Jump to content

SUBIECTE NOI
« 1 / 5 »
RSS
Casa pe structura de lemn cu form...

Șeful Renault-Nissan a fost ...

Conexiune

Suma incorecta la plata amenzii
 Vibratii volan in mers

Pareri Farmacia Tei.

EMUI 9

Cablu Dali Zensor 3
 windows 10 sfaturi si opini

Star-Light 32DM3500

Pareri setari complexe user accou...

ATS DIY
 Recomandare casti 200 Ron

Plata PFA

Conectare microfon (cu jack6,3) l...

Sfaturi cumparare laptop + pareri...
 

Configurare Nat Mikrotik

- - - - -
  • Please log in to reply
9 replies to this topic

#1
NHT

NHT

    Junior

  • Grup: Members
  • Posts: 170
  • Înscris: 08.08.2006
Salut,

Am un Mikrotik pe care l-am folosit mai demult ca AP si acum vreau sa-l dau cuiva sa-l foloseasca ca router.
Am uitat insa cum l-am setat acum cativa ani si nu pot sa-l fac sa mearga.

Se conecteaza prin pppoe (ping wan, dwld firmware), functioneaza ca dhcp server (ping dg) dar nu functioneaza nat-ul (asta e parerea mea).
Rog pe cineva care stie ROS sa se uite pe configuratie si sa ma lumineze daca se poate.

in sectiunea de nat prima linie e default (din quick set - nu fct) iar celelalte doua sunt gasite de mine pe internet dar nu merge nici cu ele.
Multumesc anticipat.



[admin@MikroTik] > export compact
# feb/12/2018 17:56:06 by RouterOS 6.41.2
# software id = VYRQ-KTYC
#
# model = 951G-2HnD
# serial number = 4xxxx
/interface bridge
add admin-mac=D4:CA:6D:DA:CF:D5 auto-mac=no fast-forward=no mtu=1500 name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] name=ether3-slave-local
set [ find default-name=ether4 ] name=ether4-slave-local
set [ find default-name=ether5 ] name=ether5-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce country=Romania disabled=no distance=indoors frequency=2432 mode=ap-bridge ssid=N wireless-protocol=802.11
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1-gateway keepalive-timeout=disabled name=pppoe-out1 password=xxx use-peer-dns=yes user=xxx
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
add name=WAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=extensionthree wpa2-pre-shared-key=extensionthree
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=dhcp ranges=192.168.88.100-192.168.88.200
/ip dhcp-server
add address-pool=dhcp authoritative=after-2sec-delay disabled=no interface=bridge-local lease-time=3d name=default
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/tool user-manager customer
set admin access=own-routers,own-users,own-profiles,own-limits,config-payment-gw
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local hw=no interface=wlan1
add bridge=bridge-local interface=ether3-slave-local
add bridge=bridge-local interface=ether4-slave-local
add bridge=bridge-local interface=ether5-slave-local
/interface list member
add interface=ether1-gateway list=discover
add interface=ether2-master-local list=discover
add interface=ether3-slave-local list=discover
add interface=ether4-slave-local list=discover
add interface=ether5-slave-local list=discover
add interface=bridge-local list=discover
add interface=ether2-master-local list=mactel
add interface=ether3-slave-local list=mactel
add interface=ether2-master-local list=mac-winbox
add interface=ether4-slave-local list=mactel
add interface=ether3-slave-local list=mac-winbox
add interface=ether5-slave-local list=mactel
add interface=ether4-slave-local list=mac-winbox
add interface=wlan1 list=mactel
add interface=ether5-slave-local list=mac-winbox
add interface=bridge-local list=mactel
add interface=wlan1 list=mac-winbox
add interface=bridge-local list=mac-winbox
add list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.88.254/24 comment="default configuration" interface=ether2-master-local network=192.168.88.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=ether1-gateway
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" dns-server=192.168.88.1 gateway=192.168.88.254 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=forward comment="default configuration" connection-state=established
add action=accept chain=forward comment="default configuration" connection-state=related
add action=drop chain=forward comment="default configuration" connection-state=invalid
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface-list=!mactel
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" out-interface=ether1-gateway out-interface-list=WAN
add action=masquerade chain=scrnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=ether1-gateway to-addresses=0.0.0.0
/ip route
add disabled=yes distance=1 gateway=ether1-gateway
/ip service
set api disabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge-local type=internal
add interface=pppoe-out1 type=external
/system clock
set time-zone-name=Europe/Bucharest
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set pppoe-out1 disabled=yes display-time=5s
set bridge-local disabled=yes display-time=5s
set wlan1 disabled=yes display-time=5s
set ether1-gateway disabled=yes display-time=5s
set ether2-master-local disabled=yes display-time=5s
set ether3-slave-local disabled=yes display-time=5s
set ether4-slave-local disabled=yes display-time=5s
set ether5-slave-local disabled=yes display-time=5s
/system leds
set 0 interface=wlan1
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
/tool user-manager database
set db-path=user-manager1
[admin@MikroTik] >


