路由器的命令及解释.docx
《路由器的命令及解释.docx》由会员分享,可在线阅读,更多相关《路由器的命令及解释.docx(15页珍藏版)》请在冰豆网上搜索。
![路由器的命令及解释.docx](https://file1.bdocx.com/fileroot1/2022-12/13/70bf55f3-b80f-457a-9e7b-d6fc457eb784/70bf55f3-b80f-457a-9e7b-d6fc457eb7841.gif)
路由器的命令及解释
路由器的命令及各命令的解释
#RouterOS命令解释
#---------------------------------------------
#1、未解释的命令为系统初始默认设置。
#2、所有命令为实际环境测试并使用的,保证没有问题,包括VPN部分和PPPoE的设置也可正常使用。
#3、使用这些命令时,要根据自己网络环境做相应修改,特别是ADSL拨号部分和手动设置IP部分要做相应改变。
#4、注意这里没有管理员密码修改命令,请注意管理员密码。
#5、为了保护隐私,有些设置项用“*”号代替,请根据实际需要修改或补充完整。
#---------------------------------------------
#jan/14/200908:
46:
50byRouterOS2.9.27
#softwareid=FQM8-46T
#
#---------------------------------------------
##设置内网外网接口名称、启用内网外网接口、内网接口ARP模式为只回应(配合ARP绑定避免ARP欺骗)。
/interfaceethernet
setwanname="wan"mtu=1500mac-address=00:
0A:
EB:
43:
FA:
F0arp=enabled\
disable-running-check=yesauto-negotiation=yesfull-duplex=yes\
cable-settings=defaultspeed=100Mbpscomment=""disabled=no
setlanname="lan"mtu=1500mac-address=00:
E0:
4C:
9E:
5B:
23arp=reply-only\
disable-running-check=yesauto-negotiation=yesfull-duplex=yes\
cable-settings=defaultspeed=100Mbpscomment=""disabled=no
#---------------------------------------------
#设置L2TP服务,因为XP连接此服务需要对XP注册表进行修改,所以不推荐使用L2TP服务。
/interfacel2tp-serverserver
setenabled=yesmax-mtu=1460max-mru=1460\
authentication=pap,chap,mschap1,mschap2default-profile=default-encryption
#---------------------------------------------
#设置PPPoE服务,客户机使用路由器中的PPPoE服务进行上网,可避免ARP欺骗,并且可进行简单的用户认证。
/interfacepppoe-serverserver
addservice-name="pppoe-service1"interface=lanmax-mtu=1488max-mru=1488\
authentication=pap,chap,mschap1,mschap2keepalive-timeout=10\
one-session-per-host=nomax-sessions=0\
default-profile=pppoe-service-profiledisabled=no
#---------------------------------------------
#添加PPTP服务器接口,远程办公人员可通过PPTP服务器接口连接到公司网络,它是VPN连接的一种方式。
/interfacepptp-server
addname="pptp-in1"user=""disabled=no
#---------------------------------------------
#设置PPTP服务器
/interfacepptp-serverserver
setenabled=yesmax-mtu=1460max-mru=1460\
authentication=pap,chap,mschap1,mschap2keepalive-timeout=120\
default-profile=default-encryption
#---------------------------------------------
#配置外网接口为ADSL拨号
/interfacepppoe-client
addname="pppoe-out1"max-mtu=1480max-mru=1480interface=wan\
user="nj***********@nj1.201"password="********"profile=default\
service-name=""ac-name=""add-default-route=yesdial-on-demand=no\
use-peer-dns=noallow=pap,chap,mschap1,mschap2disabled=no
#---------------------------------------------
#建立多个IP地址池,这些IP地址池被DHCP服务、PPPOE服务、L2TP服务和PPTP服务使用。
/ippool
addname="dhcpippool"ranges=192.168.0.181-192.168.0.190
addname="pppoe-service-pool"ranges=10.0.1.181-10.0.1.190
addname="l2tp-service-pool"ranges=10.0.3.181-10.0.3.190
addname="pptp-server-pool"ranges=10.0.2.181-10.0.2.190
#---------------------------------------------
/iptelephonyregion
/iptelephonygatekeeper
setgatekeeper=noneremote-id=""remote-address=0.0.0.0
/iptelephonyaaa
setuse-radius-accounting=nointerim-update=0s
/iptelephonycodec
moveG.711-uLaw-64k/sw
moveG.711-ALaw-64k/sw
moveG.729A-8k/sw
moveG.729-8k/sw
moveG.723.1-6.3k/sw
moveGSM-06.10-13.2k/sw
moveLPC-10-2.5k/sw
/ipaccounting
setenabled=noaccount-local-traffic=nothreshold=256
