# Generated for:
<br /># RouterOSv5.x
<br />:log info "Unsolclic for 2523-PdACaleta going to be executed."
<br /># 
<br /># Configuration for RouterOSv5.x
<br /># Device: 2523-PdACaleta
<br /># 
<br /># Methods to upload/execute this script:
<br /># 1.-As a script. Upload this output as a script either with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;a.Winbox (with Linux, wine required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;b.Terminal (telnet, ssh...)
<br /># &nbsp;&nbsp;&nbsp;Then execute the script with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/system script run script_name
<br /># 2.-Imported file:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Save this output to a file, then upload it to the router
<br /># &nbsp;&nbsp;&nbsp;&nbsp;using ftp using a name like "script_name.rsc".
<br /># &nbsp;&nbsp;&nbsp;&nbsp;(note that extension ".rsc" is required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Run the import file using the command:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/import script_name
<br /># 3.-Telnet cut&paste:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Open a terminal session, and cut&paste this output
<br /># &nbsp;&nbsp;&nbsp;&nbsp;directly on the terminal input.
<br /># 
<br /># Notes:
<br /># -routing-test package is required if you use RouterOSv2.9 , be sure you have it enabled at system packages
<br /># -wlans should be enabled manually, be sure to set the correct antenna (a or b)
<br /># &nbsp;&nbsp;according in how did you connect the cable to the miniPCI. Keep the
<br /># &nbsp;&nbsp;power at the minimum possible and check the channel.
<br /># -The script doesn't reset the router, you might have to do it manually
<br /># -You must have write access to the router
<br /># -MAC access (winbox, MAC telnet...) method is recommended
<br /># &nbsp;&nbsp;(the script reconfigures some IP addresses, so communication can be lost)
<br /># -No changes are done in user passwords on the device
<br /># -A Read Only guest account with no password will be created to allow guest access
<br /># &nbsp;&nbsp;to the router with no danger of damage but able to see the config.
<br /># -Be sure that all packages are activated.
<br /># -Don't run the script from telnet and being connected through an IP connection at
<br /># &nbsp;&nbsp;the wLan/Lan interface: This interface will be destroyed during the script.
<br /># 
<br />/ system identity set name=PdACaleta
<br /># 
<br /># DNS (client &#038; server cache) zone: 2429
<br />/ip dns set servers=10.155.2.34 allow-remote-requests=yes
<br />:delay 1
<br /># 
<br /># NTP (client &#038; server cache) zone: 2429
<br />/system ntp client set enabled=yes mode=unicast primary-ntp=10.155.2.34
<br />:delay 1
<br /># 
<br /># Bandwidth-server
<br />/ tool bandwidth-server set enabled=yes authenticate=no allocate-udp-ports-from=2000
<br /># 
<br /># SNMP
<br />/snmp set contact="guifi@guifi.net" enabled=yes location="PdACaleta"
<br /># 
<br /># Guest user
<br />/user
<br />:foreach i in [find group=read] do={/user remove $i;}
<br />add name="guest" group=read address=0.0.0.0/0 comment="" disabled=no
<br /># 
<br /># Graphing
<br />/tool graphing interface add
<br /># Remove current wLan/Lan bridge if exists
<br />:foreach i in [/interface bridge find name=wLan/Lan] \ 
<br />do={:foreach i in [/interface bridge port find bridge=wLan/Lan] \ 
<br />do={/interface bridge port remove $i; \ 
<br />:foreach i in [/ip address find interface=wLan/Lan] \ 
<br />do={/ip address remove $i;};};
<br />/interface bridge remove $i;}
<br /># Construct main bridge on wlan1 &#038; ether1
<br />/ interface bridge
<br />add name="wLan/Lan"
<br />/ interface bridge port
<br />add interface=ether1 bridge=wLan/Lan
<br />add interface=wlan1 bridge=wLan/Lan
<br />:delay 1
<br /># 
<br /># Radio#: 0 PdACaleta-PdACentre
<br />/interface wireless set wlan1 name="wlan1" \ 
