# Generated for:
<br /># RouterOSv4.7+
<br />:log info "Unsolclic for 6442-SBGLaSerraFDB2 going to be executed."
<br /># 
<br /># Configuration for RouterOS 4.7 and newer 4.x
<br /># Device: 6442-SBGLaSerraFDB2
<br /># 
<br /># Methods to upload/execute this script:
<br /># 1.-As a script. Upload this output as a script either with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;a.Winbox (with Linux, wine required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;b.Terminal (telnet, ssh...)
<br /># &nbsp;&nbsp;&nbsp;Then execute the script with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/system script run script_name
<br /># 2.-Imported file:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Save this output to a file, then upload it to the router
<br /># &nbsp;&nbsp;&nbsp;&nbsp;using ftp using a name like "script_name.rsc".
<br /># &nbsp;&nbsp;&nbsp;&nbsp;(note that extension ".rsc" is required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Run the import file using the command:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/import script_name
<br /># 3.-Telnet cut&paste:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Open a terminal session, and cut&paste this output
<br /># &nbsp;&nbsp;&nbsp;&nbsp;directly on the terminal input.
<br /># 
<br /># Notes:
<br /># -routing-test package is required if you use RouterOSv2.9 , be sure you have it enabled at system packages
<br /># -wlans should be enabled manually, be sure to set the correct antenna (a or b)
<br /># &nbsp;&nbsp;according in how did you connect the cable to the miniPCI. Keep the
<br /># &nbsp;&nbsp;power at the minimum possible and check the channel.
<br /># -The script doesn't reset the router, you might have to do it manually
<br /># -You must have write access to the router
<br /># -MAC access (winbox, MAC telnet...) method is recommended
<br /># &nbsp;&nbsp;(the script reconfigures some IP addresses, so communication can be lost)
<br /># -No changes are done in user passwords on the device
<br /># -A Read Only guest account with no password will be created to allow guest access
<br /># &nbsp;&nbsp;to the router with no danger of damage but able to see the config.
<br /># -Be sure that all packages are activated.
<br /># -Don't run the script from telnet and being connected through an IP connection at
<br /># &nbsp;&nbsp;the wLan/Lan interface: This interface will be destroyed during the script.
<br /># 
<br />/ system identity set name=SBGLaSerraFDB2
<br /># 
<br /># DNS (client &#038; server cache) zone: 2462
<br />/ip dns set servers=10.138.42.3,10.138.120.66 allow-remote-requests=yes
<br />:delay 1
<br /># 
<br /># NTP (client &#038; server cache) zone: 2462
<br />/system ntp client set enabled=yes mode=unicast primary-ntp=10.138.0.2 secondary-ntp=10.138.57.2
<br />:delay 1
<br /># 
<br /># Bandwidth-server
<br />/ tool bandwidth-server set enabled=yes authenticate=no allocate-udp-ports-from=2000
<br /># 
<br /># SNMP
<br />/snmp set contact="guifi@guifi.net" enabled=yes location="SBGSerra"
<br /># 
<br /># Guest user
<br />/user
<br />:foreach i in [find group=read] do={/user remove $i;}
<br />add name="guest" group=read address=0.0.0.0/0 comment="" disabled=no
<br /># 
<br /># Graphing
<br />/tool graphing interface add
<br /># Remove current wLan/Lan bridge if exists
<br />:foreach i in [/interface bridge find name=wLan/Lan] \ 
<br />do={:foreach i in [/interface bridge port find bridge=wLan/Lan] \ 
<br />do={/interface bridge port remove $i; \ 
<br />:foreach i in [/ip address find interface=wLan/Lan] \ 
<br />do={/ip address remove $i;};};
<br />/interface bridge remove $i;}
<br /># Construct main bridge on wlan1 &#038; ether1
<br />/ interface bridge
<br />add name="wLan/Lan"
<br />/ interface bridge port
<br />add interface=ether1 bridge=wLan/Lan
<br />add interface=wlan1 bridge=wLan/Lan
<br />:delay 1
<br /># 
