xx公司routeros路由设置

Routeros基本语法和常用语句配置nat拨号上网查看设备接口信息[admin@MikroTik]>/interfaceprint设置接口ip地址内网口设定[admin@MikroTik]>/ipaddress[admin@MikroTik]/ipaddress>export#oct/30/201215:46:10byRouterOS5.21#softwareid=UZTS-9HAV#/ipaddressaddaddress=54/24comment="defaultconfiguration"disabled=no\interface=ether1network=adsl拨号，并添加默认路由[admin@MikroTik]>/interfacepppoe-client[admin@MikroTik]/interfacepppoe-client>export#oct/30/201215:48:56byRouterOS5.21#softwareid=UZTS-9HAV#/interfacepppoe-clientaddac-name=""add-default-route=yesallow=pap,chap,mschap1,mschap2\dial-on-demand=nodisabled=nointerface=ether2max-mru=1480max-mtu=1480\mrru=disabledname=adsl202password=AJDKMXYTprofile=default\service-name=""use-peer-dns=nouser=075504537544@163.gd为内网出站流量，分类打tagaddaction=mark-packetchain=preroutingdisabled=nodst-address=\!/24in-interface=ether1new-packet-mark=lanoutpassthrough=\Yes添加自定义queuetype[admin@MikroTik]>/queuetype[admin@MikroTik]/queuetype>export#oct/30/201216:09:08byRouterOS5.21#softwareid=UZTS-9HAV#/queuetypeset0kind=pfifoname=defaultpfifo-limit=50set1kind=pfifoname=ethernet-defaultpfifo-limit=50set2kind=sfqname=wireless-defaultsfq-allot=1514sfq-perturb=5set3kind=redname=synchronous-defaultred-avg-packet=1000red-burst=20\red-limit=60red-max-threshold=50red-min-threshold=10set4kind=sfqname=hotspot-defaultsfq-allot=1514sfq-perturb=5addkind=pcqname=dstpcqpcq-burst-rate=0pcq-burst-threshold=0\pcq-burst-time=10spcq-classifier=dst-addresspcq-dst-address-mask=32\pcq-dst-address6-mask=128pcq-limit=50pcq-rate=0pcq-src-address-mask=32\pcq-src-address6-mask=128pcq-total-limit=2000addkind=pcqname=srcpcqpcq-burst-rate=0pcq-burst-threshold=0\pcq-burst-time=10spcq-classifier=src-addresspcq-dst-address-mask=32\pcq-dst-address6-mask=128pcq-limit=50pcq-rate=0pcq-src-address-mask=32\pcq-src-address6-mask=128pcq-total-limit=2000set7kind=nonename=only-hardware-queueset8kind=mq-pfifomq-pfifo-limit=50name=multi-queue-ethernet-defaultset9kind=pfifoname=default-smallpfifo-limit=10在内网口附加限制下载的流控规则[admin@MikroTik]>/queuetree[admin@MikroTik]/queuetree>export#oct/30/201216:06:21byRouterOS5.21#softwareid=UZTS-9HAV#/queuetreeaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=0\max-limit=20Mname=adslinpacket-mark=""parent=ether1priority=8addburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=4M\max-limit=20Mname=vippacket-mark=vipparent=adslinpriority=2queue=\dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=4M\max-limit=10Mname=wwwpacket-mark=wwwparent=adslinpriority=3queue=\dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=3M\max-limit=10Mname=mailpacket-mark=mailparent=adslinpriority=4queue=\dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=2M\max-limit=10Mname=otherpacket-mark=otherparent=adslinpriority=5\queue=dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=0\max-limit=5Mname=p2ppacket-mark=p2pparent=adslinpriority=8queue=\dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=0\max-limit=5Mname=adsloutpacket-mark=""parent=adsl202priority=8在外网口附加限制上传的流控规则addburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=0\max-limit=5Mname=lanoutpacket-mark=lanoutparent=adsloutpriority=8\queue=srcpcq配置多WAN端口映射到内部服务器设置WAN口ip地址和出站nat[admin@MikroTik]>ipaddressexport#oct/30/201216:21:18byRouterOS5.21#softwareid=UZTS-9HAV#/ipaddressaddaddress=54/24comment="defaultconfiguration"disabled=no\interface=ether1network=addaddress=9/24disabled=nointerface=ether4network=\addaddress=9/29disabled=nointerface=ether3network=\16[admin@MikroTik]>/ipfirewallnatexport#oct/30/201216:21:41byRouterOS5.21#softwareid=UZTS-9HAV#/ipfirewallnataddaction=masqueradechain=srcnatdisabled=noout-interface=adsl202addaction=masqueradechain=srcnatdisabled=noout-interface=ether3addaction=masqueradechain=srcnatdisabled=noout-interface=ether4映射WAN端口到内部服务器[admin@MikroTik]>/ipfirewallnat[admin@MikroTik]/ipfirewallnat>export#oct/30/201216:13:29byRouterOS5.21#softwareid=UZTS-9HAV#/ipfirewallnataddaction=masqueradechain=srcnatdisabled=noout-interface=adsl202addaction=masqueradechain=srcnatdisabled=noout-interface=ether3addaction=masqueradechain=srcnatdisabled=noout-interface=ether4addaction=dst-natchain=dstnatcomment=mail_dianxindisabled=nodst-port=25\in-interface=ether3protocol=tcpto-addresses=50addaction=dst-natchain=dstnatcomment=mis_dianxindisabled=nodst-port=8002\in-interface=ether3protocol=tcpto-addresses=50to-ports=80addaction=dst-natchain=dstnatcomment=pop_dianxindisabled=nodst-port=110\in-interface=ether3protocol=tcpto-addresses=50addaction=dst-natchain=dstnatcomment=mail_wangtongdisabled=nodst-port=25\in-interface=ether4protocol=tcpto-addresses=50addaction=dst-natchain=dstnatcomment=pop_wangtongdisabled=nodst-port=110\in-interface=ether4protocol=tcpto-addresses=50addaction=dst-natchain=dstnatcomment=mis_wangtongdisabled=nodst-port=\8002in-interface=ether4protocol=tcpto-addresses=50\to-ports=80addaction=dst-natchain=dstnatcomment=web_dianxindisabled=nodst-port=80\in-interface=ether3protocol=tcpto-addresses=52to-ports=80addaction=dst-natchain=dstnatcomment=crm_dianxindisabled=nodst-port=8001\in-interface=ether3protocol=tcpto-addresses=52addaction=dst-natchain=dstnatcomment=crm_wangtongdisabled=nodst-port=\8001in-interface=ether4protocol=tcpto-addresses=52addaction=dst-natchain=dstnatcomment=web_wangtongdisabled=nodst-port=80\in-interface=ether4protocol=tcpto-addresses=52to-ports=80addaction=dst-natchain=dstnatcomment=rdp_wangtongdisabled=nodst-port=\3389in-interface=ether4protocol=tcpto-addresses=8addaction=dst-natchain=dstnatcomment=rdp_dianxindisabled=nodst-port=3389\in-interface=ether3protocol=tcpto-addresses=8addaction=dst-natchain=dstnatcomment=rdp2_dianxindisabled=nodst-port=\3390in-interface=ether3protocol=tcpto-addresses=9addaction=dst-natchain=dstnatcomment=rpd2_wangtongdisabled=nodst-port=\3390in-interface=ether4protocol=tcpto-addresses=9标记WAN口进来的映射连接[admin@MikroTik]>/ipfirewallmangle[admin@MikroTik]/ipfirewallmangle>export#oct/30/201216:24:55byRouterOS5.21#softwareid=UZTS-9HAV#/ipfirewallmangleaddaction=mark-routingchain=preroutingconnection-mark=wan4disabled=no\in-interface=ether1new-routing-mark=wangtongpassthrough=yesaddaction=mark-routingchain=preroutingconnection-mark=wan3disabled=no\in-interface=ether1new-routing-mark=dianxinpassthrough=yesaddaction=mark-connectionchain=preroutingdisabled=noin-interface=ether3\new-connection-mark=wan3passthrough=yesaddaction=mark-connectionchain=preroutingdisabled=noin-interface=ether4\new-connection-mark=wan4passthrough=yesaddaction=mark-packetchain=forwarddisabled=nodst-address-list=vip\in-interface=adsl202new-packet-mark=vippassthrough=noaddaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=p2pp2p=all-p2ppassthrough=noaddaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=wwwpassthrough=noprotocol=tcpsrc-port=80addