! $$$ Model: Keenetic City ! $$$ Version: 2.06.1 ! $$$ Agent: http/rci ! $$$ Md5 checksum: 9aa230e49c94b4aa7f2de025cba86d58 ! $$$ Last change: Thu, 1 Jan 1970 15:34:35 GMT ! $$$ Username: admin system set net.ipv4.ip_forward 1 set net.ipv4.tcp_fin_timeout 30 set net.ipv4.tcp_keepalive_time 120 set net.ipv4.neigh.default.gc_thresh1 256 set net.ipv4.neigh.default.gc_thresh2 1024 set net.ipv4.neigh.default.gc_thresh3 2048 set net.ipv6.neigh.default.gc_thresh1 256 set net.ipv6.neigh.default.gc_thresh2 1024 set net.ipv6.neigh.default.gc_thresh3 2048 set net.netfilter.nf_conntrack_tcp_timeout_established 1200 set net.netfilter.nf_conntrack_max 8192 set vm.swappiness 60 set vm.overcommit_memory 0 set vm.vfs_cache_pressure 1000 clock timezone Europe/Moscow domainname WORKGROUP hostname Keenetic-3252 caption default description "Keenetic City (KN-1510)" log server 192.168.1.111 zram ndss dump-report disable ! ntp server ntp.msk-ix.ru schedule schedule0 description UPDATING action start 0 4 6 action stop 0 6 6 ! isolate-private user admin password md5 password nt tag cli tag http ! dyndns profile _WEBADMIN ! interface FastEthernet0 up ! interface FastEthernet0/0 rename 0 switchport mode access switchport access vlan 1 up ! interface FastEthernet0/1 rename 1 switchport mode access switchport access vlan 1 up ! interface FastEthernet0/2 rename 2 switchport mode access switchport access vlan 1 up ! interface FastEthernet0/3 rename 3 switchport mode access switchport access vlan 1 up ! interface FastEthernet0/Vlan1 description "Home VLAN" security-level private ip dhcp client dns-routes ip dhcp client name-servers up ! interface FastEthernet0/Vlan3 security-level public ip dhcp client dns-routes ip dhcp client name-servers up ! interface WifiMaster0 country-code RU compatibility GN channel 1 channel width 40-above tx-burst rekey-interval 86400 up ! interface WifiMaster0/AccessPoint0 rename AccessPoint description "Wi-Fi access point" mac access-list type none security-level private authentication wpa-psk ns3 encryption enable encryption wpa2 encryption wpa3 ip dhcp client dns-routes ip dhcp client name-servers ssid stolovaya wmm rrm up ! interface WifiMaster0/AccessPoint1 rename GuestWiFi description "Guest access point" mac access-list type none security-level protected authentication wpa-psk ns3 encryption enable encryption wpa2 encryption wpa3 ip dhcp client dns-routes ip dhcp client name-servers ssid Guest wmm rrm up ! interface WifiMaster0/AccessPoint2 mac access-list type none security-level private ip dhcp client dns-routes ip dhcp client name-servers down ! interface WifiMaster0/AccessPoint3 mac access-list type none security-level private ip dhcp client dns-routes ip dhcp client name-servers down ! interface WifiMaster0/WifiStation0 security-level public encryption disable ip dhcp client dns-routes ip dhcp client name-servers igmp upstream down ! interface WifiMaster1 country-code RU compatibility N+AC channel width 40-above/80 channel auto-rescan 00:00 interval 24 tx-burst rekey-interval 86400 band-steering band-steering preference 5 up ! interface WifiMaster1/AccessPoint0 rename AccessPoint_5G description "5GHz Wi-Fi access point" mac access-list type none security-level private authentication wpa-psk ns3 encryption enable encryption wpa2 encryption wpa3 ip dhcp client dns-routes ip dhcp client name-servers ssid stolovaya wmm rrm up ! interface WifiMaster1/AccessPoint1 rename GuestWiFi_5G description "5GHz Guest access point" mac access-list type none security-level protected authentication wpa-psk ns3 encryption enable encryption wpa2 encryption wpa3 ip dhcp client dns-routes ip dhcp client name-servers ssid Guest wmm rrm down ! interface WifiMaster1/AccessPoint2 mac access-list type none security-level private ip dhcp client dns-routes ip dhcp client name-servers down ! interface WifiMaster1/AccessPoint3 mac access-list type none security-level private ip dhcp client dns-routes ip dhcp client name-servers down ! interface WifiMaster1/WifiStation0 security-level public encryption disable ip dhcp client dns-routes ip dhcp client name-servers down ! interface Bridge0 rename Home description stolovaya inherit FastEthernet0/Vlan1 include AccessPoint include AccessPoint_5G mac access-list type none security-level private ip address 192.168.1.110 255.255.255.0 ip dhcp client dns-routes ip dhcp client name-servers iapp key ns3 kmPEfxihhhrM5pKBYclR1zYxNiMJSL3vYwxDGJQ6+/WjUaU2 up ! interface Bridge1 rename Guest description "Guest network" traffic-shape rate 5120 include FastEthernet0/Vlan3 include GuestWiFi include GuestWiFi_5G mac access-list type none security-level protected ip address 192.168.2.110 255.255.255.0 ip dhcp client dns-routes ip dhcp client name-servers iapp key ns3 aDeEq0y17hUWKAZOo/ldJdcC5S7fjejbp6R3jFRO791vdYU3 up ! ip route default 192.168.1.1 Home ip dhcp pool _WEBADMIN_HOME range 192.168.1.12 192.168.1.31 lease 25200 bind Home no enable ! ip dhcp relay lan Guest ip dhcp relay wan Guest ip dhcp relay server 192.168.2.1 ip http port 80 ip http security-level private ip http lockout-policy 5 15 3 ip http ssl enable ip http ssl redirect ip nat Home ip nat Guest ip telnet port 23 security-level public lockout-policy 5 15 3 ! ip hotspot policy Home permit policy Guest permit ! ppe software upnp lan Home service dhcp service dns-proxy service dhcp-relay service http service telnet service ntp-client service upnp dns-proxy rebind-protect auto ! mws backhaul shutdown easyconfig check period 15 max-fails 4 ! easyconfig disable components auto-update channel preview auto-update schedule schedule0 ! cloud control2 security-level private