"accept established,related, untracked" connection-state=\Īdd action=drop chain=forward comment="drop invalid" connection-state=invalidĪdd action=drop chain=forward comment="drop all from WAN not DSTNATed" \Ĭonnection-nat-state=!dstnat connection-state=new in-interface-list=WANĪdd action=masquerade chain=srcnat comment=masquerade ipsec-policy=out,none \ "accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1Īdd action=drop chain=input comment="drop all not coming from LAN" \Īdd action=accept chain=forward comment="accept in ipsec policy" \Īdd action=accept chain=forward comment="accept out ipsec policy" \Īdd action=fasttrack-connection chain=forward comment=fasttrack \Ĭonnection-state=established,related hw-offload=yesĪdd action=accept chain=forward comment=\ Note the PPPoE credentials are set for a Spark connection, so be sure to update the user and password to match your provider.Īdd interface=ether1 name=vlan10 vlan-id=10Īdd add-default-route=yes disabled=no interface=vlan10 name=pppoe-out1 \Īdd name=dhcp_pool0 ranges=192.168.88.25-192.168.88.250Īdd address-pool=dhcp_pool0 interface=bridge1 lease-time=1h name=dhcp1Īdd address=192.168.88.1/24 interface=bridge1 network=192.168.88.0Īdd address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1Īdd action=accept chain=input comment="accept established,related,untracked" \Ĭonnection-state=established,related,untrackedĪdd action=drop chain=input comment="drop invalid" connection-state=invalidĪdd action=accept chain=input comment="accept ICMP" protocol=icmp Additional ports can be added to the bridge at the end of the script. This script will configure Ether1 as the WAN port with VLAN10 + PPPoE Client, and Ether2 as the LAN port. Simply copy and paste the full script below (include the #) into the MikroTik terminal.
system/reset-configuration no-defaults=yes
# Warning, this will erase all configuration and require connection via MAC Address in WinBox The script assumes you have a blank Routerboard, if your device has existing configuration you should run this command before loading the script:
This is a basic PPPoE with VLAN10 Fibre configuration script for MikroTik Routers running the latest RouterOS V7.
0 kommentar(er)