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=wwwpassthrough=noprotocol=tcpsrc-port=443addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=ftppassthrough=noprotocol=tcpsrc-port=20addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=ftppassthrough=noprotocol=tcpsrc-port=21addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=dnspassthrough=noprotocol=tcpsrc-port=53addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=dnspassthrough=noprotocol=udpsrc-port=53addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=mailpassthrough=noprotocol=tcpsrc-port=25addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=mailpassthrough=noprotocol=tcpsrc-port=110addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=mailpassthrough=noprotocol=tcpsrc-port=995addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=mailpassthrough=noprotocol=tcpsrc-port=465addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=mailpassthrough=noprotocol=tcpsrc-port=587addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=icmppassthrough=noprotocol=icmpaddaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=otherpassthrough=noaddaction=mark-packetchain=preroutingdisabled=nodst-address=\!/24in-interface=ether1new-packet-mark=lanoutpassthrough=\yes设置映射连接的回流路由[admin@MikroTik]>iprouteexport#oct/30/201216:26:09byRouterOS5.21#softwareid=UZTS-9HAV#/iprouteaddcheck-gateway=pingdisabled=nodistance=1dst-address=/0gateway=\22routing-mark=dianxinscope=30target-scope=10addcheck-gateway=pingdisabled=nodistance=1dst-address=/0gateway=\2routing-mark=wangtongscope=30target-scope=10配置端口回流，内网客户端使用公网ip访问内网服务器。DSTNAT[admin@MikroTik]>/ipfirewallnatexport#oct/30/201216:33:12byRouterOS5.21#softwareid=UZTS-9HAV#/ipfirewallnataddaction=masqueradechain=srcnatdisabled=noout-interface=adsl202addaction=masqueradechain=srcnatdisabled=noout-interface=ether3addaction=masqueradechain=srcnatdisabled=noout-interface=ether4addaction=dst-natchain=dstnatcomment=mail_dianxindisabled=nodst-port=25\in-interface=ether3protocol=tcpto-addresses=50addaction=dst-natchain=dstnatcomment=mis_dianxindisabled=nodst-port=8002\in-interface=ether3protocol=tcpto-addresses=50to-ports=80addaction=dst-natchain=dstnatcomment=pop_dianxindisabled=nodst-port=110\in-interface=ether3protocol=tcpto-addresses=50addaction=dst-natchain=dstnatcomment=mail_wangtongdisabled=nodst-port=25\in-interface=ether4protocol=tcpto-addresses=50addaction=dst-natchain=dstnatcomment=pop_wangtongdisabled=nodst-port=110\in-interface=ether4protocol=tcpto-addresses=50addaction=dst-natchain=dstnatcomment=mis_wangtongdisabled=nodst-port=\8002in-interface=ether4protocol=tcpto-addresses=50\to-ports=80addaction=dst-natchain=dstnatcomment=web_dianxindisabled=nodst-port=80\in-interface=ether3protocol=tcpto-addresses=52to-ports=80addaction=dst-natchain=dstnatcomment=crm_dianxindisabled=nodst-port=8001\in-interface=ether3protocol=tcpto-addresses=52addaction=dst-natchain=dstnatcomment=crm_wangtongdisabled=nodst-port=\8001in-interface=ether4protocol=tcpto-addresses=52addaction=dst-natchain=dstnatcomment=web_wangtongdisabled=nodst-port=80\in-interface=ether4protocol=tcpto-addresses=52to-ports=80addaction=dst-natchain=dstnatcomment=rdp_wangtongdisabled=nodst-port=\3389in-interface=ether4protocol=tcpto-addresses=8addaction=dst-natchain=dstnatcomment=rdp_dianxindisabled=nodst-port=3389\in-interface=ether3protocol=tcpto