# version: 7.20.1 (stable) # factory-software: 6.44 # total-memory: 512.0MiB # cpu: ARM # cpu-count: 1 # total-hdd-space: 16.0MiB # architecture-name: arm # board-name: CRS328-24P-4S+ # platform: MikroTik # installed-version: 7.20.1 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U device changed MEXICARRIER write 2026-08-18 18:51:38 # U device changed MEXICARRIER write 2026-08-16 14:10:13 # U device changed MEXICARRIER write 2026-08-16 14:09:13 # U device changed MEXICARRIER write 2026-08-16 13:09:02 # U device changed MEXICARRIER write 2026-08-16 11:10:32 # # software id = MEM8-S7P6 # # model = CRS328-24P-4S+ # serial number = C7850B4B7ACB /interface bridge add name=BRIDGE-AS273304 port-cost-mode=short add name=BRIDGE-COGENT /interface ethernet set [ find default-name=ether1 ] poe-priority=1 set [ find default-name=ether2 ] name="ether2-RT RESINDENCIALES" poe-priority=2 set [ find default-name=ether3 ] poe-priority=3 set [ find default-name=ether5 ] disabled=yes name="ether5-TorreAcad AF60" poe-out=forced-on poe-voltage=low set [ find default-name=ether6 ] l2mtu=4000 mtu=4000 name=ether6-SW-BRAYAN poe-voltage=high set [ find default-name=ether7 ] disabled=yes name=ether7-Teresona-AF60 poe-out=forced-on set [ find default-name=ether8 ] name=ether8-PoE-SW-FO3 poe-out=forced-on poe-voltage=high set [ find default-name=ether9 ] name="ether9-NVR OFICINA" poe-out=off set [ find default-name=ether10 ] name=ether10-SW-DAIRA poe-voltage=low set [ find default-name=ether11 ] advertise="10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full,2.5G-baseT,5G-baseT,10G-baseT" disabled=yes poe-priority=8 set [ find default-name=ether12 ] name="ether12-OLT UBIQUITI" set [ find default-name=ether14 ] mtu=1530 name=ether14-SW-COMPU2 set [ find default-name=ether15 ] name="ether15-SW CAPACITACION" set [ find default-name=ether17 ] auto-negotiation=no comment=48V-172.20.1.199 name="ether17 - CAMBIUM ACAHUALCO" poe-out=forced-on poe-voltage=high set [ find default-name=ether19 ] mtu=1530 name="ether19-CAMARA TORRE OF" set [ find default-name=ether20 ] name="ether20 - ARISTA OFICINA" set [ find default-name=ether22 ] name="ether22-PCMari(10.8.2.254)" set [ find default-name=ether23 ] name=ether23-RT3011-OFICINA set [ find default-name=ether24 ] name="ether24 - NVR JABALI" poe-out=off set [ find default-name=sfp-sfpplus2 ] auto-negotiation=no name="sfp-sfpplus2 - AS273304" sfp-rate-select=low speed=1G-baseX set [ find default-name=sfp-sfpplus3 ] auto-negotiation=no name=sfp-sfpplus3-INTERCONEXION-SW-FO-OFICINA /interface lte apn set [ find default=yes ] ip-type=ipv4 use-network-apn=no /ip smb users set [ find default=yes ] disabled=yes /port set 0 name=serial0 /snmp community set [ find default=yes ] name=SNMP-SOMNET add addresses=10.8.0.0/16 authentication-password="AR4(n!9a" authentication-protocol=SHA1 disabled=yes encryption-password="AR4(n!9a" encryption-protocol=AES name=somnet security=private /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.1.7 target=remote /interface bridge port add bridge=BRIDGE-AS273304 ingress-filtering=no interface=ether6-SW-BRAYAN internal-path-cost=10 path-cost=10 add bridge=BRIDGE-AS273304 ingress-filtering=no interface="ether9-NVR OFICINA" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-AS273304 ingress-filtering=no interface=ether10-SW-DAIRA internal-path-cost=10 path-cost=10 add bridge=BRIDGE-AS273304 ingress-filtering=no interface="ether12-OLT UBIQUITI" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-AS273304 ingress-filtering=no interface="ether19-CAMARA TORRE OF" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-AS273304 ingress-filtering=no interface="ether24 - NVR JABALI" internal-path-cost=10 path-cost=10 trusted=yes add bridge=BRIDGE-AS273304 ingress-filtering=no interface="sfp-sfpplus2 - AS273304" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-COGENT ingress-filtering=no interface=sfp-sfpplus3-INTERCONEXION-SW-FO-OFICINA internal-path-cost=10 path-cost=10 add bridge=BRIDGE-COGENT ingress-filtering=no interface=ether23-RT3011-OFICINA internal-path-cost=10 path-cost=10 trusted=yes add bridge=BRIDGE-AS273304 ingress-filtering=no interface=ether14-SW-COMPU2 internal-path-cost=10 path-cost=10 add bridge=BRIDGE-AS273304 ingress-filtering=no interface="ether17 - CAMBIUM ACAHUALCO" internal-path-cost=10 path-cost=10 add bridge=BRIDGE-COGENT interface="ether2-RT RESINDENCIALES" add bridge=BRIDGE-COGENT interface="ether22-PCMari(10.8.2.254)" add bridge=BRIDGE-AS273304 interface="ether20 - ARISTA OFICINA" add bridge=BRIDGE-AS273304 disabled=yes interface=ether7-Teresona-AF60 add bridge=BRIDGE-AS273304 interface="ether15-SW CAPACITACION" /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=all /ip settings set max-neighbor-entries=8192 /ipv6 settings set disable-ipv6=yes /interface ovpn-server server add auth=sha1,md5 mac-address=FE:FB:9C:50:BC:D7 name=ovpn-server1 /ip address add address=172.20.1.7/16 interface=BRIDGE-AS273304 network=172.20.0.0 /ip dns set allow-remote-requests=yes servers=1.1.1.2,1.0.0.2 /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=172.20.1.1 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /ip smb shares set [ find default=yes ] directory=/flash/pub /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.1.7 /routing bfd configuration add disabled=no /snmp set contact=SOMNET enabled=yes location="OFICINA SOMNET TOLUCA DE LERDO" trap-generators="" trap-version=2 /system clock set time-zone-name=America/Mexico_City /system identity set name=SW_WispOficina /system logging add action=GrafanaLoki prefix=172.20.1.7 topics=info add action=GrafanaLoki prefix=172.20.1.7 topics=warning add action=GrafanaLoki prefix=172.20.1.7 topics=critical add action=GrafanaLoki prefix=172.20.17 topics=error /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=162.159.200.1 /tool e-mail set password="kqkt qttv ivbw npap" port=587 server=smtp.gmail.com tls=starttls user=cuentafallas67@gmail.com /tool graphing interface add /tool graphing resource add /tool netwatch add disabled=no down-script="/log warning \"ENLACE CAIDO: NO RESPONDE LA ST\";\r\n" host=172.20.4.218 http-codes="" interval=30s name="CENTRO CULTURAL " test-script="" timeout=100ms type=simple up-script="/log info \"LA ESTACION EST\C1 EN LINEA\";\r\n" /tool sniffer set file-name=WISPSW.cap filter-direction=rx filter-interface="ether12-OLT UBIQUITI" memory-limit=1000KiB only-headers=yes /tool traffic-monitor add disabled=yes interface=ether1 name=tmon1 add disabled=yes interface="ether12-OLT UBIQUITI" name=tmon2 on-event="/system script run low-traffic-alert" threshold=100000000 traffic=received trigger=always /user aaa set default-group=full use-radius=yes