#                   version: 7.21beta5 (testing)
#          factory-software: 7.8
#              total-memory: 1024.0MiB
#                       cpu: ARM64
#                 cpu-count: 4
#           total-hdd-space: 1024.0MiB
#         architecture-name: arm64
#                board-name: RB5009UPr+S+
#                  platform: MikroTik
#   installed-version: 7.21beta5
# Flags: U - UNDOABLE
# Columns: ACTION, BY, POLICY, TIME
#   ACTION          BY           POLICY  TIME
# U config changed  MEXICARRIER  write   2026-08-14 13:10:24
# U device changed  MEXICARRIER  write   2026-07-13 18:21:41
# 
# software id = 49SH-P1X0
#
# model = RB5009UPr+S+
# serial number = HGV0A3HPT1F
/interface bridge
add admin-mac=F4:1E:57:14:D0:E8 auto-mac=no comment=defconf name="BR -LAN" port-cost-mode=short priority=0
/interface ethernet
set [ find default-name=ether3 ] poe-out=forced-on
set [ find default-name=ether6 ] comment="IP: 192.168.11.5" poe-out=off
/interface vlan
add interface=ether6 name=VLAN11 vlan-id=11
/ip pool
add name=dhcp_pool8 ranges=172.11.0.10-172.11.0.254
add name=dhcp_pool9 ranges=172.11.0.2-172.11.0.254
/ip dhcp-server
add address-pool=dhcp_pool9 interface=VLAN11 lease-time=5m name=dhcp1
/snmp community
set [ find default=yes ] name=SNMP-SOMNET
/system logging action
add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 target=remote
/interface bridge port
add bridge="BR -LAN" comment=defconf interface=ether4
add bridge="BR -LAN" comment=defconf interface=ether5
add bridge="BR -LAN" comment=defconf interface=ether6
/ip neighbor discovery-settings
# ipv6 neighbor configuration has changed, please restart the device in order to apply the new settings
set discover-interface-list=all
/ipv6 settings
# ipv6 neighbor configuration has changed, please restart the device in order to apply the new settings
set disable-ipv6=yes
/ip address
add address=172.20.1.15/16 interface=sfp-sfpplus1 network=172.20.0.0
add address=192.168.11.1/24 interface="BR -LAN" network=192.168.11.0
add address=172.11.0.1/24 interface=VLAN11 network=172.11.0.0
add address=38.58.38.28/24 comment="ASN Somnet" interface=sfp-sfpplus1 network=38.58.38.0
/ip dhcp-server lease
add address=172.11.0.19 client-id=1:4c:d7:c8:7e:1f:f5 mac-address=4C:D7:C8:7E:1F:F5 server=dhcp1
/ip dhcp-server network
add address=172.11.0.0/24 gateway=172.11.0.1
/ip dns
set servers=1.1.1.2,1.0.0.2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=sfp-sfpplus1
/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main scope=30 target-scope=10
add check-gateway=ping disabled=no dst-address=0.0.0.0/0 gateway=38.58.38.1 routing-table=main
/ip service
set ftp disabled=yes
set telnet disabled=yes
set www port=8080
set api disabled=yes
set api-ssl disabled=yes
set ssh port=46825
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.1.15
/snmp
set enabled=yes trap-version=2
/system clock
set time-zone-name=America/Mexico_City
/system identity
set name=RT-DAIRA-SNMARTIN
/system logging
add action=GrafanaLoki prefix=172.20.1.15 topics=critical
add action=GrafanaLoki prefix=172.20.1.15 topics=error
add action=GrafanaLoki prefix=172.20.1.15 topics=info
add action=GrafanaLoki prefix=172.20.1.15 topics=warning
/system ntp client
set enabled=yes
/system ntp client servers
add address=1.mx.pool.ntp.org
add address=0.mx.pool.ntp.org
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
/tool sniffer
set file-name=san.cap filter-direction=rx filter-interface=ether4
/user aaa
set default-group=full use-radius=yes