-addresses=8addaction=dst-natchain=dstnatcomment=rdp2_dianxindisabled=nodst-port=\3390in-interface=ether3protocol=tcpto-addresses=9addaction=dst-natchain=dstnatcomment=rpd2_wangtongdisabled=nodst-port=\3390in-interface=ether4protocol=tcpto-addresses=9addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=80in-interface=ether1protocol=tcpto-addresses=52addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=80in-interface=ether1protocol=tcpto-addresses=52addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=8001in-interface=ether1protocol=tcpto-addresses=52addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=8001in-interface=ether1protocol=tcpto-addresses=52addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=25in-interface=ether1protocol=tcpto-addresses=50addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=25in-interface=ether1protocol=tcpto-addresses=50addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=110in-interface=ether1protocol=tcpto-addresses=50addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=110in-interface=ether1protocol=tcpto-addresses=50addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=25in-interface=ether1protocol=tcpto-addresses=50addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=25in-interface=ether1protocol=tcpto-addresses=50addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=8002in-interface=ether1protocol=tcpto-addresses=50addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=8002in-interface=ether1protocol=tcpto-addresses=50addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=3389in-interface=ether1protocol=tcpto-addresses=8addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=3389in-interface=ether1protocol=tcpto-addresses=8addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=3390in-interface=ether1protocol=tcpto-addresses=9addaction=dst-natchain=dstnatdisabled=nodst-address=9\dst-port=3390in-interface=ether1protocol=tcpto-addresses=9addaction=masqueradechain=srcnatdisabled=noout-interface=ether1\src-address=/24端口回流addaction=masqueradechain=srcnatdisabled=noout-interface=ether1\src-address=/24附录：1.routeros所有配置及说明[admin@MikroTik]>export#oct/30/201216:42:30byRouterOS5.21#softwareid=UZTS-9HAV#/interfaceethernetset0arp=enabledauto-negotiation=yescable-settings=defaultcomment=lan\disable-running-check=yesdisabled=nofull-duplex=yesl2mtu=9014\mac-address=00:A1:E0:11:24:A9mtu=1500name=ether1speed=100Mbpsset1arp=enabledauto-negotiation=yescable-settings=defaultcomment=\adsl:up20M:down:2Mdisable-running-check=yesdisabled=nofull-duplex=yes\l2mtu=9014mac-address=00:A1:E0:11:24:AAmtu=1500name=ether2speed=\100Mbpsset2arp=enabledauto-negotiation=yescable-settings=default\disable-running-check=yesdisabled=nofull-duplex=yesl2mtu=9014\mac-address=00:A1:E0:11:24:ADmtu=1500name=ether5speed=100Mbpsset3arp=enabledauto-negotiation=yescable-settings=defaultcomment=\GQ_dianxin:up10M:down10Mdisable-running-check=yesdisabled=no\full-duplex=yesl2mtu=9014mac-address=00:A1:E0:11:24:ABmtu=1500name=\ether3speed=100Mbpsset4arp=enabledauto-negotiation=yescable-settings=defaultcomment=\GQ_liantong:up10M:down10Mdisable-running-check=yesdisabled=no\full-duplex=yesl2mtu=9014mac-address=00:A1:E0:11:24:ACmtu=1500name=\ether4speed=100Mbpsset5arp=enabledauto-negotiation=yescable-settings=default\disable-running-check=yesdisabled=nofull-duplex=yesl2mtu=9014\mac-address