Hi guys,
I trust you are well.
I’m trying to set-up a main PPPoE wan connection and a failover should the 1st PPPoE go down.
I’m completely new at this, and have little to no idea how to do this. So why am I here you may wonder? Well, I’ve been battling with my ISP for at least a month now, and they can’t help at all. Hoping I can get some assistance here.
Details:
It’s a RB3011UiAS router, with the following details:
Main connection, fibre on port 10, fail over on port 1. The issue/problem I’m experiencing is the main WAN connection wont connect. Login credentials and everything is correct, confirmed with ISP.
# jul/24/2019 13:16:43 by RouterOS 6.42.9
# software id = ZV60-XW5U
#
# model = RouterBOARD 3011UiAS
# serial number = 8EED08990D09
/interface bridge
add admin-mac=CC:2D:E0:92:3E:F2 auto-mac=no name=LANbridge
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WANWiru
set [ find default-name=ether2 ] name=ether2-LANmaster
set [ find default-name=ether3 ] name=ether3-LANslave
set [ find default-name=ether4 ] name=ether4-LANslave
set [ find default-name=ether5 ] name=ether5-LANslave
set [ find default-name=ether6 ] name=ether6-LANmaster
set [ find default-name=ether7 ] name=ether7-LANslave
set [ find default-name=ether8 ] name=ether8-LANslave
set [ find default-name=ether9 ] name=ether9-LANSlave
set [ find default-name=ether10 ] name=ether10-WANfibre
/interface pppoe-client
add add-default-route=yes comment=Main disabled=no interface=ether10-WANfibre \
name=pppoe-WebAfrica use-peer-dns=yes user=bav67@wafibre
add add-default-route=yes allow=chap comment=Failover default-route-distance=\
10 disabled=no interface=ether1-WANWiru name=pppoe-Wirulink use-peer-dns=\
yes user=wirulink_MAR082@wirulink.co.za
/interface vlan
add interface=LANbridge name="Voice Vlan" vlan-id=256
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk group-ciphers=tkip,aes-ccm mode=\
dynamic-keys name=WPA supplicant-identity=MikroTik unicast-ciphers=\
tkip,aes-ccm
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool ranges=192.168.0.3-192.168.0.99
add name="Voice Vlan" ranges=10.0.10.100-10.0.10.102
/ip dhcp-server
add add-arp=yes address-pool=dhcp_pool disabled=no interface=LANbridge \
lease-time=30m name=LAN_DHCP
add add-arp=yes address-pool="Voice Vlan" authoritative=after-2sec-delay \
interface=LANbridge name="Voice Vlan"
/ppp profile
set *FFFFFFFE use-encryption=default
/snmp community
set [ find default=yes ] addresses=154.66.153.7/32 name=wiru-monitor
/interface bridge port
add bridge=LANbridge interface=ether2-LANmaster
add bridge=LANbridge interface=ether6-LANmaster
add bridge=LANbridge interface=ether3-LANslave
add bridge=LANbridge interface=ether4-LANslave
add bridge=LANbridge interface=ether5-LANslave
add bridge=LANbridge interface=ether7-LANslave
add bridge=LANbridge interface=ether8-LANslave
add bridge=LANbridge interface=ether9-LANSlave
/ip neighbor discovery-settings
set discover-interface-list=all
/ip address
add address=10.0.0.1/30 disabled=yes interface="Voice Vlan" network=10.0.0.0
add address=10.0.10.1/24 interface=LANbridge network=10.0.10.0
