ตั้งค่า AIRCARD ZTE MF190 กับ MikroTik RB951Ui-2HnD

วันเสาร์ที่ 1 เมษายน พ.ศ. 2560

ตั้งค่า AIRCARD ZTE MF190 กับ MikroTik RB951Ui-2HnD

สำหรับการต่อ AIRCARD ZTE MF190 กับ MikroTik RB951Ui-2HnD มีขั้นตอนข่อนค่างซับซ้อน แต่ก็ไม่ยาก

ขั้นตอนแรกเราต้องทำการปลดล๊อก Port Aircard กันก่อนไม่เช่นนั้น ใน Mikrotik จะไม่เจอ port จะให้ทำให้ใช้ไม่ได้

เมื่อทำการปลดล๊อก port แล้ว เราก็จะสามาถตั้งค่าต่างได้ แต่ในตอนนี้ผมจะให้ Script 

สำหรับ เน็ตของ True แต่ของค่ายอื่น ก็ไปเปลี่ยน user pass กับ APN กันเอาเอง

/interface bridge

add name=bridge1

/interface wireless

set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid="3G"

/ip pool

add name=dhcp_pool0 ranges=192.168.88.2-192.168.88.254

/ip dhcp-server

add address-pool=dhcp_pool0 disabled=no interface=bridge1 name=dhcp1

/port

set 0 name=usb1

/interface ppp-client

add apn=internet data-channel=2 dial-on-demand=no disabled=no info-channel=1 \

    name="3G True" password=true phone=*99# port=usb1 user=true

/interface bridge port

add bridge=bridge1 interface=ether1

add bridge=bridge1 interface=ether2

add bridge=bridge1 interface=ether3

add bridge=bridge1 interface=ether4

add bridge=bridge1 interface=ether5

add bridge=bridge1 interface=wlan1

/ip address

add address=192.168.88.1/24 interface=ether1 network=192.168.88.0

/ip cloud

set ddns-enabled=yes

/ip dhcp-server network

add address=192.168.88.0/24 gateway=192.168.88.1

/ip dns

set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

/ip firewall nat

add action=masquerade chain=srcnat out-interface="3G True"

/system clock

set time-zone-name=Asia/Bangkok

/system routerboard settings

set init-delay=0s

ppc Failover Mikrotik ppoe+static

/ip address
add address=192.168.0.1/24 interface=lan network=192.168.0.0
add address=192.168.2.1/24 interface=wifi network=192.168.2.0
add address=192.168.1.200/24 interface=wan2 network=192.168.1.0

/ip firewall mangle
add action=mark-connection chain=prerouting in-interface=lan\
new-connection-mark=pppoe-out1 passthrough=yes src-address-list=pppoe-out1
add action=mark-routing chain=prerouting in-interface=lan\
new-routing-mark=pppoe-out1 passthrough=no src-address-list=pppoe-out1
add action=mark-connection chain=prerouting in-interface=lan\
new-connection-mark=wan2 passthrough=yes src-address-list=wan2
add action=mark-routing chain=prerouting in-interface=lan\
new-routing-mark=wan2 passthrough=no src-address-list=wan2
add action=mark-connection chain=prerouting connection-state=new\
in-interface=lan new-connection-mark=pppoe-out1 nth=2,1 passthrough=yes
add action=add-src-to-address-list address-list=pppoe-out1\
address-list-timeout=1d chain=prerouting connection-mark=pppoe-out1\
in-interface=lan
add action=mark-routing chain=prerouting connection-mark=pppoe-out1\
in-interface=lan new-routing-mark=pppoe-out1 passthrough=no
add action=mark-connection chain=prerouting connection-state=new\
in-interface=lan new-connection-mark=wan2 nth=2,2 passthrough=yes
add action=add-src-to-address-list address-list=wan2\
address-list-timeout=1d chain=prerouting connection-mark=wan2\
in-interface=lan
add action=mark-routing chain=prerouting connection-mark=wan2\
in-interface=lan new-routing-mark=wan2 passthrough=no

/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=wan2

/ip route
add check-gateway=ping comment="wan1" distance=1\
gateway=pppoe-out1 routing-mark=wan1 scope=255
add check-gateway=ping comment="wan2" distance=1\
gateway=192.168.1.1 routing-mark=wan2 scope=255
add check-gateway=ping comment="wan1" distance=2\
gateway=pppoe-out1 routing-mark=wan2 scope=255
add check-gateway=ping comment="wan2" distance=2\
gateway=192.168.1.1 routing-mark=wan1 scope=255
add check-gateway=ping distance=1 gateway=pppoe-out1 scope=255
add check-gateway=ping distance=2 gateway=192.168.1.1 scope=255
add comment="netwatch opendns wan1" distance=1\
dst-address=208.67.222.222/32 gateway=pppoe-out1
add comment="netwatch opendns wan2" distance=1\
dst-address=208.67.220.220/32 gateway=192.168.1.1

/tool netwatch
add down-script="/ip route disable [find comment=wan1]"\
host=208.67.222.222 up-script="/ip route enable [find comment=wan1]"
add down-script="/ip route disable [find comment=wan2]"\
host=208.67.220.220 up-script="/ip route enable [find comment=wan2]"