Connecting 2 mikrotik routers with 2 WAN and 2 subnets

ganekon · September 20, 2015, 3:15pm

Hello, could you guys please help me with this settings:

I have site 1:
eth1 = WAN1
eth2 = LAN1 192.168.88.0/24
eth3 = WIFI1
eth4 = LAN connected to site 2 via UTP

Site 2:
eth2 = WAN2
eth3 = LAN2 192.168.40.0/24 with WIFI connected
eth4 = LAN connected to site 1 via UTP

Both site are on the same place; different floor. Connected to each other on eth4

My question is, how to connect between those 2 sites so they can communicate each other?
And I need each site to connect to their own WAN.
I will follow more efficient config from you guys to implement, such as load balancing if any.

Here’s my config:
Site 1:

[admin@MikroTik-XXX] > /export

sep/20/2015 14:18:40 by RouterOS 6.19

software id = QJAZ-B000

/interface bridge
add disabled=yes name=bridge1

/interface ethernet
set [ find default-name=ether3 ] master-port=ether2

/ip pool
add name=dhcp ranges=192.168.88.11-192.168.88.100

/ip dhcp-server
add add-arp=yes address-pool=dhcp disabled=no interface=ether2 lease-time=1h
name=dhcp1

/port
set 0 name=serial0

/interface pppoe-client
add ac-name=“” add-default-route=yes allow=pap,chap,mschap1,mschap2
default-route-distance=1 dial-on-demand=no disabled=no interface=ether1
keepalive-timeout=60 max-mru=1480 max-mtu=1480 mrru=disabled name=
pppoe-out1 password=****** profile=default service-name=
"" use-peer-dns=yes user=*****

/queue simple
add name=queue1 target=192.168.88.1/32
add max-limit=1M/1M name=queue2 target=192.168.88.2/32
add max-limit=1M/1M name=queue3 target=192.168.88.3/32
add max-limit=1M/1M name=queue4 target=192.168.88.4/32
add name=queue5 target=192.168.88.5/32
add max-limit=1M/1M name=queue18 target=192.168.88.18/32
add max-limit=1M/1M name=queue6 target=192.168.88.6/32
add max-limit=1M/1M name=queue7 target=192.168.88.7/32
add max-limit=1M/1M name=queue8 target=192.168.88.8/32
add max-limit=1M/1M name=queue9 target=192.168.88.9/32
add max-limit=1M/1M name=queue10 target=192.168.88.10/32
add max-limit=10M/10M name=queue11 target=192.168.88.11/32
add max-limit=1M/1M name=queue12 target=192.168.88.12/32
add max-limit=1M/1M name=queue13 target=192.168.88.13/32
add max-limit=5M/5M name=queue14 target=192.168.88.14/32
add max-limit=3M/3M name=queue15 target=192.168.88.15/32
add max-limit=5M/5M name=queue16 target=192.168.88.16/32
add max-limit=1M/1M name=queue17 target=192.168.88.17/32
add max-limit=1M/1M name=queue19 target=192.168.88.19/32
add max-limit=1M/1M name=queue20 target=192.168.88.20/32
add max-limit=1M/1M name=queue21 target=192.168.88.21/32
add max-limit=2M/2M name=queue22 target=192.168.88.22/32
add max-limit=1M/1M name=queue23 target=192.168.88.23/32
add max-limit=1M/1M name=queue24 target=192.168.88.24/32
add max-limit=1M/1M name=queue25 target=192.168.88.25/32
add name=queue26 target=192.168.88.26/32
add max-limit=1M/1M name=queue27 target=192.168.88.27/32
add max-limit=1M/1M name=queue28 target=192.168.88.28/32
add max-limit=1M/1M name=queue29 target=192.168.88.29/32
add max-limit=1M/1M name=queue30 target=192.168.88.30/32
add max-limit=1M/1M name=queue31 target=192.168.88.31/32
add max-limit=1M/1M name=queue32 target=192.168.88.32/32
add max-limit=1M/1M name=queue33 target=192.168.88.33/32
add max-limit=1M/1M name=queue34 target=192.168.88.34/32
add max-limit=1M/1M name=queue35 target=192.168.88.35/32
add max-limit=1M/1M name=queue36 target=192.168.88.36/32
add max-limit=1M/1M name=queue37 target=192.168.88.37/32
add max-limit=1M/1M name=queue38 target=192.168.88.38/32
add max-limit=1M/1M name=queue39 target=192.168.88.39/32
add max-limit=1M/1M name=queue40 target=192.168.88.40/32
add max-limit=1M/1M name=queue41 target=192.168.88.41/32
add max-limit=1M/1M name=queue42 target=192.168.88.42/32
add max-limit=1M/1M name=queue43 target=192.168.88.43/32
add max-limit=1M/1M name=queue44 target=192.168.88.44/32
add max-limit=1M/1M name=queue45 target=192.168.88.45/32
add name=queue46 target=192.168.88.46/32
add max-limit=1M/1M name=queue47 target=192.168.88.47/32
add max-limit=1M/1M name=queue48 target=192.168.88.48/32
add max-limit=1M/1M name=queue49 target=192.168.88.49/32
add max-limit=1M/1M name=queue50 target=192.168.88.50/32

/interface bridge port
add bridge=bridge1 interface=ether2

/ip address
add address=192.168.88.1/24 interface=ether2 network=192.168.88.0
add address=192.168.11.1/24 interface=ether4 network=192.168.11.0

/ip dhcp-server lease
add address=192.168.88.11 always-broadcast=yes client-id=1:38:2c:4a:b9:80:69
mac-address=38:2C:4A:B9:80:69 server=dhcp1
add address=192.168.88.46 client-id=1:ac:18:26:a4:48:38 mac-address=
AC:18:26:A4:48:38 server=dhcp1
add address=192.168.88.14 client-id=1:40:e2:30:a3:b3:f9 mac-address=
40:E2:30:A3:B3:F9 server=dhcp1
add address=192.168.88.15 client-id=1:0:c2:c6:5a:db:9c mac-address=
00:C2:C6:5A:DB:9C server=dhcp1
add address=192.168.88.37 client-id=1:cc:c3:ea:d2:1c:33 mac-address=
CC:C3:EA:D2:1C:33 server=dhcp1
add address=192.168.88.29 client-id=1:cc:3a:61:c5> > a1 mac-address=
CC:3A:61:C5:0B:A1 server=dhcp1
add address=192.168.88.43 mac-address=74:51:BA:B4:DE:A1 server=dhcp1
add address=192.168.88.42 always-broadcast=yes mac-address=00:0A:F5:89:89:FF
server=dhcp1
add address=192.168.88.22 always-broadcast=yes client-id=1:a4:db:30:c8:2b:29
mac-address=A4:DB:30:C8:2B:29 server=dhcp1
add address=192.168.88.12 always-broadcast=yes client-id=1:38:2c:4a:b9:7a:99
mac-address=38:2C:4A:B9:7A:99 server=dhcp1
add address=192.168.88.41 client-id=1:5c:f8:a1:17:c2:de mac-address=
5C:F8:A1:17:C2:DE server=dhcp1
add address=192.168.88.17 client-id=1:90:48:9a:9f:7c:d7 mac-address=
90:48:9A:9F:7C:D7 server=dhcp1
add address=192.168.88.16 client-id=1:90:48:9a:bd:b5:cd mac-address=
90:48:9A:BD:B5:CD server=dhcp1
add address=192.168.88.19 client-id=1:f0:25:b7:20:a2:5b mac-address=
F0:25:B7:20:A2:5B server=dhcp1
add address=192.168.88.50 mac-address=94:EB:CD:AB:1B:30 server=dhcp1
add address=192.168.88.21 mac-address=00:1E:AD:7A:A3:8B server=dhcp1
add address=192.168.88.26 client-id=1:2c:33:7a:31:d5:71 mac-address=
2C:33:7A:31:D5:71 server=dhcp1
add address=192.168.88.33 client-id=1:80:c5:e6:b8:a3:98 mac-address=
80:C5:E6:B8:A3:98 server=dhcp1
add address=192.168.88.18 always-broadcast=yes client-id=1:c0:3f:d5:39:d2:fc
mac-address=C0:3F:D5:39:D2:FC server=dhcp1
add address=192.168.88.13 client-id=1:ac:b5:7d:60:b6:43 mac-address=
AC:B5:7D:60:B6:43 server=dhcp1

/ip dhcp-server network
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1
netmask=24
add address=192.168.168.0/24 dns-server=192.168.88.1 gateway=192.168.88.1
netmask=24