<br />    radio-name="PdACaleta-PdACentre" mode=ap-bridge ssid="guifi.net-PdACaleta-PdACentre" \ 
<br />    band="5ghz-a" channel-width=20mhz \ 
<br />    frequency-mode=regulatory-domain country=spain antenna-gain=18 \ 
<br />    frequency=5680 \ 
<br />    dfs-mode=none \ 
<br />    antenna-mode=ant-a wds-mode=static wds-default-bridge=none wds-default-cost=100 \ 
<br />    wds-cost-range=50-150 wds-ignore-ssid=yes hide-ssid=no
<br />:delay 1
<br /># Type: wLan/Lan
<br />/ip address
<br />:foreach i in [find address="10.155.3.193/27"] do={remove $i}
<br />/ ip address add address=10.155.3.193/27 network=10.155.3.192 broadcast=10.155.3.223 interface=wLan/Lan disabled=no
<br />/ routing bgp network
<br />:foreach i in [/routing bgp network find network=10.155.3.192/27] do={/routing bgp network remove $i;}
<br />add network=10.155.3.192/27 disabled=no
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=wLan/Lan] do={/routing ospf interface remove $i;}
<br />add interface=wLan/Lan
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=10.155.3.192/27] do={/routing ospf network remove $i;}
<br />add network=10.155.3.192/27 area=backbone disabled=no
<br />:delay 1
<br /># 
<br /># DHCP
<br />:foreach i in [/ip pool find name=dhcp-wLan/Lan] do={/ip pool remove $i;}
<br />/ip pool add name=dhcp-wLan/Lan ranges=10.155.3.199-10.155.3.222
<br />:foreach i in [/ip dhcp-server find name=dhcp-wLan/Lan] do={/ip dhcp-server remove $i;}
<br />/ip dhcp-server add name=dhcp-wLan/Lan interface=wLan/Lan address-pool=dhcp-wLan/Lan disabled=no
<br />:foreach i in [/ip dhcp-server network find address="10.155.3.192/27"] do={/ip dhcp-server network remove $i;}
<br />/ip dhcp-server network add address=10.155.3.192/27 gateway=10.155.3.193 domain=guifi.net comment=dhcp-wLan/Lan
<br />/ip dhcp-server lease
<br />:foreach i in [find comment=""] do={remove $i;}
<br />:delay 1
<br /># 
<br />:delay 1
<br /># Type: wds/p2p
<br /># Remove all existing wds interfaces
<br />:foreach i in [/interface wireless wds find master-interface=wlan1] \ 
<br />do={:foreach n in [/interface wireless wds get $i name] \ 
<br />do={:foreach inum in [/ip address find interface=$n] \ 
<br />do={/ip address remove $inum;};}; \ 
<br />/interface wireless wds remove $i;}
<br />/ interface wireless wds
<br />add name="wds_PdACentre" master-interface=wlan1 wds-address=00:C0:CA:1D:89:32 disabled=no
<br />/ ip address add address=172.25.1.41/30 network=172.25.1.40 broadcast=172.25.1.43 interface=wds_PdACentre disabled=no comment="wds_PdACentre"
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=wds_PdACentre] do={/routing ospf interface remove $i;}
<br />add interface=wds_PdACentre
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=172.25.1.40/30] do={/routing ospf network remove $i;}
<br />add network=172.25.1.40/30 area=backbone disabled=no
<br />/ routing bgp peer
<br />:foreach i in [find name=PdACentre] do={/routing bgp peer remove $i;}
<br />add name="PdACentre" instance=default remote-address=172.25.1.42 remote-as=10052 \ 
<br />multihop=no route-reflect=no ttl=default in-filter=ebgp-in out-filter=ebgp-out disabled=yes
<br /># 
<br />:delay 1
<br /># 
<br /># Radio#: 1 PdACaleta-PdANord
<br />/interface wireless set wlan2 name="wlan2" \ 
<br />    radio-name="PdACaleta-PdANord" mode=ap-bridge ssid="guifi.net-PdACaleta-PdANord" \ 
<br />    band="5ghz-a" channel-width=20mhz \ 
<br />    frequency-mode=regulatory-domain country=spain antenna-gain=18 \ 
<br />    frequency=5620 \ 
<br />    dfs-mode=none \ 
<br />    antenna-mode=ant-a wds-mode=static wds-default-bridge=none wds-default-cost=100 \ 
<br />    wds-cost-range=50-150 wds-ignore-ssid=yes hide-ssid=no
<br />:delay 1
<br /># Type: wds/p2p
<br /># Remove all existing wds interfaces
<br />:foreach i in [/interface wireless wds find master-interface=wlan2] \ 
<br />do={:foreach n in [/interface wireless wds get $i name] \ 
