# version: 7.18.2 (stable) # factory-software: 7.15 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.18.2 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U ntp settings changed MEXICARRIER write 2026-07-21 09:59:04 # U ntp server record removed read 2026-07-21 09:59:04 # U ntp server record removed read 2026-07-21 09:59:04 # U ntp server record added read 2026-07-21 09:59:04 # U ntp server record added read 2026-07-21 09:59:04 # U dns changed MEXICARRIER write 2026-07-21 09:58:22 # U ip service changed MEXICARRIER write 2026-07-21 09:57:03 # U ip service changed MEXICARRIER write 2026-07-21 09:57:01 # U user AAA settings changed MEXICARRIER write 2026-07-21 09:56:48 # policy # U log rule added MEXICARRIER write 2026-07-21 09:56:26 # U log rule added MEXICARRIER write 2026-07-21 09:56:10 # U log rule added MEXICARRIER write 2026-07-21 09:55:55 # U log rule added MEXICARRIER write 2026-07-21 09:55:40 # U log action added MEXICARRIER write 2026-07-21 09:55:22 # U RADIUS client added MEXICARRIER write 2026-07-21 09:54:31 # U changed snmp settings MEXICARRIER write 2026-06-08 13:55:12 # U item changed MEXICARRIER write 2026-06-08 13:55:06 # U config changed MEXICARRIER write 2026-04-20 11:57:02 # U device changed MEXICARRIER write 2026-04-20 11:55:46 # U device changed MEXICARRIER write 2026-04-20 11:55:45 # U mangle rule added MEXICARRIER write 2026-04-20 11:55:29 # U device changed MEXICARRIER write 2026-04-20 11:26:45 # U device changed MEXICARRIER write 2026-04-20 11:26:44 # U device changed MEXICARRIER write 2026-04-20 10:05:50 # U device changed MEXICARRIER write 2026-04-18 13:31:33 # U device changed MEXICARRIER write 2026-04-18 13:31:32 # U bridge port added MEXICARRIER write 2026-04-18 13:31:25 # U device changed MEXICARRIER write 2026-04-18 13:31:16 # U item added MEXICARRIER write 2026-04-18 13:31:12 # U device changed MEXICARRIER write 2026-04-18 13:31:07 # U device added MEXICARRIER write 2026-04-18 13:31:05 # U address removed MEXICARRIER write 2026-04-15 10:30:44 # U address added MEXICARRIER write 2026-04-15 10:21:56 # U address changed MEXICARRIER write 2026-03-23 11:43:27 # U address changed MEXICARRIER write 2026-03-23 11:21:20 # U address changed MEXICARRIER write 2026-03-23 09:23:34 # U address changed MEXICARRIER write 2026-03-23 09:23:06 # U route 0.0.0.0/0 changed MEXICARRIER write 2026-03-23 08:39:06 # U route 0.0.0.0/0 changed MEXICARRIER write 2026-03-23 08:37:58 # U route 0.0.0.0/0 changed MEXICARRIER write 2026-03-20 12:08:16 # U route 0.0.0.0/0 changed MEXICARRIER write 2026-03-20 12:08:00 # U address changed MEXICARRIER write 2026-03-20 12:05:46 # U address changed MEXICARRIER write 2026-03-20 12:00:56 # U route 0.0.0.0/0 changed MEXICARRIER write 2026-03-20 12:00:37 # # software id = EKI9-QKRM # # model = CCR2004-16G-2S+ # serial number = HGT0AAS3TK8 /interface bridge add name=BRIDGE-SOMNET add name=BRIDGE-UAEMEX /interface ethernet set [ find default-name=ether1 ] name="ether1-LAN IITCA" set [ find default-name=ether2 ] name="ether2 " set [ find default-name=ether16 ] name="ether16-REDUNDANCIA INALAMBRICA" set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1-WAN SOMNET" /interface vxlan add dont-fragment=disabled mac-address=FE:25:A6:4C:61:8E mtu=1450 name=vxlan1488-IITCA vni=1488 /interface vlan add disabled=yes interface=BRIDGE-SOMNET name=vlan148 vlan-id=148 /port set 0 name=serial0 /snmp community set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private add addresses=::/0 name=SNMP-UAEMEX /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.114 target=remote /interface bridge port add bridge=BRIDGE-UAEMEX interface="ether1-LAN IITCA" add bridge=BRIDGE-UAEMEX interface=vlan148 add bridge=BRIDGE-SOMNET interface="sfp-sfpplus1-WAN SOMNET" add bridge=BRIDGE-SOMNET disabled=yes interface="ether16-REDUNDANCIA INALAMBRICA" add bridge=BRIDGE-UAEMEX interface=vxlan1488-IITCA /interface bridge settings set use-ip-firewall=yes /interface vxlan vteps add interface=vxlan1488-IITCA remote-ip=172.20.4.104 /ip address add address=172.20.4.114/16 comment="IP ADMINISTRACI\D3N" interface=BRIDGE-SOMNET network=172.20.0.0 add address=172.17.156.65/26 disabled=yes interface=BRIDGE-UAEMEX network=172.17.156.64 add address=172.16.8.36/28 disabled=yes interface="ether1-LAN IITCA" network=172.16.8.32 add address=172.16.5.51/29 disabled=yes interface=BRIDGE-UAEMEX network=172.16.5.48 add address=172.148.148.9/24 comment="pruebas DTIC" interface=BRIDGE-UAEMEX network=172.148.148.0 /ip dns set servers=1.1.1.2,1.0.0.2 /ip firewall mangle add action=change-mss chain=forward new-mss=1400 protocol=tcp tcp-flags=syn /ip firewall nat add action=masquerade chain=srcnat disabled=yes out-interface=BRIDGE-SOMNET /ip route add comment="GATEWAY POR OFICINA" disabled=no distance=20 dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add comment="DEFAULT GATEWAY DTIC" disabled=no distance=5 dst-address=0.0.0.0/0 gateway=172.16.5.54 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=148.215.81.0/24 gateway=172.16.8.37 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=148.215.82.0/24 gateway=172.16.8.37 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=148.215.83.0/24 gateway=172.16.8.37 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=148.215.85.0/24 gateway=172.16.8.37 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=148.215.86.0/24 gateway=172.16.8.37 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=148.215.255.224/29 gateway=172.16.8.37 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=172.16.2.168/30 gateway=172.16.8.37 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no dst-address=172.16.10.0/24 gateway=172.16.8.37 routing-table=main add disabled=no dst-address=172.16.55.140/30 gateway=172.16.8.37 routing-table=main add disabled=no distance=1 dst-address=172.16.82.0/24 gateway=172.16.8.37 routing-table=main scope=30 target-scope=10 add disabled=no dst-address=172.16.86.0/24 gateway=172.16.8.37 routing-table=main add disabled=no dst-address=172.16.87.0/24 gateway=172.16.8.37 routing-table=main add disabled=no dst-address=172.17.30.0/24 gateway=172.16.8.37 routing-table=main add disabled=no dst-address=172.17.82.0/24 gateway=172.16.8.37 routing-table=main add disabled=no dst-address=172.17.87.0/26 gateway=172.16.8.37 routing-table=main add disabled=no distance=1 dst-address=172.17.87.64/26 gateway=172.16.8.37 routing-table=main scope=30 target-scope=10 add disabled=no dst-address=172.17.87.128/26 gateway=172.16.8.37 routing-table=main add disabled=no dst-address=172.17.127.128/26 gateway=172.16.8.37 routing-table=main add disabled=no dst-address=172.19.150.0/24 gateway=172.16.8.37 routing-table=main add disabled=no dst-address=172.19.151.0/24 gateway=172.16.8.37 routing-table=main add dst-address=172.19.152.0/24 gateway=172.16.8.37 add dst-address=172.19.154.0/24 gateway=172.16.8.37 add dst-address=172.19.155.0/24 gateway=172.16.8.37 add dst-address=172.19.156.0/24 gateway=172.16.8.37 add dst-address=172.19.157.0/24 gateway=172.16.8.37 add dst-address=172.26.172.0/24 gateway=172.16.8.37 /ip service set telnet disabled=yes set ftp disabled=yes set www port=8080 set ssh port=46825 set api disabled=yes set api-ssl disabled=yes /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.114 /snmp set enabled=yes trap-version=3 /system clock set time-zone-name=America/Mexico_City /system identity set name=MK-IITCA-2026 /system logging add action=GrafanaLoki prefix=172.20.4.114 topics=critical add action=GrafanaLoki prefix=172.20.4.114 topics=error add action=GrafanaLoki prefix=172.20.4.114 topics=info add prefix=172.20.4.114 topics=warning /system note set show-at-login=no /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing resource add /user aaa set default-group=full use-radius=yes