I have the router mikrotik rb2011UiAS-2hnD
the internet is entering it form ethernet cable through it’s port no 2 the incoming from isp company was 20M download and 6M upload everything till here is OK
I raised the speed from isp to 100M download and 50M upload
but the maximum speed of download is still 20M I’ve disabled the queues that controls speed temporarily for test purposes
what I can do to benefit from the full speed, or I must get a new router
The RB2011 should be able to route a lot more, accoring to the test results around 250Mbps.
How are you testing?
What is the cpu usage during testing?
Are you using fasttrack (probably not, as you are using queues)?
Can you share your config to do a sanity check?
/export file=anynameyoulike
Remove serial and any other private info, post between code tags by using the </> button.
# 2025-01-27 14:30:57 by RouterOS 7.17
# software id = VN1C-383H
#
# model = RB2011UiAS-2HnD
# serial number =
/interface bridge
add name=Bridge_TamayouzG
add name=Bridge_Wireless
add admin-mac=7 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether3 ] name="TO SWITCH"
set [ find default-name=ether1 ] disabled=yes
set [ find default-name=ether2 ] comment="\EF\BF\BD\EF\BF\BD\EF\BF\BD\EF\BF\BD\
\EF\BF\BD\EF\BF\BD\EF\BF\BD \EF\BF\BD\EF\BF\BD \EF\BF\BD\EF\BF\BD\EF\BF\BD\
\EF\BF\BD \EF\BF\BD\EF\BF\BD\EF\BF\BD\EF\BF\BD \EF\BF\BD\EF\BF\BD\EF\BF\BD\
\_\EF\BF\BD\EF\BF\BD\EF\BF\BD\EF\BF\BD\EF\BF\BD\EF\BF\BD 6" \
rx-flow-control=auto tx-flow-control=auto
set [ find default-name=sfp1 ] disabled=yes
/interface pppoe-client
add add-default-route=yes dial-on-demand=yes disabled=no interface=ether2 \
name=Fiber use-peer-dns=yes user=jo
/interface vlan
add interface=bridge name=Managment vlan-id=2
add interface=bridge name=Markiting vlan-id=4
add interface=bridge name=Programing vlan-id=3
/interface ethernet switch
set 0 cpu-flow-control=no
/interface ethernet switch port
set 3 default-vlan-id=1
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=Profile1 \
supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country= disabled=no \
distance=indoors frequency=auto frequency-mode=manual-txpower mode=\
ap-bridge security-profile=Profile1 ssid=Tamayouz wireless-protocol=\
802.11 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=0 \
master-interface=wlan1 multicast-buffering=disabled name=wlan2 \
security-profile=Profile1 ssid="New Tamayouz" wds-cost-range=0 \
wds-default-cost=1 wps-mode=disabled
/ip pool
add name=New_Tamayouz_Pool ranges=192.168.10.2-192.168.10.254
add name=Tamayouz_Pool ranges=192.168.9.2-192.168.9.254
add name=LAN ranges=192.168.0.3-192.168.0.254
add name=ManagmentVlan ranges=192.168.1.2-192.168.1.254
add name=ProgramingVlan ranges=192.168.2.2-192.168.2.254
add name=MarkitingVlan ranges=192.168.3.2-192.168.3.254
add name=dhcp_boss ranges=192.168.5.2-192.168.5.50
/ip dhcp-server
add address-pool=New_Tamayouz_Pool interface=Bridge_TamayouzG name=\
"DHCP_New Tamayouz"
add address-pool=Tamayouz_Pool interface=Bridge_Wireless name=DHCP_Tamayouz
add address-pool=LAN interface=bridge name=DHCP_LAN
add address-pool=ManagmentVlan interface=Managment name=dhcp1
add address-pool=ProgramingVlan interface=Programing name=dhcp2
add address-pool=MarkitingVlan interface=Markiting name=dhcp3