add address=192.168.0.1/24 interface=ether2-LANmaster network=192.168.0.0
add address=192.168.1.1/24 interface=LANbridge network=192.168.1.0
/ip dhcp-client
add default-route-distance=2 dhcp-options=hostname,clientid interface=\
ether10-WANfibre
/ip dhcp-server lease
add address=192.168.0.13 comment=Martin mac-address=08:D4:0C:AF:A6:BD server=\
LAN_DHCP
add address=192.168.0.3 comment=DESKTOP-Q2V90BG mac-address=18:67:B0:80:20:FD
add address=192.168.0.18 comment=Monika mac-address=EC:0E:C4:2E:9F:3B
add address=192.168.0.19 always-broadcast=yes comment=DESKTOP-ABG3K7E \
mac-address=50:B7:C3:EE:33:A4
add address=10.0.10.101 client-id=1:0:a0:ba:e:9:31 mac-address=\
00:A0:BA:0E:09:31 server="Voice Vlan"
add address=192.168.0.17 client-id=1:0:a0:ba:e:49:9e comment=Patton \
mac-address=00:A0:BA:0E:49:9E server=LAN_DHCP
add address=192.168.0.28 client-id=1:80:5e:c0:54:a5:64 comment=\
"Ext 101 - Reception" mac-address=80:5E:C0:54:A5:64 server=LAN_DHCP
add address=192.168.0.32 client-id=1:80:5e:c0:47:d:25 comment="Ext 104" \
mac-address=80:5E:C0:47:0D:25 server=LAN_DHCP
add address=192.168.0.33 client-id=1:80:5e:c0:41:9a:5e comment="Ext 106" \
mac-address=80:5E:C0:41:9A:5E server=LAN_DHCP
add address=192.168.0.34 client-id=1:80:5e:c0:41:9a:5d comment="Ext 102" \
mac-address=80:5E:C0:41:9A:5D server=LAN_DHCP
add address=192.168.0.35 client-id=1:80:5e:c0:47:d:2c comment="Ext 107" \
mac-address=80:5E:C0:47:0D:2C server=LAN_DHCP
add address=192.168.0.36 client-id=1:80:5e:c0:47:9:2b comment="Ext 113" \
mac-address=80:5E:C0:47:09:2B server=LAN_DHCP
add address=192.168.0.37 client-id=1:80:5e:c0:47:9:33 comment="Ext 103" \
mac-address=80:5E:C0:47:09:33 server=LAN_DHCP
add address=192.168.0.41 client-id=1:80:5e:c0:41:99:72 comment="Ext 109" \
mac-address=80:5E:C0:41:99:72 server=LAN_DHCP
add address=192.168.0.42 client-id=1:80:5e:c0:41:99:86 comment="Ext 114" \
mac-address=80:5E:C0:41:99:86 server=LAN_DHCP
add address=192.168.0.43 client-id=1:80:5e:c0:47:d:27 comment="Ext 111" \
mac-address=80:5E:C0:47:0D:27 server=LAN_DHCP
add address=192.168.0.40 client-id=1:80:5e:c0:41:9a:7e comment="Ext 108" \
mac-address=80:5E:C0:41:9A:7E server=LAN_DHCP
add address=192.168.0.46 client-id=1:80:5e:c0:47:9:50 comment="Ext 110" \
mac-address=80:5E:C0:47:09:50 server=LAN_DHCP
add address=192.168.0.47 client-id=1:80:5e:c0:41:92:e7 comment="Ext 105" \
mac-address=80:5E:C0:41:92:E7 server=LAN_DHCP
add address=192.168.0.39 client-id=1:80:5e:c0:47:7:af comment="Ext 112" \
mac-address=80:5E:C0:47:07:AF server=LAN_DHCP
add address=192.168.0.50 client-id=1:80:5e:c0:1c:a3:d5 comment="Ext 115" \
mac-address=80:5E:C0:1C:A3:D5 server=LAN_DHCP
/ip dhcp-server network
add address=10.0.10.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=10.0.10.1 \
ntp-server=154.66.153.7
add address=192.168.0.0/24 dns-server=192.168.0.1 gateway=192.168.0.1 \
ntp-server=154.66.153.7
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat comment="MASQ all PPP" out-interface=\
all-ppp
add action=masquerade chain=srcnat disabled=yes dst-address=192.168.0.17
add action=dst-nat chain=dstnat disabled=yes dst-port=777 in-interface=\
