!
$$$ Model: ZyXEL Keenetic Extra
! $$$ Version: 2.0
! $$$ Agent: default
system
set net.ipv4.ip_forward 1
set net.ipv4.tcp_fin_timeout 30
set net.ipv4.tcp_keepalive_time 120
set net.ipv4.neigh.default.gc_thresh1 256
set net.ipv4.neigh.default.gc_thresh2 1024
set net.ipv4.neigh.default.gc_thresh3 2048
set net.ipv6.neigh.default.gc_thresh1 256
set net.ipv6.neigh.default.gc_thresh2 1024
set net.ipv6.neigh.default.gc_thresh3 2048
set net.netfilter.nf_conntrack_tcp_timeout_established 1200
set net.netfilter.nf_conntrack_max 16384
set vm.swappiness 60
set vm.overcommit_memory 0
set vm.vfs_cache_pressure 1000
hostname Keenetic_Extra
clock timezone Moscow
domainname WORKGROUP
!
ntp server 0.pool.ntp.org
ntp server 1.pool.ntp.org
ntp server 2.pool.ntp.org
ntp server 3.pool.ntp.org
!
isolate-private
interface GigabitEthernet0
up
!
interface GigabitEthernet0/0
switchport mode access
switchport access vlan 2
up
!
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 1
up
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 1
up
!
interface GigabitEthernet0/3
switchport mode access
switchport access vlan 1
up
!
interface GigabitEthernet0/4
switchport mode access
switchport access vlan 1
up
!
interface GigabitEthernet0/Vlan1
description "Home VLAN"
ip address 192.168.1.1/24
security-level private
up
!
interface GigabitEthernet0/Vlan2
rename ISP
description "Broadband connection"
mac address factory wan
ip address dhcp
ip global 700
security-level public
up
!
interface Bridge0
rename Home
description "Home network"
security-level private
inherit GigabitEthernet0/Vlan1
!
ip dhcp pool _WEBADMIN
range 192.168.1.33 40
bind Home
!
ip nat Home
user admin
tag cli
tag http
!
service dhcp
service dns-proxy
service http
service telnet
service ntp-client
!
!! ndm-mod-miniupnpd
upnp lan Home
service upnp
!
!! ndm-mod-cifs
user admin
password nt 31d6cfe0d16ae931b73c59d7e0c089c0
tag cifs
tag printers
!
service cifs
!
cifs
permissive
automount
!
!
!! ndm-mod-usblte
!
!
!! ndm-mod-ppe
!
!! ndm-mod-corewireless
interface WifiMaster0
country-code RU
compatibility BGN
up
!
interface WifiMaster0/AccessPoint0
rename AccessPoint
description "Wi-Fi access point"
security-level private
wps
wmm
up
!
interface WifiMaster0/AccessPoint1
rename GuestWiFi
description "Guest access point"
ssid Guest
wmm
down
!
interface Bridge0
include WifiMaster0/AccessPoint0
!
interface WifiMaster1
country-code RU
compatibility AN
up
!
interface WifiMaster1/AccessPoint0
rename AccessPoint_5G
description "5Ghz Wi-Fi access point"
security-level private
wps
wmm
up
!
interface Bridge0
include WifiMaster1/AccessPoint0
!
interface GigabitEthernet0/Vlan3
description "Guest VLAN"
up
!
interface Bridge1
rename Guest
description "Guest network"
inherit GigabitEthernet0/Vlan3
include WifiMaster0/AccessPoint1
security-level protected
ip address 10.1.30.1 255.255.255.0
!
ip dhcp pool _WEBADMIN_GUEST_AP
range 10.1.30.33 20
bind Guest
!
ip nat Guest
!
!
!! ndm-mod-igmp
interface ISP igmp upstream
interface Home igmp downstream
service igmp-proxy
!