=00:A1:E0:11:24:AEmtu=1500name=ether6speed=100Mbps/interfacewirelesssecurity-profilesset[finddefault=yes]authentication-types=""eap-methods=passthrough\group-ciphers=aes-ccmgroup-key-update=5minterim-update=0s\management-protection=disabledmanagement-protection-key=""mode=none\name=defaultradius-eap-accounting=noradius-mac-accounting=no\radius-mac-authentication=noradius-mac-caching=disabled\radius-mac-format=XX:XX:XX:XX:XX:XXradius-mac-mode=as-username\static-algo-0=nonestatic-algo-1=nonestatic-algo-2=nonestatic-algo-3=\nonestatic-key-0=""static-key-1=""static-key-2=""static-key-3=""\static-sta-private-algo=nonestatic-sta-private-key=""\static-transmit-key=key-0supplicant-identity=MikroTiktls-certificate=\nonetls-mode=no-certificatesunicast-ciphers=aes-ccmwpa-pre-shared-key=\""wpa2-pre-shared-key=""/iphotspotprofileset[finddefault=yes]dns-name=""hotspot-address=html-directory=\hotspothttp-cookie-lifetime=3dhttp-proxy=:0login-by=\cookie,http-chapname=defaultrate-limit=""smtp-server=\split-user-domain=nouse-radius=no/iphotspotuserprofileset[finddefault=yes]idle-timeout=nonekeepalive-timeout=2mname=default\shared-users=1status-autorefresh=1mtransparent-proxy=no/ipipsecproposalset[finddefault=yes]auth-algorithms=sha1disabled=noenc-algorithms=3des\lifetime=30mname=defaultpfs-group=modp1024/ippooladdname=landhcppoolranges=0-80/ipdhcp-serveraddaddress-pool=landhcppoolauthoritative=after-2sec-delaydisabled=no\interface=ether1lease-time=3dname=lan-dhcpserver/portset0baud-rate=9600data-bits=8flow-control=nonename=serial0parity=none\stop-bits=1set1baud-rate=9600data-bits=8flow-control=nonename=serial1parity=none\stop-bits=1/pppprofileset0change-tcp-mss=yesname=defaultonly-one=default\remote-ipv6-prefix-pool=noneuse-compression=defaultuse-encryption=\defaultuse-ipv6=yesuse-mpls=defaultuse-vj-compression=defaultset1change-tcp-mss=yesname=default-encryptiononly-one=default\remote-ipv6-prefix-pool=noneuse-compression=defaultuse-encryption=yes\use-ipv6=yesuse-mpls=defaultuse-vj-compression=default/interfacepppoe-clientaddac-name=""add-default-route=yesallow=pap,chap,mschap1,mschap2\dial-on-demand=nodisabled=nointerface=ether2max-mru=1480max-mtu=1480\mrru=disabledname=adsl202password=AJDKMXYTprofile=default\service-name=""use-peer-dns=nouser=075504537544@163.gd/queuetreeaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=0\max-limit=20Mname=adslinpacket-mark=""parent=ether1priority=8addburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=0\max-limit=5Mname=adsloutpacket-mark=""parent=adsl202priority=8/queuetypeset0kind=pfifoname=defaultpfifo-limit=50set1kind=pfifoname=ethernet-defaultpfifo-limit=50set2kind=sfqname=wireless-defaultsfq-allot=1514sfq-perturb=5set3kind=redname=synchronous-defaultred-avg-packet=1000red-burst=20\red-limit=60red-max-threshold=50red-min-threshold=10set4kind=sfqname=hotspot-defaultsfq-allot=1514sfq-perturb=5addkind=pcqname=dstpcqpcq-burst-rate=0pcq-burst-threshold=0\pcq-burst-time=10spcq-classifier=dst-addresspcq-dst-address-mask=32\pcq-dst-address6-mask=128pcq-limit=50pcq-rate=0pcq-src-address-mask=32\pcq-src-address6-mask=128pcq-total-limit=2000addkind=pcqname=srcpcqpcq-burst-rate=0pcq-burst-threshold=0\pcq-burst-time=10spcq-classifier=src-addresspcq-dst-address-mask=32\pcq-dst-address6-mask=128pcq-limit=50pcq-rate=0pcq-src-address-mask=32\pcq-src-address6-mask=128pcq-total-limit=2000set7kind