# Generat per a:
<br /># RouterOSv2.9
<br />:log info "Unsolclic for 6034-BDNCarigtST going to be executed."
<br /># 
<br /># Configuració per RouterOS > 2.9.51 or 3.9
<br /># Trasto: 6034-BDNCarigtST
<br /># 
<br /># ATENCIÓ: Versió Beta
<br /># 
<br /># Methods to upload/execute this script:
<br /># 1.-As a script. Upload this output as a script either with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;a.Winbox (with Linux, wine required)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;b.Terminal (telnet, ssh...)
<br /># &nbsp;&nbsp;&nbsp;Then execute the script with:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/system script run script_name
<br /># 2.-Fitxer importat:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Desa aquesta "sortida" a un fitxer, després puja'l al router
<br /># &nbsp;&nbsp;&nbsp;&nbsp;fent servir FTP amb un nom de l'estil "script_name.rsc".
<br /># &nbsp;&nbsp;&nbsp;&nbsp;(note, l'extensió ".rsc" es un requisit)
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Executa el fitxer importat amb la comanda:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;>&nbsp;/import script_name
<br /># 3.-Telnet copia i enganxar:
<br /># &nbsp;&nbsp;&nbsp;&nbsp;Open a terminal session, and cut&paste this output
<br /># &nbsp;&nbsp;&nbsp;&nbsp;directly on the terminal input.
<br /># 
<br /># Notes:
<br /># -routing-test package is required, be sure you have it enabled at system packages
<br /># -wlans should be enabled manually, be sure to set the correct antenna (a or b)
<br /># &nbsp;&nbsp;according in how did you connect the cable to the miniPCI. Keep the
<br /># &nbsp;&nbsp;power at the minimum possible and check the channel.
<br /># -The script doesn't reset the router, you might have to do it manually
<br /># -You must have write access to the router
<br /># -MAC access (winbox, MAC telnet...) method is recommended
<br /># &nbsp;&nbsp;(the script reconfigures some IP addresses, so communication can be lost)
<br /># -No changes are done in user passwords on the device
<br /># -A Read Only guest account with no password will be created to allow guest access
<br /># &nbsp;&nbsp;to the router with no danger of damage but able to see the config.
<br /># -Be sure that all packages are activated.
<br /># -Don't run the script from telnet and being connected through an IP connection at
<br /># &nbsp;&nbsp;the wLan/Lan interface: This interface will be destroyed during the script.
<br /># 
<br />/ system identity set name=BDNCarigtST
<br /># 
<br /># DNS (client &#038; server cache) zone: 3759
<br />/ip dns set primary-dns=10.35.228.35 secondary-dns=10.139.18.34 allow-remote-requests=yes
<br />:delay 1
<br /># 
<br /># NTP (client &#038; server cache) zone: 3759
<br />/system ntp client set enabled=yes mode=unicast primary-ntp=10.35.228.36,10.139.17.34
<br />/system ntp server set manycast=no enabled=yes
<br />:delay 1
<br /># 
<br /># Bandwidth-server
<br />/ tool bandwidth-server set enabled=yes authenticate=no allocate-udp-ports-from=2000
<br /># 
<br /># SNMP
<br />/snmp set contact="guifi@guifi.net" enabled=yes location="badalonawireless-n11"
<br /># 
<br /># Guest user
<br />/user
<br />:foreach i in [find group=read] do={/user remove $i;}
<br />add name="guest" group=read address=0.0.0.0/0 comment="" disabled=no
<br /># 
<br /># Graphing
<br />/tool graphing interface add
<br /># Remove current wLan/Lan bridge if exists
<br />:foreach i in [/interface bridge find name=wLan/Lan] \ 
<br />do={:foreach i in [/interface bridge port find bridge=wLan/Lan] \ 
<br />do={/interface bridge port remove $i; \ 
<br />:foreach i in [/ip address find interface=wLan/Lan] \ 
<br />do={/ip address remove $i;};};
<br />/interface bridge remove $i;}
<br />:delay 1
<br /># 
<br /># Routed device
<br /># 
<br /># Altres connexions de cable
<br /># 
<br /># Internal addresses NAT
<br />:foreach i in [/ip firewall nat find src-address="172.25.0.0/16"] do={/ip firewall nat remove $i;}
<br />:foreach i in [/ip firewall nat find src-address="192.168.0.0/16"] do={/ip firewall nat remove $i;}
<br />/ip firewall nat
<br />add chain=srcnat src-address="192.168.0.0/16" dst-address=!192.168.0.0/16 action=src-nat to-addresses= to-ports=0-65535 comment="" disabled=no
<br />add chain=srcnat src-address="172.25.0.0/16" dst-address=!172.25.0.0/16 protocol=!ospf action=src-nat to-addresses= to-ports=0-65535 comment="" disabled=no
<br /># 
<br /># Enrutament BGP
<br /># Filtres BGP i OSPF
<br />:foreach i in [/routing filter find chain=ospf-in] do={/routing filter remove $i;}
<br />:foreach i in [/routing filter find chain=ospf-out] do={/routing filter remove $i;}
<br />/ routing filter
<br />add chain=ospf-out prefix=10.0.0.0/8 prefix-length=8-32 invert-match=no action=accept comment="" disabled=no
<br />add chain=ospf-out invert-match=no action=discard comment="" disabled=no
<br />add chain=ospf-in prefix=10.0.0.0/8 prefix-length=8-32 invert-match=no action=accept comment="" disabled=no
<br />add chain=ospf-in invert-match=no action=reject comment="" disabled=no
<br /># 
<br /># Instància BGP
<br />/ routing bgp instance
<br />set default name="default" as=6034 router-id= redistribute-static=yes \ 
<br />redistribute-connected=yes redistribute-rip=yes redistribute-ospf=yes \ 
<br />redistribute-other-bgp=yes out-filter=ospf-out \ 
<br />client-to-client-reflection=yes comment="" disabled=no
<br /># 
<br /># Enrutament OSPF
<br />/routing ospf set router-id= redistribute-connected=as-type-1 redistribute-static=as-type-1 redistribute-bgp=as-type-1
<br /># 
<br />:log info "Unsolclic for 6034-BDNCarigtST executed."
<br />/
<br />