added backup script for mikrotik, mikrotik backup for 23-feb taken
This commit is contained in:
BIN
mikrotik/Addresses.CDB
Normal file
BIN
mikrotik/Addresses.CDB
Normal file
Binary file not shown.
185
mikrotik/RND-mkt-rtr-2026-02-23.conf
Normal file
185
mikrotik/RND-mkt-rtr-2026-02-23.conf
Normal file
@@ -0,0 +1,185 @@
|
||||
# dec/24/1971 16:26:54 by RouterOS 6.47.7
|
||||
# software id = S2NZ-H089
|
||||
#
|
||||
# model = 2011UiAS
|
||||
# serial number = 77AD072033A2
|
||||
/interface bridge
|
||||
add name=Public-IP-Test-Bridge
|
||||
add name=TestBed-Tunnel-Bridge
|
||||
/interface ethernet
|
||||
set [ find default-name=ether2 ] name=ether2-To-TB-BDCOM-1-G0/1
|
||||
set [ find default-name=ether3 ] name=ether3-To-TB-BDCOM-2
|
||||
set [ find default-name=ether8 ] advertise="10M-half,10M-full,100M-half,100M-f\
|
||||
ull,1000M-half,1000M-full,2500M-full,5000M-full,10000M-full" name=\
|
||||
ether8-iDRAC-MGT-Dlink
|
||||
set [ find default-name=ether9 ] name=ether9-From-Shahjadpur-3-Via-Dlink-2
|
||||
/interface eoip
|
||||
add local-address=118.67.214.225 mac-address=02:55:2F:92:2A:E5 mtu=1500 name=\
|
||||
eoip-tunnel-for-Cloud-RTR remote-address=118.67.220.34 tunnel-id=1001
|
||||
/interface gre
|
||||
add local-address=118.67.214.225 name=GRE-TUNNEL-FOR-NVME-NETAPP \
|
||||
remote-address=118.67.220.34
|
||||
/interface vlan
|
||||
add comment="server mgmt" interface=ether8-iDRAC-MGT-Dlink name=104 vlan-id=\
|
||||
104
|
||||
add comment=IDRAC interface=ether8-iDRAC-MGT-Dlink name=VLAN-105-iDRAC-DELL \
|
||||
vlan-id=105
|
||||
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-106-External-Traffic \
|
||||
vlan-id=106
|
||||
add interface=ether2-To-TB-BDCOM-1-G0/1 name=\
|
||||
VLAN-107-Interal-Traffic-Admin-Traffic vlan-id=107
|
||||
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-109-Floating-Network-1 \
|
||||
vlan-id=109
|
||||
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-110-Floating-Network-2 \
|
||||
vlan-id=110
|
||||
add interface=ether2-To-TB-BDCOM-1-G0/1 name=\
|
||||
VLAN-111-Floating-Network-3-Public-IP vlan-id=111
|
||||
add interface=ether8-iDRAC-MGT-Dlink name=vlan-101-SW-MGT vlan-id=101
|
||||
/interface bonding
|
||||
add disabled=yes mode=balance-xor name=bonding-Testbed-Switchport-Aggregation \
|
||||
slaves=ether2-To-TB-BDCOM-1-G0/1,ether3-To-TB-BDCOM-2
|
||||
/interface vlan
|
||||
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
|
||||
VLAN-103-External-Traffic vlan-id=103
|
||||
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
|
||||
VLAN-106-Tanet-Traffic vlan-id=106
|
||||
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
|
||||
VLAN1-112-Floating-Network-4 vlan-id=112
|
||||
/interface list
|
||||
add name=WAN
|
||||
add name=LAN
|
||||
/interface wireless security-profiles
|
||||
set [ find default=yes ] supplicant-identity=MikroTik
|
||||
/ip dhcp-server option
|
||||
add code=66 name=pxe-server value="'192.168.104.118'"
|
||||
add code=67 name=pxe-file value="'pxelinux.0'"
|
||||
/ip dhcp-server option sets
|
||||
add name=maas-pxe options=pxe-server,pxe-file
|
||||
/ip ipsec profile
|
||||
add enc-algorithm=aes-256,aes-192,aes-128,3des hash-algorithm=sha256 name=\
|
||||
IPKA
|
||||
add dh-group=modp2048 enc-algorithm=aes-256 hash-algorithm=sha256 name=1
|
||||
/ip ipsec peer
|
||||
add address=103.120.192.6/32 local-address=118.67.214.225 name=\
|
||||
Peer-To-Ibrahim-Bhai-Project profile=1
|
||||
/ip ipsec proposal
|
||||
set [ find default=yes ] lifetime=1h30m pfs-group=modp2048
|
||||
add auth-algorithms=sha256 enc-algorithms=\
|
||||
aes-256-cbc,aes-256-gcm,aes-192-cbc,aes-128-cbc name=ike-phase-1 \
|
||||
pfs-group=modp2048
|
||||
/ip pool
|
||||
add name=L2VPN-Pool ranges=10.150.169.1-10.150.169.10
|
||||
/ppp profile
|
||||
add local-address=10.150.170.1 name=L2TP-VPN-Profile remote-address=\
|
||||
L2VPN-Pool
|
||||
/interface bridge port
|
||||
add bridge=TestBed-Tunnel-Bridge interface=vlan-101-SW-MGT
|
||||
add bridge=TestBed-Tunnel-Bridge interface=eoip-tunnel-for-Cloud-RTR
|
||||
add bridge=TestBed-Tunnel-Bridge interface=VLAN-105-iDRAC-DELL
|
||||
add bridge=TestBed-Tunnel-Bridge interface=104
|
||||
add bridge=TestBed-Tunnel-Bridge interface=VLAN-109-Floating-Network-1
|
||||
add bridge=TestBed-Tunnel-Bridge interface=VLAN-106-External-Traffic
|
||||
add bridge=TestBed-Tunnel-Bridge interface=VLAN-110-Floating-Network-2
|
||||
/ip neighbor discovery-settings
|
||||
set discover-interface-list=!dynamic
|
||||
/interface l2tp-server server
|
||||
set default-profile=L2TP-VPN-Profile enabled=yes ipsec-secret="cl0ud\$#@534" \
|
||||
use-ipsec=yes
|
||||
/interface list member
|
||||
add interface=ether1 list=WAN
|
||||
add list=LAN
|
||||
/ip address
|
||||
add address=192.168.110.1/24 comment="LB- network-vlan-110" interface=\
|
||||
VLAN-110-Floating-Network-2 network=192.168.110.0
|
||||
add address=118.67.214.225/29 comment="public network-vlan-103" interface=104 \
|
||||
network=118.67.214.224
|
||||
