현1116; 라우터/196; Ǹ16;고1080;lj16; 0120;크/196;ᔘ1;(mikrotik) RB751G-2HnD 모델 설1221;1077;니다.(가1221;용 회선 사용)
1068;0152; 공유기1221;도1032; 세ᔚ1;에서 웹프/197;시가 추가됐고 WAN 포트1032; 맥Ǻ12;드/112;스lj16; 1204;에 Ǹ16;Nj12; 공유기1032; 맥Ǻ12;드/112;스1064;데 IP가 0148;뀌lj16;,152; 0169;1648;Ȣ16;기 위해 변ᅆ1;했습니다.

0120;크/196;ᔘ1;1008; 윈0149;스를 1228;외한 모든 서비스를 닫아놨고 아래 PPTP 유1200; ǥ12;ǥ16;1008; 실1228; 서비스 .104;lj16; ǥ12;ǥ16;1060;라 예시만 들Ǻ12;놨습니다.

포트lj16; 1번 WAN포트, 2,3,4포트 내ǥ12;, 5번포트lj16; 브ና1;1648;/196; IPTV에 대1025;Ȣ16;기 위해 공1064;아1060;피를 0155;lj16; 설1221;1077;니다.

0120;크/196;ᔘ1;Ȣ16;단에lj16; 웹,DNS,메1068;,시놀/196;1648;,FTPመ1;1060; 서비스/196; 돌아갑니다.

커맨드 옆에 간단Ȣ16;,172; 1452;석 달아놨습니다. 1665;에서 사용Ȣ16;시lj16; ǥ16;들 참고Ȣ16;시면 1339;,192;습니다.

(더 효율1201;1064; 설1221; 1080;1004;면 공유1328; 해1452;시구요^^)