/port
set 0 name=serial0
/queue type
add kind=pcq name="pcq DownloadM" pcq-classifier=dst-address
add kind=pcq name="pcq UplodeM" pcq-classifier=src-address
add kind=pcq name=pcq_Download_mobile pcq-classifier=dst-address
add kind=pcq name=pcq_uplode_mobile pcq-classifier=src-address
add kind=pcq name=pcq_DownT pcq-classifier=dst-address pcq-rate=6M
add kind=pcq name=pcq_UplodeT pcq-classifier=src-address pcq-rate=5M
add kind=pcq name=pcq-boss-down pcq-classifier=dst-address
add kind=pcq name=pcq-boss-uplode pcq-classifier=src-address
add kind=pcq name=ProgramingD pcq-classifier=dst-address
add kind=pcq name=ProgramingU pcq-classifier=src-address
add kind=pcq name=MarkitingD pcq-classifier=dst-address
add kind=pcq name=MarkitingU pcq-classifier=src-address
add kind=pcq name="all D" pcq-classifier=dst-address
add kind=pcq name="all U" pcq-classifier=src-address
/queue interface
set "TO SWITCH" queue=default
/queue simple
add limit-at=8M/15M max-limit=8M/15M name=NewTamayouz priority=4/4 queue=\
pcq_uplode_mobile/pcq_Download_mobile target=192.168.10.0/24
add limit-at=8M/15M max-limit=8M/15M name=Tamayouz priority=1/1 queue=\
pcq_UplodeT/pcq_DownT target=192.168.9.0/24
add limit-at=15M/75M max-limit=15M/75M name=Managment priority=1/1 queue=\
"pcq UplodeM/pcq DownloadM" target=192.168.1.0/24
add limit-at=15M/75M max-limit=15M/75M name=Programing priority=3/3 queue=\
ProgramingU/ProgramingD target=192.168.2.0/24
add limit-at=15M/75M max-limit=15M/75M name=Markiting priority=5/5 queue=\
MarkitingU/MarkitingD target=192.168.3.0/24
add limit-at=50M/100M max-limit=50M/100M name=all priority=1/1 queue=\
default/default target=192.168.0.0/24
add limit-at=20M/50M max-limit=20M/50M name="boss mobile" parent=all \
priority=1/1 queue=default/default target=192.168.0.102/32
/disk settings
set auto-media-interface=bridge auto-media-sharing=yes auto-smb-sharing=yes
/interface bridge port
add bridge=bridge comment=defconf disabled=yes interface=ether2
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf disabled=yes interface=sfp1
add bridge=bridge interface="TO SWITCH"
add bridge=Bridge_TamayouzG interface=wlan2
add bridge=Bridge_Wireless interface=wlan1
add bridge=bridge comment=defconf interface=LAN multicast-router=permanent
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface bridge vlan
add bridge=bridge tagged="TO SWITCH" untagged=ether4 vlan-ids=2
add bridge=bridge tagged="TO SWITCH" untagged=ether4 vlan-ids=3
add bridge=bridge tagged="TO SWITCH" untagged=ether4 vlan-ids=4
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface ovpn-server server
add mac-address=FE:0F name=ovpn-server1
/interface wireless access-list
add
/interface wireless connect-list
add interface=wlan1
/ip address
add address=192.168.0.1/24 comment=defconf interface=bridge network=\
192.168.0.0
add address=192.168.9.1/24 interface=Bridge_Wireless network=192.168.9.0
add address=192.168.10.1/24 interface=Bridge_TamayouzG network=192.168.10.0
add address=192.168.1.1/24 interface=Managment network=192.168.1.0
add address=192.168.2.1/24 interface=Programing network=192.168.2.0
add address=192.168.3.1/24 interface=Markiting network=192.168.3.0
/ip dhcp-client
# Interface not active
add comment=defconf interface=ether1
/ip dhcp-server lease
