# version: 7.21.2 (stable) # factory-software: 6.44.6 # total-memory: 1024.0MiB # cpu: ARM # cpu-count: 2 # total-hdd-space: 16.0MiB # architecture-name: arm # board-name: CRS317-1G-16S+ # platform: MikroTik # installed-version: 7.21.2 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U log rule changed silviano write 2026-07-27 18:12:04 # U device changed MEXICARRIER write 2026-07-21 10:24:42 # U device changed MEXICARRIER write 2026-07-21 10:24:30 # U device changed MEXICARRIER write 2026-07-02 12:07:35 # U log rule added MEXICARRIER write 2026-07-02 11:50:24 # U log rule added MEXICARRIER write 2026-07-02 11:50:01 # U log rule added MEXICARRIER write 2026-07-02 11:49:39 # U log rule changed MEXICARRIER write 2026-07-02 11:49:22 # U log rule added MEXICARRIER write 2026-07-02 11:49:12 # U log rule changed MEXICARRIER write 2026-07-02 11:49:06 # U log rule changed MEXICARRIER write 2026-07-02 11:49:02 # U log rule changed MEXICARRIER write 2026-07-02 11:48:57 # U log rule changed MEXICARRIER write 2026-07-02 11:08:26 # U ip service changed MEXICARRIER write 2026-06-23 17:54:54 # U ip service changed MEXICARRIER write 2026-06-23 17:54:45 # U dns changed MEXICARRIER write 2026-06-23 17:54:35 # U log rule changed MEXICARRIER write 2026-06-23 17:53:19 # U log rule changed MEXICARRIER write 2026-06-23 17:53:13 # U log action added MEXICARRIER write 2026-06-23 17:52:37 # U user AAA settings changed MEXICARRIER write 2026-06-23 17:51:30 # policy # U RADIUS client added MEXICARRIER write 2026-06-23 17:50:56 # U device changed MEXICARRIER write 2026-06-19 12:25:01 # U device changed MEXICARRIER write 2026-06-19 12:24:20 # U bridge port changed MEXICARRIER write 2026-06-19 12:24:15 # U bridge port changed MEXICARRIER write 2026-06-19 12:23:26 # U device changed MEXICARRIER write 2026-06-18 19:06:15 # U device changed MEXICARRIER write 2026-06-18 18:52:52 # U device changed MEXICARRIER write 2026-06-18 18:52:48 # U device changed MEXICARRIER write 2026-06-18 18:51:36 # U bridge port changed MEXICARRIER write 2026-06-17 19:55:27 # U bridge port changed MEXICARRIER write 2026-06-17 19:54:37 # U bridge port added MEXICARRIER write 2026-06-17 19:54:35 # U bridge port removed MEXICARRIER write 2026-06-17 19:53:51 # U device changed MEXICARRIER write 2026-06-17 19:53:43 # U device changed MEXICARRIER write 2026-06-16 13:34:08 # U device changed MEXICARRIER write 2026-06-16 13:33:54 # U device changed MEXICARRIER write 2026-06-16 13:25:02 # U device changed MEXICARRIER write 2026-06-16 11:26:38 # U device changed MEXICARRIER write 2026-06-16 11:26:33 # U device changed MEXICARRIER write 2026-06-16 11:26:02 # U device changed MEXICARRIER write 2026-06-16 11:25:57 # U device changed MEXICARRIER write 2026-06-16 11:19:09 # U device changed MEXICARRIER write 2026-06-16 11:19:05 # U device changed MEXICARRIER write 2026-06-13 10:18:22 # U device changed MEXICARRIER write 2026-06-12 12:56:12 # U device changed MEXICARRIER write 2026-06-12 12:52:59 # U device changed MEXICARRIER write 2026-06-12 12:35:09 # U device changed MEXICARRIER write 2026-06-12 12:34:55 # U bridge port changed MEXICARRIER write 2026-06-12 12:34:53 # U device changed MEXICARRIER write 2026-06-12 12:33:51 # U bridge port added MEXICARRIER write 2026-06-12 12:33:48 # U device changed MEXICARRIER write 2026-06-12 12:33:24 # U device changed MEXICARRIER write 2026-06-12 12:33:10 # U device changed MEXICARRIER write 2026-06-12 12:32:40 # U device changed MEXICARRIER write 2026-06-12 12:30:25 # U device changed MEXICARRIER write 2026-06-12 12:29:36 # U bridge port removed MEXICARRIER write 2026-06-12 12:29:12 # U bridge port removed MEXICARRIER