/ip dns
set allow-remote-requests=yes servers=XXX.XXX.XXX.XXX,XXX.XXX.XXX.XXX

/ip firewall filter
add chain=input protocol=icmp
add chain=input connection-state=established in-interface=ether1
add action=log chain=input in-interface=ether1
add action=drop chain=input in-interface=ether1
add chain=input comment=UDP protocol=udp
add action=drop chain=input comment=Drop_excess_pings protocol=icmp
add action=drop chain=input comment=FTP dst-port=21 protocol=tcp
src-address-list=ournetwork
add action=drop chain=input comment=Telnet dst-port=23 protocol=tcp
src-address-list=ournetwork
add action=drop chain=input comment=Web dst-port=80 protocol=tcp
src-address-list=ournetwork
add chain=input comment=pptp-server dst-port=1723 protocol=tcp
add chain=input comment=Telnet disabled=yes dst-port=23 protocol=tcp
src-address-list=ournetwork
add chain=input comment=Web1 dst-port=80 protocol=tcp src-address-list=
ournetwork
add chain=input comment=“Accept established connections” connection-state=
established
add chain=input comment=“Accept related connections” connection-state=
related
add action=drop chain=input comment=“Drop invalid connections”
connection-state=invalid
add chain=input comment=UDP protocol=udp
add chain=input comment=“Allow limited pings” limit=50/5s,2 protocol=icmp
add action=drop chain=input comment=“Drop excess pings” protocol=icmp
add chain=input comment=“SSH for secure shell” dst-port=22 protocol=tcp
add chain=input comment=winbox dst-port=8291 protocol=tcp
add chain=input comment=“From Mikrotikls network” src-address=
159.148.172.192/28
add chain=input comment=“From Mikrotik Network” src-address=XXX.XXX.XXX.XXX/28
add chain=input comment=“From Private LAN” src-address=192.168.88.0/24
add action=add-src-to-address-list address-list=knock address-list-timeout=
15s chain=input dst-port=1337 protocol=tcp
add action=add-src-to-address-list address-list=safe address-list-timeout=
15m chain=input dst-port=7331 protocol=tcp src-address-list=knock
add action=drop chain=input comment=“detect and drop port scan connections”
protocol=tcp psd=21,3s,3,1
add action=tarpit chain=input comment=“suppress DoS attack”
connection-limit=3,32 protocol=tcp src-address-list=black_list
add action=add-src-to-address-list address-list=black_list
address-list-timeout=1d chain=input comment=“detect DoS attack”
connection-limit=10,32 protocol=tcp
add action=jump chain=input comment=“jump to chain ICMP” jump-target=ICMP
protocol=icmp
add action=jump chain=input comment=“jump to chain services” jump-target=
services
add chain=input comment=“Allow Broadcast Traffic” dst-address-type=broadcast
add action=log chain=input log-prefix=Filter:
add action=drop chain=input comment=“drop everything else”
add chain=ICMP comment=“0:0 and limit for 5pac/s” icmp-options=0 limit=5,5
protocol=icmp
add chain=ICMP comment=“3:3 and limit for 5pac/s” icmp-options=3:3 limit=5,5
protocol=icmp
add chain=ICMP comment=“3:4 and limit for 5pac/s” icmp-options=3:4 limit=5,5
protocol=icmp
add chain=ICMP comment=“8:0 and limit for 5pac/s” icmp-options=8 limit=5,5
protocol=icmp
add chain=ICMP comment=“11:0 and limit for 5pac/s” icmp-options=11 limit=5,5
protocol=icmp
add action=drop chain=ICMP comment=“Drop everything else” protocol=icmp
add chain=services comment=“accept localhost” dst-address=127.0.0.1
src-address=127.0.0.1
add chain=services comment=“allow MACwinbox " dst-port=20561 protocol=udp
add chain=services comment=“Bandwidth server” dst-port=2000 protocol=tcp
add chain=services comment=” MT Discovery Protocol" dst-port=5678 protocol=
udp
add chain=services comment=“allow SNMP” disabled=yes dst-port=161 protocol=
tcp
add chain=services comment=“Allow BGP” disabled=yes dst-port=179 protocol=
tcp
add chain=services comment=“allow BGP” disabled=yes dst-port=5000-5100
protocol=udp
add chain=services comment=“Allow NTP” dst-port=123 protocol=udp
add chain=services comment=“Allow PPTP” disabled=yes dst-port=1723 protocol=
tcp
add chain=services comment=“allow PPTP and EoIP” disabled=yes protocol=gre
add chain=services comment=“allow DNS request” disabled=yes dst-port=53
protocol=tcp
add chain=services comment=“Allow DNS request” disabled=yes dst-port=53
protocol=udp
add chain=services comment=UPnP disabled=yes dst-port=1900 protocol=udp
add chain=services comment=UPnP disabled=yes dst-port=2828 protocol=tcp
add chain=services comment=“allow DHCP” disabled=yes dst-port=67-68
protocol=udp
add chain=services comment=“allow Web Proxy” dst-port=8080 protocol=tcp
add chain=services comment=“allow IPIP” disabled=yes protocol=ipencap
add chain=services comment=“allow https for Hotspot” disabled=yes dst-port=
443 protocol=tcp
add chain=services comment=“allow Socks for Hotspot” disabled=yes dst-port=
1080 protocol=tcp
add chain=services comment=“allow IPSec connections” disabled=yes dst-port=
500 protocol=udp
add chain=services comment=“allow IPSec” disabled=yes protocol=ipsec-esp
add chain=services comment=“allow IPSec” disabled=yes protocol=ipsec-ah
add chain=services comment=“allow RIP” disabled=yes dst-port=520-521
protocol=udp
add chain=services comment=“allow OSPF” disabled=yes protocol=ospf
add action=return chain=services

/ip firewall mangle
add action=mark-connection chain=prerouting comment=making_faster_ping_and_dns
new-connection-mark=icmp-con protocol=icmp

/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1

/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes

/ip route
add distance=1 dst-address=192.168.40.0/24 gateway=192.168.11.2

/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes

/ip upnp
set allow-disable-external-interface=no
/system identity
set name=MikroTik-XXXX

/system ntp client
set enabled=yes primary-ntp=202.43.117.10 secondary-ntp=118.98.96.151

/tool bandwidth-server
set authenticate=no enabled=no

Site 2 config:

sep/20/2015 21:54:44 by RouterOS 5.24

software id = MZQ6-KI48

/interface ethernet
set 0 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
disabled=no full-duplex=yes l2mtu=1520 mac-address=D4:CA:6D:6A:00:1F
master-port=none mtu=1500 name=Port1-TRIPLAY+ speed=100Mbps
set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
disabled=no full-duplex=yes l2mtu=1520 mac-address=D4:CA:6D:6A:00:20
master-port=none mtu=1500 name=Port2-LAN speed=100Mbps
set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
disabled=no full-duplex=yes l2mtu=1520 mac-address=D4:CA:6D:6A:00:21
master-port=none mtu=1500 name=Port3-SPEEDY speed=100Mbps
set 3 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
disabled=no full-duplex=yes l2mtu=1520 mac-address=D4:CA:6D:6A:00:22
master-port=none mtu=1500 name=LAN4 speed=100Mbps
set 4 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited
disabled=no full-duplex=yes l2mtu=1520 mac-address=D4:CA:6D:6A:00:23
master-port=none mtu=1500 name=LAN5 speed=100Mbps

/interface ethernet switch
set 0 mirror-source=none mirror-target=none name=switch1 switch-all-ports=yes

/ip firewall layer7-protocol
add name=facebook regexp=“^.+(> http://www.facebook.com> ).$"
add name=Content regexp=“^.get.+\.(asf|mov|wmv|mpg|mpeg|mkv|avi|flv|wav|rm|m
p3|mp4|ram |rmvb|dat|daa|iso|nrg|bin|vcd|mp2|3gp|mpe|qt|raw|wma|0[0-9][0-9
]).$”
add name=Game regexp="^.+(game|poker|viwawa).$ (game)”
add name=“Platform twitter” regexp=
“^.+(platform.twitter.com).$ (platform.twitter.com/widgets.js)"
add name=Adult regexp="^.+(porn|xxx|sex|bokep|tube|hentai).$ (porn)”
add name=Sosial regexp=“^.+(facebook|twitter).$ (social)"
add name=all-video-regex regexp=“\.(3gp|mov|mpe|mpeg|mpeg2|mpeg3|mpeg4|mkv|av
i|flv|f4v|f4p|f4a|f4b|x-flv|msi|wmv|mp2|mp3|mp4|rm|rmvb|vcd|pdf|dat|iso|nr
g|bin|cab|vcd|ogg|wma|divx|d2v|qt)”
add name=“all google” regexp="^.+(earth.google.com|mail.google.com|drive.googl
e.com|docs.google.com|gmail.com|accounts.google.com||translate.google.com|
news.google.com|scholar.google.com|maps.google.com|images.google.com).$”
add name=torrents regexp=“^.(get|GET).+(torrent|thepiratebay|isohunt|entertan
e|demonoid|btjunkie|mininova|flixflux|vertor|h33t|zoozle|bitnova|bitsoup|m
eganova|fulldls|btbot|fenopy|gpirate|sumotorrent|bitmonster|azureus|utorre
nt|vuze|torrentreactor|commonbits|torrentz|bitlord|warez|bit-torrent).$”
add name=torrent-dns regexp=“^.+(torrent|thepiratebay|isohunt|entertane|demono
id|btjunkie|mininova|flixflux|vertor|h33t|zoozle|bitnova|bitsoup|meganova|
fulldls|btbot|fenopy|gpirate|azureus|sumotorrent|bitmonster|utorrent|vuze|
commonbits|torrentreactor|torrentz|bitlord|warez|bit-torrent).$"
add name=youtube regexp=youtube.com
add name=http-video regexp="http/(0.9|1.0|1.1)[x09-x0d ][1-5][0-9][0-9][x09-x0
d -~](content-type: video)”
add name=streaming regexp=videoplayback|video
add name=HTTPS regexp=
“^(.?.?\x16\x03.\x16\x03|.?.?\x01\x03\x01?.\x0b)”
add name=BITTORRENT2 regexp=“^(\x13bittorrent protocol)”
add name=DIRECTCONNECT regexp=“^(\$mynick |\$lock |\$key)”