add address=192.168.0.69 client-id=1:6c:62:6d:6c:3d:85 mac-address=\
6C:62:6D:6C:3D:85 server=*2
add address=192.168.0.14 client-id=1:14:da:e9:cd:a4:99 comment=KH-1 \
mac-address=14:DA:E9:CD:A4:99 server=*2
add address=192.168.0.78 client-id=1:50:e5:49:3c:38:67 comment=REN-5 \
mac-address=50:E5:49:3C:38:67 server=*2
add address=192.168.0.43 client-id=1:14:da:e9:cd:a5:b1 comment=KH4 \
mac-address=14:DA:E9:CD:A5:B1 server=*2
add address=192.168.0.72 client-id=1:0:19:db:5f:f8:da comment=\
"\E3\E5\E4\E6\D1 FG2" mac-address=00:19:DB:5F:F8:DA server=*2
add address=192.168.0.16 client-id=1:f8:32:e4:a1:5a:2c comment=\
"Faten Accounting" disabled=yes mac-address=F8:32:E4:A1:5A:2C server=*2
add address=192.168.0.9 client-id=1:0:10:75:06:7D:29 comment=TamayouzNas \
lease-time=30m mac-address=00:10:75:06:7D:29 server=*2
add address=192.168.0.10 client-id=1:0:10:75:06:7D:28 comment=\
"Nas BackUp Hard" disabled=yes mac-address=00:10:75:06:7D:28 server=*2
add address=192.168.0.45 client-id=1:54:05:db:19:0d:df comment=\
"\D3\ED\D1\DD\D1 \C3\CD\E3\CF \C8\DB\CF\C7\CF\ED BG-SERVER" mac-address=\
54:05:DB:19:0D:DF server=*2
add address=192.168.0.60 client-id=1:8c:89:a5:5b:0c:29 comment=\
"EMAIL SERVER1" mac-address=8C:89:A5:5B:0C:29 server=*2
add address=192.168.0.100 always-broadcast=yes client-id=1:78:24:af:34:af:55 \
comment=SERVER1 mac-address=78:24:AF:34:AF:55 server=*2
add address=192.168.0.67 client-id=1:ec:22:80:4:1c:65 mac-address=\
EC:22:80:04:1C:65 server=DHCP_LAN
add address=192.168.0.65 client-id=1:18:31:bf:2c:b:0 mac-address=\
18:31:BF:2C:0B:00 server=DHCP_LAN
add address=192.168.0.41 client-id=1:14:da:e9:cd:a4:99 comment=KH-1 \
mac-address=14:DA:E9:CD:A4:99 server=DHCP_LAN
add address=192.168.0.17 client-id=1:0:19:db:5f:f8:d4 mac-address=\
00:19:DB:5F:F8:D4 server=DHCP_LAN
add address=192.168.0.48 client-id=1:d4:3d:7e:4:30:e1 comment=IT-MAN \
mac-address=D4:3D:7E:04:30:E1 server=DHCP_LAN
add address=192.168.0.12 client-id=1:0:19:db:30:4b:ec comment=PC2 \
mac-address=00:19:DB:30:4B:EC server=DHCP_LAN
add address=192.168.0.47 client-id=1:a4:4c:c8:44:51:4e mac-address=\
A4:4C:C8:44:51:4E server=DHCP_LAN
add address=192.168.0.34 client-id=1:d4:3d:7e:4:31:22 mac-address=\
D4:3D:7E:04:31:22 server=DHCP_LAN
add address=192.168.0.81 client-id=1:f8:32:e4:a1:5a:2c comment=IT-DEP1 \
mac-address=F8:32:E4:A1:5A:2C server=DHCP_LAN
add address=192.168.0.56 client-id=1:14:da:e9:cd:a5:b1 comment=KH-4 \
mac-address=14:DA:E9:CD:A5:B1 server=DHCP_LAN
add address=192.168.0.54 client-id=1:6c:62:6d:6c:3d:aa comment=KH3 \
mac-address=6C:62:6D:6C:3D:AA server=DHCP_LAN
add address=192.168.0.76 client-id=1:50:e5:49:b5:cb:8e comment=REN-2 \
mac-address=50:E5:49:B5:CB:8E server=DHCP_LAN
add address=192.168.0.29 client-id=1:70:8b:cd:4c:68:7c comment=RENDER-4 \
mac-address=70:8B:CD:4C:68:7C server=DHCP_LAN
add address=192.168.0.58 client-id=1:b0:7b:25:73:83:63 comment="Mahmood lap" \
mac-address=B0:7B:25:73:83:63 server=DHCP_LAN
add address=192.168.0.23 client-id=1:0:22:15:d1:e4:65 comment=\
"KH6 \E3\CD\E3\E6\CF \CD\E3\C7\CF\ED\C9" mac-address=00:22:15:D1:E4:65 \
server=DHCP_LAN
add address=192.168.0.59 client-id=1:ba:47:9b:19:38:17 mac-address=\
BA:47:9B:19:38:17 server=DHCP_LAN
add address=192.168.0.57 client-id=1:e6:93:5a:81:8:0 mac-address=\
