#                   version: 6.49.19 (stable)
#          factory-software: 6.7
#              total-memory: 128.0MiB
#                       cpu: MIPS 74Kc V4.12
#                 cpu-count: 1
#           total-hdd-space: 128.0MiB
#         architecture-name: mipsbe
#                board-name: RB2011UiAS
#                  platform: MikroTik
#   installed-version: 6.49.19
# Flags: U - undoable, R - redoable, F - floating-undo
#   ACTION                                   BY               POLICY
# 
# software id = CHH0-KFTP
#
# model = 2011UiAS
# serial number = 8C180985C687
/interface bridge
add name=BR-LAN
/interface ethernet
set [ find default-name=ether1 ] loop-protect=on name="ether1 - Redundancia PBE"
set [ find default-name=ether2 ] disabled=yes name="ether2 - WAN2 [Galletera Redundancia]"
set [ find default-name=ether5 ] name="ether5 - Meraki"
set [ find default-name=sfp1 ] name="sfp1 - FO San Martin"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-server option
add code=150 name=FTP value=0xC0A83519
/ip dhcp-server option sets
add name="Option 150" options=FTP
/ip pool
add name=dhcp_pool0 ranges=192.168.130.1-192.168.130.200
add name=dhcp_pool1 ranges=192.168.126.1-192.168.126.200
add name=dhcp_pool2 ranges=192.168.56.11-192.168.56.99
add name=dhcp_pool3 ranges=192.168.142.2-192.168.142.254
add name=dhcp_pool4 ranges=192.168.100.2-192.168.100.254
add name=dhcp_pool5 ranges=192.168.216.1-192.168.216.253
add name=dhcp_pool6 ranges=172.16.30.1-172.16.30.253
add name=dhcp_pool7 ranges=192.168.56.2-192.168.56.254
add name=dhcp_pool8 ranges=192.168.116.1-192.168.116.253
/routing ospf area
add area-id=142.142.142.142 name=AreaModerna142
/routing ospf instance
set [ find default=yes ] router-id=4.4.4.4
/snmp community
add addresses=::/0 name=SNMP-SOMNET
/system logging action
add bsd-syslog=yes name=GrafanaLoki remote=172.20.0.254 remote-port=1514 target=remote
/user group
set read policy="local,ssh,reboot,read,winbox,romon,!telnet,!ftp,!write,!policy,!test,!password,!web,!sniff,!sensitive,!api,!dude,!tikapp"
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=BR-LAN interface=ether4
add bridge=BR-LAN interface="ether5 - Meraki"
add bridge=BR-LAN interface=ether6
add bridge=BR-LAN interface=ether7
add bridge=BR-LAN interface=ether8
add bridge=BR-LAN interface=ether10
add bridge=BR-LAN interface=ether9
add bridge=BR-LAN interface="sfp1 - FO San Martin"
add bridge=BR-LAN interface="ether1 - Redundancia PBE"
add bridge=BR-LAN interface=ether3
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=172.20.3.71/16 interface=BR-LAN network=172.20.0.0
/ip dhcp-relay
add dhcp-server=192.168.41.1 disabled=no name="Relay 1"
/ip dhcp-server network
add address=172.16.30.0/24 gateway=172.16.30.254
add address=192.168.56.0/24 gateway=192.168.56.1 next-server=192.168.53.25
add address=192.168.100.0/24 gateway=192.168.100.1
add address=192.168.116.0/24 gateway=192.168.116.254
add address=192.168.126.0/24 dns-server=192.168.10.123,192.168.10.122 gateway=192.168.126.254
add address=192.168.130.0/24 gateway=192.168.130.254
add address=192.168.142.0/24 gateway=192.168.142.1
add address=192.168.216.0/24 dns-server=192.168.10.123,192.168.10.122 gateway=192.168.216.254
/ip dns
set allow-remote-requests=yes servers=1.1.1.2,1.0.0.2
/ip firewall service-port
set dccp disabled=yes
/ip route
add distance=1 gateway=172.20.1.1
/ip route rule
add comment="Servidor NTP" dst-address=45.32.199.189/32 table=rutaVirtual2