add address=192.168.104.1/24 comment="server mgmt-vlan-104" interface=104 \
|
||||
network=192.168.104.0
|
||||
add address=172.21.1.78/30 interface=ether9-From-Shahjadpur-3-Via-Dlink-2 \
|
||||
network=172.21.1.76
|
||||
add address=192.168.105.1/24 comment=IDRAC-vlan-105 interface=\
|
||||
VLAN-105-iDRAC-DELL network=192.168.105.0
|
||||
add address=192.168.106.1/24 comment=tenant-vlan-106 interface=\
|
||||
VLAN-106-External-Traffic network=192.168.106.0
|
||||
add address=192.168.107.1/24 comment="admin/internal IP-107-Geneve" \
|
||||
interface=VLAN-107-Interal-Traffic-Admin-Traffic network=192.168.107.0
|
||||
add address=192.168.103.1/24 comment="public network-vlan-103" interface=\
|
||||
VLAN-103-External-Traffic network=192.168.103.0
|
||||
add address=192.168.109.1/24 comment="floating network-vlan-109-temp" \
|
||||
interface=VLAN-109-Floating-Network-1 network=192.168.109.0
|
||||
add address=103.120.192.1/28 comment="floating ip-vlan-111" interface=\
|
||||
VLAN-111-Floating-Network-3-Public-IP network=103.120.192.0
|
||||
add address=192.168.112.1/24 interface=VLAN1-112-Floating-Network-4 network=\
|
||||
192.168.112.0
|
||||
add address=10.200.200.1/24 interface=vlan-101-SW-MGT network=10.200.200.0
|
||||
add address=172.16.1.1/24 interface=ether6 network=172.16.1.0
|
||||
add address=118.67.221.217/29 interface=104 network=118.67.221.216
|
||||
add address=10.11.14.2/30 interface=GRE-TUNNEL-FOR-NVME-NETAPP network=\
|
||||
10.11.14.0
|
||||
/ip arp
|
||||
add address=192.168.112.183 interface=VLAN1-112-Floating-Network-4 \
|
||||
mac-address=FA:16:3E:0C:47:90
|
||||
/ip dhcp-server network
|
||||
add address=192.168.104.0/24 dhcp-option-set=maas-pxe
|
||||
/ip firewall filter
|
||||
add action=accept chain=input dst-port=500 protocol=udp
|
||||
add action=accept chain=input dst-port=4500 protocol=udp
|
||||
add action=accept chain=input protocol=ipsec-esp
|
||||
add action=accept chain=forward dst-address=192.168.106.0/24 src-address=\
|
||||
192.168.104.0/24
|
||||
add action=accept chain=forward dst-address=192.168.104.0/24 src-address=\
|
||||
192.168.106.0/24
|
||||
/ip firewall nat
|
||||
add action=accept chain=srcnat dst-address=192.168.20.0/24
|
||||
add action=accept chain=srcnat dst-address=10.10.50.0/24 src-address=\
|
||||
192.168.104.0/24
|
||||
add action=src-nat chain=srcnat src-address=192.168.104.0/24 to-addresses=\
|
||||
118.67.214.225
|
||||
add action=src-nat chain=srcnat src-address=10.10.10.0/24 src-address-list="" \
|
||||
to-addresses=118.67.214.225
|
||||
add action=src-nat chain=srcnat src-address=10.150.169.0/24 src-address-list=\
|
||||
"" to-addresses=118.67.214.225
|
||||
add action=src-nat chain=srcnat src-address=192.168.111.0/24 to-addresses=\
|
||||
118.67.214.225
|
||||
add action=src-nat chain=srcnat src-address=192.168.109.0/24 to-addresses=\
|
||||
118.67.214.225
|
||||
add action=src-nat chain=srcnat src-address=192.168.110.0/24 to-addresses=\
|
||||
118.67.214.225
|
||||
add action=accept chain=srcnat dst-address=192.168.106.0/24 src-address=\
|
||||
192.168.104.0/24
|
||||
add action=accept chain=srcnat dst-address=192.168.104.0/24 src-address=\
|
||||
192.168.106.0/24
|
||||
add action=src-nat chain=srcnat src-address=192.168.106.0/24 to-addresses=\
|
||||
118.67.214.225
|
||||
/ip ipsec identity
|
||||
add peer=Peer-To-Ibrahim-Bhai-Project secret="@sdf123\$"
|
||||
/ip ipsec policy
|
||||
add dst-address=10.10.50.0/24 peer=Peer-To-Ibrahim-Bhai-Project proposal=\
|
||||
ike-phase-1 sa-dst-address=103.120.192.6 sa-src-address=118.67.214.225 \
|
||||
src-address=192.168.104.0/24 tunnel=yes
|
||||
/ip route
|
||||
add distance=1 gateway=172.21.1.77
|
||||
add check-gateway=ping disabled=yes distance=1 dst-address=10.90.90.90/32 \
|
||||
gateway=ether8-iDRAC-MGT-Dlink
|
||||
add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\
|
||||
10.11.14.1
|
||||
add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\
|
||||
10.11.14.1
|
||||
/ip service
|
||||
set telnet disabled=yes
|
||||
set ftp disabled=yes
|
||||
set www port=8090
|
||||
set ssh port=7900
|
||||
set api disabled=yes
|
||||
set winbox port=58923
|
||||
set api-ssl disabled=yes
|
||||
/ipv6 address
|
||||
add address=2406:f100:9:100::2/126 advertise=no interface=\
|
||||
ether9-From-Shahjadpur-3-Via-Dlink-2
|
||||
/ppp secret
|
||||
add name=L2TP-CLOUD password="cl0ud\$#@534e" profile=L2TP-VPN-Profile \
|
||||
service=l2tp
|
||||
/system identity
|
||||
set name=Cloud-RND
|
||||
/system logging
|
||||
add topics=debug
|
||||
196
mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf
Normal file
196
mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf
Normal file
@@ -0,0 +1,196 @@
|
||||
# feb/23/2026 11:38:13 by RouterOS 6.49.15
|
||||
# software id = FM63-EBFC
|
||||
#
|
||||
# model = 2011UiAS-2HnD
|
||||
# serial number = 5E6D057D6D6C
|
||||
/interface bridge
|
||||
add name=BR-VPN-QUAR
|
||||
add name=LAN-Bridge
|
||||
add name=Loopback-Softify-Test
|
||||
add name=PPTP-Clients
|
||||
add name=Public_IP-WAN_Bridge
