# version: 7.22 (stable) # factory-software: 6.46.6 # total-memory: 256.0MiB # cpu: ARM # cpu-count: 2 # total-hdd-space: 16.0MiB # architecture-name: arm # board-name: netPower 16P # platform: MikroTik # installed-version: 7.22 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U changed scheduled script settings MEXICARRIER write 2026-07-10 10:51:25 # U changed scheduled script settings MEXICARRIER write 2026-07-10 10:51:25 # U log action changed MEXICARRIER write 2026-07-08 13:06:31 # U dns changed MEXICARRIER write 2026-07-08 13:04:03 # U ip service changed MEXICARRIER write 2026-07-08 13:02:46 # U ip service changed MEXICARRIER write 2026-07-08 13:02:44 # U ntp settings changed MEXICARRIER write 2026-07-08 13:02:26 # U user AAA settings changed MEXICARRIER write 2026-07-08 13:01:58 # policy # U user SOMNET4G removed MEXICARRIER write 2026-07-08 13:01:52 # policy # U log rule added MEXICARRIER write 2026-07-08 13:01:37 # U log rule added MEXICARRIER write 2026-07-08 13:01:23 # U log rule added MEXICARRIER write 2026-07-08 13:01:14 # U log rule added MEXICARRIER write 2026-07-08 13:00:58 # U log action added MEXICARRIER write 2026-07-08 13:00:37 # U RADIUS client added MEXICARRIER write 2026-07-08 12:59:16 # U device changed MEXICARRIER write 2026-07-08 12:19:57 # U device changed MEXICARRIER write 2026-07-08 12:19:51 # U device changed MEXICARRIER write 2026-07-08 10:15:56 # U device changed MEXICARRIER write 2026-07-08 10:15:53 # U device changed MEXICARRIER write 2026-07-08 10:15:45 # U device changed MEXICARRIER write 2026-07-08 10:15:35 # U bridge port changed MEXICARRIER write 2026-06-19 13:07:52 # U bridge port changed MEXICARRIER write 2026-06-19 13:05:43 # U item changed MEXICARRIER write 2026-03-28 13:10:35 # U device changed MEXICARRIER write 2026-03-28 13:10:21 # U item changed MEXICARRIER write 2026-03-28 13:09:41 # U device changed MEXICARRIER write 2026-03-28 13:06:58 # U device changed MEXICARRIER write 2026-03-28 13:06:52 # U device changed MEXICARRIER write 2026-03-28 13:06:43 # U device changed MEXICARRIER write 2026-03-28 13:06:38 # U device changed MEXICARRIER write 2026-03-28 13:06:35 # U device changed MEXICARRIER write 2026-03-28 13:06:32 # U device changed MEXICARRIER write 2026-03-28 13:06:24 # U device changed MEXICARRIER write 2026-03-28 13:05:37 # U device changed MEXICARRIER write 2026-03-28 13:05:34 # U device changed MEXICARRIER write 2026-03-28 12:42:44 # U device changed MEXICARRIER write 2026-03-28 12:42:40 # U device changed MEXICARRIER write 2026-03-28 12:34:01 # U item changed MEXICARRIER write 2026-03-19 16:21:40 # U device changed MEXICARRIER write 2026-03-19 16:14:04 # U device changed MEXICARRIER write 2026-03-19 16:13:56 # U device changed MEXICARRIER write 2026-03-19 15:59:55 # U device changed MEXICARRIER write 2026-03-19 15:59:34 # U bridge port changed MEXICARRIER write 2026-03-12 16:39:03 # U bridge port changed MEXICARRIER write 2026-03-12 16:36:32 # U bridge port changed MEXICARRIER write 2026-03-12 16:21:21 # # software id = XD38-10EQ # # model = CRS318-16P-2S+ # serial number = HG409ZXC460 /interface bridge add name=BR-SOMNET port-cost-mode=short /interface ethernet set [ find default-name=ether1 ] name="ether1 " poe-priority=8 set [ find default-name=ether2 ] poe-priority=8 poe-voltage=low set [ find default-name=ether3 ] comment="IP: 172.20.1.175" name=ether3-WAN1-OXTO poe-out=forced-on poe-priority=8 poe-voltage=high set [ find default-name=ether4 ] comment="IP: 172.20.1.211" name="ether4 - TIXCA" poe-out=forced-on poe-voltage=high set [ find default-name=ether5 ] name="ether5 " set [ find default-name=ether7 ] name="ether7 -TP-LINK CASA" poe-out=off set [ find default-name=ether9 ] name=ether9-CAMARA poe-out=forced-on poe-priority=8 poe-voltage=high set [ find default-name=ether10 ] poe-priority=8 set [ find default-name=ether11 ] name="ether11- NO LEVANTA" poe-out=off poe-priority=8 set [ find default-name=ether12 ] advertise=10M-baseT-half,10M-baseT-full disabled=yes name=ether12-CAMARA2 poe-out=off poe-priority=8 poe-voltage=high set [ find default-name=ether13 ] comment="IP: 172.20.2.39" name="ether13-WAN2 OXTO" poe-out=forced-on poe-voltage=high set [ find default-name=ether14 ] name="ether14-NO LEVANTA" set [ find default-name=ether15 ] name="ether15-CAMARA 1" poe-out=forced-on poe-voltage=high set [ find default-name=ether16 ] name="ether16 " poe-priority=8 set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1-SW DON PABLO" /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip smb users set [ find default=yes ] disabled=yes /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.28 target=remote /system script add dont-require-permissions=no name=Verificar-Ethernet owner=SOMNET4G policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":local interface \"ether10--Mimbres2(MK)\"\r\n:local speed [/interface ethernet get \$interface speed]\r\n\r\n# Verifica si est\E1 devolviendo algo\r\n#:if ([:len \$speed] = 0) do={\r\n# :log warning \"No se pudo obtener la velocidad de la interfaz \$interface\"\r\n# :return\r\n}\r\n\r\n\r\n# Variables globales\r\n:global ultimaVelocidad\r\n\r\n# Inicializar si es la primera vez\r\n:if ([:typeof \$ultimaVelocidad] = \"nothing\") do={\r\n :set ultimaVelocidad \$speed\r\n :log info \"DEBUG: Inicializando velocidad global\"\r\n :return\r\n}\r\n\r\n# Comparar velocidad anterior vs actual\r\n:if ((\$ultimaVelocidad = \"1Gbps\") and (\$speed = \"100Mbps\")) do={\r\n /tool e-mail send to=\"soporte@somnet.com.mx\" subject=(\"ALERTA: \$interface baj\F3 a \$speed\") body=(\"La interfaz \$interface ha bajado su\_velocidad a \$speed.