sau problema e la ip route cu acel disable=yes ?
care sunt comenzile pt vizualizarea rutelor?

Edited by NHT, 13 February 2018 - 08:45.


#2
ct03nut

ct03nut

    Active Member

  • Grup: Senior Members
  • Posts: 2,244
  • Înscris: 29.06.2006
Da-i un factory defaults si fa-i upgrade la 6.41.x deoarece de la versiunea asta nu mai exista un master-port, el default are NAT, pleaca de la un start fresh. Chiar nu vad rostul pentru cmd line cand ai WinBox, da, stiu ca suna neprofesional dar nu are bash sau alt shell de linux si pentru necunoscatori, mai rau se leaga la cap.

Deci, factory default, seteaza IP-urile pentru wan si lan (daca nu iti place clasa default) si aia e.

Edited by ct03nut, 13 February 2018 - 09:12.


#3
NHT

NHT

    Junior

  • Grup: Members
  • Posts: 170
  • Înscris: 08.08.2006
prima oara i-am dat factory default din jumperul exterior si apoi upgrade la 6.41.2 dar nu a mers.

#4
ndor

ndor

    Active Member

  • Grup: Senior Members
  • Posts: 2,985
  • Înscris: 21.04.2005
Si folosesti Quick set pentru configurare . E mult mai simplu
System -> Reset cofiguration
Inainte de a face upgrade de OS vezi daca e nevoie sa faci upgrade de FW.
System -> Routerboard -> Upgrade si apoi Reboot

Edited by ndor, 13 February 2018 - 09:21.


#5
ct03nut

ct03nut

    Active Member

  • Grup: Senior Members
  • Posts: 2,244
  • Înscris: 29.06.2006
Quick pentru o configuratie aproape default e ok, daca vrei ceva mai avansat, iti da peste cap configuratia. Ce mikrotik e ?

#6
NHT

NHT

    Junior

  • Grup: Members
  • Posts: 170
  • Înscris: 08.08.2006
# model = 951G-2HnD

ok, o sa ma uit diseara si revin cu update. multumesc.

#7
ct03nut

ct03nut

    Active Member

  • Grup: Senior Members
  • Posts: 2,244
  • Înscris: 29.06.2006
Pai ia-o pas cu pas, pune serverul dns 8.8.8.8 pe clientii din spatele NAT si vezi daca raspund adresele.

#8
ndor

ndor

    Active Member

  • Grup: Senior Members
  • Posts: 2,985
  • Înscris: 21.04.2005
In quick set il pui in mod Home AP aoi in partea dreapta bifezi pppoe si completezi campurile goale .
La Local Network bifezi NAT

#9
NHT

NHT

    Junior

  • Grup: Members
  • Posts: 170
  • Înscris: 08.08.2006
din router merge pingul in wan - am facut download la ROS nu la FW cum gresit am scris sus. o sa fac upgrade si la FW si apoi o sa incerc quick-set-ul. randul trecut am facut in CLI si am scris asta undeva doar ca nu mai gasesc documentul.

#10
NHT

NHT

    Junior

  • Grup: Members
  • Posts: 170
  • Înscris: 08.08.2006
A mers dupa upgrade.ul la firmware. Multumesc mult pentru sugestii.

Anunturi


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Forumul Softpedia foloseste "cookies" pentru a imbunatati experienta utilizatorilor Accept
Pentru detalii si optiuni legate de cookies si datele personale, consultati Politica de utilizare cookies si Politica de confidentialitate