added backup script for mikrotik, mikrotik backup for 23-feb taken
This commit is contained in:
196
mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf
Normal file
196
mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf
Normal file
@@ -0,0 +1,196 @@
|
||||
# feb/23/2026 11:38:13 by RouterOS 6.49.15
|
||||
# software id = FM63-EBFC
|
||||
#
|
||||
# model = 2011UiAS-2HnD
|
||||
# serial number = 5E6D057D6D6C
|
||||
/interface bridge
|
||||
add name=BR-VPN-QUAR
|
||||
add name=LAN-Bridge
|
||||
add name=Loopback-Softify-Test
|
||||
add name=PPTP-Clients
|
||||
add name=Public_IP-WAN_Bridge
|
||||
add name=loopback
|
||||
/interface ethernet
|
||||
set [ find default-name=ether1 ] name=ether1-UPlink-Shahjadpur-3
|
||||
set [ find default-name=ether2 ] name=ether2-Public-Interface
|
||||
set [ find default-name=ether3 ] name=ether3-Public-Interface
|
||||
set [ find default-name=ether4 ] name=ether4-To-TestBed-SW
|
||||
set [ find default-name=ether5 ] name=ether5-Mosiur-PC
|
||||
set [ find default-name=ether6 ] name=ether6-LAN-Interface
|
||||
set [ find default-name=ether7 ] name=ether7-LAN-Interface
|
||||
set [ find default-name=ether8 ] name=ether8-LAN-Interface
|
||||
set [ find default-name=ether9 ] name=\
|
||||
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23
|
||||
set [ find default-name=ether10 ] name=ether10-LAN-Interface
|
||||
/interface gre
|
||||
add disabled=yes dont-fragment=inherit local-address=163.53.151.2 mtu=1326 \
|
||||
name=Test-GRE-Tunnel remote-address=10.20.30.14
|
||||
add disabled=yes local-address=163.53.151.2 mtu=1426 name=gre-CHR \
|
||||
remote-address=118.67.212.21
|
||||
add local-address=163.53.151.2 name=gre-tunnel-Cloud-Wifi-iDRAC \
|
||||
remote-address=118.67.220.34
|
||||
/interface eoip
|
||||
add mac-address=02:24:D1:15:90:51 name=EoIP-For-Cloud-Wifi-To-MGT-SW \
|
||||
remote-address=118.67.220.34 tunnel-id=1002
|
||||
/interface vlan
|
||||
add disabled=yes interface=ether4-To-TestBed-SW name=VLAN-TestBed-1010 \
|
||||
vlan-id=1010
|
||||
/interface wireless security-profiles
|
||||
set [ find default=yes ] supplicant-identity=MikroTik
|
||||
add authentication-types=wpa2-psk mode=dynamic-keys name=\
|
||||
Cloud-Wifi-Security-Profile supplicant-identity="" wpa2-pre-shared-key=\
|
||||
M3gh3r-T0r0ng0-B@rta
|
||||
/interface wireless
|
||||
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=bangladesh disabled=\
|
||||
no frequency=2462 installation=indoor mode=ap-bridge security-profile=\
|
||||
Cloud-Wifi-Security-Profile ssid=cloud wps-mode=push-button-virtual-only
|
||||
/ip dhcp-server
|
||||
add disabled=no interface=PPTP-Clients lease-time=1h name=dhcp2
|
||||
add disabled=no lease-time=1h name=dhcp3
|
||||
add disabled=no interface=ether5-Mosiur-PC lease-time=1h name=dhcp4
|
||||
add disabled=no interface=sfp1 lease-time=1h name=dhcp5
|
||||
add disabled=no lease-time=1h name=dhcp6
|
||||
/ip pool
|
||||
add name=dhcp_pool0 ranges=10.100.200.20-10.100.200.254
|
||||
add name=dhcp_pool1 ranges=10.100.200.20-10.100.200.254
|
||||
add name=Pool-Quar ranges=10.10.10.0/24
|
||||
add name=hs-pool-30 ranges=10.10.10.2-10.10.10.254
|
||||
/ip dhcp-server
|
||||
add address-pool=dhcp_pool1 disabled=no interface=LAN-Bridge name=dhcp1
|
||||
add address-pool=hs-pool-30 disabled=no interface=BR-VPN-QUAR lease-time=1h \
