Mikrotik -WAN-Script full Backup ok

Admin December 19, 2021

Mikrotik

WAN1

WAN2

WAN3

LAN

DHCP

Local-Network

/interface ethernet
set [ find default-name=ether4 ] name=LAN
set [ find default-name=ether5 ] name=Local-Network
set [ find default-name=ether1 ] name=WAN1
set [ find default-name=ether2 ] name=WAN2
set [ find default-name=ether3 ] name=WAN3
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip firewall layer7-protocol
add name=SpeedTest regexp="^.+(speedtest).\\\$"
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
add dns-name=sky.net hotspot-address=192.168.205.1 html-directory=\
flash/hotspot login-by=cookie,http-chap,http-pap name=hsprof1
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=1Mbps-PPPoE ranges=192.168.201.2-192.168.201.254
add name=2Mbps-PPPoE ranges=192.168.202.2-192.168.202.254
add name=3Mbps-PPPoE ranges=192.168.203.2-192.168.203.254
add name=4Mbps-PPPoE ranges=192.168.204.2-192.168.204.254
add name=6Mbps-PPPoE ranges=192.168.206.2-192.168.206.254
add name=7Mbps-PPPoE ranges=192.168.207.2-192.168.207.254
add name=8Mbps-PPPoE ranges=192.168.208.2-192.168.208.254
add name=9Mbps-PPPoE ranges=192.168.209.2-192.168.209.254
add name=10Mbps-PPPoE ranges=192.168.210.2-192.168.210.254
add name=30Mbps-PPPoE ranges=192.168.230.2-192.168.230.254
add name=5Mbps-PPPoE ranges=192.168.50.2-192.168.50.254
add name=11Mbps-PPPoE ranges=192.168.211.2-192.168.211.254
add name=12Mbps-PPPoE ranges=192.168.212.2-192.168.212.254
add name=13Mbps-PPPoE ranges=192.168.213.2-192.168.213.254
add name=14Mbps-PPPoE ranges=192.168.214.2-192.168.214.254
add name=hs-pool-3 ranges=192.168.205.2-192.168.205.254
add name=dhcp_pool17 ranges=192.168.5.2-192.168.5.254
/ip dhcp-server
add address-pool=hs-pool-3 disabled=no interface=LAN lease-time=1h name=dhcp1
add address-pool=dhcp_pool17 disabled=no interface=Local-Network name=dhcp2
/ip hotspot
add address-pool=hs-pool-3 addresses-per-mac=1 disabled=no interface=LAN \
name=hotspot1 profile=hsprof1
/ip hotspot user profile
set [ find default=yes ] address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt outgoing-packet-mark=SpeedTest_Pkt
add address-list=Sky.Net address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt name=2Mbps open-status-page=http-login \
outgoing-packet-mark=SpeedTest_Pkt rate-limit=2048/2028 \
transparent-proxy=yes
add address-list=Sky.Net address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt name=3Mbps open-status-page=http-login \
outgoing-packet-mark=SpeedTest_Pkt rate-limit=3072/3072 \
transparent-proxy=yes
add address-list=Sky.Net address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt name=4Mbps open-status-page=http-login \
outgoing-packet-mark=SpeedTest_Pkt rate-limit=4096/4096 \
transparent-proxy=yes
add address-list=Sky.Net address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt name=5Mbps open-status-page=http-login \
outgoing-packet-mark=SpeedTest_Pkt rate-limit=5120/5120 \
transparent-proxy=yes
add address-list=Sky.Net address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt name=6Mbps open-status-page=http-login \
outgoing-packet-mark=SpeedTest_Pkt rate-limit=6144/6144 \
transparent-proxy=yes
add address-list=Sky.Net address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt name=7Mbps open-status-page=http-login \
outgoing-packet-mark=SpeedTest_Pkt rate-limit=7168/7168 \
transparent-proxy=yes
add address-list=Sky.Net address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt name=8Mbps open-status-page=http-login \
outgoing-packet-mark=SpeedTest_Pkt rate-limit=8192/8192 \
transparent-proxy=yes
add address-list=Sky.Net address-pool=hs-pool-3 incoming-packet-mark=\
SpeedTest_Pkt name=9Mbps open-status-page=http-login \
outgoing-packet-mark=SpeedTest_Pkt rate-limit=9216/9216 \
transparent-proxy=yes
/ppp profile
set 0 local-address=172.16.1.1 remote-address=hs-pool-3
add local-address=1Mbps-PPPoE name=1Mbps-PPPoE only-one=yes rate-limit=\
1Mb/1Mb remote-address=1Mbps-PPPoE use-encryption=yes
add local-address=2Mbps-PPPoE name=2Mbps-PPPoE only-one=yes rate-limit=\
2Mb/2Mb remote-address=2Mbps-PPPoE use-encryption=yes
add local-address=3Mbps-PPPoE name=3Mbps-PPPoE only-one=yes rate-limit=\
3Mb/3Mb remote-address=3Mbps-PPPoE use-encryption=yes
