76 lines
2.9 KiB
Text
76 lines
2.9 KiB
Text
# 2023-07-21 18:48:06 by RouterOS 7.10
|
|
# software id = NPZE-DVQU
|
|
#
|
|
# model = RB750Gr3
|
|
# serial number = CC210C7265A3
|
|
/interface ethernet
|
|
set [ find default-name=ether1 ] disabled=yes
|
|
set [ find default-name=ether3 ] disabled=yes
|
|
set [ find default-name=ether4 ] disabled=yes
|
|
set [ find default-name=ether5 ] disabled=yes
|
|
/interface wireguard
|
|
add listen-port=13233 mtu=1420 name=wireguard_clients private-key=\
|
|
"4EsatRG85+HxsoPF1gm6A5vZQ88xRo/fHb0xsdJMb3w="
|
|
add listen-port=13232 mtu=1420 name=wireguard_s2s_hex private-key=\
|
|
"ABE3o3tWAw2GeLfJDAKeNqG9OwudiOLFhT+ghQ6P1Fc="
|
|
/interface list
|
|
add name=LAN
|
|
add name=VPN
|
|
add name=winbox-access
|
|
/interface lte apn
|
|
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
|
|
/interface wireless security-profiles
|
|
set [ find default=yes ] supplicant-identity=MikroTik
|
|
/port
|
|
set 1 name=serial0
|
|
/routing ospf instance
|
|
add disabled=no name=ospf-instance-s2s redistribute=connected router-id=\
|
|
10.25.26.2
|
|
/routing ospf area
|
|
add area-id=0.0.0.1 disabled=no instance=ospf-instance-s2s name=ospf-area-1
|
|
/snmp community
|
|
set [ find default=yes ] read-access=no security=private
|
|
add addresses=::/0 authentication-password=9IEYe5R-usuhdH7y-LEcJpWcfeQ319 \
|
|
authentication-protocol=SHA1 encryption-password=\
|
|
GjYze03kkkeRMH3sDVbAJp9Gl6WC-I encryption-protocol=AES name=librenms-v3
|
|
/system logging action
|
|
set 0 memory-lines=10000
|
|
/ip neighbor discovery-settings
|
|
set discover-interface-list=winbox-access
|
|
/ip settings
|
|
set tcp-syncookies=yes
|
|
/ipv6 settings
|
|
set disable-ipv6=yes max-neighbor-entries=8192
|
|
/interface list member
|
|
add interface=ether2 list=LAN
|
|
add interface=wireguard_s2s_hex list=VPN
|
|
add interface=wireguard_clients list=LAN
|
|
add interface=wireguard_s2s_hex list=winbox-access
|
|
add interface=wireguard_clients list=winbox-access
|
|
add interface=ether2 list=winbox-access
|
|
/interface ovpn-server server
|
|
set auth=sha1,md5
|
|
/interface wireguard peers
|
|
add allowed-address=0.0.0.0/0 endpoint-address=mgrote.net endpoint-port=13232 \
|
|
interface=wireguard_s2s_hex persistent-keepalive=10s public-key=\
|
|
"/drwUkzCR7umH4YFTRa+D9WB8KOvTXIZxRf/9gC9kkM="
|
|
add allowed-address=10.25.27.2/24 comment=iphone_andreas interface=\
|
|
wireguard_clients public-key=\
|
|
"Y/3GVIZsdAUpKr2XJ42MVPte4qJvPpe6ZWj7lQIjPEM="
|
|
add allowed-address=10.25.27.200/32 comment=iphone_maximilian interface=\
|
|
wireguard_clients public-key=\
|
|
"45IEON4osDmTxIv/pkDTWwdUb6X33uTmZFbebkrkdHo="
|
|
add allowed-address=10.25.27.100/24 comment=ipad_maximilian interface=\
|
|
wireguard_clients public-key=\
|
|
"45/22voZXBbjYhtLLQqwPQ00tMZVB6sglrLbkEnlTUM="
|
|
/ip address
|
|
add address=10.25.26.2/30 interface=wireguard_s2s_hex network=10.25.26.0
|
|
add address=10.25.27.1/24 interface=wireguard_clients network=10.25.27.0
|
|
/ip cloud
|
|
set ddns-enabled=yes ddns-update-interval=5m
|
|
/ip dhcp-client
|
|
add interface=ether2
|
|
/ip firewall address-list
|
|
add address=192.168.2.0/24 list=subnet2
|
|
add address=192.168.2.0/24 list=mgmt_access
|