186 lines
8.2 KiB
Plaintext
186 lines
8.2 KiB
Plaintext
# dec/26/1971 13:52:20 by RouterOS 6.47.7
|
|
# software id = S2NZ-H089
|
|
#
|
|
# model = 2011UiAS
|
|
# serial number = 77AD072033A2
|
|
/interface bridge
|
|
add name=Public-IP-Test-Bridge
|
|
add name=TestBed-Tunnel-Bridge
|
|
/interface ethernet
|
|
set [ find default-name=ether2 ] name=ether2-To-TB-BDCOM-1-G0/1
|
|
set [ find default-name=ether3 ] name=ether3-To-TB-BDCOM-2
|
|
set [ find default-name=ether8 ] advertise="10M-half,10M-full,100M-half,100M-f\
|
|
ull,1000M-half,1000M-full,2500M-full,5000M-full,10000M-full" name=\
|
|
ether8-iDRAC-MGT-Dlink
|
|
set [ find default-name=ether9 ] name=ether9-From-Shahjadpur-3-Via-Dlink-2
|
|
/interface eoip
|
|
add local-address=118.67.214.225 mac-address=02:55:2F:92:2A:E5 mtu=1500 name=\
|
|
eoip-tunnel-for-Cloud-RTR remote-address=118.67.220.34 tunnel-id=1001
|
|
/interface gre
|
|
add local-address=118.67.214.225 name=GRE-TUNNEL-FOR-NVME-NETAPP \
|
|
remote-address=118.67.220.34
|
|
/interface vlan
|
|
add comment="server mgmt" interface=ether8-iDRAC-MGT-Dlink name=104 vlan-id=\
|
|
104
|
|
add comment=IDRAC interface=ether8-iDRAC-MGT-Dlink name=VLAN-105-iDRAC-DELL \
|
|
vlan-id=105
|
|
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-106-External-Traffic \
|
|
vlan-id=106
|
|
add interface=ether2-To-TB-BDCOM-1-G0/1 name=\
|
|
VLAN-107-Interal-Traffic-Admin-Traffic vlan-id=107
|
|
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-109-Floating-Network-1 \
|
|
vlan-id=109
|
|
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-110-Floating-Network-2 \
|
|
vlan-id=110
|
|
add interface=ether2-To-TB-BDCOM-1-G0/1 name=\
|
|
VLAN-111-Floating-Network-3-Public-IP vlan-id=111
|
|
add interface=ether8-iDRAC-MGT-Dlink name=vlan-101-SW-MGT vlan-id=101
|
|
/interface bonding
|
|
add disabled=yes mode=balance-xor name=bonding-Testbed-Switchport-Aggregation \
|
|
slaves=ether2-To-TB-BDCOM-1-G0/1,ether3-To-TB-BDCOM-2
|
|
/interface vlan
|
|
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
|
|
VLAN-103-External-Traffic vlan-id=103
|
|
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
|
|
VLAN-106-Tanet-Traffic vlan-id=106
|
|
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
|
|
VLAN1-112-Floating-Network-4 vlan-id=112
|
|
/interface list
|
|
add name=WAN
|
|
add name=LAN
|
|
/interface wireless security-profiles
|
|
set [ find default=yes ] supplicant-identity=MikroTik
|
|
/ip dhcp-server option
|
|
add code=66 name=pxe-server value="'192.168.104.118'"
|
|
add code=67 name=pxe-file value="'pxelinux.0'"
|
|
/ip dhcp-server option sets
|
|
add name=maas-pxe options=pxe-server,pxe-file
|
|
/ip ipsec profile
|
|
add enc-algorithm=aes-256,aes-192,aes-128,3des hash-algorithm=sha256 name=\
|
|
IPKA
|
|
add dh-group=modp2048 enc-algorithm=aes-256 hash-algorithm=sha256 name=1
|
|
/ip ipsec peer
|
|
add address=103.120.192.6/32 local-address=118.67.214.225 name=\
