# version: 7.21.2 (stable) # factory-software: 7.5 # total-memory: 1024.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 1024.0MiB # architecture-name: arm64 # board-name: RB5009UPr+S+ # platform: MikroTik # installed-version: 7.21.2 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U device changed MEXICARRIER write 2026-10-18 05:00:00 # U device changed MEXICARRIER write 2026-10-18 05:00:00 # U device changed MEXICARRIER write 2026-10-18 05:00:00 # U device changed MEXICARRIER write 2026-10-18 01:00:00 # U device changed MEXICARRIER write 2026-10-18 01:00:00 # U device changed MEXICARRIER write 2026-10-18 01:00:00 # U device changed MEXICARRIER write 2026-10-17 05:00:00 # U device changed MEXICARRIER write 2026-10-17 05:00:00 # U device changed MEXICARRIER write 2026-10-17 05:00:00 # U device changed MEXICARRIER write 2026-10-17 01:00:00 # U device changed MEXICARRIER write 2026-10-17 01:00:00 # U device changed MEXICARRIER write 2026-10-17 01:00:00 # U device changed MEXICARRIER write 2026-10-16 05:00:00 # U device changed MEXICARRIER write 2026-10-16 05:00:00 # U device changed MEXICARRIER write 2026-10-16 05:00:00 # U device changed MEXICARRIER write 2026-10-16 01:00:00 # U device changed MEXICARRIER write 2026-10-16 01:00:00 # U device changed MEXICARRIER write 2026-10-16 01:00:00 # U device changed MEXICARRIER write 2026-10-15 05:00:00 # U device changed MEXICARRIER write 2026-10-15 05:00:00 # U device changed MEXICARRIER write 2026-10-15 05:00:00 # U device changed MEXICARRIER write 2026-10-15 01:00:00 # U device changed MEXICARRIER write 2026-10-15 01:00:00 # U device changed MEXICARRIER write 2026-10-15 01:00:00 # U device changed MEXICARRIER write 2026-10-14 05:00:00 # U device changed MEXICARRIER write 2026-10-14 05:00:00 # U device changed MEXICARRIER write 2026-10-14 05:00:00 # U device changed MEXICARRIER write 2026-10-14 01:00:00 # U device changed MEXICARRIER write 2026-10-14 01:00:00 # U device changed MEXICARRIER write 2026-10-14 01:00:00 # U device changed MEXICARRIER write 2026-10-13 05:00:00 # U device changed MEXICARRIER write 2026-10-13 05:00:00 # U device changed MEXICARRIER write 2026-10-13 05:00:00 # U device changed MEXICARRIER write 2026-10-13 01:00:00 # U device changed MEXICARRIER write 2026-10-13 01:00:00 # U device changed MEXICARRIER write 2026-10-13 01:00:00 # U RADIUS client changed MEXICARRIER write 2026-10-12 15:12:00 # U device changed MEXICARRIER write 2026-10-12 10:23:11 # U device changed MEXICARRIER write 2026-10-12 10:23:10 # U device changed MEXICARRIER write 2026-10-12 10:16:57 # U device changed MEXICARRIER write 2026-10-12 10:16:49 # U device changed MEXICARRIER write 2026-10-12 10:16:28 # U changed scheduled script settings MEXICARRIER write 2026-10-12 10:15:00 # U changed scheduled script settings MEXICARRIER write 2026-10-12 10:14:43 # U device changed MEXICARRIER write 2026-10-12 08:00:01 # U device changed MEXICARRIER write 2026-10-12 08:00:00 # U device changed MEXICARRIER write 2026-10-12 08:00:00 # U device changed MEXICARRIER write 2026-10-12 02:00:01 # U device changed MEXICARRIER write 2026-10-12 02:00:00 # U device changed MEXICARRIER write 2026-10-12 02:00:00 # U device changed MEXICARRIER write 2026-10-11 08:00:00 # U device changed MEXICARRIER write 