# version: 7.21.2 (stable) # factory-software: 7.5 # total-memory: 1024.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 1024.0MiB # architecture-name: arm64 # board-name: RB5009UPr+S+ # platform: MikroTik # installed-version: 7.21.2 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U device changed MEXICARRIER write 2026-08-15 09:34:00 # U device changed MEXICARRIER write 2026-08-15 09:26:44 # U device changed MEXICARRIER write 2026-08-14 20:18:55 # U device changed MEXICARRIER write 2026-08-14 20:17:50 # U device changed MEXICARRIER write 2026-08-03 19:09:23 # U device changed MEXICARRIER write 2026-08-03 07:22:03 # U device changed MEXICARRIER write 2026-08-02 07:24:47 # U device changed MEXICARRIER write 2026-08-01 23:28:54 # U device changed MEXICARRIER write 2026-08-01 15:32:56 # U device changed MEXICARRIER write 2026-08-01 15:29:40 # U device changed MEXICARRIER write 2026-08-01 15:26:10 # U device changed MEXICARRIER write 2026-08-01 06:07:49 # U device changed MEXICARRIER write 2026-07-24 06:49:37 # U device changed MEXICARRIER write 2026-07-23 06:15:30 # U device changed MEXICARRIER write 2026-07-21 20:44:46 # U log rule changed MEXICARRIER write 2026-07-21 11:21:02 # U log rule changed MEXICARRIER write 2026-07-21 11:20:58 # U RADIUS client changed MEXICARRIER write 2026-07-21 11:20:06 # U log rule changed MEXICARRIER write 2026-07-21 11:18:47 # U log rule changed MEXICARRIER write 2026-07-21 11:18:44 # U log rule added MEXICARRIER write 2026-07-21 11:18:37 # U log rule added MEXICARRIER write 2026-07-21 11:18:26 # U log rule added MEXICARRIER write 2026-07-21 11:18:12 # U log rule added MEXICARRIER write 2026-07-21 11:18:00 # U log action added MEXICARRIER write 2026-07-21 11:17:42 # U dns changed MEXICARRIER write 2026-07-21 11:14:47 # U ip service changed MEXICARRIER write 2026-07-21 11:13:39 # U ip service changed MEXICARRIER write 2026-07-21 11:13:36 # U ntp settings changed MEXICARRIER write 2026-07-21 11:13:15 # U device changed MEXICARRIER write 2026-07-20 14:36:12 # U bridge port changed MEXICARRIER write 2026-07-17 17:57:14 # U bridge port changed MEXICARRIER write 2026-07-17 17:56:42 # U device changed MEXICARRIER write 2026-07-17 17:56:39 # U device changed MEXICARRIER write 2026-07-17 17:50:58 # U bridge port changed MEXICARRIER write 2026-07-17 17:37:09 # U bridge port changed MEXICARRIER write 2026-07-17 17:33:59 # U bridge port changed MEXICARRIER write 2026-07-17 17:30:54 # U bridge port changed MEXICARRIER write 2026-07-17 17:19:04 # U device changed MEXICARRIER write 2026-07-17 16:10:33 # U device changed MEXICARRIER write 2026-07-17 14:44:48 # U device changed MEXICARRIER write 2026-07-17 14:37:50 # U device changed MEXICARRIER write 2026-07-17 14:37:47 # U device changed MEXICARRIER write 2026-07-17 14:37:40 # U device changed MEXICARRIER write 2026-07-17 14:37:39 # U device changed MEXICARRIER write 2026-07-17 14:35:56 # U device changed MEXICARRIER write 2026-07-17 14:33:14 # U device changed MEXICARRIER write 2026-07-17 14:33:08 # U device changed MEXICARRIER write 2026-07-17 14:33:05 # U device changed MEXICARRIER write 2026-07-17 14:32:58 # U device changed MEXICARRIER write 2026-07-17 14:31:36 # U device changed MEXICARRIER write 2026-07-17 14:31:28 # U device changed MEXICARRIER write 2026-07-17 13:16:47 # U device changed MEXICARRIER write 2026-07-17 13:16:39 # U device changed MEXICARRIER write 2026-07-15 18:42:15 # U device changed MEXICARRIER write 2026-07-15 18:42:07 # U bridge port changed MEXICARRIER write 2026-07-15 18:41:14 # U bridge port changed MEXICARRIER write 2026-07-15 18:41:13 # U item changed MEXICARRIER write 2026-07-15 18:35:08 # U item changed MEXICARRIER write 2026-07-12 09:00:06 # U device changed MEXICARRIER write 2026-07-09 15:04:23 # U device changed MEXICARRIER write 2026-07-09 14:45:49 # U device changed MEXICARRIER write 2026-07-09 14:38:54 # U device changed MEXICARRIER write 2026-07-09 14:36:12 # U item changed MEXICARRIER write 2026-06-29 09:27:41 # U bridge port added MEXICARRIER write 