# version: 6.49.17 (stable) # factory-software: 6.47.4 # total-memory: 512.0MiB # cpu: ARMv7 # cpu-count: 1 # total-hdd-space: 16.0MiB # architecture-name: arm # board-name: CRS328-24P-4S+ # platform: MikroTik # installed-version: 6.49.17 # Flags: U - undoable, R - redoable, F - floating-undo # ACTION BY POLICY # U device changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U item changed MEXICARRIER write # U item changed MEXICARRIER write # U item changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U item changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U item changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U item changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port added MEXICARRIER write # U bridge port changed MEXICARRIER write # U item changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U item added MEXICARRIER write # U bridge port changed MEXICARRIER write # U device changed MEXICARRIER write # U address removed MEXICARRIER write # U address added MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U RADIUS client changed MEXICARRIER write # U RADIUS client added MEXICARRIER write # U RADIUS client removed MEXICARRIER write # U bridge port changed MEXICARRIER write # U item removed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port changed MEXICARRIER write # U item added MEXICARRIER write # U device changed MEXICARRIER write # U address removed MEXICARRIER write # U log rule changed MEXICARRIER write # U log rule changed MEXICARRIER write # U log rule changed MEXICARRIER write # U log rule changed MEXICARRIER write # U log rule changed MEXICARRIER write # U log rule changed MEXICARRIER write # U item changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port added MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port added MEXICARRIER write # U device changed MEXICARRIER write # U bridge port added MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U device changed MEXICARRIER write # U bridge port removed MEXICARRIER write # U bridge port removed MEXICARRIER write # # software id = 61WA-VFX8 # # model = CRS328-24P-4S+ # serial number = HEX09D0K4Q6 /interface bridge add name=BR-LAN vlan-filtering=yes /interface ethernet set [ find default-name=ether2 ] poe-out=off set [ find default-name=ether3 ] comment="FORCE4600 IP:172.20.4.120 48V" name="ether3-TEMOAYA WENCESLAO" set [ find default-name=ether4 ] comment="IP: 172.20.3.142" disabled=yes name="ether4-PORVENIR ALTERNA" poe-out=forced-on poe-priority=8 poe-voltage=low set [ find default-name=ether5 ] auto-negotiation=no comment="FORCE4625 IP:172.20.3.122 48V" name="ether5-ROBERTO DURAN_PUNTO4" poe-out=forced-on poe-voltage=high set [ find default-name=ether7 ] poe-out=off poe-priority=1 poe-voltage=low set [ find default-name=ether8 ] comment="IP: 172.20.4.146" name="ether8-WAVE WENCESLAO" poe-out=forced-on poe-priority=2 poe-voltage=high set [ find default-name=ether9 ] disabled=yes name="ether9-REDUNDANCIA PASEOS_(EQUIPO MIMOSA)" poe-priority=7 poe-voltage=high set [ find default-name=ether10 ] name=ether10-MGMT-ARISTA set [ find default-name=ether11 ] poe-out=forced-on poe-voltage=high set [ find default-name=ether12 ] comment="WAVE IP:172.20.4.154 48V" name="ether12-SAN PABLO MAYRA BERENICE" poe-out=forced-on poe-voltage=high set [ find default-name=ether13 ] poe-out=forced-on poe-voltage=high set [ find default-name=ether14 ] comment="IP: 172.20.2.126" name="ether14-PUNTO3 ROBERTO DURAN CAMBIUM" poe-out=forced-on poe-voltage=high speed=100Mbps set [ find default-name=ether15 ] comment=AP-C5X-24V-172.20.1.66 full-duplex=no name=ether15-TEMOAYA-VICTOR speed=100Mbps set [ find default-name=ether16 ] comment="IP: 172.20.4.177" name="ether16 - BERNARDO CAMBIUM" poe-out=forced-on poe-voltage=high set [ find default-name=ether18 ] name=ether18-MODEM-TPLINK set [ find default-name=ether20 ] poe-out=forced-on poe-voltage=low speed=100Mbps set [ find default-name=ether21 ] poe-out=forced-on poe-voltage=low set [ find default-name=ether22 ] comment="IP: 172.20.4.157" name=ether22-YEBUCIVI poe-out=forced-on poe-voltage=high set [ find default-name=ether23 ] comment="IP: 172.17.13.2" loop-protect=on name="ether23-Sectorial Palmillas" poe-priority=3 poe-voltage=low set [ find default-name=ether24 ] poe-out=forced-on poe-voltage=high set [ find default-name=sfp-sfpplus1 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,10000M-full name="sfp-sfpplus1 - INTERCONEXI\D3N SW FO" speed=10Gbps set [ find default-name=sfp-sfpplus2 ] name="sfp-sfpplus2-BIXTEL STA JUANA" set [ find default-name=sfp-sfpplus3 ] name="sfp-sfpplus3 - ARISTA " set [ find default-name=sfp-sfpplus4 ] name="sfp-sfpplus4 - PASEOS DE SAN MARTIN" /interface ethernet switch port set 15 egress-rate=210.0Mbps ingress-rate=220.0Mbps /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /snmp community set [ find default=yes ] name=SNMP-SOMNET /system logging action add bsd-syslog=yes name=GrafanaLoki remote=172.20.0.254 remote-port=1514 src-address=172.20.1.5 target=remote /interface bridge port add bridge=BR-LAN interface="ether3-TEMOAYA WENCESLAO" add bridge=BR-LAN disabled=yes interface="ether4-PORVENIR ALTERNA" add bridge=BR-LAN interface="ether5-ROBERTO DURAN_PUNTO4" add bridge=BR-LAN disabled=yes interface="ether8-WAVE WENCESLAO" add bridge=BR-LAN disabled=yes interface="ether9-REDUNDANCIA PASEOS_(EQUIPO MIMOSA)" add bridge=BR-LAN interface="ether12-SAN PABLO MAYRA BERENICE" add bridge=BR-LAN interface="ether14-PUNTO3 ROBERTO DURAN CAMBIUM" add bridge=BR-LAN interface=ether15-TEMOAYA-VICTOR add bridge=BR-LAN interface="ether16 - BERNARDO CAMBIUM" add bridge=BR-LAN interface=ether22-YEBUCIVI add bridge=BR-LAN ingress-filtering=yes interface="ether23-Sectorial Palmillas" pvid=13 add bridge=BR-LAN interface="sfp-sfpplus4 - PASEOS DE SAN MARTIN" add bridge=BR-LAN interface="sfp-sfpplus2-BIXTEL STA JUANA" add bridge=BR-LAN interface=ether18-MODEM-TPLINK multicast-router=disabled add bridge=BR-LAN interface=ether10-MGMT-ARISTA add bridge=BR-LAN ingress-filtering=yes interface="sfp-sfpplus3 - ARISTA " add bridge=BR-LAN interface="sfp-sfpplus1 - INTERCONEXI\D3N SW FO" /ip neighbor discovery-settings set discover-interface-list=all /ip settings set max-neighbor-entries=9000 /interface bridge vlan add bridge=BR-LAN tagged="sfp-sfpplus3 - ARISTA " untagged="ether23-Sectorial Palmillas" vlan-ids=13 /ip address add address=172.20.1.5/16 interface=BR-LAN network=172.20.0.0 /ip dns set servers=1.1.1.2,1.0.0.2 /ip route add distance=1 gateway=172.20.1.1 /ip service set telnet disabled=yes set ftp disabled=yes set www port=8080 set ssh port=46825 set api disabled=yes set api-ssl disabled=yes /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login /snmp set contact=SOMNET enabled=yes location="SAN MARTIN