LINUX.ORG.RU

История изменений

Исправление ravdinve, (текущая версия) :

Я не имею ни малейшего представления про Multicast на MikroTik т.к. сам не сталкивался, но по поводу покрытия Wi-Fi я точно уверен, что все должно быть хорошо. Вот моя стандартная конфигурация, вроде бы все лишнее, относящееся к моей сети, вырезал. Попробуй ее. У меня квартира сейчас около 70 кв. м., 2 комнаты, MikroTik hAP (один из самых дешевых, кстати) стоит примерно по центру квартиры, везде прием отличный. Ах да, стены - бетон. И прошивку обновить не забудь.

/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=Ce name=channel1 tx-power=30
add band=5ghz-onlyac control-channel-width=20mhz extension-channel=Ceee name=channel2 tx-power=30
/interface bridge
add fast-forward=no name=bridge1
/caps-man datapath
add bridge=bridge1 client-to-client-forwarding=yes name=datapath1
add bridge=bridge1 client-to-client-forwarding=yes name=datapath2
/caps-man security
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=security1 passphrase=passphrase
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=security2 passphrase=passphrase
/caps-man configuration
add channel=channel1 datapath=datapath1 name=cfg1 rx-chains=0,1 security=security1 ssid=2.4_GHZ tx-chains=0,1
add channel=channel2 datapath=datapath2 name=cfg2 rx-chains=0,1,2 security=security2 ssid=5_GHZ tx-chains=0,1
/ip pool
add name=dhcp_pool1 ranges=192.168.0.2-192.168.0.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge1 name=dhcp1
/caps-man access-list
add action=accept disabled=no signal-range=-120..120 ssid-regexp=""
add action=reject disabled=no ssid-regexp=""
/caps-man manager
set enabled=yes upgrade-policy=require-same-version
/caps-man provisioning
add action=create-enabled hw-supported-modes=gn master-configuration=cfg1
add action=create-enabled hw-supported-modes=ac master-configuration=cfg2
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
/interface wireless cap
set discovery-interfaces=bridge1 enabled=yes interfaces=wlan1
/ip address
add address=192.168.0.1/16 interface=bridge1 network=192.168.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1 use-peer-ntp=no
/ip dhcp-server network
add address=192.168.0.0/16 dns-server=192.168.0.1 gateway=192.168.0.1
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add action=accept chain=input in-interface=ether1 protocol=icmp
add action=accept chain=input comment=winbox disabled=yes dst-port=8291 in-interface=ether1 protocol=tcp
add action=fasttrack-connection chain=input connection-state=established,related
add action=accept chain=input connection-state=established,related
add action=accept chain=input connection-nat-state=dstnat connection-state=new
add action=drop chain=input connection-state=invalid
add action=fasttrack-connection chain=forward connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=accept chain=forward connection-nat-state=dstnat connection-state=new
add action=drop chain=forward connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 src-address=192.168.0.0/16
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge1 type=internal
add interface=ether1 type=external
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Vilnius
/system ntp client
set enabled=yes server-dns-names=pool.ntp.org

Исходная версия ravdinve, :

Я не имею ни малейшего представления про Multicast на MikroTik т.к. сам не сталкивался, но по поводу покрытия Wi-Fi я точно уверен, что все должно быть хорошо. Вот моя стандартная конфигурация, вроде бы все лишнее, относящееся к моей сети, вырезал. Попробуй ее. У меня квартира сейчас около 70 кв. м., 2 комнаты, MikroTik hAP (один из самых дешевых, кстати) стоит примерно по центру квартиры, везде прием отличный. Ах да, стены - бетон.

/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=Ce name=channel1 tx-power=30
add band=5ghz-onlyac control-channel-width=20mhz extension-channel=Ceee name=channel2 tx-power=30
/interface bridge
add fast-forward=no name=bridge1
/caps-man datapath
add bridge=bridge1 client-to-client-forwarding=yes name=datapath1
add bridge=bridge1 client-to-client-forwarding=yes name=datapath2
/caps-man security
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=security1 passphrase=passphrase
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=security2 passphrase=passphrase
/caps-man configuration
add channel=channel1 datapath=datapath1 name=cfg1 rx-chains=0,1 security=security1 ssid=2.4_GHZ tx-chains=0,1
add channel=channel2 datapath=datapath2 name=cfg2 rx-chains=0,1,2 security=security2 ssid=5_GHZ tx-chains=0,1
/ip pool
add name=dhcp_pool1 ranges=192.168.0.2-192.168.0.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge1 name=dhcp1
/caps-man access-list
add action=accept disabled=no signal-range=-120..120 ssid-regexp=""
add action=reject disabled=no ssid-regexp=""
/caps-man manager
set enabled=yes upgrade-policy=require-same-version
/caps-man provisioning
add action=create-enabled hw-supported-modes=gn master-configuration=cfg1
add action=create-enabled hw-supported-modes=ac master-configuration=cfg2
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
/interface wireless cap
set discovery-interfaces=bridge1 enabled=yes interfaces=wlan1
/ip address
add address=192.168.0.1/16 interface=bridge1 network=192.168.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1 use-peer-ntp=no
/ip dhcp-server network
add address=192.168.0.0/16 dns-server=192.168.0.1 gateway=192.168.0.1
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add action=accept chain=input in-interface=ether1 protocol=icmp
add action=accept chain=input comment=winbox disabled=yes dst-port=8291 in-interface=ether1 protocol=tcp
add action=fasttrack-connection chain=input connection-state=established,related
add action=accept chain=input connection-state=established,related
add action=accept chain=input connection-nat-state=dstnat connection-state=new
add action=drop chain=input connection-state=invalid
add action=fasttrack-connection chain=forward connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=accept chain=forward connection-nat-state=dstnat connection-state=new
add action=drop chain=forward connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 src-address=192.168.0.0/16
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge1 type=internal
add interface=ether1 type=external
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Vilnius
/system ntp client
set enabled=yes server-dns-names=pool.ntp.org