# version: 7.16.2 (stable) # factory-software: 6.47.4 # total-memory: 512.0MiB # cpu: ARM # cpu-count: 1 # total-hdd-space: 16.0MiB # architecture-name: arm # board-name: CRS328-24P-4S+ # platform: MikroTik # installed-version: 7.16.2 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U device changed MEXICARRIER write 2026-10-08 11:43:35 # U device changed MEXICARRIER write 2026-10-08 11:43:24 # U device changed MEXICARRIER write 2026-10-08 11:40:59 # U bridge port changed MEXICARRIER write 2026-10-08 11:40:38 # U item changed MEXICARRIER write 2026-10-08 11:40:15 # U item changed MEXICARRIER write 2026-10-08 11:40:13 # U device changed MEXICARRIER write 2026-10-08 11:38:09 # U device changed MEXICARRIER write 2026-10-08 11:26:38 # U device changed MEXICARRIER write 2026-10-08 11:26:37 # U device changed MEXICARRIER write 2026-10-08 11:25:31 # U device changed MEXICARRIER write 2026-10-08 11:25:30 # U device changed MEXICARRIER write 2026-10-08 11:25:07 # U device changed MEXICARRIER write 2026-10-08 11:25:06 # U item changed MEXICARRIER write 2026-10-08 11:19:15 # U bridge port added MEXICARRIER write 2026-10-08 11:18:45 # U item changed MEXICARRIER write 2026-10-08 11:18:01 # U device changed MEXICARRIER write 2026-10-08 11:17:31 # U device changed MEXICARRIER write 2026-10-08 11:17:30 # U device changed MEXICARRIER write 2026-10-08 11:13:20 # U device changed MEXICARRIER write 2026-10-08 11:12:42 # U item changed MEXICARRIER write 2026-10-08 11:08:08 # U bridge port changed MEXICARRIER write 2026-10-08 11:08:04 # U bridge port changed MEXICARRIER write 2026-10-08 10:20:58 # U item changed MEXICARRIER write 2026-10-08 10:20:49 # U item changed MEXICARRIER write 2026-10-07 21:32:09 # U bridge port changed MEXICARRIER write 2026-10-07 21:31:38 # U device changed MEXICARRIER write 2026-10-07 21:03:16 # U device changed MEXICARRIER write 2026-10-07 21:03:14 # U device changed MEXICARRIER write 2026-10-06 21:57:46 # # software id = MDHR-82X9 # # model = CRS328-24P-4S+ # serial number = HJG0AT7R27S /interface bridge add name="BRIDGE COGENT" vlan-filtering=yes add admin-mac=04:F4:1C:06:D5:BE auto-mac=no ingress-filtering=no name=BRIDGE-SOMNET vlan-filtering=yes /interface ethernet set [ find default-name=ether2 ] comment="IP: 172.20.2.184" name=ether2-TOXICO poe-out=forced-on poe-voltage=high set [ find default-name=ether3 ] comment="IP: 172.20.1.30" name=ether3-DAMIAN poe-out=forced-on poe-voltage=low set [ find default-name=ether4 ] comment="IP: 172.20.4.173" name="ether4-NANCY SANCHEZ" poe-out=off poe-voltage=low set [ find default-name=ether5 ] name=ether5-QUEMADO poe-out=off set [ find default-name=ether6 ] comment=IP:172.20.4.38 name=ether6-YEBUCIVI poe-out=forced-on poe-voltage=high set [ find default-name=ether7 ] auto-negotiation=no comment="IP: 172.20.4.190 48V" name="ether7-CLIENTE AMEALCO" poe-out=forced-on poe-voltage=high set [ find default-name=ether8 ] comment="IP: 192.168.33.2" name="ether8 - DA\D1ADO" poe-out=off set [ find default-name=ether9 ] name=ether9-CAMARA1 set [ find default-name=ether10 ] poe-out=forced-on poe-voltage=high set [ find default-name=ether11 ] auto-negotiation=no comment="IP: 192.168.9.23" name="ether11-CAMARA3 PUENTE BONIXI" poe-out=forced-on poe-voltage=high speed=100M-baseT-full set [ find default-name=ether12 ] comment="IP: 172.20.4.204" name="ether12-CLIENTE TULILLO" poe-out=forced-on poe-voltage=high set [ find default-name=ether13 ] name="ether13 - OLT STICK" poe-out=off poe-voltage=high set [ find default-name=ether14 ] name="ether14 - CEDIS MODERNA" set [ find default-name=ether16 ] comment="IP: 172.20.4.200" name="ether16-CLIENTE YUXTEPEC" poe-out=forced-on poe-voltage=high set [ find default-name=ether20 ] comment="IP: 192.168.9.29" name="ether20-CAMARA2 PUERTA TORRE" poe-out=forced-on poe-voltage=high set [ find default-name=ether24 ] name="ether24-TP LINK" set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1-BIXTEL STA JUANA REDUNDANCIA" set [ find default-name=sfp-sfpplus2 ] name=sfp-sfpplus2-IXTLAHUACA set [ find default-name=sfp-sfpplus3 ] name="sfp-sfpplus3 - OLT STICK" sfp-ignore-rx-los=yes set [ find default-name=sfp-sfpplus4 ] name="sfp-sfpplus4 - SAN MARTIN" /port set 0 name=serial0 /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add