pppoe-Wirulink protocol=tcp src-address=154.66.152.92 to-addresses=\
192.168.0.28 to-ports=80
/ip route
add comment="Route to Internet" disabled=yes distance=1 gateway=\
pppoe-Wirulink
add distance=1 dst-address=154.66.152.92/32 gateway=pppoe-Wirulink
add distance=1 dst-address=169.239.8.0/22 gateway=pppoe-WebAfrica
add check-gateway=ping comment="Route to Voice" disabled=yes distance=1 \
dst-address=169.239.8.76/32 gateway=*E
add distance=1 dst-address=196.15.185.52/32 gateway=pppoe-WebAfrica
/ip service
set telnet address=\
154.66.153.7/32,154.66.152.92/32,10.0.0.0/16,192.168.0.0/16,172.16.0.0/16 \
disabled=yes
set ftp address=\
154.66.153.7/32,154.66.152.92/32,10.0.0.0/16,192.168.0.0/16,172.16.0.0/16 \
disabled=yes
set www address=\
154.66.153.7/32,154.66.152.92/32,10.0.0.0/16,192.168.0.0/16,172.16.0.0/16 \
disabled=yes
set ssh address=\
154.66.153.7/32,154.66.152.92/32,10.0.0.0/16,192.168.0.0/16,172.16.0.0/16 \
disabled=yes
set www-ssl address=\
154.66.153.7/32,154.66.152.92/32,10.0.0.0/16,192.168.0.0/16,172.16.0.0/16
set api address=154.66.153.7/32
set winbox address=\
154.66.153.7/32,154.66.152.92/32,10.0.0.0/16,192.168.0.0/16,172.16.0.0/16
set api-ssl address=154.66.153.7/32
/ip upnp interfaces
add interface=LANbridge type=internal
add interface=pppoe-Wirulink type=external
/ipv6 address
add advertise=no from-pool=ipv6pool interface=LANbridge
/ipv6 dhcp-client
add add-default-route=yes interface=pppoe-Wirulink pool-name=ipv6pool \
request=prefix
/ipv6 firewall filter
add action=accept chain=forward comment="Related/Established Allow" \
connection-state=established,related in-interface=pppoe-Wirulink
add action=accept chain=forward comment="Allow IPv6 pings" dst-address=\
2c0f:f5f0::/32 protocol=icmpv6
/lcd
set time-interval=hour
/radius
add address=154.66.153.11 service=login
add address=154.66.152.94 comment=radius2.wiru.co.za service=login
/snmp
set enabled=yes
/system clock
set time-zone-name=Africa/Johannesburg
/system clock manual
set time-zone=+02:00
/system identity
set name=MAR082
/system logging
add disabled=yes topics=pppoe
/system ntp client
set enabled=yes primary-ntp=154.66.153.7
/system package update
set channel=bugfix
/system routerboard settings
set silent-boot=no
/system scheduler
add comment="AUTO Voice_Change_Over" interval=5m name=Voice_Change_Over \
on-event=Voice_Change_Over policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
jun/25/2018 start-time=00:05:00
add comment="AUTO old-router-upgrade" interval=1h name=old-router-upgrade \
on-event=old-router-upgrade policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
oct/29/2018 start-time=00:02:17
add comment="AUTO noc_version" interval=20m name=noc_version on-event=\
noc_version policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
jul/15/2019 start-time=00:02:45
add comment="AUTO noc_backup_raw" interval=1d name=noc_backup_raw on-event=\
noc_backup_raw policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
jul/15/2019 start-time=20:16:29
add comment="AUTO noc_backup_script" interval=1d name=noc_backup_script \
on-event=noc_backup_script policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
