# Generated for:
<br /># RouterOSv3.x
<br />:log info "Unsolclic for 20224-CDVRadioClubST2 going to be executed."
<br /># 
<br /># Configuration for RouterOSv3.x
<br /># Device: 20224-CDVRadioClubST2
<br /># 
<br /># Methods to upload/execute this script:
<br /># 1.-As a script. Upload this output as a script either with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;a.Winbox (with Linux, wine required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;b.Terminal (telnet, ssh...)
<br /># &nbsp;&nbsp;&nbsp;Then execute the script with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/system script run script_name
<br /># 2.-Imported file:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Save this output to a file, then upload it to the router
<br /># &nbsp;&nbsp;&nbsp;&nbsp;using ftp using a name like "script_name.rsc".
<br /># &nbsp;&nbsp;&nbsp;&nbsp;(note that extension ".rsc" is required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Run the import file using the command:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/import script_name
<br /># 3.-Telnet cut&paste:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Open a terminal session, and cut&paste this output
<br /># &nbsp;&nbsp;&nbsp;&nbsp;directly on the terminal input.
<br /># 
<br /># Notes:
<br /># -routing-test package is required if you use RouterOSv2.9 , be sure you have it enabled at system packages
<br /># -wlans should be enabled manually, be sure to set the correct antenna (a or b)
<br /># &nbsp;&nbsp;according in how did you connect the cable to the miniPCI. Keep the
<br /># &nbsp;&nbsp;power at the minimum possible and check the channel.
<br /># -The script doesn't reset the router, you might have to do it manually
<br /># -You must have write access to the router
<br /># -MAC access (winbox, MAC telnet...) method is recommended
<br /># &nbsp;&nbsp;(the script reconfigures some IP addresses, so communication can be lost)
<br /># -No changes are done in user passwords on the device
<br /># -A Read Only guest account with no password will be created to allow guest access
<br /># &nbsp;&nbsp;to the router with no danger of damage but able to see the config.
<br /># -Be sure that all packages are activated.
<br /># -Don't run the script from telnet and being connected through an IP connection at
<br /># &nbsp;&nbsp;the wLan/Lan interface: This interface will be destroyed during the script.
<br /># 
<br />/ system identity set name=CDVRadioClubST2
<br /># 
<br /># DNS (client &#038; server cache) zone: 2605
<br />/ip dns set primary-dns=10.20.0.2 allow-remote-requests=yes
<br />:delay 1
<br /># 
<br /># NTP (client &#038; server cache) zone: 2605
<br />/system ntp client set enabled=yes mode=unicast primary-ntp=10.20.0.2
<br />:delay 1
<br /># 
<br /># Bandwidth-server
<br />/ tool bandwidth-server set enabled=yes authenticate=no allocate-udp-ports-from=2000
<br /># 
<br /># SNMP
<br />/snmp set contact="guifi@guifi.net" enabled=yes location="CDVRadioClub"
<br /># 
<br /># Guest user
<br />/user
<br />:foreach i in [find group=read] do={/user remove $i;}
<br />add name="guest" group=read address=0.0.0.0/0 comment="" disabled=no
<br /># 
<br /># Graphing
<br />/tool graphing interface add
<br /># Remove current wLan/Lan bridge if exists
<br />:foreach i in [/interface bridge find name=wLan/Lan] \ 
<br />do={:foreach i in [/interface bridge port find bridge=wLan/Lan] \ 
<br />do={/interface bridge port remove $i; \ 
<br />:foreach i in [/ip address find interface=wLan/Lan] \ 
<br />do={/ip address remove $i;};};
<br />/interface bridge remove $i;}
<br />:delay 1
<br /># 
<br /># Routed device
<br /># 
<br /># Other cable connections
<br /># 
<br /># Internal addresses NAT
<br />:foreach i in [/ip firewall nat find src-address="172.16.0.0/12"] do={/ip firewall nat remove $i;}
<br />:foreach i in [/ip firewall nat find src-address="192.168.0.0/16"] do={/ip firewall nat remove $i;}
<br />/ip firewall nat
<br />add chain=srcnat src-address="192.168.0.0/16" dst-address=!192.168.0.0/16 action=src-nat to-addresses= comment="" disabled=no
<br />add chain=srcnat src-address="172.16.0.0/12" dst-address=!172.16.0.0/12 protocol=!ospf action=src-nat to-addresses= comment="" disabled=no
<br /># 
<br /># BGP Routing
<br /># BGP & OSPF Filters
<br />:foreach i in [/routing filter find chain=ospf-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ospf-out] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ebgp-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ebgp-out] do={/routing filter remove $i;}
<br />/ routing filter
<br />add action=discard chain=ebgp-in comment="1. Discard insert non 10.x routes from BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=!8-32
<br />add action=discard chain=ebgp-out comment="2. Discard send non 10.x routes to BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=!8-32
<br />add action=accept chain=ospf-in comment="3. Accept insert 10.x routes from OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
<br />add action=accept chain=ospf-in comment="4. Accept insert 172.x routes from OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
<br />add action=discard chain=ospf-in comment="5. Discard insert non 10.x and 172.x from OSPF neighbor" disabled=no invert-match=no
<br />add action=accept chain=ospf-out comment="6. Allow send 10.x routes to OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
<br />add action=accept chain=ospf-out comment="7. Allow send 172.x routes to OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
<br />add action=discard chain=ospf-out comment="8. Discard send non 10.x and 172.x to OSPF neighbor" disabled=no invert-match=no
<br /># 
<br /># BGP instance
<br />/ routing bgp instance
<br />set default name="default" as=20224 router-id= \ 
<br />redistribute-connected=yes redistribute-static=yes redistribute-rip=yes \ 
<br />redistribute-ospf=yes redistribute-other-bgp=yes out-filter=ebgp-out \ 
<br />client-to-client-reflection=yes comment="" disabled=no
<br /># 
<br /># OSPF Routing
<br />/routing ospf set router-id= distribute-default=never redistribute-connected=no \ 
<br />redistribute-static=no redistribute-rip=no redistribute-bgp=as-type-1
<br /># 
<br />:log info "Unsolclic for 20224-CDVRadioClubST2 executed."
<br />/
<br />