!

$$$ Model: Keenetic Viva

system
set net.ipv4.ip_forward 1
set net.ipv4.tcp_fin_timeout 30
set net.ipv4.tcp_keepalive_time 120
set net.ipv4.neigh.default.gc_thresh1 256
set net.ipv4.neigh.default.gc_thresh2 1024
set net.ipv4.neigh.default.gc_thresh3 2048
set net.ipv6.neigh.default.gc_thresh1 256
set net.ipv6.neigh.default.gc_thresh2 1024
set net.ipv6.neigh.default.gc_thresh3 2048
set net.netfilter.nf_conntrack_tcp_timeout_established 1200
set net.netfilter.nf_conntrack_max 16384
set vm.swappiness 60
set vm.overcommit_memory 0
set vm.vfs_cache_pressure 1000
clock timezone Europe/Uzhgorod
domainname WORKGROUP
hostname Keenetic_Viva
caption default
description Viva
!
ntp server 0.pool.ntp.org
ntp server 1.pool.ntp.org
ntp server 2.pool.ntp.org
ntp server 3.pool.ntp.org
known host pc 10:1f:74:1b:04:7e
known host 10:08:c1:06:51:81 10:08:c1:06:51:81
known host iPad c0:f2:fb:52:54:c3
known host 3a:a7:9e:be:5f:49 3a:a7:9e:be:5f:49
known host 4a:f9:e6:4f:2e:a2 4a:f9:e6:4f:2e:a2
known host c6:95:8c:92:3b:5c c6:95:8c:92:3b:5c
known host 06:ba:bd:6e:94:40 06:ba:bd:6e:94:40
isolate-private
user admin
password md5 5363c88236e93c2908183552049e78f5
password nt eec965b44123efa5f0defdefbe363e81
tag cli
tag http
tag ftp
tag cifs
tag printers
tag torrent
!
dyndns profile _WEBADMIN
!
interface GigabitEthernet0
up
!
interface GigabitEthernet0/0
rename 1
switchport mode access
switchport access vlan 1
 up
!
interface GigabitEthernet0/1
rename 2
switchport mode access
switchport access vlan 1
up
!
interface GigabitEthernet0/2
rename 3
switchport mode access
switchport access vlan 1
up
!
interface GigabitEthernet0/3
rename 4
switchport mode access
switchport access vlan 1
up
!
interface GigabitEthernet0/Vlan1
description "Home VLAN"
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
up
!
interface GigabitEthernet0/Vlan3
description "Guest VLAN"
security-level protected
ip dhcp client dns-routes
ip dhcp client name-servers
up
!
interface GigabitEthernet1
rename ISP
description "Broadband connection"
mac address factory wan
security-level public
ip address dhcp
ip dhcp client dns-routes
ip dhcp client name-servers
igmp upstream
up
!
interface GigabitEthernet1/0
rename 0
up
!
interface WifiMaster0
compatibility BGN
channel width 20
tx-burst
rekey-interval 3600
band-steering
vht
up
!
interface WifiMaster0/AccessPoint0
 rename AccessPoint
description "Wi-Fi access point"
mac access-list type none
security-level private
wps
wps no auto-self-pin
authentication wpa-psk ns3 TnkMBDuGebhzfyfTzSwIxcWh
encryption enable
encryption wpa2
ip dhcp client dns-routes
ip dhcp client name-servers
ssid shevavo
wmm
rrm
up
!
interface WifiMaster0/AccessPoint1
rename GuestWiFi
description "Guest access point"
mac access-list type none
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
ssid Guest
wmm
down
!
interface WifiMaster0/AccessPoint2
mac access-list type none
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface WifiMaster0/AccessPoint3
mac access-list type none
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface WifiMaster0/WifiStation0
security-level public
encryption disable
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface WifiMaster1
compatibility AN+AC
channel width 20
tx-burst
rekey-interval 3600
band-steering
beamforming explicit
downlink-mumimo
up
!
