# version: 7.21.3 (stable) # factory-software: 6.46.6 # total-memory: 256.0MiB # cpu: ARM # cpu-count: 2 # total-hdd-space: 16.0MiB # architecture-name: arm # board-name: netPower 16P # platform: MikroTik # installed-version: 7.21.3 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U device changed MEXICARRIER write 2026-07-13 13:49:34 # U device changed MEXICARRIER write 2026-07-13 13:49:27 # U device changed MEXICARRIER write 2026-07-13 13:45:26 # U device changed MEXICARRIER write 2026-07-13 13:45:20 # U item changed MEXICARRIER write 2026-07-13 13:34:53 # U device changed MEXICARRIER write 2026-07-13 11:15:12 # U device changed MEXICARRIER write 2026-07-13 11:15:07 # U device changed MEXICARRIER write 2026-07-13 11:15:03 # U device changed MEXICARRIER write 2026-07-12 18:23:49 # U device changed MEXICARRIER write 2026-07-12 18:23:47 # U device changed MEXICARRIER write 2026-07-12 18:23:43 # U device changed MEXICARRIER write 2026-07-12 18:23:00 # U device changed MEXICARRIER write 2026-07-12 18:22:50 # U device changed MEXICARRIER write 2026-07-12 18:22:31 # U dns changed MEXICARRIER write 2026-07-08 12:50:33 # U ip service changed MEXICARRIER write 2026-07-08 12:49:49 # U ntp settings changed MEXICARRIER write 2026-07-08 12:49:25 # U user AAA settings changed MEXICARRIER write 2026-07-08 12:49:04 # policy # U log rule added MEXICARRIER write 2026-07-08 12:48:30 # U log rule added MEXICARRIER write 2026-07-08 12:48:12 # U log rule added MEXICARRIER write 2026-07-08 12:48:02 # U log rule added MEXICARRIER write 2026-07-08 12:47:52 # U log action added MEXICARRIER write 2026-07-08 12:47:25 # U RADIUS client added MEXICARRIER write 2026-07-08 12:46:28 # U item changed MEXICARRIER write 2026-04-21 09:42:53 # U item changed MEXICARRIER write 2026-04-16 16:58:32 # U device changed MEXICARRIER write 2026-02-27 16:41:46 # U device changed MEXICARRIER write 2026-02-26 11:50:28 # # software id = Y2MX-G1B6 # # model = CRS318-16P-2S+ # serial number = HG409S9K5A0 /interface bridge add name=BR-Oxto1 port-cost-mode=short vlan-filtering=yes /interface ethernet set [ find default-name=ether1 ] poe-priority=1 set [ find default-name=ether2 ] poe-priority=8 set [ find default-name=ether3 ] comment="B5c IP: 172.20.2.122" name=ether3-TIXCA poe-priority=3 set [ find default-name=ether4 ] comment="IP: 172.20.1.219" name="ether4-TRONCAL OXTO" poe-out=forced-on set [ find default-name=ether6 ] comment="IP: 172.20.2.98" name="ether6-SAN SIMON AMATEPEC" poe-priority=3 set [ find default-name=ether8 ] name=ether8-SECTORIAL set [ find default-name=ether9 ] poe-priority=8 poe-voltage=low set [ find default-name=ether10 ] poe-out=off poe-priority=8 set [ find default-name=ether11 ] poe-out=off poe-priority=8 poe-voltage=low set [ find default-name=ether12 ] comment="IP: 192.168.30.2 24V" name="ether12--SECTORIAL LAMORA (REDUNDANCIA UTSEM)" poe-out=forced-on poe-priority=8 set [ find default-name=ether14 ] poe-out=forced-on poe-voltage=high set [ find default-name=ether16 ] comment="IP: 172.20.2.130 48V" name=ether16-UTSEM poe-out=forced-on poe-priority=2 poe-voltage=high /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip smb users set [ find default=yes ] disabled=yes /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.24 target=remote /interface bridge port add bridge=BR-Oxto1 interface=ether10 