Mikrotik开局配置

随笔22小时前发布 山支阿毛
1 0 0

一、LAN口桥接

1:添加桥接

/interface/bridge/add name=lan

2:把端口加到桥接

/interface/bridge/port/add interface=ether2 bridge=lan
/interface/bridge/port/add interface=ether3 bridge=lan
/interface/bridge/port/add interface=ether4 bridge=lan

3:创建VLAN

/interface/vlan/add name=vlan2001 interface=lan vlan-id=2001
/interface/vlan/add name=vlan2002 interface=lan vlan-id=2002

二、IP地址和路由配置

1:添加内网IP地址添加到接口(也可以是VLAN)

/ip/address/add address=172.16.99.254/24 interface=lan
/ip/address/add address=10.10.1.254/24 interface=vlan2001
/ip/address/add address=10.10.2.254/24 interface=vlan2001

2:添加外网IP地址到接口

/ip/address/add address=192.168.51.101/24 interface=ether1
/ip/address/add address=192.168.51.102/24 interface=ether1

3:添加默认网关到路由表

/ip/route/add dst-address=0.0.0.0/0 gateway=192.168.51.254

4:设置DNS

/ip/dns/set servers=8.8.4.4,8.8.8.8

三、添加NAT

1:添加客户上网用NAT

/ip/firewall/nat/add chain=srcnat src-address=10.10.1.0/24 action=src-nat to-addresses=192.168.51.101
/ip/firewall/nat/add chain=srcnat src-address=10.10.2.0/24 action=src-nat to-addresses=192.168.51.102

2:添加远程管理内部设备用NAT

/ip/firewall/nat/add chain=dstnat dst-address=192.168.51.101 dst-port=9901 protocol=tcp action=dst-nat to-addresses=172.16.99.1 to-ports=80

四、添加DHCP

1:添加IP地址池

/ip/pool/add name=vlan2001 ranges=10.10.1.1-10.10.1.253
/ip/pool/add name=vlan2002 ranges=10.10.2.1-10.10.2.253

2:添加DHCP服务器

/ip/dhcp-server/add name=vlan2001 interface=vlan2001 address-pool=vlan2001
/ip/dhcp-server/add name=vlan2002 interface=vlan2002 address-pool=vlan2002

3:添加DHCP分配网络信息

/ip/dhcp-server/network/add address=10.10.1.0/24 gateway=10.10.1.254 dns-server=10.10.1.254,8.8.4.4
/ip/dhcp-server/network/add address=10.10.2.0/24 gateway=10.10.2.254 dns-server=10.10.2.254,8.8.4.4
© 版权声明

相关文章

暂无评论

您必须登录才能参与评论!
立即登录
暂无评论...