|
||||
name=dhcp7
|
||||
/ppp profile
|
||||
add bridge=BR-VPN-QUAR bridge-learning=yes dns-server=10.10.10.1 \
|
||||
local-address=10.10.10.1 name=prof-quar remote-address=Pool-Quar
|
||||
/interface bridge port
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether2-Public-Interface
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether3-Public-Interface
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether4-To-TestBed-SW
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether5-Mosiur-PC
|
||||
add bridge=Public_IP-WAN_Bridge interface=ether1-UPlink-Shahjadpur-3
|
||||
add bridge=LAN-Bridge interface=wlan1
|
||||
add bridge=LAN-Bridge interface=\
|
||||
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23
|
||||
add bridge=LAN-Bridge interface=ether7-LAN-Interface
|
||||
add bridge=LAN-Bridge interface=ether8-LAN-Interface
|
||||
add bridge=LAN-Bridge interface=ether10-LAN-Interface
|
||||
/ip firewall connection tracking
|
||||
set enabled=yes
|
||||
/interface l2tp-server server
|
||||
set default-profile=default
|
||||
/interface pptp-server server
|
||||
set authentication=pap,chap,mschap1,mschap2 default-profile=prof-quar \
|
||||
enabled=yes
|
||||
/interface wireless cap
|
||||
set interfaces=wlan1
|
||||
/ip address
|
||||
add address=163.53.151.2/29 interface=Public_IP-WAN_Bridge network=\
|
||||
163.53.151.0
|
||||
add address=10.100.200.1/24 interface=LAN-Bridge network=10.100.200.0
|
||||
add address=10.255.255.1/30 interface=\
|
||||
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23 network=10.255.255.0
|
||||
add address=10.12.13.2/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\
|
||||
10.12.13.0
|
||||
add address=172.16.10.1/24 interface=ether5-Mosiur-PC network=172.16.10.0
|
||||
add address=10.10.10.1/24 interface=BR-VPN-QUAR network=10.10.10.0
|
||||
add address=10.100.200.15/24 disabled=yes interface=\
|
||||
EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0
|
||||
add address=10.222.10.2/30 interface=gre-CHR network=10.222.10.0
|
||||
/ip arp
|
||||
add address=10.100.200.182 interface=LAN-Bridge mac-address=F4:A9:97:DD:9F:75
|
||||
/ip dhcp-server lease
|
||||
add address=10.100.200.182 client-id=1:f4:a9:97:dd:9f:75 mac-address=\
|
||||
F4:A9:97:DD:9F:75 server=dhcp1
|
||||
add address=10.100.200.252 client-id=1:6c:3b:6b:cf:d5:cc mac-address=\
|
||||
6C:3B:6B:CF:D5:CC server=dhcp1
|
||||
add address=10.100.200.175 mac-address=B4:2E:99:16:BC:4C server=dhcp1
|
||||
/ip dhcp-server network
|
||||
add address=10.5.50.0/24 comment="hotspot network" gateway=10.5.50.1
|
||||
add address=10.10.10.0/24 comment="hotspot network" gateway=10.10.10.1
|
||||
add address=10.100.200.0/24 dns-server=8.8.8.8 gateway=10.100.200.1
|
||||
add address=10.202.201.0/24 comment="hotspot network" gateway=10.202.201.1
|
||||
add address=172.16.10.0/24 comment="hotspot network" gateway=172.16.10.1
|
||||
/ip dns
|
||||
set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1
|
||||
/ip firewall address-list
|
||||
add address=10.100.200.0/24 list=DHCP-Pool
|
||||
add address=163.53.149.35 list=DHCP-Pool
|
||||
add address=10.100.200.175 list=10.100.200-Reach-ACL
|
||||
add address=10.100.200.182 list=10.100.200-Reach-ACL
|
||||
/ip firewall filter
|
||||
add action=accept chain=forward src-address=10.100.200.0/24