|
||||
add name=loopback
|
||||
/interface ethernet
|
||||
set [ find default-name=ether1 ] name=ether1-UPlink-Shahjadpur-3
|
||||
set [ find default-name=ether2 ] name=ether2-Public-Interface
|
||||
set [ find default-name=ether3 ] name=ether3-Public-Interface
|
||||
set [ find default-name=ether4 ] name=ether4-To-TestBed-SW
|
||||
set [ find default-name=ether5 ] name=ether5-Mosiur-PC
|
||||
set [ find default-name=ether6 ] name=ether6-LAN-Interface
|
||||
set [ find default-name=ether7 ] name=ether7-LAN-Interface
|
||||
set [ find default-name=ether8 ] name=ether8-LAN-Interface
|
||||
set [ find default-name=ether9 ] name=\
|
||||
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23
|
||||
set [ find default-name=ether10 ] name=ether10-LAN-Interface
|
||||
/interface gre
|
||||
add disabled=yes dont-fragment=inherit local-address=163.53.151.2 mtu=1326 \
|
||||
name=Test-GRE-Tunnel remote-address=10.20.30.14
|
||||
add disabled=yes local-address=163.53.151.2 mtu=1426 name=gre-CHR \
|
||||
remote-address=118.67.212.21
|
||||
add local-address=163.53.151.2 name=gre-tunnel-Cloud-Wifi-iDRAC \
|
||||
remote-address=118.67.220.34
|
||||
/interface eoip
|
||||
add mac-address=02:24:D1:15:90:51 name=EoIP-For-Cloud-Wifi-To-MGT-SW \
|
||||
remote-address=118.67.220.34 tunnel-id=1002
|
||||
/interface vlan
|
||||
add disabled=yes interface=ether4-To-TestBed-SW name=VLAN-TestBed-1010 \
|
||||
vlan-id=1010
|
||||
/interface wireless security-profiles
|
||||
set [ find default=yes ] supplicant-identity=MikroTik
|
||||
add authentication-types=wpa2-psk mode=dynamic-keys name=\
|
||||
Cloud-Wifi-Security-Profile supplicant-identity="" wpa2-pre-shared-key=\
|
||||
M3gh3r-T0r0ng0-B@rta
|
||||
/interface wireless
|
||||
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=bangladesh disabled=\
|
||||
no frequency=2462 installation=indoor mode=ap-bridge security-profile=\
|
||||
Cloud-Wifi-Security-Profile ssid=cloud wps-mode=push-button-virtual-only
|
||||
/ip dhcp-server
|
||||
add disabled=no interface=PPTP-Clients lease-time=1h name=dhcp2
|
||||
add disabled=no lease-time=1h name=dhcp3
|
||||
add disabled=no interface=ether5-Mosiur-PC lease-time=1h name=dhcp4
|
||||
add disabled=no interface=sfp1 lease-time=1h name=dhcp5
|
||||
add disabled=no lease-time=1h name=dhcp6
|
||||
/ip pool
|
||||
add name=dhcp_pool0 ranges=10.100.200.20-10.100.200.254
|
||||
add name=dhcp_pool1 ranges=10.100.200.20-10.100.200.254
|
||||
add name=Pool-Quar ranges=10.10.10.0/24
|
||||
add name=hs-pool-30 ranges=10.10.10.2-10.10.10.254
|
||||
/ip dhcp-server
|
||||
add address-pool=dhcp_pool1 disabled=no interface=LAN-Bridge name=dhcp1
|
||||
add address-pool=hs-pool-30 disabled=no interface=BR-VPN-QUAR lease-time=1h \
|
||||
name=dhcp7
|
||||
/ppp profile
|
||||
add bridge=BR-VPN-QUAR bridge-learning=yes dns-server=10.10.10.1 \
|
||||
local-address=10.10.10.1 name=prof-quar remote-address=Pool-Quar
|
||||
/interface bridge port
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether2-Public-Interface
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether3-Public-Interface
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether4-To-TestBed-SW
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether5-Mosiur-PC
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether1-UPlink-Shahjadpur-3
|
||||
add bridge=LAN-Bridge interface=wlan1
|
||||
add bridge=LAN-Bridge interface=\
|
||||
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23
|
||||
add bridge=LAN-Bridge interface=ether7-LAN-Interface
|
||||
add bridge=LAN-Bridge interface=ether8-LAN-Interface
|
||||
add bridge=LAN-Bridge interface=ether10-LAN-Interface
|
||||
/ip firewall connection tracking
|
||||
set enabled=yes
|
||||
/interface l2tp-server server
|
||||
set default-profile=default
|
||||
/interface pptp-server server
|
||||
set authentication=pap,chap,mschap1,mschap2 default-profile=prof-quar \
|
||||
enabled=yes
|
||||
/interface wireless cap
|
||||
set interfaces=wlan1
|
||||
/ip address
|
||||
add address=163.53.151.2/29 interface=Public_IP-WAN_Bridge network=\
|
||||
163.53.151.0
|
||||
add address=10.100.200.1/24 interface=LAN-Bridge network=10.100.200.0
|
||||
add address=10.255.255.1/30 interface=\
|
||||
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23 network=10.255.255.0
|
||||
add address=10.12.13.2/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\
|
||||
10.12.13.0
|
||||
add address=172.16.10.1/24 interface=ether5-Mosiur-PC network=172.16.10.0
|
||||
add address=10.10.10.1/24 interface=BR-VPN-QUAR network=10.10.10.0
|
||||
add address=10.100.200.15/24 disabled=yes interface=\
|
||||
EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0
|
||||
add address=10.222.10.2/30 interface=gre-CHR network=10.222.10.0
|
||||
/ip arp
|
||||
add address=10.100.200.182 interface=LAN-Bridge mac-address=F4:A9:97:DD:9F:75
|
||||
/ip dhcp-server lease
|
||||
add address=10.100.200.182 client-id=1:f4:a9:97:dd:9f:75 mac-address=\
|
||||