E6:93:5A:81:08:00 server=DHCP_LAN
add address=192.168.0.31 client-id=1:50:e5:49:b5:cb:35 comment="ren 6" \
mac-address=50:E5:49:B5:CB:35 server=DHCP_LAN
add address=192.168.0.46 client-id=1:d4:3d:7e:4:30:de mac-address=\
D4:3D:7E:04:30:DE server=DHCP_LAN
add address=192.168.0.55 client-id=1:d4:3d:7e:4:31:18 mac-address=\
D4:3D:7E:04:31:18 server=DHCP_LAN
add address=192.168.0.42 client-id=1:70:8b:cd:4c:68:4e comment=RENDER3 \
mac-address=70:8B:CD:4C:68:4E server=DHCP_LAN
add address=192.168.0.38 client-id=1:ac:9e:17:4d:e8:a2 mac-address=\
AC:9E:17:4D:E8:A2 server=DHCP_LAN
add address=192.168.0.77 client-id=1:54:e1:ad:c6:42:e0 mac-address=\
54:E1:AD:C6:42:E0 server=DHCP_LAN
add address=192.168.0.24 client-id=1:70:8b:cd:4c:67:d9 mac-address=\
70:8B:CD:4C:67:D9 server=DHCP_LAN
add address=192.168.0.30 client-id=1:a4:4c:c8:14:bc:eb mac-address=\
A4:4C:C8:14:BC:EB server=DHCP_LAN
add address=192.168.0.26 client-id=1:60:18:95:5e:f0:e mac-address=\
60:18:95:5E:F0:0E server=DHCP_LAN
add address=192.168.0.11 client-id=1:0:15:c5:bb:c8:34 mac-address=\
00:15:C5:BB:C8:34 server=DHCP_LAN
add address=192.168.0.53 client-id=1:0:24:8c:6f:1:bb mac-address=\
00:24:8C:6F:01:BB server=DHCP_LAN
add address=192.168.0.49 client-id=1:34:97:f6:dc:64:ac mac-address=\
34:97:F6:DC:64:AC server=DHCP_LAN
add address=192.168.0.63 client-id=1:30:e1:71:75:49:48 mac-address=\
30:E1:71:75:49:48 server=DHCP_LAN
add address=192.168.0.74 client-id=1:0:19:db:5f:f8:e8 comment=\
"linux ahmad al rayees" mac-address=00:19:DB:5F:F8:E8 server=DHCP_LAN
add address=192.168.0.62 client-id=1:0:19:db:5f:f8:f3 mac-address=\
00:19:DB:5F:F8:F3 server=DHCP_LAN
add address=192.168.0.25 client-id=1:48:5b:39:a0:76:d7 mac-address=\
48:5B:39:A0:76:D7 server=DHCP_LAN
add address=192.168.0.44 client-id=1:50:e5:49:b5:ca:2a mac-address=\
50:E5:49:B5:CA:2A server=DHCP_LAN
add address=192.168.0.3 client-id=1:0:c0:49:fe:fa:d5 mac-address=\
00:C0:49:FE:FA:D5 server=DHCP_LAN
add address=192.168.0.35 client-id=1:50:e5:49:55:fb:49 comment="hassan saad" \
mac-address=50:E5:49:55:FB:49 server=DHCP_LAN
add address=192.168.0.19 client-id=1:4c:cc:6a:49:4e:b8 mac-address=\
4C:CC:6A:49:4E:B8 server=DHCP_LAN
add address=192.168.0.15 client-id=1:0:11:d8:ac:c1:5b mac-address=\
00:11:D8:AC:C1:5B server=DHCP_LAN
add address=192.168.0.37 client-id=1:68:5b:35:84:56:2c comment="mac mini" \
mac-address=68:5B:35:84:56:2C server=DHCP_LAN
add address=192.168.2.9 client-id=1:34:97:f6:dc:64:ac mac-address=\
34:97:F6:DC:64:AC server=dhcp2
add address=192.168.2.8 client-id=1:b0:7b:25:73:83:63 mac-address=\
B0:7B:25:73:83:63 server=dhcp2
add address=192.168.2.7 client-id=1:0:15:c5:bb:c8:34 mac-address=\
00:15:C5:BB:C8:34 server=dhcp2
add address=192.168.2.6 client-id=1:48:5b:39:a0:76:d7 mac-address=\
48:5B:39:A0:76:D7 server=dhcp2
add address=192.168.3.3 client-id=1:60:18:95:5e:f0:e mac-address=\
60:18:95:5E:F0:0E server=dhcp3
add address=192.168.3.2 client-id=1:14:da:e9:cd:a5:b1 mac-address=\
14:DA:E9:CD:A5:B1 server=dhcp3
add address=192.168.2.13 client-id=1:6c:62:6d:6c:3d:aa mac-address=\
6C:62:6D:6C:3D:AA server=dhcp2
add address=192.168.2.11 client-id=1:18:31:bf:2c:b:0 mac-address=\
18:31:BF:2C:0B:00 server=dhcp2
add address=192.168.2.4 client-id=\
ff:75:10:82:7e:0:2:0:0:ab:11:65:7c:14:7f:6:9c:d6:ad mac-address=\
