# version: 7.19.6 (stable) # factory-software: 7.15 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.19.6 # # software id = 40I9-X5KS # # model = CCR2004-16G-2S+ # serial number = HM80B0MHZM8 /interface bridge add name=BRIDGE-LAN add name=BRIDGE-WAN /interface ethernet set [ find default-name=ether1 ] name="ether1-WAN SOMNET" /ip pool add name=dhcp_pool0 ranges=172.18.62.20-172.18.62.254 /ip dhcp-server add address-pool=dhcp_pool0 interface=BRIDGE-LAN lease-time=10m name=dhcp1 /port set 0 name=serial0 /queue simple add max-limit=50M/50M name=queue1 target=172.18.62.224/32 add max-limit=50M/50M name=queue4 target=172.18.62.225/32 add max-limit=50M/50M name=queue5 target=172.18.62.227/32 add max-limit=50M/50M name=queue7 target=172.18.62.228/32 add max-limit=50M/50M name=queue8 target=172.18.62.229/32 add max-limit=50M/50M name=queue9 target=172.18.62.230/32 add max-limit=50M/50M name=queue10 target=172.18.62.231/32 add max-limit=50M/50M name=queue11 target=172.18.62.232/32 add max-limit=50M/50M name=queue13 target=172.18.62.233/32 add max-limit=50M/50M name=queue14 target=172.18.62.234/32 add max-limit=50M/50M name=queue15 target=172.18.62.235/32 add max-limit=50M/50M name=queue16 target=172.18.62.236/32 add max-limit=50M/50M name=queue17 target=172.18.62.237/32 add max-limit=50M/50M name=queue18 target=172.18.62.238/32 add max-limit=50M/50M name=queue19 target=172.18.62.239/32 add max-limit=50M/50M name=queue20 target=172.18.62.240/32 add max-limit=50M/50M name=queue21 target=172.18.62.241/32 add max-limit=50M/50M name=queue22 target=172.18.62.242/32 add max-limit=50M/50M name=queue23 target=172.18.62.243/32 add max-limit=50M/50M name=queue24 target=172.18.62.245/32 add max-limit=50M/50M name=queue25 target=172.18.62.244/32 add max-limit=50M/50M name=queue26 target=172.18.62.246/32 add max-limit=50M/50M name=queue27 target=172.18.62.247/32 add max-limit=50M/50M name=queue28 target=172.18.62.249/32 add max-limit=50M/50M name=queue29 target=172.18.62.250/32 add max-limit=50M/50M name=queue30 target=172.18.62.252/32 add max-limit=50M/50M name=queue31 target=172.18.62.251/32 add max-limit=50M/50M name=queue32 target=172.18.62.253/32 add max-limit=50M/50M name=queue33 target=172.18.62.254/32 /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.3.248 target=remote /interface bridge port add bridge=BRIDGE-LAN interface=ether2 add bridge=BRIDGE-LAN interface=ether3 add bridge=BRIDGE-LAN interface=ether4 add bridge=BRIDGE-LAN interface=ether5 add bridge=BRIDGE-LAN interface=ether6 add bridge=BRIDGE-LAN interface=ether7 add bridge=BRIDGE-LAN interface=ether8 add bridge=BRIDGE-LAN interface=ether9 add bridge=BRIDGE-LAN interface=ether10 add bridge=BRIDGE-LAN interface=ether12 add bridge=BRIDGE-LAN interface=ether16 add bridge=BRIDGE-LAN interface=ether11 add bridge=BRIDGE-LAN interface=ether13 add bridge=BRIDGE-LAN interface=ether14 add bridge=BRIDGE-LAN interface=ether15 add bridge=BRIDGE-WAN interface="ether1-WAN SOMNET" add bridge=BRIDGE-LAN interface=sfp-sfpplus1 multicast-router=disabled add bridge=BRIDGE-LAN interface=sfp-sfpplus2 multicast-router=disabled /ip address add address=38.58.38.16/24 comment="IP P\FAblica Somnet" interface="ether1-WAN SOMNET" network=38.58.38.0 add address=172.20.3.248/16 comment="IP administraci\F3n" interface="ether1-WAN SOMNET" network=172.20.0.0 add address=172.18.60.1/24 comment="Segmento 1 In\E1lambricos" interface=BRIDGE-LAN network=172.18.60.0 add address=172.18.61.1/24 comment="Segmento 2 in\E1lambricos" interface=BRIDGE-LAN network=172.18.61.0 add address=172.18.62.1/24 comment="Segmento Fibra" interface=BRIDGE-LAN network=172.18.62.0 /ip dhcp-server network add address=172.18.62.0/24 dns-server=1.1.1.3,1.0.0.3 gateway=172.18.62.1 /ip dns set servers=1.1.1.3,1.0.0.3 /ip firewall nat # in/out-interface matcher not possible when interface (ether1-WAN SOMNET) is slave - use master instead (BRIDGE-WAN) add action=masquerade chain=srcnat out-interface="ether1-WAN SOMNET" add action=masquerade chain=srcnat out-interface=BRIDGE-WAN /ip route add check-gateway=ping comment="Ruta por Default" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=38.58.38.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment="Ruta Redundancia " disabled=no distance=20 dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no add check-gateway=ping dst-address=172.18.70.0/24 gateway=172.20.3.249 routing-table=main suppress-hw-offload=no /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.3.248 /snmp set enabled=yes trap-version=2 /system clock set time-zone-name=America/Mexico_City /system identity set name=RT-ANONAS /system logging add action=GrafanaLoki prefix=172.20.3.248 topics=critical add action=GrafanaLoki prefix=172.20.3.248 topics=error add action=GrafanaLoki prefix=172.20.3.248 topics=info add action=GrafanaLoki prefix=172.20.3.248 topics=warning /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing resource add /user aaa set default-group=full use-radius=yes