F4:A9:97:DD:9F:75 server=dhcp1
|
||||
add address=10.100.200.252 client-id=1:6c:3b:6b:cf:d5:cc mac-address=\
|
||||
6C:3B:6B:CF:D5:CC server=dhcp1
|
||||
add address=10.100.200.175 mac-address=B4:2E:99:16:BC:4C server=dhcp1
|
||||
/ip dhcp-server network
|
||||
add address=10.5.50.0/24 comment="hotspot network" gateway=10.5.50.1
|
||||
add address=10.10.10.0/24 comment="hotspot network" gateway=10.10.10.1
|
||||
add address=10.100.200.0/24 dns-server=8.8.8.8 gateway=10.100.200.1
|
||||
add address=10.202.201.0/24 comment="hotspot network" gateway=10.202.201.1
|
||||
add address=172.16.10.0/24 comment="hotspot network" gateway=172.16.10.1
|
||||
/ip dns
|
||||
set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1
|
||||
/ip firewall address-list
|
||||
add address=10.100.200.0/24 list=DHCP-Pool
|
||||
add address=163.53.149.35 list=DHCP-Pool
|
||||
add address=10.100.200.175 list=10.100.200-Reach-ACL
|
||||
add address=10.100.200.182 list=10.100.200-Reach-ACL
|
||||
/ip firewall filter
|
||||
add action=accept chain=forward src-address=10.100.200.0/24
|
||||
add action=accept chain=input comment="Allow GRE" protocol=gre
|
||||
/ip firewall mangle
|
||||
add action=mark-routing chain=prerouting dst-address=118.67.220.34 dst-port=\
|
||||
1723 new-routing-mark=pptp-traffic passthrough=yes protocol=tcp \
|
||||
src-address-list=DHCP-Pool
|
||||
add action=mark-routing chain=prerouting dst-address=118.67.220.34 \
|
||||
new-routing-mark=pptp-traffic passthrough=yes protocol=gre \
|
||||
src-address-list=DHCP-Pool
|
||||
add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes \
|
||||
protocol=tcp tcp-flags=syn
|
||||
/ip firewall nat
|
||||
add action=src-nat chain=srcnat disabled=yes src-address=10.20.30.14 \
|
||||
to-addresses=103.209.42.105
|
||||
add action=accept chain=srcnat dst-address=118.67.220.34 dst-port=1723 \
|
||||
protocol=tcp
|
||||
add action=accept chain=srcnat dst-address=118.67.220.34 protocol=gre
|
||||
add action=src-nat chain=srcnat comment=\
|
||||
"NAT Rule for Reaching 10.100.200.X using iDRAC VPN" dst-address-list=\
|
||||
10.100.200-Reach-ACL src-address=10.12.13.1 to-addresses=10.100.200.1
|
||||
add action=masquerade chain=srcnat out-interface=Public_IP-WAN_Bridge \
|
||||
src-address-list="" to-addresses=163.53.151.2
|
||||
/ip route
|
||||
add check-gateway=ping distance=1 gateway=10.12.13.1 routing-mark=\
|
||||
pptp-traffic
|
||||
add check-gateway=ping distance=1 gateway=163.53.151.1
|
||||
add check-gateway=ping distance=1 dst-address=10.200.200.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add disabled=yes distance=10 dst-address=118.67.220.34/32 gateway=10.12.13.1
|
||||
add check-gateway=ping disabled=yes distance=1 dst-address=118.67.220.34/32 \
|
||||
gateway=10.12.13.1
|
||||
add distance=1 dst-address=192.168.10.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\
|
||||
10.12.13.1
|
||||
add check-gateway=ping distance=1 dst-address=192.168.25.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.104.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.105.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.106.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.109.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.110.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
/ip service
|
||||
set telnet disabled=yes port=12312
|
||||
set ftp disabled=yes
|
||||
set www port=7980
|
||||
set ssh port=7900
|
||||
set api disabled=yes
|
||||
set api-ssl disabled=yes
|
||||
/lcd interface pages
|
||||
set 0 interfaces="sfp1,ether1-UPlink-Shahjadpur-3,ether2-Public-Interface,ethe\
|
||||
r3-Public-Interface,ether4-To-TestBed-SW,ether5-Mosiur-PC,ether6-LAN-Inter\
|
||||
face,ether7-LAN-Interface,ether8-LAN-Interface,ether9-To-Meeting-Room-From\
|
||||
-C15-To-A22-Testbed-C23,ether10-LAN-Interface"
|
||||
/ppp aaa
|
||||
set use-radius=yes
|
||||
/ppp secret
|
||||
add name=silvarno password=123Rashik456
|
||||
/radius
|
||||
add address=163.53.151.4 secret=testing123 service=ppp
|
||||
/system clock
|
||||
set time-zone-name=Asia/Dhaka
|
||||
/system identity
|
||||
set name=Cloud-Wifi
|
||||
/tool sniffer
|
||||
set file-limit=10000KiB file-name=Test-WAN-VPN-14-01-26 filter-interface=all \
|
||||
filter-port=47 memory-limit=1000KiB
|
||||
/user aaa
|
||||
set use-radius=yes
|
||||
404
mikrotik/mgt-mkt-rtr-2026-02-23.conf
Normal file
404
mikrotik/mgt-mkt-rtr-2026-02-23.conf
Normal file
@@ -0,0 +1,404 @@
|
||||
# feb/23/2026 11:38:53 by RouterOS 6.43.8
|
||||
# software id = QH40-TY32
|
||||
#
|
||||
# model = RouterBOARD 3011UiAS
|
||||
# serial number = 781006ECE3E4
|
||||
/interface pptp-server
|
||||
add name=pptp-in1 user=""
|
||||
/interface bridge
|
||||
add arp=proxy-arp name=Bridge-Local
|
||||
add name=NVCM-MGT-Bridge
|
||||
add name=Test
|
||||
add name=bridge-for-idrac-access
|
||||
/interface ethernet
|
||||
set [ find default-name=ether1 ] speed=100Mbps
|
||||
set [ find default-name=ether2 ] name=ether2-To-Dlink-for-Vlan-10,11,12,16 \
|
||||
speed=100Mbps