00:19:DB:5F:F8:E8 server=dhcp2
add address=192.168.1.3 client-id=1:14:da:e9:cd:a4:99 mac-address=\
14:DA:E9:CD:A4:99 server=dhcp1
add address=192.168.1.4 client-id=1:d4:3d:7e:4:30:de mac-address=\
D4:3D:7E:04:30:DE server=dhcp1
add address=192.168.3.4 client-id=1:f8:32:e4:a1:5a:2c disabled=yes \
mac-address=F8:32:E4:A1:5A:2C server=dhcp3
add address=192.168.2.19 client-id=1:50:e5:49:b5:cb:8e mac-address=\
50:E5:49:B5:CB:8E server=dhcp2
add address=192.168.2.16 client-id=1:0:24:8c:6f:1:bb mac-address=\
00:24:8C:6F:01:BB server=dhcp2
add address=192.168.1.6 client-id=1:4c:cc:6a:49:4e:b8 mac-address=\
4C:CC:6A:49:4E:B8 server=dhcp1
add address=192.168.2.5 client-id=1:a4:4c:c8:14:bc:eb mac-address=\
A4:4C:C8:14:BC:EB server=dhcp2
add address=192.168.2.12 client-id=1:50:e5:49:b5:cb:35 mac-address=\
50:E5:49:B5:CB:35 server=dhcp2
add address=192.168.2.10 client-id=1:70:8b:cd:4c:68:4e mac-address=\
70:8B:CD:4C:68:4E server=dhcp2
add address=192.168.3.6 client-id=1:70:8b:cd:4c:68:7c mac-address=\
70:8B:CD:4C:68:7C server=dhcp3
add address=192.168.1.7 client-id=1:0:11:d8:ac:c1:5b mac-address=\
00:11:D8:AC:C1:5B server=dhcp1
add address=192.168.2.18 client-id=1:ac:9e:17:4d:e8:a2 mac-address=\
AC:9E:17:4D:E8:A2 server=dhcp2
add address=192.168.2.15 client-id=1:d4:3d:7e:4:31:22 mac-address=\
D4:3D:7E:04:31:22 server=dhcp2
add address=192.168.3.5 client-id=1:50:e5:49:b5:ca:2a mac-address=\
50:E5:49:B5:CA:2A server=dhcp3
add address=192.168.3.7 client-id=1:30:e1:71:75:49:48 mac-address=\
30:E1:71:75:49:48 server=dhcp3
add address=192.168.2.20 client-id=1:0:e0:4c:68:0:75 mac-address=\
00:E0:4C:68:00:75 server=dhcp2
add address=192.168.1.9 client-id=1:30:e1:71:75:49:48 mac-address=\
30:E1:71:75:49:48 server=dhcp1
add address=192.168.2.23 client-id=1:68:5b:35:84:56:2c mac-address=\
68:5B:35:84:56:2C server=dhcp2
add address=192.168.2.3 client-id=1:d4:3d:7e:4:31:18 mac-address=\
D4:3D:7E:04:31:18 server=dhcp2
add address=192.168.2.14 client-id=1:a4:4c:c8:44:51:4e mac-address=\
A4:4C:C8:44:51:4E server=dhcp2
add address=192.168.3.8 client-id=1:0:19:db:5f:f8:da mac-address=\
00:19:DB:5F:F8:DA server=dhcp3
add address=192.168.2.2 client-id=1:50:e5:49:b5:ca:2a mac-address=\
50:E5:49:B5:CA:2A server=dhcp2
add address=192.168.2.17 client-id=1:70:8b:cd:4c:67:d9 mac-address=\
70:8B:CD:4C:67:D9 server=dhcp2
add address=192.168.1.2 client-id=1:18:31:bf:2c:b:0 mac-address=\
18:31:BF:2C:0B:00 server=dhcp1
add address=192.168.0.102 client-id=1:92:83:28:9a:20:9b mac-address=\
92:83:28:9A:20:9B server=DHCP_LAN
add address=192.168.0.2 always-broadcast=yes mac-address=04:BA:D6:C4:17:E0 \
server=DHCP_LAN use-src-mac=yes
add address=192.168.0.6 client-id=1:54:e6:fc:81:18:a2 comment=trueNas2 \
mac-address=54:E6:FC:81:18:A2 server=DHCP_LAN
add address=192.168.2.21 client-id=1:0:22:15:d1:e4:65 mac-address=\
00:22:15:D1:E4:65 server=dhcp2
add address=192.168.2.26 client-id=1:30:e1:71:75:49:48 mac-address=\
30:E1:71:75:49:48 server=dhcp2
add address=192.168.2.27 client-id=1:0:19:db:5f:f8:f3 mac-address=\
00:19:DB:5F:F8:F3 server=dhcp2
add address=192.168.2.25 client-id=1:ec:22:80:4:1c:65 mac-address=\
EC:22:80:04:1C:65 server=dhcp2
add address=192.168.2.24 client-id=1:0:19:db:5f:f8:da mac-address=\
00:19:DB:5F:F8:DA server=dhcp2