/ip hotspot profile
set [ find default=yes ] dns-name=“” hotspot-address=0.0.0.0 html-directory=
hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=
cookie,http-chap name=default rate-limit=“” smtp-server=0.0.0.0
split-user-domain=no use-radius=no

/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m name=default
shared-users=1 status-autorefresh=1m transparent-proxy=no

/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha1 disabled=no enc-algorithms=3des
lifetime=30m name=default pfs-group=modp1024

/ip pool
add name=dhcp_pool1 ranges=
192.168.40.2-192.168.40.60,192.168.40.72-192.168.40.150

/ip dhcp-server
add add-arp=yes address-pool=dhcp_pool1 authoritative=after-2sec-delay
bootp-support=static disabled=no interface=Port2-LAN lease-time=1h name=
dhcp1

/port
set 0 baud-rate=auto data-bits=8 flow-control=none name=serial0 parity=none
stop-bits=1

/ppp profile
set 0 change-tcp-mss=yes name=default only-one=default use-compression=
default use-encryption=default use-mpls=default use-vj-compression=
default
set 1 change-tcp-mss=yes name=default-encryption only-one=default
use-compression=default use-encryption=yes use-mpls=default
use-vj-compression=default

/interface pppoe-client
add ac-name=“” add-default-route=yes allow=pap,chap,mschap1,mschap2
dial-on-demand=no disabled=no interface=Port3-SPEEDY max-mru=1480
max-mtu=1480 mrru=disabled name=pppoe-out1 password=******** profile=
default service-name=Service use-peer-dns=yes user=\

/queue type
set 0 kind=pfifo name=default pfifo-limit=50
set 1 kind=pfifo name=ethernet-default pfifo-limit=50
set 2 kind=sfq name=wireless-default sfq-allot=1514 sfq-perturb=5
set 3 kind=red name=synchronous-default red-avg-packet=1000 red-burst=20
red-limit=60 red-max-threshold=50 red-min-threshold=10
set 4 kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=5
set 5 kind=none name=only-hardware-queue
set 6 kind=mq-pfifo mq-pfifo-limit=50 name=multi-queue-ethernet-default
set 7 kind=pfifo name=default-small pfifo-limit=10

/queue simple
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue38
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.38/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=2M/2M name=queue2
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.2/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=2M/2M name=queue3
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.3/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue4
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.4/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue7
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.7/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=2M/2M name=queue5
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.5/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue6
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.6/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue8
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.8/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue9
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.9/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue10
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.10/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue11
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.11/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue12
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.12/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue13
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.13/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue14
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.14/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue15
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.15/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue16
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.16/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue17
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.17/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue18
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.18/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue19
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.19/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue20
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.20/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue21
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.21/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue22
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.22/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue23
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.23/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue24
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.24/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=Port2-LAN limit-at=0/0 max-limit=1M/1M name=queue25
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.25/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/512k name=queue26
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.26/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue27
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.27/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue28
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.28/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue29
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.29/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue37
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.37/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue30
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.30/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=queue33
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.33/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=2M/2M name=queue34
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.34/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue35
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.35/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue36
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.36/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=2M/2M name=queue39
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.39/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue40
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.40/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue42
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.42/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=
“PRINTER BROTHER” packet-marks=“” parent=none priority=8 queue=
default-small/default-small target-addresses=192.168.40.43/32
total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue44
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.44/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue46
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.46/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue47
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.47/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue48
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.48/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue49
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.49/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue51
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.51/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue52
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.52/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue53
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.53/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=queue55
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.55/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue57
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.57/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue58
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.58/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue50
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.50/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/1M name=queue59
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.59/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=queue60
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.60/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue32
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.32/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue31
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.31/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=
“Printer Epson L355 Astri” packet-marks=“” parent=none priority=8 queue=
default-small/default-small target-addresses=192.168.40.63/32
total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=
“Printer Epson L355 B Linda” packet-marks=“” parent=none priority=8
queue=default-small/default-small target-addresses=192.168.40.64/32
total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue65
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.65/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=
“Printer Epson L355 Arsitek” packet-marks=“” parent=none priority=8
queue=default-small/default-small target-addresses=192.168.40.62/32
total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue67
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.67/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=
“Epson Bu henny” packet-marks=“” parent=none priority=8 queue=
default-small/default-small target-addresses=192.168.40.68/32
total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue69
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.69/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue56
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.56/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=EpsonTeknik
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.54/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue71
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.71/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue73
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.73/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue74
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.74/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue75
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.75/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue76
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.76/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue77
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.77/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=queue78
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.78/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue79
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.79/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue80
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.80/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=“Wifi Funtasy”
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.88.5/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=CanonIR2525
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.41/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue61
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.61/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue66
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.66/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=queue88
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.88/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue81
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.81/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue82
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.82/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue83
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.83/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue84
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.84/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue85
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.85/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue86
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.86/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue87
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.87/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue89
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.89/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue90
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.90/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue91
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.91/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue92
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.92/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue93
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.93/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue94
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.94/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue95
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.95/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=queue96
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.96/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue97
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.97/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue98
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.98/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=0/0 name=queue99
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.99/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue100
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.100/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue101
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.101/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue102
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.102/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue103
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.103/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue104
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.104/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue105
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.105/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue106
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.106/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue107
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.107/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue108
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.108/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue109
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.109/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue110
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.110/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue111
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.111/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue112
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.112/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue113
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.113/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue114
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.114/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue115
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.115/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue116
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.116/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue117
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.117/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue118
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.118/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue119
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.119/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue120
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.120/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue121
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.121/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue122
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.122/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue123
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.123/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue124
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.124/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue125
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.125/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue126
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.126/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue127
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.127/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue128
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.128/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue129
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.129/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue130
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.130/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue131
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.131/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue132
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.132/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue133
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.133/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue134
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.134/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue135
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.135/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue136
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.136/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue137
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.137/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue138
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.138/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue139
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.139/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue140
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.140/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue141
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.141/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue142
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.142/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue143
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.143/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue144
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.144/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue145
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.145/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue146
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.146/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue147
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.147/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue148
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.148/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue149
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.149/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=512k/512k name=queue150
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.150/32 total-queue=default-small
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
disabled=no interface=all limit-at=0/0 max-limit=1M/1M name=queue45
packet-marks=“” parent=none priority=8 queue=default-small/default-small
target-addresses=192.168.40.45/32 total-queue=default-small

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0
max-limit=1 name=streaming packet-mark=streaming parent=Port3-SPEEDY
priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes limit-at=0
max-limit=1 name=“Block playstore” packet-mark=Playstore parent=
Port3-SPEEDY priority=8 queue=default

/routing bgp instance
set default as=65530 client-to-client-reflection=yes disabled=no
ignore-as-path-len=no name=default out-filter=“” redistribute-connected=
no redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no
redistribute-static=no router-id=0.0.0.0 routing-table=“”

/routing ospf instance
set [ find default=yes ] disabled=no distribute-default=never in-filter=
ospf-in metric-bgp=auto metric-connected=20 metric-default=1
metric-other-ospf=auto metric-rip=20 metric-static=20 name=default
out-filter=ospf-out redistribute-bgp=no redistribute-connected=no
redistribute-other-ospf=no redistribute-rip=no redistribute-static=no
router-id=0.0.0.0

/routing ospf area
set [ find default=yes ] area-id=0.0.0.0 disabled=no instance=default name=
backbone type=default

/snmp community
set [ find default=yes ] addresses=0.0.0.0/0 authentication-password=“”
authentication-protocol=MD5 encryption-password=“” encryption-protocol=
DES name=public read-access=yes security=none write-access=no

/system logging action
set 0 memory-lines=100 memory-stop-on-full=no name=memory target=memory
set 1 disk-file-count=2 disk-file-name=log disk-lines-per-file=100
disk-stop-on-full=no name=disk target=disk
set 2 name=echo remember=yes target=echo
set 3 bsd-syslog=no name=remote remote-port=514 src-address=0.0.0.0
syslog-facility=daemon syslog-severity=auto target=remote

