HEX1.BKM: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
Line 67: | Line 67: | ||
add bridge=BRIDGE-HAMWAN-PUBLIC interface=ether1 | add bridge=BRIDGE-HAMWAN-PUBLIC interface=ether1 | ||
/ip address | /ip address | ||
add address=10.246. | add address=10.246.2.1/16 comment=defconf interface=BRIDGE-HAMWAN-PRIVATE network=10.246.0.0 | ||
/ip firewall filter | /ip firewall filter | ||
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp | add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp | ||
add action=accept chain=input comment="defconf: accept established,related" connection-state=\ | add action=accept chain=input comment="defconf: accept established,related" connection-state=\ | ||
established,related | established,related | ||
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1 | add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1 | ||
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=\ | add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=\ | ||
Line 81: | Line 78: | ||
established,related | established,related | ||
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid | add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid | ||
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \ | add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \ | ||
connection-nat-state=!dstnat connection-state=new in-interface=ether1 | connection-nat-state=!dstnat connection-state=new in-interface=ether1 | ||
/ip firewall nat | /ip firewall nat | ||
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether1 | add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether1 | ||
/snmp | /snmp | ||
set contact="#HamWAN on irc.freenode.org" enabled=yes | set contact="#HamWAN on irc.freenode.org" enabled=yes | ||
/system identity | /system identity | ||
set name=HEX1. | set name=HEX1.BKM | ||
/system routerboard settings | /system routerboard settings | ||
set cpu-frequency=800MHz protected-routerboot=disabled | set cpu-frequency=800MHz protected-routerboot=disabled | ||
/tool mac-server | /tool mac-server | ||
set [ find default=yes ] disabled=yes | set [ find default=yes ] disabled=yes |
Latest revision as of 04:01, 1 October 2017
Ports
DC IN | SFP |
eth1 PoE IN |
eth2 PoE OUT |
eth3 PoE OUT |
eth4 PoE OUT |
eth5 PoE OUT | |
---|---|---|---|---|---|---|---|
not used | not used | not used | not used | not used | not used | ||
Power | no | 12v battery |
Configuration
# mar/02/1970 09:34:36 by RouterOS 6.36.3 # software id = N044-E777 # /interface bridge add name=BRIDGE-HAMWAN-PRIVATE add name=BRIDGE-HAMWAN-PUBLIC /ip neighbor discovery set ether1 discover=no /interface vlan add interface=ether2 name=ETH2-HAMWAN-PRIVATE vlan-id=601 add interface=ether2 name=ETH2-HAMWAN-PUBLIC vlan-id=600 add interface=ether3 name=ETH3-HAMWAN-PRIVATE vlan-id=601 add interface=ether3 name=ETH3-HAMWAN-PUBLIC vlan-id=600 add interface=ether4 name=ETH4-HAMWAN-PRIVATE vlan-id=601 add interface=ether4 name=ETH4-HAMWAN-PUBLIC vlan-id=600 add interface=ether5 name=ETH5-HAMWAN-PRIVATE vlan-id=601 add interface=ether5 name=ETH5-HAMWAN-PUBLIC vlan-id=600 add interface=sfp1 name=SFP1-HAMWAN-PRIVATE vlan-id=601 add interface=sfp1 name=SFP1-HAMWAN-PUBLIC vlan-id=600 /ip hotspot profile set [ find default=yes ] html-directory=flash/hotspot /snmp community set [ find default=yes ] name=hamwan /interface bridge port add bridge=BRIDGE-HAMWAN-PUBLIC interface=SFP1-HAMWAN-PUBLIC add bridge=BRIDGE-HAMWAN-PUBLIC interface=ETH2-HAMWAN-PUBLIC add bridge=BRIDGE-HAMWAN-PUBLIC interface=ETH3-HAMWAN-PUBLIC add bridge=BRIDGE-HAMWAN-PUBLIC interface=ETH4-HAMWAN-PUBLIC add bridge=BRIDGE-HAMWAN-PUBLIC interface=ETH5-HAMWAN-PUBLIC add bridge=BRIDGE-HAMWAN-PRIVATE interface=SFP1-HAMWAN-PRIVATE add bridge=BRIDGE-HAMWAN-PRIVATE interface=ETH2-HAMWAN-PRIVATE add bridge=BRIDGE-HAMWAN-PRIVATE interface=ETH3-HAMWAN-PRIVATE add bridge=BRIDGE-HAMWAN-PRIVATE interface=ETH4-HAMWAN-PRIVATE add bridge=BRIDGE-HAMWAN-PRIVATE interface=ETH5-HAMWAN-PRIVATE add bridge=BRIDGE-HAMWAN-PUBLIC interface=ether1 /ip address add address=10.246.2.1/16 comment=defconf interface=BRIDGE-HAMWAN-PRIVATE network=10.246.0.0 /ip firewall filter add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp add action=accept chain=input comment="defconf: accept established,related" connection-state=\ established,related add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1 add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=\ established,related add action=accept chain=forward comment="defconf: accept established,related" connection-state=\ established,related add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \ connection-nat-state=!dstnat connection-state=new in-interface=ether1 /ip firewall nat add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether1 /snmp set contact="#HamWAN on irc.freenode.org" enabled=yes /system identity set name=HEX1.BKM /system routerboard settings set cpu-frequency=800MHz protected-routerboot=disabled /tool mac-server set [ find default=yes ] disabled=yes