Community discussions

MikroTik App
  4. RouterOS
  5. Beginner Basics

RSTP Loop. What is wrong in my config

Locked
 
49er
Member
Member
Topic Author
Posts: 409
Joined: Tue Sep 27, 2011 7:55 am

RSTP Loop. What is wrong in my config

Fri Jul 14, 2017 10:52 am

Hi,

For troubleshooting my problem I have made a LAB environment with two devices.
R01 and SW07 (Both RB-951G-2HnD).
R01 ether5 is connected with cable to SW07 ether 1.

The configs are as below.
I have on the SW07 messages ether1: bride Probably RSTP LOOP

Can anybody tell me what is wrong in my configs?
Here below the Exports with the options hide-sensitive

Thanks a lot

R01:
Code: Select all
# jan/02/1970 02:47:43 by RouterOS 6.39.2
# software id = VB3H-KVDT
#
/caps-man channel
add band=5ghz-onlyac comment="Only 5GHZ AC" control-channel-width=20mhz \
    extension-channel=eeeC name="5GHZ Only AC"
add band=2ghz-onlyn comment="Only 2GHZ N" control-channel-width=20mhz \
    extension-channel=eC name="2GHZ Only N"
/interface bridge
add name=BR_LAN_CAMERA priority=0xA
add name=BR_LAN_DATA priority=0xA
add name=BR_LAN_GAME priority=0xA
add name=BR_LAN_MFP priority=0xA
add name=BR_LAN_MGMT priority=0xA
add name=BR_LAN_TVMM priority=0xA
add name=BR_WLAN_DATA priority=0xA
add name=BR_WLAN_GUEST priority=0xA
add name=BR_WLAN_SP priority=0xA
/interface vlan
add interface=BR_LAN_MGMT name=VLAN_LAN_CAMERA vlan-id=17
add interface=BR_LAN_MGMT name=VLAN_LAN_DATA vlan-id=10
add interface=BR_LAN_MGMT name=VLAN_LAN_GAME vlan-id=16
add interface=BR_LAN_MGMT name=VLAN_LAN_MFP vlan-id=15
add interface=ether5 name=VLAN_LAN_MGMT vlan-id=9
add interface=BR_LAN_MGMT name=VLAN_LAN_SERVER vlan-id=900
add interface=BR_LAN_MGMT name=VLAN_LAN_TVMM vlan-id=18
add interface=BR_LAN_MGMT name=VLAN_WLAN_DATA vlan-id=12
add interface=BR_LAN_MGMT name=VLAN_WLAN_GUEST vlan-id=14
add interface=BR_LAN_MGMT name=VLAN_WLAN_SP vlan-id=19
/caps-man datapath
add bridge=BR_WLAN_DATA local-forwarding=yes name=datapath_WLAN_DATA vlan-id=\
    12 vlan-mode=use-tag
add bridge=BR_WLAN_GUEST local-forwarding=yes name=datapath_WLAN_GUEST \
    vlan-id=14 vlan-mode=use-tag
add bridge=BR_LAN_MFP local-forwarding=yes name=datapath_LAN_MFP vlan-id=15 \
    vlan-mode=use-tag
add bridge=BR_LAN_GAME local-forwarding=yes name=datapath_LAN_GAME vlan-id=16 \
    vlan-mode=use-tag
add bridge=BR_LAN_CAMERA local-forwarding=yes name=datapath_LAN_CAMERA \
    vlan-id=17 vlan-mode=use-tag
add bridge=BR_LAN_TVMM local-forwarding=yes name=datapath_LAN_TVMM vlan-id=18 \
    vlan-mode=use-tag
add bridge=BR_WLAN_SP local-forwarding=yes name=datapath_WLAN_SP vlan-id=19 \
    vlan-mode=use-tag
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=sec_WLAN_DATA
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=sec_WLAN_GUEST
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=sec_LAN_MFP
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=sec_LAN_GAME
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=sec_LAN_CAMERA
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=sec_LAN_TVMM
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=sec_WLAN_SP
/caps-man configuration
add channel="5GHZ Only AC" country=netherlands datapath=datapath_WLAN_DATA \
