#                   version: 7.19.6 (stable)
#          factory-software: 7.15.3
#              total-memory: 4096.0MiB
#                       cpu: ARM64
#                 cpu-count: 4
#           total-hdd-space: 128.0MiB
#         architecture-name: arm64
#                board-name: CCR2004-16G-2S+
#                  platform: MikroTik
#   installed-version: 7.19.6
# 
# software id = GVU0-NBR2
#
# model = CCR2004-16G-2S+
# serial number = HKC0AWBN644
/interface bridge
add name=BR-SOMNET
add name=BR-UAEMEX
/interface ethernet
set [ find default-name=ether1 ] name="ether1 -  LAN"
set [ find default-name=ether16 ] name="ether16 - REDUNDANCIA"
set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1 -  PRINCIPAL SOMNET"
/interface vxlan
add mac-address=72:1A:79:75:9F:70 mtu=1450 name=vxlan1483-DILIGENCIAS vni=1483
/interface vlan
add disabled=yes interface=BR-SOMNET name="VLAN #148" vlan-id=148
/port
set 0 name=serial0
/snmp community
set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private
add addresses=::/0 name=SNMP-UAEMEX
/system logging action
add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.112 target=remote
/interface bridge port
add bridge=BR-UAEMEX interface="ether1 -  LAN"
add bridge=BR-UAEMEX interface=ether2
add bridge=BR-SOMNET interface="sfp-sfpplus1 -  PRINCIPAL SOMNET"
add bridge=BR-UAEMEX interface="VLAN #148"
add bridge=BR-SOMNET interface="ether16 - REDUNDANCIA"
add bridge=BR-UAEMEX interface=ether3
add bridge=BR-UAEMEX interface=vxlan1483-DILIGENCIAS
/interface bridge settings
set use-ip-firewall=yes
/interface vxlan vteps
add interface=vxlan1483-DILIGENCIAS remote-ip=172.20.4.104
/ip address
add address=172.20.4.112/16 interface=BR-SOMNET network=172.20.0.0
add address=172.16.10.8/27 comment="MONITOREO UAEMEX" interface=BR-UAEMEX network=172.16.10.0
add address=172.148.148.4/24 comment="pruebas DTIC" interface=BR-UAEMEX network=172.148.148.0
add address=172.21.148.8/24 interface=BR-UAEMEX network=172.21.148.0
/ip dns
set servers=1.1.1.2,1.0.0.2
/ip firewall mangle
add action=change-mss chain=forward new-mss=1400 protocol=tcp tcp-flags=syn
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no
add comment="DEFAULT GATEWAY" disabled=no dst-address=1.1.1.1/32 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no
add comment="RUTA PARA MONITOREO UAEMEX" disabled=no distance=1 dst-address=148.215.1.146/32 gateway=172.16.10.30 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no dst-address=192.36.143.130/32 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no
/ip service
set ftp disabled=yes
set telnet disabled=yes
set api disabled=yes
set api-ssl disabled=yes
set ssh port=46825
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.112
/snmp
set enabled=yes trap-version=3
/system clock
set time-zone-name=America/Mexico_City
/system identity
set name="MK DILIGENCIAS 2026"
/system logging
add action=GrafanaLoki prefix=172.20.4.112 topics=critical
add action=GrafanaLoki prefix=172.20.4.112 topics=error
add action=GrafanaLoki prefix=172.20.4.112 topics=info
add action=GrafanaLoki prefix=172.20.4.112 topics=warning
/system ntp client
set enabled=yes
/system ntp client servers
add address=0.mx.pool.ntp.org
add address=1.mx.pool.ntp.org
/system routerboard settings
set enter-setup-on=delete-key
/tool graphing interface
add
/tool graphing resource
add
/user aaa
set default-group=full use-radius=yes