Ответы пользователя по тегу Mikrotik
  • Как настроить две подсети на одном физическом порте в mikrotik?

    @PobuH Автор вопроса
    # DHCP server can not run on slave interface!
    Видимо из-за этого не работает. Только не пойму почему...? Воторой dhcp выделен красным(

    вот мой конфиг:
    /interface bridge
    add admin-mac=E4:8D:8C:A1:88:ED auto-mac=no comment=defconf name=bridge
    /interface ethernet
    set [ find default-name=ether2 ] name=ether2-master
    set [ find default-name=ether3 ] master-port=ether2-master
    set [ find default-name=ether4 ] master-port=ether2-master
    set [ find default-name=ether5 ] master-port=ether2-master
    /interface wireless
    set [ find default-name=wlan1 ] band=2ghz-onlyn channel-width=20/40mhz-Ce \
    country=russia2 disabled=no distance=indoors frequency=2427 mode=ap-bridge \
    ssid=Alex1 wireless-protocol=802.11
    /ip neighbor discovery
    set ether1 discover=no
    set bridge comment=defconf
    /interface wireless security-profiles
    set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk group-ciphers=\
    tkip,aes-ccm mode=dynamic-keys unicast-ciphers=tkip,aes-ccm \
    wpa-pre-shared-key=CorteC2010 wpa2-pre-shared-key=CorteC2010
    /ip pool
    add name=dhcp ranges=192.168.1.10-192.168.1.254
    add name=pool2 ranges=192.168.2.10-192.168.2.100
    /ip dhcp-server
    add address-pool=dhcp disabled=no interface=bridge name=defconf
    # DHCP server can not run on slave interface!
    add address-pool=pool2 disabled=no interface=ether2-master name=server1
    /interface bridge port
    add bridge=bridge comment=defconf interface=ether2-master
    add bridge=bridge comment=defconf interface=wlan1
    /ip address
    add address=192.168.1.1/24 comment=defconf interface=ether2-master network=\
    192.168.1.0
    add address=192.168.2.1/24 interface=ether2-master network=192.168.2.0
    /ip dhcp-client
    add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
    /ip dhcp-server network
    add address=192.168.1.0/24 comment=defconf gateway=192.168.1.1 netmask=24
    add address=192.168.2.0/24 gateway=192.168.2.1 netmask=24
    /ip dns
    set allow-remote-requests=yes
    /ip dns static
    add address=192.168.1.1 name=router
    /ip firewall filter
    add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
    add action=accept chain=input comment="defconf: accept established,related" \
    connection-state=established,related
    add action=drop chain=input comment="defconf: drop all from WAN" in-interface=\
    ether1
    add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
    add action=accept chain=forward comment="defconf: accept established,related" \
    connection-state=established,related
    add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
    invalid
    add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface=ether1
    /ip firewall nat
    add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
    ether1
    /system clock
    set time-zone-name=Asia/Krasnoyarsk
    /tool mac-server
    set [ find default=yes ] disabled=yes
    add interface=bridge
    /tool mac-server mac-winbox
    set [ find default=yes ] disabled=yes
    add interface=bridge
    Ответ написан