Created
November 1, 2019 17:20
-
-
Save jpluimers/03901037b6d272dbdbbf87f4bd869fac to your computer and use it in GitHub Desktop.
Mikrotik RB960PGS hEX PoE default configuration
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| MMM MMM KKK TTTTTTTTTTT KKK | |
| MMMM MMMM KKK TTTTTTTTTTT KKK | |
| MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK | |
| MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK | |
| MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK | |
| MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK | |
| MikroTik RouterOS 6.40.3 (c) 1999-2017 http://www.mikrotik.com/ | |
| [?] Gives the list of available commands | |
| command [?] Gives help on the command and list of arguments | |
| [Tab] Completes the command/word. If the input is ambiguous, | |
| a second [Tab] gives possible options | |
| / Move up to base level | |
| .. Move up one level | |
| /command Use command at the base level | |
| The following default configuration has been installed on your router: | |
| ------------------------------------------------------------------------------- | |
| RouterMode: | |
| * WAN port is protected by firewall and enabled DHCP client | |
| LAN Configuration: | |
| switch group: ether2 (master), ether3, ether4, ether5 | |
| IP address 192.168.88.1/24 is set on LAN port | |
| DHCP Server: enabled; | |
| DNS: enabled; | |
| WAN (gateway) Configuration: | |
| gateway: ether1 ; | |
| ip4 firewall: enabled; | |
| NAT: enabled; | |
| ------------------------------------------------------------------------------- | |
| You can type "v" to see the exact commands that are used to add and remove | |
| this default configuration, or you can view them later with | |
| '/system default-configuration print' command. | |
| To remove this default configuration type "r" or hit any other key to continue. | |
| If you are connected using the above IP and you remove it, you will be disconnected | |
| . | |
| ------------------------------------------------------------------------------- | |
| #| RouterMode: | |
| #| * WAN port is protected by firewall and enabled DHCP client | |
| #| LAN Configuration: | |
| #| switch group: ether2 (master), ether3, ether4, ether5 | |
| #| IP address 192.168.88.1/24 is set on LAN port | |
| #| DHCP Server: enabled; | |
| #| DNS: enabled; | |
| #| WAN (gateway) Configuration: | |
| #| gateway: ether1 ; | |
| #| ip4 firewall: enabled; | |
| #| NAT: enabled; | |
| :log info Starting_defconf_script_; | |
| :global action; | |
| #------------------------------------------------------------------------------- | |
| # Apply configuration. | |
| # these commands are executed after installation or configuration reset | |
| #------------------------------------------------------------------------------- | |
| :if ($action = "apply") do={ | |
| # wait for interfaces | |
| :local count 0; | |
| :while ([/interface ethernet find] = "") do={ | |
| :if ($count = 30) do={ | |
| :log warning "DefConf: Unable to find ethernet interfaces"; | |
| /quit; | |
| } | |
| :delay 1s; :set count ($count +1); | |
| }; | |
| /interface ethernet { | |
| set ether2 name=ether2-master; | |
| set ether3 master-port=ether2-master; | |
| set ether4 master-port=ether2-master; | |
| set ether5 master-port=ether2-master; | |
| } | |
| /interface bridge | |
| add name=bridge disabled=no auto-mac=yes protocol-mode=rstp comment=defconf; | |
| :local bMACIsSet 0; | |
| :foreach k in=[/interface find where !(slave=yes || name~"ether1" || name~"bridge")] do={ | |
| :local tmpPortName [/interface get $k name]; | |
| :log info "port: $tmpPortName" | |
| :if ($bMACIsSet = 0) do={ | |
| :if ([/interface get $k type] = "ether") do={ | |
| /interface bridge set "bridge" auto-mac=no admin-mac=[/interface ethernet get $tmpPortName mac-address]; | |
| :set bMACIsSet 1; | |
| } | |
| } | |
| /interface bridge port | |
| add bridge=bridge interface=$tmpPortName comment=defconf; | |
| } | |
| /ip pool add name="default-dhcp" ranges=192.168.88.10-192.168.88.254; | |
| /ip dhcp-server | |
| add name=defconf address-pool="default-dhcp" interface=bridge lease-time=10m disabled=no; | |
| /ip dhcp-server network | |
| add address=192.168.88.0/24 gateway=192.168.88.1 comment="defconf"; | |
| /ip address add address=192.168.88.1/24 interface=bridge comment="defconf"; | |
| /ip dns { | |
| set allow-remote-requests=yes | |
| static add name=router.lan address=192.168.88.1 | |
| } | |
| /interface list add name=WAN comment="defconf" | |
