· 8 years ago · Jun 11, 2018, 08:20 AM
1! $$$ Model: Keenetic Giga
2! $$$ Version: 2.06.1
3! $$$ Agent: http/ci
4! $$$ Last change: Sun, 10 Jun 2018 19:57:54 GMT
5! $$$ Md5 checksum: c99d5e2df9add47702b83fd8fc8649fa
6
7system
8 set net.ipv4.ip_forward 1
9 set net.ipv4.tcp_fin_timeout 30
10 set net.ipv4.tcp_keepalive_time 120
11 set net.ipv4.neigh.default.gc_thresh1 256
12 set net.ipv4.neigh.default.gc_thresh2 1024
13 set net.ipv4.neigh.default.gc_thresh3 2048
14 set net.ipv6.neigh.default.gc_thresh1 256
15 set net.ipv6.neigh.default.gc_thresh2 1024
16 set net.ipv6.neigh.default.gc_thresh3 2048
17 set net.netfilter.nf_conntrack_tcp_timeout_established 1200
18 set net.netfilter.nf_conntrack_max 16384
19 set vm.swappiness 60
20 set vm.overcommit_memory 0
21 set vm.vfs_cache_pressure 1000
22 set dev.usb.force_usb2 0
23 set net.ipv6.conf.all.forwarding 1
24 clock timezone Europe/Moscow
25 clock date 10 Jun 2018 22:58:15
26 domainname WORKGROUP
27 hostname Keenetic
28!
29ntp server 0.pool.ntp.org
30ntp server 1.pool.ntp.org
31ntp server 2.pool.ntp.org
32ntp server 3.pool.ntp.org
33known host * 00:24:1d:ce:00:ac
34known host * 00:90:a9:37:00:55
35known host * e4:e0:c5:93:00:ba
36isolate-private
37user admin
38 password md5 7db64f48890c869b19b96d093b95e3ed
39 password nt f843b5971988ebc3e347e50b9413ef5a
40 tag cli
41 tag http
42 tag cifs
43 tag printers
44!
45dyndns profile _WEBADMIN
46 type noip
47 domain *.myftp.org
48 username *@gmail.com
49 password *
50 no send-address
51!
52interface GigabitEthernet0
53 up
54!
55interface GigabitEthernet0/0
56 rename 1
57 switchport mode access
58 switchport access vlan 1
59 up
60!
61interface GigabitEthernet0/1
62 rename 2
63 switchport mode access
64 switchport access vlan 1
65 up
66!
67interface GigabitEthernet0/2
68 rename 3
69 switchport mode access
70 switchport access vlan 1
71 up
72!
73interface GigabitEthernet0/3
74 rename 4
75 switchport mode access
76 switchport access vlan 1
77 up
78!
79interface GigabitEthernet0/Vlan1
80 description "Home VLAN"
81 security-level private
82 ip dhcp client dns-routes
83 ip dhcp client name-servers
84 up
85!
86interface GigabitEthernet0/Vlan3
87 description "Guest VLAN"
88 security-level protected
89 ip dhcp client dns-routes
90 ip dhcp client name-servers
91 up
92!
93interface GigabitEthernet1
94 rename ISP
95 description "Broadband connection"
96 mac address factory wan
97 security-level public
98 ip address dhcp
99 ip dhcp client hostname Keenetic_Giga
100 ip dhcp client dns-routes
101 ip dhcp client name-servers
102 ip mtu 1400
103 ip adjust-ttl inc 1
104 igmp upstream
105 ipv6 address auto
106 ipv6 prefix auto
107 ipv6 name-servers auto
108 up
109!
110interface GigabitEthernet1/0
111 rename 0
112 ipv6 address auto
113 ipv6 prefix auto
114 ipv6 name-servers auto
115 up
116!
117interface WifiMaster0
118 country-code US
119 compatibility BGN
120 channel width 40-below
121 tx-burst
122 beamforming explicit mu-mimo
123 vht
124 up
125!
126interface WifiMaster0/AccessPoint0
127 rename AccessPoint
128 description "Wi-Fi access point"
129 mac access-list type none
130 security-level private
131 authentication wpa-psk ns3 Njd6pvQYcdaKKnzamV+MXPAt
132 encryption enable
133 encryption wpa2
134 ip dhcp client dns-routes
135 ip dhcp client name-servers
136 ssid *
137 hide-ssid
138 wmm
139 up
140!
141interface WifiMaster0/AccessPoint1
142 rename GuestWiFi
143 description "Guest access point"
144 mac access-list type none
145 security-level private
146 ip dhcp client dns-routes
147 ip dhcp client name-servers
148 ssid Guest
149 wmm
150 down
151!
152interface WifiMaster0/AccessPoint2
153 mac access-list type none
154 security-level private
155 ip dhcp client dns-routes
156 ip dhcp client name-servers
157 down
158!
159interface WifiMaster0/AccessPoint3
160 mac access-list type none
161 security-level private
162 ip dhcp client dns-routes
163 ip dhcp client name-servers
164 down
165!
166interface WifiMaster0/WifiStation0
167 security-level public
168 encryption disable
169 ip dhcp client dns-routes
170 ip dhcp client name-servers
171 down
172!