/user group
set read name=read policy=“local,telnet,ssh,reboot,read,test,winbox,password,w
eb,sniff,sensitive,api,!ftp,!write,!policy” skin=default
set write name=write policy=“local,telnet,ssh,reboot,read,write,test,winbox,pa
ssword,web,sniff,sensitive,api,!ftp,!policy” skin=default
set full name=full policy=“local,telnet,ssh,ftp,reboot,read,write,policy,test,
winbox,password,web,sniff,sensitive,api” skin=default
add name=sniffer policy=“ssh,read,!local,!telnet,!ftp,!reboot,!write,!policy,!
test,!winbox,!password,!web,!sniff,!sensitive,!api” skin=default

/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=
no

/interface ethernet switch port
set 0 vlan-header=leave-as-is vlan-mode=fallback
set 1 vlan-header=leave-as-is vlan-mode=fallback
set 2 vlan-header=leave-as-is vlan-mode=fallback
set 3 vlan-header=leave-as-is vlan-mode=fallback
set 4 vlan-header=leave-as-is vlan-mode=fallback
set 5 vlan-header=leave-as-is vlan-mode=fallback

/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=
default-encryption enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=
1460 mrru=disabled

/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=
default enabled=no keepalive-timeout=60 mac-address=FE:18:31:AC:75:F6
max-mtu=1500 mode=ip netmask=24 port=1194 require-client-certificate=no

/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption
enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled

/interface sstp-server server
set authentication=pap,chap,mschap1,mschap2 certificate=none default-profile=
default enabled=no keepalive-timeout=60 max-mru=1500 max-mtu=1500 mrru=
disabled port=443 verify-client-certificate=no

/ip accounting
set account-local-traffic=no enabled=no threshold=256

/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0

/ip address
add address=202.51.107.83/29 comment=IP-Public disabled=no interface=
Port1-TRIPLAY+ network=202.51.107.80
add address=192.168.40.1/24 comment=IP-Lan disabled=no interface=Port2-LAN
network=192.168.40.0
add address=192.168.11.2/32 disabled=no interface=LAN4 network=192.168.11.2

/ip dhcp-server config
set store-leases-disk=1h

/ip dhcp-server lease
add address=192.168.40.60 client-id=1:d4:ca:6d:a4:14:3c disabled=no
mac-address=D4:CA:6D:A4:14:3C server=dhcp1
add address=192.168.40.23 client-id=1:90:2b:34:d9:c7:f2 disabled=no
mac-address=90:2B:34:D9:C7:F2 server=dhcp1
add address=192.168.40.25 always-broadcast=yes client-id=1:fc:4d:d4:49:61:8
disabled=no mac-address=FC:4D:D4:49:61:08 server=dhcp1
add address=192.168.40.7 client-id=1:74:27:ea:60:34:97 disabled=no
mac-address=74:27:EA:60:34:97 server=dhcp1
add address=192.168.40.22 client-id=1:74:d4:35:5f:4f:94 disabled=no
mac-address=74:D4:35:5F:4F:94 server=dhcp1
add address=192.168.40.14 always-broadcast=yes client-id=1:a4:5d:36:bc:a8:67
disabled=no mac-address=A4:5D:36:BC:A8:67 server=dhcp1
add address=192.168.40.13 client-id=1:10:60:4b:75:5c:63 disabled=no
mac-address=10:60:4B:75:5C:63 server=dhcp1
add address=192.168.40.11 client-id=1:d4:3d:7e:60:c8:73 disabled=no
mac-address=D4:3D:7E:60:C8:73 server=dhcp1
add address=192.168.40.10 always-broadcast=yes client-id=1:d4:3d:7e:60:c9:cb
disabled=no mac-address=D4:3D:7E:60:C9:CB server=dhcp1
add address=192.168.40.33 client-id=1:fc:4d:d4:49:60:af disabled=no
mac-address=FC:4D:D4:49:60:AF server=dhcp1
add address=192.168.40.55 always-broadcast=yes disabled=no mac-address=
00:0A:F5:89:89:FF server=dhcp1
add address=192.168.40.4 client-id=1:44:8a:5b:9:da:6e disabled=no
mac-address=44:8A:5B:09:DA:6E server=dhcp1
add address=192.168.40.19 client-id=1:74:d4:35:58:e8:2 disabled=no
mac-address=74:D4:35:58:E8:02 server=dhcp1
add address=192.168.40.20 client-id=1:50:e5:49:10:47:60 disabled=no
mac-address=50:E5:49:10:47:60 server=dhcp1
add address=192.168.40.3 client-id=1:74:27:ea:66:4c:69 disabled=no
mac-address=74:27:EA:66:4C:69 server=dhcp1
add address=192.168.40.6 always-broadcast=yes client-id=1:74:27:ea:63:2a:e8
disabled=no mac-address=74:27:EA:63:2A:E8 server=dhcp1
add address=192.168.40.8 always-broadcast=yes client-id=1:0:26:2d:39:29:f9
disabled=no mac-address=00:26:2D:39:29:F9 server=dhcp1
add address=192.168.40.9 always-broadcast=yes client-id=1:74:27:ea:61:46:9a
disabled=no mac-address=74:27:EA:61:46:9A server=dhcp1
add address=192.168.40.41 client-id=1:0:1e:8f> > 93:d disabled=no
mac-address=00:1E:8F:DE:93:0D server=dhcp1
add address=192.168.40.15 client-id=1:18:cf:5e:9e:9c:bd disabled=no
mac-address=18:CF:5E:9E:9C:BD server=dhcp1
add address=192.168.40.17 client-id=1:c4:54:44:82:dd:d4 disabled=no
mac-address=C4:54:44:82:DD:D4 server=dhcp1
add address=192.168.40.28 client-id=1:c0:3f:d5:72:4b:1d disabled=no
mac-address=C0:3F:D5:72:4B:1D server=dhcp1
add address=192.168.40.18 client-id=1:c4:54:44:ad:a3:ed disabled=no
mac-address=C4:54:44:AD:A3:ED server=dhcp1
add address=192.168.40.24 always-broadcast=yes client-id=1:94> > 80:6b:2d:b2
disabled=no mac-address=94:DE:80:6B:2D:B2 server=dhcp1
add address=192.168.40.12 always-broadcast=yes client-id=1:10:78:d2:7d:43:26
disabled=no mac-address=10:78:D2:7D:43:26 server=dhcp1
add address=192.168.40.16 client-id=1:44:8a:5b:9:dd:a1 disabled=no
mac-address=44:8A:5B:09:DD:A1 server=dhcp1
add address=192.168.40.2 client-id=1:e0:3f:49:ca:ad:4a disabled=no
mac-address=E0:3F:49:CA:AD:4A server=dhcp1
add address=192.168.40.5 always-broadcast=yes client-id=1:88:63:df:be:47:79
disabled=no mac-address=88:63:DF:BE:47:79 server=dhcp1
add address=192.168.40.43 always-broadcast=yes client-id=1:30:5:5c:72:b7:59
disabled=no mac-address=30:05:5C:72:B7:59 server=dhcp1
add address=192.168.40.54 client-id=1:ac:18:26:a1:e0:ff disabled=no
mac-address=AC:18:26:A1:E0:FF server=dhcp1
add address=192.168.40.38 client-id=1:e4:ce:8f:2:6c:f2 disabled=no
mac-address=E4:CE:8F:02:6C:F2 server=dhcp1
add address=192.168.40.26 client-id=1:6c:3b:e5:1a:67:57 disabled=no
mac-address=6C:3B:E5:1A:67:57 server=dhcp1
add address=192.168.40.27 client-id=1:40:61:86:95:50:d2 disabled=no
mac-address=40:61:86:95:50:D2 server=dhcp1
add address=192.168.40.36 client-id=1:54:27:1e:77:bc:d7 disabled=no
mac-address=54:27:1E:77:BC:D7 server=dhcp1
add address=192.168.40.37 always-broadcast=yes client-id=1:2c:d0:5a:b8:24:46
disabled=no mac-address=2C:D0:5A:B8:24:46 server=dhcp1
add address=192.168.40.76 always-broadcast=yes disabled=no mac-address=
74:51:BA:B4:DE:A1 server=dhcp1
add address=192.168.40.75 always-broadcast=yes client-id=1:f4:9:d8:e4:44:bd
disabled=no mac-address=F4:09:D8:E4:44:BD server=dhcp1
add address=192.168.40.78 disabled=no mac-address=00:1E:AD:7A:A3:8B server=
dhcp1
add address=192.168.40.39 client-id=1:6c:71:d9:af:38:39 disabled=no
mac-address=6C:71:D9:AF:38:39 server=dhcp1
add address=192.168.40.34 client-id=1:64:76:ba:ad:d6:78 disabled=no
mac-address=64:76:BA:AD:D6:78 server=dhcp1
add address=192.168.40.72 always-broadcast=yes client-id=1:d0:22:be:4d:3b:aa
disabled=no mac-address=D0:22:BE:4D:3B:AA server=dhcp1
add address=192.168.40.88 client-id=1:0:1e:67:d6:97:c1 disabled=no
mac-address=00:1E:67:D6:97:C1 server=dhcp1
add address=192.168.40.46 client-id=1:40:16:7e:e2:c0:fe disabled=no
mac-address=40:16:7E:E2:C0:FE server=dhcp1
add address=192.168.40.42 client-id=1:38:63:bb:96:b7:5d disabled=no
mac-address=38:63:BB:96:B7:5D server=dhcp1
add address=192.168.40.45 client-id=1:0:88:65:39:8a:ee disabled=no
mac-address=00:88:65:39:8A:EE server=dhcp1
add address=192.168.40.40 client-id=1:6c:f0:49:a4:9:4e disabled=no
mac-address=6C:F0:49:A4:09:4E server=dhcp1
add address=192.168.40.44 client-id=1:38:b1:db:ed:a3:a1 disabled=no
mac-address=38:B1:DB:ED:A3:A1 server=dhcp1
add address=192.168.40.99 client-id=1:80:c5:e6:b8:a3:98 disabled=no
mac-address=80:C5:E6:B8:A3:98 server=dhcp1
add address=192.168.40.96 client-id=1:0:ee:3:30:f3:e4 disabled=no
mac-address=00:EE:03:30:F3:E4 server=dhcp1
add address=192.168.40.74 client-id=1:48:5a:3f:3f:6:d5 disabled=no
mac-address=48:5A:3F:3F:06:D5 server=dhcp1
add address=192.168.40.35 always-broadcast=yes client-id=1:c0:3f:d5:39:d2:fc
disabled=no mac-address=C0:3F:D5:39:D2:FC server=dhcp1
add address=192.168.40.21 client-id=1:10:60:4b:75:5c:8a disabled=no
mac-address=10:60:4B:75:5C:8A server=dhcp1
add address=192.168.40.29 client-id=1:74:27:ea:60:36:c1 disabled=no
mac-address=74:27:EA:60:36:C1 server=dhcp1
add address=192.168.40.32 client-id=1:c0:3f:d5:72:3a:8d disabled=no
mac-address=C0:3F:D5:72:3A:8D server=dhcp1
add address=192.168.40.31 client-id=1:0:26:18:e4:9:b6 disabled=no
mac-address=00:26:18:E4:09:B6 server=dhcp1
add address=192.168.40.30 client-id=1:74:27:ea:60:45:41 disabled=no
mac-address=74:27:EA:60:45:41 server=dhcp1

