# version: 7.19.6 (stable) # factory-software: 7.8 # total-memory: 16.0GiB # cpu: ARM64 # cpu-count: 16 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2116-12G-4S+ # platform: MikroTik # installed-version: 7.19.6 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U RADIUS client added MEXICARRIER write 2026-07-15 13:17:22 # U dns changed MEXICARRIER write 2026-07-15 13:13:00 # U ip service changed MEXICARRIER write 2026-07-15 13:11:56 # U ip service changed MEXICARRIER write 2026-07-15 13:11:54 # U ip service changed MEXICARRIER write 2026-07-15 13:11:52 # U ntp settings changed MEXICARRIER write 2026-07-15 13:11:04 # U ntp server record added read 2026-07-15 13:11:04 # U user AAA settings changed MEXICARRIER write 2026-07-15 13:10:46 # policy # U log rule added MEXICARRIER write 2026-07-15 13:09:13 # U log rule added MEXICARRIER write 2026-07-15 13:08:58 # U log rule added MEXICARRIER write 2026-07-15 13:08:46 # U log rule added MEXICARRIER write 2026-07-15 13:08:28 # U log action added MEXICARRIER write 2026-07-15 13:08:11 # U address changed MEXICARRIER write 2026-06-29 09:20:41 # U address changed MEXICARRIER write 2026-06-29 09:20:38 # U nat rule changed MEXICARRIER write 2026-06-24 10:13:30 # U nat rule changed MEXICARRIER write 2026-06-24 09:54:16 # U nat rule added MEXICARRIER write 2026-06-24 09:33:12 # U address changed MEXICARRIER write 2026-06-23 18:49:09 # U route 0.0.0.0/0 changed MEXICARRIER write 2026-06-23 18:27:32 # U route 148.215.1.146 added MEXICARRIER write 2026-06-23 18:26:49 # U route 172.148.148.0/24 removed MEXICARRIER write 2026-06-23 18:24:54 # U route 172.148.148.0/24 added MEXICARRIER write 2026-06-23 18:23:22 # U route 172.20.0.0 removed MEXICARRIER write 2026-06-23 18:22:50 # U route 172.20.0.0/16 removed MEXICARRIER write 2026-06-23 18:22:48 # U address changed MEXICARRIER write 2026-06-23 18:17:19 # U address changed MEXICARRIER write 2026-06-23 17:27:11 # U address changed MEXICARRIER write 2026-06-23 17:27:05 # U address changed MEXICARRIER write 2026-06-23 17:26:52 # U address changed MEXICARRIER write 2026-06-23 17:26:28 # U address added MEXICARRIER write 2026-06-23 17:25:36 # U changed snmp settings MEXICARRIER write 2026-06-08 13:51:05 # U item changed MEXICARRIER write 2026-06-08 13:51:02 # # software id = MHVX-6FTQ # # model = CCR2116-12G-4S+ # serial number = HKE0AMNWMYH /interface bridge add name=BR-SOMNET add name=BR-UAEMEX /interface ethernet set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1 - PRINCIPAL SOMNET" set [ find default-name=sfp-sfpplus2 ] name="sfp-sfpplus2 - INTERCONEXI\D3N" set [ find default-name=sfp-sfpplus3 ] name="sfp-sfpplus3 - RUTEADOR CLIENTE ALCATEL LAN TO LAN" /interface vxlan add mac-address=D2:ED:37:5D:31:C9 mtu=1450 name=vxlan1481-ALMACEN vni=1481 add mac-address=BE:D8:7C:AC:12:A2 mtu=1450 name=vxlan1482-CEAC vni=1482 add mac-address=2A:1E:6B:9D:F5:38 mtu=1450 name=vxlan1483-DILIGENCIAS vni=1483 add mac-address=0A:41:BD:CD:F0:57 mtu=1450 name=vxlan1484-LAMORA vni=1484 add mac-address=7A:60:43:5C:7D:22 mtu=1450 name=vxlan1485-SUTESUAEM vni=1485 add mac-address=F2:A1:06:2C:FB:01 mtu=1450 name=vxlan1486-TURISMOYGASTRO vni=1486 add mac-address=FA:5B:29:46:0A:CB mtu=1450 name=vxlan1487-FONDICT vni=1487 add mac-address=86:54:7E:C9:A6:CF mtu=1450 name=vxlan1488-IITCA vni=1488 add mac-address=76:BF:DB:25:96:05 mtu=1450 name=vxlan1489-VIOLETA vni=1489 add mac-address=8A:46:0C:1E:CF:71 mtu=1450 name=vxlan14810-UAEMITAS vni=14810 add mac-address=96:59:16:DF:D6:86 mtu=1450 name=vxlan14811-COLON vni=14811 add mac-address=EE:BD:AE:27:A5:A2 mtu=1450 name=vxlan14812-DECyD vni=14812 add mac-address=92:76:17:2E:07:98 name=vxlan14813-CERRILLO vni=14813 /interface vlan add interface=BR-SOMNET name=VLAN#148 vlan-id=148 /port set 0 name=serial0 /snmp