66# 2. Assign real interfaces to the LAN / WAN / StS / VPN lists in the
77# "/interface list member" section.
88# 3. Upload to the router and run: /import file-name=initial-setup.rsc
9- #
9+ # 4.
1010# Notes:
1111# StS = Site-to-Site tunnels, VPN = remote-access VPN clients.
1212# Port knocking sequence: 1234 -> 2345 -> 3456, then connect to 12345.
@@ -35,7 +35,7 @@ add name=VPN comment="Remote-access VPN clients"
3535
3636/interface list member
3737# Assign your real interfaces here, examples below:
38- add list=WAN interface=ether1
38+ # add list=WAN interface=ether1
3939add list=LAN interface=bridge
4040# add list=StS interface=<gre-tunnel1>
4141# add list=VPN interface=<wireguard1>
@@ -103,19 +103,19 @@ set telnet disabled=yes
103103set ftp disabled=yes
104104set www disabled=yes
105105set api disabled=yes
106- set api-ssl disabled=yes
106+ set api-ssl disabled=no
107107/ip neighbor discovery-settings
108108set discover-interface-list=LAN
109109# MAC-server is left enabled on all interfaces so the router stays reachable
110110# via MAC-telnet / MAC-winbox during initial setup from any port, before it has
111111# an IP address. NOTE: this also exposes MAC access on WAN — restrict to a
112112# management interface list once setup is complete.
113113/tool mac-server
114- set allowed-interface-list=all
114+ set allowed-interface-list=LAN
115115/tool mac-server mac-winbox
116- set allowed-interface-list=all
116+ set allowed-interface-list=LAN
117117/tool mac-server ping
118- set enabled=yes
118+ set enabled=no
119119# Disable the bandwidth-test server (open by default, common attack vector).
120120/tool bandwidth-server
121121set enabled=no
@@ -129,8 +129,14 @@ set disable-ipv6=yes
129129set time-zone-name=Asia/Yekaterinburg
130130/system ntp client
131131set enabled=yes
132- /system ntp client servers
133- add address=pool.ntp.org
132+
133+ # Для ROS7
134+ /system ntp client
135+ set enabled=yes servers=pool.ntp.org
136+
137+ # Для ROS6
138+ /system ntp client
139+ set enabled=yes server-dns-names=pool.ntp.org
134140
135141# Act as an NTP server for downstream clients.
136142/system ntp server
@@ -140,7 +146,13 @@ set enabled=yes
140146# Logging — suppress info-level messages for DHCP and Wireless
141147# ---------------------------------------------------------------------------
142148/system logging
143- set [find where topics="info"] topics=info,!dhcp,!wireless,!wifi
149+ set [find where topics="info"] topics=info,!dhcp
150+
151+ # для ROS6 или ROS7 c WiFi (пакет wireless)
152+ set [find where topics="info"] topics=info,!dhcp,!wireless
153+
154+ # Для ROS7 с WiFI (пакет wifi)
155+ set [find where topics="info"] topics=info,!dhcp,!wifi
144156
145157# ---------------------------------------------------------------------------
146158# RouterOS package update channel — use the long-term (stable) release branch
0 commit comments