write 2026-06-12 12:29:02 # U bridge port changed MEXICARRIER write 2026-06-12 12:28:59 # U bridge port changed MEXICARRIER write 2026-06-12 12:28:56 # U device added MEXICARRIER write 2026-06-12 12:28:34 # U bridge port changed MEXICARRIER write 2026-06-12 12:28:12 # U device changed MEXICARRIER write 2026-06-12 12:28:04 # U device changed MEXICARRIER write 2026-06-12 12:27:53 # U device changed MEXICARRIER write 2026-06-10 17:32:10 # U RADIUS client changed MEXICARRIER write 2026-06-06 10:38:49 # U ip service changed MEXICARRIER write 2026-06-05 13:01:42 # U ip service changed brayan write 2026-06-05 12:56:46 # U ip service changed brayan write 2026-06-05 12:18:30 # U ip service changed MEXICARRIER write 2026-06-05 12:12:51 # U ip service changed MEXICARRIER write 2026-06-05 12:12:50 # U RADIUS client changed MEXICARRIER write 2026-06-05 12:10:05 # U RADIUS client changed MEXICARRIER write 2026-06-05 12:09:07 # U RADIUS client changed MEXICARRIER write 2026-05-06 12:25:17 # U RADIUS client changed MEXICARRIER write 2026-05-06 10:51:38 # U RADIUS client added MEXICARRIER write 2026-05-02 16:40:33 # U user AAA settings changed MEXICARRIER write 2026-05-02 16:40:17 # policy # U device changed MEXICARRIER write 2026-04-22 20:23:06 # U device changed MEXICARRIER write 2026-04-22 20:23:05 # U device changed MEXICARRIER write 2026-03-16 17:00:18 # U switch port changed MEXICARRIER write 2026-03-16 16:55:55 # U switch port changed MEXICARRIER write 2026-03-16 16:52:10 # U switch port changed MEXICARRIER write 2026-03-16 16:48:39 # # software id = N2J8-GNUZ # # model = CRS317-1G-16S+ # serial number = HEV0963644E /interface bridge add name=BR-LAN port-cost-mode=short /interface ethernet set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1-SAN MARTIN1 PRINCIPAL" set [ find default-name=sfp-sfpplus2 ] name="sfp-sfpplus2-CIRION-100Gb-LAG MEMBER" set [ find default-name=sfp-sfpplus4 ] name="sfp-sfpplus4-CEAC UAEMEX" set [ find default-name=sfp-sfpplus5 ] name="sfp-sfpplus5-SUTES UAEMEX" set [ find default-name=sfp-sfpplus6 ] name="sfp-sfpplus6-UAEM Col\F3n" set [ find default-name=sfp-sfpplus7 ] comment="BUFFER NARANJA HILO GRIS" name=sfp-sfpplus7-UAEM-VIOLETA set [ find default-name=sfp-sfpplus8 ] name=sfp-sfpplus8-LAN-TO-LAN-DTIC-UAEMEX sfp-rate-select=low set [ find default-name=sfp-sfpplus9 ] name="sfp-sfpplus9-DTIC DEDICADO 10G" set [ find default-name=sfp-sfpplus10 ] name=sfp-sfpplus10-SW-WISP set [ find default-name=sfp-sfpplus11 ] name=sfp-sfpplus11-CIRION-100Gb-LAG-MEMBER set [ find default-name=sfp-sfpplus13 ] name=sfp-sfpplus13-DILIGENCIAS set [ find default-name=sfp-sfpplus14 ] name="sfp-sfpplus14 " set [ find default-name=sfp-sfpplus15 ] name=sfp-sfpplus15-UAEMITAS set [ find default-name=sfp-sfpplus16 ] name="sfp-sfpplus16-SAN MARTIN2 TECAXIC" /interface bonding add lacp-rate=1sec mode=802.3ad name=BONDING-SANMARTIN slaves="sfp-sfpplus16-SAN MARTIN2 TECAXIC,sfp-sfpplus1-SAN MARTIN1 PRINCIPAL" add lacp-rate=1sec mode=802.3ad name=SW-100Gb-LAG slaves="sfp-sfpplus2-CIRION-100Gb-LAG MEMBER,sfp-sfpplus11-CIRION-100Gb-LAG-MEMBER" transmit-hash-policy=layer-2-and-3 /interface ethernet switch port set 3 egress-rate=270.0Mbps ingress-rate=270.0Mbps set 4 egress-rate=320.0Mbps ingress-rate=320.0Mbps set 6 egress-rate=1050.0Mbps ingress-rate=1050.0Mbps set 12 egress-rate=260.0Mbps ingress-rate=260.0Mbps set 14 egress-rate=1050.0Mbps ingress-rate=1050.0Mbps /interface lte apn set [ find default=yes ] ip-type=ipv4 use-network-apn=no /ip smb users set [ find default=yes ] disabled=yes /routing bgp template set default disabled=no output.network=bgp-networks /routing ospf instance add disabled=no