sjat/MakerFLOSS_Mikrotik
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
MakerFLOSS_Mikrotik/backups/crs310-maker/export.rsc

43 lines
1.6 KiB
Text
Raw Permalink Normal View History

feat(mgmt): DHCP server + web UI on the isolated mgmt VLAN Makerspace experiment: plug into ether8 and get a 192.168.88.x lease, reach the admin at http://192.168.88.1 (web UI re-enabled) / WinBox / SSH. Login still required; default admin stays disabled. mamba keeps static .2 (outside the pool). New flags switch_web_enabled + switch_mgmt_dhcp_enabled/pool/network (off by default). Verified: www HTTP 200, lease handed out + bound, run-twice idempotent. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 12:55:03 +02:00
# 2025-09-11 10:21:40 by RouterOS 7.19.6
feat(backup): export + binary backup, fetch into repo Implements Task 8. play_backup.yml ensures the local dir then includes backup.yml, which runs /export + /system backup save and pulls both over SCP (net_get). Binary .backup is gitignored (may contain secrets); export.rsc is committed. Verified against crs310-maker on the bench: both artifacts fetched non-empty. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-08 19:36:14 +02:00
# software id = 73S3-5F2W
#
# model = CRS310-8G+2S+
# serial number = HM40B8TDNDD
/interface bridge
fix(vlans): robust bridge-IP removal; record cutover + gotchas RouterOS 'find ... address=<prefix>' never matches an ip/address value, so the legacy-bridge-IP removal is now a :foreach get-and-compare. Refresh the committed export.rsc to the post-cutover config (flat VLAN 30 + isolated mgmt VLAN 99 on ether8, vlan-filtering on). Spec updated with execution notes (NM autoconnect flap, the find-address quirk, and the commit-confirmed detached-flip technique used). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 12:38:04 +02:00
add admin-mac=D0:EA:11:24:F4:AA auto-mac=no comment=defconf name=bridge \
vlan-filtering=yes
/interface vlan
add interface=bridge name=vlan-mgmt vlan-id=99
feat(mgmt): DHCP server + web UI on the isolated mgmt VLAN Makerspace experiment: plug into ether8 and get a 192.168.88.x lease, reach the admin at http://192.168.88.1 (web UI re-enabled) / WinBox / SSH. Login still required; default admin stays disabled. mamba keeps static .2 (outside the pool). New flags switch_web_enabled + switch_mgmt_dhcp_enabled/pool/network (off by default). Verified: www HTTP 200, lease handed out + bound, run-twice idempotent. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 12:55:03 +02:00
/ip pool
add name=mgmt-pool ranges=192.168.88.10-192.168.88.254
feat(backup): export + binary backup, fetch into repo Implements Task 8. play_backup.yml ensures the local dir then includes backup.yml, which runs /export + /system backup save and pulls both over SCP (net_get). Binary .backup is gitignored (may contain secrets); export.rsc is committed. Verified against crs310-maker on the bench: both artifacts fetched non-empty. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-08 19:36:14 +02:00
/interface bridge port
fix(vlans): robust bridge-IP removal; record cutover + gotchas RouterOS 'find ... address=<prefix>' never matches an ip/address value, so the legacy-bridge-IP removal is now a :foreach get-and-compare. Refresh the committed export.rsc to the post-cutover config (flat VLAN 30 + isolated mgmt VLAN 99 on ether8, vlan-filtering on). Spec updated with execution notes (NM autoconnect flap, the find-address quirk, and the commit-confirmed detached-flip technique used). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 12:38:04 +02:00
add bridge=bridge comment=defconf interface=ether1 pvid=30
add bridge=bridge comment=defconf interface=ether2 pvid=30
add bridge=bridge comment=defconf interface=ether3 pvid=30
add bridge=bridge comment=defconf interface=ether4 pvid=30
add bridge=bridge comment=defconf interface=ether5 pvid=30
add bridge=bridge comment=defconf interface=ether6 pvid=30
add bridge=bridge comment=defconf interface=ether7 pvid=30
add bridge=bridge comment=defconf interface=ether8 pvid=99
add bridge=bridge comment=defconf interface=sfp-sfpplus1 pvid=30
add bridge=bridge comment=defconf interface=sfp-sfpplus2 pvid=30
/interface bridge vlan
add bridge=bridge untagged="ether1,ether2,ether3,ether4,ether5,ether6,ether7,s\
fp-sfpplus1,sfp-sfpplus2" vlan-ids=30
add bridge=bridge tagged=bridge untagged=ether8 vlan-ids=99
feat(backup): export + binary backup, fetch into repo Implements Task 8. play_backup.yml ensures the local dir then includes backup.yml, which runs /export + /system backup save and pulls both over SCP (net_get). Binary .backup is gitignored (may contain secrets); export.rsc is committed. Verified against crs310-maker on the bench: both artifacts fetched non-empty. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-08 19:36:14 +02:00
/ip address
fix(vlans): robust bridge-IP removal; record cutover + gotchas RouterOS 'find ... address=<prefix>' never matches an ip/address value, so the legacy-bridge-IP removal is now a :foreach get-and-compare. Refresh the committed export.rsc to the post-cutover config (flat VLAN 30 + isolated mgmt VLAN 99 on ether8, vlan-filtering on). Spec updated with execution notes (NM autoconnect flap, the find-address quirk, and the commit-confirmed detached-flip technique used). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 12:38:04 +02:00
add address=192.168.88.1/24 interface=vlan-mgmt network=192.168.88.0
feat(mgmt): DHCP server + web UI on the isolated mgmt VLAN Makerspace experiment: plug into ether8 and get a 192.168.88.x lease, reach the admin at http://192.168.88.1 (web UI re-enabled) / WinBox / SSH. Login still required; default admin stays disabled. mamba keeps static .2 (outside the pool). New flags switch_web_enabled + switch_mgmt_dhcp_enabled/pool/network (off by default). Verified: www HTTP 200, lease handed out + bound, run-twice idempotent. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 12:55:03 +02:00
/ip dhcp-server
add address-pool=mgmt-pool interface=vlan-mgmt lease-time=1h name=mgmt-dhcp
/ip dhcp-server network
add address=192.168.88.0/24 gateway=192.168.88.1
feat(backup): export + binary backup, fetch into repo Implements Task 8. play_backup.yml ensures the local dir then includes backup.yml, which runs /export + /system backup save and pulls both over SCP (net_get). Binary .backup is gitignored (may contain secrets); export.rsc is committed. Verified against crs310-maker on the bench: both artifacts fetched non-empty. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-08 19:36:14 +02:00
/ip service
set ftp disabled=yes
set telnet disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system identity
set name=crs310-maker
/system ntp client servers
add address=10.0.99.1
Reference in a new issue Copy permalink