173interface WifiMaster1
174 country-code US
175 compatibility AN+AC
176 channel width 40-below/80
177 tx-burst
178 band-steering
179 beamforming explicit mu-mimo
180 up
181!
182interface WifiMaster1/AccessPoint0
183 rename AccessPoint_5G
184 description "5Ghz Wi-Fi access point"
185 mac access-list type none
186 security-level private
187 authentication wpa-psk ns3 Njd6pvQYcdaKKnzamV+MXPAt
188 encryption enable
189 encryption wpa2
190 ip dhcp client dns-routes
191 ip dhcp client name-servers
192 ssid *5Ghz
193 wmm
194 up
195!
196interface WifiMaster1/AccessPoint1
197 mac access-list type none
198 security-level private
199 ip dhcp client dns-routes
200 ip dhcp client name-servers
201 down
202!
203interface WifiMaster1/AccessPoint2
204 mac access-list type none
205 security-level private
206 ip dhcp client dns-routes
207 ip dhcp client name-servers
208 down
209!
210interface WifiMaster1/AccessPoint3
211 mac access-list type none
212 security-level private
213 ip dhcp client dns-routes
214 ip dhcp client name-servers
215 down
216!
217interface WifiMaster1/WifiStation0
218 security-level public
219 encryption disable
220 ip dhcp client dns-routes
221 ip dhcp client name-servers
222 down
223!
224interface Bridge0
225 rename Home
226 description "Home network"
227 inherit GigabitEthernet0/Vlan1
228 include AccessPoint
229 include AccessPoint_5G
230 security-level private
231 ip address 192.168.1.1 255.255.255.0
232 ip dhcp client dns-routes
233 ip dhcp client name-servers
234 igmp downstream
235 up
236!
237interface Bridge1
238 rename Guest
239 description "Guest network"
240 traffic-shape rate 5120
241 inherit GigabitEthernet0/Vlan3
242 include GuestWiFi
243 security-level protected
244 ip address 10.1.30.1 255.255.255.0
245 ip dhcp client dns-routes
246 ip dhcp client name-servers
247 up
248!
249interface L2TP0
250 description "beeline internet"
251 peer tp.internet.beeline.ru
252 dyndns profile _WEBADMIN
253 no ipv6cp
254 lcp echo 30 3
255 ipcp default-route
256 ipcp name-servers
257 ipcp dns-routes
258 no ccp
259 security-level public
260 authentication identity *
261 authentication password *
262 authentication chap
263 ip address dhcp
264 ip dhcp client dns-routes
265 ip dhcp client name-servers
266 ip mtu 1400
267 ip global 33117
268 ip tcp adjust-mss pmtu
269 connect via ISP
270 up
271 bandwidth-limit 99000
272!
273interface OpenVPN0
274 description OpenVPN
275 security-level public
276 ip dhcp client dns-routes
277 ip dhcp client name-servers
278 ip global 16558
279 ip tcp adjust-mss pmtu
280 openvpn accept-routes
281 up
282!
283ip dhcp pool _WEBADMIN
284 range 192.168.1.2 192.168.1.11
285 lease 25200
286 bind Home
287 enable
288!
289ip dhcp pool _WEBADMIN_GUEST_AP
290 range 10.1.30.33 10.1.30.52
291 bind Guest
292 enable
293!
294ip dhcp host 00:24:1d:ce:b6:ac 192.168.1.2
295ip dhcp host 00:90:a9:37:05:55 192.168.1.3
296ip dhcp host e4:e0:c5:93:93:ba 192.168.1.4
297ip http security-level private
298ip http lockout-policy 5 15 3
299ip http ssl redirect
300ip nat Home
301ip nat Guest
302ip nat vpn
303ip static tcp L2TP0 6112 00:24:1d:ce:b6:ac 6112 !war3
304ip static udp L2TP0 3478 00:24:1d:ce:b6:ac 3478 !csgo
305ip static udp L2TP0 4379 00:24:1d:ce:b6:ac 4379 !csgo2
306ip static udp L2TP0 4380 00:24:1d:ce:b6:ac 4380 !csgo3
307ip static tcp L2TP0 27000 through 27050 00:24:1d:ce:b6:ac !csgo4
308ip static udp L2TP0 27000 through 27050 00:24:1d:ce:b6:ac !csgo5
309ip static tcp L2TP0 4467 00:90:a9:37:05:55 80 !nas
310ip telnet
311 security-level private
312 lockout-policy 5 15 3
313!
314ip hotspot
315 host 00:24:1d:ce:b6:ac permit
316 host 00:90:a9:37:05:55 permit
317 host e4:e0:c5:93:93:ba deny
318!
319ipv6 subnet Default
320 bind Home
321 number 0
322 mode slaac
323!
324ipv6 firewall
325ppe software
326ppe hardware
327upnp lan Home
328vpn-server
329 interface Home
330 pool-range 172.16.1.33 30
331 multi-login
332 lcp echo 30 3
333!
334service dhcp
335service dns-proxy
336service igmp-proxy
337service http
338service telnet
339service ntp-client
340service upnp
341service ntce
342cifs
343 automount
344!
345ntce shaping
346components
347 auto-update disable
348!
349!