/ipaccountingweb-access
setaccessible-via-web=noaddress=0.0.0.0/0
#---------------------------------------------
#修改路由器的服务端口
/ipservice
settelnetport=23address=0.0.0.0/0disabled=no
setftpport=2121address=0.0.0.0/0disabled=no
setwwwport=8080address=0.0.0.0/0disabled=no
setsshport=22address=0.0.0.0/0disabled=no
setwww-sslport=443address=0.0.0.0/0certificate=nonedisabled=yes
#---------------------------------------------
/ipupnp
setenabled=noallow-disable-external-interface=yesshow-dummy-rule=yes
#---------------------------------------------
#绑定ARP
/iparp
addaddress=192.168.0.3mac-address=00:
15:
F2:
CF:
F7:
8Ainterface=lancomment=""\
disabled=no
addaddress=192.168.0.10mac-address=00:
1D:
60:
8D:
40:
65interface=lan\
comment=""disabled=no
addaddress=192.168.0.12mac-address=00:
E0:
A0:
13:
9B:
97interface=lan\
comment=""disabled=no
addaddress=192.168.0.18mac-address=00:
13
4:
C5:
5C:
60interface=lan\
comment=""disabled=no
addaddress=192.168.0.26mac-address=00:
15:
F2:
3A:
E7:
B2interface=lan\
comment=""disabled=no
addaddress=192.168.0.32mac-address=00:
1D:
60
8:
67:
19interface=lan\
comment=""disabled=no
addaddress=192.168.0.250mac-address=00:
0B:
6A:
89:
F7:
CEinterface=lan\
comment=""disabled=no
addaddress=192.168.0.251mac-address=00:
E0:
4C:
71:
BD:
4Binterface=lan\
comment=""disabled=no
addaddress=192.168.0.244mac-address=00:
0E:
A6:
8A:
9C:
83interface=lan\
comment=""disabled=no
addaddress=192.168.0.1mac-address=00:
1A:
92:
EF:
B1:
9Dinterface=lancomment=""\
disabled=no
addaddress=192.168.0.14mac-address=00:
15:
F2:
EB:
F7:
CCinterface=lan\
comment=""disabled=no
addaddress=192.168.0.30mac-address=00:
15:
F2:
90:
5C
3interface=lan\
comment=""disabled=no
addaddress=192.168.0.37mac-address=00:
1D:
60:
D8:
68:
EEinterface=lan\
comment=""disabled=no
addaddress=192.168.0.44mac-address=00:
1B:
FC:
5B:
0E:
3Dinterface=lan\
comment=""disabled=no
addaddress=192.168.0.49mac-address=00:
13:
D4:
D3:
13:
24interface=lan\
comment=""disabled=no
addaddress=192.168.0.53mac-address=00:
15:
F2:
EB:
F8:
5Binterface=lan\
comment=""disabled=no
addaddress=192.168.0.247mac-address=00:
0F:
1F:
81:
73:
21interface=lan\
comment=""disabled=no
addaddress=192.168.0.252mac-address=00:
02:
B3:
38:
3A:
C5interface=lan\
comment=""disabled=no
addaddress=192.168.0.201mac-address=00:
1B:
FC:
92:
1D:
F8interface=lan\
comment=""disabled=no
addaddress=192.168.0.225mac-address=00:
17:
31:
42:
F5:
BFinterface=lan\
comment=""disabled=no
addaddress=192.168.0.227mac-address=00:
1A:
4D:
95:
EB:
0Dinterface=lan\
comment=""disabled=no
addaddress=192.168.0.36mac-address=00:
1A:
92:
98:
98:
3Binterface=lan\
comment=""disabled=no
addaddress=192.168.0.43mac-address=00:
1A:
92:
D6:
CE:
2Einterface=lan\
comment=""disabled=no
addaddress=192.168.0.62mac-address=00:
1F:
C6:
22:
34:
BBinterface=lan\
comment=""disabled=no
addaddress=192.168.0.64mac-address=00:
15:
F2:
EB:
F9:
3Dinterface=lan\
comment=""disabled=no
addaddress=192.168.0.253mac-address=00:
0F:
CB:
73:
24:
20interface=lan\
comment=""disabled=no
addaddress=192.168.0.22mac-address=00:
15:
F2:
EB:
F8:
5Finterface=lan\
comment=""disabled=no
addaddress=192.168.0.58mac-address=00:
