Skip to content

Instantly share code, notes, and snippets.

@rscott78
Created February 17, 2023 15:11
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rscott78/1f2ac8bc183a8ffa35d747d91d81e961 to your computer and use it in GitHub Desktop.
Save rscott78/1f2ac8bc183a8ffa35d747d91d81e961 to your computer and use it in GitHub Desktop.
# feb/17/2023 08:07:51 by RouterOS 6.49.7
# software id = BUYL-SRNB
#
# model = CRS312-4C+8XG
# serial number =
/interface bridge
add admin-mac=DC:2C:6E:28:C4:4F auto-mac=no comment=defconf \
ingress-filtering=yes name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=combo1 ] comment="Garage Switch"
set [ find default-name=combo2 ] comment="to Main Router via Dell QoE"
set [ find default-name=combo3 ] comment="Attic switch"
set [ find default-name=combo4 ] comment="T Switch"
set [ find default-name=ether1 ] comment="Emergency / Empty"
set [ find default-name=ether2 ] comment="Port 1 - office"
set [ find default-name=ether3 ] comment="Port 2 wire - Garage 60LR Quinton"
set [ find default-name=ether4 ] comment="Home Office - Port 3 Wire"
set [ find default-name=ether8 ] comment="QoE Management 10.0.1.5"
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4-ipv6
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge comment="Garage Switch Mikrotik" edge=yes frame-types=\
admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=\
combo1 pvid=50
add bridge=bridge comment="Going to Mikrotik Router (via Dell QoE)" \
frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=combo2 \
trusted=yes
add bridge=bridge comment="VL40 - Attic Switch" interface=combo3 pvid=40
add bridge=bridge comment=defconf frame-types=\
admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=\
combo4 pvid=9
add bridge=bridge comment=defconf ingress-filtering=yes interface=ether1
add bridge=bridge comment="Office - VL78" interface=ether2 pvid=78
add bridge=bridge comment="VL20- Quinton" frame-types=\
admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=\
ether3 pvid=20
add bridge=bridge comment="VL78 Home Connection" edge=yes interface=ether4 \
pvid=78
add bridge=bridge comment=defconf edge=yes frame-types=\
admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=\
ether5 pvid=78
add bridge=bridge comment=defconf frame-types=\
admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=\
ether6 pvid=78
add bridge=bridge comment="VL78: " interface=ether7 pvid=78
add bridge=bridge comment="VL78: QoE" ingress-filtering=yes interface=ether8 \
pvid=78
add bridge=bridge comment=defconf ingress-filtering=yes interface=ether9
/ip settings
set max-neighbor-entries=2048
/interface bridge vlan
add bridge=bridge tagged=combo2 untagged=ether4,ether6,ether5 vlan-ids=78
add bridge=bridge tagged=combo2 vlan-ids=20
add bridge=bridge tagged=combo2 vlan-ids=10
add bridge=bridge tagged=combo2 vlan-ids=30
add bridge=bridge tagged=combo2 vlan-ids=40
add bridge=bridge tagged=combo2 vlan-ids=50
add bridge=bridge tagged=combo2 untagged=ether6 vlan-ids=9
add bridge=bridge tagged=combo2 vlan-ids=1
add bridge=bridge comment=\
"vlan 100 will be used when we need an ip from the public pool" tagged=\
combo2,ether4,combo3,combo4,ether2,ether3,ether5 vlan-ids=100
/interface list member
add interface=ether9 list=WAN
add interface=ether1 list=LAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=combo1 list=LAN
add interface=combo2 list=LAN
add interface=combo3 list=LAN
add interface=combo4 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=10.0.1.6/24 comment=defconf interface=ether1 network=10.0.1.0
add address=10.10.10.12 interface=bridge network=10.10.10.12
add address=10.10.78.2 interface=bridge network=10.10.78.2
add address=10.255.1.2/30 interface=ether1 network=10.255.1.0
/ip dns
set servers=8.8.8.8,1.1.1.1
/ip route
add distance=1 gateway=10.255.1.1
/system clock
set time-zone-name=America/Denver
/system identity
set name=MikroTik-CRS
/system routerboard settings
set boot-os=router-os
/tool sniffer
set file-name=ps-combo3-dhcp filter-interface=combo3 filter-ip-protocol=udp \
filter-port=bootps,bootpc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment