18de750507
Makerspace experiment: plug into ether8 and get a 192.168.88.x lease, reach the admin at http://192.168.88.1 (web UI re-enabled) / WinBox / SSH. Login still required; default admin stays disabled. mamba keeps static .2 (outside the pool). New flags switch_web_enabled + switch_mgmt_dhcp_enabled/pool/network (off by default). Verified: www HTTP 200, lease handed out + bound, run-twice idempotent. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
42 lines
1.6 KiB
Text
42 lines
1.6 KiB
Text
# 2025-09-11 10:21:40 by RouterOS 7.19.6
|
|
# software id = 73S3-5F2W
|
|
#
|
|
# model = CRS310-8G+2S+
|
|
# serial number = HM40B8TDNDD
|
|
/interface bridge
|
|
add admin-mac=D0:EA:11:24:F4:AA auto-mac=no comment=defconf name=bridge \
|
|
vlan-filtering=yes
|
|
/interface vlan
|
|
add interface=bridge name=vlan-mgmt vlan-id=99
|
|
/ip pool
|
|
add name=mgmt-pool ranges=192.168.88.10-192.168.88.254
|
|
/interface bridge port
|
|
add bridge=bridge comment=defconf interface=ether1 pvid=30
|
|
add bridge=bridge comment=defconf interface=ether2 pvid=30
|
|
add bridge=bridge comment=defconf interface=ether3 pvid=30
|
|
add bridge=bridge comment=defconf interface=ether4 pvid=30
|
|
add bridge=bridge comment=defconf interface=ether5 pvid=30
|
|
add bridge=bridge comment=defconf interface=ether6 pvid=30
|
|
add bridge=bridge comment=defconf interface=ether7 pvid=30
|
|
add bridge=bridge comment=defconf interface=ether8 pvid=99
|
|
add bridge=bridge comment=defconf interface=sfp-sfpplus1 pvid=30
|
|
add bridge=bridge comment=defconf interface=sfp-sfpplus2 pvid=30
|
|
/interface bridge vlan
|
|
add bridge=bridge untagged="ether1,ether2,ether3,ether4,ether5,ether6,ether7,s\
|
|
fp-sfpplus1,sfp-sfpplus2" vlan-ids=30
|
|
add bridge=bridge tagged=bridge untagged=ether8 vlan-ids=99
|
|
/ip address
|
|
add address=192.168.88.1/24 interface=vlan-mgmt network=192.168.88.0
|
|
/ip dhcp-server
|
|
add address-pool=mgmt-pool interface=vlan-mgmt lease-time=1h name=mgmt-dhcp
|
|
/ip dhcp-server network
|
|
add address=192.168.88.0/24 gateway=192.168.88.1
|
|
/ip service
|
|
set ftp disabled=yes
|
|
set telnet disabled=yes
|
|
set api disabled=yes
|
|
set api-ssl disabled=yes
|
|
/system identity
|
|
set name=crs310-maker
|
|
/system ntp client servers
|
|
add address=10.0.99.1
|