QUOTE(soonwai @ Mar 2 2018, 09:57 PM)
Thank you so much. Here is my export. I tried making some changes earlier and clients no longer get IPv6 addresses so I guessed I'm even worse off now than previously. QUOTE
# mar/05/2018 20:51:35 by RouterOS 6.41.2
# software id = LQ3F-HNQ5
#
# model = RouterBOARD 952Ui-5ac2nD
# serial number = 71B2069FA9E7
/interface bridge
add fast-forward=no mtu=1500 name=HyppTV
add admin-mac=6C:3B:6B:51:76:CB auto-mac=no comment=defconf fast-forward=no \
name=bridge
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether5 ] comment=IPTV poe-out=off
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn comment=2.4GHz country=malaysia \
disabled=no distance=indoors frequency=2437 frequency-mode=\
regulatory-domain mode=ap-bridge ssid=[snip] wireless-protocol=802.11 \
wmm-support=enabled wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee \
comment=5GHz country=malaysia disabled=no distance=indoors frequency=auto \
frequency-mode=regulatory-domain mode=ap-bridge ssid=[snip] \
wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/interface wireless nstreme
set wlan1 comment=2.4GHz
set wlan2 comment=5GHz
/interface wireless manual-tx-power-table
set wlan1 comment=2.4GHz
set wlan2 comment=5GHz
/interface vlan
add interface=ether1 name=vlan500 vlan-id=500
add interface=ether1 name=vlan600 vlan-id=600
/interface pppoe-client
add add-default-route=yes default-route-distance=0 disabled=no interface=\
vlan500 keepalive-timeout=60 name="TM Unifi" password=[snip] user=\
[snip]
/interface list
add exclude=dynamic name=discover
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=\
"[snip]" \
wpa2-pre-shared-key=\
"[snip]"
add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=guest \
supplicant-identity=MikroTik wpa-pre-shared-key=[snip] \
wpa2-pre-shared-key=[snip]
/interface wireless
add disabled=no mac-address=6E:3B:6B:51:76:CF master-interface=wlan2 name=wlan3 \
security-profile=guest ssid=[snip] wps-mode=disabled
add disabled=no mac-address=6E:3B:6B:51:76:D0 master-interface=wlan1 name=wlan4 \
security-profile=guest ssid=[snip] wps-mode=disabled
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=PoolIPv4 ranges=192.168.1.100-192.168.1.129
/ip dhcp-server
add address-pool=PoolIPv4 disabled=no interface=bridge lease-time=2h name=\
DHCPIPv4
/ipv6 pool
add name=PoolIPv6 prefix=2001::/64 prefix-length=64
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge filter
add action=drop chain=forward in-interface=wlan3
add action=drop chain=forward out-interface=wlan3
add action=drop chain=forward in-interface=wlan4
add action=drop chain=forward out-interface=wlan4
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf hw=no interface=wlan1
add bridge=bridge comment=defconf hw=no interface=wlan2
add bridge=bridge hw=no interface=wlan3
add bridge=bridge hw=no interface=wlan4
add bridge=HyppTV hw=no interface=ether5
add bridge=HyppTV hw=no interface=vlan600
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
/ip neighbor discovery-settings
set discover-interface-list=discover
/ipv6 settings
set accept-router-advertisements=yes
/interface list member
add interface=ether2-master list=mac-winbox
add interface=wlan2 list=mac-winbox
add interface=wlan1 list=mac-winbox
add interface=wlan3 list=mac-winbox
add interface=wlan4 list=mac-winbox
/interface wireless access-list
add signal-range=-90..120
add authentication=no forwarding=no signal-range=-120..-91
/ip address
add address=192.168.1.254/24 comment=defconf interface=ether2-master network=\
192.168.1.0
/ip dhcp-server lease
add address=192.168.1.1 client-id=1:D0:50:99:55:E0:91 comment=[snip] \
mac-address=D0:50:99:55:E0:91 server=DHCPIPv4
add address=192.168.1.2 client-id=1:08:D8:33:E2:A4:EC comment="[snip]" \
mac-address=08:D8:33:E2:A4:EC server=DHCPIPv4
add address=192.168.1.3 client-id=1:E8-03-9A-82-EA-5C comment="[snip]" \