=nonename=only-hardware-queueset8kind=mq-pfifomq-pfifo-limit=50name=multi-queue-ethernet-defaultset9kind=pfifoname=default-smallpfifo-limit=10/queuetreeaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=4M\max-limit=20Mname=vippacket-mark=vipparent=adslinpriority=2queue=\dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=4M\max-limit=10Mname=wwwpacket-mark=wwwparent=adslinpriority=3queue=\dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=3M\max-limit=10Mname=mailpacket-mark=mailparent=adslinpriority=4queue=\dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=2M\max-limit=10Mname=otherpacket-mark=otherparent=adslinpriority=5\queue=dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=0\max-limit=5Mname=p2ppacket-mark=p2pparent=adslinpriority=8queue=\dstpcqaddburst-limit=0burst-threshold=0burst-time=0sdisabled=nolimit-at=0\max-limit=5Mname=lanoutpacket-mark=lanoutparent=adsloutpriority=8\queue=srcpcq/routingbgpinstancesetdefaultas=65530client-to-client-reflection=yesdisabled=no\ignore-as-path-len=noname=defaultout-filter=""redistribute-connected=\noredistribute-ospf=noredistribute-other-bgp=noredistribute-rip=no\redistribute-static=norouter-id=routing-table=""/routingospfinstanceset[finddefault=yes]disabled=nodistribute-default=neverin-filter=\ospf-inmetric-bgp=autometric-connected=20metric-default=1\metric-other-ospf=autometric-rip=20metric-static=20name=default\out-filter=ospf-outredistribute-bgp=noredistribute-connected=no\redistribute-other-ospf=noredistribute-rip=noredistribute-static=no\router-id=/routingospfareaset[finddefault=yes]area-id=disabled=noinstance=defaultname=\backbonetype=default/routingospf-v3instanceset[finddefault=yes]disabled=nodistribute-default=nevermetric-bgp=auto\metric-connected=20metric-default=1metric-other-ospf=autometric-rip=20\metric-static=20name=defaultredistribute-bgp=noredistribute-connected=\noredistribute-other-ospf=noredistribute-rip=noredistribute-static=no\router-id=/routingospf-v3areaset[finddefault=yes]area-id=disabled=noinstance=defaultname=\backbonetype=default/snmpcommunityset[finddefault=yes]addresses=/0authentication-password=""\authentication-protocol=MD5encryption-password=""encryption-protocol=\DESname=publicread-access=yessecurity=nonewrite-access=no/systemloggingactionset0memory-lines=100memory-stop-on-full=noname=memorytarget=memoryset1disk-file-count=2disk-file-name=logdisk-lines-per-file=100\disk-stop-on-full=noname=disktarget=diskset2name=echoremember=yestarget=echoset3bsd-syslog=noname=remoteremote=::remote-port=514src-address=\syslog-facility=daemonsyslog-severity=autotarget=remote/tooluser-managercustomeraddbackup-allowed=yesdisabled=nologin=adminpassword=""\paypal-accept-pending=nopaypal-allowed=nopaypal-secure-response=no\permissions=ownersignup-allowed=notime-zone=-00:00/usergroupsetreadname=readpolicy="local,telnet,ssh,reboot,read,test,winbox,password,w\eb,sniff,sensitive,api,!ftp,!write,!policy"skin=defaultsetwritename=writepolicy="local,telnet,ssh,reboot,read,write,test,winbox,pa\ssword,web,sniff,sensitive,api,!ftp,!policy"skin=defaultsetfullname=fullpolicy="local,telnet,ssh,ftp,reboot,read,write,policy,test,\winbox,password,web,sniff,sensitive,api"skin=default/interfacebridgesettingssetuse-ip-firewall=nouse-ip-firewall-for-pppoe=nouse-ip-firewall-for-vlan=\no/interfacel2tp-serverserversetauthentication=pap,chap,mschap1,mschap2default