# Honetarakoa sortua:
# RouterOSv6.x
:log info "Unsolclic for 103685-SevaSantRusinol15Rd2 going to be executed."
#
# Configuration for RouterOSv6.x
# Device: 103685-SevaSantRusinol15Rd2
#
# Script hau kargatzeko/exekutatzeko metodoak:
# 1.-Script modura. Kargatu testu hau script modura, hauetako batekin:
#     a.Winbox (Linux-ekin, wine beharrezkoa da)
#     b.Terminal (telnet, ssh...)
#    Gero exekutatu script-a honekin:
#      > /system script run script_izena
# 2.-Inportatutako fitxategia:
#     Gorde testu hau fitxategi batean; gero kargatu routerrean
#     ftp-a erabiliz honelako izen batekin: "script_name.rsc".
#     (kontuan izan ".rsc" luzapena beharrezkoa dela)
#     Exekutatu inportatutako fitxategia komando hau erabiliz:
#      > /import script_izena
# 3.-Telnet kopiatu eta itsatsi:
#     Ireki terminaleko saioa, eta testu hau kopiatu eta itsatsi
#     zuzenean terminalaren leihoan
#
# Oharrak:
# -routing-test paketea beharrezkoa da RouterOSv2.9 erabiltzen baduzu; ziur egon gaituta duzula sistema-paketeetan
# -wlan-ak eskuz gaitu behar lirateke; ziur egon antena egokian ezarrita daudela (a edo b)
#   kablea miniPCIra konektatu duzun moduarekin bat. Manten ezazu
#   potentzia gutxienekoan eta egiaztatu kanala.
# -Scripta-ak ez du routerra berrabiarazi; beharbada, eskuz egin beharko duzu
# -Roterrean idazteko baimena eduki behar duzu
# -MAC bidezko sarbide-metodoa aholkatzen da (winbox, telnet-a MAC-era...)
#   (script-ak zenbait IP helbide berkonfiguratzen ditu, eta komunikazioa eten daiteke)
# -Ez da aldaketarik egiten gailuen erabiltzaileen pasahitzetan
# -Irakurtzeko Soilik moduko gonibatuentzako kontu bat zabalduko da, gonbidatuei sartzen uzteko
#   routerrean, kalterik eragiteko arriskurik gabe baina konfigurazioa ikusteko gaitasunarekin.
# -Ziur egon pakete guztiak aktibatuta daudela.
# -Ez exekutatu script-a telnetetik eta IP konexio baten bidez
#   interfazera konektatuta: interfazea hautsi egingo da script-a exekutatzean.
#
/ system identity set name=SevaSantRusinol15Rd2
#
# DNS (client & server cache) zone: 2467
/ip dns set servers=10.138.0.2,10.138.23.34 allow-remote-requests=yes
:delay 1
#
# NTP (client & server cache) zone: 2467
/system ntp client set enabled=yes mode=unicast primary-ntp=10.138.0.2 secondary-ntp=10.138.23.34
:delay 1
#
# Banda-zabaleraren zerbitzaria
/ tool bandwidth-server set enabled=yes authenticate=no allocate-udp-ports-from=2000
#
# SNMP
/snmp community set public addresses=10.0.0.0/8
/snmp set contact="guifi@guifi.net" enabled=yes location="SevaSantRusinol15" trap-community=public
#
# Guest user
/user
:foreach i in [find group=read] do={/user remove $i;}
add name="guest" group=read address=10.0.0.0/8 comment="" disabled=no
#
# Grafikoak
/tool graphing interface add
# Ezabatu egungo wLan/Lan zubia, halakorik baldin badago
:foreach i in [/interface bridge find name=wLan/Lan] \
do={:foreach i in [/interface bridge port find bridge=wLan/Lan] \
do={/interface bridge port remove $i; \
:foreach i in [/ip address find interface=wLan/Lan] \
do={/ip address remove $i;};};
/interface bridge remove $i;}
:delay 1
#
# Radio#: 0 SevaSvSntRsnl15Rd2CPE0
/interface wireless set wlan1 name="wlan1" \
radio-name="SevaSvSntRsnl15Rd2CPE0" mode=station ssid="guifi.net-CNTTVCentelles-AP5N" \
band="" \
frequency-mode=regulatory-domain country=spain antenna-gain=14 \
dfs-mode=radar-detect \
