# version: 7.19.6 (stable) # factory-software: 7.15.3 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.19.6 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U RADIUS client changed MEXICARRIER write 2026-07-15 13:03:01 # U mangle rule changed MEXICARRIER write 2026-07-15 13:02:45 # U mangle rule changed MEXICARRIER write 2026-07-15 13:02:39 # U RADIUS client changed MEXICARRIER write 2026-07-15 13:02:15 # U RADIUS client changed MEXICARRIER write 2026-07-15 13:02:14 # U RADIUS client changed MEXICARRIER write 2026-07-15 13:02:13 # U RADIUS client changed MEXICARRIER write 2026-07-15 13:02:10 # U RADIUS client changed MEXICARRIER write 2026-07-15 13:01:24 # U RADIUS client changed MEXICARRIER write 2026-07-15 12:51:58 # U RADIUS client changed MEXICARRIER write 2026-07-15 12:49:35 # U RADIUS client added MEXICARRIER write 2026-07-15 12:26:47 # U ip service changed MEXICARRIER write 2026-07-15 11:43:38 # U ip service changed MEXICARRIER write 2026-07-15 11:43:37 # U user AAA settings changed MEXICARRIER write 2026-07-15 11:43:06 # policy # U log rule added MEXICARRIER write 2026-07-15 11:42:56 # U log rule added MEXICARRIER write 2026-07-15 11:42:42 # U log rule added MEXICARRIER write 2026-07-15 11:42:30 # U log rule added MEXICARRIER write 2026-07-15 11:42:14 # U log action added MEXICARRIER write 2026-07-15 11:41:57 # U device changed MEXICARRIER write 2026-06-18 19:10:31 # U changed snmp settings MEXICARRIER write 2026-06-08 13:47:32 # U item changed MEXICARRIER write 2026-06-08 13:47:24 # U config changed MEXICARRIER write 2026-04-20 12:08:24 # U mangle rule added MEXICARRIER write 2026-04-20 12:08:18 # U device changed MEXICARRIER write 2026-04-20 10:05:26 # U device changed MEXICARRIER write 2026-04-18 13:29:59 # U device changed MEXICARRIER write 2026-04-18 13:28:58 # U device changed MEXICARRIER write 2026-04-18 13:28:01 # U device changed MEXICARRIER write 2026-04-18 13:27:28 # U device changed MEXICARRIER write 2026-04-18 13:24:34 # U device changed MEXICARRIER write 2026-04-18 13:24:34 # U bridge port added MEXICARRIER write 2026-04-18 13:24:26 # U item added MEXICARRIER write 2026-04-18 13:24:15 # U device changed MEXICARRIER write 2026-04-18 13:24:05 # U device added MEXICARRIER write 2026-04-18 13:23:56 # U item added MEXICARRIER write 2026-03-18 18:24:27 # U address changed MEXICARRIER write 2026-03-16 18:41:22 # U address changed MEXICARRIER write 2026-03-16 18:38:30 # U changed snmp settings MEXICARRIER write 2026-03-16 18:16:32 # U item changed MEXICARRIER write 2026-03-16 18:16:27 # U address changed MEXICARRIER write 2026-03-16 17:59:29 # U address changed MEXICARRIER write 2026-03-16 17:56:18 # # software id = 6DMC-F3VB # # model = CCR2004-16G-2S+ # serial number = HKC0AJRD81A /interface bridge add name=BRIDGE-SOMNET add name=BRIDGE-UAEMEX /interface ethernet set [ find default-name=ether1 ] name="ether1-LAN HUAWEI" set [ find default-name=ether16 ] disabled=yes name="ether16-REDUNDANCIA INALAMBRICA" set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1-WAN SOMNET" /interface vxlan add mac-address=BE:72:AC:C3:0A:8D mtu=1450 name=vxlan1487-FONDICT vni=1487 /interface vlan add disabled=yes interface=BRIDGE-SOMNET name=vlan148 vlan-id=148 /port set 0 name=serial0 /snmp community set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private add addresses=::/0 name=SNMP-UAEMEX /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.93 target=remote /interface bridge port add bridge=BRIDGE-SOMNET interface=ether13 add bridge=BRIDGE-SOMNET interface=ether14 add bridge=BRIDGE-SOMNET interface="sfp-sfpplus1-WAN SOMNET" add bridge=BRIDGE-SOMNET interface="ether16-REDUNDANCIA INALAMBRICA" add bridge=BRIDGE-UAEMEX interface=vlan148 add bridge=BRIDGE-UAEMEX interface="ether1-LAN HUAWEI" add bridge=BRIDGE-UAEMEX interface=vxlan1487-FONDICT /interface bridge settings set use-ip-firewall=yes /interface vxlan vteps add interface=vxlan1487-FONDICT remote-ip=172.20.4.104 /ip address add address=172.20.4.93/16 interface=BRIDGE-SOMNET network=172.20.0.0 add address=38.123.220.13/24 interface=BRIDGE-SOMNET network=38.123.220.0 add address=172.16.10.5/27 interface=BRIDGE-UAEMEX network=172.16.10.0 add address=172.148.148.8/24 comment="pruebas DTIC" interface=BRIDGE-UAEMEX network=172.148.148.0 add address=172.16.16.133/30 disabled=yes interface="ether1-LAN HUAWEI" network=172.16.16.132 /ip dns set servers=1.1.1.2,1.0.0.2 /ip firewall mangle add action=change-mss chain=forward new-mss=1400 protocol=tcp tcp-flags=syn /ip firewall nat add action=masquerade chain=srcnat disabled=yes out-interface=BRIDGE-SOMNET /ip route add comment="DEFAULT GATEWAY" disabled=no distance=20 dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main scope=30 target-scope=10 add comment="RUTA PARA MONITOREO UAEMEX" disabled=no distance=1 dst-address=148.215.1.146/32 gateway=172.16.10.30 routing-table=main scope=30 target-scope=10 add disabled=yes distance=1 dst-address=172.17.142.0/25 gateway=172.16.16.134 routing-table=main scope=30 target-scope=10 add disabled=yes distance=1 dst-address=172.17.140.0/24 gateway=172.16.16.134 routing-table=main scope=30 target-scope=10 add disabled=yes distance=1 dst-address=172.17.141.0/25 gateway=172.16.16.134 routing-table=main scope=30 target-scope=10 add disabled=yes distance=1 dst-address=172.17.139.0/25 gateway=172.16.16.134 routing-table=main scope=30 target-scope=10 add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=38.123.220.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.93 /snmp set enabled=yes trap-version=3 /system clock set time-zone-name=America/Mexico_City /system identity set name=SW-FONDICT-2026 /system logging add action=GrafanaLoki prefix=172.20.4.93 topics=critical add action=GrafanaLoki prefix=172.20.4.93 topics=error add action=GrafanaLoki prefix=172.20.4.93 topics=info add action=GrafanaLoki prefix=172.20.4.93 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing resource add /user aaa set default-group=full use-radius=yes