|
|
Line 1: |
Line 1: |
| {{Versions| v5, v6+}} | | {{Versions| v5, v6+}} |
|
| |
|
| == List of Default Configs == | | == Overview == |
|
| |
|
| ===Integrated Indoors===
| | All RouterBOARDs from factory come with default configuration. There are several different configurations depending on board type: |
| <table width="1180" >
| | * CPE Router; |
| <tr class="styled_table">
| | * LTE CPE AP router; |
| <th width="100"></th>
| | * AP Router (single or dual band); |
| <th width="40">Wan port</th>
| | * PTP Bridge (AP or CPE); |
| <th width="200">Lan port</th>
| | * WISP Bridge (AP in ap_bridge mode); |
| <th width="100">Wireless mode</th>
| | * Switch; |
| <th width="40">ht chain</th>
| | * CAP; |
| <th width="80">ht extension</th>
| | * IP Only. |
| <th width="90">dhcp-server</th>
| |
| <th width="90">dhcp-client</th>
| |
| <th width="100">Firewall</th>
| |
| <th width="80">NAT</th>
| |
| <th width="80">Default IP</th>
| |
| <th>Mac Server</th>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB750 RB750G</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>Switched ether2-ether5</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB751</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>Switched ether2-ether5, bridged wlan1 with switch</td>
| |
| <td align=center>AP b/g/n 2412MHz</td>
| |
| <td align=center> 0,1 </td>
| |
| <td align=center>above-control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
|
| |
|
| <tr class="styled_table">
| | You can run command /system default-configuration print to see exact applied default configuration commands. |
| <td><b>RB951</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>Switched ether2-ether5, bridged wlan1 with switch</td>
| |
| <td align=center>AP b/g/n 2412MHz</td>
| |
| <td align=center> 0 </td>
| |
| <td align=center>above-control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
|
| |
|
| <tr class="styled_table">
| |
| <td><b>RB1100 AH/AHx2</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on ether1</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB1200</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on ether1</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>CCR series</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on ether1</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB2011</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>two switch groups bridged (ether2-ether10, wlan1 if present)</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on ether1</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>CRS</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>all ports switched</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on ether1</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>CRS with wireless</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>all other ports switched and bridged with wireless</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on ether1</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>mAP</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>bridged wireless</td>
| |
| <td align=center>station b/g/n 2.4GHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| </table>
| |
|
| |
|
| ===Integrated Outdoors=== | | == CPE Router == |
| <table width="1180" >
| |
| <tr class="styled_table">
| |
| <th width="100"></th>
| |
| <th width="40">Wan port</th>
| |
| <th width="200">Lan port</th>
| |
| <th width="100">Wireless mode</th>
| |
| <th width="40">ht chain</th>
| |
| <th width="80">ht extension</th>
| |
| <th width="90">dhcp-server</th>
| |
| <th width="90">dhcp-client</th>
| |
| <th width="100">Firewall</th>
| |
| <th width="80">NAT</th>
| |
| <th width="80">Default IP</th>
| |
| <th>Mac Server</th>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>Groove 2Hn</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station b/g/n 2.4GHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>Groove 5Hn</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station a/n 5GHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>Groove A-5Hn</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>bridged wlan1,ether1</td>
| |
| <td align=center>AP a/n 5300MHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>Metal 5</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station a/n 5GHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>Metal 2</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station b/g/n 2GHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>SXT 5xx,<br />SXT G-5xx</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station 5GHz-a/n (5ghz-a/n/ac)</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>OmniTik</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>Switched ether2-ether5, bridged wlan1 with switch</td>
| |
| <td align=center>AP a/n 5300MHz</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>-</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>-</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>SEXTANT</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station a/n 5GHz</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>BaseBox 5</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>bridged wlan1,ether1</td>
| |
| <td align=center>AP a/n 5GHz</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>BaseBox 2</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>bridged wlan1,ether1</td>