/ip dhcp-server network
add address=192.168.40.0/24 dhcp-option=“” dns-server=“” gateway=192.168.40.1
ntp-server=“” wins-server=“”

/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB
max-udp-packet-size=4096 servers=118.98.44.10,203.130.193.74

/ip firewall address-list
add address=42.56.250.117 disabled=no list=drop_traffic
add address=183.60.48.0/24 disabled=no list=drop_traffic
add address=XXX.XXX.XXX.XXX/10 disabled=no list=nice
add address=192.168.40.0/24 disabled=no list=“local address”

/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s

/ip firewall filter
add action=accept chain=input comment=“Accept related connections”
connection-state=related disabled=no
add action=accept chain=input comment=“Accept established connections”
connection-state=established disabled=no
add action=drop chain=input comment=“Drop invalid connections”
connection-state=invalid disabled=no
add action=drop chain=forward comment=“drop invalid connections”
connection-state=invalid disabled=no
add action=drop chain=virus comment=“Drop Messenger Worm” disabled=no
dst-port=135-139 protocol=udp
add action=drop chain=forward disabled=no dst-port=135-139 protocol=tcp
add action=jump chain=forward comment=“jump to the virus chain” disabled=no
jump-target=virus
add action=drop chain=forward disabled=no dst-port=5554 protocol=tcp
add action=drop chain=forward disabled=no dst-port=4444 protocol=tcp
add action=drop chain=forward disabled=no dst-port=53 protocol=tcp
add action=drop chain=forward disabled=no dst-port=135-139 protocol=udp
add action=drop chain=forward disabled=no dst-port=593 protocol=tcp
add action=drop chain=forward disabled=no dst-port=445 protocol=tcp
add action=drop chain=forward disabled=no dst-port=445 protocol=udp
add action=drop chain=forward disabled=no dst-port=9996 protocol=tcp
add action=drop chain=forward disabled=no dst-port=995-999 protocol=udp
add action=drop chain=forward disabled=no dst-port=55 protocol=tcp
add action=add-src-to-address-list address-list=ssh_stage2
address-list-timeout=10m chain=input connection-state=new disabled=no
dst-port=22 protocol=tcp src-address-list=ssh_stage1
add action=drop chain=forward comment=“Block FB” disabled=no dst-address=
74.119.76.0/22 protocol=tcp
add action=drop chain=forward disabled=no dst-address=173.252.64.0/18
protocol=tcp
add action=drop chain=forward disabled=no dst-address=204.15.20.0/22
protocol=tcp
add action=drop chain=forward disabled=no dst-address=66.220.144.0/20
protocol=tcp
add action=drop chain=forward disabled=no dst-address=69.171.224.0/19
protocol=tcp
add action=drop chain=forward disabled=no dst-address=31.13.79.0/24 protocol=
tcp
add action=drop chain=forward disabled=no dst-address=173.252.120.0/24
protocol=tcp
add action=drop chain=forward disabled=no dst-address=180.76.10.142 protocol=
tcp
add action=accept chain=input comment=UDP disabled=no protocol=udp
add action=accept chain=forward disabled=no protocol=tcp src-address=
192.168.40.55
add action=drop chain=virus comment=“Drop Blaster Worm” disabled=no dst-port=
135-139 protocol=tcp
add action=drop chain=virus comment=“Drop Blaster Worm” disabled=no dst-port=
445 protocol=udp
add action=drop chain=virus comment=“Drop Blaster Worm” disabled=no dst-port=
445 protocol=tcp
add action=accept chain=forward comment=“Allow All” disabled=yes protocol=tcp
src-address=192.168.40.33
add action=drop chain=virus comment=________ disabled=no dst-port=593
protocol=tcp
add action=drop chain=virus comment=________ disabled=no dst-port=1024-1030
protocol=tcp
add action=drop chain=virus comment=“Drop MyDoom” disabled=no dst-port=1080
protocol=tcp
add action=drop chain=virus comment=________ disabled=no dst-port=1214
protocol=tcp
add action=drop chain=virus comment=“ndm requester” disabled=no dst-port=1363
protocol=tcp
add action=drop chain=virus comment=“ndm server” disabled=no dst-port=1364
protocol=tcp
add action=drop chain=virus comment=“screen cast” disabled=no dst-port=1368
protocol=tcp
add action=drop chain=virus comment=hromgrafx disabled=no dst-port=1373
protocol=tcp
add action=drop chain=virus comment=cichlid disabled=no dst-port=1377
protocol=tcp
add action=drop chain=virus comment=Worm disabled=no dst-port=1433-1434
protocol=tcp
add action=drop chain=virus comment=“Bagle Virus” disabled=no dst-port=2745
protocol=tcp
add action=drop chain=virus comment=“Drop Dumaru.Y” disabled=no dst-port=2283
protocol=tcp
add action=drop chain=virus comment=“Drop Beagle” disabled=no dst-port=2535
protocol=tcp
add action=drop chain=virus comment=“Drop Beagle.C-K” disabled=no dst-port=
2745 protocol=tcp
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment=“ALL/ALL scan” disabled=no
protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
add action=drop chain=virus comment=“Drop MyDoom” disabled=no dst-port=
3127-3128 protocol=tcp
add action=drop chain=virus comment=“Drop Backdoor OptixPro” disabled=no
dst-port=3410 protocol=tcp
add action=drop chain=virus comment=Worm disabled=no dst-port=4444 protocol=
tcp
add action=drop chain=virus comment=Worm disabled=no dst-port=4444 protocol=
udp
add action=drop chain=virus comment=“Drop Sasser” disabled=no dst-port=5554
protocol=tcp
add action=drop chain=virus comment=“Drop Beagle.B” disabled=no dst-port=8866
protocol=tcp
add action=drop chain=virus comment=“Drop Dabber.A-B” disabled=no dst-port=
9898 protocol=tcp
add action=drop chain=virus comment=“Drop Dumaru.Y” disabled=no dst-port=
10000 protocol=tcp
add action=drop chain=virus comment=“Drop MyDoom.B” disabled=no dst-port=
10080 protocol=tcp
add action=drop chain=forward disabled=no dst-port=7401 protocol=tcp
add action=drop chain=forward disabled=no src-mac-address=CC:78:5F:1E:50:90
add action=drop chain=virus comment=“Drop NetBus” disabled=no dst-port=12345
protocol=tcp
add action=drop chain=virus comment=“Drop Kuang2” disabled=no dst-port=17300
protocol=tcp
add action=drop chain=virus comment=“Drop SubSeven” disabled=no dst-port=
27374 protocol=tcp
add action=accept chain=forward disabled=no protocol=tcp src-address=
0.0.0.0/0
add action=drop chain=virus comment=“Drop PhatBot, Agobot, Gaobot” disabled=
no dst-port=65506 protocol=tcp
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment="Port scanners to list "
disabled=no protocol=tcp psd=21,3s,3,1
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment=“NMAP FIN Stealth scan”
disabled=no protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment=“SYN/FIN scan” disabled=no
protocol=tcp tcp-flags=fin,syn
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment=“SYN/RST scan” disabled=no
protocol=tcp tcp-flags=syn,rst
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment=“FIN/PSH/URG scan” disabled=
no protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment=“NMAP NULL scan” disabled=no
protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
add action=drop chain=forward disabled=no dst-address-list=anonymox
add action=drop chain=input comment=“drop ftp brute forcers” disabled=no
dst-port=21 protocol=tcp src-address-list=ftp_blacklist
add action=accept chain=output content=“530 Login incorrect” disabled=no
dst-limit=1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist
address-list-timeout=3h chain=output content=“530 Login incorrect”
disabled=no protocol=tcp
add action=jump chain=forward comment=“SYN Flood protect” connection-state=
new disabled=no jump-target=SYN-Protect protocol=tcp tcp-flags=syn
add action=drop chain=forward comment=“drop ssh brute downstream” disabled=no
dst-port=22 protocol=tcp src-address-list=ssh_blacklist
add action=drop chain=forward disabled=no src-mac-address=D0:22:BE:37:C0:A9
add action=accept chain=forward disabled=no src-address=0.0.0.0/0
add action=drop chain=input comment=“dropping port scanners” disabled=no
src-address-list=“port scanners”
add action=drop chain=forward comment=“new list” disabled=no dst-port=
50000-60000 protocol=tcp
add action=drop chain=input comment=“drop ssh brute forcers” disabled=no
dst-port=22 protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist
address-list-timeout=1w3d chain=input connection-state=new disabled=no
dst-port=22 protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3
address-list-timeout=10m chain=input connection-state=new disabled=no
dst-port=22 protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage1
address-list-timeout=1m chain=input connection-state=new disabled=no
dst-port=22 protocol=tcp
add action=accept chain=input disabled=no dst-port=21,22,23,80,443 protocol=
tcp src-address-list=management-servers
add action=drop chain=input disabled=no dst-port=21,22,23,80,443 protocol=tcp
add action=accept chain=SYN-Protect connection-state=new disabled=no limit=
400,5 protocol=tcp tcp-flags=syn
add action=drop chain=SYN-Protect connection-state=new disabled=no protocol=
tcp tcp-flags=syn
add action=drop chain=input comment=pptp-server disabled=no dst-port=1723
protocol=tcp
add action=drop chain=forward disabled=no dst-port=17001-17002 protocol=udp
add action=accept chain=forward disabled=no src-address=0.0.0.0/0
add action=drop chain=forward comment=Android disabled=no src-mac-address=
8C:3A:E3:2F:94:74
add action=drop chain=forward disabled=no src-mac-address=F0:27:65:94:BE:DA
add action=drop chain=forward disabled=no src-mac-address=D0:22:BE:4D:3B:AA
add action=drop chain=forward disabled=no src-mac-address=F4:F1:5A:8F:2B:B7
add action=drop chain=forward disabled=no src-mac-address=AC:FD:EC:A2:72:40
add action=drop chain=forward disabled=no src-mac-address=DC:CE:BC:85:63:3F
add action=drop chain=forward disabled=no src-mac-address=4C:21:D0:46:C6:5B
add action=drop chain=forward comment=“block leecher” disabled=no protocol=
tcp src-mac-address=98:D6:BB:97:B7:FB
add action=drop chain=forward disabled=no src-mac-address=B4:3A:28:62:56:9D
add action=drop chain=input comment=“Drop China” disabled=no protocol=tcp
src-address-list=drop_traffic
add action=drop chain=input comment=“Block Youtube” disabled=no dst-port=8080
in-interface=pppoe-out1 protocol=tcp src-address=0.0.0.0/0 time=
8h30m-16h,mon,tue,wed,thu,fri
add action=add-src-to-address-list address-list=p2p-users
address-list-timeout=1w chain=forward comment=“Block Torrnet”
connection-mark=p2p disabled=no src-address-list=“local address”
add action=log chain=forward connection-mark=p2p disabled=no log-prefix=P2P
add action=jump chain=forward connection-mark=p2p disabled=no jump-target=
drop

