update mikrotik/mt-og.ke.einsle.de

This commit is contained in:
oxidized 2019-12-04 11:05:42 +01:00
parent 11cf1952bb
commit 920a00689f

View File

@ -1,84 +1,90 @@
# routerboard: yes # /system routerboard print [oxidized@mt-og] > /system routerboard print
# model: 951G-2HnD # routerboard: yes
# serial-number: 4F43045E20E0 # model: 951G-2HnD
# firmware-type: ar9344 # serial-number: 4F43045E20E0
# factory-firmware: 3.17 # firmware-type: ar9344
# current-firmware: 6.45.7 # factory-firmware: 3.17
# upgrade-firmware: 6.45.7 # current-firmware: 6.45.7
# # upgrade-firmware: 6.46
# channel: stable # [oxidized@mt-og] > [oxidized@mt-og] > # /system package update print [oxidized@mt-og] > /system package update print
# installed-version: 6.45.7 # channel: stable
# # installed-version: 6.46
# Flags: U - undoable, R - redoable, F - floating-undo # [oxidized@mt-og] > [oxidized@mt-og] > # /system history print [oxidized@mt-og] > /system history print
# ACTION BY POLICY # Flags: U - undoable, R - redoable, F - floating-undo
# #  ACTION BY POLICY
# software id = 3E75-0AYA # [oxidized@mt-og] > [oxidized@mt-og] > /export [oxidized@mt-og] > /export
# # dec/04/2019 11:05:38 by RouterOS 6.46
# model = 951G-2HnD # software id = 3E75-0AYA
# serial number = 4F43045E20E0 #
/interface bridge # model = 951G-2HnD
add name=br_mgmt protocol-mode=none # serial number = 4F43045E20E0
add name=br_robert protocol-mode=none /interface bridge
add name=br_server protocol-mode=none add name=br_mgmt protocol-mode=none
add name=br_tobias protocol-mode=none add name=br_robert protocol-mode=none
/interface wireless add name=br_server protocol-mode=none
# managed by CAPsMAN add name=br_tobias protocol-mode=none
# channel: 2412/20/gn(10dBm), SSID: wifis.org/ke/bertling, CAPsMAN forwarding /interface wireless
set [ find default-name=wlan1 ] ssid=MikroTik # managed by CAPsMAN
/interface ethernet # channel: 2412/20/gn(10dBm), SSID: wifis.org/ke/bertling, CAPsMAN forwarding
set [ find default-name=ether1 ] name=eth1_kg speed=100Mbps set [ find default-name=wlan1 ] ssid=MikroTik
set [ find default-name=ether2 ] speed=100Mbps /interface ethernet
set [ find default-name=ether3 ] speed=100Mbps set [ find default-name=ether1 ] name=eth1_kg speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps set [ find default-name=ether3 ] speed=100Mbps
/interface vlan set [ find default-name=ether4 ] speed=100Mbps
add interface=eth1_kg name=vlan1 vlan-id=1 set [ find default-name=ether5 ] speed=100Mbps
add interface=eth1_kg name=vlan10 vlan-id=10 /interface vlan
add interface=eth1_kg name=vlan42 vlan-id=42 add interface=eth1_kg name=vlan1 vlan-id=1
add interface=eth1_kg name=vlan50 vlan-id=50 add interface=eth1_kg name=vlan10 vlan-id=10
add interface=eth1_kg name=vlan51 vlan-id=51 add interface=eth1_kg name=vlan42 vlan-id=42
add interface=eth1_kg name=vlan52 vlan-id=52 add interface=eth1_kg name=vlan50 vlan-id=50
add interface=eth1_kg name=vlan60 vlan-id=60 add interface=eth1_kg name=vlan51 vlan-id=51
add interface=eth1_kg name=vlan90 vlan-id=90 add interface=eth1_kg name=vlan52 vlan-id=52
add interface=eth1_kg name=vlan99 vlan-id=99 add interface=eth1_kg name=vlan60 vlan-id=60
/interface wireless security-profiles add interface=eth1_kg name=vlan90 vlan-id=90