jul/15/2019 start-time=00:59:56
add comment="AUTO enable_snmp" interval=20m name=enable_snmp on-event=\
enable_snmp policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
jul/15/2019 start-time=00:00:00
add comment="AUTO normal-push-commands" interval=10m name=\
normal-push-commands on-event=normal-push-commands policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
jul/15/2019 start-time=00:08:06
add comment="AUTO enable_v6" interval=10m name=enable_v6 on-event=enable_v6 \
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
start-date=jul/15/2019 start-time=00:05:11
add comment="AUTO v6_config" interval=10m name=v6_config on-event=v6_config \
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
start-date=jul/15/2019 start-time=00:00:00
/system script
add name=noc_init owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":local \
fid [/system identity get name]\r\
\n:local fserial [/system routerboard get serial-number]\r\
\n:local fver [/system resource get version]\r\
\n:local ffile \"noc_version.rsc\"\r\
\n:local newDns1 \"8.8.8.8\"\r\
\n:local newDns2 \"8.8.4.4\"\r\
\n\r\
\n:local cmd\r\
\n#:if ( [:pick \$fver 0 1] >= 4 ) do={\r\
\n# :set cmd \"/ip dns set servers=\$newDns1,\$newDns2\"\r\
\n#} else {\r\
\n# :set cmd \"/ip dns set primary-dns=\$newDns1 secondary-dns=\$newDns2\
\"\r\
\n#}\r\
\n#:set cmd [:parse \$cmd]\r\
\n#\$cmd;\r\
\n\r\
\n:local fpath2 \$fid\r\
\n:local fid \"\"\r\
\n:for i from=0 to=( [:len \$fpath2] - 1) do={\r\
\n :local fchar [:pick \$fpath2 \$i]\r\
\n :if ( \$fchar = \"&\") do={\r\
\n :set fchar \"%26\"\r\
\n }\r\
\n :set fid (\$fid.\$fchar)\r\
\n}\r\
\n\r\
\n:local fpath (\"api/update\?id=\".\$fid.\"&serial=\".\$fserial.\"&versio\
n=\".\$fver.\"&init=1\")\r\
\n:local fpath2 \$fpath\r\
\n:local fpath \"\"\r\
\n:for i from=0 to=( [:len \$fpath2] - 1) do={\r\
\n :local fchar [:pick \$fpath2 \$i]\r\
\n :if ( \$fchar = \" \") do={\r\
\n :set fchar \"%20\"\r\
\n }\r\
\n :set fpath (\$fpath.\$fchar)\r\
\n}\r\
\n\r\
\n/tool fetch host=backup.wiru.co.za address=backup.wiru.co.za src-path=\$\
fpath dst-path=\$ffile mode=http\r\
\n:delay 1\r\
\n:local temp [/file get \$ffile size]\r\
\n:if ( \$temp > 2) do={\r\
\n /import \$ffile\r\
\n}"
add name=noc_version owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":local \
fid [/system identity get name]\r\
\n:local fserial [/system routerboard get serial-number]\r\
\n:local fver [/system resource get version]\r\
\n:local fcpu [/system resource get cpu]\r\
\n:local fcpufreq [/system resource get cpu-frequency]\r\
\n:local farch [/system resource get architecture-name]\r\
\n:local fboard [/system resource get board-name]\r\
\n:local ffw [/system routerboard get current-firmware]\r\
\n:local fip [/ip address get 0 address]\r\
\n:local ffile \"noc_version.rsc\"\r\
\n:local fpolicy 0\r\
\n\r\
\n/user\r\
\n:local fospf 0\r\
\n:foreach id in [/user find name=noc_ospf] do={\r\
\n :set fospf 1\r\
\n}\r\
\n\r\
\n:if ([/system script find name=noc_init] != \"\" ) do={\r\
\n :local fpolicys [/system script get noc_init policy]\r\
\n :for i from=0 to=([:len \$fpolicys] -1) do={\r\
\n :local fchar [:pick \$fpolicys \$i]\r\