    mode=ap name="conf WLAN_DATA 5GHZ AC" security=sec_WLAN_DATA ssid=\
    WLAN_DATA
add channel="5GHZ Only AC" country=netherlands datapath=datapath_WLAN_GUEST \
    mode=ap name="conf WLAN_GUEST 5GHZ AC" security=sec_WLAN_GUEST ssid=\
    WLAN_GUEST
add channel="5GHZ Only AC" country=netherlands datapath=datapath_LAN_MFP \
    mode=ap name="conf LAN_MFP 5GHZ AC" security=sec_LAN_MFP ssid=LAN_MFP
add channel="5GHZ Only AC" country=netherlands datapath=datapath_LAN_GAME \
    mode=ap name="conf LAN_GAME 5GHZ AC" security=sec_LAN_GAME ssid=LAN_GAME
add channel="5GHZ Only AC" country=netherlands datapath=datapath_LAN_CAMERA \
    mode=ap name="conf LAN_CAMERA 5GHZ AC" security=sec_LAN_CAMERA ssid=\
    LAN_CAMERA
add channel="5GHZ Only AC" country=netherlands datapath=datapath_LAN_TVMM \
    mode=ap name="conf LAN_TVMM 5GHZ AC" security=sec_LAN_TVMM ssid=LAN_TVMM
add channel="5GHZ Only AC" country=netherlands datapath=datapath_WLAN_SP \
    mode=ap name="conf WLAN_SP 5GHZ AC" security=sec_WLAN_SP ssid=WLAN_SP
add channel="2GHZ Only N" country=netherlands datapath=datapath_WLAN_DATA \
    mode=ap name="conf WLAN_DATA 2GHZ N" security=sec_WLAN_DATA ssid=\
    WLAN_DATA
add channel="2GHZ Only N" country=netherlands datapath=datapath_WLAN_GUEST \
    mode=ap name="conf WLAN_GUEST 2GHZ N" security=sec_WLAN_GUEST ssid=\
    WLAN_GUEST
add channel="2GHZ Only N" country=netherlands datapath=datapath_LAN_MFP mode=\
    ap name="conf LAN_MFP 2GHZ N" security=sec_LAN_MFP ssid=LAN_MFP
add channel="2GHZ Only N" country=netherlands datapath=datapath_LAN_GAME \
    mode=ap name="conf LAN_GAME 2GHZ N" security=sec_LAN_GAME ssid=LAN_GAME
add channel="2GHZ Only N" country=netherlands datapath=datapath_LAN_CAMERA \
    mode=ap name="conf LAN_CAMERA 2GHZ N" security=sec_LAN_CAMERA ssid=\
    LAN_CAMERA
add channel="2GHZ Only N" country=netherlands datapath=datapath_LAN_TVMM \
    mode=ap name="conf LAN_TVMM 2GHZ N" security=sec_LAN_TVMM ssid=LAN_TVMM
add channel="2GHZ Only N" country=netherlands datapath=datapath_WLAN_SP mode=\
    ap name="conf WLAN_SP 2GHZ N" security=sec_WLAN_SP ssid=WLAN_SP
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-server
add disabled=no interface=BR_LAN_MGMT lease-time=1w name=DHCP_LAN_MGMT
add disabled=no interface=VLAN_LAN_SERVER lease-time=1w name=DHCP_LAN_SERVER
/ip hotspot profile
add hotspot-address=172.16.3.1 name=WLAN_GUEST use-radius=yes
/ip pool
add name=POOL_LAN_DATA ranges=172.16.1.100-172.16.1.200
add name=POOL_WLAN_DATA ranges=172.16.2.100-172.16.2.200
add name=POOL_WLAN_GUEST ranges=172.16.3.100-172.16.3.200
add name=POOL_LAN_MFP ranges=172.16.4.10-172.16.4.60
add name=POOL_LAN_GAME ranges=172.16.4.140-172.16.4.250
add name=POOL_LAN_CAMERA ranges=172.16.5.10-172.16.5.120
add name=POOL_LAN_TVMM ranges=172.16.5.140-172.16.5.250
add name=POOL_WLAN_SP ranges=172.16.6.100-172.16.6.200
add name=POOL_LAN_SERVER ranges=172.16.0.130-172.16.0.157
add name=POOL_LAN_VPN ranges=172.16.0.161-172.16.0.190
add name=POOL_VPN ranges=172.16.0.160-172.16.0.190
/ip dhcp-server
add address-pool=POOL_LAN_DATA disabled=no interface=BR_LAN_DATA lease-time=\
    1w name=DHCP_LAN_DATA