|
||||
set [ find default-name=ether3 ] name=ether3-To-iDRAC-Dlink-SW-4 speed=\
|
||||
100Mbps
|
||||
set [ find default-name=ether4 ] speed=100Mbps
|
||||
set [ find default-name=ether5 ] speed=100Mbps
|
||||
set [ find default-name=ether6 ] name=ether6-To-Cisco-48-Port-SW speed=\
|
||||
100Mbps
|
||||
set [ find default-name=ether7 ] speed=100Mbps
|
||||
set [ find default-name=ether8 ] speed=100Mbps
|
||||
set [ find default-name=ether9 ] name=ether9-To-Meeting-Room-From-C15-To-A22 \
|
||||
speed=100Mbps
|
||||
set [ find default-name=ether10 ] speed=100Mbps
|
||||
set [ find default-name=sfp1 ] advertise=\
|
||||
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3
|
||||
/interface l2tp-server
|
||||
add name=l2tp-Server user=cloud-operation
|
||||
/interface ovpn-server
|
||||
add name=ovpn-in1 user=cloud
|
||||
/interface eoip
|
||||
add mac-address=02:B8:09:8A:07:F9 name=EoIP-For-Cloud-Wifi-To-MGT-SW \
|
||||
remote-address=163.53.151.2 tunnel-id=1002
|
||||
add local-address=118.67.220.34 mac-address=02:BA:28:7F:6E:BB mtu=1500 name=\
|
||||
eoip-tunnel-For-Testbed remote-address=118.67.214.225 tunnel-id=1001
|
||||
/interface gre
|
||||
add local-address=118.67.220.34 name=GRE-TUNNEL-FOR-NETAPP remote-address=\
|
||||
118.67.214.225
|
||||
add local-address=118.67.220.34 name=gre-tunnel-Cloud-Wifi-iDRAC \
|
||||
remote-address=163.53.151.2
|
||||
/interface vlan
|
||||
add interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=VLAN-101-NOVO-MGT \
|
||||
vlan-id=101
|
||||
add arp=proxy-arp interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=\
|
||||
vlan-10-iDRAC-MGT vlan-id=10
|
||||
add interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=vlan-12-Storage-MGT \
|
||||
vlan-id=12
|
||||
add arp=proxy-arp interface=ether6-To-Cisco-48-Port-SW name=\
|
||||
vlan-20-Server-Management vlan-id=20
|
||||
add arp=proxy-arp interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=\
|
||||
vlan-25-iDRAC-MGT vlan-id=25
|
||||
add comment="for idrac access" interface=ether3-To-iDRAC-Dlink-SW-4 name=\
|
||||
vlan-25-idrac-access vlan-id=25
|
||||
add comment="for mgt vlan" interface=ether3-To-iDRAC-Dlink-SW-4 name=\
|
||||
vlan-111-cloud-mgt-idrac vlan-id=111
|
||||
/interface wireless security-profiles
|
||||
set [ find default=yes ] supplicant-identity=MikroTik
|
||||
/ip ipsec peer profile
|
||||
set [ find default=yes ] dh-group=modp1024 enc-algorithm=aes-256
|
||||
add dh-group=modp1024 enc-algorithm=aes-256 name=pfsencesanjidaprofile1
|
||||
add dh-group=ecp256,modp2048,modp1024 enc-algorithm=aes-256,aes-128,3des \
|
||||
hash-algorithm=sha256 name=PFSese nat-traversal=no
|
||||
/ip ipsec proposal
|
||||
set [ find default=yes ] pfs-group=none
|
||||
add auth-algorithms=sha256 enc-algorithms=aes-256-cbc,aes-256-ctr,aes-256-gcm \
|
||||
lifetime=1d30m name=proposal-Cloud pfs-group=modp1536
|
||||
/ip pool
|
||||
add name=SVR-MGT-POOL ranges=192.168.20.230-192.168.20.254
|
||||
add name=IDRAC-10-MGT-POOL ranges=192.168.10.151-192.168.10.165
|
||||
add name=IDRAC-25-MGT-POOL ranges=192.168.25.151-192.168.25.185
|
||||
add name=ovpn-pool ranges=192.168.30.1-192.168.30.100
|
||||
add name=vpn_pool ranges=192.168.40.1-192.168.40.100
|
||||
/ppp profile
|
||||
set *0 change-tcp-mss=default dns-server=103.248.12.62,8.8.8.8 local-address=\
|
||||
SVR-MGT-POOL remote-address=SVR-MGT-POOL
|
||||
add dns-server=103.248.12.62 local-address=IDRAC-10-MGT-POOL name=IDRAC-10 \
|
||||
remote-address=IDRAC-10-MGT-POOL wins-server=8.8.8.8
|
||||
add dns-server=8.8.8.8 local-address=IDRAC-25-MGT-POOL name=IDRAC-25 \
|
||||
remote-address=IDRAC-25-MGT-POOL wins-server=1.1.1.1
|
||||
add local-address=192.168.30.200 name=ovpn remote-address=ovpn-pool
|
||||
add local-address=192.168.40.1 name=vpn_profile remote-address=vpn_pool
|
||||
/snmp community
|
||||
add addresses=103.248.12.32/27,172.30.30.0/24 name=intercLoud
|
||||
/system logging action
|
||||
set 3 remote=172.30.30.42 src-address=118.67.220.34
|
||||
/interface bridge port
|
||||
add bridge=bridge-for-idrac-access interface=vlan-25-idrac-access
|
||||
add bridge=bridge-for-idrac-access interface=vlan-25-iDRAC-MGT
|
||||
/interface l2tp-server server
|
||||
set default-profile=IDRAC-25 ipsec-secret=K!ngK0rt0BB0B!muR-Cl0ud use-ipsec=\
|
||||
yes
|
||||
/interface ovpn-server server
|
||||
set certificate=SERVER cipher=aes256 default-profile=IDRAC-25 enabled=yes
|
||||
/interface pptp-server server
|
||||
set enabled=yes
|
||||
/ip address
|
||||
add address=192.168.20.1/24 interface=vlan-20-Server-Management network=\
|
||||
192.168.20.0
|
||||
add address=192.168.10.150/24 interface=vlan-10-iDRAC-MGT network=\
|
||||
192.168.10.0
|
||||
add address=192.168.12.150/24 interface=vlan-12-Storage-MGT network=\
|
||||
192.168.12.0
|
||||
add address=192.168.25.150/24 interface=bridge-for-idrac-access network=\
|
||||
192.168.25.0
|
||||
add address=172.17.1.59/26 interface=VLAN-101-NOVO-MGT network=172.17.1.0
|
||||