name=default-v2 /routing ospf area add disabled=yes instance=default-v2 name=backbone-v2 /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.1.4 target=remote /interface bridge port add bridge=BR-LAN ingress-filtering=no interface=sfp-sfpplus3 internal-path-cost=10 path-cost=10 trusted=yes add bridge=BR-LAN ingress-filtering=no interface="sfp-sfpplus6-UAEM Col\F3n" internal-path-cost=10 path-cost=10 add bridge=BR-LAN ingress-filtering=no interface=sfp-sfpplus8-LAN-TO-LAN-DTIC-UAEMEX internal-path-cost=10 path-cost=10 add bridge=BR-LAN ingress-filtering=no interface="sfp-sfpplus9-DTIC DEDICADO 10G" internal-path-cost=10 path-cost=10 add bridge=BR-LAN disabled=yes ingress-filtering=no interface=sfp-sfpplus11-CIRION-100Gb-LAG-MEMBER internal-path-cost=10 path-cost=10 trusted=yes add bridge=BR-LAN ingress-filtering=no interface=sfp-sfpplus13-DILIGENCIAS internal-path-cost=10 path-cost=10 add bridge=BR-LAN ingress-filtering=no interface=sfp-sfpplus15-UAEMITAS internal-path-cost=10 learn=yes path-cost=10 add bridge=BR-LAN disabled=yes ingress-filtering=no interface="sfp-sfpplus16-SAN MARTIN2 TECAXIC" internal-path-cost=10 path-cost=10 trusted=yes add bridge=BR-LAN ingress-filtering=no interface=sfp-sfpplus7-UAEM-VIOLETA internal-path-cost=10 path-cost=10 add bridge=BR-LAN ingress-filtering=no interface="sfp-sfpplus14 " internal-path-cost=10 path-cost=10 add bridge=BR-LAN ingress-filtering=no interface=sfp-sfpplus10-SW-WISP internal-path-cost=10 path-cost=10 add bridge=BR-LAN disabled=yes ingress-filtering=no interface="sfp-sfpplus2-CIRION-100Gb-LAG MEMBER" internal-path-cost=10 path-cost=10 add bridge=BR-LAN ingress-filtering=no interface="sfp-sfpplus4-CEAC UAEMEX" internal-path-cost=10 path-cost=10 add bridge=BR-LAN ingress-filtering=no interface="sfp-sfpplus5-SUTES UAEMEX" internal-path-cost=10 path-cost=10 add bridge=BR-LAN interface=SW-100Gb-LAG add bridge=BR-LAN interface=BONDING-SANMARTIN add bridge=BR-LAN disabled=yes interface="sfp-sfpplus1-SAN MARTIN1 PRINCIPAL" /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=all lldp-med-net-policy-vlan=1 /ip settings set max-neighbor-entries=8192 /ipv6 settings set disable-ipv6=yes max-neighbor-entries=8192 soft-max-neighbor-entries=8191 /interface ovpn-server server add auth=sha1,md5 mac-address=FE:3B:25:8E:BF:21 name=ovpn-server1 /ip address add address=172.20.1.4/16 interface=BR-LAN network=172.20.0.0 add address=201.234.96.34/27 interface=BR-LAN network=201.234.96.32 /ip dns set servers=1.1.1.2,1.0.0.2 /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=172.20.1.1 add check-gateway=ping disabled=yes dst-address=0.0.0.0/0 gateway=172.16.5.54 /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ipv6 nd set [ find default=yes ] advertise-dns=yes /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.1.4 add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.1.4 /routing bfd configuration add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5 /snmp set enabled=yes location=OFICINA trap-version=2 /system clock set time-zone-autodetect=no time-zone-name=America/Mexico_City /system identity set name=SW_FOOficina /system logging add action=GrafanaLoki prefix=172.20.1.4 topics=info add action=GrafanaLoki prefix=172.20.1.4 topics=critical add action=GrafanaLoki prefix=172.20.1.4 topics=error add action=GrafanaLoki prefix=172.20.1.4 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=132.248.30.3 /tool graphing interface add /tool graphing resource add /tool sniffer set file-name=SWFOSOMNET.CAP filter-direction=tx filter-interface=sfp-sfpplus7-UAEM-VIOLETA memory-limit=1000KiB only-headers=yes /user aaa set default-group=full use-radius=yes