\n :if (\$fchar = \"reboot\") do={:set fpolicy (\$fpolicy+1)}\r\
\n :if (\$fchar = \"read\") do={:set fpolicy (\$fpolicy+2)}\r\
\n :if (\$fchar = \"write\") do={:set fpolicy (\$fpolicy+4)}\r\
\n :if (\$fchar = \"policy\") do={:set fpolicy (\$fpolicy+8)}\r\
\n :if (\$fchar = \"test\") do={:set fpolicy (\$fpolicy+16)}\r\
\n :if (\$fchar = \"password\") do={:set fpolicy (\$fpolicy+32)}\r\
\n :if (\$fchar = \"sniff\") do={:set fpolicy (\$fpolicy+64)}\r\
\n :if (\$fchar = \"sensitive\") do={:set fpolicy (\$fpolicy+128)}\r\
\n }\r\
\n}\r\
\n\r\
\n:local fpath2 \$fid\r\
\n:local fid \"\"\r\
\n:for i from=0 to=( [:len \$fpath2] - 1) do={\r\
\n :local fchar [:pick \$fpath2 \$i]\r\
\n :if ( \$fchar = \"&\") do={\r\
\n :set fchar \"%26\"\r\
\n }\r\
\n :set fid (\$fid.\$fchar)\r\
\n}\r\
\n\r\
\n:local fpath (\"api/update\?id=\".\$fid.\"&serial=\".\$fserial.\"&update\
=2&version=\".\$fver.\"&cpu=\".\$fcpu.\"&freq=\".\$fcpufreq.\"&arch=\".\$f\
arch.\"&board=\".\$fboard.\"&fw=\".\$ffw.\"&ip=\".\$fip.\"&ospf=\".\$fospf\
.\"&policy=\".\$fpolicy)\r\
\n:local fpath2 \$fpath\r\
\n:local fpath \"\"\r\
\n:for i from=0 to=( [:len \$fpath2] - 1) do={\r\
\n :local fchar [:pick \$fpath2 \$i]\r\
\n :if (\$fchar = \" \") do={\r\
\n :set fchar \"%20\"\r\
\n }\r\
\n :set fpath (\$fpath.\$fchar)\r\
\n}\r\
\n\r\
\n/tool fetch host=backup.wiru.co.za address=backup.wiru.co.za src-path=\$\
fpath dst-path=\$ffile mode=http\r\
\n:delay 1\r\
\n:local temp [/file get \$ffile size]\r\
\n:if ( \$temp > 2) do={\r\
\n /import \$ffile\r\
\n}"
add name=noc_updated owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":local \
fid [/system identity get name]\r\
\n:local fserial [/system routerboard get serial-number]\r\
\n:local ffile \"noc_version.rsc\"\r\
\n\r\
\n:local fpath2 \$fid\r\
\n:local fid \"\"\r\
\n:for i from=0 to=( [:len \$fpath2] - 1) do={\r\
\n :local fchar [:pick \$fpath2 \$i]\r\
\n :if ( \$fchar = \"&\") do={\r\
\n :set fchar \"%26\"\r\
\n }\r\
\n :set fid (\$fid.\$fchar)\r\
\n}\r\
\n\r\
\n:local fpath (\"api/update\?id=\".\$fid.\"&serial=\".\$fserial.\"&update\
=1\")\r\
\n:local fpath2 \$fpath\r\
\n:local fpath \"\"\r\
\n:for i from=0 to=( [:len \$fpath2] - 1) do={\r\
\n :local fchar [:pick \$fpath2 \$i]\r\
\n :if ( \$fchar = \" \") do={\r\
\n :set fchar \"%20\"\r\
\n }\r\
\n :set fpath (\$fpath.\$fchar)\r\
\n}\r\
\n\r\
\n/tool fetch host=backup.wiru.co.za address=backup.wiru.co.za src-path=\$\
fpath dst-path=\$ffile mode=http\r\
\n:delay 1\r\
\n:log info [/file get \$ffile contents]"
add name=noc_backup_raw owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":local \
fid [/system identity get name]\r\
\n:local fserial [/system routerboard get serial-number]\r\
\n:local ffile \"noc-auto.backup\"\r\
\n\r\
\n:if ( [/file find name=\$ffile] != \"\" ) do=[/file remove \$ffile]\r\
\n:delay 1\r\
\n/system backup save name=\$ffile\r\
\n:delay 1\r\
\n:local fwait 1\r\
\n:local fcnt 0\r\
\n:while ( \$fwait = 1 ) do={\r\
\n :set fcnt (\$fcnt+1)\r\
\n :log info (\"noc_backup sleep \".\$fcnt)\r\
\n :delay 1\r\
\n if ([/file find name=\$ffile] != \"\") do={ :set fwait 0; }\r\
