Configurar Red LAN

/ip address

add address=172.168.20.1/24 interface=ether1

/ip pool

add name=pool-RedLAN ranges=172.168.20.10-192.168.1.100

/ip dhcp-server

add address-pool="pool-RedLAN" interface=ether1 name=server-RedLAN

/ip dhcp-server network

add address=192.168.20.0/24 dns-server=192.168.20.1 gateway=192.168.20.1

Configurar Puerto WAN

/ip address

add address=192.168..2/24 interface=ether1

/ip firewall nat

add action=masquerade chain=srcnat out-interface=ether1

/ip dns setallow-remote-requests=yes servers=192.168.0.254

/ip route

add gateway=192.168.0.254

Obtención de la configuración automaticamente:

/ip dhcp-client

add interface=ether1

Priorizando la Red

Firewall Mangle
/ip firewall mangle

add action=mark-connection chain=prerouting comment=ICMP new-connection-mark=ICMP_C

passthrough=yes protocol=icmp

add action=mark-packet chain=prerouting connection-mark=ICMP_C new-packet-mark=Icmp

passthrough=no

add action=mark-connection chain=prerouting comment=DNS dst-port=53 new-connection-

mark=DNS_C passthrough=yes protocol=udp

add action=mark-packet chain=prerouting connection-mark=DNS_C new-packet-mark=DNS

passthrough=no

add action=mark-connection chain=prerouting comment=Youtube content=youtube.com new-

connection-mark=Youtube_C passthrough=yes

add action=mark-packet chain=prerouting connection-mark=Youtube_C new-packet-

mark=Youtube passthrough=no

add action=mark-connection chain=prerouting comment=HTTPS dst-port=443 new-connection-

mark=HTTPS_C passthrough=yes protocol=tcp

add action=mark-packet chain=prerouting connection-mark=HTTPS_C new-packet-mark=HTTPS

passthrough=no

add action=mark-connection chain=prerouting comment="HTTP WEB" dst-port=80 new-

connection-mark=HTTP_C passthrough=yes protocol=tcp

add action=mark-packet chain=prerouting connection-mark=HTTP_C new-packet-mark=HTTP

passthrough=no protocol=tcp

add action=mark-connection chain=prerouting comment=Netflix content=netflix.com new-

connection-mark=Netflix_C passthrough=yes

add action=mark-packet chain=prerouting connection-mark=Netflix_C new-packet-mark=Netflix

passthrough=no

/ip firewall mangle

add action=add-src-to-address-list address-list=Google address-list-timeout=6h chain=forward in-

interface=ether1_WAN protocol=udp src-address-list=!Google src-port=443
add action=mark-packet chain=forward in-interface=ether1_WAN new-packet-mark="GOOGLE
DOWN" passthrough=no src-address-list=Google

/queue type

add kind=pcq name="Google DESCARGA" pcq-classifier=dst-address pcq-dst-address6-mask=64

pcq-rate=2M pcq-src-address6-mask=64 pcq-total-limit=200000KiB

/queue tree

add name="GOOGLE DOWN" packet-mark="GOOGLE DOWN" parent=global queue="Google

DESCARGA"

Queue Tree

/queue tree

add name=Descargas parent="bridge1 LANS" priority=1 queue=default

add name=Subida parent="ether1 WAN" priority=1 queue=default

add name=DNS_D packet-mark=DNS parent=Descargas priority=1

add name=DNS_S packet-mark=DNS parent=Subida priority=1

add name=Youtube_D packet-mark=Youtube parent=Descargas priority=4

add name=Youtube_S packet-mark=Youtube parent=Subida priority=4

add name=HTTP_D packet-mark=HTTP parent=Descargas priority=3

add name=HTTP_S packet-mark=HTTP parent=Subida priority=3

add name=HTTPS_D packet-mark=HTTPS parent=Descargas priority=2

add name=HTTPS_S packet-mark=HTTPS parent=Subida priority=2

add name=OTROS_D packet-mark=Otros parent=Descargas

add name=OTROS_S packet-mark=Otros parent=Subida

add name=ICMP_D packet-mark=Icmp parent=Descargas priority=1

add name=ICMP_S packet-mark=Icmp parent=Subida priority=1

add name=Netflix_D packet-mark=Netflix parent=Descargas priority=4

add name=Netflix_S packet-mark=Netflix parent=Subida priority=4

Configurar DNS Server Transparente

/ip firewall nat

add action=redirect chain=dstnat dst-port=53 protocol=udp to-ports=53

Configurar Potencia De Transmisión

2.- Configuración del Radio Wireless.

Hay que entrar a la configuración del Radio WLAN1, para esto hay que dar doble clic en el registro
del radio.

3.- Activar el Mode Advanzado de configuración

Lo que se requiere es activar el “Advanced Mode” del menú derecho.

Se activaran mas pestañas de configuración, buscaremos la pestaña Tx Power.

4.- Configurar la Potencia del Radio.

Para poder cambiar el valor de la potencia hay que cambiar el parámetro de Tx Power Mode: de
“Default” a “all rates fixed”
En la opción all rate fixed: podremos especificar la potencia del radio en dBm.

De esta forma la potencia de nuestro equipo queda modificada.

Y solo hay que dar clic en el botón “OK” para guardar los cambios.

/ip firewall mangle

add action=mark-connection chain=prerouting comment="Trafico Cliente1" connection-mark=no-

mark dst-address-type=!local new-connection-mark=Cliente1_conn passthrough=yes src-
address=192.168.1.2

add action=mark-packet chain=prerouting connection-mark=Cliente1_conn new-packet-

mark=Cliente1_traffic passthrough=no

add action=mark-connection chain=prerouting comment="Trafico Cliente2" connection-mark=no-

mark dst-address-type=!local new-connection-mark=Cliente2_conn passthrough=yes src-
address=192.168.1.3

add action=mark-packet chain=prerouting connection-mark=Cliente2_conn new-packet-

mark=Cliente2_traffic passthrough=no

/queue tree

add max-limit=1M name="Servicio Upload" parent=ether1 queue=default

add limit-at=32k max-limit=254k name=Cliente1_Up packet-mark=Cliente1_traffic

parent="Servicio Upload" queue=pcq-upload-default

add limit-at=32k max-limit=128k name=Cliente1_Up packet-mark=Cliente2_traffic

parent="Servicio Upload" queue=pcq-upload-default

add max-limit=10M name="Servicio Download" parent=ether2 queue=default

add limit-at=128k max-limit=2M name=Cliente1_Down packet-mark=Cliente1_traffic

parent="Servicio Download" queue=pcq-download-default
add limit-at=128k max-limit=1M name=Cliente2_Down packet-mark=Cliente2_traffic
parent="Servicio Download" queue=pcq-download-default

/ip firewall layer7-protocol

add comment="" name=speedtest-servers regexp="^.*(get|GET).+speedtest.*\$"

/ip firewall filter

add chain=forward layer7-protocol=speedtest-servers protocol=tcp action=add-dst-to-address-list

address-list=speedtest-Public