mac-address=E8:03:9A:82:EA:5C server=DHCPIPv4
add address=192.168.1.222 client-id=1:4C-11-BF-18-D5-8E comment=[snip] \
mac-address=4C:11:BF:18:D5:8E server=DHCPIPv4
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf gateway=192.168.1.254 netmask=24
/ip dns
set allow-remote-requests=yes servers=\
2620:0:ccc::2,2620:0:ccd::2,208.67.222.222,208.67.220.220
/ip dns static
add address=192.168.1.254 name=router
/ip firewall filter
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface=ether1
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface="TM Unifi"
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
"TM Unifi"
/ip smb shares
set [ find default=yes ] directory=/pub
/ip ssh
set strong-crypto=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface="TM Unifi" type=external
/ipv6 address
add from-pool=PoolIPv6 interface="TM Unifi"
/ipv6 dhcp-client
add add-default-route=yes interface="TM Unifi" pool-name=PoolIPv6 request=\
prefix use-peer-dns=no
/ipv6 firewall address-list
add address=fe80::/16 list=allowed
add address=ff02::/16 comment=multicast list=allowed
/ipv6 firewall filter
add action=accept chain=input connection-state=established in-interface=\
"TM Unifi"
add action=accept chain=forward connection-state=established in-interface=\
"TM Unifi"
add action=accept chain=input connection-state=related in-interface="TM Unifi"
add action=accept chain=forward connection-state=related in-interface=\
"TM Unifi"
add action=accept chain=input in-interface="TM Unifi" src-address=fe80::/16
add action=drop chain=input in-interface="TM Unifi"
add action=drop chain=forward in-interface="TM Unifi"
/ipv6 nd
set [ find default=yes ] mtu=1480
/ipv6 nd prefix default
set preferred-lifetime=1h valid-lifetime=2h
/system clock
set time-zone-name=Asia/Kuala_Lumpur
/system logging
add topics=wireless,debug
/system ntp client
set enabled=yes primary-ntp=216.239.35.12 secondary-ntp=128.138.141.172
/tool bandwidth-server
set enabled=no
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
# software id = LQ3F-HNQ5
#
# model = RouterBOARD 952Ui-5ac2nD
# serial number = 71B2069FA9E7
/interface bridge
add fast-forward=no mtu=1500 name=HyppTV
add admin-mac=6C:3B:6B:51:76:CB auto-mac=no comment=defconf fast-forward=no \
name=bridge
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether5 ] comment=IPTV poe-out=off
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn comment=2.4GHz country=malaysia \
disabled=no distance=indoors frequency=2437 frequency-mode=\
regulatory-domain mode=ap-bridge ssid=[snip] wireless-protocol=802.11 \
wmm-support=enabled wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee \
comment=5GHz country=malaysia disabled=no distance=indoors frequency=auto \
frequency-mode=regulatory-domain mode=ap-bridge ssid=[snip] \
wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/interface wireless nstreme
set wlan1 comment=2.4GHz
set wlan2 comment=5GHz
/interface wireless manual-tx-power-table
set wlan1 comment=2.4GHz
set wlan2 comment=5GHz
/interface vlan
add interface=ether1 name=vlan500 vlan-id=500
add interface=ether1 name=vlan600 vlan-id=600
/interface pppoe-client
add add-default-route=yes default-route-distance=0 disabled=no interface=\
vlan500 keepalive-timeout=60 name="TM Unifi" password=[snip] user=\
[snip]
/interface list
add exclude=dynamic name=discover
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=\
"[snip]" \
wpa2-pre-shared-key=\
"[snip]"
add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=guest \
supplicant-identity=MikroTik wpa-pre-shared-key=[snip] \
wpa2-pre-shared-key=[snip]
/interface wireless
add disabled=no mac-address=6E:3B:6B:51:76:CF master-interface=wlan2 name=wlan3 \
security-profile=guest ssid=[snip] wps-mode=disabled
add disabled=no mac-address=6E:3B:6B:51:76:D0 master-interface=wlan1 name=wlan4 \
security-profile=guest ssid=[snip] wps-mode=disabled