<br /># Radio#: 0 SBGLaSerra-FDBSBG-N
<br />/interface wireless set wlan1 name="wlan1" \ 
<br />    radio-name="SBGLaSerra-FDBSBG-N" mode=ap-bridge ssid="guifi.net-SBGLaSerra-FDBSBG-N" \ 
<br />    band="5ghz"  \ 
<br />    frequency-mode=regulatory-domain country=spain antenna-gain=21 \ 
<br />    frequency=5540 \ 
<br />    dfs-mode=none \ 
<br />    wds-mode=static wds-default-bridge=none wds-default-cost=100 \ 
<br />    wds-cost-range=50-150 wds-ignore-ssid=yes hide-ssid=no
<br />:delay 1
<br /># Type: wLan/Lan
<br />/ip address
<br />:foreach i in [find address="10.138.149.1/27"] do={remove $i}
<br />/ ip address add address=10.138.149.1/27 network=10.138.149.0 broadcast=10.138.149.31 interface=wLan/Lan disabled=no
<br />/ routing bgp network
<br />:foreach i in [/routing bgp network find network=10.138.149.0/27] do={/routing bgp network remove $i;}
<br />add network=10.138.149.0/27 disabled=no
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=wLan/Lan] do={/routing ospf interface remove $i;}
<br />add interface=wLan/Lan
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=10.138.149.0/27] do={/routing ospf network remove $i;}
<br />add network=10.138.149.0/27 area=backbone disabled=no
<br />:delay 1
<br /># 
<br /># DHCP
<br />:foreach i in [/ip pool find name=dhcp-wLan/Lan] do={/ip pool remove $i;}
<br />/ip pool add name=dhcp-wLan/Lan ranges=10.138.149.7-10.138.149.30
<br />:foreach i in [/ip dhcp-server find name=dhcp-wLan/Lan] do={/ip dhcp-server remove $i;}
<br />/ip dhcp-server add name=dhcp-wLan/Lan interface=wLan/Lan address-pool=dhcp-wLan/Lan disabled=no
<br />:foreach i in [/ip dhcp-server network find address="10.138.149.0/27"] do={/ip dhcp-server network remove $i;}
<br />/ip dhcp-server network add address=10.138.149.0/27 gateway=10.138.149.1 domain=guifi.net comment=dhcp-wLan/Lan
<br />/ip dhcp-server lease
<br />:foreach i in [find comment=""] do={remove $i;}
<br />:delay 1
<br /># 
<br />:delay 1
<br /># Type: wds/p2p
<br /># Remove all existing wds interfaces
<br />:foreach i in [/interface wireless wds find master-interface=wlan1] \ 
<br />do={:foreach n in [/interface wireless wds get $i name] \ 
<br />do={:foreach inum in [/ip address find interface=$n] \ 
<br />do={/ip address remove $inum;};}; \ 
<br />/interface wireless wds remove $i;}
<br />/ interface wireless wds
<br />add name="wds_SBGFDBNau" master-interface=wlan1 wds-address=00:0C:42:62:D8:E0 disabled=no
<br />/ ip address add address=172.25.1.25/30 network=172.25.1.24 broadcast=172.25.1.27 interface=wds_SBGFDBNau disabled=no comment="wds_SBGFDBNau"
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=wds_SBGFDBNau] do={/routing ospf interface remove $i;}
<br />add interface=wds_SBGFDBNau
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=172.25.1.24/30] do={/routing ospf network remove $i;}
<br />add network=172.25.1.24/30 area=backbone disabled=no
<br />/ routing bgp peer
<br />:foreach i in [find name=SBGFDBNau] do={/routing bgp peer remove $i;}
<br />add name="SBGFDBNau" instance=default remote-address=172.25.1.26 remote-as=1936 \ 
<br />multihop=no route-reflect=no ttl=default in-filter=ebgp-in out-filter=ebgp-out disabled=yes
<br /># 
<br />:delay 1
<br /># 
<br /># Routed device
<br /># 
<br /># Other cable connections
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=ether1] do={/routing ospf interface remove $i;}
<br />add interface=ether1
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=10.138.148.0/27] do={/routing ospf network remove $i;}
<br />add network=10.138.148.0/27 area=backbone disabled=no
<br />/ routing bgp peer
<br />:foreach i in [find name=SBGLaSerraNord] do={/routing bgp peer remove $i;}
<br />add name="SBGLaSerraNord" instance=default remote-address=10.138.148.1 remote-as=1904 \ 
<br />multihop=no route-reflect=no ttl=default in-filter=ebgp-in out-filter=ebgp-out disabled=yes