-profile=\default-encryptionenabled=nomax-mru=1460max-mtu=1460mrru=disabled/interfaceovpn-serverserversetauth=sha1,md5certificate=nonecipher=blowfish128,aes128default-profile=\defaultenabled=nokeepalive-timeout=60mac-address=FE:22:25:24:98:25\max-mtu=1500mode=ipnetmask=24port=1194require-client-certificate=no/interfacepptp-serverserversetauthentication=mschap1,mschap2default-profile=default-encryption\enabled=nokeepalive-timeout=30max-mru=1460max-mtu=1460mrru=disabled/interfacesstp-serverserversetauthentication=pap,chap,mschap1,mschap2certificate=nonedefault-profile=\defaultenabled=nokeepalive-timeout=60max-mru=1500max-mtu=1500mrru=\disabledport=443verify-client-certificate=no/interfacewirelessalignsetactive-mode=yesaudio-max=-20audio-min=-100audio-monitor=\00:00:00:00:00:00filter-mac=00:00:00:00:00:00frame-size=300\frames-per-second=25receive-all=nossid-all=no/interfacewirelesssniffersetchannel-time=200msfile-limit=10file-name=""memory-limit=10\multiple-channels=noonly-headers=noreceive-errors=nostreaming-enabled=\nostreaming-max-rate=0streaming-server=/interfacewirelesssnoopersetchannel-time=200msmultiple-channels=yesreceive-errors=no/ipaccountingsetaccount-local-traffic=noenabled=yesthreshold=256/ipaccountingweb-accesssetaccessible-via-web=noaddress=/0/ipaddressaddaddress=54/24comment="defaultconfiguration"disabled=no\interface=ether1network=addaddress=9/24disabled=nointerface=ether4network=\addaddress=9/29disabled=nointerface=ether3network=\16/ipdhcp-serverconfigsetstore-leases-disk=5m/ipdhcp-servernetworkaddaddress=/24dhcp-option=""dns-server=33gateway=\54netmask=24ntp-server=""wins-server=""/ipdnssetallow-remote-requests=yescache-max-ttl=1wcache-size=2048KiB\max-udp-packet-size=4096servers=33/ipdnsstaticaddaddress=disabled=noname=routerttl=1d/ipfirewalladdress-listaddaddress=disabled=nolist=vip/ipfirewallconnectiontrackingsetenabled=yesgeneric-timeout=10micmp-timeout=10stcp-close-timeout=10s\tcp-close-wait-timeout=10stcp-established-timeout=1d\tcp-fin-wait-timeout=10stcp-last-ack-timeout=10s\tcp-syn-received-timeout=5stcp-syn-sent-timeout=5stcp-syncookie=no\tcp-time-wait-timeout=10sudp-stream-timeout=3mudp-timeout=10s/ipfirewallmangleaddaction=mark-routingchain=preroutingconnection-mark=wan4disabled=no\in-interface=ether1new-routing-mark=wangtongpassthrough=yesaddaction=mark-routingchain=preroutingconnection-mark=wan3disabled=no\in-interface=ether1new-routing-mark=dianxinpassthrough=yesaddaction=mark-connectionchain=preroutingdisabled=noin-interface=ether3\new-connection-mark=wan3passthrough=yesaddaction=mark-connectionchain=preroutingdisabled=noin-interface=ether4\new-connection-mark=wan4passthrough=yesaddaction=mark-packetchain=forwarddisabled=nodst-address-list=vip\in-interface=adsl202new-packet-mark=vippassthrough=noaddaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=p2pp2p=all-p2ppassthrough=noaddaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=wwwpassthrough=noprotocol=tcpsrc-port=80addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=wwwpassthrough=noprotocol=tcpsrc-port=443addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=ftppassthrough=noprotocol=tcpsrc-port=20addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=ftppassthrough=noprotocol=tcpsrc-port=21addaction=mark-packetchain=preroutingdisabled=noin-interface=adsl202\new-packet-mark=dnspassthrough=noprotocol=tcp