# version: 7.19.6 (stable) # factory-software: 7.15.3 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.19.6 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY # ACTION BY POLICY # U RADIUS client added MEXICARRIER write # U log action changed MEXICARRIER write # U CPU/Memory Usage Graphing Config added MEXICARRIER write # U Interface Traffic Graphing Config added MEXICARRIER write # U dns changed MEXICARRIER write # U ip service changed MEXICARRIER write # U ip service changed MEXICARRIER write # U ip service changed MEXICARRIER write # U ip service changed MEXICARRIER write # U ip service changed MEXICARRIER write # U ntp settings changed MEXICARRIER write # U ntp server record added read # U ntp server record added read # U user AAA settings changed MEXICARRIER write # policy # U log rule added MEXICARRIER write # U log rule added MEXICARRIER write # U log rule added MEXICARRIER write # U log rule added MEXICARRIER write # U log action added MEXICARRIER write # U changed snmp settings MEXICARRIER write # U item changed MEXICARRIER write # U route 0.0.0.0/0 removed MEXICARRIER write # U route 52.123.0.0/16 changed MEXICARRIER write # U route 52.123.0.0/16 added MEXICARRIER write # U filter rule removed MEXICARRIER write # U Youtube removed MEXICARRIER write # U mangle rule removed MEXICARRIER write # U address list entry added MEXICARRIER write # U route 142.251.0.0/16 added MEXICARRIER write # U route 142.250.0.0/16 changed MEXICARRIER write # U route 142.250.0.0/24 changed MEXICARRIER write # U mangle rule changed MEXICARRIER write # U route 0.0.0.0/0 added MEXICARRIER write # U mangle rule added MEXICARRIER write # U Youtube added MEXICARRIER write # U route 142.251.0.0/24 changed MEXICARRIER write # U route 142.250.0.0/24 changed MEXICARRIER write # U route 142.251.0.0/24 changed MEXICARRIER write # U route 145.251.0.0/24 changed MEXICARRIER write # U route 145.251.0.0/24 added MEXICARRIER write # U address list entry added MEXICARRIER write # U address added MEXICARRIER write # U route 69.147.0.0/16 changed MEXICARRIER write # U route 69.147.0.0/16 added MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U mangle rule changed MEXICARRIER write # U mangle rule changed MEXICARRIER write # U mangle rule changed MEXICARRIER write # U mangle rule added MEXICARRIER write # U mangle rule removed MEXICARRIER write # U mangle rule added MEXICARRIER write # U config changed MEXICARRIER write # U mangle rule changed MEXICARRIER write # U config changed MEXICARRIER write # U filter rule changed MEXICARRIER write # U filter rule added MEXICARRIER write # U nat rule changed MEXICARRIER write # U nat rule changed MEXICARRIER write # U mangle rule changed MEXICARRIER write # U mangle rule removed MEXICARRIER write # U mangle rule changed MEXICARRIER write # U mangle rule added MEXICARRIER write # U config changed MEXICARRIER write # U mangle rule added MEXICARRIER write # U bridge port removed MEXICARRIER write # U bridge port removed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port added MEXICARRIER write # U item added MEXICARRIER write # U device changed MEXICARRIER write # U device added MEXICARRIER write # U item added MEXICARRIER write # U address changed MEXICARRIER write # U address changed MEXICARRIER write # U address added MEXICARRIER write # U changed snmp settings MEXICARRIER write # U item changed MEXICARRIER write # U system identity changed MEXICARRIER write # U bridge port added MEXICARRIER write # U bridge port removed MEXICARRIER write # U bridge port added MEXICARRIER write # # software id = 9QS7-Z8ER # # model = CCR2004-16G-2S+ # serial number = HKC0AS0TG4K /interface bridge add name="BR - SOMNET" add name="BR - UAEMEX" /interface ethernet set [ find default-name=ether1 ] name="ether1 " set [ find default-name=ether2 ] name="ether2 - CISCO" set [ find default-name=ether4 ] name="ether4 - LAN UAEMEX" set [ find default-name=ether6 ] name="ether6 - FORTINET" set [ find default-name=ether16 ] name="ether16 - REDUNDANCIA" set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1 - PRINCIPAL SOMNET" /interface vxlan add mac-address=82:F8:59:AF:E2:AF mtu=1450 name=vxlan14810-UAEMITAS vni=14810 /interface vlan add disabled=yes interface="BR - SOMNET" name="VLAN #148" vlan-id=148 /port set 0 name=serial0 /snmp community set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=authorized add addresses=::/0 name=SNMP-UAEMEX /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.94 target=remote /interface bridge port add bridge="BR - UAEMEX" interface="ether2 - CISCO" add bridge="BR - SOMNET" interface="sfp-sfpplus1 - PRINCIPAL SOMNET" add bridge="BR - UAEMEX" interface="ether4 - LAN UAEMEX" add bridge="BR - SOMNET" interface="ether6 - FORTINET" add bridge="BR - UAEMEX" interface="VLAN #148" add bridge="BR - UAEMEX" interface=vxlan14810-UAEMITAS /interface bridge settings # ipv6 neighbor configuration has changed, please restart the device in order to apply the new settings set use-ip-firewall=yes /interface vxlan vteps add interface=vxlan14810-UAEMITAS remote-ip=172.20.4.104 /ip address add address=172.20.4.94/16 interface="BR - SOMNET" network=172.20.0.0 add address=172.16.5.55/28 interface="BR - UAEMEX" network=172.16.5.48 add address=172.16.10.4/27 interface="BR - UAEMEX" network=172.16.10.0 add address=172.16.16.241/30 interface="ether4 - LAN UAEMEX" network=172.16.16.240 add address=172.148.148.11/24 comment="pruebas DTIC" interface="BR - UAEMEX" network=172.148.148.0 add address=38.123.220.125/24 interface="BR - SOMNET" network=38.123.220.0 /ip dns set servers=1.1.1.2,1.0.0.2 /ip firewall address-list add address=youtube.com list=YouTube add address=teams.microsoft.com list=Teams /ip firewall mangle add action=change-mss chain=forward comment="fragmentar paquetes mss" new-mss=1360 protocol=tcp tcp-flags=syn tcp-mss=1361-65535 /ip firewall nat add action=masquerade chain=srcnat out-interface="BR - SOMNET" /ip route add disabled=no dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no add comment="RUTA MONITOREO UAEMEX" disabled=no distance=1 dst-address=148.215.1.146/32 gateway=172.16.10.30 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no dst-address=172.17.126.0/24 gateway=172.16.16.242 routing-table=main suppress-hw-offload=no add disabled=no distance=1 dst-address=172.17.156.64/26 gateway=172.20.4.99 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=172.22.0.0/21 gateway=172.16.16.242 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no dst-address=172.26.60.0/22 gateway=172.16.16.242 routing-table=main suppress-hw-offload=no add disabled=no dst-address=192.36.143.130/32 gateway=172.20.1.1 routing-table=main suppress-hw-offload=no add check-gateway=ping comment="yahoo por cogent" disabled=no distance=1 dst-address=69.147.0.0/16 gateway=38.123.220.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment=youtube.com disabled=no distance=1 dst-address=142.250.0.0/16 gateway=38.123.220.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment=youtube.com disabled=no distance=1 dst-address=142.251.0.0/16 gateway=38.123.220.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add check-gateway=ping comment=teams.microsoft.com disabled=no distance=1 dst-address=52.123.0.0/16 gateway=38.123.220.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 /ip service set ftp disabled=yes set telnet disabled=yes set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ipv6 firewall mangle add action=change-mss chain=forward comment="fragmentar paquetes mss" new-mss=1360 protocol=tcp tcp-flags=syn tcp-mss=1361-65535 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.94 /snmp set enabled=yes trap-version=3 /system clock set time-zone-name=America/Mexico_City /system identity set name=SW-UAEMITAS-2026 /system logging add action=GrafanaLoki prefix=172.20.4.94 topics=critical add action=GrafanaLoki prefix=172.20.4.94 topics=error add action=GrafanaLoki prefix=172.20.4.94 topics=info add action=GrafanaLoki prefix=172.20.4.94 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing resource add /user aaa set default-group=full use-radius=yes