1F:
C6:
C8:
EC:
07interface=lan\
comment=""disabled=no
addaddress=192.168.0.66mac-address=00:
1D:
60:
45:
6C:
30interface=lan\
comment=""disabled=no
addaddress=192.168.0.48mac-address=00:
1A:
92:
98:
98:
A2interface=lan\
comment=""disabled=no
addaddress=192.168.0.57mac-address=00:
15:
F2:
3A:
E7:
C6interface=lan\
comment=""disabled=no
addaddress=192.168.0.59mac-address=00:
1E:
8C:
26:
13:
5Dinterface=lan\
comment=""disabled=no
addaddress=192.168.0.202mac-address=00:
11:
D8:
C4:
A7:
0Binterface=lan\
comment=""disabled=no
addaddress=192.168.0.203mac-address=00:
E0:
4C:
39:
1C:
B0interface=lan\
comment=""disabled=no
addaddress=192.168.0.204mac-address=00:
18:
F3:
FE:
B8:
14interface=lan\
comment=""disabled=no
addaddress=192.168.0.206mac-address=00:
1F:
C6:
AB:
F7:
9Finterface=lan\
comment=""disabled=no
addaddress=192.168.0.207mac-address=00:
0C:
6E:
3F:
78:
E2interface=lan\
comment=""disabled=no
addaddress=192.168.0.208mac-address=00:
1A:
92:
EF:
B0:
39interface=lan\
comment=""disabled=no
addaddress=192.168.0.209mac-address=00:
13:
D4:
C5:
5B:
68interface=lan\
comment=""disabled=no
addaddress=192.168.0.210mac-address=00:
15:
F2:
EB:
F8:
C4interface=lan\
comment=""disabled=no
addaddress=192.168.0.215mac-address=00:
1B:
FC:
92:
1C:
6Dinterface=lan\
comment=""disabled=no
addaddress=192.168.0.221mac-address=00:
22:
15:
C5:
CE:
FFinterface=lan\
comment=""disabled=no
addaddress=192.168.0.222mac-address=00:
0C:
6E:
0B:
8A:
25interface=lan\
comment=""disabled=no
addaddress=192.168.0.223mac-address=00:
11:
D8:
75:
E3:
D2interface=lan\
comment=""disabled=no
addaddress=192.168.0.224mac-address=00:
11:
D8:
42:
80:
88interface=lan\
comment=""disabled=no
addaddress=192.168.0.234mac-address=00:
E0:
18:
95:
62:
A9interface=lan\
comment=""disabled=no
addaddress=192.168.0.245mac-address=00:
15:
F2:
EB:
F8:
85interface=lan\
comment=""disabled=no
addaddress=192.168.0.230mac-address=00:
1F:
C6:
C8:
EC:
53interface=lan\
comment=""disabled=no
addaddress=192.168.0.11mac-address=00:
15:
F2:
EB:
F7:
CAinterface=lan\
comment=""disabled=no
addaddress=192.168.0.17mac-address=00:
1D:
60:
4A:
B7:
3Ainterface=lan\
comment=""disabled=no
addaddress=192.168.0.29mac-address=00:
22:
15:
81:
8C:
5Einterface=lan\
comment=""disabled=no
addaddress=192.168.0.4mac-address=00:
0B:
6A:
90:
20:
3Finterface=lancomment=""\
disabled=no
addaddress=192.168.0.231mac-address=00:
1B:
FC:
92:
1C:
69interface=lan\
comment=""disabled=no
addaddress=192.168.0.9mac-address=00:
1D:
60:
8D:
40:
19interface=lancomment=""\
disabled=no
addaddress=192.168.0.13mac-address=00:
15:
F2:
EB:
F8:
57interface=lan\
comment=""disabled=no
addaddress=192.168.0.15mac-address=00:
22:
15:
A1:
31:
55interface=lan\
comment=""disabled=no
addaddress=192.168.0.19mac-address=00:
1D:
60:
D8:
66:
FBinterface=lan\
comment=""disabled=no
addaddress=192.168.0.23mac-address=00:
15:
F2:
EB:
F8:
53interface=lan\
comment=""disabled=no
addaddress=192.168.0.24mac-address=00:
1B:
FC:
5B:
0E:
23interface=lan\
comment=""disabled=no
addaddress=192.168.0.25mac-address=00:
15:
F2:
EB:
F8:
51interface=lan\
comment=""disabled=no
addaddress=192.168.0.35mac-address=00:
15:
F2:
EB:
F8:
78interface=lan\