add address-pool=POOL_WLAN_DATA disabled=no interface=BR_WLAN_DATA name=\
    DHCP_WLAN_DATA
add address-pool=POOL_WLAN_GUEST disabled=no interface=BR_WLAN_GUEST name=\
    DHCP_WLAN_GUEST
add address-pool=POOL_LAN_MFP disabled=no interface=BR_LAN_MFP lease-time=1w \
    name=DHCP_LAN_MFP
add address-pool=POOL_LAN_GAME disabled=no interface=BR_LAN_GAME lease-time=\
    1w name=DHCP_LAN_1_GAME
add address-pool=POOL_LAN_CAMERA disabled=no interface=BR_LAN_CAMERA \
    lease-time=1w name=DHCP_LAN_CAMERA
add address-pool=POOL_LAN_TVMM disabled=no interface=BR_LAN_TVMM lease-time=\
    1w name=DHCP_LAN_TVMM
add address-pool=POOL_WLAN_SP disabled=no interface=BR_WLAN_SP lease-time=1w \
    name=DHCP_WLAN_SP
/ip hotspot
add address-pool=POOL_WLAN_GUEST disabled=no interface=BR_WLAN_GUEST name=\
    HOTSPOT-WLAN_GUEST profile=WLAN_GUEST
/ppp profile
add dns-server=172.16.0.130,172.16.0.131 local-address=POOL_VPN name=SSTP \
    remote-address=POOL_VPN
/snmp community
set [ find default=yes ] addresses=172.16.0.60/32 read-access=no
add addresses=172.16.0.60/32 authentication-protocol=SHA1 \
    encryption-protocol=AES name=SNMPuser1 security=private
/system logging action
set 3 remote=172.16.0.60
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw
/caps-man access-list
add action=accept comment="Allow all connections on WLAN_GUEST" signal-range=\
    -80..80 ssid-regexp=WLAN_GUEST
add comment="PC019 Dirk Vlot" mac-address=00:13:CE:BA:B7:53 signal-range=\
    -80..80 ssid-regexp=WLAN_DATA
add comment="PC030 Ronald Verheij" mac-address=A0:88:B4:13:14:7C \
    signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC034 Bart Verheij" mac-address=00:02:6F:AE:DA:10 signal-range=\
    -80..80 ssid-regexp=WLAN_DATA
add comment="PC036 Henk Verheij" mac-address=00:26:C7:25:4B:B0 signal-range=\
    -80..80 ssid-regexp=WLAN_DATA
add comment="PC037 Ronald Verheij" mac-address=08:3E:8E:39:4F:A5 \
    signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC038 Jose Verheij" mac-address=00:1C:BF:A9:90:D3 signal-range=\
    -80..80 ssid-regexp=WLAN_DATA
add comment="PC040 Siska Verheij" mac-address=18:3D:A2:49:31:E0 signal-range=\
    -80..80 ssid-regexp=WLAN_DATA
add comment="PC042 Dirk Vlot Dell Latutude E5510" mac-address=\
    C0:CB:38:44:B2:0E signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC043 Sean Verheij" mac-address=00:23:08:22:6A:3E signal-range=\
    -80..80 ssid-regexp=WLAN_DATA
add comment="PC046 Dell Latitude E5510 Spare(arno)" mac-address=\
    00:23:14:69:ED:24 signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC047 Ryan Verheij Latitude E4600" mac-address=C4:17:FE:B7:3E:B5 \
    signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC048 Spare Latitude E5510" mac-address=C0:CB:38:44:ED:22 \
    signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC049 Jose Verheij Toshiba Satelite Pro C650" mac-address=\
    00:26:B6:F2:35:80 signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC050 Jacqueline Verheij" mac-address=C0:CB:38:7C:82:60 \
    signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC900 Acer Paul Kok Laptop" mac-address=00:16:CF:32:C8:D8 \
    signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PC901 HP Bart Verheij Werklaptop" mac-address=AC:81:12:37:E6:13 \
    signal-range=-80..80 ssid-regexp=WLAN_DATA
add comment="PR001Epson Expression Premium XP720" mac-address=\
    64:EB:8C:14:35:3A signal-range=-80..80 ssid-regexp=LAN_MFP
add comment="GC002 Wii002 Jacqueline Verheij" mac-address=E8:4E:CE:60:05:AF \
    signal-range=-80..80 ssid-regexp=LAN_GAME
add comment="MMB001 TV001 Ring 393" mac-address=5C:DA:D4:3A:39:EC \
    signal-range=-80..80 ssid-regexp=LAN_TVMM
add comment="MMB002 XBMC001 Ring 393 Beneden" mac-address=00:01:2E:40:25:6C \
    signal-range=-80..80 ssid-regexp=LAN_TVMM
add comment="MMB003XBMC002 Ring 393 Boven" mac-address=00:0F:60:00:D6:75 \
    signal-range=-80..80 ssid-regexp=LAN_TVMM
add comment="MMB004 Musicbox01" mac-address=00:0F:60:00:D6:75 signal-range=\
    -80..80 ssid-regexp=LAN_TVMM
add comment="MMB005 Raspberry Pi3" mac-address=B8:27:EB:0E:46:C1 \
    signal-range=-80..80 ssid-regexp=LAN_TVMM
add comment="MOB002 Ronald Verheij Samsung S3" mac-address=34:23:BA:4A:2A:8D \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB003 Jacqueline Verheij Samsung" mac-address=4C:3C:16:49:CA:1B \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB004 Henk Verheij BB" mac-address=3C:73:37:7A:38:49 \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB005 Siska Verheij Samsung" mac-address=5C:2E:59:0F:3E:9D \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB007 Jose Verheij Samsung S3 mini" mac-address=\
    C4:88:E5:5E:53:34 signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB008 Paul Kok" mac-address=D0:51:62:3B:52:AA signal-range=\
    -80..80 ssid-regexp=WLAN_SP
add comment="MOB009 Arno Meijboom" mac-address=BC:6C:21:5E:1B:2D \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB010 Yvana" mac-address=D8:BB:2C:3C:10:FE signal-range=-80..80 \
    ssid-regexp=WLAN_SP
add comment="MOB011 Carla Meijboom" mac-address=98:E7:F5:97:7A:1F \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB013 Ronald Verheij Huawei p8 Lite" mac-address=\
    C4:07:2F:C1:46:E3 signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB014 Ronald Verheij Huawei p9 Lite" mac-address=\
    E0:A3:AC:18:79:D0 signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="MOB016 Angela" mac-address=78:D7:5F:DD:55:E2 signal-range=\
    -80..80 ssid-regexp=WLAN_SP
add comment="MOB017 Elly Vlot" mac-address=BC:44:34:48:4D:03 signal-range=\
    -80..80 ssid-regexp=WLAN_SP
add comment="MOB018 Jacqueline Verheij Huawei P9 lite" mac-address=\
    A4:71:74:AB:44:8A signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="TAB001 Jacqueline Verheij Samsung" mac-address=8C:77:12:5D:78:86 \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="TAB005 Dirk Vlot Samsung" mac-address=34:AA:8B:02:74:31 \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="TAB006 Siska Verheij Kinder tab" mac-address=18:FE:34:80:95:87 \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="TAB007 Jamie Verheij" mac-address=20:D3:90:B7:64:CA \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="TAB008 Charlien" mac-address=00:C6:D1:31:F1:42 signal-range=\
    -80..80 ssid-regexp=WLAN_SP
