HamWAN

The config for a HamWAN client is below.   This will allow you to configure your own device to talk to any of our sites.  You will need to change your callsign and location at a couple places in the config.  Note this will disable the 192.168.88.1 interface so best to apply from winbox.

Your PC/router will connect as a bridged device and should get a IPv4 address via DHCP and a IPv6 address via SLAAC and/or /60 Prefix via DHPCv6 PD.

The below default config is verified on the newer dynadish5.  We suggest clearing the default config with:

/system reset-configuration no-defaults=yes

Then apply the below configuration.

Please note you’ll need to set a LAN IP if you desire access directly via IP and you will need to set the unit name.  Changing the default password and creating an account for yourself is suggested.  Please reach out should you have any questions.

/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyn channel-width=10mhz disabled=no \
frequency=5180 frequency-mode=superchannel mode=station-bridge  scan-list="exHamWAN" \
ssid=HamWAN wireless-protocol=nv2 radio-name=$CALLSIGN-LOCATION
/interface vlan
add interface=wlan1 name=MGMT-20 vlan-id=20
/interface wireless channels
/interface wireless channels
add band=5ghz-onlyn comment="Cell sites radiate this at 0 degrees (north)" frequency=5920 list=HamWAN name=Sector1-5 width=5
add band=5ghz-onlyn comment="Cell sites radiate this at 120 degrees (south-east)" frequency=5900 list=HamWAN name=Sector2-5 width=5
add band=5ghz-onlyn comment="Cell sites radiate this at 240 degrees (south-west)" frequency=5880 list=HamWAN name=Sector3-5 width=5
add band=5ghz-onlyn comment="Cell sites radiate this at 0 degrees (north)" frequency=5920 list=HamWAN name=Sector1-10 width=10
add band=5ghz-onlyn comment="Cell sites radiate this at 120 degrees (south-east)" frequency=5900 list=HamWAN name=Sector2-10 width=10
add band=5ghz-onlyn comment="Cell sites radiate this at 240 degrees (south-west)" frequency=5880 list=HamWAN name=Sector3-10 width=10
add band=5ghz-onlyn frequency=5655 list=exHamWAN name=5655-10 width=10
add band=5ghz-onlyn frequency=5655 list=exHamWAN name=5655-5 width=5
add band=5ghz-onlyn frequency=5660 list=exHamWAN name=5660-10 width=10
add band=5ghz-onlyn frequency=5660 list=exHamWAN name=5660-5 width=5
add band=5ghz-onlyn frequency=5665 list=exHamWAN name=5665-10 width=10
add band=5ghz-onlyn frequency=5665 list=exHamWAN name=5665-5 width=5
add band=5ghz-onlyn frequency=5670 list=exHamWAN name=5670-10 width=10
add band=5ghz-onlyn frequency=5670 list=exHamWAN name=5670-5 width=5
add band=5ghz-onlyn frequency=5675 list=exHamWAN name=5675-10 width=10
add band=5ghz-onlyn frequency=5675 list=exHamWAN name=5675-5 width=5
add band=5ghz-onlyn frequency=5680 list=exHamWAN name=5680-10 width=10
add band=5ghz-onlyn frequency=5680 list=exHamWAN name=5680-5 width=5
add band=5ghz-onlyn frequency=5685 list=exHamWAN name=5685-10 width=10
add band=5ghz-onlyn frequency=5685 list=exHamWAN name=5685-5 width=5
add band=5ghz-onlyn frequency=5690 list=exHamWAN name=5690-10 width=10
add band=5ghz-onlyn frequency=5690 list=exHamWAN name=5690-5 width=5
add band=5ghz-onlyn frequency=5695 list=exHamWAN name=5695-10 width=10
add band=5ghz-onlyn frequency=5695 list=exHamWAN name=5695-5 width=5
add band=5ghz-onlyn frequency=5850 list=exHamWAN name=5850-10 width=10
add band=5ghz-onlyn frequency=5850 list=exHamWAN name=5850-5 width=5