internal-path-cost=10 path-cost=10 add bridge=BR-Oxto1 interface=ether11 internal-path-cost=10 path-cost=10 add bridge=BR-Oxto1 interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10 add bridge=BR-Oxto1 interface=ether16-UTSEM add bridge=BR-Oxto1 interface=ether1 add bridge=BR-Oxto1 interface=ether15 add bridge=BR-Oxto1 interface=ether7 add bridge=BR-Oxto1 interface="ether4-TRONCAL OXTO" add bridge=BR-Oxto1 interface=ether2 add bridge=BR-Oxto1 interface=ether3-TIXCA add bridge=BR-Oxto1 interface=ether5 add bridge=BR-Oxto1 interface="ether6-SAN SIMON AMATEPEC" add bridge=BR-Oxto1 interface=ether8-SECTORIAL pvid=30 add bridge=BR-Oxto1 interface=ether9 add bridge=BR-Oxto1 interface=ether13 add bridge=BR-Oxto1 interface=sfp-sfpplus2 add bridge=BR-Oxto1 interface=ether14 add bridge=BR-Oxto1 interface="ether12--SECTORIAL LAMORA (REDUNDANCIA UTSEM)" pvid=30 /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=all lldp-mac-phy-config=yes lldp-max-frame-size=yes lldp-vlan-info=yes /ipv6 settings set disable-ipv6=yes /interface bridge vlan add bridge=BR-Oxto1 tagged="ether4-TRONCAL OXTO" untagged="ether8-SECTORIAL,ether12--SECTORIAL LAMORA (REDUNDANCIA UTSEM)" vlan-ids=30 add bridge=BR-Oxto1 tagged="ether4-TRONCAL OXTO,ether6-SAN SIMON AMATEPEC" vlan-ids=32 /interface ovpn-server server add mac-address=FE:11:76:2A:14:13 name=ovpn-server1 /ip address add address=172.20.4.24/16 interface=BR-Oxto1 network=172.20.0.0 /ip dns set servers=1.1.1.2,1.0.0.2 /ip hotspot profile set [ find default=yes ] html-directory=hotspot /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add disabled=no dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ipv6 nd set [ find default=yes ] advertise-dns=yes /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.24 /snmp set enabled=yes location="Cerro Gordo" trap-version=2 /system clock set time-zone-name=America/Mexico_City /system identity set name="SW-CERRO GORDO" /system logging add action=GrafanaLoki prefix=172.20.4.24 topics=critical add action=GrafanaLoki prefix=172.20.4.24 topics=error add action=GrafanaLoki prefix=172.20.4.24 topics=info add action=GrafanaLoki prefix=172.20.4.24 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=1.mx.pool.ntp.org add address=0.mx.pool.ntp.org /system scheduler add disabled=yes interval=1d name="Encender Puertos" on-event="[/interface/ethernet/poe/set poe-out=forced-on numbers=1]\r\n[/interface/ethernet/poe/set poe-out=forced-on numbers=2]\r\n[/interface/ethernet/poe/set poe-out=forced-on numbers=9]\r\n[/interface/ethernet/poe/set poe-out=forced-on numbers=10]\r\n[/interface/ethernet/poe/set poe-out=forced-on numbers=15]" policy=read,write,policy,test start-date=2024-08-17 start-time=07:00:00 add disabled=yes interval=1d name="Apagar Puertos" on-event="[/interface/ethernet/poe/set poe-out=off numbers=1]\r\n[/interface/ethernet/poe/set poe-out=off numbers=2]\r\n[/interface/ethernet/poe/set poe-out=off numbers=9]\r\n[/interface/ethernet/poe/set poe-out=off numbers=10]\r\n[/interface/ethernet/poe/set poe-out=off numbers=15]" policy=read,write,policy,test start-date=2024-08-17 start-time=00:00:00 /tool graphing interface add /tool graphing queue add /tool graphing resource add /tool sniffer set file-name=cpv.cap filter-direction=rx filter-interface=ether3-TIXCA /user aaa set default-group=full use-radius=yes