|
|
Peer-To-Ibrahim-Bhai-Project profile=1
|
|
/ip ipsec proposal
|
|
set [ find default=yes ] lifetime=1h30m pfs-group=modp2048
|
|
add auth-algorithms=sha256 enc-algorithms=\
|
|
aes-256-cbc,aes-256-gcm,aes-192-cbc,aes-128-cbc name=ike-phase-1 \
|
|
pfs-group=modp2048
|
|
/ip pool
|
|
add name=L2VPN-Pool ranges=10.150.169.1-10.150.169.10
|
|
/ppp profile
|
|
add local-address=10.150.170.1 name=L2TP-VPN-Profile remote-address=\
|
|
L2VPN-Pool
|
|
/interface bridge port
|
|
add bridge=TestBed-Tunnel-Bridge interface=vlan-101-SW-MGT
|
|
add bridge=TestBed-Tunnel-Bridge interface=eoip-tunnel-for-Cloud-RTR
|
|
add bridge=TestBed-Tunnel-Bridge interface=VLAN-105-iDRAC-DELL
|
|
add bridge=TestBed-Tunnel-Bridge interface=104
|
|
add bridge=TestBed-Tunnel-Bridge interface=VLAN-109-Floating-Network-1
|
|
add bridge=TestBed-Tunnel-Bridge interface=VLAN-106-External-Traffic
|
|
add bridge=TestBed-Tunnel-Bridge interface=VLAN-110-Floating-Network-2
|
|
/ip neighbor discovery-settings
|
|
set discover-interface-list=!dynamic
|
|
/interface l2tp-server server
|
|
set default-profile=L2TP-VPN-Profile enabled=yes ipsec-secret="cl0ud\$#@534" \
|
|
use-ipsec=yes
|
|
/interface list member
|
|
add interface=ether1 list=WAN
|
|
add list=LAN
|
|
/ip address
|
|
add address=192.168.110.1/24 comment="LB- network-vlan-110" interface=\
|
|
VLAN-110-Floating-Network-2 network=192.168.110.0
|
|
add address=118.67.214.225/29 comment="public network-vlan-103" interface=104 \
|
|
network=118.67.214.224
|
|
add address=192.168.104.1/24 comment="server mgmt-vlan-104" interface=104 \
|
|
network=192.168.104.0
|
|
add address=172.21.1.78/30 interface=ether9-From-Shahjadpur-3-Via-Dlink-2 \
|
|
network=172.21.1.76
|
|
add address=192.168.105.1/24 comment=IDRAC-vlan-105 interface=\
|
|
VLAN-105-iDRAC-DELL network=192.168.105.0
|
|
add address=192.168.106.1/24 comment=tenant-vlan-106 interface=\
|
|
VLAN-106-External-Traffic network=192.168.106.0
|
|
add address=192.168.107.1/24 comment="admin/internal IP-107-Geneve" \
|
|
interface=VLAN-107-Interal-Traffic-Admin-Traffic network=192.168.107.0
|
|
add address=192.168.103.1/24 comment="public network-vlan-103" interface=\
|
|
VLAN-103-External-Traffic network=192.168.103.0
|
|
add address=192.168.109.1/24 comment="floating network-vlan-109-temp" \
|
|
interface=VLAN-109-Floating-Network-1 network=192.168.109.0
|
|
add address=103.120.192.1/28 comment="floating ip-vlan-111" interface=\
|
|
VLAN-111-Floating-Network-3-Public-IP network=103.120.192.0
|
|
add address=192.168.112.1/24 interface=VLAN1-112-Floating-Network-4 network=\
|
|
192.168.112.0
|
|
add address=10.200.200.1/24 interface=vlan-101-SW-MGT network=10.200.200.0
|
|
add address=172.16.1.1/24 interface=ether6 network=172.16.1.0
|
|
add address=118.67.221.217/29 interface=104 network=118.67.221.216
|
|
add address=10.11.14.2/30 interface=GRE-TUNNEL-FOR-NVME-NETAPP network=\