<br />:foreach i in [/ip address find address="10.138.148.4/27"] do={/ip address remove $i;}
<br />:delay 1
<br />/ ip address add address=10.138.148.4/27 network=10.138.148.0 broadcast=10.138.148.31 interface=ether1 disabled=no comment="SBGLaSerraNord"
<br />/ routing ospf interface
<br />:foreach i in [/routing ospf interface find interface=ether3] do={/routing ospf interface remove $i;}
<br />add interface=ether3
<br />/ routing ospf network
<br />:foreach i in [/routing ospf network find network=172.25.7.32/30] do={/routing ospf network remove $i;}
<br />add network=172.25.7.32/30 area=backbone disabled=no
<br />/ routing bgp peer
<br />:foreach i in [find name=SBGLaSerraST] do={/routing bgp peer remove $i;}
<br />add name="SBGLaSerraST" instance=default remote-address=172.25.7.33 remote-as=28469 \ 
<br />multihop=no route-reflect=no ttl=default in-filter=ebgp-in out-filter=ebgp-out disabled=yes
<br />:foreach i in [/ip address find address="172.25.7.34/30"] do={/ip address remove $i;}
<br />:delay 1
<br />/ ip address add address=172.25.7.34/30 network=172.25.7.32 broadcast=172.25.7.35 interface=ether3 disabled=no comment="SBGLaSerraST"
<br /># 
<br /># Internal addresses NAT
<br />:foreach i in [/ip firewall nat find src-address="172.16.0.0/12"] do={/ip firewall nat remove $i;}
<br />:foreach i in [/ip firewall nat find src-address="192.168.0.0/16"] do={/ip firewall nat remove $i;}
<br />/ip firewall nat
<br />add chain=srcnat src-address="192.168.0.0/16" dst-address=!192.168.0.0/16 action=src-nat to-addresses=10.138.149.1 comment="" disabled=no
<br />add chain=srcnat src-address="172.16.0.0/12" dst-address=!172.16.0.0/12 protocol=!ospf action=src-nat to-addresses=10.138.149.1 comment="" disabled=no
<br /># 
<br /># BGP Routing
<br /># BGP & OSPF Filters
<br />:foreach i in [/routing filter find chain=ospf-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ospf-out] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ebgp-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ebgp-out] do={/routing filter remove $i;}
<br />/ routing filter
<br />add action=discard chain=ebgp-in comment="1. Discard insert non 10.x routes from BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=!8-32
<br />add action=discard chain=ebgp-out comment="2. Discard send non 10.x routes to BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=!8-32
<br />add action=accept chain=ospf-in comment="3. Accept insert 10.x routes from OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
<br />add action=accept chain=ospf-in comment="4. Accept insert 172.x routes from OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
<br />add action=discard chain=ospf-in comment="5. Discard insert non 10.x and 172.x from OSPF neighbor" disabled=no invert-match=no
<br />add action=accept chain=ospf-out comment="6. Allow send 10.x routes to OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
<br />add action=accept chain=ospf-out comment="7. Allow send 172.x routes to OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
<br />add action=discard chain=ospf-out comment="8. Discard send non 10.x and 172.x to OSPF neighbor" disabled=no invert-match=no
<br /># 
<br /># BGP instance
<br />/ routing bgp instance
<br />set default name="default" as=6442 router-id=10.138.149.1 \ 
<br />redistribute-connected=no redistribute-static=no redistribute-rip=no \ 
<br />redistribute-ospf=yes redistribute-other-bgp=yes out-filter=ebgp-out \ 
<br />client-to-client-reflection=yes comment="" disabled=no
<br /># 
<br /># OSPF Routing
<br />/routing ospf instance set default name=default router-id=10.138.149.1 comment="" disabled=no distribute-default=never \ 
<br />redistribute-bgp=as-type-1 redistribute-connected=no redistribute-other-ospf=no redistribute-rip=no redistribute-static=no in-filter=ospf-in out-filter=ospf-out
<br /># 
<br />:log info "Unsolclic for 6442-SBGLaSerraFDB2 executed."
<br />/
<br />