********************* Mikrotik Configuration - Clientes ********************* ##################### ATENCIÓN ##################### * Cuando este arquivo sufrir cambios o mejorias, usted recibirá una copia actualizada. ---- Informaciones a ser Personalizadas ---- 1.) Cambiar usuario y contraseña de la Cuenta PPoE: {user=lab5} {password=lab5} 2.) Seña del Wifi del Cliente: {TTje5423} 3.) Cambiar Nombre del Wifi: a.) Cliente de 2Ghz: {CROSS | LAB 2Ghz} b.) Cliente de 2Ghz: {CROSS | LAB 5Ghz} 4.) Cambiar IP de LAN del Cliente: {192.168.1.} 5.) Cambiar nombre del Mikrotik: {name="CROSS | Cliente LAB 5Ghz"} 6.) Fecha de Inicio del Reboot/Upgrade Automatico (Proxima fecha de lunes de Madrugada): {start-date=nov/25/2019} 7.) Cambiar el PASSWORD del NOC por defecto de la Franquicia: {password=1ngr3S0@} 6.) Cambiar Zona Horaria del Cliente: {time-zone-name=America/Asuncion} ##################### SCRIPT ##################### /interface bridge add name=bridge protocol-mode=none comment="Para uso como LAN Principal del Cliente" /interface ethernet set [ find default-name=ether1 ] comment="Interface Fisica Utilizada para la Salida a Internet" /interface pppoe-client add add-default-route=yes allow=chap disabled=no interface=ether1 name=\ ppoe-CROSS password=lab5 use-peer-dns=yes user=lab5 /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik add authentication-types=wpa2-psk management-protection=allowed mode=\ dynamic-keys name=Wap2 supplicant-identity=MikroTik wpa2-pre-shared-key=\ TTje5423 add authentication-types=wpa2-psk management-protection=allowed mode=\ dynamic-keys name=NOC-Wap2 supplicant-identity=MikroTik \ wpa2-pre-shared-key=redsincables /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \ disabled=no frequency=auto mode=ap-bridge security-profile=Wap2 ssid=\ "CROSS | LAB 2Ghz" wireless-protocol=802.11 add disabled=no hide-ssid=yes mac-address=D9:65:10:CB:A0:01 master-interface=\ wlan1 name=Wifi-NOC security-profile=NOC-Wap2 ssid=NOC-Cross /interface wireless set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee \ disabled=no frequency=auto mode=ap-bridge security-profile=Wap2 ssid=\ "CROSS | LAB 5Ghz" wireless-protocol=any /ip hotspot profile set [ find default=yes ] html-directory=flash/hotspot /ip pool add name=pool-lan ranges=192.168.1.100-192.168.1.200 /ip dhcp-server add address-pool=pool-lan disabled=no interface=bridge lease-time=1d name=\ dhcp-server /snmp community add addresses=::/0 name=cross_snmp /interface bridge port add bridge=bridge interface=ether2 add bridge=bridge interface=ether3 add bridge=bridge interface=ether4 add bridge=bridge interface=ether5 add bridge=bridge interface=wlan1 add bridge=bridge interface=wlan2 add bridge=bridge interface=Wifi-NOC /ip address add address=192.168.1.1/24 comment="LAN LOCAL - Usuarios" interface=bridge \ network=192.168.1.0 /ip dhcp-server network add address=192.168.1.0/24 dns-server=7.7.7.7,1.1.1.1 gateway=192.168.1.1 /ip firewall nat add action=masquerade chain=srcnat out-interface=ppoe-CROSS /ip service set telnet port=8023 set ftp disabled=yes set ssh port=8022 set winbox port=8000 set api-ssl disabled=yes /ip upnp set enabled=yes /ip upnp interfaces add interface=ppoe-CROSS type=external add interface=bridge type=internal /snmp set contact=noc@cross.gt enabled=yes location="NOC - CROSS Connect" \ trap-community=cross_snmp trap-version=2 /system clock set time-zone-name=America/Asuncion time-zone-autodetect=no /system identity set name="CROSS | Cliente LAB 5Ghz" /system ntp client set enabled=yes primary-ntp=199.223.248.98 /user add name=cross password=1ngr3S0@ group=full comment="Cuenta para Gerencia y Soporte Cross Connect" /system scheduler add interval=1w name=upgradecheck_package on-event=upgradecheck_package policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ start-date=nov/25/2019 start-time=03:20:00 add interval=1w name=downloadcheck_package on-event=downloadcheck_package \ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ start-date=nov/25/2019 start-time=03:30:00 add interval=1w name=reboot on-event=reboot policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ start-date=nov/25/2019 start-time=04:10:00 add interval=1w name=routerboard on-event=routerboard policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ start-date=nov/25/2019 start-time=04:15:00 add interval=1w name=reboot_final on-event=reboot_final policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ start-date=nov/25/2019 start-time=04:20:00 /system script add name=upgradecheck_package owner=cross policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ "system package update check-for-updates" add name=downloadcheck_package owner=cross policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ "system package update download" add name=reboot owner=cross policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ "/system reboot" add name=routerboard owner=cross policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ "/system routerboard upgrade" add name=reboot_final owner=cross policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ "/system reboot" /user group add name=web-access policy=local,reboot,read,test,password,web,sensitive /user set admin address=192.168.1.0/24 group=web-access comment="Cuenta de Acceso del Cliente Local" /interface set ether1 name="ether1 - Internet" /interface bridge add name=AccessWeb protocol-mode=none /ip address add address=192.168.77.1 interface=AccessWeb comment="Acceso Web al Router via URL"