#                   version: 7.19.6 (stable)
#          factory-software: 7.15.3
#              total-memory: 4096.0MiB
#                       cpu: ARM64
#                 cpu-count: 4
#           total-hdd-space: 128.0MiB
#         architecture-name: arm64
#                board-name: CCR2004-16G-2S+
#                  platform: MikroTik
#   installed-version: 7.19.6
# 
# software id = HR2T-244A
#
# model = CCR2004-16G-2S+
# serial number = HKC0AH7W9JN
/interface bridge
add name=BRIDGE-SOMNET
add name=BRIDGE-UAEMEX-VXLAN1481
/interface ethernet
set [ find default-name=ether1 ] name="ether1-LAN ALMACEN"
set [ find default-name=ether16 ] name="ether16-REDUNDANCIA INALAMBRICA"
set [ find default-name=sfp-sfpplus1 ] mtu=1600 name="sfp-sfpplus1-WAN SOMNET"
/interface vxlan
add mac-address=FA:51:08:43:9E:60 mtu=1450 name=vxlan1481-ALMACEN vni=1481
/interface vlan
add disabled=yes interface="sfp-sfpplus1-WAN SOMNET" name=vlan148 vlan-id=148
/port
set 0 name=serial0
/snmp community
set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private
add addresses=::/0 name=SNMP-UAEMEX
/system logging action
add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.108 target=remote
/interface bridge port
add bridge=BRIDGE-SOMNET interface="sfp-sfpplus1-WAN SOMNET"
add bridge=BRIDGE-SOMNET interface="ether16-REDUNDANCIA INALAMBRICA"
add bridge=BRIDGE-UAEMEX-VXLAN1481 interface=vlan148
add bridge=BRIDGE-UAEMEX-VXLAN1481 interface=vxlan1481-ALMACEN
/interface bridge settings
set use-ip-firewall=yes
/interface vxlan vteps
add interface=vxlan1481-ALMACEN remote-ip=172.20.4.104
/ip address
add address=172.16.5.58/28 interface=BRIDGE-UAEMEX-VXLAN1481 network=172.16.5.48
add address=172.16.10.10/27 interface=BRIDGE-UAEMEX-VXLAN1481 network=172.16.10.0
add address=172.17.251.30/27 interface="ether1-LAN ALMACEN" network=172.17.251.0
add address=172.148.148.2/24 comment="pruebas DTIC" interface=BRIDGE-UAEMEX-VXLAN1481 network=172.148.148.0
add address=172.20.4.108/16 comment="IP ADMINISTRACI\D3N" interface=BRIDGE-SOMNET network=172.20.0.0
/ip dns
set servers=1.1.1.2,1.0.0.2
/ip firewall filter
add action=accept chain=input disabled=yes dst-port=4789 protocol=udp
/ip firewall mangle
add action=change-mss chain=forward new-mss=1400 protocol=tcp tcp-flags=syn
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=172.16.5.62 routing-table=main suppress-hw-offload=no
add comment="IP MONITOREO UAEMEX" disabled=no dst-address=148.215.1.146/32 gateway=172.16.10.30 routing-table=main suppress-hw-offload=no
add disabled=no distance=1 dst-address=192.36.143.0/24 gateway=172.20.1.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no dst-address=1.1.1.1/32 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no
/ip service
set ftp disabled=yes
set telnet disabled=yes
set www port=8080
set api disabled=yes
set api-ssl disabled=yes
set ssh port=46825
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.108
/snmp
set enabled=yes trap-version=3
/system clock
set time-zone-name=America/Mexico_City
/system identity
set name=SW-ALMACEN-2026
/system logging
add action=GrafanaLoki prefix=172.20.4.108 topics=critical
add action=GrafanaLoki prefix=172.20.4.108 topics=error
add action=GrafanaLoki prefix=172.20.4.108 topics=info
add action=GrafanaLoki prefix=172.20.4.108 topics=warning
/system ntp client
set enabled=yes
/system ntp client servers
add address=0.mx.pool.ntp.org
add address=1.mx.pool.ntp.org
/system routerboard settings
set enter-setup-on=delete-key
/tool graphing interface
add
/tool graphing resource
add
/tool sniffer
set file-name=ALMACEN-UAEMEX.cap filter-direction=rx filter-interface="ether1-LAN ALMACEN"
/user aaa
set default-group=full use-radius=yes