/ip pool
add name=dhcp_pool1 ranges=172.16.0.2-172.16.0.254
add name=Remoto ranges=10.0.1.2-10.0.1.254
/ppp profile
set default change-tcp-mss=yes name=default only-one=yes session-timeout=1h \
use-compression=no use-encryption=no use-mpls=default use-vj-compression=no
add change-tcp-mss=yes dns-server=10.0.1.1 local-address=10.0.1.1 name=\
"pppoe-clientes 40" only-one=yes rate-limit=90k/400k remote-address=Remoto \
use-compression=no use-encryption=no use-mpls=default use-vj-compression=no
add change-tcp-mss=yes dns-server=10.0.1.1 local-address=10.0.1.1 name=\
"pppoe_clientes 50" only-one=yes rate-limit=100k/600k remote-address=Remoto \
use-compression=no use-encryption=no use-mpls=default use-vj-compression=no
set default-encryption change-tcp-mss=yes name=default-encryption only-one=default \
use-compression=default use-encryption=yes use-mpls=default use-vj-compression=\
default
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 comment=\
"================Discadores===============" dial-on-demand=no disabled=yes \
interface=ether1 max-mru=1480 max-mtu=1480 mrru=disabled name=pppoe-out1 password=\
spe profile=default service-name="" use-peer-dns=yes user=\
[email protected]
/queue type
set default kind=pfifo name=default pfifo-limit=50
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 red-burst=\
20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=5
set default-small kind=pfifo name=default-small pfifo-limit=10
/interface pppoe-server server
add authentication=chap,mschap1,mschap2 default-profile="pppoe_clientes 50" disabled=no \
interface="Clientes ether5" keepalive-timeout=10 max-mru=1480 max-mtu=1480 \
max-sessions=0 mrru=disabled one-session-per-host=no service-name=pppoe_server
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption enabled=no \
keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/ip address
add address=172.16.0.1/24 disabled=no interface="Clientes ether5" network=172.16.0.0
add address=172.16.0.0/24 dns-server=200.204.0.10,200.204.0.138,8.8.8.8,8.8.4.4 gateway=\
172.16.0.1
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=20048KiB max-udp-packet-size=\
512 servers=200.204.0.10,200.204.0.138
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
disabled=yes
add action=accept chain=forward comment=\
"=========================libera acesso aos clientes ==========================" \
disabled=no src-address=10.0.1.2
add action=accept chain=forward disabled=no dst-address=10.0.1.2
add action=drop chain=forward comment="========================Bloqueia acesso aos client\
es na rede interna ========================" disabled=no dst-address=10.0.1.0/24 \
src-address=10.0.1.0/24
add action=drop chain=input disabled=no dst-port=22 in-interface=pppoe-out2 protocol=tcp
add action=drop chain=output disabled=no dst-port=22 out-interface=pppoe-out2 protocol=\
tcp
/ip firewall nat
add action=masquerade chain=srcnat comment="masquerade pppoe network" disabled=no \
src-address=10.0.1.0/24
/ip service
set telnet disabled=yes port=23
set ftp disabled=no port=21
set www disabled=no port=80
set ssh disabled=no port=22
set www-ssl certificate=none disabled=yes port=443
set api disabled=yes port=8728
set winbox disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip ssh
set forwarding-enabled=no
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no inactive-flow-timeout=15s \
interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
add disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no lsr-id=\
0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0 use-explicit-null=no
/port firmware
set directory=firmware
/ppp aaa
set accounting=yes interim-update=0s use-radius=no
/ppp secret
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=\
[email protected] password=86350928 profile="pppoe-clientes 40" \
remote-address=10.0.1.6 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=mrosangela \
password=273933 profile="pppoe-clientes 40" remote-address=10.0.1.7 routes="" \
service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=oziris password=\
ozirisaraujo profile="pppoe_clientes 50" remote-address=10.0.1.8 routes="" service=\
pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=\
[email protected] password=1606 profile="pppoe_clientes 50" \
remote-address=10.0.1.9 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=\
[email protected] password=42441777 profile="pppoe_clientes 50" \
remote-address=10.0.1.10 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=\
[email protected] password=80566366 profile="pppoe_clientes 50" \
remote-address=10.0.1.11 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=sonia password=\
30082004 profile="pppoe_clientes 50" remote-address=10.0.1.12 routes="" service=\
pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=sueli password=0201 \
profile="pppoe-clientes 40" remote-address=10.0.1.13 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=valdemar password=\
rafaela profile="pppoe-clientes 40" remote-address=10.0.1.14 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=bob password=bob \
profile="pppoe-clientes 40" remote-address=10.0.1.3 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=mailson password=\
molekzika profile="pppoe-clientes 40" remote-address=10.0.1.5 routes="" service=\
pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=fui password=hip \
profile="pppoe-clientes 40" remote-address=10.0.1.4 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=admin password=hip \
profile="pppoe_clientes 50" remote-address=10.0.1.2 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=jorjinho password=\
carol5797 profile="pppoe-clientes 40" remote-address=10.0.1.15 routes="" service=\
pppoe
add caller-id=00:16:EC:30:90:CB disabled=no limit-bytes-in=0 limit-bytes-out=0 name=\
helio password=dpi6095 profile="pppoe-clientes 40" remote-address=10.0.1.16 routes=\
"" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=\
[email protected] password=1020 profile="pppoe-clientes 40" remote-address=\
10.0.1.17 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=lucas password=\
agatha profile="pppoe_clientes 50" remote-address=10.0.1.18 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=\
[email protected] password=9503 profile="pppoe-clientes 40" remote-address=\
10.0.1.49 routes="" service=pppoe
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 name=\
[email protected] password=eversonrocha profile="pppoe_clientes 50" \
remote-address=10.0.1.15 routes="" service=pppoe
/queue interface
set ether1 queue=ethernet-default
set ether2 queue=ethernet-default
set "Clientes ether5" queue=ethernet-default