TOLTEPEC" trap-interfaces=all trap-version=2 /system clock set time-zone-name=America/Mexico_City /system identity set name=SW-WISP_SAN-MARTIN /system logging add action=GrafanaLoki prefix=172.20.1.5 topics=critical add action=GrafanaLoki prefix=172.20.1.5 topics=error add action=GrafanaLoki prefix=172.20.1.5 topics=info add action=GrafanaLoki prefix=172.20.1.5 topics=warning /system package update set channel=long-term /system routerboard settings set boot-os=router-os /system scheduler add comment="Verifica velocidad de ethernet" interval=10m name=Check-Ethernet-Speed on-event="/system script run Verificar-Ethernet" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=apr/15/2025 start-time=10:08:55 add comment="Detecta cada de enlace " interval=10m name=Detectar-Caida-Puerto on-event="/system script run Verificar-Caida-Puerto" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=apr/15/2025 start-time=12:23:26 /system script add dont-require-permissions=no name=Verificar-Ethernet owner=SOMNET4G policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":local interface \"ether6-ROBERTO DURAN_PUNTO4\"\r\n:local speed [/interface ethernet get \$interface speed]\r\n\r\n# Verifica si est\E1 devolviendo algo\r\n:if ([:len \$speed] = 0) do={\r\n :log warning \"No se pudo obtener la velocidad de la interfaz \$interface\"\r\n :return\r\n}\r\n\r\n\r\n# Variables globales\r\n:global ultimaVelocidad\r\n\r\n# Inicializar si es la primera vez\r\n:if ([:typeof \$ultimaVelocidad] = \"nothing\") do={\r\n :set ultimaVelocidad \$speed\r\n :log info \"DEBUG: Inicializando velocidad global\"\r\n :return\r\n}\r\n\r\n# Comparar velocidad anterior vs actual\r\n:if ((\$ultimaVelocidad = \"1Gbps\") and (\$speed = \"100Mbps\")) do={\r\n /tool e-mail send to=\"soporte@somnet.com.mx\" subject=(\"ALERTA: \$interface baj\F3 a \$speed\") body=(\"La interfaz \$interface ha bajado su\_velocidad a \$speed.\")\r\n :log warning (\"[ALERTA] \$interface baj\F3 de velocidad a \$speed\")\r\n}\r\n\r\n# Actualizar el valor global\r\n:set ultimaVelocidad \$speed" add dont-require-permissions=no name=Verificar-Caida-Puerto owner=SOMNET4G policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":local interface \"ether6-ROBERTO DURAN_PUNTO4\"\r\n:local estadoActual\r\n\r\n# Obtenemos si est\E1 corriendo (enlace activo)\r\n:if ([/interface ethernet get \$interface running]) do={\r\n :set estadoActual \"up\"\r\n} else={\r\n :set estadoActual \"down\"\r\n}\r\n\r\n\r\n# Estado anterior\r\n:global estadoAnterior\r\n:if ([:typeof \$estadoAnterior] = \"nothing\") do={\r\n :set estadoAnterior \$estadoActual\r\n}\r\n\r\n# Detecta cambio de up \? down\r\n:if ((\$estadoAnterior = \"up\") and (\$estadoActual = \"down\")) do={\r\n /tool e-mail send to=\"soporte@somnet.com.mx\" subject=(\"ALERTA: \"\_. \$interface . \" cay\F3\") body=(\"El puerto \" . \$interface . \" ha perdido el enlace.\")\r\n :log warning (\"[ALERTA] \" . \$interface . \" ha perdido el enlace.\")\r\n}\r\n\r\n# Actualiza estado global\r\n:set estadoAnterior \$estadoActual" /tool e-mail set address=smtp.gmail.com password="jwfb lowb bezl ncro" port=587 start-tls=yes user=cuentafallas67@gmail.com /tool graphing interface add /tool graphing resource add /tool sniffer set file-name=SNMARTIN.cap filter-direction=rx filter-interface="ether23-Sectorial Palmillas" memory-limit=1000KiB only-headers=yes /user aaa set default-group=full use-radius=yes