add local-address=4Mbps-PPPoE name=4Mbps-PPPoE only-one=yes rate-limit=\
4Mb/4Mb remote-address=4Mbps-PPPoE use-encryption=yes
add local-address=5Mbps-PPPoE name=5Mbps-PPPoE only-one=yes rate-limit=\
5Mb/5Mb remote-address=5Mbps-PPPoE use-encryption=yes
add local-address=6Mbps-PPPoE name=6Mbps-PPPoE only-one=yes rate-limit=\
6Mb/6Mb remote-address=6Mbps-PPPoE use-encryption=yes
add local-address=7Mbps-PPPoE name=7Mbps-PPPoE only-one=yes rate-limit=\
7Mb/7Mb remote-address=7Mbps-PPPoE use-encryption=yes
add local-address=8Mbps-PPPoE name=8Mbps-PPPoE only-one=yes rate-limit=\
8Mb/8Mb remote-address=8Mbps-PPPoE use-encryption=yes
add local-address=9Mbps-PPPoE name=9Mbps-PPPoE only-one=yes rate-limit=\
8Mb/8Mb remote-address=9Mbps-PPPoE use-encryption=yes
add local-address=10Mbps-PPPoE name=10Mbps-PPPoE only-one=yes rate-limit=\
16Mb/16Mb remote-address=10Mbps-PPPoE use-encryption=yes
/queue type
add kind=pcq name=3Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=3M pcq-src-address6-mask=64
add kind=pcq name=5Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=5M pcq-src-address6-mask=64
add kind=pcq name=9Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=9M pcq-src-address6-mask=64
add kind=pcq name=10Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=10M pcq-src-address6-mask=64
add kind=pcq name=3Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=3M pcq-src-address6-mask=64
add kind=pcq name=5Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=5M pcq-src-address6-mask=64
add kind=pcq name=8Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=8M pcq-src-address6-mask=64
add kind=pcq name=10Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=10M pcq-src-address6-mask=64
add kind=pcq name=4Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=4M pcq-src-address6-mask=64
add kind=pcq name=4Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=4M pcq-src-address6-mask=64
add kind=pcq name=1Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=1M pcq-src-address6-mask=64
add kind=pcq name=1Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=1M pcq-src-address6-mask=64
add kind=pcq name=6Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=6M pcq-src-address6-mask=64
add kind=pcq name=6Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=6M pcq-src-address6-mask=64
add kind=pcq name=7Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=7M pcq-src-address6-mask=64
add kind=pcq name=7Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=7M pcq-src-address6-mask=64
add kind=pcq name=9Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=9M pcq-src-address6-mask=64
add kind=pcq name=2Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=2M pcq-src-address6-mask=64
add kind=pcq name=2Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=2M pcq-src-address6-mask=64
add kind=pcq name=8Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=8M pcq-src-address6-mask=64
add kind=pcq name=30Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=30M pcq-src-address6-mask=64
add kind=pcq name=30Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=30M pcq-src-address6-mask=64
add kind=pcq name=11Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=11M pcq-src-address6-mask=64
add kind=pcq name=12Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=12M pcq-src-address6-mask=64
add kind=pcq name=13Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=13M pcq-src-address6-mask=64
add kind=pcq name=14Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=14M pcq-src-address6-mask=64
add kind=pcq name=15Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=15M pcq-src-address6-mask=64
add kind=pcq name=16Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=16M pcq-src-address6-mask=64
add kind=pcq name=17Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=17M pcq-src-address6-mask=64
add kind=pcq name=18Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=18M pcq-src-address6-mask=64
add kind=pcq name=19Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=19M pcq-src-address6-mask=64
add kind=pcq name=20Mbps_DW pcq-classifier=dst-address pcq-dst-address6-mask=\
64 pcq-rate=20M pcq-src-address6-mask=64
add kind=pcq name=11Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=11M pcq-src-address6-mask=64