|
||||
add action=accept chain=input comment="Allow GRE" protocol=gre
|
||||
/ip firewall mangle
|
||||
add action=mark-routing chain=prerouting dst-address=118.67.220.34 dst-port=\
|
||||
1723 new-routing-mark=pptp-traffic passthrough=yes protocol=tcp \
|
||||
src-address-list=DHCP-Pool
|
||||
add action=mark-routing chain=prerouting dst-address=118.67.220.34 \
|
||||
new-routing-mark=pptp-traffic passthrough=yes protocol=gre \
|
||||
src-address-list=DHCP-Pool
|
||||
add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes \
|
||||
protocol=tcp tcp-flags=syn
|
||||
/ip firewall nat
|
||||
add action=src-nat chain=srcnat disabled=yes src-address=10.20.30.14 \
|
||||
to-addresses=103.209.42.105
|
||||
add action=accept chain=srcnat dst-address=118.67.220.34 dst-port=1723 \
|
||||
protocol=tcp
|
||||
add action=accept chain=srcnat dst-address=118.67.220.34 protocol=gre
|
||||
add action=src-nat chain=srcnat comment=\
|
||||
"NAT Rule for Reaching 10.100.200.X using iDRAC VPN" dst-address-list=\
|
||||
10.100.200-Reach-ACL src-address=10.12.13.1 to-addresses=10.100.200.1
|
||||
add action=masquerade chain=srcnat out-interface=Public_IP-WAN_Bridge \
|
||||
src-address-list="" to-addresses=163.53.151.2
|
||||
/ip route
|
||||
add check-gateway=ping distance=1 gateway=10.12.13.1 routing-mark=\
|
||||
pptp-traffic
|
||||
add check-gateway=ping distance=1 gateway=163.53.151.1
|
||||
add check-gateway=ping distance=1 dst-address=10.200.200.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add disabled=yes distance=10 dst-address=118.67.220.34/32 gateway=10.12.13.1
|
||||
add check-gateway=ping disabled=yes distance=1 dst-address=118.67.220.34/32 \
|
||||
gateway=10.12.13.1
|
||||
add distance=1 dst-address=192.168.10.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\
|
||||
10.12.13.1
|
||||
add check-gateway=ping distance=1 dst-address=192.168.25.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.104.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.105.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.106.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.109.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
add distance=1 dst-address=192.168.110.0/24 gateway=\
|
||||
gre-tunnel-Cloud-Wifi-iDRAC
|
||||
/ip service
|
||||
set telnet disabled=yes port=12312
|
||||
set ftp disabled=yes
|
||||
set www port=7980
|
||||
set ssh port=7900
|
||||
set api disabled=yes
|
||||
set api-ssl disabled=yes
|
||||
/lcd interface pages
|
||||
set 0 interfaces="sfp1,ether1-UPlink-Shahjadpur-3,ether2-Public-Interface,ethe\
|
||||
r3-Public-Interface,ether4-To-TestBed-SW,ether5-Mosiur-PC,ether6-LAN-Inter\
|
||||
face,ether7-LAN-Interface,ether8-LAN-Interface,ether9-To-Meeting-Room-From\
|
||||
-C15-To-A22-Testbed-C23,ether10-LAN-Interface"
|
||||
/ppp aaa
|
||||
set use-radius=yes
|
||||
/ppp secret
|
||||
add name=silvarno password=123Rashik456
|
||||
/radius
|
||||
add address=163.53.151.4 secret=testing123 service=ppp
|
||||
/system clock
|
||||
set time-zone-name=Asia/Dhaka
|
||||
/system identity
|
||||
set name=Cloud-Wifi
|
||||
/tool sniffer
|
||||
set file-limit=10000KiB file-name=Test-WAN-VPN-14-01-26 filter-interface=all \
|
||||
filter-port=47 memory-limit=1000KiB
|
||||
/user aaa
|
||||
set use-radius=yes
|
||||
Reference in New Issue
Block a user