|
Bridge-ports without wan Ip>addresses - adres routera dla bridge 1 IP>DHCP server dla Bridge IP>DHCP client dla wan IP firewall>NAT>action>masquerade //or dnat for port forwarding //general>chain: SRC NAT //out interface WAN IP FIREWALL>accept est,rel,untracked accept input/drop invalid/drop input/accept icmp/accept input/block everything else/drop input fast track for est,rel/ fast forward/ accept estab, related/accept forward/ drop forward IP Services>wył log ssh/telnet/www wył logowania po MAC: tools>mac server>mac winbox server> interfaces> interf list> list "+"> interface bridge 1 ------------------------------------------------------------------------------------------------------------------- INT>VLAN IP>Addresses IP>DHCPserver>DHCPsetup>int Bridge>Vlan>NewBridgeVlan:ID, Tagged>Wlan>bridge//untagged Phy int Bridge>ports>Vlan>add Phy ports Bridge>Bridge z listy>VLAN filtering /ip firewall add chain=srcnat src-address=192.168.10.0/24 out-interface=eth1 action=masquerade /ip firewall filter add chain=input src-address=192.168.10.0/24 action=accept comment="allow vlan10 to router" IP>services>Winbox available from |
| *Interfaces | /interface vlan | add name=vlan10 interface=bridge vlan-id=10 | /interface vlan add name=vlan20 interface=bridge vlan-id=20 | *IP>addresses | /ip address | add address=192.168.10.1/24 interface=vlan10 | add address=192.168.20.1/24 interface=vlan20 | Bridge → VLAN | /interface bridge vlan | add bridge=bridge vlan-ids=10 tagged=ether2 untagged=ether3 | add bridge=bridge vlan-ids=20 tagged=ether2 untagged=ether4 | Bridge → Ports > PVID | ether2 → 1 | ether3 → 10 | ether4 → 20 | ether5, wifi1, wifi2 → 1 | /interface bridge port | set [find interface=ether2] pvid=1 | set [find interface=ether3] pvid=10 | set [find interface=ether4] pvid=20 | set [find interface=ether5] pvid=1 | set [find interface=wifi1] pvid=1 | set [find interface=wifi2] pvid=1 | Bridge → Bridge>VLAN Filtering | /interface bridge | set [find name=bridge] vlan-filtering=yes | DHCP dla VLAN-ów | /ip pool | add name=dhcp_vlan10 ranges=192.168.10.100-192.168.10.200 | add name=dhcp_vlan20 ranges=192.168.20.100-192.168.20.200 | /ip dhcp-server | add name=dhcp_vlan10 interface=vlan10 address-pool=dhcp_vlan10 disabled=no | add name=dhcp_vlan20 interface=vlan20 address-pool=dhcp_vlan20 disabled=no | /ip dhcp-server network | add address=192.168.10.0/24 gateway=192.168.10.1 dns-server=192.168.10.1 | add address=192.168.20.0/24 gateway=192.168.20.1 dns-server=192.168.20.1 | IP → Pools / IP → DHCP Server | IP → DHCP Server → tab Networks | /ip address | remove [find address="192.168.88.1/24"] | /ip firewall | add chain=srcnat src-address=192.168.10.0/24 out-interface=eth1 action=masquerade |
/ip firewall filter add chain=input src-address=192.168.10.0/24 action=accept comment="allow vlan10 to router" ===================== |
|||||||||||||||||||||||||