2026-06-22 19:01:10 # U bridge port removed MEXICARRIER write 2026-06-22 19:00:55 # U device changed MEXICARRIER write 2026-06-22 18:49:13 # U device changed MEXICARRIER write 2026-06-22 18:49:01 # U device changed MEXICARRIER write 2026-06-22 18:48:55 # U device changed MEXICARRIER write 2026-06-22 18:48:48 # U device changed MEXICARRIER write 2026-06-22 18:47:10 # U device changed MEXICARRIER write 2026-06-22 18:46:51 # U device changed MEXICARRIER write 2026-06-22 18:46:32 # U item changed MEXICARRIER write 2026-06-22 18:44:42 # U device changed MEXICARRIER write 2026-06-22 18:41:27 # U item changed MEXICARRIER write 2026-06-19 17:53:37 # U bridge port changed MEXICARRIER write 2026-06-19 17:53:01 # U item changed MEXICARRIER write 2026-06-19 17:40:01 # U bridge port changed MEXICARRIER write 2026-06-19 17:39:34 # U config changed MEXICARRIER write 2026-06-19 17:27:26 # U device changed MEXICARRIER write 2026-06-19 17:26:19 # U device changed MEXICARRIER write 2026-06-19 17:25:56 # U device changed MEXICARRIER write 2026-06-19 17:25:25 # U device changed MEXICARRIER write 2026-06-19 17:25:03 # U item changed MEXICARRIER write 2026-06-19 17:23:50 # U device changed MEXICARRIER write 2026-06-19 17:11:20 # U device changed MEXICARRIER write 2026-06-19 17:05:01 # U device changed MEXICARRIER write 2026-06-19 16:59:53 # U device changed MEXICARRIER write 2026-06-19 16:59:28 # U device changed MEXICARRIER write 2026-06-19 16:59:06 # U device changed MEXICARRIER write 2026-06-19 16:58:19 # U device changed MEXICARRIER write 2026-06-19 16:57:56 # U device changed MEXICARRIER write 2026-06-19 16:57:34 # U device changed MEXICARRIER write 2026-06-19 12:19:38 # U device changed MEXICARRIER write 2026-06-19 12:19:28 # U device changed MEXICARRIER write 2026-06-19 12:19:07 # U device changed MEXICARRIER write 2026-06-19 12:18:58 # U device changed MEXICARRIER write 2026-06-19 12:18:36 # U device changed MEXICARRIER write 2026-06-19 12:18:20 # U device changed MEXICARRIER write 2026-06-19 11:51:57 # # software id = W9Q1-PZDP # # model = RB5009UPr+S+ # serial number = HF4094RRJTZ /interface bridge add name=BRIDGE-LAN port-cost-mode=short add name=BRIDGE-WAN port-cost-mode=short /interface ethernet set [ find default-name=ether1 ] comment="IP: 172.23.1.8" l2mtu=1514 name="ether1-JOSE TRINIDAD" set [ find default-name=ether2 ] comment="IP: 172.23.1.11 " disabled=yes l2mtu=1514 name="ether2-BRAYAN SAN CRISTOBAL" poe-out=forced-on set [ find default-name=ether3 ] l2mtu=1514 name="ether3 " poe-out=forced-on set [ find default-name=ether4 ] l2mtu=1514 name="ether4 " set [ find default-name=ether5 ] comment="IP: 172.23.1.10" l2mtu=1514 name=ether5-INTERCONEXION-SW-FO-LAN poe-out=forced-on set [ find default-name=ether6 ] l2mtu=1514 name="ether6 - TP-LINK CHUY" set [ find default-name=ether7 ] comment="IP: 172.23.1.14" l2mtu=1514 name="ether7- ATLACO 2" poe-out=forced-on set [ find default-name=ether8 ] auto-negotiation=no l2mtu=1514 name="ether8 " speed=100M-baseT-full set [ find default-name=sfp-sfpplus1 ] l2mtu=1514 name="sfp-sfpplus1- SUMALINK" /interface eoip add local-address=148.224.57.21 mac-address=02:3D:B1:EB:57:A4 name=eoip-tunnel1-TOLUCA remote-address=201.234.96.54 tunnel-id=1 /interface wireguard add listen-port=13231 mtu=1420 name=VPN_ATLACO private-key="oAAR3J5CVKydv9EpcxNaY3lj21RDroIq68AY/38ipEA=" /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /routing ospf instance add disabled=yes name=ospf-instance-1 originate-default=never router-id=15.15.15.15 routing-table=main /routing ospf area add disabled=yes instance=ospf-instance-1 name=ospf-area-1 /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.100.12 target=remote /interface bridge port add bridge=BRIDGE-LAN interface="ether1-JOSE TRINIDAD" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-LAN interface="ether3 " internal-path-cost=10 path-cost=10 add bridge=BRIDGE-LAN interface=ether5-INTERCONEXION-SW-FO-LAN internal-path-cost=10 path-cost=10 add bridge=BRIDGE-LAN interface="ether6 - TP-LINK