add comment="TAB009 Siska Verheij" mac-address=A8:9F:BA:9A:9B:E7 \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="TAB010 Ronald Verheij Shield K1" mac-address=00:04:4B:60:F7:70 \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="TAB011 Jacqueline Verheij Samsung S2" mac-address=\
    F4:42:8F:BB:8C:DC signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="IPOD001 Siska Verheij" mac-address=70:73:CB:2E:FE:66 \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add comment="TOON001 Arno Meijboom" mac-address=28:C2:DD:E4:30:AB \
    signal-range=-80..80 ssid-regexp=WLAN_SP
add action=reject comment="Block all other requests" interface=all
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled comment="2 GHZ Only N" hw-supported-modes=\
    gn master-configuration="conf WLAN_DATA 2GHZ N" name-format=identity \
    slave-configurations="conf WLAN_GUEST 2GHZ N,conf LAN_MFP 2GHZ N,conf LAN_\
    GAME 2GHZ N,conf LAN_CAMERA 2GHZ N,conf LAN_TVMM 2GHZ N,conf WLAN_SP 2GHZ \
    N"
add action=create-dynamic-enabled comment="2 GHZ Only AC" hw-supported-modes=\
    ac master-configuration="conf WLAN_DATA 5GHZ AC" name-format=identity \
    slave-configurations="conf WLAN_GUEST 5GHZ AC,conf LAN_MFP 5GHZ AC,conf LA\
    N_GAME 5GHZ AC,conf LAN_CAMERA 5GHZ AC,conf LAN_TVMM 5GHZ AC,conf WLAN_SP \
    5GHZ AC"
/interface bridge port
add bridge=BR_LAN_MGMT interface=ether1
add bridge=BR_LAN_MGMT interface=ether5
add bridge=BR_LAN_MGMT interface=VLAN_LAN_MGMT
add bridge=BR_LAN_DATA interface=VLAN_LAN_DATA
add bridge=BR_WLAN_DATA interface=VLAN_WLAN_DATA
add bridge=BR_WLAN_GUEST interface=VLAN_WLAN_GUEST
add bridge=BR_LAN_MFP interface=VLAN_LAN_MFP
add bridge=BR_LAN_GAME interface=VLAN_LAN_GAME
add bridge=BR_LAN_CAMERA interface=VLAN_LAN_CAMERA
add bridge=BR_LAN_TVMM interface=VLAN_LAN_TVMM
add bridge=BR_WLAN_SP interface=VLAN_WLAN_SP
/interface sstp-server server
set certificate=SSTP_VPN default-profile=SSTP enabled=yes
/ip address
add address=172.16.0.1/25 interface=VLAN_LAN_MGMT network=172.16.0.0
add address=172.16.1.1/24 interface=VLAN_LAN_DATA network=172.16.1.0
add address=172.16.2.1/24 interface=BR_WLAN_DATA network=172.16.2.0
add address=172.16.3.1/24 interface=BR_WLAN_GUEST network=172.16.3.0
add address=172.16.4.1/26 interface=BR_LAN_MFP network=172.16.4.0
add address=172.16.4.129/25 interface=BR_LAN_GAME network=172.16.4.128
add address=172.16.5.1/25 interface=BR_LAN_CAMERA network=172.16.5.0
add address=172.16.5.129/25 interface=BR_LAN_TVMM network=172.16.5.128
add address=172.16.6.1/24 interface=BR_WLAN_SP network=172.16.6.0
add address=172.16.0.129/27 interface=VLAN_LAN_SERVER network=172.16.0.128
/ip dhcp-server lease
add address=172.16.0.60 comment=LibreNMS lease-time=1w mac-address=\
    00:0C:29:04:A3:20 server=DHCP_LAN_MGMT
add address=172.16.0.120 comment="ESXi02 Ring 225" lease-time=1w mac-address=\
    E0:69:95:F4:94:1C server=DHCP_LAN_MGMT
add address=172.16.0.122 comment=WIN-MGMT lease-time=1w mac-address=\
    00:0C:29:66:4F:54 server=DHCP_LAN_MGMT
add address=172.16.0.123 comment="ESXi01 Supermicro" lease-time=1w \
    mac-address=00:25:90:F5:1B:82 server=DHCP_LAN_MGMT
