#                   version: 7.19.1 (stable)
#          factory-software: 7.4
#              total-memory: 64.0MiB
#                       cpu: MIPS 24Kc V7.4
#                 cpu-count: 1
#           total-hdd-space: 16.0MiB
#         architecture-name: mipsbe
#                board-name: CRS504-4XQ
#                  platform: MikroTik
#   installed-version: 7.19.1
# 
# software id = A2BI-VA34
#
# model = CRS504-4XQ
# serial number = HE208X0JQXG
/interface bridge
add name=BRIDGE-SOMNET port-cost-mode=short priority=0x1000
/interface ethernet
set [ find default-name=qsfp28-1-1 ] name="qsfp28-1-1-COGENT 100Gbps"
set [ find default-name=qsfp28-2-1 ] auto-negotiation=no fec-mode=fec74 speed=10G-baseCR
set [ find default-name=qsfp28-3-1 ] auto-negotiation=no comment="CRS-317     IP: 172.20.1.2" name=qsfp28-3-1-LAG-MEMBER1-SW-FO-IXT-1 speed=10G-baseCR
set [ find default-name=qsfp28-3-2 ] auto-negotiation=no name=qsfp28-3-2-LAG-MEMBER3-SW-FO-IXT-1 speed=10G-baseCR
set [ find default-name=qsfp28-3-3 ] auto-negotiation=no name=qsfp28-3-3-LAG-MEMBER2-SW-FO-IXT-1 speed=10G-baseCR
set [ find default-name=qsfp28-3-4 ] auto-negotiation=no comment="CRS-317   IP: 172.20.1.230" name=qsfp28-3-4-SW-FO-IXT-2 speed=10G-baseCR
/interface bonding
add comment=CRS317----172.20.1.2 lacp-rate=1sec mode=802.3ad name=LAG-CRS317-SW-FO-IXT1 slaves="qsfp28-3-3-LAG-MEMBER2-SW-FO-IXT-1,qsfp28-3-1-LAG-MEMBER1-SW-FO-IXT-1,qsfp28-3-2-LAG-MEMBER3-SW-FO-IXT-1"
add comment=CRS317---172.20.1.230 lacp-rate=1sec mode=802.3ad name=LAG-CRS317-SW-FO-IXT2 slaves=qsfp28-3-4-SW-FO-IXT-2 transmit-hash-policy=layer-2-and-3
/port
set 0 name=serial0
/snmp community
add addresses=::/0 name=SNMP-SOMNET
/system logging action
add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.1.3 target=remote
/interface bridge port
add bridge=BRIDGE-SOMNET interface="qsfp28-1-1-COGENT 100Gbps" internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET interface=qsfp28-1-4 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET interface=qsfp28-1-2 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET interface=qsfp28-1-3 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET interface=qsfp28-2-1 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET interface=qsfp28-2-2 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET interface=qsfp28-2-3 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET interface=qsfp28-2-4 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET disabled=yes interface=qsfp28-3-1-LAG-MEMBER1-SW-FO-IXT-1 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET disabled=yes interface=qsfp28-3-2-LAG-MEMBER3-SW-FO-IXT-1 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET disabled=yes interface=qsfp28-3-3-LAG-MEMBER2-SW-FO-IXT-1 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET disabled=yes interface=qsfp28-3-4-SW-FO-IXT-2 internal-path-cost=10 path-cost=10
add bridge=BRIDGE-SOMNET disabled=yes interface=ether1
add bridge=BRIDGE-SOMNET interface=LAG-CRS317-SW-FO-IXT1
add bridge=BRIDGE-SOMNET interface=LAG-CRS317-SW-FO-IXT2
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface ovpn-server server
add mac-address=FE:2C:4E:4F:62:3A name=ovpn-server1
/ip address
add address=172.20.1.3/16 interface=BRIDGE-SOMNET network=172.20.0.0
add address=38.123.220.30/24 interface=BRIDGE-SOMNET network=38.123.220.0
/ip dns
set servers=1.1.1.2,1.0.0.2
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=38.123.220.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
/ip service
set ftp disabled=yes
set telnet disabled=yes
set www port=8080
set api disabled=yes
set api-ssl disabled=yes
set ssh port=46825
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.1.3
/snmp
set enabled=yes trap-community=SNMP-SOMNET trap-version=2
/system clock
set time-zone-autodetect=no time-zone-name=America/Mexico_City
/system identity
set name=SW-100Gb-IXTLAHUACA
/system logging
add action=GrafanaLoki prefix=172.20.1.3 topics=info
add action=GrafanaLoki prefix=172.20.1.3 topics=critical
add action=GrafanaLoki prefix=172.20.1.3 topics=error
add action=GrafanaLoki prefix=172.20.1.3 topics=warning
/system ntp client
set enabled=yes
/system ntp client servers
add address=149.56.19.163
/system routerboard settings
set enter-setup-on=delete-key
/tool graphing interface
add
/tool graphing resource
add
/user aaa
set default-group=full use-radius=yes