# version: 7.23.2 (stable) # factory-software: 7.18 # total-memory: 32.0GiB # cpu: ARM64 # cpu-count: 16 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: ROSE Data Server # platform: MikroTik # installed-version: 7.23.2 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U device removed MEXICARRIER write 2026-10-10 11:15:27 # U to-cogent changed MEXICARRIER write 2026-10-10 11:12:57 # U to-cogent changed MEXICARRIER write 2026-10-10 11:12:52 # U address removed MEXICARRIER write 2026-10-10 11:12:09 # U to-administrativo changed MEXICARRIER write 2026-10-10 11:06:28 # U item changed brayan write 2026-10-02 16:17:46 # U item changed brayan write 2026-10-02 16:15:10 # U address changed brayan write 2026-10-02 15:59:24 # U address changed brayan write 2026-10-02 15:39:50 # U device changed brayan write 2026-10-02 15:39:48 # U address changed brayan write 2026-10-02 15:39:43 # U address added brayan write 2026-10-02 14:24:27 # U device added brayan write 2026-10-02 14:24:12 # U device removed brayan write 2026-10-02 13:53:02 # U address removed brayan write 2026-10-02 13:52:53 # U address added brayan write 2026-10-02 11:02:19 # U device added brayan write 2026-10-02 11:02:07 # U device removed MEXICARRIER write 2026-09-29 19:23:09 # U device changed MEXICARRIER write 2026-09-29 19:06:36 # U device changed MEXICARRIER write 2026-09-29 19:05:36 # U address added MEXICARRIER write 2026-09-28 13:25:11 # U to-dtic added MEXICARRIER write 2026-09-23 18:26:32 # U to-ixtlahuaca changed MEXICARRIER write 2026-09-22 13:08:38 # U to-rectoria changed MEXICARRIER write 2026-09-22 13:08:35 # U to-rectoria changed MEXICARRIER write 2026-09-22 13:08:34 # U ro-administrativo changed MEXICARRIER write 2026-09-22 13:08:30 # U ro-administrativo changed MEXICARRIER write 2026-09-22 13:08:29 # U device changed MEXICARRIER write 2026-09-22 12:57:02 # U to-cogent changed MEXICARRIER write 2026-09-22 12:37:21 # U to-cogent changed MEXICARRIER write 2026-09-22 12:28:31 # U address changed MEXICARRIER write 2026-09-22 12:20:04 # U address changed MEXICARRIER write 2026-09-22 12:20:03 # U address changed MEXICARRIER write 2026-09-22 12:20:01 # U device changed brayan write 2026-09-12 10:59:27 # U address removed brayan write 2026-09-07 12:32:42 # U device changed brayan write 2026-09-07 12:30:53 # U device changed brayan write 2026-09-07 12:30:51 # U address added brayan write 2026-09-07 12:28:51 # U address removed brayan write 2026-09-07 12:27:38 # U address changed brayan write 2026-09-07 12:26:33 # U address added brayan write 2026-09-07 12:26:12 # U ip service changed brayan write 2026-09-04 18:21:01 # U device changed brayan write 2026-09-04 18:18:52 # U device changed brayan write 2026-09-04 16:46:12 # U route 148.215.0.0/16 removed brayan write 2026-09-04 16:45:04 # U device changed brayan write 2026-09-04 16:42:56 # U bridge port changed brayan write 2026-09-04 16:42:52 # U bridge port changed brayan write 2026-09-04 16:42:51 # U device changed brayan write 2026-09-02 17:24:41 # U bridge port removed brayan write 2026-09-02 09:26:31 # U to-rectoria changed MEXICARRIER write 2026-09-01 13:43:45 # U to-rectoria changed MEXICARRIER write 2026-09-01 13:43:44 # U to-rectoria changed MEXICARRIER write 2026-08-31 14:44:35 # U to-rectoria added MEXICARRIER write 2026-08-31 14:44:25 # U filter-rule-8 removed brayan write 2026-08-29 18:11:01 # U filter-rule-8 added brayan write 2026-08-29 18:05:54 # U to-ixtlahuaca changed brayan write 2026-08-29 17:56:01 # U to-ixtlahuaca changed brayan write 2026-08-29 17:53:57 # U to-ixtlahuaca changed brayan write 2026-08-29 17:33:30 # U to-ixtlahuaca changed brayan write 2026-08-29 17:31:57 # U to-ixtlahuaca changed brayan write 2026-08-29 17:23:23 # U to-ixtlahuaca changed brayan write 