add address=172.16.0.124 comment=BMC_SuperMicro_Server lease-time=1w \
    mac-address=00:25:90:F6:C9:39 server=DHCP_LAN_MGMT
add address=172.16.0.130 comment="DC1 Domain Controller" lease-time=1w \
    mac-address=00:0C:29:86:52:9A server=DHCP_LAN_SERVER
add address=172.16.0.131 comment="DC2 Domain Controller" lease-time=1w \
    mac-address=00:0C:29:D9:DE:F3 server=DHCP_LAN_SERVER
add address=172.16.0.132 comment="KMS Kerio Mailserver" lease-time=1w \
    mac-address=00:0C:29:EE:92:01 server=DHCP_LAN_SERVER
add address=172.16.0.133 comment="WDS Windows Deployment" lease-time=1w \
    mac-address=00:0C:29:08:78:9E server=DHCP_LAN_SERVER
add address=172.16.0.134 comment="NVR01 Camera Security" lease-time=1w \
    mac-address=00:0C:29:DF:36:61 server=DHCP_LAN_SERVER
add address=172.16.0.137 comment="NAS01 Ether1" lease-time=1w mac-address=\
    00:08:9B:C4:44:06 server=DHCP_LAN_SERVER
add address=172.16.0.138 comment="NAS02 Ether1" lease-time=1w mac-address=\
    00:08:9B:CB:C7:3A server=DHCP_LAN_SERVER
add address=172.16.0.139 comment="NAS02 Ether2" lease-time=1w mac-address=\
    00:08:9B:CB:C7:3B server=DHCP_LAN_SERVER
add address=172.16.0.140 comment="NAS03 Ether1" lease-time=1w mac-address=\
    00:08:9B:CD:D0:49 server=DHCP_LAN_SERVER
add address=172.16.0.142 comment="NAS04 Ether1" lease-time=1w mac-address=\
    00:08:9B:BF:A0:0E server=DHCP_LAN_SERVER
add address=172.16.0.143 comment="NAS04 Ether2" lease-time=1w mac-address=\
    00:08:9B:BF:A0:0F server=DHCP_LAN_SERVER
add address=172.16.5.2 comment="IPCAM1 Dahua Bullet Woonkamer" lease-time=1w \
    mac-address=4C:11:BF:8B:98:48 server=DHCP_LAN_CAMERA
add address=172.16.5.3 comment="IPCAM2 Dahua Bullet Slaapkamer Quinn" \
    lease-time=1w mac-address=4C:11:BF:8B:99:B8 server=DHCP_LAN_CAMERA
add address=172.16.5.4 comment="IPCAM3 CHD-B1 Spare" lease-time=1w \
    mac-address=00:00:1B:03:CF:A1 server=DHCP_LAN_CAMERA
add address=172.16.5.5 comment="IPCAM4 Danua Dome Straat" lease-time=1w \
    mac-address=4C:11:BF:BA:C7:C5 server=DHCP_LAN_CAMERA
add address=172.16.5.6 comment=\
    "IPCAM5 Danua Bullet Blokhut DH-IPC-HFW1300SP-0360B" lease-time=1w \
    mac-address=4C:11:BF:AC:5B:E8 server=DHCP_LAN_CAMERA
add address=172.16.5.7 comment="IPCAM6 Danua Dome PTZ Slaapkamer" lease-time=\
    1w mac-address=4C:11:BF:65:D9:99 server=DHCP_LAN_CAMERA
add address=172.16.5.126 comment=NVR02 lease-time=1w mac-address=\
    00:1C:FA:62:9C:07 server=DHCP_LAN_CAMERA
add address=172.16.5.130 comment="Musicbox01 wlan" lease-time=1w mac-address=\
    00:0F:60:00:D6:75 server=DHCP_LAN_TVMM
add address=172.16.5.131 comment="Musicbox01 lan" lease-time=1w mac-address=\
    B8:27:EB:BE:33:EB server=DHCP_LAN_TVMM
add address=172.16.5.132 comment="Raspberry Pi3 Boven" lease-time=1w \
    mac-address=B8:27:EB:0E:46:C1 server=DHCP_LAN_TVMM
add address=172.16.1.2 comment="PC045 Henk Verheij" lease-time=1w \
    mac-address=6C:F0:49:DD:48:39 server=DHCP_LAN_DATA
add address=172.16.1.3 comment="PC015 Siska Verheij" lease-time=1w \
    mac-address=00:0F:FE:AC:9F:3E server=DHCP_LAN_DATA
add address=172.16.1.4 comment="PC044 Dirk Vlot" lease-time=1w mac-address=\
    00:1B:21:47:B2:4B server=DHCP_LAN_DATA