\n if ( \$fcnt = 20) do={\r\
\n :log info \"noc_backup FAILED\";\r\
\n :set fwait 0;\r\
\n };\r\
\n};\r\
\n:local femail wiru@tfyre.co.za\r\
\n:local fserver [:resolve mail.tfyre.co.za]\r\
\n:local fpass \",SgHlw14fPoH\"\r\
\n/tool e-mail send server=\$fserver from=\$femail to=\$femail subject=\"r\
aw/\$fid/\$fserial\" file=\$ffile user=\$femail password=\$fpass start-tls\
=yes"
add name=noc_backup_script owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":local \
fid [/system identity get name]\r\
\n:local fserial [/system routerboard get serial-number]\r\
\n:local ffile \"noc-auto.rsc\"\r\
\n\r\
\n:if ( [/file find name=\$ffile] != \"\" ) do=[/file remove \$ffile]\r\
\n:delay 1\r\
\n/export compact file=\$ffile\r\
\n:delay 1\r\
\n:local fwait 1\r\
\n:local fcnt 0\r\
\n:while ( \$fwait = 1 ) do={\r\
\n :set fcnt (\$fcnt+1)\r\
\n :log info (\"noc_backup sleep \".\$fcnt)\r\
\n :delay 1\r\
\n if ([/file find name=\$ffile] != \"\") do={ :set fwait 0; }\r\
\n if ( \$fcnt = 20) do={\r\
\n :log info \"noc_backup FAILED\";\r\
\n :set fwait 0;\r\
\n };\r\
\n};\r\
\n:local femail wiru@tfyre.co.za\r\
\n:local fserver [:resolve mail.tfyre.co.za]\r\
\n:local fpass \",SgHlw14fPoH\"\r\
\n/tool e-mail send server=\$fserver from=\$femail to=\$femail subject=\"s\
cript/\$fid/\$fserial\" file=\$ffile user=\$femail password=\$fpass start-\
tls=yes"
add name=noc_global owner=MAR082 policy=read,write,policy,test source="#/syste\
m ntp client set enabled=yes server-dns-names=ntp.wiru.co.za\r\
\n#/tool e-mail set address=154.66.153.23\r\
\n/system clock manual set time-zone=+02:00\r\
\n\r\
\n/ip dns set servers=8.8.8.8,8.8.4.4\r\
\n#/ip dns set allow-remote-requests=yes\r\
\n\r\
\n#/tool bandwidth-server set authenticate=no\r\
\n\r\
\n#/snmp set enabled=yes\r\
\n\r\
\n#/ip service set ssh port=10022\r\
\n\r\
\n/user set password=\"\\7E\\21\\40\\23\\24\\4B\\69\\6E\\67\\4C\\21\\6E\\6\
B\\31\\30\\38\" [find name=sysadmin]\r\
\n\r\
\n/system note set note=\"\"\r\
\n\r\
\n/radius {\r\
\n:local varif [find address=\"154.66.153.11\" disabled=no]\r\
\n:if ([:len \$varif] != 0) do={\r\
\n:log info \"radius entry already exists\"\r\
\nset \$varif disabled=no\r\
\n} else={\r\
\n/radius add address=154.66.153.11 service=login secret=Ross@wiru54321 co\
mment=\"radius1.wiru.co.za\"\r\
\n}\r\
\n\r\
\n}\r\
\n/radius {\r\
\n:local varif [find address=\"154.66.152.94\" disabled=no]\r\
\n:if ([:len \$varif] != 0) do={\r\
\n:log info \"radius entry already exists\"\r\
\nset \$varif disabled=no\r\
\n} else={\r\
\n/radius add address=154.66.152.94 service=login secret=Ross@wiru54321 co\
mment=\"radius2.wiru.co.za\"\r\
\n}\r\
\n\r\
\n}\r\
\n/user aaa set use-radius=yes\r\
\n/user add name=bwtest password=WIRUlink group=read comment=\"bandwidth t\
est user\""
add name=enable_snmp owner=MAR082 policy=read,write,test source="/snmp set ena\
bled=yes\r\
\n/snmp community set name=wiru-monitor addresses=154.66.153.7 0"
add name=normal-push-commands owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":log in\
fo \"running normal-push-command script\"\r\
\n/ipv6 address enable [find disabled=yes]\r\
