sempre nell'ottica di strutturare la rete di casa dei miei, credevo di essere arrivato al termine della configurazione, ma mi trovo con due problemini e una domanda.
Scenario:
3 RB951.
La prima collegata ad una antenna sul tetto e che gestirà tutto il routing.
Le altre due collegate alla prima con CAPsMAN abilitato.
Le mie domande:
1) La wifi ospiti, ho cercato di limitarla a 768/256 ma il downstream è di gran lunga inferiore mentre l'upstream è superiore. Dove ho sbagliato ?
2) come cambio i canali della 2 RB secondarie ?
3) qual'è il modo migliore di isolare la rete LAN dalla Guest ?
- Codice: Seleziona tutto
# sep/15/2017 16:36:34 by RouterOS 6.40.3
# software id = TXT4-WXS5
#
# model = 951G-2HnD
# serial number = 642E07943BC8
/interface bridge
add name=bridge-LAN
add name=bridge-OSPITI
/interface wireless
# managed by CAPsMAN
# channel: 2442/20-Ce/gn(30dBm), SSID: Wireless_Capolo_11, CAPsMAN forwarding
set [ find default-name=wlan1 ] ssid=MikroTik
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] arp=disabled master-port=ether2-master name=\
ether3-slave
set [ find default-name=ether4 ] master-port=ether2-master name=ether4-slsve
set [ find default-name=ether5 ] master-port=ether2-master name=ether5-slave
/caps-man datapath
add bridge=bridge-LAN name=datapath-LAN
add bridge=bridge-OSPITI name=datapath-OSPITI
/caps-man security
add authentication-types=wpa-psk,wpa2-psk name=security-LAN passphrase=\
Pippopippo
add authentication-types=wpa-psk,wpa2-psk name=security-OSPITI passphrase=\
Pippopippo
/caps-man configuration
add channel.band=2ghz-b/g/n datapath=datapath-LAN name=cfg-LAN security=\
security-LAN ssid=Wireless_Capolo_11
add channel.band=2ghz-b datapath=datapath-OSPITI name=cfg-OSPITI security=\
security-OSPITI ssid=Ospiti_Capolo_11
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=pool-LAN ranges=172.20.11.1-172.20.11.99
add name=pool-OSPITI ranges=192.168.11.1-192.168.11.20
/ip dhcp-server
add address-pool=pool-LAN disabled=no interface=bridge-LAN name=server-LAN
add address-pool=pool-OSPITI disabled=no interface=bridge-OSPITI name=\
server-OSPITI
/queue simple
add max-limit=768k/256k name="OSPITI Speed" target=192.168.11.0/24
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=cfg-LAN name-format=\
identity slave-configurations=cfg-OSPITI
/interface bridge port
add bridge=bridge-LAN interface=ether2-master
/interface wireless cap
#
set discovery-interfaces=bridge-LAN enabled=yes interfaces=wlan1
/ip address
add address=172.20.11.100/24 interface=bridge-LAN network=172.20.11.0
add address=192.168.11.100/24 interface=bridge-OSPITI network=192.168.11.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1-WAN
/ip dhcp-server network
add address=172.20.11.0/24 dns-server=172.20.11.100 gateway=172.20.11.100 \
netmask=24 ntp-server=172.20.11.100
add address=192.168.11.0/24 dns-server=192.168.11.100 gateway=192.168.11.100 \
netmask=24 ntp-server=192.168.11.100
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=accept chain=input comment="accept est rel" connection-state=\
established,related
add action=drop chain=input comment="drop inv" connection-state=invalid
add action=accept chain=input comment="accept icmp" protocol=icmp
add action=drop chain=input dst-port=53 in-interface=ether1-WAN protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether1-WAN protocol=tcp
add action=accept chain=input disabled=yes dst-port=8291 in-interface=\
ether1-WAN protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1-WAN src-address=\
172.20.11.0/24
add action=masquerade chain=srcnat out-interface=ether1-WAN src-address=\
192.168.11.0/24
/system clock
set time-zone-name=Europe/Rome
/system identity
set name="100 Sottotetto"
/system ntp client
set enabled=yes primary-ntp=193.204.114.232 secondary-ntp=193.204.114.105
Ringrazio anticipatamente chi vorrà aiutarmi.