antenna-mode=ant-a wds-mode=static wds-default-bridge=none wds-default-cost=100 \
wds-cost-range=50-150 wds-ignore-ssid=yes hide-ssid=no
:delay 1
# Type: Wan
/ip address
:foreach i in [find interface=wlan1] do={remove $i}
:foreach i in [find address="10.138.71.66/28"] do={remove $i}
/ ip address add address=10.138.71.66/28 network=10.138.71.64 broadcast=10.138.71.79 interface=wlan1 disabled=no
/ routing bgp network
:foreach i in [/routing bgp network find network=10.138.71.64/28] do={/routing bgp network remove $i;}
add network=10.138.71.64/28 synchronize=no disabled=no
/ routing ospf interface
:foreach i in [/routing ospf interface find interface=wlan1] do={/routing ospf interface remove $i;}
add interface=wlan1
/ routing ospf network
:foreach i in [/routing ospf network find network=10.138.71.64/28] do={/routing ospf network remove $i;}
add network=10.138.71.64/28 area=backbone disabled=yes
:delay 1
#
:delay 1
#
# Device has firewall (setting up as CPE)
/ip route add gateway=10.138.71.65
:foreach i in [find address="192.168.1.1/24"] do={remove $i}
/ip address add address=192.168.1.1/24 network=192.168.1.0 broadcast=192.168.1.255 interface=ether1 comment="" disabled=no
:delay 1
/ip pool
:foreach i in [find name=private] do={remove $i}
add name="private" ranges=192.168.1.100-192.168.1.200
:delay 1
/ip dhcp-server
:foreach i in [find name=private] do={remove $i}
add name="private" interface=ether1 lease-time=3d address-pool=private bootp-support=static authoritative=after-2sec-delay disabled=no
:delay 1
/ip dhcp-server network
:foreach i in [find] do={remove $i}
add address=192.168.1.0/24 gateway=192.168.1.1 netmask=24 dns-server=10.138.0.2,10.138.23.34 domain="guifi.net" comment=""
:delay 1
/ip dhcp-client
:foreach i in [find] do={remove $i}
:delay 1
/ip firewall nat
:foreach i in [find] do={remove $i}
:delay 1
add chain=srcnat out-interface=wlan1 action=masquerade comment="" disabled=no
/ip firewall filter
:foreach i in [find] do={remove $i}
add chain=input connection-state=established action=accept comment="Allow Established connections" disabled=no
add chain=input protocol=udp action=accept comment="Allow UDP" disabled=no
add chain=input src-address="192.168.1.0/24" action=accept comment="Allow access to router from known network" disabled=no
add chain=input protocol=tcp dst-port=22 action=accept comment="Allow remote ssh" disabled=no
add chain=input protocol=udp dst-port=161 action=accept comment="Allow snmp" disabled=no
add chain=input protocol=tcp dst-port=8291 action=accept comment="Allow remote winbox" disabled=no
add chain=input protocol=icmp action=accept comment="Allow ping" disabled=no
add chain=forward connection-state=established action=accept comment="Allow already established connections" disabled=no
add chain=forward connection-state=related action=accept comment="Allow related connections" disabled=no
add chain=forward src-address="192.168.1.0/24" action=accept comment="Allow access to router from known network" disabled=no
add chain=input protocol=tcp connection-state=invalid action=drop comment="" disabled=no
add chain=forward protocol=tcp connection-state=invalid action=drop comment="Drop invalid connections" disabled=no
add chain=forward action=drop comment="Drop anything else" disabled=no
add chain=input action=drop comment="Drop anything else" disabled=no
:delay 1
#
:log info "Unsolclic for 103685-SevaSantRusinol15Rd2 executed."
/