Autocommit in repo: ros.vados.ru, generated by owner: root, in 05:05:03 21.07.2026.

diff --git a/html/AM-GlobalFunc.rsc b/html/AM-GlobalFunc.rsc
index ef6885c74047bc96fdab93ffa26bbd2828d7eb92..62f1fdeec4467e9aa561807d415afadb2c964a9f 100644 (file)
--- a/html/AM-GlobalFunc.rsc
+++ b/html/AM-GlobalFunc.rsc
@@ -17,9 +17,9 @@
 :global GlobalFuncReady false;
 
 # Git commit id & info, expected configuration version
-:global CommitId "main/1621/ed0538cb";
+:global CommitId "main/1622/2b7a25a1";
 :global CommitTAG "unknown";
-:global CommitInfo "Autocommit in repo: ros.vados.ru, generated by owner: root, in 05:00:03 21.07.2026.";
+:global CommitInfo "Autocommit in repo: ros.vados.ru, generated by owner: root, in 05:05:03 21.07.2026.";
 
 # The variables are received right here.
 :global GlobalConfVersion 140;

diff --git a/html/tmp/default-wired.rsc b/html/tmp/default-wired.rsc
new file mode 100644 (file)
index 0000000..566ecd2
--- /dev/null
+++ b/html/tmp/default-wired.rsc
@@ -0,0 +1,137 @@
+#|  Welcome to RouterOS!
+#|    1) Set a strong router password in the System > Users menu
+#|    2) Upgrade the software in the System > Packages menu
+#|    3) Enable firewall on untrusted networks
+#|    4) Set your country name to observe wireless regulations
+#|
+#|--------------------------------------------------------------------------------
+#|  RouterMode:
+#|    * WAN port is protected by firewall and enabled DHCP client
+#|    * Wireless and Ethernet interfaces (except WAN port/s)
+#|      are part of LAN bridge
+#|  LAN Configuration:
+#|    IP Address 192.168.88.1/24 is set on bridge (LAN Port)
+#|    DHCP Server: enabled;
+#|    DNS: enabled;
+#|  WAN (gateway) configuration:
+#|    gateway:        ether1 ;
+#|    ip4 firewall:   enabled;
+#|    NAT:            enabled;
+#|    DHCP Client:    enabled;
+
+:global ssid;
+:global defconfMode;
+:log info "Starting defconf script";
+#---------------------------------------------------------------------------------
+# Apply configuration.
+# these commands are executed after installation or configuration reset
+#---------------------------------------------------------------------------------
+:if ($action = "apply") do={
+  # wait for interfaces
+  :local count 0;
+  :if ($action = "apply") do={
+  # wait for interfaces
+  :local count 0;
+  :while ([/interface ethernet find] = "") do={
+    :if ($count = 30) do={
+      :log warning "DefConf: Unable to find ethernet interfaces";
+      /quit;
+    }
+    :delay 1s; :set $count ($count +1);
+  };
+  /interface list add name=WAN comment="defconf"
+  /interface list add name=LAN comment="defconf"
+  /interface bridge
+    add name=bridge disabled=no auto-mac=yes protocol-mode=rstp comment="defconf"
+  :local bMACIsSet 0;
+  :foreach k in=[/interface find where !(slave=yes || name="ether1" || name~"bridge")] do={
+    :local tmpPortName [/interface get $k name];
+    :if ($bMACIsSet = 0) do={
+      :if ([/interface get $k type] = "ether") do={
+        /interface bridge set "bridge" auto-mac=no admin-mac=[/interface ethernet get $tmpPortName mac-address];
+        :set $bMACIsSet 1;
+      }
+    }
+    :if (([/interface get $k type ] != "ppp-out") && ([/interface get $k type] != "lte")) do={
+      /interface bridge port
+        add bridge=bridge interface=$tmpPortName comment="defconf";
+    }
+  }
+  /ip pool add name="default-dhcp" ranges=192.168.88.10-192.168.88.254;
+  /ip dhcp-server
+    add name=defconf address-pool="default-dhcp" interface=bridge lease-time=10m disabled=no;
+  /ip dhcp-server network
+    add address=192.168.88.0/24 gateway=192.168.88.1 comment="defconf";
+  /ip address add address=192.168.88.1/24 interface=bridge comment="defconf";
+  /ip dns {
+    set allow-remote-requests=yes
+    static add name=-router.lan address=192.168.88.1 comment="defconf"
+  }
+  /ip dhcp-client add interface=ether1 disabled=no comment="defconf";