add address=10.10.200.1/24 interface=ether3-To-iDRAC-Dlink-SW-4 network=\
|
||||
10.10.200.0
|
||||
add address=10.209.42.1/24 interface=vlan-111-cloud-mgt-idrac network=\
|
||||
10.209.42.0
|
||||
add address=10.200.200.254/24 comment="IP For Switch Mangement" interface=\
|
||||
eoip-tunnel-For-Testbed network=10.200.200.0
|
||||
add address=192.168.106.254/24 comment="IP For BR-EX " interface=\
|
||||
eoip-tunnel-For-Testbed network=192.168.106.0
|
||||
add address=192.168.104.254/24 interface=eoip-tunnel-For-Testbed network=\
|
||||
192.168.104.0
|
||||
add address=10.12.13.1/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\
|
||||
10.12.13.0
|
||||
add address=192.168.109.254/24 comment="IP For Floating-IP-1" interface=\
|
||||
eoip-tunnel-For-Testbed network=192.168.109.0
|
||||
add address=192.168.110.254/24 comment="IP For Floating-IP-2" interface=\
|
||||
eoip-tunnel-For-Testbed network=192.168.110.0
|
||||
add address=118.67.220.34/30 interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
network=118.67.220.32
|
||||
add address=192.168.105.254/24 comment=iDRAC interface=\
|
||||
eoip-tunnel-For-Testbed network=192.168.105.0
|
||||
add address=10.100.200.14/24 disabled=yes interface=\
|
||||
EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0
|
||||
add address=10.11.14.1/30 interface=GRE-TUNNEL-FOR-NETAPP network=10.11.14.0
|
||||
/ip dns
|
||||
set servers=8.8.8.8,1.1.1.1
|
||||
/ip firewall address-list
|
||||
add address=103.9.136.34 list=admin-access
|
||||
add address=103.9.136.35 list=admin-access
|
||||
add address=103.248.12.62 list=admin-access
|
||||
add address=103.9.136.66 list=admin-access
|
||||
add address=118.67.220.8/30 list=admin-access
|
||||
add address=172.17.1.0/26 list=admin-access
|
||||
add address=103.248.12.0/24 list=admin-access
|
||||
add address=103.23.40.0/24 list=admin-access
|
||||
add address=172.30.30.0/24 list=admin-access
|
||||
add address=163.53.150.248/29 list=admin-access
|
||||
add address=103.248.13.66 list=admin-access
|
||||
add address=163.53.151.2 list=admin-access
|
||||
add address=118.67.212.97 list=ceph-export-allow
|
||||
add address=118.67.212.115 list=ceph-export-allow
|
||||
add address=163.53.151.2 list=ceph-export-allow
|
||||
add address=103.248.13.66 list=ceph-export-allow
|
||||
add address=36.255.68.74 comment=gk list=ceph-export-allow
|
||||
add address=36.255.68.5 comment=gk list=ceph-export-allow
|
||||
add address=103.209.43.134 list=admin-access
|
||||
add address=163.53.151.0/29 list=admin-access
|
||||
/ip firewall filter
|
||||
add chain=input comment="For RTR" src-address-list=admin-access
|
||||
add action=drop chain=input disabled=yes dst-port=21,22,23,80,443,8291 \
|
||||
protocol=tcp
|
||||
add action=accept chain=forward dst-address=10.10.200.0/24 src-address=\
|
||||
10.10.20.0/24
|
||||
add action=accept chain=input port=1701,500,4500 protocol=udp
|
||||
add action=accept chain=input protocol=ipsec-esp
|
||||
/ip firewall nat
|
||||
add action=dst-nat chain=dstnat comment=nexus-3 dst-port=1613 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.45 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=nexus-2 dst-port=1638 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.23 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=nexus-1 dst-port=1637 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.20 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=nexus-5 dst-port=1641 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.61 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=Toku-BDCOM-SW disabled=yes dst-port=\
|
||||
1637 in-interface=ether1 protocol=udp to-addresses=172.28.10.58 to-ports=\
|
||||
161
|
||||
add action=dst-nat chain=dstnat comment=nexus-4 dst-port=1614 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.46 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=nexus-6 dst-port=1642 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.62 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=Cisco-48-Port-SW dst-port=1627 \
|
||||
in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
|
||||
172.17.1.47 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=\
|
||||
"controller1-phy.brilliant.com.bd\r\
|
||||
\n" dst-port=1615 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.111 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=\
|
||||
"controller2-phy.brilliant.com.bd\r\
|
||||
\n" dst-port=1616 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.112 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=\
|
||||
"controller3-phy.brilliant.com.bd\r\
|
||||
\n" dst-port=1617 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.114 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="ceph-mgt-phy1.brilliant.com.bd\r\
|
||||
\n" dst-port=1618 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.161 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="ceph-mgt-phy2.brilliant.com.bd\r\
|
||||
\n" dst-port=1619 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.162 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="ceph-mgt-phy3.brilliant.com.bd\r\
