MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 6.38.4 (c) 1999-2017
http://www.mikrotik.com/
[?] Gives the list of available commands
command [?] Gives help on the command and list of arguments
[Tab] Completes the command/word. If the input is ambiguous,
a second [Tab] gives possible options
/ Move up to base level
.. Move up one level
/command Use command at the base level
jan/01/2002 01:02:31 system,error,critical router was rebooted without proper shut
down
jan/01/2002 01:03:54 system,error,critical login failure for user admin from 172.1
6.10.119 via winbox
[admin@MikroTik] > /export hide-sensitive
# mar/12/2017 17:05:16 by RouterOS 6.38.4
# software id = QVSE-2X45
#
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
/ip neighbor discovery
set ether1 discover=no
/ip pool
add name=default-dhcp ranges=172.16.10.20-172.16.10.130
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=ether2-master name=\
"LAN DHCP"
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw
/ip address
add address=172.16.10.1/24 comment=defconf interface=ether2-master network=\
172.16.10.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=172.16.10.0/24 comment=defconf dns-server=172.16.10.10 domain=\
WIETINGONLINE gateway=172.16.10.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=172.16.10.10
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \
protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
connection-state=established,related disabled=yes
add action=drop chain=input comment="defconf: drop all from WAN" disabled=yes \
in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related disabled=yes
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related disabled=yes
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid disabled=yes
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new disabled=yes in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
ether1
add action=dst-nat chain=dstnat comment="RDP - TCP - 3389" dst-port=3389 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.10 to-ports=3389
add action=dst-nat chain=dstnat comment="Insteon - TCP - 81" dst-port=81 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.5 to-ports=81
add action=dst-nat chain=dstnat comment="L2TP1 - TCP - 500" dst-port=500 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.14 to-ports=500
add action=dst-nat chain=dstnat comment="L2TP2 - TCP - 4500" dst-port=4500 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.14 to-ports=4500
add action=dst-nat chain=dstnat comment="L2TP3 - TCP - 47" dst-port=47 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.14 to-ports=47
add action=dst-nat chain=dstnat comment="L2TP4 - TCP - 50" dst-port=50 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.14 to-ports=50
add action=dst-nat chain=dstnat comment="PLEX - TCP - 32400" dst-port=32400 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.15 to-ports=32400
add action=dst-nat chain=dstnat comment="BLUEIRIS - TCP - 85" dst-port=85 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.30 to-ports=85
add action=dst-nat chain=dstnat comment="FTP1 - TCP - 21" dst-port=21 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.14 to-ports=21
add action=dst-nat chain=dstnat comment="FTP2 - TCP - 980-989" dst-port=980-989 \
in-interface=ether1 protocol=tcp to-addresses=172.16.10.14 to-ports=980-989
/system clock
set time-zone-name=America/Chicago
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2-master disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
[admin
@Mikro
Tik] >
[admin@MikroTik] >