热点的多VLAN，桥，DHCP服务器，子网划分

jike106397

1. :local cadd 10.4.0.0
   
2. :local cdns 8.8.8.8
   
3. :local cname
   
4. :local ss 192.168.168.8/24
   
5. :local vfrom 2021
   
6. :local vto 3000
   
7. :local j 0.0.0.0
   
8. /system identi set name=2.2.2.2
   
9. /ip address add interface=ether3 address=$ss
   
10. /ip route add gateway=192.168.168.1
    
11. /ip dns set server=$cdns
    
12. /interface bridge add name=bridge-hotspot
    
13. /interface bridge port add bridge=bridge-hotspot interface=ether1
    
14. /interface bridge port add bridge=bridge-hotspot interface=ether2
    
15. /interface bridge port add bridge=bridge-hotspot interface=ether5
    
16. /ip firewall address-list add list=dshoublist address=($cadd . "/16")
    
17. /ip firewall mangle add chain=prerouting src-address-list=dshoublist action=sniff-tzsp  sniff-target=9.9.9.9 sniff-target-port=37008
    
18. /ip firewall nat add chain=srcnat action=masq src-address-list=dshoublist
    
19. 
    
20. 
    
21. :for i from=$vfrom to=$vto do={
    
22. :set $j (((($cadd>>5)+$i-$vfrom)<<5)+1)
    
23. /interface vlan add interface=bridge-hotspot vlan-id=$i name=("vlan-" . $i)
    
24. /interface bridge add name=("bridge-" . $i)
    
25. /interface bridge port add bridge=("bridge-" . $i) interface=("vlan-" . $i)
    
26. 
    
27. 
    
28. /ip address add interface=("bridge-" . $i) address=($j . "/27")
    
29. /ip pool  add name=("pool-" . $i) ranges=(($j+1) . "-" . ($j+29))
    
30. /ip dhcp-server network add gateway=$j address=(($j-1) . "/27") dns-server=8.8.8.8
    
31. /ip dhcp-server add name=("dhcp-server-" . $i) interface=("bridge-" . $i) address-pool=("pool-" . $i)
    
32. 
    
33. 
    
34. /ip hotspot profile add copy-from=0 hotspot-address=$j name=("hotspot-profile-" . $i) use-radius=yes
    
35. /ip hotspot add name=("hotspot-server-" . $i) interface=("bridge-" . $i) address-pool=("pool-" . $i) profile=("hotspot-profile-" . $i) disabled=no
    
36. 
    
37. }

复制代码

原文：http://blog.dshoub.com/?id=17