|
||||
\n" dst-port=1620 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.163 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd1.brilliant.com.bd\r\
|
||||
\n" dst-port=1621 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.81 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd2.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1622 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.82 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd3.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1623 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.83 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd4.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1624 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.84 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd5.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1625 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.85 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd5.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1631 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.118 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd6.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1636 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.95 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd1.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" disabled=yes dst-port=1628 in-interface=ether1 protocol=udp \
|
||||
to-addresses=192.168.20.86 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd2.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1629 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.87 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd3.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1630 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.94 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd4.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1632 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.89 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd6.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1633 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.117 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd7.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1634 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.93 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd1.brilliant.com.bd dst-port=\
|
||||
1639 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.96 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd9.brilliant.com.bd dst-port=\
|
||||
1640 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.97 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd8.brilliant.com.bd dst-port=\
|
||||
1643 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.115 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd12.brilliant.com.bd dst-port=\
|
||||
1644 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.116 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd6.brilliant.com.bd dst-port=\
|
||||
1645 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.117 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd2.brilliant.com.bd dst-port=\
|
||||
1646 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.87 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephosd7.brilliant.com.bd dst-port=\
|
||||
1647 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.126 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephosd8.brilliant.com.bd dst-port=\
|
||||
1648 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.129 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd13.brilliant.com.bd dst-port=\
|
||||
1635 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.205 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd14.brilliant.com.bd dst-port=\
|
||||
1636 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.211 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd11.brilliant.com.bd dst-port=\
|
||||
1637 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.203 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="ceph-export\r\
|
||||
\n\r\
|
||||
\n" dst-address=118.67.220.34 dst-port=9283 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=tcp src-address-list=\
|
||||
ceph-export-allow to-addresses=192.168.20.72 to-ports=9283
|
||||
add action=src-nat chain=srcnat disabled=yes dst-address=118.67.212.88 \
|
||||
to-addresses=172.17.1.59
|
||||
add action=src-nat chain=srcnat dst-address=118.67.212.115 to-addresses=\
|
||||
172.17.1.59
|
||||
add action=dst-nat chain=dstnat comment=BDCOM-SW-CLoud dst-port=1626 \
|
||||
in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
|
||||
172.28.10.58 to-ports=161
|
||||
add action=masquerade chain=srcnat src-address=192.168.20.0/24
|
||||
add action=masquerade chain=srcnat src-address=192.168.25.0/24
|
||||
add action=src-nat chain=srcnat dst-address=192.168.20.0/24 src-address=\
|
||||