2026-10-11 08:00:00 # U device changed MEXICARRIER write 2026-10-11 08:00:00 # U device changed MEXICARRIER write 2026-10-11 02:00:00 # U device changed MEXICARRIER write 2026-10-11 02:00:00 # U device changed MEXICARRIER write 2026-10-11 02:00:00 # # software id = W9Q1-PZDP # # model = RB5009UPr+S+ # serial number = HF4094RRJTZ /interface bridge add name=BRIDGE-SOMNET port-cost-mode=short /interface ethernet set [ find default-name=ether1 ] comment="IP: 172.23.1.8" l2mtu=1514 name=ether1-JOSE-TRINIDAD poe-out=forced-on set [ find default-name=ether2 ] auto-negotiation=no l2mtu=1514 poe-out=off speed=100M-baseT-full set [ find default-name=ether3 ] comment="IP: 172.20.4.47" l2mtu=1514 name=ether3-WAVE-SAN-PEDRO poe-out=forced-on set [ find default-name=ether4 ] l2mtu=1514 name="ether4 " poe-out=off set [ find default-name=ether5 ] comment="IP: 172.20.1.14" l2mtu=1514 name=ether5-INTERCONEXION-SW-FO-LAN poe-out=off set [ find default-name=ether6 ] l2mtu=1514 name="ether6 - TP-LINK CHUY" set [ find default-name=ether7 ] comment="IP: 172.23.1.14" l2mtu=1514 name=ether7-ATLACO-2 poe-out=forced-on set [ find default-name=ether8 ] comment="IP: 172.20.1.239" l2mtu=1514 name="ether8-CAMBIUM2-SAN PEDRO " poe-out=forced-on set [ find default-name=sfp-sfpplus1 ] disabled=yes l2mtu=1514 name="sfp-sfpplus1- SUMALINK" /interface wireguard add disabled=yes listen-port=13231 mtu=1420 name=VPN_ATLACO private-key="oAAR3J5CVKydv9EpcxNaY3lj21RDroIq68AY/38ipEA=" /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /routing ospf instance add disabled=yes name=ospf-instance-1 originate-default=never router-id=15.15.15.15 routing-table=main /routing ospf area add disabled=yes instance=ospf-instance-1 name=ospf-area-1 /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.100.12 target=remote /interface bridge port add bridge=BRIDGE-SOMNET interface=ether1-JOSE-TRINIDAD internal-path-cost=10 path-cost=10 add bridge=BRIDGE-SOMNET edge=yes interface=ether5-INTERCONEXION-SW-FO-LAN internal-path-cost=10 path-cost=10 add bridge=BRIDGE-SOMNET interface="ether6 - TP-LINK CHUY" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-SOMNET interface=ether7-ATLACO-2 internal-path-cost=10 path-cost=10 add bridge=BRIDGE-SOMNET interface=ether3-WAVE-SAN-PEDRO add bridge=BRIDGE-SOMNET interface="ether8-CAMBIUM2-SAN PEDRO " /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=all lldp-mac-phy-config=yes lldp-max-frame-size=yes lldp-vlan-info=yes /ipv6 settings set disable-ipv6=yes /interface ovpn-server server add mac-address=FE:12:9B:0F:51:DE name=ovpn-server1 /interface wireguard peers add allowed-address=172.22.1.31/32 client-allowed-address=::/0 comment="LAP DAAIRA" disabled=yes endpoint-port=1 interface=VPN_ATLACO name=peer1 private-key="kNXvYACwtP2a4BOif2k7gS9JHGtsvPuglH6KXGyjenc=" public-key="84kSBG66aF4terViGhSHxrEhv9AxANGhkMkZXTYO2x4=" add allowed-address=172.22.1.32/32 comment="PC SOPORTE" disabled=yes interface=VPN_ATLACO name=peer2 public-key="jVr6woAS1A3gBi94AAxwm7tWbkNYpbj297+Grzp48g8=" add allowed-address=172.22.1.33/32 comment="LAP SOPORTE" disabled=yes interface=VPN_ATLACO name=peer3 public-key="drrMUBWgcrdmxBCR2WRvuuExaUDLcLdMHWiVRR8+vxQ=" add allowed-address=172.22.1.34/32 comment="PC CESAR" disabled=yes interface=VPN_ATLACO name=peer4 