Skip to content

Commit 2ec87e4

Browse files
authored
Update initial-setup.rsc
Исправлено несколько моментов: MAC-server, NTP-клиент и логирование
1 parent 2bf2423 commit 2ec87e4

1 file changed

Lines changed: 21 additions & 9 deletions

File tree

routeros/initial-setup.rsc

Lines changed: 21 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
# 2. Assign real interfaces to the LAN / WAN / StS / VPN lists in the
77
# "/interface list member" section.
88
# 3. Upload to the router and run: /import file-name=initial-setup.rsc
9-
#
9+
# 4.
1010
# Notes:
1111
# StS = Site-to-Site tunnels, VPN = remote-access VPN clients.
1212
# Port knocking sequence: 1234 -> 2345 -> 3456, then connect to 12345.
@@ -35,7 +35,7 @@ add name=VPN comment="Remote-access VPN clients"
3535

3636
/interface list member
3737
# Assign your real interfaces here, examples below:
38-
add list=WAN interface=ether1
38+
# add list=WAN interface=ether1
3939
add list=LAN interface=bridge
4040
# add list=StS interface=<gre-tunnel1>
4141
# add list=VPN interface=<wireguard1>
@@ -103,19 +103,19 @@ set telnet disabled=yes
103103
set ftp disabled=yes
104104
set www disabled=yes
105105
set api disabled=yes
106-
set api-ssl disabled=yes
106+
set api-ssl disabled=no
107107
/ip neighbor discovery-settings
108108
set discover-interface-list=LAN
109109
# MAC-server is left enabled on all interfaces so the router stays reachable
110110
# via MAC-telnet / MAC-winbox during initial setup from any port, before it has
111111
# an IP address. NOTE: this also exposes MAC access on WAN — restrict to a
112112
# management interface list once setup is complete.
113113
/tool mac-server
114-
set allowed-interface-list=all
114+
set allowed-interface-list=LAN
115115
/tool mac-server mac-winbox
116-
set allowed-interface-list=all
116+
set allowed-interface-list=LAN
117117
/tool mac-server ping
118-
set enabled=yes
118+
set enabled=no
119119
# Disable the bandwidth-test server (open by default, common attack vector).
120120
/tool bandwidth-server
121121
set enabled=no
@@ -129,8 +129,14 @@ set disable-ipv6=yes
129129
set time-zone-name=Asia/Yekaterinburg
130130
/system ntp client
131131
set enabled=yes
132-
/system ntp client servers
133-
add address=pool.ntp.org
132+
133+
# Для ROS7
134+
/system ntp client
135+
set enabled=yes servers=pool.ntp.org
136+
137+
# Для ROS6
138+
/system ntp client
139+
set enabled=yes server-dns-names=pool.ntp.org
134140

135141
# Act as an NTP server for downstream clients.
136142
/system ntp server
@@ -140,7 +146,13 @@ set enabled=yes
140146
# Logging — suppress info-level messages for DHCP and Wireless
141147
# ---------------------------------------------------------------------------
142148
/system logging
143-
set [find where topics="info"] topics=info,!dhcp,!wireless,!wifi
149+
set [find where topics="info"] topics=info,!dhcp
150+
151+
# для ROS6 или ROS7 c WiFi (пакет wireless)
152+
set [find where topics="info"] topics=info,!dhcp,!wireless
153+
154+
# Для ROS7 с WiFI (пакет wifi)
155+
set [find where topics="info"] topics=info,!dhcp,!wifi
144156

145157
# ---------------------------------------------------------------------------
146158
# RouterOS package update channel — use the long-term (stable) release branch

0 commit comments

Comments
 (0)