set [ find default=yes ] supplicant-identity=MikroTik add interface=eth1_kg name=vlan99 vlan-id=99
/routing bgp instance /interface wireless security-profiles
set default disabled=yes set [ find default=yes ] supplicant-identity=MikroTik
/routing ospf instance /routing bgp instance
set [ find default=yes ] disabled=yes set default disabled=yes
/snmp community /routing ospf instance
set [ find default=yes ] addresses=172.24.0.0/16 name=jie6Wao5weeSahs set [ find default=yes ] disabled=yes
add addresses=172.24.1.0/24,172.24.10.0/24 authentication-password=nUTIRozDeJMiQ2Goj8BR authentication-protocol=SHA1 encryption-password=nUTIRozDeJMiQ2Goj8BR encryption-protocol=AES name=monitor security=private /snmp community
/interface bridge port set [ find default=yes ] addresses=172.24.0.0/16 name=jie6Wao5weeSahs
add bridge=br_mgmt interface=vlan1 add addresses=172.24.1.0/24,172.24.10.0/24 authentication-password=\
add bridge=br_server interface=vlan10 nUTIRozDeJMiQ2Goj8BR authentication-protocol=SHA1 encryption-password=\
add bridge=br_robert interface=vlan42 nUTIRozDeJMiQ2Goj8BR encryption-protocol=AES name=monitor security=\
add bridge=br_tobias interface=vlan51 private
add bridge=br_tobias interface=ether2 /interface bridge port
add bridge=br_tobias interface=ether3 add bridge=br_mgmt interface=vlan1
add bridge=br_tobias interface=ether4 add bridge=br_server interface=vlan10
add bridge=br_tobias interface=ether5 add bridge=br_robert interface=vlan42
/interface wireless cap add bridge=br_tobias interface=vlan51
# add bridge=br_tobias interface=ether2
set caps-man-addresses=172.24.1.97 enabled=yes interfaces=wlan1 add bridge=br_tobias interface=ether3
/ip address add bridge=br_tobias interface=ether4
add address=172.24.1.96/24 interface=br_mgmt network=172.24.1.0 add bridge=br_tobias interface=ether5
add address=172.24.10.96/24 interface=br_server network=172.24.10.0 /interface wireless cap
add address=172.24.42.96/24 interface=br_robert network=172.24.42.0 #
/ip dns set caps-man-addresses=172.24.1.97 enabled=yes interfaces=wlan1
set servers=172.24.10.11,172.24.10.12 /ip address
/ip route add address=172.24.1.96/24 interface=br_mgmt network=172.24.1.0
add distance=1 gateway=172.24.1.1 add address=172.24.10.96/24 interface=br_server network=172.24.10.0
/ip ssh add address=172.24.42.96/24 interface=br_robert network=172.24.42.0
set allow-none-crypto=yes forwarding-enabled=remote /ip dns
/snmp set servers=172.24.10.11,172.24.10.12
set contact="Robert Einsle <robert@einsle.de" enabled=yes location=Kempten /ip route
/system clock add distance=1 gateway=172.24.1.1
set time-zone-name=Europe/Berlin /ip ssh
/system identity set allow-none-crypto=yes forwarding-enabled=remote
set name=mt-og /snmp
/system ntp client set contact="Robert Einsle <robert@einsle.de" enabled=yes location=Kempten
set enabled=yes primary-ntp=172.24.10.11 secondary-ntp=172.24.10.12 /system clock
/tool romon set time-zone-name=Europe/Berlin
set enabled=yes id=4C:5E:0C:70:A2:10 secrets=78f244b59c /system identity
set name=mt-og
/system ntp client
set enabled=yes primary-ntp=172.24.10.11 secondary-ntp=172.24.10.12
/tool romon
set enabled=yes id=4C:5E:0C:70:A2:10 secrets=78f244b59c
[oxidized@mt-og] > [oxidized@mt-og] >