| |
| <td align=center>AP b/g/n 2GHz</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>QRT 2</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station b/g/n 2.4GHz</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>QRT 5</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station 5GHz-a/n</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| </table>
| |
|
| |
|
| ===Engineered===
| | In this type of configurations router is configured as wireless client device. Depending on type of the board WAN interface can be <b>Wireless</b> or <b>LTE</b> interfaces. WAN port has configured DHCP client (except for LTE), is protected by ip firewall and MAC discovery/connection is disabled. |
| <table width="1180" >
| |
| <tr class="styled_table">
| |
| <th width="100"></th>
| |
| <th width="40">Wan port</th>
| |
| <th width="200">Lan port</th>
| |
| <th width="100">Wireless mode</th>
| |
| <th width="40">ht chain</th>
| |
| <th width="80">ht extension</th>
| |
| <th width="90">dhcp-server</th>
| |
| <th width="90">dhcp-client</th>
| |
| <th width="100">Firewall</th>
| |
| <th width="80">NAT</th>
| |
| <th width="80">Default IP</th>
| |
| <th>Mac Server</th>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB411xx, <br />RB435G, <br />RB433xx, <br />RB495xx, <br />RB800</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on ether1</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB450xx</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>Switched ether2-ether5</td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center> - </td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB711-5xx,<br /> RB711G-5xx</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station a/n 5GHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB711UA-5xx,<br />RB711GA-5xx</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>bridged wlan1,ether1</td>
| |
| <td align=center>AP a/n 5300MHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB711-2xx</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station b/g/n 2.4GHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB711UA-2xx</b></td>
| |
| <td align=center>-</td>
| |
| <td align=center>bridged wlan1,ether1</td>
| |
| <td align=center>AP a/n 2412MHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>-</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>-</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB911/912-2xx</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station b/g/n 2.4GHz</td>
| |
| <td align=center>0</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB911/912-5xx</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>station 5GHz-a/n (5GHz-a/n/ac)</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB921/922-2xx</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>bridged wireless with ethernets</td>
| |
| <td align=center>station b/g/n 2.4GHz</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB921/922-5xx</b></td>
| |
| <td align=center>wlan1</td>
| |
| <td align=center>bridged wireless with ethernets</td>
| |
| <td align=center>station 5GHz-a/n (5GHz-a/n/ac)</td>
| |
| <td align=center>0,1</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| <tr class="styled_table">
| |
| <td><b>RB953GS-5xx</b></td>
| |
| <td align=center>ether1</td>
| |
| <td align=center>switched: sfp1,ether2,ether3 and bridged with wireless</td>
| |
| <td align=center>ap-bridge 5GHz-a/n (5GHz-a/n/ac)</td>
| |
| <td align=center>0,1,2</td>
| |
| <td align=center>above control</td>
| |
| <td align=center>on lan port</td>
| |
| <td align=center>on wan port</td>
| |
| <td align=center>blocked access to wan port</td>
| |
| <td align=center>Masquerade wan port</td>
| |
| <td align=center>192.168.88.1/24 on lan port</td>
| |
| <td align=center>Disabled on wan port</td>
| |
| </tr>
| |
| </table>
| |
|
| |
|
| {{Note | To see configuration script that will be applied after system reset use following command (however, see warning below) <code><b>/system default-configuration print </b></code> }}
| | List of routers using this type of config: |
| | * SXT |
| | * QRT |
| | * LHG |
| | * RB 911,912 - with level3 license |
| | * RB 711 |
| | * Groove |
| | * Metal |
| | * NetMetal |
| | * RB 921,922,A21 - with level3 license |
|
| |
|
|
| |
|
| {{Warning | <code><b>/system default-configuration print </b></code> Always shows factory default configuration even if it is overridden by a different netinstall script. }}
| | == LTE CPE AP router == |
|
| |
|
| === CAP ===
| | This configuration type is applied to routers that has both LTE and wireless interfaces. LTE interface is considered a WAN port protected by firewall and MAC discovery/connection disabled. Wireless is configured as access point and bridged with all Ethernets. |
|
| |
|
| When CAP default configuration is loaded, 'ether1' is considered a management port with DHCP client configured.
| |
|
| |
|
| All other Ethernet interfaces are bridged and 'wlan1' is set to be managed by CAPsMAN
| | == AP Router == |
|
| |
|
| == WAN Port ==
| | This type of configuration is applied to home access point routers to be used straight out of the box without additional configuration (except router passwords and wireless keys) |
|
| |
|
| When applying configuration, WAN port is renamed to "<wan port>-gateway", for example, if wan port is ether1, it will be renamed to "ether1-gateway".