<br />do={:foreach inum in [/ip address find interface=$n] \ 
<br />do={/ip address remove $inum;};}; \ 
<br />/interface wireless wds remove $i;}
<br />/ interface wireless wds
<br />add name="wds_PdANord" master-interface=wlan2 wds-address=00:C0:CA:1D:89:37 disabled=no
<br />/ ip address add address=172.25.8.242/30 network=172.25.8.240 broadcast=172.25.8.243 interface=wds_PdANord disabled=no comment="wds_PdANord"
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=wds_PdANord] do={/routing ospf interface remove $i;}
<br />add interface=wds_PdANord
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=172.25.8.240/30] do={/routing ospf network remove $i;}
<br />add network=172.25.8.240/30 area=backbone disabled=no
<br />/ routing bgp peer
<br />:foreach i in [find name=PdANord] do={/routing bgp peer remove $i;}
<br />add name="PdANord" instance=default remote-address=172.25.8.241 remote-as=10108 \ 
<br />multihop=no route-reflect=no ttl=default in-filter=ebgp-in out-filter=ebgp-out disabled=yes
<br /># 
<br />:delay 1
<br /># 
<br /># Routed device
<br /># 
<br /># Other cable connections
<br /># 
<br /># Internal addresses NAT
<br />:foreach i in [/ip firewall nat find src-address="172.16.0.0/12"] do={/ip firewall nat remove $i;}
<br />:foreach i in [/ip firewall nat find src-address="192.168.0.0/16"] do={/ip firewall nat remove $i;}
<br />/ip firewall nat
<br />add chain=srcnat src-address="192.168.0.0/16" dst-address=!192.168.0.0/16 action=src-nat to-addresses=10.155.3.193 comment="" disabled=no
<br />add chain=srcnat src-address="172.16.0.0/12" dst-address=!172.16.0.0/12 protocol=!ospf action=src-nat to-addresses=10.155.3.193 comment="" disabled=no
<br /># 
<br /># BGP Routing
<br /># BGP & OSPF Filters
<br />:foreach i in [/routing filter find chain=ospf-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ospf-out] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ebgp-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ebgp-out] do={/routing filter remove $i;}
<br />/ routing filter
<br />add action=discard chain=ebgp-in comment="1. Discard insert non 10.x routes from BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=!8-32
<br />add action=discard chain=ebgp-out comment="2. Discard send non 10.x routes to BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=!8-32
<br />add action=accept chain=ospf-in comment="3. Accept insert 10.x routes from OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
<br />add action=accept chain=ospf-in comment="4. Accept insert 172.x routes from OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
<br />add action=discard chain=ospf-in comment="5. Discard insert non 10.x and 172.x from OSPF neighbor" disabled=no invert-match=no
<br />add action=accept chain=ospf-out comment="6. Allow send 10.x routes to OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
<br />add action=accept chain=ospf-out comment="7. Allow send 172.x routes to OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
<br />add action=discard chain=ospf-out comment="8. Discard send non 10.x and 172.x to OSPF neighbor" disabled=no invert-match=no
<br /># 
<br /># BGP instance
<br />/ routing bgp instance
<br />set default name="default" as=2523 router-id=10.155.3.193 \ 
<br />redistribute-connected=no redistribute-static=no redistribute-rip=no \ 
<br />redistribute-ospf=yes redistribute-other-bgp=yes out-filter=ebgp-out \ 
<br />client-to-client-reflection=yes comment="" disabled=no
<br /># 
<br /># OSPF Routing
<br />/routing ospf instance set default name=default router-id=10.155.3.193 comment="" disabled=no distribute-default=never \ 
<br />redistribute-bgp=as-type-1 redistribute-connected=no redistribute-other-ospf=no redistribute-rip=no redistribute-static=no in-filter=ospf-in out-filter=ospf-out
<br /># 
<br />:log info "Unsolclic for 2523-PdACaleta executed."
<br />/
<br />