/ip firewall mangle
add action=mark-packet chain=prerouting comment=“Mark Streaming” disabled=no
layer7-protocol=youtube new-packet-mark=streaming passthrough=no
protocol=tcp
add action=mark-packet chain=prerouting comment=Facebook disabled=no
layer7-protocol=facebook new-packet-mark=FB passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment=IIX disabled=no
dst-address-list=nice new-connection-mark=IIX passthrough=yes
add action=mark-packet chain=prerouting connection-mark=IIX disabled=no
new-packet-mark=INDO passthrough=no
add action=mark-packet chain=prerouting disabled=no new-packet-mark=INTL
passthrough=no
add action=mark-connection chain=prerouting comment=Playstore disabled=no
dst-port=5228 new-connection-mark=Playstore passthrough=no protocol=tcp
add action=mark-connection chain=prerouting connection-mark=Conn_playstore
disabled=no dst-port=5228 new-connection-mark=Playstore passthrough=no
protocol=udp
add action=mark-packet chain=prerouting connection-mark=Playstore disabled=no
new-packet-mark=Playstore passthrough=no
add action=jump chain=prerouting comment="P2P " disabled=no jump-target=
p2p-service layer7-protocol=DIRECTCONNECT
add action=jump chain=prerouting disabled=no jump-target=p2p-service p2p=
fasttrack
add action=jump chain=prerouting disabled=no jump-target=p2p-service
layer7-protocol=BITTORRENT2 p2p=all-p2p
add action=jump chain=prerouting connection-state=new disabled=no dst-port=
443 jump-target=tcp-services protocol=tcp
add action=jump chain=prerouting connection-state=new disabled=no dst-port=
!443 jump-target=p2p-service layer7-protocol=HTTPS protocol=tcp
add action=jump chain=prerouting connection-state=new disabled=no
jump-target=tcp-services protocol=tcp tcp-flags=syn
add action=jump chain=prerouting connection-state=new disabled=no
jump-target=udp-services protocol=udp
add action=jump chain=prerouting connection-state=new disabled=no
jump-target=other-services
add action=mark-connection chain=p2p-service disabled=no new-connection-mark=
p2p passthrough=no
add action=mark-connection chain=tcp-services disabled=no dst-port=443
new-connection-mark=https passthrough=no protocol=tcp src-port=1024-65535

/ip firewall nat
add action=masquerade chain=srcnat comment=“Network VPN” disabled=no
src-address=10.10.10.0/24
add action=masquerade chain=srcnat comment=NAT disabled=no out-interface=
pppoe-out1
add action=masquerade chain=srcnat comment=“Nat for Speedy” disabled=no
out-interface=Port3-SPEEDY
add action=dst-nat chain=dstnat disabled=no dst-address=XXX.XXX.XXX.XXX
dst-port=8101 protocol=tcp to-addresses=192.168.40.96 to-ports=8101
add action=dst-nat chain=dstnat disabled=no dst-address=XXX.XXX.XXX.XXX
dst-port=81 protocol=tcp to-addresses=192.168.40.96 to-ports=81
add action=dst-nat chain=dstnat disabled=no dst-address=XXX.XXX.XXX.XXX
dst-port=15966 protocol=tcp to-addresses=192.168.40.96 to-ports=15966
add action=redirect chain=dstnat comment=“Web Proxy redirect” disabled=no
dst-port=80 protocol=tcp to-ports=8080

/ip firewall service-port
set ftp disabled=yes ports=21
set tftp disabled=yes ports=69
set irc disabled=yes ports=6667
set h323 disabled=yes
set sip disabled=yes ports=5060,5061 sip-direct-media=yes
set pptp disabled=yes

/ip hotspot service-port
set ftp disabled=no ports=21

/ip neighbor discovery
set Port1-TRIPLAY+ disabled=no
set Port2-LAN disabled=no
set Port3-SPEEDY disabled=no
set LAN4 disabled=no
set LAN5 disabled=no
set pppoe-out1 disabled=yes

/ip proxy
set always-from-cache=no cache-administrator=“Bu Ing” cache-hit-dscp=4
cache-on-disk=no enabled=yes max-cache-size=unlimited
max-client-connections=600 max-fresh-time=3d max-server-connections=600
parent-proxy=0.0.0.0 parent-proxy-port=0 port=8080 serialize-connections=
no src-address=0.0.0.0

/ip proxy access
add action=deny disabled=no dst-host=> www.youtube.com > dst-port=“”
add action=deny disabled=no dst-host=> www.facebook.com > dst-port=“”

/ip route
add disabled=yes distance=1 dst-address=0.0.0.0/0 gateway=202.51.107.81
scope=30 target-scope=10
add disabled=no distance=1 dst-address=192.168.88.0/24 gateway=192.168.11.1
scope=30 target-scope=10

/ip service
set telnet address=“” disabled=yes port=23
set ftp address=“” disabled=yes port=21
set www address=“” disabled=yes port=80
set ssh address=“” disabled=yes port=22
set www-ssl address=“” certificate=none disabled=yes port=443
set api address=“” disabled=yes port=8728
set winbox address=“” disabled=no port=8291

/ip smb
set allow-guests=yes comment=MikrotikSMB domain=MSHOME enabled=no interfaces=
all

/ip smb shares
set [ find default=yes ] comment=“default share” directory=/pub disabled=no
max-sessions=10 name=pub

/ip smb users
set [ find default=yes ] disabled=no name=guest password=“” read-only=yes

