[center@MikroTik] > /export compact jun/04/2014 15:11:47 by RouterOS 6.13 software id = -
/interface bridge add admin-mac=::::: auto-mac=no l2mtu=1598 name=bridge-local
/interface ethernet set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether6 ] name=ether6-master-local
set [ find default-name=ether7 ] master-port=ether6-master-local name=ether7-slave-local
set [ find default-name=ether8 ] master-port=ether6-master-local name=ether8-slave-local
set [ find default-name=ether9 ] master-port=ether6-master-local name=ether9-slave-local
set [ find default-name=ether10 ] master-port=ether6-master-local name=ether10-slave-local
/ip neighbor discovery set ether1-gateway discover=no
/interface wireless security-profiles add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=CenterYES_security supplicant-identity="" wpa2-pre-shared-key=P@ssw0rd!QAZxsw2
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=free_inet supplicant-identity="" wpa2-pre-shared-key=12345678
/interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-ht-above country=russia disabled=no distance=indoors l2mtu=2290 mode=ap-bridge periodic-calibration=enabled security-profile=CenterYES_security ssid=CenterYes_ tx-power=15 tx-power-mode=all-rates-fixed wireless-protocol=802.11
add disabled=no l2mtu=2290 mac-address=4E:5E:0C:2C:01:C7 master-interface=wlan1 name=wlan2 security-profile=free_inet ssid=FreeYES wds-cost-range=0 wds-default-cost=0
/ip hotspot profile add hotspot-address=192.168.2.1 login-by=http-chap,trial name=hsprof1 trial-uptime=0s/0s
/ip hotspot user profile set [ find default=yes ] idle-timeout=none keepalive-timeout=1h2m mac-cookie-timeout=3d rate-limit=1m/1m shared-users=unlimited
/ip ipsec proposal set [ find default=yes ] enc-algorithms=3des
/ip pool add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.2.2-192.168.2.254
add name=hs-pool-15 ranges=10.5.50.2-10.5.50.254
/ip dhcp-server add address-pool=default-dhcp disabled=no interface=bridge-local name=default
add address-pool=dhcp_pool1 disabled=no interface=wlan2 name=dhcp1
/ip hotspot add address-pool=dhcp_pool1 disabled=no interface=wlan2 name=hotspot1 profile=hsprof1
/port set 0 name=serial0
/interface pppoe-client add ac-name="" add-default-route=yes allow=pap,chap default-route-distance=1 dial-on-demand=no disabled=no interface=ether3 keepalive-timeout=60 max-mru=1480 max-mtu=1480 mrru= disabled name=pppoe-out1 password=******** profile=default service-name="" use-peer-dns=yes user=*********
/interface bridge port add bridge=bridge-local interface=ether2
add bridge=bridge-local disabled=yes interface=ether3
add bridge=bridge-local interface=ether4
add bridge=bridge-local interface=ether5
add bridge=bridge-local interface=ether6-master-local
add bridge=bridge-local interface=sfp1
add bridge=bridge-local interface=wlan1
/ip address add address=192.168.88.1/24 comment="default configuration" interface=bridge-local network=192.168.88.0
add address=192.168.2.1/24 interface=wlan2 network=192.168.2.0
/ip dhcp-client add comment="default configuration" dhcp-options=hostname,clientid disabled=no interface=ether3
/ip dhcp-server network add address=192.168.2.0/24 comment="hotspot network" dns-server=8.8.8.8 gateway=192.168.2.1
add address=192.168.88.0/24 comment="default configuration" dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns set allow-remote-requests=yes servers=8.8.8.8
/ip dns static add address=192.168.88.1 name=router
/ip firewall filter add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=drop chain=input dst-port=53 protocol=tcp
add action=drop chain=input disabled=yes dst-port=53 protocol=udp
add chain=forward protocol=udp
add chain=input protocol=udp
add chain=output protocol=udp
add chain=input protocol=tcp
add chain=forward protocol=tcp
add chain=input protocol=tcp
add chain=input protocol=igmp
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add chain=forward comment="default configuration" connection-state=established
add chain=forward comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=ether3
add action=drop chain=forward comment="default configuration" connection-state=invalid
add action=drop chain=input src-address=116.8.0.0/14
/ip firewall nat add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="default configuration" out-interface=pppoe-out1
add action=masquerade chain=srcnat comment="masquerade hotspot network" src-address=192.168.2.0/24 to-addresses=0.0.0.0
/ip firewall service-port set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
/ip hotspot user add name=admin
/ip service set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp set allow-disable-external-interface=no
/lcd interface set sfp1 interface=sfp1
set ether1-gateway interface=ether1-gateway
set ether2 interface=ether2
set ether3 interface=ether3
set ether4 interface=ether4
set ether5 interface=ether5
set ether6-master-local interface=ether6-master-local
set ether7-slave-local interface=ether7-slave-local
set ether8-slave-local interface=ether8-slave-local
set ether9-slave-local interface=ether9-slave-local
set ether10-slave-local interface=ether10-slave-local
set wlan1 interface=wlan1
/lcd interface pages set 0 interfaces=sfp1,ether1-gateway,ether2,ether3,ether4,ether5,ether6-master-local,ether7-slave-local,ether8-slave-local,ether9-slave-local,ether10-slave-local,wlan1
/system clock manual set time-zone=+03:00
/system watchdog set no-ping-delay=0ms watchdog-timer=no
/tool mac-server set [ find default=yes ] disabled=yes
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=sfp1
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox set [ find default=yes ] disabled=yes
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=sfp1
add interface=wlan1
add interface=bridge-local