192.168.10.0/24 to-addresses=192.168.20.1
|
||||
add action=masquerade chain=srcnat src-address=192.168.10.0/24
|
||||
add action=masquerade chain=srcnat src-address=192.168.12.253
|
||||
add action=masquerade chain=srcnat comment="test smtp" disabled=yes \
|
||||
src-address=192.168.12.0/24
|
||||
add action=masquerade chain=srcnat src-address=192.168.12.90
|
||||
add action=masquerade chain=srcnat
|
||||
add action=dst-nat chain=dstnat comment=cephosd8 dst-port=1648 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
|
||||
192.168.20.129 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd10.brilliant.com.bd dst-port=\
|
||||
1656 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
to-addresses=192.168.20.202 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=Nexus-7 dst-port=1681 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.72 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=Nexus-8 dst-port=1681 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.72 \
|
||||
to-ports=161
|
||||
/ip ipsec peer
|
||||
add address=163.53.151.2/32 disabled=yes profile=pfsencesanjidaprofile1 \
|
||||
secret=123456
|
||||
add address=0.0.0.0/0 exchange-mode=main-l2tp generate-policy=port-override \
|
||||
passive=yes secret=K!ngK0rt0BB0B!muR-Cl0ud
|
||||
add address=118.67.213.32/32 exchange-mode=ike2 local-address=118.67.220.34 \
|
||||
profile=PFSese secret=K!ngK0rt0BB0B!muR-Cl0ud
|
||||
/ip ipsec policy
|
||||
add disabled=yes dst-address=10.10.20.0/24 proposal=proposal-Cloud \
|
||||
sa-dst-address=36.255.69.66 sa-src-address=118.67.220.34 src-address=\
|
||||
10.10.200.0/24 tunnel=yes
|
||||
add comment="For VM Reachability" disabled=yes dst-address=10.100.10.0/24 \
|
||||
proposal=proposal-Cloud sa-dst-address=118.67.213.32 sa-src-address=\
|
||||
118.67.220.34 src-address=192.168.25.0/24 tunnel=yes
|
||||
add comment="For VM Reachability" disabled=yes dst-address=10.100.10.0/24 \
|
||||
proposal=proposal-Cloud sa-dst-address=118.67.213.32 sa-src-address=\
|
||||
118.67.220.34 src-address=0.0.0.0/0 tunnel=yes
|
||||
/ip route
|
||||
add distance=1 gateway=118.67.220.33
|
||||
add check-gateway=ping distance=1 dst-address=10.100.200.0/24 gateway=\
|
||||
10.12.13.2
|
||||
add check-gateway=ping disabled=yes distance=1 dst-address=192.168.12.20/32 \
|
||||
gateway=vlan-12-Storage-MGT pref-src=118.67.215.44
|
||||
/ip service
|
||||
set telnet disabled=yes
|
||||
set ftp disabled=yes
|
||||
set ssh port=7900
|
||||
set api disabled=yes
|
||||
set api-ssl disabled=yes
|
||||
/lcd
|
||||
set time-interval=hour
|
||||
/ppp secret
|
||||
add disabled=yes name=cloud password="0p3n\$t@cK-Br!ll!@nT-Cl0uD" service=\
|
||||
pptp
|
||||
add disabled=yes name=cloud-idrac password=\
|
||||
"N@1zOpwn4557@39875@\$%#\$@34yteivt" profile=IDRAC-25 service=pptp
|
||||
add disabled=yes name=cloud-enable password=Cl0uD-3n@bl3 service=pptp
|
||||
add disabled=yes name=cloud-idrac-old password="!icl0ud-0p3n\$t@c!@ng\$#22" \
|
||||
profile=IDRAC-10 service=pptp
|
||||
add disabled=yes name=ovpn password="!icl0ud-0p3n\$t@c!@ng\$#22" profile=ovpn \
|
||||
service=ovpn
|
||||
add disabled=yes name=cloud.operation password="!icl0ud-0p3n\$t@c!@ng\$#22" \
|
||||
service=ovpn
|
||||
add disabled=yes name=openvpn password="!icl0ud-0p3n\$t@c!@ng\$#22" profile=\
|
||||
vpn_profile service=ovpn
|
||||
add disabled=yes name=cloud-idrac password="N@1zOpw@\$%#\$@34ytl2tp%" \
|
||||
profile=IDRAC-25 service=l2tp
|
||||
add name=sys-likhon password="l@#\$%i#\$fo0l@#\$B!1w!h864@8783y5g6@8grN" \
|
||||
profile=IDRAC-25 service=pptp
|
||||
add name=sabbir password="C0##\$tl@#\$B!11!h@73y5g6@8gr" profile=IDRAC-25 \
|
||||
service=pptp
|
||||
add name=tanvir password=@Cloud@1994#Rahman# profile=IDRAC-25 service=pptp
|
||||
add name=farhad password="\$h@ik@t1990" profile=IDRAC-25 service=pptp
|
||||
add name=mostofa password=Piprardimgol164@ profile=IDRAC-25 service=pptp
|
||||
add name=pranto password=Pie@3.1416 profile=IDRAC-25 service=pptp
|
||||
add name=ibrahim password=ibr@2025 profile=IDRAC-25 service=pptp
|
||||
add name=mosiur password="123R@\$h!k4560ny789Me" profile=IDRAC-25 service=\
|
||||
pptp
|
||||
add name=nazmul password=N@zmul!231 profile=IDRAC-25 service=pptp
|
||||
add name=riyad password=Br!ll!@nt-F0rR!@D#4Y profile=IDRAC-25 service=pptp
|
||||
/snmp
|
||||
set contact=cloud.operations enabled=yes location=Shahjadpur trap-community=\
|
||||
intercLoud trap-generators=interfaces trap-interfaces=all trap-version=2
|
||||
/system clock
|
||||
set time-zone-name=Asia/Dhaka
|
||||
/system identity
|
||||
set name=CLOUD-MGT-GW-RTR
|
||||
/system logging
|
||||
add action=remote topics=critical
|
||||
add action=remote topics=error
|
||||
add action=remote topics=info
|
||||
add action=remote topics=warning
|
||||
add action=remote disabled=yes topics=l2tp
|
||||
add disabled=yes topics=pptp
|
||||
add action=remote disabled=yes topics=pptp
|
||||
/system routerboard settings
|
||||
set auto-upgrade=yes
|
||||
Reference in New Issue
Block a user