2026-08-29 17:23:16 # U to-ixtlahuaca changed brayan write 2026-08-29 17:22:46 # U to-ixtlahuaca changed brayan write 2026-08-29 17:22:46 # U to-ixtlahuaca changed brayan write 2026-08-29 17:22:36 # U to-ixtlahuaca changed brayan write 2026-08-29 17:22:20 # U to-ixtlahuaca changed brayan write 2026-08-29 17:02:52 # U to-ixtlahuaca changed brayan write 2026-08-29 17:02:51 # U to-ixtlahuaca changed brayan write 2026-08-29 17:02:47 # U to-ixtlahuaca changed brayan write 2026-08-29 15:05:50 # U to-ixtlahuaca changed brayan write 2026-08-29 15:04:17 # U to-ixtlahuaca changed brayan write 2026-08-29 15:04:16 # U to-ixtlahuaca changed brayan write 2026-08-29 15:04:11 # U to-ixtlahuaca changed brayan write 2026-08-29 15:01:38 # U to-ixtlahuaca changed brayan write 2026-08-29 15:01:38 # U filter-rule-7 changed brayan write 2026-08-29 15:01:03 # U to-ixtlahuaca changed brayan write 2026-08-29 14:57:17 # U to-ixtlahuaca changed brayan write 2026-08-29 14:56:48 # U filter-rule-7 added brayan write 2026-08-29 14:56:00 # U ro-administrativo added brayan write 2026-08-29 14:15:50 # U to-administrativo removed brayan write 2026-08-29 14:14:11 # U route 148.215.0.0/16 removed brayan write 2026-08-29 14:13:54 # U route 148.215.0.0/16 added brayan write 2026-08-29 14:11:01 # U filter-rule-4 changed brayan write 2026-08-29 13:56:56 # U filter-rule-5 changed brayan write 2026-08-29 13:56:15 # U filter-rule-2 changed brayan write 2026-08-29 13:54:07 # U to-administrativo changed brayan write 2026-08-29 13:08:04 # U to-administrativo changed brayan write 2026-08-29 13:06:14 # U to-administrativo changed brayan write 2026-08-29 12:53:46 # U filter-rule-6 added brayan write 2026-08-29 12:53:32 # U filter-rule-5 changed brayan write 2026-08-29 12:52:01 # U filter-rule-1 changed brayan write 2026-08-29 12:52:00 # U to-administrativo changed brayan write 2026-08-29 12:46:45 # U to-ixtlahuaca changed brayan write 2026-08-24 14:59:32 # U filter-rule-5 changed MEXICARRIER write 2026-08-22 18:03:26 # U filter-rule-1 changed MEXICARRIER write 2026-08-22 18:03:24 # U filter-rule-4 changed MEXICARRIER write 2026-08-22 18:00:54 # U address list entry changed MEXICARRIER write 2026-08-22 17:55:04 # U address list entry changed MEXICARRIER write 2026-08-22 17:55:00 # U filter-rule-4 changed MEXICARRIER write 2026-08-22 17:54:51 # # software id = 572X-23F7 # # model = RDS2216-2XG-4S+4XS-2XQ # serial number = HJB0A9RJ881 /disk set nvme2 slot=nvme2 set nvme4 slot=nvme4 set nvme5 slot=nvme5 set nvme6 slot=nvme6 set nvme7 slot=nvme7 set nvme8 slot=nvme8 set nvme9 slot=nvme9 set nvme10 slot=nvme10 set nvme11 slot=nvme11 set nvme12 slot=nvme12 set nvme13 slot=nvme13 set nvme14 slot=nvme14 set nvme15 slot=nvme15 set nvme16 slot=nvme16 set nvme17 slot=nvme17 set nvme18 slot=nvme18 set nvme19 slot=nvme19 set nvme20 slot=nvme20 /interface bridge add mtu=1500 name="BRIDGE-AS273304 LAN" priority=0 /interface ethernet set [ find default-name=ether1 ] name=ether1-PC-PRUEBAS set [ find default-name=mgmt1 ] name=ether3 set [ find default-name=qsfp28-1-1 ] advertise="10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full,1G-baseX,2.5G-baseT,2.5G-baseX,5G-baseT,10G-baseT,10G-baseSR-LR,10G-baseCR,40G-baseSR4-LR4,40G-baseCR4,25G-baseSR-LR,25G-baseCR,50G-baseSR2-LR2,50G-baseCR2,100G-baseSR4-LR4,100G-baseCR4" fec-mode=fec91 name="qsfp28-1-1-ARISTA OFICINA" set [ find default-name=qsfp28-1-3 ] advertise="10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full,1G-baseX,2.5G-baseT,2.5G-baseX,5G-baseT,10G-baseT,10G-baseSR-LR,10G-baseCR,40G-baseSR4-LR4,40G-baseCR4,25G-baseSR-LR,25G-baseCR,50G-baseSR2-LR2,50G-baseCR2" set [ find default-name=qsfp28-2-1 ] auto-negotiation=no speed=40G-baseCR4 set [ find default-name=qsfp28-2-3 ] advertise="10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full,1G-baseX,2.5G-baseT,2.5G-baseX,5G-baseT,10G-baseT,10G-baseSR-LR,10G-baseCR,40G-baseSR4-LR4,40G-baseCR4,25G-baseSR-LR,25G-baseCR,50G-baseSR2-LR2,50G-baseCR2" set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1-WAN1 CRS504" set [ find default-name=sfp-sfpplus2 ] name="sfp-sfpplus2-WAN2 CRS504" set [ find default-name=sfp-sfpplus3 ] name="sfp-sfpplus3-WAN3 CRS504" set [ find default-name=sfp-sfpplus4 ] auto-negotiation=no name="sfp-sfpplus4-SERVIDOR DELL" set [ find default-name=sfp28-1 ] auto-negotiation=no speed=10G-baseCR set [ find default-name=sfp28-2 ] auto-negotiation=no name="sfp28-2-PE\C3\91UELA" speed=10G-baseCR set [ find default-name=sfp28-4 ] name="sfp28-4-SAN MARTIN ASN" /interface eoip add local-address=38.104.249.75 mac-address=02:15:83:74:FE:AF name=eoip-tunnel-core remote-address=38.58.38.200 tunnel-id=2 /interface veth add address=172.17.0.2/24 container-mac-address=66:A7:2B:0E:96:B4 dhcp=no disabled=yes gateway=172.17.0.1 gateway6="" mac-address=64:D8:BC:B3:9A:D4 name=veth1-unifi /interface vlan add interface="BRIDGE-AS273304 LAN" name="vlan13-Residenciales Toluca" vlan-id=13 /interface bonding add lacp-rate=1sec mode=802.3ad name=LACP-100GCirion slaves="sfp-sfpplus2-WAN2\_CRS504,sfp-sfpplus3-WAN3 CRS504,sfp-sfpplus1-WAN1 CRS504" transmit-hash-policy=layer-2-and-3 /container # exited with signal 9 (Killed) add comment="Controlador Unifi" dns=1.1.1.1 envlists=1 healthcheck-status="good, output: HTTP/1.1 302 \r\nLocation: /manage\r\nDate: Fri, 21 Aug 2026 16:37:23 GMT\r\n\r\nHTTP/1.1 302 \r\nLocation: /manage/account/login\?redirect=%2Fmanage\r\nDate: Fri, 21 Aug 2026 16:37:23 GMT\r\n\r\nHTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 02 Dec 2025 10:08:55 GMT\r\nCache-Control: max-age=0\r\nExpires: Fri, 21 Aug 2026 16:37:23 GMT\r\nContent-Type: text/html;charset=ISO-8859-1\r\nContent-Length: 1088\r\nDate: Fri, 21 Aug 2026 16:37:23 GMT\r\n\r\n" interface=veth1-unifi layer-dir="" logging=yes mount=/nvme1/unify_data:/1:rw,/nvme1/unify_log:/1:rw name=unifi:latest remote-image=jacobalberty/unifi:latest root-dir=/nvme1/unify_root shm-size=512.0MiB start-on-boot=yes workdir=/unifi /interface vlan add interface=LACP-100GCirion name="vlan1200-WAN CIRION" vlan-id=1200 /ip pool add name=dhcp_pool0 ranges=172.18.0.20-172.18.0.254 add name=dhcp_pool1 ranges=172.17.13.20-172.17.13.254 add name=dhcp_pool2 ranges=172.17.111.20-172.17.111.254 /ip dhcp-server add address-pool=dhcp_pool1 interface="vlan13-Residenciales Toluca" lease-time=10m name="Residenciales Toluca" /routing bgp instance add as=273304 disabled=no name=AS27334 router-id=172.20.100.1 /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.100.1 target=remote /app set cinny firewall-redirects=8094:80:tcp:web set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest set home-assistant container-command-lines=home-assistant:none:lscr.io/linuxserver/homeassistant set lorawan-stack secrets="lorawan-stack__admin_password:=" set n8n firewall-redirects=5678:5678:tcp:web set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:none:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendonly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:apache" set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_webserver_api_password=password" set redlib firewall-redirects=8087:8080:tcp:web set solr container-command-lines=solr:none:docker.io/solr:latest set uptime-kuma container-command-lines=uptime-kuma:none:docker.io/louislam/uptime-kuma:1 set zulip secrets="zulip__postgres_password:=,zulip__memcached_password:=,zulip__rabbitmq_password:=,zulip__redis_password:=,zulip__secret_key:=,zulip__email_password:=" /container config set registry-url=https://registry-1.docker.io tmpdir=/nvme1/tmp /container envs add disabled=yes key=TZ list=openbpmn_env value=America/Mexico_City add disabled=yes key=TZ list=unify_env value=America/Mexico_City /container mounts add disabled=yes dst="/dst=/usr/src/app/open-bpmn.glsp-client/workspace" list=openbpmn_workspace src=/nvme1/openbpmn_workspace add disabled=yes dst=/etc/raddb list=radius_config src=/nvme1/radius_config add disabled=yes dst=/var/log/radius list=radius_log src=/nvme1/radius_log add disabled=yes dst=/unifi/data list=unify_data src=/nvme1/unify_data add disabled=yes dst=/unifi/log list=unify_log src=/nvme1/unify_log /interface bridge port add bridge=*18 disabled=yes interface=veth1-unifi add bridge="BRIDGE-AS273304 LAN" interface=ether1-PC-PRUEBAS add bridge="BRIDGE-AS273304 LAN" interface=*1C add bridge="BRIDGE-AS273304 LAN" interface="sfp-sfpplus4-SERVIDOR DELL" add bridge="BRIDGE-AS273304 LAN" edge=yes interface=eoip-tunnel-core path-cost=20000 add bridge="BRIDGE-AS273304 LAN" interface="sfp28-4-SAN MARTIN ASN" add auto-isolate=yes bridge="BRIDGE-AS273304 LAN" interface="qsfp28-1-1-ARISTA OFICINA" add bridge="BRIDGE-AS273304 LAN" interface="sfp28-2-PE\C3\91UELA" /interface bridge settings set use-ip-firewall=yes /ip neighbor discovery-settings set discover-interface-list=all /ipv6 settings set disable-ipv6=yes /ip address add address=38.58.38.1/24 comment="LAN MEXICARRIER" interface="BRIDGE-AS273304 LAN" network=38.58.38.0 add address=38.104.249.75/29 comment="IP Peer Cogent" interface=LACP-100GCirion network=38.104.249.72 add address=201.234.96.54/27 comment="IP Peer Cirion" interface="vlan1200-WAN CIRION" network=201.234.96.32 add address=172.20.100.1/16 comment="IP ADMINISTRACI\D3N" interface="sfp-sfpplus1-WAN1 CRS504" network=172.20.0.0 add address=172.18.18.1/24 comment="Management Arista" interface="BRIDGE-AS273304 LAN" network=172.18.18.0 add address=172.17.13.1/24 comment="Residenciales Toluca" interface="vlan13-Residenciales Toluca" network=172.17.13.0 add address=172.18.19.1/30 comment="iBPG IXTLAHUACA" interface="BRIDGE-AS273304 LAN" network=172.18.19.0 add address=169.254.10.5/24 interface="BRIDGE-AS273304 LAN" network=169.254.10.0 /ip cloud set ddns-enabled=yes /ip dhcp-server network add address=172.17.13.0/24 gateway=172.17.13.1 /ip dns set servers=1.0.0.2,1.1.1.2 /ip firewall address-list add address=189.138.129.159 comment="Mi IP Actual" list=Lista_Blanca add address=38.58.38.0/24 list=AS273304 add address=148.215.0.0/16 list=AS273304 add address=148.215.150.0/24 disabled=yes list=AS273304 add address=148.215.154.0/24 disabled=yes list=AS273304 add address=148.215.155.0/24 disabled=yes list=AS273304 add address=148.215.156.0/24 disabled=yes list=AS273304 add address=148.215.157.0/24 disabled=yes list=AS273304 add address=148.215.158.0/24 disabled=yes list=AS273304 add address=148.215.159.0/24 disabled=yes list=AS273304 add address=148.215.160.0/24 disabled=yes list=AS273304 add address=148.215.164.0/24 disabled=yes list=AS273304 add address=148.215.165.0/24 disabled=yes list=AS273304 /ip firewall filter add action=accept chain=output comment="PERMITIR EOIP" protocol=gre /ip firewall mangle add action=change-mss chain=forward comment="fragmentar paquetes mss" disabled=yes new-mss=1380 passthrough=no protocol=tcp tcp-flags=syn /ip firewall nat add action=masquerade chain=srcnat comment="Container Unifi y VLAN's Salida a Internet" src-address=172.17.0.0/16 /ip route add check-gateway=ping comment="RED TONY " disabled=no distance=1 dst-address=172.18.62.0/24 gateway=172.20.3.248 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment="CLIENTES TEJUPILCO" disabled=no distance=1 dst-address=192.168.30.0/24 gateway=38.58.38.45 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment="CLIENTES SSG" disabled=no distance=1 