|
|
10.11.14.0
|
|
/ip arp
|
|
add address=192.168.112.183 interface=VLAN1-112-Floating-Network-4 \
|
|
mac-address=FA:16:3E:0C:47:90
|
|
/ip dhcp-server network
|
|
add address=192.168.104.0/24 dhcp-option-set=maas-pxe
|
|
/ip firewall filter
|
|
add action=accept chain=input dst-port=500 protocol=udp
|
|
add action=accept chain=input dst-port=4500 protocol=udp
|
|
add action=accept chain=input protocol=ipsec-esp
|
|
add action=accept chain=forward dst-address=192.168.106.0/24 src-address=\
|
|
192.168.104.0/24
|
|
add action=accept chain=forward dst-address=192.168.104.0/24 src-address=\
|
|
192.168.106.0/24
|
|
/ip firewall nat
|
|
add action=accept chain=srcnat dst-address=192.168.20.0/24
|
|
add action=accept chain=srcnat dst-address=10.10.50.0/24 src-address=\
|
|
192.168.104.0/24
|
|
add action=src-nat chain=srcnat src-address=192.168.104.0/24 to-addresses=\
|
|
118.67.214.225
|
|
add action=src-nat chain=srcnat src-address=10.10.10.0/24 src-address-list="" \
|
|
to-addresses=118.67.214.225
|
|
add action=src-nat chain=srcnat src-address=10.150.169.0/24 src-address-list=\
|
|
"" to-addresses=118.67.214.225
|
|
add action=src-nat chain=srcnat src-address=192.168.111.0/24 to-addresses=\
|
|
118.67.214.225
|
|
add action=src-nat chain=srcnat src-address=192.168.109.0/24 to-addresses=\
|
|
118.67.214.225
|
|
add action=src-nat chain=srcnat src-address=192.168.110.0/24 to-addresses=\
|
|
118.67.214.225
|
|
add action=accept chain=srcnat dst-address=192.168.106.0/24 src-address=\
|
|
192.168.104.0/24
|
|
add action=accept chain=srcnat dst-address=192.168.104.0/24 src-address=\
|
|
192.168.106.0/24
|
|
add action=src-nat chain=srcnat src-address=192.168.106.0/24 to-addresses=\
|
|
118.67.214.225
|
|
/ip ipsec identity
|
|
add peer=Peer-To-Ibrahim-Bhai-Project secret="@sdf123\$"
|
|
/ip ipsec policy
|
|
add dst-address=10.10.50.0/24 peer=Peer-To-Ibrahim-Bhai-Project proposal=\
|
|
ike-phase-1 sa-dst-address=103.120.192.6 sa-src-address=118.67.214.225 \
|
|
src-address=192.168.104.0/24 tunnel=yes
|
|
/ip route
|
|
add distance=1 gateway=172.21.1.77
|
|
add check-gateway=ping disabled=yes distance=1 dst-address=10.90.90.90/32 \
|
|
gateway=ether8-iDRAC-MGT-Dlink
|
|
add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\
|
|
10.11.14.1
|
|
add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\
|
|
10.11.14.1
|
|
/ip service
|
|
set telnet disabled=yes
|
|
set ftp disabled=yes
|
|
set www port=8090
|
|
set ssh port=7900
|
|
set api disabled=yes
|
|
set winbox port=58923
|
|
set api-ssl disabled=yes
|
|
/ipv6 address
|
|
add address=2406:f100:9:100::2/126 advertise=no interface=\
|
|
ether9-From-Shahjadpur-3-Via-Dlink-2
|
|
/ppp secret
|
|
add name=L2TP-CLOUD password="cl0ud\$#@534e" profile=L2TP-VPN-Profile \
|
|
service=l2tp
|
|
/system identity
|
|
set name=Cloud-RND
|
|
/system logging
|
|
add topics=debug
|