#                   version: 7.19.6 (stable)
#          factory-software: 7.15.3
#              total-memory: 4096.0MiB
#                       cpu: ARM64
#                 cpu-count: 4
#           total-hdd-space: 128.0MiB
#         architecture-name: arm64
#                board-name: CCR2004-16G-2S+
#                  platform: MikroTik
#   installed-version: 7.19.6
# 
# software id = K6IZ-8B6M
#
# model = CCR2004-16G-2S+
# serial number = HKC0AZP2Y4N
/interface bridge
add name="BR - SOMNET"
add mtu=1570 name="BR - UAEMEX"
/interface ethernet
set [ find default-name=ether1 ] name="ether1 - LAN"
set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1 - PRINCIPAL SOMNET"
/interface vxlan
add mac-address=CE:B2:C9:58:B3:A3 mtu=1450 name=vxlan1484-LAMORA vni=1484
/interface vlan
add disabled=yes interface="BR - SOMNET" mtu=1570 name=vlan148 vlan-id=148
/ip pool
add name=dhcp_pool0 ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=yes interface="BR - UAEMEX" name=dhcp1
/port
set 0 name=serial0
/snmp community
set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private
add addresses=::/0 name=SNMP-UAEMEX
/system logging action
add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.95 target=remote
/interface bridge port
add bridge="BR - UAEMEX" interface=ether2
add bridge="BR - SOMNET" interface="sfp-sfpplus1 - PRINCIPAL SOMNET"
add bridge="BR - UAEMEX" interface=ether3
add bridge="BR - UAEMEX" interface=ether4
add bridge="BR - UAEMEX" interface=ether5
add bridge="BR - UAEMEX" interface=ether6
add bridge="BR - UAEMEX" interface=ether8
add bridge="BR - UAEMEX" interface=vlan148
add bridge="BR - UAEMEX" interface="ether1 - LAN"
add bridge="BR - UAEMEX" interface=vxlan1484-LAMORA
/interface bridge settings
set use-ip-firewall=yes
/ip neighbor discovery-settings
set discover-interface-list=all
/interface vxlan vteps
add interface=vxlan1484-LAMORA remote-ip=172.20.4.104
/ip address
add address=172.20.4.95/16 interface="BR - SOMNET" network=172.20.0.0
add address=38.123.220.222/24 interface="BR - SOMNET" network=38.123.220.0
add address=192.168.1.1/24 interface="BR - UAEMEX" network=192.168.1.0
add address=172.148.148.5/24 comment="pruebas DTIC" interface="BR - UAEMEX" network=172.148.148.0
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1
/ip dns
set servers=1.1.1.2,1.0.0.2
/ip firewall mangle
add action=change-mss chain=forward new-mss=1400 protocol=tcp tcp-flags=syn
/ip firewall nat
add action=masquerade chain=srcnat disabled=yes out-interface="BR - SOMNET"
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=38.123.220.1 routing-table=main suppress-hw-offload=no
/ip service
set ftp disabled=yes
set telnet disabled=yes
set api disabled=yes
set api-ssl disabled=yes
set ssh port=46825
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.95
/snmp
set enabled=yes trap-version=3
/system clock
set time-zone-name=America/Mexico_City
/system identity
set name=SW-LA-MORA-2026
/system logging
add action=GrafanaLoki prefix=172.20.4.95 topics=critical
add action=GrafanaLoki prefix=172.20.4.95 topics=error
add action=GrafanaLoki prefix=172.20.4.95 topics=info
add action=GrafanaLoki prefix=172.20.4.95 topics=warning
/system ntp client
set enabled=yes
/system ntp client servers
add address=0.mx.pool.ntp.org
add address=1.mx.pool.ntp.org
/system routerboard settings
set enter-setup-on=delete-key
/tool graphing interface
add
/tool graphing resource
add
/user aaa
set default-group=full use-radius=yes