#                   version: 6.49.7 (stable)
#          factory-software: 6.46
#              total-memory: 128.0MiB
#                       cpu: MIPS 74Kc V4.12
#                 cpu-count: 1
#           total-hdd-space: 128.0MiB
#         architecture-name: mipsbe
#                board-name: RB2011UiAS
#                  platform: MikroTik
#   installed-version: 6.49.7
# Flags: U - undoable, R - redoable, F - floating-undo
#   ACTION                                   BY               POLICY
# 
# software id = PRC3-XDYP
#
# model = RB2011UiAS
# serial number = D51E0C6FD752
/interface bridge
add name=LAN
add name=WAN vlan-filtering=yes
/interface ethernet
set [ find default-name=ether10 ] name="ether 10" poe-out=forced-on
set [ find default-name=ether4 ] comment="IP: 172.20.2.131" name=ether4-AF60LR
set [ find default-name=ether5 ] comment="IP: 172.20.1.207" name="ether5-POWER BEAM"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/snmp community
set [ find default=yes ] name=SNMP-SOMNET
/system logging action
add bsd-syslog=yes name=GrafanaLoki remote=172.20.0.254 remote-port=1514 src-address=172.20.2.132 target=remote
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=LAN interface=ether2
add bridge=LAN interface=ether1 pvid=30
add bridge=LAN interface=ether3
add bridge=WAN interface=ether4-AF60LR path-cost=1
add bridge=LAN interface=ether6
add bridge=LAN interface=ether7
add bridge=LAN interface=ether8
add bridge=LAN interface=ether9
add bridge=WAN disabled=yes interface="ether5-POWER BEAM" path-cost=20000
add bridge=LAN interface=sfp1
add bridge=LAN interface="ether 10"
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=WAN tagged="ether5-POWER BEAM" untagged=ether1 vlan-ids=30
/ip address
add address=192.168.179.1/24 comment=LAN interface=LAN network=192.168.179.0
add address=172.20.2.132/16 comment=wan interface=WAN network=172.20.0.0
add address=38.58.38.20/24 interface=WAN network=38.58.38.0
/ip dns
set servers=1.1.1.2,1.0.0.2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN
/ip route
add distance=1 gateway=172.20.1.1
add check-gateway=ping comment="Ruta Principal Somnet" distance=2 gateway=38.58.38.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=8080
set ssh port=46825
set api disabled=yes
set api-ssl disabled=yes
/lcd
set time-interval=daily
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.2.132
/snmp
set contact=somnet enabled=yes location=UTSEM trap-version=2
/system clock
set time-zone-name=America/Mexico_City
/system identity
set name="UTSEM MK"
/system logging
add action=GrafanaLoki prefix=172.20.2.132 topics=critical
add action=GrafanaLoki prefix=172.20.2.132 topics=error
add action=GrafanaLoki prefix=172.20.2.132 topics=info
add action=GrafanaLoki prefix=172.20.2.132 topics=warning
/system ntp client
set enabled=yes primary-ntp=193.182.111.13 secondary-ntp=192.36.143.130
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
/tool sniffer
set file-name=ustem.cap filter-direction=rx filter-interface="ether 10"
/user aaa
set default-group=full use-radius=yes