CHUY" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-LAN interface="ether7- ATLACO 2" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-WAN interface="sfp-sfpplus1- SUMALINK" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-LAN interface=eoip-tunnel1-TOLUCA add bridge=BRIDGE-LAN interface="ether2-BRAYAN SAN CRISTOBAL" add bridge=BRIDGE-LAN interface="ether4 " /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=all lldp-mac-phy-config=yes lldp-max-frame-size=yes lldp-vlan-info=yes /ipv6 settings set disable-ipv6=yes /interface ovpn-server server add mac-address=FE:12:9B:0F:51:DE name=ovpn-server1 /interface wireguard peers add allowed-address=172.22.1.31/32 client-allowed-address=::/0 comment="LAP DAAIRA" endpoint-port=1 interface=VPN_ATLACO name=peer1 private-key="kNXvYACwtP2a4BOif2k7gS9JHGtsvPuglH6KXGyjenc=" public-key="84kSBG66aF4terViGhSHxrEhv9AxANGhkMkZXTYO2x4=" add allowed-address=172.22.1.32/32 comment="PC SOPORTE" interface=VPN_ATLACO name=peer2 public-key="jVr6woAS1A3gBi94AAxwm7tWbkNYpbj297+Grzp48g8=" add allowed-address=172.22.1.33/32 comment="LAP SOPORTE" interface=VPN_ATLACO name=peer3 public-key="drrMUBWgcrdmxBCR2WRvuuExaUDLcLdMHWiVRR8+vxQ=" add allowed-address=172.22.1.34/32 comment="PC CESAR" interface=VPN_ATLACO name=peer4 public-key="hUyNN9ugjd/Pcnpxr9fB/tERNQ6U94Ex3y1Eu8wWoUQ=" add allowed-address=172.22.1.35/32 comment="CEL BRAYAN" interface=VPN_ATLACO name=peer5 public-key="x3OJg+ZTuhkiI2ylTz33G/K4uuHNTJJwm+bbLNOPu3Q=" add allowed-address=172.22.1.36/32 client-allowed-address=::/0 comment="LAP2 BRAYAN" interface=VPN_ATLACO name=peer6 public-key="jX2/o/zTGg5/fkrdA/fb8j4BTEJiCo6rL/3/6hZv/Ug=" add allowed-address=172.22.1.37/32 comment="LAP1 BRAYAN" interface=VPN_ATLACO name=peer7 public-key="3zHCPrZM5aQquQAuf3buE7nKYF/W6Nu6pLBeYqhY2mI=" /ip address add address=172.22.1.30/24 comment="VPN " interface=VPN_ATLACO network=172.22.1.0 add address=172.23.1.1/24 comment=LAN interface=BRIDGE-LAN network=172.23.1.0 add address=172.20.100.12/16 comment="IP SOMNET" interface=BRIDGE-LAN network=172.20.0.0 add address=10.18.10.10/30 comment="IP WAN PRIVADA" interface=BRIDGE-WAN network=10.18.10.8 add address=148.224.57.21 comment="IP WAN" interface=BRIDGE-WAN network=148.224.57.20 add address=148.224.57.21 comment="[ IP PUBLICA - SUMMALINK ]" interface=lo network=148.224.57.21 /ip dns set allow-remote-requests=yes servers=1.1.1.2,1.0.0.2 /ip dns static add address=38.123.220.2 name=swatlaco.com type=A /ip firewall filter add action=accept chain=output comment="PERMITIR EOIP" protocol=gre add action=accept chain=input comment="permitir wireguard" dst-port=13231 protocol=udp add action=drop chain=forward comment="Limitar Sesiones" connection-limit=65300,32 src-address=172.23.1.0/24 /ip firewall nat add action=src-nat chain=srcnat comment="NAT SUMMALINK" out-interface=BRIDGE-WAN to-addresses=148.224.57.21 add action=masquerade chain=srcnat disabled=yes out-interface=BRIDGE-WAN /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=10.18.10.9 routing-table=main scope=30 target-scope=10 /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ipv6 nd set [ find default=yes ] advertise-dns=yes /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.100.12 /routing ospf interface-template add area=ospf-area-1 disabled=no networks=10.230.0.254/32 type=ptp add area=ospf-area-1 disabled=no networks=172.20.0.0/16 type=ptp /snmp set enabled=yes trap-version=2 /system clock set time-zone-name=America/Mexico_City /system identity set name=RT-ATLACOMULCO-PROVEEDOR /system logging add action=GrafanaLoki prefix=172.20.100.12 topics=critical add action=GrafanaLoki prefix=172.20.100.12 topics=error add action=GrafanaLoki prefix=172.20.100.12 topics=info add action=GrafanaLoki prefix=172.20.100.12 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /tool graphing interface add /tool graphing resource add /tool romon set enabled=yes /tool sniffer set file-name=atlaco.cap filter-direction=rx filter-interface="ether2-BRAYAN SAN CRISTOBAL" /user aaa set default-group=full use-radius=yes