/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080

/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no
inactive-flow-timeout=15s interfaces=all

/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
set [ find default=yes ] disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no
lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0
use-explicit-null=no

/port firmware
set directory=firmware ignore-directip-modem=no

/ppp aaa
set accounting=yes interim-update=0s use-radius=no

/queue interface
set Port1-TRIPLAY+ queue=only-hardware-queue
set Port2-LAN queue=only-hardware-queue
set Port3-SPEEDY queue=only-hardware-queue
set LAN4 queue=only-hardware-queue
set LAN5 queue=only-hardware-queue

/radius incoming
set accept=no port=3799

/routing bfd interface
set [ find default=yes ] disabled=no interface=all interval=0.2s min-rx=0.2s
multiplier=5

/routing mme
set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m
gateway-selection=no-gateway origination-interval=5s preferred-gateway=
0.0.0.0 timeout=1m ttl=50

/routing rip
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1
metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no
redistribute-connected=no redistribute-ospf=no redistribute-static=no
routing-table=main timeout-timer=3m update-timer=30s

/snmp
set contact=“” enabled=no engine-id=“” location=“” trap-generators=“”
trap-target=“” trap-version=1

/system clock
set time-zone-name=Asia/Jakarta

/system clock manual
set dst-delta=+00:00 dst-end=“jan/01/1970 00:00:00” dst-start=
“jan/01/1970 00:00:00” time-zone=+00:00

/system console
set [ find port=serial0 ] channel=0 disabled=no port=serial0 term=vt102

/system identity
set name=MikroTik

/system logging
set 0 action=memory disabled=no prefix=“” topics=info
set 1 action=memory disabled=no prefix=“” topics=error
set 2 action=memory disabled=no prefix=“” topics=warning
set 3 action=echo disabled=no prefix=“” topics=critical

/system note
set note=“Using nice.rsc from > http://www.mikrotik.co.id> , 31 July 2015 09:14:09 WIB, 1
590 lines.” show-at-login=yes

/system ntp client
set enabled=yes mode=unicast primary-ntp=119.252.168.31 secondary-ntp=
180.211.88.50

/system resource irq
set 0 cpu=auto
set 1 cpu=auto
set 2 cpu=auto
set 3 cpu=auto

/system routerboard settings
set baud-rate=115200 boot-delay=2s boot-device=nand-if-fail-then-ethernet
boot-protocol=bootp cpu-frequency=680MHz enable-jumper-reset=yes
enter-setup-on=any-key force-backup-booter=no silent-boot=no

/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=
0.0.0.0 user=“”

/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=
none watchdog-timer=yes

/tool bandwidth-server
set allocate-udp-ports-from=2000 authenticate=yes enabled=no max-sessions=100

/tool e-mail
set address=0.0.0.0 from=<> password=“” port=25 starttls=no user=“”

/tool graphing
set page-refresh=300 store-every=5min

/tool mac-server
set [ find default=yes ] disabled=yes interface=all

/tool mac-server mac-winbox
set [ find default=yes ] disabled=no interface=all

/tool mac-server ping
set enabled=no

/tool sms
set allowed-number=“” channel=0 keep-max-sms=0 receive-enabled=no secret=“”

/tool sniffer
set file-limit=1000KiB file-name=“” filter-ip-address=“” filter-ip-protocol=
“” filter-mac-address=“” filter-mac-protocol=“” filter-port=“”
filter-stream=yes interface=all memory-limit=100KiB memory-scroll=yes
only-headers=no streaming-enabled=no streaming-server=0.0.0.0

/tool traffic-generator
set latency-distribution-scale=10 test-id=0

/user aaa
set accounting=yes default-group=read exclude-groups=“” interim-update=0s
use-radius=no

Please pardon me for the messy config, since I have no idea what I am doing. I’d be really appreciate it if someone have patience to guide me.

Van9018 · September 22, 2015, 1:54am

I think you should use separate subnets for the two links between the floors when load balancing is involved.

On both sites, set Eth4 and Eth5 with Master-Port:None and don’t include them in any bridges.

On site1, specify a static IP of 192.168.100.1/24 for Eth4 (the 3rd subnet).
On site2, specify a static IP of 192.168.100.2/24 for Eth4 (the 3rd subnet).

On site1, specify a static IP of 192.168.101.1/24 for Eth5 (the 4th subnet)
On site2, specify a static IP of 192.168.101.2/24 for Eth5 (the 4th subnet)

On site1, create a new route, when dst-addr = 192.168.40.0/24, use gateway eth4
On site2, create a new route, when dst-addr = 192.168.88.0/24, use gateway eth4

Now both sites can communicate but only over Eth4. The next bit is for load balancing.

On site1, create a new route, when dst-addr = 192.168.40.0/24 AND routing-mark=LINK2, use gateway eth5
On site2, create a new route, when dst-addr = 192.168.88.0/24 AND routing-mark=LINK2, use gateway eth5

Now we have to mark packets with routing marks. Mark every 2nd packet destined to the other floor with a routing mark of LINK2

Go to IP > Firewall, click the Mangle tab and create a new mangle rule.

At Site1, create this mangle rule:
Chain: prerouting, dst-addr: 192.168.40.0/24, Nth-Every:2, Nth-Packet:1, Action:mark-routing, new-routing-mark:LINK2

At Site2, create this mangle rule:
Chain: prerouting, dst-addr: 192.168.88.0/24, Nth-Every:2, Nth-Packet:1, Action:mark-routing, new-routing-mark:LINK2

Packets from the same TCP connection WILL be split across both links, however I believe this will be OK since NAT is NOT involved. Load balancing articles talk about connection marking/tracking, this is only required for load balancing over NAT.

More fun stuff:
You can set a second route with dst-address:0.0.0.0/0 and distance=1 on both sites. Set the original 0.0.0.0/0 route to check gateway with PING. Now if internet goes offline for either site, it’ll failover to the other site’s internet connection. And it’ll revert back when internet is restored.

ganekon · September 28, 2015, 1:52am

I thought nobody will answer, okay… I will try this evening and tell you how it come out afterwards. Thanks Van9018

ganekon · September 28, 2015, 11:34am

Good evening, Van9018
I'm going to connect on eth4 first.
I created this address: 192.168.99.12/24 for site 1, and 192.168.99.14/24 on site 2.
And created static routing for site 1 as in quoted below:

[admin@MikroTik12] /ip address> print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 ;;; IP-Public
.../29 ... Port1-TRIPLAY+
1 ;;; IP-Lan
192.168.40.1/24 192.168.40.0 Port2-LAN
2 192.168.99.12/24 192.168.99.0 LAN4
3 D .../32 ... pppoe-out1

[admin@MikroTik12] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY

0 ADS 0.0.0.0/0 36.83.252.
1 X S 0.0.0.0/0 202.51.107
2 X S 0.0.0.0/0 192.168.88
3 ADC .../32 ... pppoe-out1
4 ADC 192.168.40.0/24 192.168.40.1 Port2-LAN
5 A S 192.168.88.0/24 LAN4
6 ADC 192.168.99.0/24 192.168.99.12 LAN4
7 ADC .../29 ... Port1-TRIP

On site 2, are vice versa.
The route was active,
But I get this Reply from 192.168.99.14: Destination Host Unreachable

Can you please tell me where did I go wrong?

ganekon · September 30, 2015, 10:15am

EDIT from last post:

ganekon:

Good evening, Van9018
I’m going to connect on eth4 first.
I created this address: 192.168.99.12/24 for site 2, and 192.168.99.14/24 on site 1.
And created static routing for site 2 as in quoted below:

[admin@MikroTik12] /ip address> print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 ;;; IP-Public
.../29 ... Port1-TRIPLAY+
1 ;;; IP-Lan
192.168.40.1/24 192.168.40.0 Port2-LAN
2 192.168.99.12/24 192.168.99.0 LAN4
3 D .../32 ... pppoe-out1

[admin@MikroTik12] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY

0 ADS 0.0.0.0/0 XXX.XXX.XXX.XXX
1 X S 0.0.0.0/0 XXX.XXX.XXX.XXX
2 X S 0.0.0.0/0 192.168.88
3 ADC .../32 ... pppoe-out1
4 ADC 192.168.40.0/24 192.168.40.1 Port2-LAN
5 A S 192.168.88.0/24 LAN4
6 ADC 192.168.99.0/24 192.168.99.12 LAN4
7 ADC .../29 ... Port1-TRIP

On site 1, are vice versa. I created 192.168.99.14/24 address and static routing for 192.168.40.0/24
The route was active.
When I ping from site 2, I get this: Reply from 192.168.99.14: Destination Host Unreachable

Could you please tell me where did I go wrong?

Van9018 · October 1, 2015, 9:03pm

See the pic. Make sure no ports have Master-Port set and no ports are part of a bridge.

Disable mangle rules if you tried setting up load balancing, start with just one connection between the two routers.

To troubleshoot, ping from the mikrotiks, not your PC. Tools > Ping

From Site 1, Ping 192.168.99.12. Don’t specify interface. Do you get a response? Specifying the interface forces the ping down that interface rather than letting the Mikrotik use its routing logic.