\")\r\n :log warning (\"[ALERTA] \$interface baj\F3 de velocidad a \$speed\")\r\n}\r\n\r\n# Actualizar el valor global\r\n:set ultimaVelocidad \$speed" add dont-require-permissions=no name=Verificar-Caida-Puerto owner=SOMNET4G policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":local interface \"ether10--Mimbres2(MK)\"\r\n:local estadoActual\r\n\r\n# Obtenemos si est\E1 corriendo (enlace activo)\r\n:if ([/interface ethernet get \$interface running]) do={\r\n :set estadoActual \"up\"\r\n} else={\r\n :set estadoActual \"down\"\r\n}\r\n\r\n\r\n# Estado anterior\r\n:global estadoAnterior\r\n:if ([:typeof \$estadoAnterior] = \"nothing\") do={\r\n :set estadoAnterior \$estadoActual\r\n}\r\n\r\n# Detecta cambio de up \? down\r\n:if ((\$estadoAnterior = \"up\") and (\$estadoActual = \"down\")) do={\r\n /tool e-mail send to=\"soporte@somnet.com.mx\" subject=(\"ALERTA: \"\_. \$interface . \" cay\F3\") body=(\"El puerto \" . \$interface . \" ha perdido el enlace.\")\r\n :log warning (\"[ALERTA] \" . \$interface . \" ha perdido el enlace.\")\r\n}\r\n\r\n# Actualiza estado global\r\n:set estadoAnterior \$estadoActual" /interface bridge port add bridge=BR-SOMNET interface=ether10 internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface=ether12-CAMARA2 internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether16 " internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface=ether6 internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether5 " internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether15-CAMARA 1" internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether4 - TIXCA" internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether1 " internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface=ether2 internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET disabled=yes interface=ether3-WAN1-OXTO internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether7 -TP-LINK CASA" internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface=ether8 internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface=ether9-CAMARA internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether11- NO LEVANTA" internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether13-WAN2 OXTO" internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="ether14-NO LEVANTA" internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface="sfp-sfpplus1-SW DON PABLO" internal-path-cost=10 path-cost=10 add bridge=BR-SOMNET interface=sfp-sfpplus2 internal-path-cost=10 path-cost=10 /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=all /interface ovpn-server server add mac-address=FE:B3:B3:F0:10:F3 name=ovpn-server1 /ip address add address=172.20.4.28/16 interface=BR-SOMNET network=172.20.0.0 /ip dns set servers=1.1.1.2,1.0.0.2 /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add disabled=no dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ipv6 nd set [ find default=yes ] advertise-dns=yes /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.28 /snmp set enabled=yes location=Oxtotilpan trap-version=2 /system clock set time-zone-name=America/Mexico_City /system identity set name=SW-MANZANA-JABALI /system logging add action=GrafanaLoki prefix=172.20.4.28 topics=critical add action=GrafanaLoki prefix=172.20.4.28 topics=error add action=GrafanaLoki prefix=172.20.4.28 topics=info add action=GrafanaLoki prefix=172.20.4.28 topics=warning /system note set show-at-login=no /system ntp client set enabled=yes /system ntp client servers add address=1.mx.pool.ntp.org add address=0.mx.pool.ntp.org /system scheduler add disabled=yes interval=10m name=Check-Ethernet-Speed on-event="/system script run Verificar-Ethernet" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2025-04-21 start-time=10:00:13 add disabled=yes interval=10m name=Detectar-Caida-Puerto on-event="/system script run Verificar-Caida-Puerto" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2025-04-21 start-time=10:00:20 /tool e-mail set certificate-verification=no password="pbht gugu bocl tubg" port=587 server=smtp.gmail.com tls=yes user=cuentafallas67@gmail.com /tool graphing interface add /tool graphing queue add /tool graphing resource add /tool sniffer set file-name=jabali.cap filter-direction=rx filter-interface=ether9-CAMARA memory-limit=1000KiB /user aaa set default-group=full use-radius=yes