add address=192.168.0.27 client-id=1:14:da:e9:cd:a5:ae mac-address=\
14:DA:E9:CD:A5:AE server=DHCP_LAN
add address=192.168.2.22 client-id=1:0:10:75:6:7d:28 comment="Tamayouz Nas" \
mac-address=00:10:75:06:7D:28 server=dhcp2
add address=192.168.3.9 client-id=1:e4:54:e8:fd:d8:38 mac-address=\
E4:54:E8:FD:D8:38 server=dhcp3
add address=192.168.2.28 client-id=1:6c:62:6d:6c:3d:85 comment=\
"my nas storage" mac-address=6C:62:6D:6C:3D:85 server=dhcp2
add address=192.168.2.37 client-id=1:54:e6:fc:81:18:a2 comment=\
"sharing server2" mac-address=54:E6:FC:81:18:A2 server=dhcp2
add address=192.168.2.29 client-id=1:50:e5:49:3c:38:67 mac-address=\
50:E5:49:3C:38:67 server=dhcp2
add address=192.168.1.5 client-id=1:6c:62:6d:6c:3d:85 mac-address=\
6C:62:6D:6C:3D:85 server=dhcp1
/ip dhcp-server network
add address=192.168.0.0/24 comment=defconf dns-server=\
192.168.0.100,192.168.0.60,192.168.0.17 domain=192.168.0.100 gateway=\
192.168.0.1 netmask=24 wins-server=192.168.0.60
add address=192.168.1.0/24 dns-server=192.168.0.100,192.168.0.60,192.168.0.17 \
domain=192.168.0.100 gateway=192.168.1.1 netmask=24 wins-server=\
192.168.0.60
add address=192.168.2.0/24 dns-server=192.168.0.100,192.168.0.60,192.168.0.17 \
domain=192.168.0.100 gateway=192.168.2.1 netmask=24 wins-server=\
192.168.0.60
add address=192.168.3.0/24 dns-server=192.168.0.100,192.168.0.60,192.168.0.17 \
domain=192.168.0.100 gateway=192.168.3.1 netmask=24 wins-server=\
192.168.0.60
add address=192.168.5.0/24 dns-server=192.168.0.100,192.168.0.60,192.168.0.17 \
domain=192.168.0.100 gateway=192.168.5.1 wins-server=192.168.0.60
add address=192.168.9.0/24 domain=192.168.0.100 gateway=192.168.9.1 \
wins-server=192.168.0.60
add address=192.168.10.0/24 gateway=192.168.10.1
/ip dns
set allow-remote-requests=yes servers=\
192.168.0.100,8.8.8.8,192.168.0.17,192.168.0.60,8.8.4.4
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=fasttrack-connection chain=forward dst-address=192.168.1.0/24 \
hw-offload=yes src-address=192.168.0.0/24
add action=fasttrack-connection chain=forward dst-address=192.168.0.0/24 \
hw-offload=yes src-address=192.168.1.0/24
add action=fasttrack-connection chain=forward dst-address=192.168.2.0/24 \
hw-offload=yes src-address=192.168.0.0/24
add action=fasttrack-connection chain=forward dst-address=192.168.0.0/24 \
hw-offload=yes src-address=192.168.2.0/24
add action=fasttrack-connection chain=forward dst-address=192.168.3.0/24 \
hw-offload=yes src-address=192.168.0.0/24
add action=fasttrack-connection chain=forward dst-address=192.168.0.0/24 \
hw-offload=yes src-address=192.168.3.0/24
add action=fasttrack-connection chain=forward dst-address=192.168.0.0/24 \
hw-offload=yes src-address=192.168.2.28 ttl=equal:0
add action=fasttrack-connection chain=forward dst-address=192.168.2.28 \
hw-offload=yes src-address=192.168.0.0/24
add action=accept chain=forward dst-address=192.168.0.17 src-address=\
192.168.2.0/24
add action=accept chain=forward dst-address=192.168.2.0/24 src-address=\
192.168.0.17
add action=add-dst-to-address-list address-list=youtube address-list-timeout=\
4w2d chain=forward content=.youtube.com src-address=192.168.2.0/24
add action=add-dst-to-address-list address-list=youtube address-list-timeout=\
4w2d chain=forward content=.youtube.com src-address=192.168.3.0/24
