Skip to content

Update autorun.scr: ISP address comment, interface lists, NAT #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gpas45 merged 2 commits into from
Jun 12, 2026
Merged

Update autorun.scr: ISP address comment, interface lists, NAT #6

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
df0cc03
Clean up autorun.scr: fix empty address, formatting, comments
claude Jun 12, 2026
2092f4e
autorun.scr: restore ISP address line with comment, add interface lis…
claude Jun 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
48 changes: 45 additions & 3 deletions routeros/autorun.scr
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,49 @@
# RouterOS minimal autorun / bootstrap script
# Basic connectivity + service hardening + time sync.
# Adjust the CHANGE_ME placeholders before importing:
# /import file-name=autorun.scr

# ---------------------------------------------------------------------------
# Basic connectivity (per-deployment — adjust address / gateway)
# ---------------------------------------------------------------------------
/ip address
add address= interface=ether1 network=10.0.0.1
add address= interface=ether1 network=10.0.0.1 comment="address issued by ISP"
/ip route
add dst-address=0.0.0.0/0 gateway=10.0.0.1
add dst-address=0.0.0.0/0 gateway=10.0.0.1 comment="CHANGE_ME: default gateway"
/ip dhcp-client
add interface=ether1 disabled=yes

# ---------------------------------------------------------------------------
# Interface lists
# ---------------------------------------------------------------------------
/interface list
add name=WAN comment="Uplinks / Internet-facing interfaces"
add name=LAN comment="Local trusted networks"
add name=StS comment="Site-to-Site tunnels"
add name=VPN comment="Remote-access VPN clients"

/interface list member
# Assign your real interfaces here, examples below:
add list=WAN interface=ether1
# add list=LAN interface=bridge
# add list=StS interface=<gre-tunnel1>
# add list=VPN interface=<wireguard1>

# ---------------------------------------------------------------------------
# Firewall NAT
# ---------------------------------------------------------------------------
/ip firewall nat
add action=masquerade chain=srcnat comment="LAN -> Internet" out-interface-list=WAN

# ---------------------------------------------------------------------------
# Admin user
# ---------------------------------------------------------------------------
/user
set 0 password="CHANGE_ME"
set 0 password="CHANGE_ME"

# ---------------------------------------------------------------------------
# Service / management hardening
# ---------------------------------------------------------------------------
/ip service
set telnet disabled=yes
set ftp disabled=yes
Expand All @@ -22,6 +60,10 @@ set allowed-interface-list=none
set enabled=no
/ipv6 settings
set disable-ipv6=yes

# ---------------------------------------------------------------------------
# Time / NTP
# ---------------------------------------------------------------------------
/system clock
set time-zone-name=Asia/Yekaterinburg
/system ntp client
Expand Down
Loading