Zobrazit příspěvky
1
Sítě / Re:MikroTik L009UiGS-2HaxD len 300 Mbps
« kdy: Dnes v 19:19:45 »Kód: [Vybrat]
# 2025-09-16 19:02:49 by RouterOS 7.16.2
# software id = JG2Q-9X9D
#
# model = L009UiGS-2HaxD
# serial number = HJK0AN5H81J
/interface bridge
add name=bridge1
/interface wireguard
add comment=wg0:interface listen-port=528XX mtu=1420 name=wg0
/interface list
add name=LAN
/ip pool
add name=dhcp_pool0 ranges=192.168.110.2-192.168.110.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=bridge1 name=dhcp1
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add interface=bridge1 list=LAN
/ip address
add address=192.168.110.1/24 interface=bridge1 network=192.168.110.0
add address=10.10.9.1/24 comment="local wg server" interface=wg0 network=10.10.9.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=192.168.110.0/24 dns-server=192.168.110.1 gateway=192.168.110.1
/ip firewall filter
add action=accept chain=input comment="wireguard allowed" dst-port=528XX protocol=udp
add action=accept chain=input comment="accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="drop invalid" connection-state=invalid
add action=accept chain=input comment="accept ICMP" in-interface=ether1 protocol=icmp
add action=accept chain=input comment="allow Winbox" in-interface=ether1 port=8291 protocol=tcp
add action=accept chain=input comment="allow SSH" in-interface=ether1 port=22 protocol=tcp
add action=drop chain=input comment="block everything else" in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh port=2200
set api disabled=yes
/system clock
set time-zone-name=Europe/Bratislava
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LANOK s fasttrack som sa dostal na 600-650 Mbps, co je vcelku OK (ale nie je to 800). CPU pri tomto trafficu sa zatazi na 45-55%.
Lepsie to uz asi nebude.
Fasttrackv konfigu nie je uvedeny