add address=172.16.1.5 comment="PC051 (Paul Kok HP Pro)" lease-time=1w \
    mac-address=2C:41:38:8C:5A:EF server=DHCP_LAN_DATA
add address=172.16.4.2 comment="PR001 Epson XP720" lease-time=1w mac-address=\
    64:EB:8C:14:35:3A server=DHCP_LAN_MFP
add address=172.16.4.3 comment="PR002 Dell 1320C" lease-time=1w mac-address=\
    08:00:37:75:94:ED server=DHCP_LAN_MFP
/ip dhcp-server network
add address=172.16.0.0/25 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.0.1 netmask=25
add address=172.16.0.128/27 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.0.129 netmask=27
add address=172.16.1.0/24 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.1.1 netmask=24
add address=172.16.2.0/24 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.2.1 netmask=24
add address=172.16.3.0/24 dns-server=8.8.8.8 gateway=172.16.3.1 netmask=24
add address=172.16.4.0/25 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.4.1 netmask=25
add address=172.16.4.128/25 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.4.129 netmask=25
add address=172.16.5.0/25 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.1.1 netmask=25
add address=172.16.5.128/25 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.5.129 netmask=25
add address=172.16.6.0/24 dns-server=172.16.0.130,172.16.0.131 gateway=\
    172.16.6.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=172.16.0.130,172.16.0.131
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
/ip hotspot user
add name=admin
/ip route
add comment="Sonicwall TZ215 Ring 393" distance=1 gateway=172.16.0.125
add comment="R02 Mikrotik x86 Ring 225" distance=2 gateway=172.16.0.126
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=172.16.0.0/21
set www-ssl certificate=WEB_CONF disabled=no port=4443
set api disabled=yes
set api-ssl disabled=yes
/ppp aaa
set use-radius=yes
/radius
add address=172.16.0.130 service=ppp,login
/snmp
set contact=ronald.verheij@skiffkick.nl.nl enabled=yes engine-id=SNMPuser1 \
    location="Ring 393,  Pernis, The Netherlands" trap-community=SNMPuser1 \
    trap-generators=interfaces trap-interfaces=all trap-target=172.16.0.60 \
    trap-version=3
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=R01
/system logging
add action=remote topics=warning
add action=remote topics=info
add action=remote topics=critical
add action=remote topics=error
add action=remote topics=wireless
add action=remote topics=hotspot
/system ntp client
set enabled=yes primary-ntp=172.16.0.130 secondary-ntp=172.16.0.131
/system routerboard settings
set init-delay=0s
/tool user-manager database
set db-path=user-manager
SW07:
Code: Select all
# jan/02/1970 02:05:27 by RouterOS 6.39.2
# software id = 12YC-7TEV
#
/interface bridge
add name=BRIDGE01
/interface ethernet
set [ find default-name=ether1 ] comment="Trunk SW06"
set [ find default-name=ether2 ] comment="Dell Printer" master-port=ether1
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether4 ] master-port=ether1
set [ find default-name=ether5 ] master-port=ether1
/interface vlan
add interface=BRIDGE01 name=VLAN_LAN_CAMERA vlan-id=17
add interface=BRIDGE01 name=VLAN_LAN_DATA vlan-id=10
add interface=BRIDGE01 name=VLAN_LAN_GAME vlan-id=16