add comment="Servidor NTP" dst-address=216.239.35.0/32 table=rutaVirtual2
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=8080
set ssh port=46825
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/lcd
set backlight-timeout=10m default-screen=stats-all read-only-mode=yes time-interval=hour
/mpls ldp
set enabled=yes lsr-id=10.8.3.166 transport-address=10.8.3.166
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login
/routing ospf network
add area=backbone network=192.168.142.0/24
add area=backbone network=192.168.126.0/24
add area=backbone network=192.168.1.0/24
add area=backbone network=192.168.146.0/24
add area=backbone disabled=yes network=192.168.130.0/24
add area=backbone network=192.168.116.0/24
add area=backbone network=192.168.226.0/24
add area=backbone network=192.168.16.0/24
add area=backbone network=192.168.56.0/24
add area=backbone network=192.168.216.0/24
/routing rip network
add network=192.168.1.0/24
add network=192.168.126.0/24
add network=192.168.146.0/24
add disabled=yes network=192.168.130.0/24
add network=192.168.116.0/24
add network=192.168.226.0/24
add network=192.168.16.0/24
add network=192.168.56.0/24
add network=192.168.216.0/24
add network=192.168.143.0/24
/snmp
set enabled=yes trap-community=SNMP-SOMNET
/system clock
set time-zone-name=America/Mexico_City
/system identity
set name=MK_CedisModerna
/system logging
add action=GrafanaLoki prefix=172.20.3.71 topics=critical
add action=GrafanaLoki prefix=172.20.3.71 topics=error
add action=GrafanaLoki prefix=172.20.3.71 topics=info
add action=GrafanaLoki prefix=172.20.3.71 topics=warning
/system ntp client
set enabled=yes primary-ntp=132.248.30.3 secondary-ntp=192.36.143.130
/system scheduler
add interval=1w name="BK_Semanal(FTP)" on-event=BK_Semanal policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=feb/10/2021 start-time=12:00:00
add interval=1w name="BK_Edi_Semanal(FTP)" on-event=BK_Edi_Semanal policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=feb/10/2021 start-time=12:05:00
/system script
add dont-require-permissions=no name=BK_Edi_Semanal owner=somnet policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":local backupedi ([/system identity get name] . \"-\" . [:pick [/system clock get date] 4 6]. [:pick [/system clock get date] 0 3]. [:pick [/system clock get date] 7 11]);\r\n/export compact file=\$backupedi;\r\nset \$backupedi (\$backupedi.\".rsc\");\r\n:local dstpath2 (\"/backups/Editables/\".\$backupedi);\r\n/tool fetch address=10.1.9.103 src-path=\$backupedi user=mkftp mode=ftp password=mkftp dst-path=\$dstpath2 upload=yes\r\ndelay delay-time=2;\r\nfile remove \$backupedi;"
add dont-require-permissions=no name=BK_Semanal owner=somnet policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":local backuptime ([/system identity get name] . \"-\" . [:pick [/system clock get date] 4 6]. [:pick [/system clock get date] 0 3]. [:pick [/system clock get date] 7 11]);\r\n/system backup save name=\$backuptime;\r\nset \$backuptime (\$backuptime.\".backup\");\r\n:local dstpath (\"/backups/Binarios/\".\$backuptime);\r\n/tool fetch address=10.1.9.103 src-path=\$backuptime user=mkftp mode=ftp\_password=mkftp dst-path=\$dstpath upload=yes;\r\ndelay delay-time=2;\r\nfile remove \$backuptime;"
/tool graphing interface
add
add
/tool graphing queue
add
/tool graphing resource
add
add
/tool sniffer
set filter-interface="ether5 - Meraki"
/user aaa
set default-group=full use-radius=yes