add kind=pcq name=12Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=12M pcq-src-address6-mask=64
add kind=pcq name=13Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=13M pcq-src-address6-mask=64
add kind=pcq name=14Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=14M pcq-src-address6-mask=64
add kind=pcq name=15Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=15M pcq-src-address6-mask=64
add kind=pcq name=16Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=16M pcq-src-address6-mask=64
add kind=pcq name=17Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=17M pcq-src-address6-mask=64
add kind=pcq name=18Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=18M pcq-src-address6-mask=64
add kind=pcq name=19Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=19M pcq-src-address6-mask=64
add kind=pcq name=20Mbps_Up pcq-classifier=src-address pcq-dst-address6-mask=\
64 pcq-rate=20M pcq-src-address6-mask=64
add kind=pcq name=Dow8MB pcq-classifier=dst-address pcq-dst-address6-mask=64 \
pcq-rate=8192k pcq-src-address6-mask=64
add kind=pcq name=Up8MB pcq-classifier=src-address pcq-dst-address6-mask=64 \
pcq-rate=8192k pcq-src-address6-mask=64
/queue interface
set Local-Network queue=ethernet-default
/queue simple
add comment="Speed Test 8Mb Per User" max-limit=3M/3M name="1Mbps-Speed Test" \
packet-marks=SpeedTest_Packets priority=3/3 queue=2Mbps_Up/2Mbps_DW \
target=192.168.201.0/24
add comment="Speed Test 8Mb Per User" max-limit=4M/4M name="2Mbps-Speed Test" \
packet-marks=SpeedTest_Packets priority=3/3 queue=4Mbps_Up/4Mbps_DW \
target=192.168.202.0/24
add comment="Speed Test 8Mb Per User" max-limit=4M/4M name="3Mbps-Speed Test" \
packet-marks=SpeedTest_Packets priority=3/3 queue=4Mbps_Up/4Mbps_DW \
target=192.168.203.0/24
add comment="Speed Test 8Mb Per User" max-limit=5M/5M name="4Mbps-Speed Test" \
packet-marks=SpeedTest_Packets priority=4/4 queue=5Mbps_Up/5Mbps_DW \
target=192.168.204.0/24
add comment="Speed Test 8Mb Per User" name="5Mbps-Speed Test" packet-marks=\
SpeedTest_Packets priority=4/4 queue=6Mbps_Up/6Mbps_DW target=\
192.168.50.0/24
add comment="Speed Test 8Mb Per User" name="6Mbps-Speed Test" packet-marks=\
SpeedTest_Packets priority=6/6 queue=6Mbps_Up/6Mbps_DW target=\
192.168.206.0/24
add comment="Speed Test 8Mb Per User" name="7Mbps-Speed Test" packet-marks=\
SpeedTest_Packets priority=4/4 queue=7Mbps_Up/7Mbps_DW target=\
192.168.207.0/24
add comment="Speed Test 8Mb Per User" name="8Mbps-Speed Test" packet-marks=\
SpeedTest_Packets priority=3/3 queue=9Mbps_Up/9Mbps_DW target=\
192.168.208.0/24
add comment="Speed Test 8Mb Per User" name="9Mbps-Speed Test" packet-marks=\
SpeedTest_Packets priority=3/3 queue=10Mbps_Up/10Mbps_DW target=\
192.168.209.0/24
add comment="Speed Test 8Mb Per User" name="10Mbps-Speed Test" packet-marks=\
SpeedTest_Packets priority=3/3 queue=11Mbps_Up/11Mbps_DW target=\
192.168.210.0/24
add name=Yoube_pk queue=2Mbps_Up/2Mbps_DW target=192.168.201.0/24
/interface pppoe-server server
add disabled=no interface=LAN one-session-per-host=yes service-name=service1
add disabled=no interface=Local-Network one-session-per-host=yes \
service-name=service2
/ip address
add address=192.168.205.1/24 interface=LAN network=192.168.205.0
add address=192.168.1.120/24 interface=WAN1 network=192.168.1.0
add address=192.168.2.120/24 interface=WAN2 network=192.168.2.0
add address=192.168.3.120/24 interface=WAN3 network=192.168.3.0
add address=192.168.5.1/24 interface=Local-Network network=192.168.5.0
/ip dhcp-server lease
add address=192.168.5.3 mac-address=78:44:76:D5:75:6C server=dhcp2
add address=192.168.5.4 mac-address=14:4D:67:0D:B2:00 server=dhcp2
add address=192.168.205.231 insert-queue-before=first mac-address=\
C6:66:E7:24:0B:5A rate-limit=3m/3m server=dhcp1
/ip dhcp-server network
add address=192.168.5.0/24 gateway=192.168.5.1
add address=192.168.205.0/24 comment="hotspot network" gateway=192.168.205.1
/ip dns
set allow-remote-requests=yes servers=103.83.23.5,103.104.96.5
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall mangle
add action=mark-connection chain=input in-interface=WAN1 new-connection-mark=\
WAN1_conn passthrough=yes
add action=mark-connection chain=input in-interface=WAN2 new-connection-mark=\
WAN2_conn passthrough=yes