세ᔚ1; : DHCP, VPN(PPTP), WI-FI, Web proxy, UPNP, IGMP PROXY, NTP client
# jan/27/2014 15:44:11 by RouterOS 6.7
# software id = xxxx-xxxx
#
/interface bridge
add admin-mac=D4:CA:6D:29:7B:5D arp=proxy-arp auto-mac=no l2mtu=1598 name=\
bridge-local protocol-mode=rstp
add l2mtu=1598 name=bridge-wan
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn channel-width=\
20/40mhz-ht-below country=̶1;korea republic2″ \
disabled=no distance=indoors frequency=2452 frequency-mode=superchannel \
l2mtu=2290 mode=ap-bridge name=WI-FI ssid=PGLABS-B2G // SSID 1060;름
/interface ethernet
set [ find default-name=ether2 ] comment=master name=port1
set [ find default-name=ether3 ] master-port=port1 name=port2
set [ find default-name=ether4 ] master-port=port1 name=port3
set [ find default-name=ether5 ] name=port4
set [ find default-name=ether1 ] comment=̶1;MAC 30:85:A9:E8:E8:C8″ mac-address=\ // WAN포트 맥Ǻ12;드/112;스 변ᅆ1;
30:85:A9:E8:E8:C8 name=wan
/ip neighbor discovery
set port1 comment=master
set wan comment=̶1;MAC 30:85:A9:E8:E8:C8″ discover=no
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=̶1;" mode=\ // 와1060;파1060; ǹ16;호화 WPA2
dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=2F7A02D00794 \
wpa2-pre-shared-key=비0128;번호 // 와1060;파1060; 비0128;번호
/ip pool
add name=pool_local ranges=192.168.0.150-192.168.0.230 // DHCP 내ǥ12; 아1060;피 범위
add name=pool_pptp ranges=192.168.0.231-192.168.0.253 // PPTP 내ǥ12; 아1060;피 범위
/ip dhcp-server
add add-arp=yes address-pool=pool_local always-broadcast=yes bootp-support=\
dynamic disabled=no interface=bridge-local lease-time=1w name=dhcp_local
/ppp profile
set 0 bridge=bridge-local local-address=pool_pptp only-one=no remote-address=\
pool_pptp use-encryption=yes use-ipv6=default wins-server=192.168.0.52
/interface bridge port
add bridge=bridge-local interface=port1
add bridge=bridge-local interface=WI-FI
add bridge=bridge-wan interface=wan
add bridge=bridge-wan interface=port4
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=default enabled=\
yes
/ip address
add address=192.168.0.1/24 interface=bridge-local network=192.168.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=bridge-wan
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=192.168.0.1 gateway=192.168.0.1
/ip dns
set allow-remote-requests=yes
/ip dns static // 웹프/197;시를 위한 내ǥ12; 아1060;피 도메1064; 연결 설1221;
add address=192.168.0.60 name=mystor.net
add address=192.168.0.60 name=www.mystor.net
add address=192.168.0.51 name=mail.mystor.net
add address=192.168.0.60 name=blog.mystor.net
add address=192.168.0.60 name=wallpaper.mystor.net
add address=192.168.0.60 name=alpha.mystor.net
add address=192.168.0.50 name=sy.mystor.net
add address=192.168.0.51 name=sy2.mystor.net
add address=192.168.0.52 name=ns.mystor.net
/ip firewall filter
add chain=input protocol=igmp
add chain=input connection-state=established
add chain=input connection-state=related
add chain=input connection-state=new
add action=drop chain=input protocol=icmp
add action=drop chain=input
add chain=forward connection-state=established
add chain=forward connection-state=related
add chain=forward connection-state=new
add action=drop chain=forward connection-state=invalid
/ip firewall nat // 포트포워딩 ǥ12;ǥ16;
add action=masquerade chain=srcnat comment=NAT out-interface=bridge-wan
add action=dst-nat chain=dstnat comment=DNS dst-port=53 in-interface=\
bridge-wan protocol=tcp to-addresses=192.168.0.52 to-ports=53
add action=dst-nat chain=dstnat dst-port=53 in-interface=bridge-wan protocol=\
udp to-addresses=192.168.0.52 to-ports=53
add action=redirect chain=dstnat comment=̶1;reverse proxy 80″ dst-port=80 \
in-interface=bridge-wan protocol=tcp to-ports=8080
add action=redirect chain=dstnat comment=̶1;reverse proxy 5000″ dst-port=5000 \
in-interface=bridge-wan protocol=tcp to-ports=5050
add action=dst-nat chain=dstnat comment=̶1;FTP by sy.mystor.net̶1; dst-port=2221 \
in-interface=bridge-wan protocol=tcp to-addresses=192.168.0.50 to-ports=\
2221
add action=dst-nat chain=dstnat dst-port=65500-65535 in-interface=bridge-wan \
protocol=tcp to-addresses=192.168.0.50 to-ports=65500-65535
add action=dst-nat chain=dstnat comment=̶1;MAIL by sy2.mystor.net̶1; dst-port=25 \
in-interface=bridge-wan protocol=tcp to-addresses=192.168.0.51 to-ports=\
25
add action=dst-nat chain=dstnat dst-port=587 in-interface=bridge-wan \
protocol=tcp to-addresses=192.168.0.51 to-ports=587
add action=dst-nat chain=dstnat dst-port=110 in-interface=bridge-wan \
protocol=tcp to-addresses=192.168.0.51 to-ports=110
add action=dst-nat chain=dstnat dst-port=143 in-interface=bridge-wan \
protocol=tcp to-addresses=192.168.0.51 to-ports=143
add action=dst-nat chain=dstnat dst-port=993 in-interface=bridge-wan \
protocol=tcp to-addresses=192.168.0.51 to-ports=993
add action=dst-nat chain=dstnat dst-port=995 in-interface=bridge-wan \
protocol=tcp to-addresses=192.168.0.51 to-ports=995
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
/ip proxy // 웹프/197;시 설1221; (80번 웹서버와 5000 시놀/196;1648;)
set cache-administrator=******@******.net cache-on-disk=yes enabled=yes \
max-cache-size=none max-client-connections=1440 max-fresh-time=1w \
max-server-connections=1440 parent-proxy=0.0.0.0 port=8080,5050
/ip proxy access
add dst-host=mystor.net dst-port=80
add dst-host=www.mystor.net dst-port=80
add dst-host=blog.mystor.net dst-port=80
add dst-host=wallpaper.mystor.net dst-port=80
add dst-host=alpha.mystor.net dst-port=80
add dst-host=sy.mystor.net dst-port=80
add dst-host=sy.mystor.net dst-port=5000
add dst-host=sy2.mystor.net dst-port=80
add dst-host=sy2.mystor.net dst-port=5000
add action=deny dst-port=80
add action=deny dst-port=5000
/ip proxy cache
add dst-port=80
add action=deny dst-host=sy.mystor.net dst-port=80
add action=deny dst-host=sy.mystor.net dst-port=5000
add action=deny dst-host=sy2.mystor.net dst-port=80
add action=deny dst-host=sy2.mystor.net dst-port=5000
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp // UPNP
set enabled=yes
/ip upnp interfaces
add interface=bridge-local type=internal
/ppp secret // PPTP 계1221; 설1221;
add name=user1 password=비0128;번호 service=pptp

/routing igmp-proxy // IGMP proxy
set quick-leave=yes
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0
/system clock
set time-zone-name=Asia/Seoul
/system identity
set name=̶1;MikroTik RB751G-2HnD̶1;
/system leds
set 0 interface=WI-FI
/system ntp client // NTP 클라1060;Ǻ16;트 설1221; (시간 0155;아오기)
set enabled=yes mode=unicast primary-ntp=165.246.43.176
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=port1
add interface=port2
add interface=port3
add interface=port4
add interface=WI-FI
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=port1
add interface=port2
add interface=port3
add interface=port4
add interface=WI-FI
add interface=bridge-local