| /interface list add name=LAN comment="defconf" | |
| /interface list member add list=LAN interface=bridge comment="defconf" | |
| /interface list member add list=WAN interface=ether1 comment="defconf" | |
| /ip firewall nat add chain=srcnat out-interface-list=WAN ipsec-policy=out,none action=masquerade comment="defconf: masquerade" | |
| /ip firewall { | |
| filter add chain=input action=accept connection-state=established,related,untracked comment="defconf: accept established,related,untracked" | |
| filter add chain=input action=drop connection-state=invalid comment="defconf: drop invalid" | |
| filter add chain=input action=accept protocol=icmp comment="defconf: accept ICMP" | |
| filter add chain=input action=drop in-interface-list=!LAN comment="defconf: drop all not coming from LAN" | |
| filter add chain=forward action=accept ipsec-policy=in,ipsec comment="defconf: accept in ipsec policy" | |
| filter add chain=forward action=accept ipsec-policy=out,ipsec comment="defconf: accept out ipsec policy" | |
| filter add chain=forward action=fasttrack-connection connection-state=established,related comment="defconf: fasttrack" | |
| filter add chain=forward action=accept connection-state=established,related,untracked comment="defconf: accept established,related, untracked" | |
| filter add chain=forward action=drop connection-state=invalid comment="defconf: drop invalid" | |
| filter add chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN comment="defconf: drop all from WAN | |
| not DSTNATed" | |
| } | |
| /ip neighbor discovery set [find name="ether1"] discover=no | |
| /tool mac-server disable [find]; | |
| /tool mac-server mac-winbox disable [find]; | |
| :foreach k in=[/interface find where !(slave=yes || name~"ether1")] do={ | |
| :local tmpName [/interface get $k name]; | |
| /tool mac-server add interface=$tmpName disabled=no; | |
| /tool mac-server mac-winbox add interface=$tmpName disabled=no; | |
| } | |
| } | |
| #------------------------------------------------------------------------------- | |
| # Revert configuration. | |
| # these commands are executed if user requests to remove default configuration | |
| #------------------------------------------------------------------------------- | |
| :if ($action = "revert") do={ | |
| /user set admin password="" | |
| # remove wan port protection | |
| /ip firewall filter remove [find comment~"defconf"] | |
| /ip firewall nat remove [find comment~"defconf"] | |
| /interface list member remove [find comment~"defconf"] | |
| /interface list remove [find comment~"defconf"] | |
| /tool mac-server remove [find interface!=all] | |
| /tool mac-server set [find] disabled=no | |
| /tool mac-server mac-winbox remove [find interface!=all] | |
| /tool mac-server mac-winbox set [find] disabled=no | |
| /ip neighbor discovery set [find ] discover=yes | |
| :local o [/ip dhcp-server network find comment="defconf"] | |
| :if ([:len $o] != 0) do={ /ip dhcp-server network remove $o } | |
| :local o [/ip dhcp-server find name="defconf" !disabled] | |
| :if ([:len $o] != 0) do={ /ip dhcp-server remove $o } | |
| /ip pool { | |
| :local o [find name="default-dhcp" ranges=192.168.88.10-192.168.88.254] | |
| :if ([:len $o] != 0) do={ remove $o } | |
| } | |
| :local o [/ip dhcp-client find comment="defconf"] | |
| :if ([:len $o] != 0) do={ /ip dhcp-client remove $o } | |
| /ip dns { | |
| set allow-remote-requests=no | |
| :local o [static find name=router address=192.168.88.1] | |
| :if ([:len $o] != 0) do={ static remove $o } | |
| } | |
| /ip address { | |
| :local o [find comment="defconf"] | |
| :if ([:len $o] != 0) do={ remove $o } | |
| } | |
| :foreach iface in=[/interface ethernet find] do={ | |
| /interface ethernet set $iface name=[get $iface default-name] | |
| /interface ethernet set $iface master-port=none | |
| } | |
| /interface bridge port remove [find comment="defconf"] | |
| /interface bridge remove [find comment="defconf"] | |
| } | |
| :log info Defconf_script_finished; | |
| ------------------------------------------------------------------------------- | |
| You can type "v" to see the exact commands that are used to add and remove | |
| this default configuration, or you can view them later with | |
| '/system default-configuration print' command. | |
| To remove this default configuration type "r" or hit any other key to continue. | |
| If you are connected using the above IP and you remove it, you will be disconnected. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment