Εσωτερικό Mikrotik AP

Βασικές ρυθμίσεις (Mikrotik HAP AC Lite)

/tool romon set enabled=yes secrets=xxxxxx
/interface bridge add name=bridge-backbone
/interface bridge add name=bridge-lan
/interface ethernet set [ find default-name=ether1 ] comment=Uplink name=ether1-backbone
/interface ethernet set [ find default-name=ether2 ] name=ether2-lan
/interface ethernet set [ find default-name=ether3 ] name=ether3-lan
/interface ethernet set [ find default-name=ether4 ] name=ether4-lan
/interface ethernet set [ find default-name=ether5 ] name=ether5-lan poe-out=off
/interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode ampdu-priorities=0,1,2,3 antenna-gain=2 band=2ghz-g/n country=greece disabled=no distance=indoors frequency=auto frequency-mode=regulatory-domain installation=indoor keepalive-frames=disabled mode=ap-bridge name=wlan1-2.4GHz ssid=Sarantaporo.gr-New update-stats-interval=10s wireless-protocol=802.11 wmm-support=enabled
/interface wireless set [ find default-name=wlan2 ] adaptive-noise-immunity=ap-and-client-mode ampdu-priorities=0,1,2,3 band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee distance=indoors frequency=auto keepalive-frames=disabled mode=ap-bridge multicast-helper=full name=wlan2-5GHz nv2-queue-count=8 ssid=Sarantaporo.gr-New update-stats-interval=10s wmm-support=enabled
/interface wireless security-profiles set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" group-key-update=1h mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=sarantaporo wpa2-pre-shared-key=sarantaporo
/ip hotspot profile set [ find default=yes ] html-directory=flash/hotspot
/ip pool add name=pool-lan ranges=192.168.2.50-192.168.2.199
/ip dhcp-server add add-arp=yes address-pool=pool-lan disabled=no interface=bridge-lan lease-time=1d name=dhcp-lan
/snmp community set [ find default=yes ] addresses=0.0.0.0/0
/snmp community add addresses=0.0.0.0/0 name=scn
/interface bridge port add bridge=bridge-backbone interface=ether1-backbone
/interface bridge port add bridge=bridge-lan interface=ether2-lan
/interface bridge port add bridge=bridge-lan interface=ether3-lan
/interface bridge port add bridge=bridge-lan interface=ether4-lan
/interface bridge port add bridge=bridge-lan interface=ether5-lan
/interface bridge port add bridge=bridge-lan interface=wlan1-2.4GHz
/interface bridge port add bridge=bridge-lan interface=wlan2-5GHz
/interface detect-internet set detect-interface-list=all
/interface wireless cap set bridge=bridge-lan discovery-interfaces=ether1-backbone interfaces=wlan1-2.4GHz
/ip address add address=192.168.2.1/24 interface=bridge-lan network=192.168.2.0
/ip dhcp-client add dhcp-options=hostname,clientid disabled=no interface=bridge-backbone
/ip dhcp-server network add address=192.168.2.0/24 dns-server=192.168.2.1 gateway=192.168.2.1 netmask=24 ntp-server=192.168.2.1
/ip firewall filter add action=fasttrack-connection chain=forward
/ip firewall nat add action=masquerade chain=srcnat comment="WAN NAT" out-interface=bridge-backbone
/ip traffic-flow set cache-entries=64k enabled=yes
/ip traffic-flow target add dst-address=10.130.234.253 version=ipfix
/ip service set telnet disabled=yes
/ip service set ftp disabled=yes
/ip service set www disabled=y
/ip upnp set enabled=yes
/ip upnp interfaces add interface=bridge-lan type=internal
/ip upnp interfaces add interface=bridge-backbone type=external
/snmp set contact=admin@sarantaporo.gr enabled=yes location="New" trap-community=scn trap-generators=start-trap,interfaces trap-interfaces=all trap-target=10.130.234.252 trap-version=2
/system clock set time-zone-name=Europe/Athens
/system identity set name=gw-ap.new.scn
/system ntp client set enabled=yes primary-ntp=10.130.23.1 secondary-ntp=10.128.0.1