add action=drop chain=forward content=.youtube.com dst-address-list=youtube \
src-address=192.168.2.0/24
add action=accept chain=forward disabled=yes dst-address=192.168.2.0/24 \
src-address=192.168.0.6
add action=accept chain=forward disabled=yes dst-address=192.168.0.6 \
src-address=192.168.2.0/24
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked disabled=yes
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid disabled=yes
add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \
protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" disabled=yes \
dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
disabled=yes in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
disabled=yes ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
disabled=yes ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related disabled=yes hw-offload=yes
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked disabled=yes
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid disabled=yes
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new disabled=yes in-interface-list=WAN
/ip firewall mangle
add action=mark-routing chain=prerouting comment=Youtube dst-address-list=\
youtube new-routing-mark=main
add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
1d chain=forward comment=Youtube dst-port=443 protocol=tcp tls-host=\
*youtube*
add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
1d chain=forward comment=Youtube dst-port=443 protocol=tcp tls-host=\
*ytimg*
add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
1d chain=forward comment=Youtube dst-port=443 protocol=tcp tls-host=\
*googlevideo*
add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
1d chain=forward comment=Youtube dst-port=443 protocol=tcp tls-host=\
*ggpht*
add action=add-dst-to-address-list address-list=FaceBook \
address-list-timeout=1d chain=forward comment=Facebook dst-port=443 \
protocol=tcp tls-host=*facebook*
add action=add-dst-to-address-list address-list=FaceBook \
address-list-timeout=1d chain=forward comment=Facebook dst-port=443 \
protocol=tcp tls-host=*fbcdn*
/ip firewall nat
add action=masquerade chain=srcnat
add action=dst-nat chain=dstnat dst-port=3160 protocol=tcp to-addresses=\
192.168.0.100 to-ports=160
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" \
dst-port=33434-33534 protocol=udp
add action=accept chain=input comment=\
"defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=input comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
add action=accept chain=forward comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
"defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=forward comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
/lcd
set default-screen=informative-slideshow
/lcd interface pages
set 0 interfaces="sfp1,ether1,ether2,TO SWITCH,ether4,ether5,ether6,ether7,eth\
er8,ether9,ether10"
/system clock
set time-zone-name=Asia/Damascus
/system note
set show-at-login=no
/tool e-mail
set tls=starttls
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool sniffer
set file-name=cupture filter-interface=bridge filter-ip-address=\
192.168.0.81/32 filter-ip-protocol=tcp filter-src-ip-address=\
192.168.0.0/24 filter-src-port=https memory-limit=1000KiB