#                   version: 6.49.7 (stable)
#          factory-software: 6.46
#              total-memory: 128.0MiB
#                       cpu: MIPS 74Kc V4.12
#                 cpu-count: 1
#           total-hdd-space: 128.0MiB
#         architecture-name: mipsbe
#                board-name: RB2011UiAS
#                  platform: MikroTik
#   installed-version: 6.49.7
# Flags: U - undoable, R - redoable, F - floating-undo
#   ACTION                                   BY               POLICY
# 
# software id = 6JF6-K4W1
#
# model = RB2011UiAS
# serial number = HD308CHETAM
/interface bridge
add name="BR WAN"
add name=BR-LAN
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=172.18.70.10-172.18.70.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=BR-LAN name=dhcp1
/snmp community
set [ find default=yes ] name=SNMP-SOMNET
/system logging action
add bsd-syslog=yes name=GrafanaLoki remote=172.20.0.254 remote-port=1514 src-address=172.20.3.249 target=remote
/interface bridge port
add bridge=BR-LAN interface=ether3
add bridge=BR-LAN interface=ether4
add bridge=BR-LAN interface=ether5
add bridge=BR-LAN interface=ether6
add bridge="BR WAN" interface=ether7 unknown-multicast-flood=no
add bridge=BR-LAN interface=ether8
add bridge=BR-LAN interface=ether9
add bridge=BR-LAN interface=ether10
add bridge="BR WAN" interface=ether2
add bridge="BR WAN" interface=ether1-WAN
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=172.20.3.249/16 comment="IP ADMINISTRACION" interface="BR WAN" network=172.20.0.0
add address=172.18.70.1/24 comment="IP LAN INTERNA" interface=BR-LAN network=172.18.70.0
add address=38.58.38.17/24 interface=ether1-WAN network=38.58.38.0
/ip dhcp-server network
add address=172.18.70.0/24 dns-server=8.8.8.8 gateway=172.18.70.1
/ip dns
set servers=1.1.1.2,1.0.0.2
/ip firewall nat
add action=masquerade chain=srcnat out-interface="BR WAN"
/ip route
add check-gateway=ping distance=1 gateway=38.58.38.1
add check-gateway=ping distance=20 gateway=172.20.1.1
add check-gateway=ping distance=1 dst-address=172.18.60.0/24 gateway=172.20.3.248
add check-gateway=ping distance=1 dst-address=172.18.61.0/24 gateway=172.20.3.248
add check-gateway=ping distance=1 dst-address=172.18.62.0/24 gateway=172.20.3.248
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=8080
set ssh port=46825
set api disabled=yes
set api-ssl disabled=yes
/lcd
set time-interval=weekly
/radius
add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.3.249
/snmp
set enabled=yes trap-version=2
/system clock
set time-zone-name=America/Mexico_City
/system identity
set name="RT TEJAPAN-TONY"
/system logging
add action=GrafanaLoki prefix=172.20.3.249 topics=critical
add action=GrafanaLoki prefix=172.20.3.249 topics=error
add action=GrafanaLoki prefix=172.20.3.249 topics=info
add action=GrafanaLoki prefix=172.20.3.249 topics=warning
/system ntp client
set enabled=yes primary-ntp=201.174.182.214 secondary-ntp=193.182.111.13
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
/tool sniffer
set file-name=tejapan.cap filter-direction=rx filter-interface=ether7
/user aaa
set default-group=full use-radius=yes