dst-address=192.168.31.0/24 gateway=38.58.38.45 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment="CLIENTES AMATEPEC" disabled=no distance=1 dst-address=192.168.32.0/24 gateway=38.58.38.45 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment="CLIENTES SAN PEDRO" disabled=no distance=1 dst-address=192.168.34.0/24 gateway=38.58.38.45 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment=CLIENTES-SAN-BARTOLO dst-address=192.168.12.0/24 gateway=38.58.38.45 add comment="Segmento MGMT" dst-address=192.168.69.0/24 gateway=172.20.1.1 add comment="Red Anonas Tony" dst-address=172.18.61.0/24 gateway=38.58.38.16 add check-gateway=ping comment="Clientes Paseos San Martin" dst-address=192.168.10.0/24 gateway=38.58.38.29 add check-gateway=ping comment="Clientes San Martin" dst-address=192.168.11.0/24 gateway=38.58.38.28 /ip service set ftp disabled=yes set telnet disabled=yes set reverse-proxy disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh max-sessions=5 port=46825 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.100.1 /routing bgp connection add afi=ip as=273304 connect=yes disabled=no input.filter=bgp-in-cirion instance=AS27334 listen=yes local.address=201.234.96.54 .role=ebgp name=to-cirion output.filter-chain=bgp-out .network=AS273304 .network-blackhole=yes remote.address=201.234.96.33/32 .as=3356 routing-table=main add afi=ip as=273304 connect=yes disabled=no instance=AS27334 listen=yes local.address=38.104.249.75 .role=ebgp name=to-cogent output.filter-chain=bgp-out .network=AS273304 remote.address=38.104.249.73/32 .as=174 routing-table=main add afi=ip as=273304 connect=yes disabled=yes instance=AS27334 listen=yes local.address=172.18.19.1 .role=ibgp name=to-ixtlahuaca nexthop-choice=force-self output.redistribute=bgp remote.address=172.18.19.2/32 .as=273304 routing-table=main add afi=ip as=273304 connect=yes disabled=no input.filter=bgp-in-admini instance=AS27334 listen=yes local.address=38.58.38.1 .role=ebgp name=to-administrativo output.default-originate=always .redistribute=bgp remote.address=38.58.38.65/32 .as=28526 routing-table=main tcp-md5-key=UAEMEX2026 add afi=ip as=273304 connect=yes disabled=no instance=AS27334 listen=yes local.address=38.58.38.1 .role=ebgp name=to-rectoria output.default-originate=always .redistribute=bgp remote.address=38.58.38.80/32 .as=28526 routing-table=main tcp-md5-key=UAEMEX2026 add afi=ip connect=yes disabled=no instance=AS27334 listen=yes local.role=ebgp name=to-dtic output.default-originate=always .redistribute=bgp remote.address=38.58.38.85/32 .as=28526 tcp-md5-key=UAEMEX2026 /routing filter rule add chain=bgp-out disabled=no rule="if (dst in 38.58.38.0/24) { accept } \n" add chain=bgp-out disabled=no rule="if (dst in 148.215.0.0/16) { accept } else { reject }" add chain=bgp-in-admini disabled=no rule="if (dst in 148.215.0.0/16) { accept } else { reject }" add chain=bgp-in-cirion disabled=no rule="set bgp-local-pref 200; accept" add chain=bgp-out-admini disabled=no rule="if ( dst-len == 0 ) { accept } else { reject } " add chain=bgp-in disabled=no rule="if (dst-len == 0 ) { accept } else { reject }" add chain=bgp-out-ixtla disabled=no rule="if (dst in 8.8.8.0/24) { accept } else { reject }" /snmp set enabled=yes /system clock set time-zone-name=America/Mexico_City /system identity set name=AS273304-RDS /system logging add action=GrafanaLoki prefix=172.20.100.1 topics=critical add action=GrafanaLoki prefix=172.20.100.1 topics=error add action=GrafanaLoki prefix=172.20.100.1 topics=info add action=GrafanaLoki prefix=172.20.100.1 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing resource add /tool sniffer set file-name=rds2216.cap filter-interface="sfp28-2-PE\C3\91UELA" filter-vlan=35 /user aaa set default-group=full use-radius=yes