# version: 7.21.3 (stable) # factory-software: 7.15.3 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.21.3 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U device changed UAEMEX write 2026-08-15 15:21:41 # U device changed UAEMEX write 2026-08-15 15:19:53 # U address changed UAEMEX write 2026-08-15 15:19:22 # U address changed UAEMEX write 2026-08-10 13:37:15 # U A somnet changed UAEMEX write 2026-08-10 13:30:20 # U A somnet changed UAEMEX write 2026-08-10 13:30:19 # U A somnet changed UAEMEX write 2026-08-10 13:28:56 # U A somnet changed UAEMEX write 2026-08-10 13:28:55 # U filter rule changed UAEMEX write 2026-08-10 11:40:56 # U filter rule changed UAEMEX write 2026-08-10 11:40:56 # U filter rule changed UAEMEX write 2026-08-10 11:40:34 # U filter rule changed UAEMEX write 2026-08-10 11:40:34 # U filter rule changed UAEMEX write 2026-08-10 11:36:32 # U filter rule changed UAEMEX write 2026-08-10 11:36:32 # U device changed UAEMEX write 2026-08-10 11:36:19 # U device changed UAEMEX write 2026-08-10 11:36:16 # U filter rule changed UAEMEX write 2026-08-10 11:35:07 # U filter rule changed UAEMEX write 2026-08-10 11:35:07 # U device changed UAEMEX write 2026-08-10 10:57:02 # U device changed UAEMEX write 2026-08-10 10:56:27 # U device changed UAEMEX write 2026-08-10 10:46:11 # U device changed UAEMEX write 2026-08-10 10:46:09 # U device changed UAEMEX write 2026-08-10 10:44:32 # U device changed UAEMEX write 2026-08-10 10:44:25 # U device changed UAEMEX write 2026-08-10 10:41:40 # U device changed UAEMEX write 2026-08-10 10:41:30 # U device changed UAEMEX write 2026-08-10 10:37:41 # U device changed UAEMEX write 2026-08-10 10:37:36 # U device changed UAEMEX write 2026-08-10 10:37:26 # U device changed UAEMEX write 2026-08-10 10:37:11 # U address changed UAEMEX write 2026-08-08 14:45:40 # U address changed UAEMEX write 2026-08-08 14:45:31 # U A somnet changed UAEMEX write 2026-08-08 14:09:21 # U A Somnet changed UAEMEX write 2026-08-08 14:09:00 # U A Somnet changed UAEMEX write 2026-08-08 13:55:14 # U A Somnet added UAEMEX write 2026-08-08 13:55:01 # U filter-rule-13 added UAEMEX write 2026-08-08 13:54:21 # U address added UAEMEX write 2026-08-08 13:50:39 # U dns changed UAEMEX write 2026-07-07 10:36:31 # U ip service changed UAEMEX write 2026-07-07 10:35:30 # U RADIUS client added UAEMEX write 2026-07-07 10:34:35 # U user AAA settings changed UAEMEX write 2026-07-07 10:33:18 # policy # U log rule changed UAEMEX write 2026-07-07 10:33:03 # U log rule added UAEMEX write 2026-07-07 10:32:55 # U log rule added UAEMEX write 2026-07-07 10:32:30 # U log rule added UAEMEX write 2026-07-07 10:32:18 # U log rule added UAEMEX write 2026-07-07 10:31:57 # U log action added UAEMEX write 2026-07-07 10:31:39 # U route 0.0.0.0/0 changed UAEMEX write 2026-06-24 09:47:09 # U route 0.0.0.0/0 changed UAEMEX write 2026-06-24 09:47:07 # U A cogent changed UAEMEX write 2026-06-24 09:30:12 # U filter-rule-12 changed UAEMEX write 2026-06-24 09:28:41 # U filter-rule-12 changed UAEMEX write 2026-06-24 09:26:52 # U A cirion changed UAEMEX write 2026-06-24 09:26:12 # U filter-rule-12 added UAEMEX write 2026-06-24 09:25:59 # U ip service changed UAEMEX write 2026-06-24 09:21:43 # U ip service changed UAEMEX write 2026-06-24 09:21:42 # U route 0.0.0.0/0 changed UAEMEX write 2026-06-22 09:37:21 # U A cogent changed UAEMEX write 2026-06-22 09:36:51 # U A cirion changed UAEMEX write 2026-06-19 14:56:29 # U A cirion changed UAEMEX write 2026-06-19 14:56:01 # U A cogent changed UAEMEX write 2026-06-19 14:55:37 # U A cirion changed UAEMEX write 2026-06-19 14:55:31 # U filter-rule-11 changed UAEMEX write 2026-06-19 14:54:09 # U filter-rule-11 added UAEMEX write 2026-06-19 14:53:59 # U A cirion changed UAEMEX write 2026-06-19 12:21:34 # U A cirion changed UAEMEX write 2026-06-19 12:21:15 # U A cirion changed UAEMEX write 2026-06-19 12:21:13 # U A cirion changed UAEMEX write 2026-06-19 12:21:03 # U A cirion changed UAEMEX write 2026-06-19 09:23:48 # U A cirion changed UAEMEX write 2026-06-19 09:18:42 # U A cirion added UAEMEX write 2026-06-19 09:17:06 # U address changed UAEMEX write 2026-06-17 09:16:03 # U address added UAEMEX write 2026-06-17 09:15:49 # U device added UAEMEX write 2026-06-17 09:15:23 # U item changed UAEMEX write 2026-06-10 11:00:27 # U changed snmp settings UAEMEX write 2026-06-10 10:57:54 # U changed snmp settings UAEMEX write 2026-06-10 10:55:02 # U item changed UAEMEX write 2026-06-10 10:50:32 # U changed snmp settings UAEMEX write 2026-06-10 10:46:23 # U changed snmp settings UAEMEX write 2026-06-10 10:46:17 # U item changed UAEMEX write 2026-06-10 10:46:07 # U item changed UAEMEX write 2026-06-10 10:41:36 # U item changed UAEMEX write 2026-06-08 18:26:46 # U item changed UAEMEX write 2026-06-08 17:59:54 # U changed snmp settings UAEMEX write 2026-06-08 15:38:02 # U item changed UAEMEX write 2026-06-08 15:37:55 # U ip service changed UAEMEX write 2026-05-30 13:13:40 # # software id = 88LT-5SHY # # model = CCR2004-16G-2S+ # serial number = HKC0AJPW1R5 /interface ethernet set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no name="sfp-sfpplus1 - WAN SOMNET" speed=1G-baseX set [ find default-name=sfp-sfpplus2 ] name="sfp-sfpplus2 - FORTINET" /interface vlan add interface="sfp-sfpplus1 - WAN SOMNET" name=vlan1200 vlan-id=1200 /routing bgp instance add as=28526 disabled=no name="EA-UAEM\EF\BF\BDx" /snmp community set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 name=SNMP-SOMNET add addresses=::/0 name=SNMP-UAEMEX /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.1.210 target=remote /ip neighbor discovery-settings set discover-interface-list=all /ipv6 settings set disable-ipv6=yes /ip address add address=172.20.1.210/16 comment="IP ADMINISTRACI\D3N" interface="sfp-sfpplus1 - WAN SOMNET" network=172.20.0.0 add address=148.215.150.2/30 comment="LAN UAEM\EF\BF\BDx" interface="sfp-sfpplus2 - FORTINET" network=148.215.150.0 add address=38.104.249.78/29 comment="IP Peer Cogent" interface="sfp-sfpplus1 - WAN SOMNET" network=38.104.249.72 add address=201.234.96.56/27 comment="IP Peer Cirion" interface=vlan1200 network=201.234.96.32 add address=38.58.38.65/24 comment="IP Peer Somnet" interface="sfp-sfpplus1 - WAN SOMNET" network=38.58.38.0 /ip dns set servers=1.1.1.2,1.0.0.2 /ip firewall address-list add address=148.215.150.0/24 list="IPv4 UAEM\E9x" add address=148.215.154.0/24 list="IPv4 UAEM\E9x" add address=148.215.155.0/24 list="IPv4 UAEM\E9x" add address=148.215.156.0/24 list="IPv4 UAEM\E9x" add address=148.215.157.0/24 list="IPv4 UAEM\E9x" add address=148.215.158.0/24 list="IPv4 UAEM\E9x" add address=148.215.159.0/24 list="IPv4 UAEM\E9x" add address=148.215.160.0/24 list="IPv4 UAEM\E9x" add address=148.215.164.0/24 list="IPv4 UAEM\E9x" add address=148.215.214.0/24 list="IPv4 UAEM\E9x" /ip firewall filter add action=fasttrack-connection chain=forward comment=FastTrack connection-state=established,related add action=accept chain=forward comment="Aceptar FastTrack" connection-state=established,related /ip route add disabled=no distance=1 dst-address=148.215.150.