# Generated for:
<br /># RouterOSv3.x
<br />:log info "Unsolclic for 3628-SevaSetupST2 going to be executed."
<br /># 
<br /># Configuration for RouterOSv3.x
<br /># Device: 3628-SevaSetupST2
<br /># 
<br /># Methods to upload/execute this script:
<br /># 1.-As a script. Upload this output as a script either with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;a.Winbox (with Linux, wine required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;b.Terminal (telnet, ssh...)
<br /># &nbsp;&nbsp;&nbsp;Then execute the script with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/system script run script_name
<br /># 2.-Imported file:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Save this output to a file, then upload it to the router
<br /># &nbsp;&nbsp;&nbsp;&nbsp;using ftp using a name like "script_name.rsc".
<br /># &nbsp;&nbsp;&nbsp;&nbsp;(note that extension ".rsc" is required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Run the import file using the command:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/import script_name
<br /># 3.-Telnet cut&paste:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Open a terminal session, and cut&paste this output
<br /># &nbsp;&nbsp;&nbsp;&nbsp;directly on the terminal input.
<br /># 
<br /># Notes:
<br /># -routing-test package is required if you use RouterOSv2.9 , be sure you have it enabled at system packages
<br /># -wlans should be enabled manually, be sure to set the correct antenna (a or b)
<br /># &nbsp;&nbsp;according in how did you connect the cable to the miniPCI. Keep the
<br /># &nbsp;&nbsp;power at the minimum possible and check the channel.
<br /># -The script doesn't reset the router, you might have to do it manually
<br /># -You must have write access to the router
<br /># -MAC access (winbox, MAC telnet...) method is recommended
<br /># &nbsp;&nbsp;(the script reconfigures some IP addresses, so communication can be lost)
<br /># -No changes are done in user passwords on the device
<br /># -A Read Only guest account with no password will be created to allow guest access
<br /># &nbsp;&nbsp;to the router with no danger of damage but able to see the config.
<br /># -Be sure that all packages are activated.
<br /># -Don't run the script from telnet and being connected through an IP connection at
<br /># &nbsp;&nbsp;the wLan/Lan interface: This interface will be destroyed during the script.
<br /># 
<br />/ system identity set name=SevaSetupST2
<br /># 
<br /># DNS (client &#038; server cache) zone: 2467
<br />/ip dns set primary-dns=10.138.103.2 secondary-dns=10.138.38.5 allow-remote-requests=yes
<br />:delay 1
<br /># 
<br /># NTP (client &#038; server cache) zone: 2467
<br />/system ntp client set enabled=yes mode=unicast primary-ntp=10.138.103.2 secondary-ntp=10.138.38.5
<br />:delay 1
<br /># 
<br /># Bandwidth-server
<br />/ tool bandwidth-server set enabled=yes authenticate=no allocate-udp-ports-from=2000
<br /># 
<br /># SNMP
<br />/snmp set contact="guifi@guifi.net" enabled=yes location="SevaSetup"
<br /># 
<br /># Guest user
<br />/user
<br />:foreach i in [find group=read] do={/user remove $i;}
<br />add name="guest" group=read address=0.0.0.0/0 comment="" disabled=no
<br /># 
<br /># Graphing
<br />/tool graphing interface add
<br /># Remove current wLan/Lan bridge if exists
<br />:foreach i in [/interface bridge find name=wLan/Lan] \ 
<br />do={:foreach i in [/interface bridge port find bridge=wLan/Lan] \ 
<br />do={/interface bridge port remove $i; \ 
<br />:foreach i in [/ip address find interface=wLan/Lan] \ 
<br />do={/ip address remove $i;};};
<br />/interface bridge remove $i;}
<br /># Construct main bridge on wlan1 &#038; ether1
<br />/ interface bridge
<br />add name="wLan/Lan"
<br />/ interface bridge port
<br />add interface=ether1 bridge=wLan/Lan
<br />add interface=wlan1 bridge=wLan/Lan
<br />:delay 1
<br /># 