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=PoolIPv4 ranges=192.168.1.100-192.168.1.129
/ip dhcp-server
add address-pool=PoolIPv4 disabled=no interface=bridge lease-time=2h name=\
DHCPIPv4
/ipv6 pool
add name=PoolIPv6 prefix=2001::/64 prefix-length=64
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge filter
add action=drop chain=forward in-interface=wlan3
add action=drop chain=forward out-interface=wlan3
add action=drop chain=forward in-interface=wlan4
add action=drop chain=forward out-interface=wlan4
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf hw=no interface=wlan1
add bridge=bridge comment=defconf hw=no interface=wlan2
add bridge=bridge hw=no interface=wlan3
add bridge=bridge hw=no interface=wlan4
add bridge=HyppTV hw=no interface=ether5
add bridge=HyppTV hw=no interface=vlan600
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
/ip neighbor discovery-settings
set discover-interface-list=discover
/ipv6 settings
set accept-router-advertisements=yes
/interface list member
add interface=ether2-master list=mac-winbox
add interface=wlan2 list=mac-winbox
add interface=wlan1 list=mac-winbox
add interface=wlan3 list=mac-winbox
add interface=wlan4 list=mac-winbox
/interface wireless access-list
add signal-range=-90..120
add authentication=no forwarding=no signal-range=-120..-91
/ip address
add address=192.168.1.254/24 comment=defconf interface=ether2-master network=\
192.168.1.0
/ip dhcp-server lease
add address=192.168.1.1 client-id=1:D0:50:99:55:E0:91 comment=[snip] \
mac-address=D0:50:99:55:E0:91 server=DHCPIPv4
add address=192.168.1.2 client-id=1:08:D8:33:E2:A4:EC comment="[snip]" \
mac-address=08:D8:33:E2:A4:EC server=DHCPIPv4
add address=192.168.1.3 client-id=1:E8-03-9A-82-EA-5C comment="[snip]" \
mac-address=E8:03:9A:82:EA:5C server=DHCPIPv4
add address=192.168.1.222 client-id=1:4C-11-BF-18-D5-8E comment=[snip] \
mac-address=4C:11:BF:18:D5:8E server=DHCPIPv4
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf gateway=192.168.1.254 netmask=24
/ip dns
set allow-remote-requests=yes servers=\
2620:0:ccc::2,2620:0:ccd::2,208.67.222.222,208.67.220.220
/ip dns static
add address=192.168.1.254 name=router
/ip firewall filter
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface=ether1
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface="TM Unifi"
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
"TM Unifi"
/ip smb shares
set [ find default=yes ] directory=/pub
/ip ssh
set strong-crypto=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface="TM Unifi" type=external
/ipv6 address
add from-pool=PoolIPv6 interface="TM Unifi"
/ipv6 dhcp-client
add add-default-route=yes interface="TM Unifi" pool-name=PoolIPv6 request=\
prefix use-peer-dns=no
/ipv6 firewall address-list
add address=fe80::/16 list=allowed
add address=ff02::/16 comment=multicast list=allowed
/ipv6 firewall filter
add action=accept chain=input connection-state=established in-interface=\
"TM Unifi"
add action=accept chain=forward connection-state=established in-interface=\
"TM Unifi"
add action=accept chain=input connection-state=related in-interface="TM Unifi"
add action=accept chain=forward connection-state=related in-interface=\
"TM Unifi"
add action=accept chain=input in-interface="TM Unifi" src-address=fe80::/16
add action=drop chain=input in-interface="TM Unifi"
add action=drop chain=forward in-interface="TM Unifi"
/ipv6 nd
set [ find default=yes ] mtu=1480
/ipv6 nd prefix default
set preferred-lifetime=1h valid-lifetime=2h
/system clock
set time-zone-name=Asia/Kuala_Lumpur
/system logging
add topics=wireless,debug
/system ntp client
set enabled=yes primary-ntp=216.239.35.12 secondary-ntp=128.138.141.172
/tool bandwidth-server
set enabled=no
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
Mar 5 2018, 09:02 PM

Quote




0.0297sec
0.81
6 queries
GZIP Disabled