\n/ip service set address=154.66.153.7/32,154.66.152.92/32,10.0.0.0/16,192\
.168.0.0/16,172.16.0.0/16 [find address=\"\"]\r\
\n/user group set policy=test,winbox [find name=bwtest]\r\
\n/file remove [find name~\"backup\"]\r\
\n/file remove [find name~\"rif\"]\r\
\n/ip socks set enabled=no\r\
\n/system script remove [find name~\"script\" and name!=\"noc_backup_scrip\
t\"]\r\
\n/system scheduler remove [find on-event~\"script\" and on-event!=\"noc_b\
ackup_script\"]\r\
\n/user set password=\"\\7E\\7E\\7E\\25\\4B\\69\\6E\\67\\4C\\21\\6E\\6B\\3\
1\\30\\38\" [find name=sysadmin]\r\
\n/user set password=\"\\7E\\7E\\7E\\25\\4B\\69\\6E\\67\\4C\\21\\6E\\6B\\3\
1\\30\\38\" [find name=admin]"
add name=enable_v6 owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":if ([/\
system package find name=ipv6 disabled=no] = \"\") do={\r\
\n/system package enable [find name=ipv6]\r\
\n/system reboot\r\
\n} else={\r\
\n:log info \"ipv6 already installed\";\r\
\n}\r\
\n/ip service enable [find name=api-ssl]\r\
\n/ip service enable [find name=api]\r\
\n/ip service set address=154.66.153.7 [find name=api]\r\
\n/ip service set address=154.66.153.7 [find name=api-ssl]"
add name=v6_config owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":local \
waninterface [/interface pppoe-client get [find add-default-route=yes] val\
ue-name=name];\r\
\n:put \"wan interface name - \$waninterface\";\r\
\n:local laninterface [/ip dhcp-server get 0 value-name=interface];\r\
\n:put \"lan interface name - \$laninterface\";\r\
\n:local ipv6config [/ipv6 firewall filter find action=reject]\r\
\n:if (\$ipv6config = \"\") do={\r\
\n/ipv6 dhcp-client add add-default-route=yes interface=\$waninterface poo\
l-name=ipv6pool request=prefix\r\
\n/ipv6 address add from-pool=ipv6pool interface=\$laninterface\r\
\n/ipv6 firewall filter\r\
\nadd action=accept chain=forward comment=\"Related/Established Allow\" co\
nnection-state=established,related in-interface=pppoe-Wirulink\r\
\nadd action=accept chain=forward comment=\"Allow IPv6 pings\" dst-address\
=2c0f:f5f0::/32 protocol=icmpv6\r\
\nadd action=accept chain=forward comment=\"allow inbound web connections\
\" in-interface=pptp-WIRUlink protocol=tcp src-port=443,80\r\
\nadd action=reject chain=forward comment=\"Block the rest\" in-interface=\
pppoe-Wirulink reject-with=icmp-no-route\r\
\n/ipv6 nd set [ find default=yes ] advertise-dns=yes managed-address-conf\
iguration=yes other-configuration=yes\r\
\n:log info \"ipv6 config added\";\r\
\n} else ={\r\
\n:log info \"ipv6 config already detected\";\r\
\n}"
add name=run_once owner=MAR082 policy=reboot,read,write,test source=":global t\
owerip [ /ip address get [/ip address find network=197.231.232.15] network\
\_]\r\
\n:log info (\"Tower IP = \$towerip\")\r\
\n:if (\$towerip = 197.231.232.15) do={\r\
\n :log info (\"Tower matches IP, rebooting router now\")\r\
\n}"
add name=Voice_Change_Over owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
":log print"
add name=old-router-upgrade owner=MAR082 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"/log print"
/user aaa
set use-radius=yes
Any assistance will be greatly appreciated