From Site 1, Ping 192.168.88.1, response? It should know to send 88.0/24 packets to 99.12.

From Site 1, Ping a host on 88.0 network. Response? Check the host’s firewall doesn’t block pings..

The first 3 routes on both Mikrotiks should automatically be created when you set the static IPs on Eth1, Eth2 & Eth4. Only the last route do you have to add.
Untitled.jpg

jarda · October 2, 2015, 12:22pm

It could be even more simple as the neutral segment in between is not necessary. Just let the port of one router to be part of the other’s router network and se the routing accordingly. I recommend to switch connection tracking on and mark incoming traffic according to its source to ensure the responses will be sent back by additional routes in all cases.

Van9018 · October 2, 2015, 6:58pm

Jarda, one of the original goals was to have two connections between the sites, then do load balancing.

If Site2’s Eth3 and Eth4 both belong to Site1’s LAN, then I can’t see how to set up load balancing routing on Site2 since Eth3 and Eth4 have the same subnet. Since one connection must be on another subnet, I figured make both on their own subnet for consistency.

ganekon · October 9, 2015, 2:56am

Van9018:

See the pic. Make sure no ports have Master-Port set and no ports are part of a bridge.

Disable mangle rules if you tried setting up load balancing, start with just one connection between the two routers.

To troubleshoot, ping from the mikrotiks, not your PC. Tools > Ping

From Site 1, Ping 192.168.99.12. Don't specify interface. Do you get a response? Specifying the interface forces the ping down that interface rather than letting the Mikrotik use its routing logic.

From Site 1, Ping 192.168.88.1, response? It should know to send 88.0/24 packets to 99.12.

From Site 1, Ping a host on 88.0 network. Response? Check the host's firewall doesn't block pings..

The first 3 routes on both Mikrotiks should automatically be created when you set the static IPs on Eth1, Eth2 & Eth4. Only the last route do you have to add.

Dear Van9018,

I've made sure that there are no ports linked to Master-Port.
Both bridge from each sites are removed.
All mangles are disabled.

When I ping from site 1 and site 2 via winbox to 192.168.99.12 and 192.168.99.14, I got this :
ping 12.png
When I ping from site 1 to 192.168.88.1 I got this:
ping%20881.png
From site 2 to 192.168.40.1, also have similar reply.

When I ping from site 1 to 192.168.88.11
ping 880.png
From site 2 to 192.168.40.0, I also didn't get any respond.

Here's my address and routing tables from site 1:

[admin@MikroTik12] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 ;;; IP-Public
202.51.XXX.XXX/29 202.51.XXX.XXX Port1-TRIPLAY+
1 ;;; IP-Lan
192.168.40.1/24 192.168.40.0 Port2-LAN
2 192.168.99.12/24 192.168.99.0 LAN4
3 D 36.XXX.XXX.XXX/32 36.XXX.XXX.XXX pppoe-out1

[admin@MikroTik12] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 ADS 0.0.0.0/0 XXX.XXX.XXX.XXX 1
1 X S 0.0.0.0/0 XXX.XXX.XXX.XXX 1
2 ADC XXX.XXX.XXX.XXX/32 XXX.XXX.XXX.XXX pppoe-out1 0
3 ADC 192.168.40.0/24 192.168.40.1 Port2-LAN 0
4 A S 192.168.88.0/24 192.168.99.14 1
5 ADC 192.168.99.0/24 192.168.99.12 LAN4 0
6 ADC XXX.XXX.XXX.XXX/29 XXX.XXX.XXX.XXX Port1-TRIPLAY+ 0

Why there is no responses in 192.168.88.0 and 192.168.40.0 ?
Was it because the router firewall settings? Because I can ping from inside the 192.168.88.0 LAN's and the hosts firewalls doesn't block pings.

ganekon · October 9, 2015, 2:57am

Here’s the picture of address and routing from site 1:
address.jpg
routing.jpg

ganekon · October 12, 2015, 1:35pm

Good evening Van9018,

Now I get reply from each sites and every hosts. But I can’t find hosts on the other sites, and the LAN messenger that using 50000 port udp. I already made NAT on each sites for dst-nat and src-nat.

[admin@MikroTik12] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Network VPN
chain=srcnat action=masquerade src-address=10.10.10.0/24

1 ;;; NAT SPEEDY
chain=srcnat action=masquerade out-interface=pppoe-out1

2 ;;; NAT lan messenger
chain=dstnat action=dst-nat to-addresses=192.168.40.0/24 to-ports=50000
protocol=udp dst-address=192.168.88.0/24

3 chain=srcnat action=src-nat to-addresses=192.168.88.0/24 to-ports=50000
protocol=udp src-address=192.168.40.0/24

4 ;;; NAT CCTV
chain=dstnat action=dst-nat to-addresses=192.168.40.96 to-ports=8101
protocol=tcp dst-address=36.83.255.66 dst-port=8101

5 chain=dstnat action=dst-nat to-addresses=192.168.40.96 to-ports=81
protocol=tcp dst-address=36.83.255.66 dst-port=81

6 chain=dstnat action=dst-nat to-addresses=192.168.40.96 to-ports=15966
protocol=tcp dst-address=36.83.255.66 dst-port=15966
– [Q quit|D dump|down]

Van9018 · October 13, 2015, 5:11am

No NAT is required between site1 and site2, packets get routed just fine.

NAT is normally only required for WAN connections.

If you want to connect to CCTV, you’d use regular port forwarding (which is a dst-nat rule). It would look like this:

chain=dstnat action=dst-nat to-addresses=192.168.40.96 protocol=tcp dst-port=8101 in-interface=pppoe-out1

You can use dst-address, but if you’re wan static IP ever changes (or you were using dynamic), then the rule would stop working until you manually updated the dst-address IP. in-interface is better. If you’re not altering the dst-port, then you don’t have to specify to-ports.

Rule #0, Network VPN
This one says packets going into the devices routing logic (not specific to any interface) should be masqueraded BUT only when the src-address of the packet is in the 10.10.10.0/24 network. You don’t have a network like that specified so I’m thinking this rule doesn’t do anything.

Rule #1, NAT SPEEDY
Packets leaving the pppoe-out1 interface will have it’s src-address changed to the pppoe-out1’s IP, this rule is correct.

Rule #2, NAT lan messenger.
This rule says that any UDP packet destined to any device on the 1921.68.40./24 network should have it’s dst-port changed to 50000, and dst-address changed as well. This rule seems incorrect and can be deleted as packets from the 40.0 network don’t require NAT to go to the 88.0 network (and vice versa)

Rule #3
This one applies to UDP packets and changes the src-address of packets, likely breaking the communication. It can be deleted as well.

Rule #4, NAT CCTV
When inbound packets on the pppoe interface are destined to port 8101, forward to 192.168.40.96 - this is correct however you can omit to-ports=8101, and it’s better semantics to use in-interface=pppoe-out1 instead of dst-address=36.83.255.66

Rule #5
Looks correct and will work, but again you can omit the to-ports and replace dst-address with in-interface.

Rule #6
Looks correct and will work, but again you can omit the to-ports and replace dst-address with in-interface.

ganekon · October 13, 2015, 7:21am

I see, no wonder I can’t log into other site’s router; and works fine after I disabled the rules.

The WAN IP is static, so I think I won’t have to change every time the address are changing.

Rule #0 are from previous settings. Will it reduce the performance if I just leave it?

Rule #2&3 I was experimenting, It made me can’t connect to other site’s router.

Rule #4, 5, 6. I wasn’t sure which port it was using, so I made few of them.
Which one is more save? using the IP in dst-address or in-interface?

I still can’t see other site’s hosts in my Network; but I can ping each hosts. I wonder was it because my firewall settings?

Van9018 · October 13, 2015, 5:08pm

Rule #0 Firewall rules do impact performance but with so few rules, I doubt you’d be able to notice. You can leave it. Or disable it if it’s not needed but you want to keep it for reference.

Rules #4, 5, 6 - They’re fine. Changing dst-address to in-interface won’t improve performance. Using in-interface is more syntactic, meaning it’s better just because if you ever need to change your static IP, you don’t have to remember to also update your firewall rules.

Rules 2 & 3 would’ve broke the communication between the sites.

What do you mean you can’t see hosts in other site? If using windows and trying to browse your network, your PC will only ever detect other PCs on the same subnet, never the other site.

If you want to use the hostname to connect to other PCs in other site, you’d have to use a WINS server or DNS server. But even then the hosts still won’t show up in network neighbourhood.

ganekon · October 15, 2015, 7:38am

What do you mean you can’t see hosts in other site? If using windows and trying to browse your network, your PC will only ever detect other PCs on the same subnet, never the other site.

I guess that’s a shocking truth of the century I didn’t knew that. And yes, I was looking for them in the network neighborhood.

If you want to use the hostname to connect to other PCs in other site, you’d have to use a WINS server or DNS server. But even then the hosts still won’t show up in network neighbourhood.

I might implement WINS or DNS in a few month, what I’m trying to accomplish; since it was more urgent is: We were using LAN messenger applications to chat and sending files. It uses UDP port 50000. And now I’m trying to reach the other sites. I know it’s off topic, and I haven’t finish the load balancing in port 5.