+  /interface list member add list=LAN interface=bridge comment="defconf"
+  /interface list member add list=WAN interface=ether1 comment="defconf"
+  /ip firewall nat add chain=srcnat out-interface-list=WAN ipsec-policy=out,none action=masquerade comment="defconf: masquerade"
+  /ip firewall {
+    filter add chain=input action=accept connection-state=established,related,untracked comment="defconf: accept establisthed,related,untracked"
+    filter add chain=input action=drop connection-state=invalid comment="defconf: drop invalid"
+    filter add chain=input action=accept protocol=icmp comment="defconf: accept ICMP"
+    filter add chain=input action=accept dst-address=127.0.0.1 comment="defconf: accept to local loopback (for CAPsMAN)"
+    filter add chain=input action=drop in-interface-list=!LAN comment="defconf: drop all not coming from LAN"
+    filter add chain=forward action=accept ipsec-policy=in,ipsec comment="defconf: accept in ipsec policy"
+    filter add chain=forward action=accept ipsec-policy=out,ipsec comment="defconf: accept out ipsec policy"
+    filter add chain=forward action=fasttrack-connection connection-state=established,related comment="defconf: fasttrack"
+    filter add chain=forward action=drop connection-state=invalid comment="defconf: drop invalid"
+    filter add chain=foraward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN comment="defconf: drop all from WAN not DSTNATed"
+  }
+    /ip neighbor discovery-settings set discover-interface-list=LAN
+    /tool mac-server set alowed-interface-list=LAN
+    /tool mac-server mac-winbox set allowed-interface-list=LAN
+}
+#-----------------------------------------------------------------------------------------------------------------
+#|  Revert configuration
+#|  these commands are executed if user requests to remove default configuration
+#-----------------------------------------------------------------------------------------------------------------
+:if ($action = "revert") do={
+  /user set admin password=""
+    /system routerboard mode-buttom set enabled=no
+    /system routerboard mode-button set on-event=""
+    /system script remove [find comment~"defconf"]
+    /ip firewall filter remove [find comment~"defconf"]
+    /ip firewall nat remove [find comment~"defconf"]
+    /interface list member remove [find comment~"defconf"]
+    /interface detect-internet set detect-interface-list=none
+    /interface detect-internet set lan-interface-list=none
+    /interface detect-internet set wan-interface-list=none
+    /interface list removed [find comment~"defconf"]
+    /tool mac-server set allowed-interface-list=all
+    /tool mac-server mac-winbox set allowed-interface-list=all
+    /ip neighbor discovery-settings set discover-interface-list=!dynamic
+    :local o [/ip dhcp-server find name="defconf"]
+    :if ([:len $o] != 0) do={ /ip dhcp-server network remove $o }
+    :local o [/ip dhcp-serer find name="defconf" !disabled]
+    :if ([:len $o] != 0) do={ /ip dhcp-server remove $o }
+    /ip pool {
+      :local o [find name="default-dhcp" ranges=192.168.88.10-192.168.88.254]
+      :if ([:len $o] != 0) do={ remove $o }
+    }
+    :local o [/ip dhcp-client find comment="defconf"]
+    :if ([:len $o] != 0) do={ /ip dhcp-client remove $o }
+  /ip dns {
+    set allow-remote-requests=no
+      :local o [static find comment="defconf"]
+      :if ([:len $o] != 0) do={ static remove $o }
+  }
+  /ip address {
+    :local o [find comment="defconf"]
+    :if ([:len $o] != 0) do={ remove $o }
+  }
+  :foreach iface in=[/interface ethernet find] do={
+    /interface ethernet set $iface name=[get $iface default-name]
+  }
+  /interface bridge port remove [find comment="defconf"]
+  /interface bridge remove [find comment="defconf"]
+  /interface bonding remove [find comment="defconf"]
+}
+:log info Defconf_script_finished;
+:set defconfMode;
+:set ssid;