Mikrotik RouterOS VLAN脚本

admin

1. # Basic VLAN Setup for Internet Traffic
   
2. 
   
3. # Configure VLAN interfaces
   
4. /interface vlan
   
5. add name=vlan10 vlan-id=10 interface=ether1
   
6. add name=vlan20 vlan-id=20 interface=ether1
   
7. 
   
8. # Configure IP addresses for VLAN interfaces
   
9. /ip address
   
10. add interface=vlan10 address=192.168.10.1/24
    
11. add interface=vlan20 address=192.168.20.1/24
    
12. 
    
13. # Enable DHCP server for VLANs
    
14. /ip dhcp-server
    
15. add name=dhcp10 interface=vlan10 address-pool=dhcp10_pool
    
16. add name=dhcp20 interface=vlan20 address-pool=dhcp20_pool
    
17. 
    
18. # Configure DHCP address pools for VLANs
    
19. /ip pool
    
20. add name=dhcp10_pool ranges=192.168.10.2-192.168.10.254
    
21. add name=dhcp20_pool ranges=192.168.20.2-192.168.20.254
    
22. 
    
23. # Add default gateways for VLANs
    
24. /ip route
    
25. add gateway=192.168.10.1
    
26. add gateway=192.168.20.1
    
27. 
    
28. #////////////////////////////////////////////////////////////
    
29. 
    
30. # Advanced VLAN Setup for Internet Traffic
    
31. 
    
32. # Configure VLAN interfaces
    
33. /interface vlan
    
34. add name=vlan10 vlan-id=10 interface=ether1
    
35. add name=vlan20 vlan-id=20 interface=ether1
    
36. 
    
37. # Configure IP addresses for VLAN interfaces
    
38. /ip address
    
39. add interface=vlan10 address=192.168.10.1/24
    
40. add interface=vlan20 address=192.168.20.1/24
    
41. 
    
42. # Enable DHCP server for VLANs
    
43. /ip dhcp-server
    
44. add name=dhcp10 interface=vlan10 address-pool=dhcp10_pool
    
45. add name=dhcp20 interface=vlan20 address-pool=dhcp20_pool
    
46. 
    
47. # Configure DHCP address pools for VLANs
    
48. /ip pool
    
49. add name=dhcp10_pool ranges=192.168.10.2-192.168.10.254
    
50. add name=dhcp20_pool ranges=192.168.20.2-192.168.20.254
    
51. 
    
52. # Configure Firewall rules for VLANs
    
53. /ip firewall filter
    
54. add chain=forward action=accept src-address=192.168.10.0/24 dst-address=192.168.20.0/24 comment="Allow VLAN10 to VLAN20"
    
55. add chain=forward action=accept src-address=192.168.20.0/24 dst-address=192.168.10.0/24 comment="Allow VLAN20 to VLAN10"
    
56. add chain=forward action=drop comment="Drop other traffic"
    
57. 
    
58. # Configure NAT for VLANs
    
59. /ip firewall nat
    
60. add chain=srcnat out-interface=vlan10 action=masquerade
    
61. add chain=srcnat out-interface=vlan20 action=masquerade
    
62. 
    
63. # Add default gateways for VLANs
    
64. /ip route
    
65. add gateway=192.168.10.1
    
66. add gateway=192.168.20.1

复制代码