| | First Ethernet is always configured as WAN port (protected by firewall, enabled DHCP client and disabled MAC connection/discovery). Other Ethernet and wireless interfaces are added to local LAN bridge with 192.168.88.1/24 address set and configured DHCP server. |
|
| |
|
| == Local Port ==
| | In case of dual band routers, one wireless is configured as 5Ghz access point and other as 2.4Ghz access point. |
|
| |
|
| Local port can be:
| | List of routers using this type of config: |
| * single interface | | * 450,750,850 |
| * ethernets configured in switch group | | * mAP |
| * bridged, with all interfaces that are not WAN and switch slaves. | | * wAP |
| If ports are switched then master port is renamed to "<ethernet name>-master-local" and slaves to "<ethernet name>-slave-local".
| | * RB 931 |
| | * hAP, RB 952,962 |
| | * RB 941 |
| | * RB 751,951 |
| | * RB 953 |
| | * OmniTIK |
| | * RB 960 |
| | * RB 2011,3011 |
| | * CRS with wireless interface |
|
| |
|
| Let's take '''RB751''' as an example.
| |
| Board has ether1 configured as WAN port, it has switch chip and one pre-configured wireless interface. So in this case all ethernet ports except ether1 are grouped in a switch group and bridged with wireless interface.
| |
|
| |
|
| Generated config will be:
| | == PTP Bridge == |
| <pre>
| |
| /interface set ether2 name=ether2-master-local;
| |
| /interface set ether3 name=ether3-slave-local;
| |
| /interface set ether4 name=ether4-slave-local;
| |
| /interface set ether5 name=ether5-slave-local;
| |
| /interface ethernet set ether3-slave-local master-port=ether2-master-local;
| |
| /interface ethernet set ether4-slave-local master-port=ether2-master-local;
| |
| /interface ethernet set ether5-slave-local master-port=ether2-master-local;
| |
|
| |
|
| /interface bridge add name=bridge-local disabled=no auto-mac=no protocol-mode=rstp;
| | List of routers using this type of config: |
| | * DynaDish - as CPE |
|
| |
|
| :local bMACIsSet 0;
| |
| :foreach k in=[/interface find] do={
| |
| :local tmpPort [/interface get $k name];
| |
| :if ($bMACIsSet = 0) do={
| |
| :if ([/interface get $k type] = "ether") do={
| |
| /interface bridge set "bridge-local" admin-mac=[/interface ethernet get $tmpPort mac-address];
| |
| :set bMACIsSet 1;
| |
| }
| |
| }
| |
| :if (!($tmpPort~"bridge" || $tmpPort~"ether1" || $tmpPort~"slave")) do={
| |
| /interface bridge port add bridge=bridge-local interface=$tmpPort;
| |
| }
| |
| }
| |
| </pre>
| |
|
| |
|
| == Wireless Config == | | == WISP Bridge == |
|
| |
|
| Wireless configuration depends on market segment for which board is designed. It can be configured as an AP or a station on 2GHz and 5GHz frequencies.
| | Configuration is the same as PTP Bridge in AP mode, except that wireless mode is set to ap_bridge for PTMP setups. |
| Default 2GHz frequency is 2412 and default 5GHz frequency is 5300.
| |
| SSID is "Mikrotik-" + last 3 bytes in hex from wireless MAC address.
| |
| Starting from v5.25 and v6rc14 Wireless Security profile is configured with WPA/WPA2 and security key equal to router's serial number.
| |
|
| |
|
| For example,
| | List of routers using this type of config: |
| If Mac address of the wlan1 interface is 00:0B:6B:30:7F:C2, and serial number of the board is
| | * cAP |
| <pre>
| | * Groove A, Metal A, RB 711 A |
| /sys routerboard print
| | * OmniGroove |
| routerboard: yes
| | * RB 911,912 - with Level4 license. |
| serial-number: 0163008F8883
| | * RB 921,922,A21 - with Level4 license. |
| </pre>
| |
|
| |
|
|
| |
|
| Then following settings will be applied:
| | == Switch == |
|
| |
|
| * SSID="MikroTik-307FC2"
| | This configuration utilizes switch chip features to configure dumb switch. All ethernet ports are added to switch group and default IP address 192.168.88.1/24 is set on master port. |
|
| |
|
| * security settings:
| | List of routers using this type of config: |
| ** mode=dynamic-keys | | * CRS without wireless interface |
| ** authentication-types=wpa-psk,wpa2-psk
| |
| ** wpa-pre-shared-key=0163008F8883
| |
| ** wpa2-pre-shared-key=0163008F8883
| |
|
| |
|
| {{ Note | security key is case sensitive}}
| |
|
| |
|
| | == IP Only == |
|
| |
|
| If board has two chains (letter D in the naming of the board), then both chains are enabled. HT Extension is enabled on all CPEs.
| | When no specific configuration is found, IP address 192.168.88.1/24 is set on ether1, or combo1, or sfp1. Typically such configuration is applied to all CCR series and other rackmount routers. |
|
| |
|
| For example generated config on RB751:
| |
| <pre>
| |
| :if ( $wirelessEnabled = 1) do={
| |
| # wait for wireless
| |
| :while ([/interface wireless find] = "") do={ :delay 1s; };
| |
|
| |
|
| /interface wireless set wlan1 mode=ap-bridge band=2ghz-b/g/n ht-txchains=0,1 ht-rxchains=0,1 \
| |
| disabled=no country=no_country_set wireless-protocol=any
| |
| /interface wireless set wlan1 channel-width=20/40mhz-ht-above ;
| |
| }
| |
|
| |
|
| </pre>
| | == CAP == |
|
| |
|
| ==Default IP and DHCP Config ==
| | This type of configuration is used when device need to be used as wireless client device controlled by CAPsMAN. |
|
| |
|
| Default IP address on all boards is 192.168.88.1/24. Boards without specific configuration has IP address set on ether1, other boards has IP address on LAN interface.
| | When CAP default configuration is loaded, ether1 is considered a management port with DHCP client configured. All other Ethernet interfaces are bridged and wlan1 is set to be managed by CAPsMAN. |
|
| |
|
| All boards that have the WAN port configured, will have a DHCP client set on WAN port.
| |
|
| |
| Typically on all CPEs, DHCP server is set on LAN port giving out addresses in a range from 192.168.88.2-192.168.88.254
| |
|
| |
| An example '''RB751''' applied DHCP config.
| |
| <pre>
| |
| /ip dhcp-client add interface=ether1-gateway disabled=no
| |
|
| |
| /ip pool add name="default-dhcp" ranges=192.168.88.10-192.168.88.254;
| |
| /ip dhcp-server
| |
| add name=default address-pool="default-dhcp" interface=bridge-local disabled=no;
| |
|
| |
| /ip dhcp-server network
| |
| add address=192.168.88.0/24 gateway=192.168.88.1 dns-server=192.168.88.1 comment="default configuration";
| |
| </pre>
| |
|
| |
| == Firewall, NAT and MAC server==
| |
|
| |
| All boards with a configured WAN port also has protection configured on that port. Any traffic leaving the WAN port is masqueraded. In forward chain there are also three rules added for boards with a masquerade rule: accept established, accept related and drop invalid to prevent packets with local network IP to be leaked onto the wan port.
| |
|
| |
|
| |
| Config example:
| |
| <pre>
| |
| /ip firewall {
| |
| filter add chain=input action=accept protocol=icmp comment="default configuration"
| |
| filter add chain=input action=accept connection-state=established in-interface=ether1-gateway comment="default configuration"
| |
| filter add chain=input action=accept connection-state=related in-interface=ether1-gateway comment="default configuration"
| |
| filter add chain=input action=drop in-interface=ether1-gateway comment="default configuration"
| |
| nat add chain=srcnat out-interface=ether1-gateway action=masquerade comment="default configuration"
| |
| }
| |
|
| |
|
| |
| /tool mac-server remove [find];
| |
| /tool mac-server mac-winbox disable [find];
| |
| :foreach k in=[/interface find] do={
| |
| :local tmpName [/interface get $k name];
| |
| :if (!($tmpName~"ether1")) do={
| |
| /tool mac-server add interface=$tmpName disabled=no;
| |
| /tool mac-server mac-winbox add interface=$tmpName disabled=no;
| |
| }
| |
| }
| |
| /ip neighbor discovery set [find name="ether1-gateway"] discover=no
| |
|
| |
|
| |
| </pre>
| |
|
| |
| ==DNS==
| |
|
| |
| Every board allows remote DNS requests and has a static DNS name of 'router' pre-configured.
| |
| <pre>
| |
| /ip dns {
| |
| set allow-remote-requests=yes
| |
| static add name=router address=192.168.88.1
| |
| }
| |
| </pre>
| |
|
| |
|
|
| |
|