interface WifiMaster1/AccessPoint0
 rename AccessPoint_5G
description "5Ghz Wi-Fi access point"
mac access-list type none
security-level private
wps
wps no auto-self-pin
authentication wpa-psk ns3 TnkMBDuGebhzfyfTzSwIxcWh
encryption enable
encryption wpa2
ip dhcp client dns-routes
ip dhcp client name-servers
ssid shevavo
wmm
rrm
up
!
interface WifiMaster1/AccessPoint1
mac access-list type none
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface WifiMaster1/AccessPoint2
mac access-list type none
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface WifiMaster1/AccessPoint3
mac access-list type none
security-level private
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface WifiMaster1/WifiStation0
security-level public
encryption disable
ip dhcp client dns-routes
ip dhcp client name-servers
down
!
interface UsbDsl0
description "Keenetic Plus DSL"
dyndns profile _WEBADMIN
security-level public
ip dhcp client dns-routes
ip dhcp client name-servers
operating-mode adsl2+ annex a
vdsl profile 8a
vdsl profile 8b
vdsl profile 8c
vdsl profile 8d
vdsl profile 12a
vdsl profile 12b
vdsl profile 17a
vdsl profile 30a
 vdsl carrier auto
vdsl psdmask A_R_POTS_D-32_EU-32
up
!
interface Bridge0
rename Home
description "Home network"
inherit GigabitEthernet0/Vlan1
include AccessPoint
include AccessPoint_5G
mac access-list type none
mac band 3a:a7:9e:be:5f:49 0
mac band 4a:f9:e6:4f:2e:a2 0
security-level private
ip address 192.168.1.1 255.255.255.0
ip dhcp client dns-routes
ip dhcp client name-servers
igmp downstream
up
!
interface Bridge1
rename Guest
description "Guest network"
traffic-shape rate 5120
inherit GigabitEthernet0/Vlan3
include GuestWiFi
mac access-list type none
security-level protected
ip address 10.1.30.1 255.255.255.0
ip dhcp client dns-routes
ip dhcp client name-servers
up
!
interface PPPoE0
description "Broadband connection"
role inet
no ipv6cp
lcp echo 30 3
ipcp default-route
ipcp name-servers
ipcp dns-routes
no ccp
security-level public
authentication identity shevchun
authentication password ns3 9ccqnbt/3Fz48v8ILIRjpAQI
ip global 32767
ip tcp adjust-mss pmtu
connect via ISP
up
!
ip dhcp pool _WEBADMIN
range 192.168.1.33 192.168.1.152
bind Home
enable
!
ip dhcp pool _WEBADMIN_GUEST_AP
range 10.1.30.33 10.1.30.52
bind Guest
enable
!
ip http security-level public ssl
ip http lockout-policy 5 15 3
ip http ssl redirect
ip nat Home
ip nat Guest
ip traffic-shape host 3a:a7:9e:be:5f:49 rate 102400
ip traffic-shape host c6:95:8c:92:3b:5c rate 1000000
ip telnet
security-level private
lockout-policy 5 15 3
!
ip ftp
security-level private
lockout-policy 4 15 3
!
ip hotspot
host 10:1f:74:1b:04:7e permit
host c0:f2:fb:52:54:c3 permit
host 10:08:c1:06:51:81 permit
host 3a:a7:9e:be:5f:49 deny
host 4a:f9:e6:4f:2e:a2 deny
host 06:ba:bd:6e:94:40 permit
host c6:95:8c:92:3b:5c permit
!
ppe software
ppe hardware
upnp lan Home
torrent
rpc-port 8090
peer-port 51413
!
service dhcp
service dns-proxy
service igmp-proxy
service http
service cifs
service telnet
service ntp-client
service upnp
cifs
automount
permissive
!
dlna
interface Home
!
dns-proxy
rebind-protect auto
!
easyconfig check
period 15
max-fails 4
host google.com
host facebook.com
host yahoo.com
!
easyconfig disable
components
 auto-update channel stable
!
cloud control2 security-level public
!