# version: 7.19.6 (stable) # factory-software: 7.15.3 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.19.6 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U dns changed MEXICARRIER write 2026-07-15 13:59:38 # U ip service changed MEXICARRIER write 2026-07-15 13:58:42 # U ip service changed MEXICARRIER write 2026-07-15 13:58:38 # U RADIUS client added MEXICARRIER write 2026-07-15 13:58:11 # U user AAA settings changed MEXICARRIER write 2026-07-15 13:55:50 # policy # U log rule added MEXICARRIER write 2026-07-15 13:55:26 # U log rule added MEXICARRIER write 2026-07-15 13:55:08 # U log rule added MEXICARRIER write 2026-07-15 13:54:46 # U log rule added MEXICARRIER write 2026-07-15 13:54:18 # U log action added MEXICARRIER write 2026-07-15 13:53:43 # U changed snmp settings MEXICARRIER write 2026-06-08 13:52:32 # U item changed MEXICARRIER write 2026-06-08 13:52:27 # U device changed MEXICARRIER write 2026-04-25 10:58:09 # U device changed MEXICARRIER write 2026-04-25 10:58:09 # U device changed MEXICARRIER write 2026-04-24 14:11:08 # U device changed MEXICARRIER write 2026-04-24 14:11:08 # U device changed MEXICARRIER write 2026-04-24 14:11:06 # U mangle rule changed MEXICARRIER write 2026-04-22 13:14:49 # U mangle rule changed MEXICARRIER write 2026-04-22 13:14:45 # U mangle rule changed MEXICARRIER write 2026-04-22 13:14:36 # U mangle rule changed MEXICARRIER write 2026-04-22 13:12:26 # U mangle rule changed MEXICARRIER write 2026-04-22 13:12:14 # U mangle rule changed MEXICARRIER write 2026-04-22 13:11:58 # U mangle rule changed MEXICARRIER write 2026-04-22 12:47:59 # U mangle rule changed MEXICARRIER write 2026-04-22 12:47:50 # U mangle rule added MEXICARRIER write 2026-04-22 12:47:24 # U config changed MEXICARRIER write 2026-04-22 12:46:50 # U config changed MEXICARRIER write 2026-04-22 12:16:26 # U filter rule changed MEXICARRIER write 2026-04-22 12:16:22 # U filter rule added MEXICARRIER write 2026-04-22 12:16:14 # U mangle rule changed MEXICARRIER write 2026-04-22 12:15:38 # U mangle rule changed MEXICARRIER write 2026-04-22 12:14:40 # U mangle rule changed MEXICARRIER write 2026-04-22 12:14:35 # U config changed MEXICARRIER write 2026-04-20 12:00:11 # U mangle rule added MEXICARRIER write 2026-04-20 11:53:22 # U device changed MEXICARRIER write 2026-04-20 10:09:09 # U device changed MEXICARRIER write 2026-04-18 13:34:48 # U device changed MEXICARRIER write 2026-04-18 13:34:48 # U bridge port added MEXICARRIER write 2026-04-18 13:34:44 # U item added MEXICARRIER write 2026-04-18 13:34:32 # U device changed MEXICARRIER write 2026-04-18 13:34:25 # U device added MEXICARRIER write 2026-04-18 13:34:22 # U config changed MEXICARRIER write 2026-04-15 10:01:52 # # software id = XL5T-XPVM # # model = CCR2004-16G-2S+ # serial number = HKC0AGHBFWX /interface bridge add name="BR - SOMNET" add name="BR - UAEMEX" /interface ethernet set [ find default-name=ether1 ] name="ether1 - WAN SOMNET" set [ find default-name=ether3 ] name="ether3 - LAN COLON" set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1 - FO SOMNET" /interface vxlan add mac-address=3E:BC:99:66:C0:FC mtu=1450 name=vxlan14811--COLON vni=14811 /interface vlan add disabled=yes interface="BR - SOMNET" name=vlan148 vlan-id=148 /port set 0 name=serial0 /snmp community set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private add addresses=::/0 name=SNMP-UAEMEX /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.110 target=remote /interface bridge port add bridge="BR - SOMNET" interface="sfp-sfpplus1 - FO SOMNET" add bridge="BR - UAEMEX" interface=vlan148 add bridge="BR - SOMNET" interface="ether1 - WAN SOMNET" add bridge="BR - UAEMEX" interface="ether3 - LAN COLON" add bridge="BR - UAEMEX" interface=vxlan14811--COLON /interface bridge settings # ipv6 neighbor configuration has changed, please restart the device in order to apply the new settings set use-ip-firewall=yes /ip neighbor discovery-settings # ipv6 neighbor configuration has changed, please restart the device in order to apply the new settings set discover-interface-list=all /interface vxlan vteps add interface=vxlan14811--COLON remote-ip=172.20.4.104 /ip address add address=172.20.4.110/16 interface="BR - SOMNET" network=172.20.0.0 add address=172.16.10.12/27 interface="BR - UAEMEX" network=172.16.10.0 add address=172.148.148.12/24 comment="pruebas DTIC" interface="BR - UAEMEX" network=172.148.148.0 /ip dns set servers=1.1.1.2,1.0.0.2 /ip firewall filter add action=reject chain=forward comment="Bloquear QUIC para forzar TCP " dst-port=443 protocol=udp reject-with=icmp-network-unreachable /ip firewall mangle add action=change-mss chain=forward comment="fragmentar paquetes mss" new-mss=1360 protocol=tcp tcp-flags=syn tcp-mss=1361-65535 /ip route add disabled=no dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no add disabled=no dst-address=148.215.1.146/32 gateway=172.16.10.30 routing-table=main suppress-hw-offload=no /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ipv6 firewall mangle add action=change-mss chain=forward comment="fragmentar paquetes mss" new-mss=1360 protocol=tcp tcp-flags=syn tcp-mss=1361-65535 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.110 /snmp set enabled=yes trap-version=3 /system clock set time-zone-name=America/Mexico_City /system identity set name=SW-L2L-COLON /system logging add action=GrafanaLoki prefix=172.20.4.110 topics=critical add action=GrafanaLoki prefix=172.20.4.110 topics=error add action=GrafanaLoki prefix=172.20.4.110 topics=info add action=GrafanaLoki prefix=172.20.4.110 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing queue add /tool graphing resource add /user aaa set default-group=full use-radius=yes