bsd-syslog=yes name=GrafanaLoki remote=172.20.0.254 remote-port=1514 src-address=172.20.4.4 target=remote /interface bridge port add bridge=BRIDGE-SOMNET comment=defconf interface=ether2-TOXICO add bridge=BRIDGE-SOMNET comment=defconf interface=ether3-DAMIAN add bridge=BRIDGE-SOMNET comment=defconf interface=ether6-YEBUCIVI add bridge=BRIDGE-SOMNET comment=defconf interface="ether7-CLIENTE AMEALCO" add bridge=BRIDGE-SOMNET comment=defconf interface="ether8 - DA\D1ADO" pvid=33 add bridge=BRIDGE-SOMNET comment=defconf interface="ether11-CAMARA3 PUENTE BONIXI" add bridge=BRIDGE-SOMNET comment=defconf interface="ether12-CLIENTE TULILLO" add bridge=BRIDGE-SOMNET comment=defconf interface="ether16-CLIENTE YUXTEPEC" add bridge=BRIDGE-SOMNET comment=defconf interface="ether20-CAMARA2 PUERTA TORRE" add bridge=BRIDGE-SOMNET comment=defconf interface="ether24-TP LINK" add bridge=BRIDGE-SOMNET comment=defconf interface=sfp-sfpplus2-IXTLAHUACA add bridge=BRIDGE-SOMNET comment=defconf interface="sfp-sfpplus3 - OLT STICK" pvid=33 add bridge=BRIDGE-SOMNET comment=defconf interface="sfp-sfpplus4 - SAN MARTIN" add bridge=BRIDGE-SOMNET interface="ether4-NANCY SANCHEZ" multicast-router=disabled add bridge=BRIDGE-SOMNET disabled=yes interface="sfp-sfpplus1-BIXTEL STA JUANA REDUNDANCIA" add bridge=BRIDGE-SOMNET interface="ether13 - OLT STICK" add bridge=BRIDGE-SOMNET interface="ether14 - CEDIS MODERNA" /interface bridge vlan # sfp-sfpplus1-BIXTEL STA JUANA REDUNDANCIA not a bridge port add bridge=BRIDGE-SOMNET tagged="sfp-sfpplus1-BIXTEL STA JUANA REDUNDANCIA,sfp-sfpplus2-IXTLAHUACA,ether7-CLIENTE AMEALCO,sfp-sfpplus4 - SAN MARTIN" vlan-ids=1200 add bridge=BRIDGE-SOMNET tagged="sfp-sfpplus2-IXTLAHUACA,sfp-sfpplus4 - SAN MARTIN" untagged="sfp-sfpplus3 - OLT STICK" vlan-ids=33 # sfp-sfpplus1-BIXTEL STA JUANA REDUNDANCIA not a bridge port add bridge=BRIDGE-SOMNET tagged="sfp-sfpplus4 - SAN MARTIN,sfp-sfpplus2-IXTLAHUACA,sfp-sfpplus1-BIXTEL STA JUANA REDUNDANCIA" vlan-ids=12 /interface ethernet switch set 0 l3-hw-offloading=yes /ip address add address=172.20.4.4/16 interface=BRIDGE-SOMNET network=172.20.0.0 /ip dns set servers=1.1.1.2,1.0.0.2 /ip firewall filter add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=yes add action=accept chain=forward connection-state=established,related add action=drop chain=forward connection-state=invalid /ip hotspot profile set [ find default=yes ] html-directory=hotspot /ip route add disabled=no dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no /ip service set telnet disabled=yes set ftp disabled=yes set www port=8080 set ssh port=46825 set api disabled=yes set api-ssl disabled=yes /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.4 /snmp set enabled=yes trap-version=2 /system clock set time-zone-name=America/Mexico_City /system identity set name=SW-BONIXI /system logging add action=GrafanaLoki prefix=172.20.4.4 topics=critical add action=GrafanaLoki prefix=172.20.4.4 topics=error add action=GrafanaLoki prefix=172.20.4.4 topics=info add action=GrafanaLoki prefix=172.20.4.4 topics=warning /system note set show-at-login=no /system ntp client set enabled=yes /system ntp client servers add address=1.mx.pool.ntp.org add address=0.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /system scheduler add disabled=yes interval=1d name=on on-event="/system script run on" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2025-12-22 start-time=07:00:00 add disabled=yes interval=1d name=off on-event="/system script run off" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2025-12-22 start-time=01:00:00 /system script add dont-require-permissions=no name=on owner=SOMNET4G policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/interface ethernet poe set ether8-POE-y-DATA-para-OLT-TP-LINK poe-out=forced-on poe-voltage=high " add dont-require-permissions=no name=off owner=SOMNET4G policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/interface ethernet poe set ether8-POE-y-DATA-para-OLT-TP-LINK poe-out=off" /tool graphing interface add /tool graphing resource add /tool sniffer set file-name=bonixi.cap filter-direction=rx filter-interface="ether14 - CEDIS MODERNA" memory-limit=1000KiB /user aaa set default-group=full use-radius=yes