<br /># Radio#: 0 SevaAP
<br />/interface wireless set wlan1 name="wlan1" \ 
<br />    radio-name="SevaAP" mode=ap-bridge ssid="guifi.net-SevaAP" \ 
<br />    band="2.4ghz-b"  \ 
<br />    frequency-mode=regulatory-domain country=spain antenna-gain=8 \ 
<br />    frequency=2427 \ 
<br />    dfs-mode=none \ 
<br />    wds-mode=static wds-default-bridge=none wds-default-cost=100 \ 
<br />    wds-cost-range=50-150 wds-ignore-ssid=yes hide-ssid=no
<br />:delay 1
<br /># Type: wLan/Lan
<br />/ip address
<br />:foreach i in [find address="10.138.17.65/27"] do={remove $i}
<br />/ ip address add address=10.138.17.65/27 network=10.138.17.64 broadcast=10.138.17.95 interface=wLan/Lan disabled=no
<br />/ routing bgp network
<br />:foreach i in [/routing bgp network find network=10.138.17.64/27] do={/routing bgp network remove $i;}
<br />add network=10.138.17.64/27 disabled=no
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=wLan/Lan] do={/routing ospf interface remove $i;}
<br />add interface=wLan/Lan
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=10.138.17.64/27] do={/routing ospf network remove $i;}
<br />add network=10.138.17.64/27 area=backbone disabled=no
<br />:delay 1
<br /># 
<br /># DHCP
<br />:foreach i in [/ip pool find name=dhcp-wLan/Lan] do={/ip pool remove $i;}
<br />/ip pool add name=dhcp-wLan/Lan ranges=10.138.17.71-10.138.17.94
<br />:foreach i in [/ip dhcp-server find name=dhcp-wLan/Lan] do={/ip dhcp-server remove $i;}
<br />/ip dhcp-server add name=dhcp-wLan/Lan interface=wLan/Lan address-pool=dhcp-wLan/Lan disabled=no
<br />:foreach i in [/ip dhcp-server network find address="10.138.17.64/27"] do={/ip dhcp-server network remove $i;}
<br />/ip dhcp-server network add address=10.138.17.64/27 gateway=10.138.17.65 domain=guifi.net comment=dhcp-wLan/Lan
<br />/ip dhcp-server lease
<br />:foreach i in [find comment=""] do={remove $i;}
<br />:delay 1
<br />add address=10.138.17.66 mac-address=00:18:F8:E5:FA:CE client-id=SevaEsquisAP01 server=dhcp-wLan/Lan
<br />add address=10.138.17.67 mac-address=00:16:B6:39:8F:56 client-id=SevaIgnasi server=dhcp-wLan/Lan
<br />add address=10.138.17.68 mac-address=00:15:6D:AD:ED:66 client-id=SevaBoteyRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.69 mac-address=00:00:00:00:00:01 client-id=SevaEnricRd2 server=dhcp-wLan/Lan
<br />add address=10.138.17.70 mac-address=00:16:01:16:88:0C client-id=SevaDavidBFRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.71 mac-address=00:16:01:84:69:F8 client-id=SevaSilviaiPajeRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.72 mac-address=00:16:01:8C:83:F0 client-id=SevaJMolistRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.73 mac-address=00:0C:42:C0:08:0E client-id=SevaHotelSevaRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.74 mac-address=ff:ff:ff:ff:ff:ff client-id=SevaPereCunillRadio2 server=dhcp-wLan/Lan
<br />add address=10.138.17.75 mac-address=00:1A:70:4F:38:A5 client-id=SevaDCunillRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.76 mac-address=00:0C:42:05:A9:F4 client-id=SevaRustuRadio server=dhcp-wLan/Lan
<br />add address=10.138.17.77 mac-address=00:16:B6:39:7E:BB client-id=sevajuditRadio2 server=dhcp-wLan/Lan
<br />add address=10.138.17.78 mac-address=00:19:E0:67:1B:F7 client-id=SevaRafelRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.79 mac-address=00:19:E0:67:67:86 client-id=SevaMontesinosRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.80 mac-address=00:0C:42:05:AA:01 client-id=SevaTerratsRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.81 mac-address=00:1D:0F:AE:CB:8B client-id=SevaBlancafortRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.82 mac-address=00:19:E0:67:45:13 client-id=SevaJParesRadio1 server=dhcp-wLan/Lan
