R1 config:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 |
# nov/05/2019 10:14:51 by RouterOS 6.45.7 # software id = hidden # # model = CCR1009-7G-1C-1S+ # serial number = hidden /interface bridge add name=bridge1 pvid=999 vlan-filtering=yes /interface vlan add interface=bridge1 name=MGMT vlan-id=999 add interface=bridge1 name=VLAN10 vlan-id=10 add interface=bridge1 name=VLAN20 vlan-id=20 add interface=bridge1 name=VLAN30 vlan-id=30 /interface list add name=ISP add name=LAN_VLAN20 add name=MGM add name=LAN_VLAN30 /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip pool add name=DHCP_VLAN20 ranges=192.168.20.10-192.168.20.35 add name=DHCP_VLAN30 ranges=192.168.30.10-192.168.30.254 /ip dhcp-server add address-pool=DHCP_VLAN20 disabled=no interface=VLAN20 lease-time=3d10m \ name=SERVER_VLAN20 add address-pool=DHCP_VLAN30 disabled=no interface=VLAN30 lease-time=3d10m \ name=SERVER_VLAN30 /interface bridge port add bridge=bridge1 hw=no interface=sfp-sfpplus1 pvid=999 add bridge=bridge1 hw=no interface=combo1 pvid=10 add bridge=bridge1 hw=no interface=ether2 pvid=20 add bridge=bridge1 hw=no interface=ether1 pvid=10 add bridge=bridge1 hw=no interface=ether7 pvid=999 add bridge=bridge1 hw=no interface=ether4 pvid=30 /interface bridge vlan add bridge=bridge1 tagged=sfp-sfpplus1,bridge1 untagged=combo1,ether1 \ vlan-ids=10 add bridge=bridge1 tagged=sfp-sfpplus1,bridge1 untagged=ether2 vlan-ids=20 add bridge=bridge1 tagged=sfp-sfpplus1,bridge1 untagged=ether7 vlan-ids=999 add bridge=bridge1 tagged=ether3,bridge1 untagged=ether4 vlan-ids=30 /interface list member add interface=VLAN10 list=ISP add interface=VLAN20 list=LAN_VLAN20 add interface=MGMT list=MGM add interface=VLAN30 list=LAN_VLAN30 /ip address add address=192.168.99.1/24 interface=MGMT network=192.168.99.0 add address=192.168.20.1/24 interface=VLAN20 network=192.168.20.0 add address=192.168.30.1/24 interface=VLAN30 network=192.168.30.0 /ip dhcp-client add dhcp-options=hostname,clientid disabled=no interface=VLAN10 /ip dhcp-server lease add address=192.168.20.34 client-id=1:4:d9:f5:aa:41:84 mac-address=\ 04:D9:F5:AA:41:84 server=SERVER_VLAN20 /ip dhcp-server network add address=192.168.20.0/24 gateway=192.168.20.1 add address=192.168.30.0/24 gateway=192.168.30.1 /ip firewall filter add action=accept chain=input dst-address=192.168.20.0/24 src-address=\ 192.168.30.0/24 add action=accept chain=forward dst-address=192.168.99.0/24 src-address=\ 192.168.30.0/24 add action=reject chain=forward dst-address=192.168.99.0/24 reject-with=\ icmp-network-unreachable src-address=192.168.20.0/24 add action=reject chain=input dst-address=192.168.30.0/24 reject-with=\ icmp-network-unreachable src-address=192.168.20.0/24 /ip firewall nat add action=masquerade chain=srcnat out-interface-list=ISP /ip service set telnet disabled=yes set ftp disabled=yes set www disabled=yes set winbox address=192.168.99.0/24 /system clock set time-zone-name=Europe/Moscow /system identity set name=Choice-CORE |
SW1 config:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 |
# jan/02/1970 15:28:01 by RouterOS 6.45.7 # software id = hidden # # model = CRS326-24G-2S+ # serial number = hidden /interface bridge add name=bridge1 pvid=999 vlan-filtering=yes /interface vlan add interface=bridge1 name=MGMT vlan-id=999 /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip hotspot profile set [ find default=yes ] html-directory=flash/hotspot /interface bridge port add bridge=bridge1 hw=no interface=sfp-sfpplus1 pvid=999 add bridge=bridge1 hw=no interface=ether1 pvid=20 add bridge=bridge1 hw=no interface=ether2 pvid=20 add bridge=bridge1 hw=no interface=ether3 pvid=20 add bridge=bridge1 hw=no interface=ether4 pvid=20 add bridge=bridge1 hw=no interface=ether5 pvid=20 add bridge=bridge1 hw=no interface=ether6 pvid=20 add bridge=bridge1 hw=no interface=ether7 pvid=20 add bridge=bridge1 hw=no interface=ether8 pvid=20 add bridge=bridge1 hw=no interface=ether9 pvid=20 add bridge=bridge1 hw=no interface=ether10 pvid=20 add bridge=bridge1 hw=no interface=ether11 pvid=20 add bridge=bridge1 hw=no interface=ether12 pvid=20 add bridge=bridge1 hw=no interface=ether13 pvid=20 add bridge=bridge1 hw=no interface=ether14 pvid=20 add bridge=bridge1 hw=no interface=ether15 pvid=20 add bridge=bridge1 hw=no interface=ether16 pvid=20 add bridge=bridge1 hw=no interface=ether17 pvid=20 add bridge=bridge1 hw=no interface=ether18 pvid=20 add bridge=bridge1 hw=no interface=ether19 pvid=20 add bridge=bridge1 hw=no interface=ether20 pvid=20 add bridge=bridge1 hw=no interface=ether21 pvid=20 add bridge=bridge1 hw=no interface=ether22 pvid=20 add bridge=bridge1 hw=no interface=ether23 pvid=20 add bridge=bridge1 hw=no interface=ether24 pvid=20 /interface bridge vlan add bridge=bridge1 tagged=sfp-sfpplus1,bridge1 vlan-ids=999 add bridge=bridge1 tagged=sfp-sfpplus1,bridge1 untagged="ether1,ether2,ether3,\ ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,\ ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,et\ her23,ether24" vlan-ids=20 /ip address add address=192.168.99.2/24 interface=MGMT network=192.168.99.0 /ip route add distance=1 gateway=192.168.99.1 /ip service set telnet disabled=yes set ftp disabled=yes set www disabled=yes set winbox address=192.168.99.0/24 /system identity set name=Choice-sw /system routerboard settings set boot-os=router-os |