public-key="hUyNN9ugjd/Pcnpxr9fB/tERNQ6U94Ex3y1Eu8wWoUQ=" add allowed-address=172.22.1.35/32 comment="CEL BRAYAN" disabled=yes interface=VPN_ATLACO name=peer5 public-key="x3OJg+ZTuhkiI2ylTz33G/K4uuHNTJJwm+bbLNOPu3Q=" add allowed-address=172.22.1.36/32 client-allowed-address=::/0 comment="LAP2 BRAYAN" disabled=yes interface=VPN_ATLACO name=peer6 public-key="jX2/o/zTGg5/fkrdA/fb8j4BTEJiCo6rL/3/6hZv/Ug=" add allowed-address=172.22.1.37/32 comment="LAP1 BRAYAN" disabled=yes interface=VPN_ATLACO name=peer7 public-key="3zHCPrZM5aQquQAuf3buE7nKYF/W6Nu6pLBeYqhY2mI=" /ip address add address=172.20.1.16/16 interface=BRIDGE-SOMNET network=172.20.0.0 add address=172.23.1.1/24 interface=BRIDGE-SOMNET network=172.23.1.0 /ip dns set allow-remote-requests=yes servers=1.1.1.2,1.0.0.2 /ip dns static add address=38.123.220.2 name=swatlaco.com type=A /ip firewall filter add action=accept chain=output comment="PERMITIR EOIP" disabled=yes protocol=gre add action=accept chain=input comment="permitir wireguard" disabled=yes dst-port=13231 protocol=udp add action=drop chain=forward comment="Limitar Sesiones" connection-limit=65300,32 disabled=yes src-address=172.23.1.0/24 /ip firewall nat add action=masquerade chain=srcnat out-interface=ether2 # in/out-interface matcher not possible when interface (ether8-CAMBIUM2-SAN PEDRO ) is slave - use master instead (BRIDGE-SOMNET) add action=masquerade chain=srcnat out-interface="ether8-CAMBIUM2-SAN PEDRO " /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add check-gateway=ping disabled=no dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ipv6 nd set [ find default=yes ] advertise-dns=yes /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login /routing ospf interface-template add area=ospf-area-1 disabled=no networks=10.230.0.254/32 type=ptp add area=ospf-area-1 disabled=no networks=172.20.0.0/16 type=ptp /snmp set enabled=yes trap-version=2 /system clock set time-zone-name=America/Mexico_City /system identity set name="SW ATLACOMULCO" /system logging add action=GrafanaLoki prefix=172.20.100.12 topics=critical add action=GrafanaLoki prefix=172.20.100.12 topics=error add action=GrafanaLoki prefix=172.20.100.12 topics=info add action=GrafanaLoki prefix=172.20.100.12 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system scheduler add interval=1d name=poe-off on-event="/system/script/run poe-off" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2026-10-09 start-time=01:00:00 add interval=1d name=poe-on on-event="/system/script/run poe-on" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2026-10-09 start-time=05:00:00 /system script add dont-require-permissions=no name=poe-off owner=MEXICARRIER policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/interface/ethernet/poe/set ether1-JOSE-TRINIDAD,ether3-WAVE-SAN-PEDRO,ether7-ATLACO-2 poe-out=off" add dont-require-permissions=no name=poe-on owner=MEXICARRIER policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/interface/ethernet/poe/set ether1-JOSE-TRINIDAD,ether3-WAVE-SAN-PEDRO,ether7-ATLACO-2 poe-out=forced-on" /tool graphing interface add /tool graphing resource add /tool romon set enabled=yes /tool sniffer set file-name=atlaco.cap filter-direction=rx filter-interface=ether2 /user aaa set default-group=full use-radius=yes