# version: 7.21.3 (stable) # factory-software: 7.15 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.21.3 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U changed script settings brayan write 2026-07-31 13:31:01 # U changed script settings brayan write 2026-07-31 13:30:56 # U changed scheduled script settings brayan write 2026-07-31 13:30:34 # U changed scheduled script settings brayan write 2026-07-31 13:30:34 # U device changed brayan write 2026-07-31 13:30:00 # U device changed brayan write 2026-07-31 13:26:00 # U changed script settings brayan write 2026-07-31 13:24:46 # U changed script settings brayan write 2026-07-31 13:24:43 # U changed scheduled script settings brayan write 2026-07-31 13:24:31 # U changed scheduled script settings brayan write 2026-07-31 13:24:22 # U device changed brayan write 2026-07-31 13:24:10 # U device changed brayan write 2026-07-31 13:24:00 # U changed scheduled script settings brayan write 2026-07-31 13:23:54 # U changed scheduled script settings brayan write 2026-07-31 13:23:35 # U new script scheduled brayan write 2026-07-31 13:22:49 # U changed scheduled script settings brayan write 2026-07-31 13:22:47 # U new script scheduled brayan write 2026-07-31 13:22:31 # U device changed brayan write 2026-07-31 13:22:00 # U device changed brayan write 2026-07-31 13:21:58 # U new script added brayan write 2026-07-31 13:21:50 # U new script added brayan write 2026-07-31 13:21:41 # U device changed brayan write 2026-07-31 13:21:11 # U device changed brayan write 2026-07-31 13:21:05 # U RADIUS client added MEXICARRIER write 2026-07-15 12:24:10 # U dns changed MEXICARRIER write 2026-07-15 12:04:48 # U ip service changed MEXICARRIER write 2026-07-15 12:04:11 # U ip service changed MEXICARRIER write 2026-07-15 12:04:10 # U ntp settings changed MEXICARRIER write 2026-07-15 12:03:43 # U log rule added MEXICARRIER write 2026-07-15 12:03:17 # U log rule added MEXICARRIER write 2026-07-15 12:03:01 # U log rule added MEXICARRIER write 2026-07-15 12:02:49 # U log rule added MEXICARRIER write 2026-07-15 12:02:29 # U log action added MEXICARRIER write 2026-07-15 12:02:08 # U user AAA settings changed MEXICARRIER write 2026-07-15 12:01:26 # policy # U changed snmp settings MEXICARRIER write 2026-06-08 13:49:57 # U item changed MEXICARRIER write 2026-06-08 13:49:52 # # software id = YC2H-QHPU # # model = CCR2004-16G-2S+ # serial number = HGV0A5E7WVV /interface bridge add name=BRIDGE-SOMNET add name=BRIDGE-UAEMEX /interface ethernet set [ find default-name=ether1 ] name="ether1 " set [ find default-name=ether2 ] name="ether2-RUTEADOR " set [ find default-name=ether16 ] comment="ACTIVAR EN CASO DE CORTE DE FO" disabled=yes name="ether16-Redundancia inalambrica" /interface vxlan add mac-address=7A:2E:8F:42:52:F2 mtu=1450 name=vxlan1482-CEAC vni=1482 /interface vlan add disabled=yes interface=BRIDGE-SOMNET name=vlan148 vlan-id=148 /snmp community set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private add addresses=::/0 name=SNMP-UAEMEX /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.97 target=remote /interface bridge port add bridge=BRIDGE-UAEMEX interface="ether2-RUTEADOR " add bridge=BRIDGE-UAEMEX interface=vlan148 add bridge=BRIDGE-SOMNET interface=sfp-sfpplus1 add bridge=BRIDGE-SOMNET disabled=yes interface="ether16-Redundancia inalambrica" add bridge=BRIDGE-UAEMEX interface=vxlan1482-CEAC /interface bridge settings set use-ip-firewall=yes /ip neighbor discovery-settings set discover-interface-list=all /ipv6 settings set disable-ipv6=yes /interface ovpn-server server add mac-address=FE:38:5E:D8:02:90 name=ovpn-server1 /interface vxlan vteps add interface=vxlan1482-CEAC remote-ip=172.20.4.104 /ip address add address=172.16.5.61/27 comment="IP WAN UAEMEX DATOS" interface=vxlan1482-CEAC network=172.16.5.32 add address=172.20.4.97/16 comment="IP GESTI\D3N SOMNET" interface=BRIDGE-SOMNET network=172.20.0.0 add address=172.148.148.3/24 comment="pruebas DTIC" interface=BRIDGE-UAEMEX network=172.148.148.0 /ip dns set servers=1.0.0.2 /ip firewall filter add action=accept chain=input disabled=yes dst-port=4789 protocol=udp /ip firewall mangle add action=change-mss chain=forward new-mss=1400 protocol=tcp tcp-flags=syn /ip firewall nat add action=masquerade chain=srcnat disabled=yes out-interface=vlan148 /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add comment="DEFAULT GATEWAY DTIC" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=172.16.5.62 routing-table=main scope=30 target-scope=10 add comment="GATEWAY POR OFICINA" disabled=no distance=20 dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main scope=30 target-scope=10 /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.97 /snmp set enabled=yes trap-version=3 /system clock set time-zone-autodetect=no time-zone-name=America/Mexico_City /system identity set name=SW-CEAC-2026 /system logging add action=GrafanaLoki prefix=172.20.4.97 topics=critical add action=GrafanaLoki prefix=172.20.4.97 topics=error add action=GrafanaLoki prefix=172.20.4.97 topics=info add action=GrafanaLoki prefix=172.20.4.97 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /system scheduler add disabled=yes interval=1d name=enable on-event="system script run enable" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2026-07-31 start-time=13:30:00 add disabled=yes interval=1d name=disable on-event="system script run disable" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2026-07-31 start-time=13:26:00 /system script add dont-require-permissions=no name=disable owner=brayan policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="interface/ethernet/disable sfp-sfpplus2" add dont-require-permissions=no name=enable owner=brayan policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="interface/ethernet/enable sfp-sfpplus2" /tool graphing interface add /tool graphing resource add /tool sniffer set file-name=iitca.cap filter-direction=rx filter-interface="ether1 " /user aaa set default-group=full use-radius=yes