Mikrotik ki configration

 

یہ MikroTik RouterOS کی basic router configuration ہے جو آپ کے دئیے گئے Scenario کے مطابق ہے۔

سادہ الفاظ میں یہ کن کاموں کے لیے ہے:

  • ether1 کو WAN کے طور پر configure کرنا

  • Public IP, Subnet, Gateway اور DNS set کرنا

  • ether2 اور ether3 پر دو الگ LAN networks بنانا

  • ether2 پر DHCP server چلانا

  • ether3 کو صرف static IPs پر رکھنا یعنی وہاں DHCP نہیں چلے گا

  • Internet share کرنے کے لیے NAT masquerade لگانا

  • کچھ basic firewall rules اور services hardening کرنا



Mikrotik ki conf karden simple , router model is MikroTik RouterOS 6.49.8 (c) 1999-2023

Port 1 = WAN IP 180.178.134.198
		Subnet=255.255.255.252
		GW= 180.178.134.197
		DNS= 180.178.128.100
		DNS= 180.178.139.210


Eth 2 = LAN IP 10.10.10.0/24
Eth 3 = LAN IP 10.10.20.0/24

Eth 2 LAN say DHCP nikalna ha 
Ehh 3 LAN StatIC IP per ho 

 MikroTik RouterOS 6.49.8 (c) 1999-2023


=============================================================================================================

Scenario Summary

ether1 = WAN

IP: 180.178.134.198/30

Gateway: 180.178.134.197

DNS: 180.178.128.100, 180.178.139.210

ether2 = LAN (DHCP enable)

Network: 10.10.10.0/24

ether3 = LAN (Static IP only)

Network: 10.10.20.0/24

DHCP nahi chalay ga

===============================================================================================================

/ip address add address=180.178.134.198/30 interface=ether1

/ip route add gateway=180.178.134.197

/ip dns set servers=180.178.128.100,180.178.139.210 allow-remote-requests=yes

/ip address add address=10.10.10.1/24 interface=ether2

/ip address add address=10.10.20.1/24 interface=ether3

/ip pool add name=dhcp_pool_lan ranges=10.10.10.10-10.10.10.200

/ip dhcp-server add name=dhcp_lan interface=ether2 address-pool=dhcp_pool_lan lease-time=1d

/ip dhcp-server network add address=10.10.10.0/24 gateway=10.10.10.1 dns-server=180.178.128.100,180.178.139.210

/ip dhcp-server enable dhcp_lan

/ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

/ip dns set servers=180.178.128.100,180.178.139.210,8.8.8.8 allow-remote-requests=yes

/ip service disable telnet

/ip service set ssh address=10.10.10.0/24,10.10.20.0/24

/ip firewall filter add chain=input connection-state=invalid action=drop

/ip firewall filter add chain=input connection-state=established,related action=accept

/ip firewall filter add chain=input src-address=10.10.10.0/24 action=accept
/ip firewall filter add chain=input src-address=10.10.20.0/24 action=accept
/ip firewall filter add chain=input in-interface=ether1 action=drop

Comments

Post a Comment

Popular posts from this blog

Windows 11 rdp problem resolved

Windows 11 rdp problem resolved Remote Desktop Connection  Failed to reconnect to your remote session. Please try to connect again.  [OK]  Error code: 0x1108 Extended error code: 0x0 Timestamp (UTC): 02/16/26 03:36:44 AM Press Ctrl+C to copy. Win10 ➜ Win10 کام کر رہا ہے Win11 24H2 ➜ Win10 پر ہی 0x1108 آ رہا ہے پورٹ 3389 LISTEN کر رہی ہے LAN بھی same ہے تو اب مسئلہ Windows 11 24H2 کے نئے RDP encryption mode کا ہے۔ یہ TLS 1.3 prefer کرتا ہے جبکہ بعض Win10 builds TLS 1.2 پر ہوتے ہیں۔ ہم Win11 کو force کریں گے کہ وہ پرانا compatible mode استعمال کرے۔ 🔴 FINAL COMPATIBILITY FIX (Win11 24H2) یہ صرف Windows 11 پر Admin CMD میں چلائیں: reg add "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" /v Enabled /t REG_DWORD /d 0 /f reg add "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" /v DisabledByDefault /t REG_DWORD /d 1 /f reg add "HKLM\SYSTEM\CurrentControlSet\Co...
Read more

Microsoft Activation Scripts (MAS)

  irm https://get.activated.win | iex irm https://massgrave.dev/get | iex Download / How to use it? ​ Method 1 - PowerShell (Recommended) ​ Right-click on the Windows start menu and select PowerShell or Terminal (Not CMD). Copy and paste the code below and press enter irm https://get.activated.win | iex or (deprecated, will be retired on Aug 31 2024, use above instead) irm https://massgrave.dev/get | iex You will see the activation options. Follow the on-screen instructions. That's all. On older Windows builds you may need to run the below command before, [Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12 The Powershell method does not work on Windows 7. Use the Method 2 - Traditional instead. The URL get.activated.win may be blocked by some DNS services because it is a new domain. Method 2 - Traditional ​ Download the file under the code button from  GitHub  or  Bitbucket Right-click on the downloaded zip file and extract In the extracted ...
Read more

Windows 11 ke common RDP issues fix karta hai

  🧾 Use ka tareeqa Notepad kholo Upar wala code paste karo File save karo as: rdp_fix.bat Right-click → Run as Administrator ⚠️ Note Yeh script Windows 11 ke common RDP issues fix karta hai Agar phir bhi issue aaye to network ya server-side config check karna padega -------------------------------------------------------------------------- @echo off title RDP Fix Tool - Windows 11 color 0A echo =============================== echo RDP Fix Script (Win11) echo =============================== echo. :: Run as admin check net session >nul 2>&1 if %errorLevel% NEQ 0 ( echo [ERROR] Please run this script as Administrator! pause exit ) echo [1] Disabling RDP UDP (Fix for disconnect/lag)... reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client" /v fClientDisableUDP /t REG_DWORD /d 1 /f echo [2] Enabling Remote Desktop Firewall Rules... netsh advfirewall firewall set rule group="remote desktop" new enable=Yes echo [3] Ope...
Read more