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.154.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.155.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.156.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.157.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.158.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.159.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.160.0/22 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.164.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.165.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=148.215.214.0/24 gateway=148.215.150.1 routing-table=main scope=30 target-scope=10 add check-gateway=ping comment="RUTA POR DEFAULT" disabled=no distance=30 dst-address=0.0.0.0/0 gateway=38.104.249.73 routing-table=main scope=30 target-scope=10 /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.1.210 /routing bgp connection add afi=ip as=28526 comment="SESI\D3N A COGENT" connect=yes disabled=no instance="EA-UAEM\EF\BF\BDx" listen=yes local.address=38.104.249.78 .role=ebgp name="A cogent " output.filter-chain=bgp-out-filter .network="IPv4 UAEM\E9x" .redistribute=connected,static remote.address=38.104.249.73/32 .as=174 routing-table=main tcp-md5-key=UAEMEX2026 add afi=ip as=28526 comment="SESI\D3N A CIRION" connect=yes disabled=no input.filter=bgp-in-cirion instance="EA-UAEM\EF\BF\BDx" listen=yes local.address=201.234.96.56 .role=ebgp name="A cirion" output.default-originate=never .filter-chain=bgp-out-filter .network="IPv4 UAEM\E9x" .redistribute=connected,static remote.address=201.234.96.33/32 .as=3356 routing-table=main tcp-md5-key=UAEMEX2026 add afi=ip as=28526 comment="SESION A SOMNET" connect=yes disabled=no input.filter=bgp-in-somnet instance="EA-UAEM\EF\BF\BDx" listen=yes local.address=38.58.38.65 .role=ebgp name="A somnet" output.default-originate=never .filter-chain=bgp-out-filter .network="IPv4 UAEM\E9x" .redistribute=connected,static remote.address=38.58.38.1/32 .as=273304 routing-table=main tcp-md5-key=UAEMEX2026 /routing filter rule add chain=bgp-out disabled=no rule="if (dst in 148.215.150.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.154.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.155.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.156.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.157.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.158.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.159.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.160.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.164.0/24) { accept } else { reject }" add chain=bgp-out disabled=no rule="if (dst in 148.215.165.0/24) { accept } else { reject }" add chain=bgp-out-filter disabled=no rule="if (dst in 148.215.0.0/16) { accept } else { reject }" add chain=bgp-in-cirion disabled=no rule="set bgp-local-pref 200; accept" add chain=bgp-in-somnet disabled=no rule="set bgp-local-pref 300; accept" /snmp set enabled=yes src-address=172.20.1.210 trap-version=3 /system clock set time-zone-name=America/Mexico_City /system identity set name="RT-EDIFICIO ADMINISTRATIVO" /system logging add action=GrafanaLoki prefix=172.20.1.210 topics=critical add action=GrafanaLoki prefix="172.20.1.210 " topics=error add action=GrafanaLoki prefix=172.20.1.210 topics=info add action=GrafanaLoki prefix=172.20.1.210 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing resource add /tool sniffer set file-name=ediadm.cap filter-direction=rx filter-interface="sfp-sfpplus2 - FORTINET" /user aaa set use-radius=yes