vlan2 network=192.168.11.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server lease
add address=172.16.0.200 client-id=1:11:11:11:2:44:11 mac-address=\
11:11:11:02:44:11 server=dhcp1
/ip dhcp-server network
add address=172.16.0.0/24 gateway=172.16.0.1 netmask=24
add address=192.168.11.0/24 dns-server=192.168.11.1 gateway=192.168.11.1 \
netmask=24
/ip firewall filter
add action=accept chain=input protocol=igmp
add action=accept chain=forward dst-port=1234 protocol=udp
# inactive time
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=ether1 src-address=\
192.168.11.0/24
# l2tp-to-office not ready
add action=masquerade chain=srcnat out-interface=*2C
/ip route
add distance=1 dst-address=192.168.4.0/24 gateway=10.50.0.10 pref-src=\
10.50.0.11
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
/ip smb
set domain=WORKGROUP enabled=yes interfaces=bridge1
/ip smb shares
set [ find default=yes ] disabled=yes
add directory=/dk3 name=PLIC
/ip smb users
/routing igmp-proxy
set quick-leave=yes
/routing igmp-proxy interface
add interface=bridge1
add alternative-subnets=0.0.0.0/0 interface=ether1 upstream=yes
/system clock
set time-zone-name=Europe/Minsk
/system leds
set 5 interface=wlan1
/system logging
add action=remote topics=wireless
/system ntp client
set enabled=yes primary-ntp=10.25.0.1
/system routerboard settings
set init-delay=0s