<br />add address=10.138.17.83 mac-address=00:27:22:4C:2B:42 client-id=SevaEsteveARd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.84 mac-address=00:15:6D:4E:AE:EF client-id=SevaJAlzinaRd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.85 mac-address=00:15:6D:A8:C2:55 client-id=SevaMayaRd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.86 mac-address=00:15:6D:E8:CB:47 client-id=SEVAPintoRd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.87 mac-address=00:15:6D:D5:F6:BF client-id=SevaVilarrasaTRd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.88 mac-address=00:15:6D:ED:B4:71 client-id=SevaCanadellRd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.89 mac-address=00:15:6D:DA:1F:14 client-id=SevaCasanovaRd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.90 mac-address=00:18:8D:E8:41:42 client-id=SevaCFernandezRd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.91 mac-address=00:15:6D:60:62:9D client-id=SevaGiselaRd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.92 mac-address=00:0C:42:B8:A9:E8 client-id=SevaMarc2Rd1 server=dhcp-wLan/Lan
<br />add address=10.138.17.93 mac-address=00:00:00:00:00:01 client-id=SevaHCrivilleRd2 server=dhcp-wLan/Lan
<br />add address=10.138.17.94 mac-address=00:15:6D:72:11:00 client-id=SevaEulaliaSolerRd1 server=dhcp-wLan/Lan
<br /># 
<br />:delay 1
<br /># Type: wds/p2p
<br /># Remove all existing wds interfaces
<br />:foreach i in [/interface wireless wds find master-interface=wlan1] \ 
<br />do={:foreach n in [/interface wireless wds get $i name] \ 
<br />do={:foreach inum in [/ip address find interface=$n] \ 
<br />do={/ip address remove $inum;};}; \ 
<br />/interface wireless wds remove $i;}
<br /># 
<br />:delay 1
<br /># 
<br /># Radio#: 1 SevaSetup-CanBasses
<br />/interface wireless set wlan2 name="wlan2" \ 
<br />    radio-name="SevaSetup-CanBasses" mode=ap-bridge ssid="guifi.net-SevaSetup-CanBasses" \ 
<br />    band="5ghz"  \ 
<br />    frequency-mode=regulatory-domain country=spain antenna-gain=21 \ 
<br />    frequency=5700 \ 
<br />    dfs-mode=none \ 
<br />    wds-mode=static wds-default-bridge=none wds-default-cost=100 \ 
<br />    wds-cost-range=50-150 wds-ignore-ssid=yes hide-ssid=no
<br />:delay 1
<br /># Type: wds/p2p
<br /># Remove all existing wds interfaces
<br />:foreach i in [/interface wireless wds find master-interface=wlan2] \ 
<br />do={:foreach n in [/interface wireless wds get $i name] \ 
<br />do={:foreach inum in [/ip address find interface=$n] \ 
<br />do={/ip address remove $inum;};}; \ 
<br />/interface wireless wds remove $i;}
<br />/ interface wireless wds
<br />add name="wds_SevaCBST" master-interface=wlan2 wds-address=00:0C:42:18:A4:8F disabled=no
<br />/ ip address add address=172.25.7.130/30 network=172.25.7.128 broadcast=172.25.7.131 interface=wds_SevaCBST disabled=no comment="wds_SevaCBST"
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=wds_SevaCBST] do={/routing ospf interface remove $i;}
<br />add interface=wds_SevaCBST
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=172.25.7.128/30] do={/routing ospf network remove $i;}
<br />add network=172.25.7.128/30 area=backbone disabled=no
<br />/ routing bgp peer
<br />:foreach i in [find name=SevaCBST] do={/routing bgp peer remove $i;}
<br />add name="SevaCBST" instance=default remote-address=172.25.7.129 remote-as=6925 \ 
<br />multihop=no route-reflect=no ttl=default in-filter=ebgp-in out-filter=ebgp-out disabled=yes
<br /># 
<br />:delay 1
<br /># 
<br /># Radio#: 2 SevaSetup-TRASTOS
<br />/interface wireless set wlan3 name="wlan3" \ 
<br />    radio-name="SevaSetup-TRASTOS" mode=ap-bridge ssid="guifi.net-SevaSetup-TRASTOS" \ 
<br />    band="5ghz"  \ 
<br />    frequency-mode=regulatory-domain country=spain antenna-gain=29 \ 
<br />    dfs-mode=radar-detect \ 
<br />    antenna-mode=ant-a wds-mode=static wds-default-bridge=none wds-default-cost=100 \ 
<br />    wds-cost-range=50-150 wds-ignore-ssid=yes hide-ssid=no
<br />:delay 1
<br /># Type: wds/p2p
<br /># Remove all existing wds interfaces
