Kan iemand me helpen aan een voorbeeldconfiguratie voor een Mikrotik (HAP ac3) voor T-mobile thuis glasvezel? (liefst met router IPTV).
Al een poosje heb ik een Mikrotik in de kast liggen waarmee ik al verschillende pogingen ondernomen heb om het te configureren, maar ik merk dat mijn kennis over TCP ip tekort schiet.
Config nu:
Al een poosje heb ik een Mikrotik in de kast liggen waarmee ik al verschillende pogingen ondernomen heb om het te configureren, maar ik merk dat mijn kennis over TCP ip tekort schiet.
Config nu:
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
| /interface vlan add interface=ether1 name=vlan-internet vlan-id=300 add interface=ether1 name=vlan-iptv vlan-id=640 add interface=ether1 name=vlan-mgmt vlan-id=100 /interface list add comment=defconf name=WAN add comment=defconf name=LAN /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip pool add name=default-dhcp ranges=192.168.88.10-192.168.88.254 /ip dhcp-server add address-pool=default-dhcp disabled=no interface=bridge name=defconf add address-pool=default-dhcp disabled=no name=server1 /interface bridge port add bridge=bridge comment=defconf ingress-filtering=yes interface=ether3 pvid=640 add bridge=bridge comment=defconf interface=ether5 add bridge=bridge comment=defconf interface=ether4 add bridge=bridge comment=defconf interface=ether3 add bridge=bridge comment=defconf interface=ether2 add bridge=bridge comment=defconf interface=ether1 add bridge=bridge comment=defconf interface=wlan2 add bridge=bridge comment=defconf interface=wlan1 /ip neighbor discovery-settings set discover-interface-list=LAN /interface bridge vlan add bridge=bridge tagged=ether1 untagged=ether3 vlan-ids=640 /interface ethernet switch vlan add independent-learning=no ports=ether2,ether3,ether1 switch=switch1 vlan-id=300 add independent-learning=yes ports=ether2,ether3 switch=switch1 vlan-id=640 /interface list member add comment=defconf interface=bridge list=LAN add comment=defconf interface=ether1 list=WAN add list=LAN /ip address add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0 /ip dhcp-client add comment=defconf dhcp-options=hostname,clientid disabled=no interface=vlan-internet /ip dhcp-server network add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1 /ip dns set allow-remote-requests=yes /ip dns static add address=192.168.88.1 name=router.lan /ip firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN /ip firewall nat add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN add action=masquerade chain=srcnat out-interface=vlan-internet /system clock set time-zone-name=Europe/Amsterdam /tool mac-server set allowed-interface-list=LAN /tool mac-server mac-winbox set allowed-interface-list=LAN |
[ Voor 94% gewijzigd door campagniolo op 31-07-2022 21:03 ]