add action=mark-connection chain=input in-interface=WAN3 new-connection-mark=\
WAN3_conn passthrough=yes
add action=mark-routing chain=output connection-mark=WAN1_conn \
new-routing-mark=to_WAN1 passthrough=yes
add action=mark-routing chain=output connection-mark=WAN2_conn \
new-routing-mark=to_WAN2 passthrough=yes
add action=mark-routing chain=output connection-mark=WAN3_conn \
new-routing-mark=to_WAN3 passthrough=yes
add action=accept chain=prerouting dst-address=192.168.1.0/24 in-interface=\
LAN
add action=accept chain=prerouting dst-address=192.168.2.0/24 in-interface=\
LAN
add action=accept chain=prerouting dst-address=192.168.3.0/24 in-interface=\
LAN
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN1_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:3/0
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN2_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:3/1
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN3_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:3/2
add action=mark-routing chain=prerouting connection-mark=WAN1_conn \
in-interface=LAN new-routing-mark=to_WAN1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=WAN2_conn \
in-interface=LAN new-routing-mark=to_WAN2 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=WAN3_conn \
in-interface=LAN new-routing-mark=to_WAN3 passthrough=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
add action=masquerade chain=srcnat out-interface=WAN3
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=192.168.205.0/24
/ip firewall raw
add action=add-dst-to-address-list address-list=whatsapp \
address-list-timeout=4d chain=prerouting content=whatsapp
add action=add-dst-to-address-list address-list=youtube.com \
address-list-timeout=4d chain=prerouting content=youtube
add action=add-dst-to-address-list address-list=dmasti-list \
address-list-timeout=4d chain=prerouting content=dmasti.pk
/ip hotspot ip-binding
add address=192.168.205.245 comment=TOTOLINK-CP300-V2.0.4 mac-address=\
14:4D:67:BE:DB:58 to-address=192.168.205.245 type=bypassed
add address=192.168.205.250 comment=TOTOLINK-CP300-V2.0.4 mac-address=\
D4:6E:0E:1B:D9:02 to-address=192.168.205.250 type=bypassed
add address=192.168.205.231 comment=12345 mac-address=C6:66:E7:24:0B:5A \
to-address=192.168.205.230 type=bypassed
/ip hotspot user
add name=admin password=12345
/ip route
add check-gateway=ping distance=1 gateway=192.168.1.1 routing-mark=to_WAN1 \
scope=255
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=to_WAN2 \
scope=255
add check-gateway=ping distance=1 gateway=192.168.3.1 routing-mark=to_WAN3 \
scope=255
add check-gateway=ping distance=1 gateway=192.168.1.1 scope=255
add check-gateway=ping distance=2 gateway=192.168.2.1 scope=255
add check-gateway=ping distance=3 gateway=192.168.3.1 scope=255
/ip service
set telnet disabled=yes
set www address=0.0.0.0/0 port=81
/ppp aaa
set interim-update=5s use-circuit-id-in-nas-port-id=yes use-radius=yes
/ppp profile
set FFFFFFFE local-address=192.168.89.1 remote-address=14
/ppp secret
add name=yaseen password=12345 profile=4Mbps-PPPoE service=pppoe
add name=nadeem.king password=12345 profile=4Mbps-PPPoE service=pppoe
add name=15shaeeir password=12345 profile=4Mbps-PPPoE service=pppoe
add name=20shahzad password=12345 profile=4Mbps-PPPoE service=pppoe
add name="user fizan" password=12345 profile=4Mbps-PPPoE service=pppoe
add name=11sarfraz password=12345 profile=4Mbps-PPPoE service=pppoe
add name=" fizan" password=12345 profile=4Mbps-PPPoE service=pppoe
add name=ch-shahid password=12345 profile=4Mbps-PPPoE service=pppoe
add name=19niyamat password=12345 profile=4Mbps-PPPoE service=pppoe
add name=10asiali password=12345 profile=4Mbps-PPPoE service=pppoe
add name=raza@btbroadband.com password=12345 profile=4Mbps-PPPoE service=\
pppoe
add name=bthomehub@btbroadband.com password=12345 profile=4Mbps-PPPoE \
service=pppoe
add name=mohammed-sattar password=12345 profile=4Mbps-PPPoE service=pppoe
add name=fizan password=12345 profile=4Mbps-PPPoE service=pppoe
add name=01Mohammad-Sajid password=12345 profile=5Mbps-PPPoE service=pppoe
add name=raza.com password=12345 profile=4Mbps-PPPoE service=pppoe
/system clock
set time-zone-name=Asia/Karachi
/system identity
set name=BOX

PASSWD:1245

DOWNLOAD

Post a Comment

0 Comments