<br />:foreach i in [/interface wireless wds find master-interface=wlan3] \ 
<br />do={:foreach n in [/interface wireless wds get $i name] \ 
<br />do={:foreach inum in [/ip address find interface=$n] \ 
<br />do={/ip address remove $inum;};}; \ 
<br />/interface wireless wds remove $i;}
<br /># 
<br />:delay 1
<br /># 
<br /># Routed device
<br /># 
<br /># Other cable connections
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=ether1] do={/routing ospf interface remove $i;}
<br />add interface=ether1
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=10.138.17.0/27] do={/routing ospf network remove $i;}
<br />add network=10.138.17.0/27 area=backbone disabled=no
<br />/ routing bgp peer
<br />:foreach i in [find name=SevaSetupST1] do={/routing bgp peer remove $i;}
<br />add name="SevaSetupST1" instance=default remote-address=10.138.17.1 remote-as=2511 \ 
<br />multihop=no route-reflect=no ttl=default in-filter=ebgp-in out-filter=ebgp-out disabled=yes
<br />:foreach i in [/ip address find address="10.138.17.3/27"] do={/ip address remove $i;}
<br />:delay 1
<br />/ ip address add address=10.138.17.3/27 network=10.138.17.0 broadcast=10.138.17.31 interface=ether1 disabled=no comment="SevaSetupST1"
<br /># 
<br /># Internal addresses NAT
<br />:foreach i in [/ip firewall nat find src-address="172.16.0.0/12"] do={/ip firewall nat remove $i;}
<br />:foreach i in [/ip firewall nat find src-address="192.168.0.0/16"] do={/ip firewall nat remove $i;}
<br />/ip firewall nat
<br />add chain=srcnat src-address="192.168.0.0/16" dst-address=!192.168.0.0/16 action=src-nat to-addresses=10.138.17.65 comment="" disabled=no
<br />add chain=srcnat src-address="172.16.0.0/12" dst-address=!172.16.0.0/12 protocol=!ospf action=src-nat to-addresses=10.138.17.65 comment="" disabled=no
<br /># 
<br /># BGP Routing
<br /># BGP & OSPF Filters
<br />:foreach i in [/routing filter find chain=ospf-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ospf-out] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ebgp-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ebgp-out] do={/routing filter remove $i;}
<br />/ routing filter
<br />add action=discard chain=ebgp-in comment="1. Discard insert non 10.x routes from BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=!8-32
<br />add action=discard chain=ebgp-out comment="2. Discard send non 10.x routes to BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=!8-32
<br />add action=accept chain=ospf-in comment="3. Accept insert 10.x routes from OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
<br />add action=accept chain=ospf-in comment="4. Accept insert 172.x routes from OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
<br />add action=discard chain=ospf-in comment="5. Discard insert non 10.x and 172.x from OSPF neighbor" disabled=no invert-match=no
<br />add action=accept chain=ospf-out comment="6. Allow send 10.x routes to OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
<br />add action=accept chain=ospf-out comment="7. Allow send 172.x routes to OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
<br />add action=discard chain=ospf-out comment="8. Discard send non 10.x and 172.x to OSPF neighbor" disabled=no invert-match=no
<br /># 
<br /># BGP instance
<br />/ routing bgp instance
<br />set default name="default" as=3628 router-id=10.138.17.65 \ 
<br />redistribute-connected=yes redistribute-static=yes redistribute-rip=yes \ 
<br />redistribute-ospf=yes redistribute-other-bgp=yes out-filter=ebgp-out \ 
<br />client-to-client-reflection=yes comment="" disabled=no
<br /># 
<br /># OSPF Routing
<br />/routing ospf set router-id=10.138.17.65 distribute-default=never redistribute-connected=no \ 
<br />redistribute-static=no redistribute-rip=no redistribute-bgp=as-type-1
<br /># 
<br />:log info "Unsolclic for 3628-SevaSetupST2 executed."
<br />/
<br />