Settings for hAP:
Code: Select all
/interface bridge
add admin-mac=********* auto-mac=no comment=defconf name=bridge
add admin-mac=********* auto-mac=no comment=defconf name=bridge_IoT
add name=guest_bridge
/interface pppoe-client
add disabled=no interface=ether2 name=pppoe-out1 service-name=BhTelecom \
use-peer-dns=yes user=******
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip firewall layer7-protocol
add name=Klix regexp="^.+(klix.ba).*\$"
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=netlab_pool ranges=10.10.17.100-10.10.17.150
add name=ermin_pool next-pool=netlab_pool ranges=10.10.17.50-10.10.17.99
add name=IoT_pool ranges=10.10.19.50-10.10.19.149
add name=dhcp_pool5 ranges=10.10.27.1-10.10.27.45
/ip dhcp-server
add add-arp=yes address-pool=netlab_pool interface=bridge lease-time=8h name=\
netlab_DHCP
add add-arp=yes address-pool=IoT_pool interface=bridge_IoT lease-time=8h \
name=IoT_dhcp
add add-arp=yes address-pool=dhcp_pool5 interface=guest_bridge name=dhcp1
/routing table
add disabled=no fib name=bhtelecom_route
add disabled=no fib name=ktv_route
/certificate settings
set crl-download=yes crl-use=yes
/interface bridge port
add bridge=bridge comment=defconf disabled=yes interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=hAP-ax3-5G
add bridge=bridge comment=defconf interface=hAP-ax3-2G
add bridge=guest_bridge interface=wifi2-guest
add bridge=bridge disabled=yes interface=cAP-ax-5G
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=WAN
/interface list member
add comment=NETLAB interface=bridge list=LAN
add comment="KTV E-G-E" interface=ether1 list=WAN
add comment="Bh Telecom" interface=ether2 list=WAN
add interface=pppoe-out1 list=WAN
add interface=hAP-ax3-2G list=LAN
add interface=hAP-ax3-5G list=LAN
add interface=ether5 list=LAN
add interface=wifi2-guest list=LAN
add interface=guest_bridge list=LAN
/interface wifiwave2 cap
set discovery-interfaces=ether5
/interface wifiwave2 capsman
set enabled=yes package-path=/packages require-peer-certificate=no \
upgrade-policy=suggest-same-version
/ip address
add address=10.10.17.46/24 comment=defconf interface=bridge network=\
10.10.17.0
add address=10.10.19.46/24 interface=bridge_IoT network=10.10.19.0
add address=10.10.27.46/24 interface=guest_bridge network=10.10.27.0
/ip dhcp-client
add add-default-route=no comment=defconf interface=ether1
add disabled=yes interface=bridge
/ip dhcp-server network
add address=10.10.17.0/24 gateway=10.10.17.46
add address=10.10.19.0/24 gateway=10.10.19.46
add address=10.10.27.0/24 gateway=10.10.27.46
/ip dns
set allow-remote-requests=yes
/ip firewall filter
....
####Settings for cAP:
/interface bridge
add admin-mac=******** auto-mac=no comment=defconf name=bridgeLocal
/interface wifiwave2 datapath
add bridge=bridgeLocal comment=defconf disabled=no name=capdp
/interface wifiwave2
# managed by CAPsMAN
# mode: AP, SSID: netlab, channel: 5500/ax/Ceee
set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap \
datapath=capdp disabled=no name=wifi1-5g
# managed by CAPsMAN
# mode: AP, SSID: netlab, channel: 2437/g
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap \
datapath=capdp disabled=no name=wifi2-2g
# managed by CAPsMAN
# mode: AP, SSID: netlab_gosti
add datapath=capdp disabled=no mac-address=********** \
master-interface=wifi2-2g name=wifi21
add datapath=capdp mac-address=******* master-interface=wifi2-2g \
name=wifi22
/ip pool
add name=IoT_pool ranges=10.10.19.150-10.10.19.220
/interface bridge port
add bridge=bridgeLocal comment=defconf interface=ether1
add bridge=bridgeLocal comment=defconf interface=ether2
/interface wifiwave2 cap
set caps-man-addresses=10.10.17.113 certificate=request discovery-interfaces=\
bridgeLocal enabled=yes lock-to-caps-man=yes slaves-datapath=capdp \
slaves-static=yes
/interface wifiwave2 capsman
set package-path="" require-peer-certificate=no upgrade-policy=none
/ip dhcp-client
add comment=defconf interface=bridgeLocal