add interface=BRIDGE01 name=VLAN_LAN_MFP vlan-id=15
add interface=BRIDGE01 name=VLAN_LAN_MGMT vlan-id=9
add interface=BRIDGE01 name=VLAN_LAN_TVMM vlan-id=18
add interface=BRIDGE01 name=VLAN_WLAN_DATA vlan-id=12
add interface=BRIDGE01 name=VLAN_WLAN_GUEST vlan-id=14
add interface=BRIDGE01 name=VLAN_WLAN_SP vlan-id=19
/interface ethernet switch port
set 0 vlan-mode=secure
set 1 default-vlan-id=15 vlan-header=always-strip vlan-mode=secure
set 5 vlan-mode=secure
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=BRIDGE-2
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn channel-width=20/40mhz-Ce \
    default-authentication=no disabled=no frequency=auto mode=ap-bridge \
    security-profile=BRIDGE-2 ssid=Bridge2 wds-default-bridge=BRIDGE01 \
    wds-mode=dynamic wmm-support=enabled
/snmp community
set [ find default=yes ] addresses=172.16.0.60/32 read-access=no
add addresses=172.16.0.60/32 authentication-protocol=SHA1 \
    encryption-protocol=AES name=SNMPuser1 security=private
/system logging action
set 3 remote=172.16.0.20
/interface bridge port
add bridge=BRIDGE01 interface=ether1
add bridge=BRIDGE01 interface=wlan1
/interface ethernet switch vlan
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=\
    9
add independent-learning=yes ports=ether1 switch=switch1 vlan-id=10
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=\
    12
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=\
    14
add independent-learning=yes ports=switch1-cpu,ether1,ether2 switch=switch1 \
    vlan-id=15
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=\
    16
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=\
    17
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=\
    18
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=\
    19
/interface wireless access-list
add comment="SW08 SXT 5 AC Ring 223" interface=wlan1 mac-address=\
    6C:3B:6B:45:66:DF
add comment="SW09 SXT 5 AC Ring 227" interface=wlan1 mac-address=\
    6C:3B:6B:47:DA:C6
/ip address
add address=172.16.0.8/25 interface=VLAN_LAN_MGMT network=172.16.0.0
/ip dns
set servers=172.16.0.130
/ip route
add distance=1 gateway=172.16.0.1
add distance=1 dst-address=172.16.0.0/21 gateway=172.16.0.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=172.16.0.0/21 disabled=yes
set www-ssl certificate=WEB_CONF disabled=no port=4443
set api disabled=yes
set api-ssl disabled=yes
/snmp
set contact=ronald.verheij@skiffkick.nl.nl enabled=yes engine-id=SNMPuser1 \
    location="Ring 225,  Pernis, The Netherlands" trap-community=SNMPuser1 \
    trap-generators=interfaces trap-interfaces=all trap-target=172.16.0.60 \
    trap-version=3
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name="SW07 - Ring 225"
/system logging
add action=remote topics=warning
add action=remote topics=info
add action=remote topics=critical
add action=remote topics=error
add action=remote topics=wireless
/system ntp client
set enabled=yes primary-ntp=172.16.0.130 secondary-ntp=172.16.0.131
/system routerboard settings
set init-delay=0s
Top
Locked

Who is online

Users browsing this forum: No registered users and 38 guests
  4. RouterOS
  5. Beginner Basics