community set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.104 target=remote /interface bridge port add bridge=BR-SOMNET interface="sfp-sfpplus1 - PRINCIPAL SOMNET" add bridge=BR-SOMNET interface="sfp-sfpplus2 - INTERCONEXI\D3N" add bridge=BR-UAEMEX interface="sfp-sfpplus3 - RUTEADOR CLIENTE ALCATEL LAN TO LAN" add bridge=BR-UAEMEX interface=VLAN#148 add bridge=BR-UAEMEX interface=vxlan1481-ALMACEN add bridge=BR-UAEMEX interface=vxlan1482-CEAC add bridge=BR-UAEMEX interface=vxlan1483-DILIGENCIAS add bridge=BR-UAEMEX interface=vxlan1484-LAMORA add bridge=BR-UAEMEX interface=vxlan1485-SUTESUAEM add bridge=BR-UAEMEX interface=vxlan1486-TURISMOYGASTRO add bridge=BR-UAEMEX interface=vxlan1487-FONDICT add bridge=BR-UAEMEX interface=vxlan1488-IITCA add bridge=BR-UAEMEX interface=vxlan1489-VIOLETA add bridge=BR-UAEMEX interface=vxlan14810-UAEMITAS add bridge=BR-UAEMEX interface=vxlan14811-COLON add bridge=BR-UAEMEX interface=vxlan14812-DECyD add bridge=BR-UAEMEX interface=vxlan14813-CERRILLO /interface bridge settings set use-ip-firewall=yes /ip neighbor discovery-settings set discover-interface-list=all /interface vxlan vteps add interface=vxlan1481-ALMACEN remote-ip=172.20.4.108 add interface=vxlan1482-CEAC remote-ip=172.20.4.97 add interface=vxlan1483-DILIGENCIAS remote-ip=172.20.4.112 add interface=vxlan1484-LAMORA remote-ip=172.20.4.95 add interface=vxlan1485-SUTESUAEM remote-ip=172.20.4.115 add interface=vxlan1486-TURISMOYGASTRO remote-ip=172.20.4.113 add interface=vxlan1487-FONDICT remote-ip=172.20.4.93 add interface=vxlan1488-IITCA remote-ip=172.20.4.114 add interface=vxlan1489-VIOLETA remote-ip=172.20.4.111 add interface=vxlan14810-UAEMITAS remote-ip=172.20.4.94 add interface=vxlan14811-COLON remote-ip=172.20.4.110 add interface=vxlan14812-DECyD remote-ip=172.20.1.234 add interface=vxlan14813-CERRILLO remote-ip=172.20.1.106 /ip address add address=172.20.4.104/16 comment="IP ADMINISTRACI\D3N" interface=BR-SOMNET network=172.20.0.0 add address=172.16.10.1/27 interface=BR-UAEMEX network=172.16.10.0 add address=172.148.148.1/24 comment="SNMPv3 UAEM\E9x" interface=BR-UAEMEX network=172.148.148.0 add address=172.16.5.52/28 disabled=yes interface=VLAN#148 network=172.16.5.48 add address=172.16.16.69/30 comment="RUTEO SNMPv3 UAEM\E9x" interface=BR-UAEMEX network=172.16.16.68 /ip dns set servers=1.1.1.2,1.0.0.2 /ip firewall filter add action=reject chain=forward comment="Bloquear QUIC para forzar TCP por MTU VXLAN" disabled=yes dst-port=443 protocol=udp reject-with=icmp-network-unreachable /ip firewall mangle add action=change-mss chain=forward comment="fragmentar paquetes mss" new-mss=1360 protocol=tcp tcp-flags=syn tcp-mss=1361-65535 /ip firewall nat add action=src-nat chain=srcnat disabled=yes src-address=172.148.148.0/24 to-addresses=172.16.16.69 /ip route add comment="Default Gateway" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add comment="SNMP UAEM\E9x" disabled=no dst-address=148.215.1.146/32 gateway=172.16.16.70 routing-table=main suppress-hw-offload=no /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ipv6 firewall mangle add action=change-mss chain=forward comment="fragmentar paquetes mss" new-mss=1360 protocol=tcp tcp-flags=syn tcp-mss=1361-65535 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.104 /snmp set enabled=yes trap-version=3 /system clock set time-zone-name=America/Mexico_City /system identity set name="MK DTIC L2L_2026" /system logging add action=GrafanaLoki prefix=172.20.4.104 topics=critical add action=GrafanaLoki prefix=172.20.4.104 topics=error add action=GrafanaLoki prefix=172.20.4.104 topics=info add action=GrafanaLoki prefix=172.20.4.104 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing queue add /tool graphing resource add /user aaa set default-group=full use-radius=yes