add band=5ghz-onlyn frequency=5855 list=exHamWAN name=5855-10 width=10
add band=5ghz-onlyn frequency=5855 list=exHamWAN name=5855-5 width=5
add band=5ghz-onlyn frequency=5860 list=exHamWAN name=5860-10 width=10
add band=5ghz-onlyn frequency=5860 list=exHamWAN name=5860-5 width=5
add band=5ghz-onlyn frequency=5865 list=exHamWAN name=5865-10 width=10
add band=5ghz-onlyn frequency=5865 list=exHamWAN name=5865-5 width=5
add band=5ghz-onlyn frequency=5870 list=exHamWAN name=5870-10 width=10
add band=5ghz-onlyn frequency=5870 list=exHamWAN name=5870-5 width=5
add band=5ghz-onlyn frequency=5875 list=exHamWAN name=5875-10 width=10
add band=5ghz-onlyn frequency=5875 list=exHamWAN name=5875-5 width=5
add band=5ghz-onlyn frequency=5880 list=exHamWAN name=5880-10 width=10
add band=5ghz-onlyn frequency=5880 list=exHamWAN name=5880-5 width=5
add band=5ghz-onlyn frequency=5885 list=exHamWAN name=5885-10 width=10
add band=5ghz-onlyn frequency=5885 list=exHamWAN name=5885-5 width=5
add band=5ghz-onlyn frequency=5890 list=exHamWAN name=5890-10 width=10
add band=5ghz-onlyn frequency=5890 list=exHamWAN name=5890-5 width=5
add band=5ghz-onlyn frequency=5895 list=exHamWAN name=5895-10 width=10
add band=5ghz-onlyn frequency=5895 list=exHamWAN name=5895-5 width=5
add band=5ghz-onlyn frequency=5900 list=exHamWAN name=5900-10 width=10
add band=5ghz-onlyn frequency=5900 list=exHamWAN name=5900-5 width=5
add band=5ghz-onlyn frequency=5905 list=exHamWAN name=5905-10 width=10
add band=5ghz-onlyn frequency=5905 list=exHamWAN name=5905-5 width=5
add band=5ghz-onlyn frequency=5910 list=exHamWAN name=5910-10 width=10
add band=5ghz-onlyn frequency=5910 list=exHamWAN name=5910-5 width=5
add band=5ghz-onlyn frequency=5915 list=exHamWAN name=5915-10 width=10
add band=5ghz-onlyn frequency=5915 list=exHamWAN name=5915-5 width=5
add band=5ghz-onlyn frequency=5920 list=exHamWAN name=5920-10 width=10
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/system logging action
set 3 bsd-syslog=yes remote=44.98.254.1
/interface bridge add name=bridge-local
/interface bridge port
add bridge=bridge-local interface=ether1
add bridge=bridge-local interface=wlan1
/ip address 
add address=192.168.88.xxx/24 comment="default configuration" disabled=no interface=ether1 \
network=192.168.88.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=MGMT-20
/ip settings
set ip-forward=no
/ip upnp
set allow-disable-external-interface=no
/radius
add address=44.98.254.1
add address=44.98.254.1 secret=RADIUS-PW-56 service=login
/system identity
set name=$CALLSIGN-LOCATION
/system logging
add action=remote topics=info,warning,critical,firewall,error
/system ntp client
set enabled=yes primary-ntp=104.232.3.3 secondary-ntp=45.127.113.2
/user set [find name=admin] password=$CHANGEME
/user aaa
set accounting=yes default-group=read exclude-groups="" interim-update=0s use-radius=yes
/ip firewall filter
add chain=input connection-state=invalid action=drop \
	comment="Drop Invalid connections"  
add chain=input connection-state=established,related action=accept \
	comment="Allow Established connections"  
add chain=input protocol=icmp action=accept \
	comment="Allow ICMP" 
add chain=input src-address=192.168.0.0/16 action=accept 
add chain=input src-address=44.98.0.0/16 action=accept 
add chain=input src-address=44.103.0.0/24 action=accept 
add chain=input src-address=199.47.172.0/22 action=accept
add chain=input action=drop comment="Drop everything else"