# model: RB760iGS # serial-number: D4500D8C251D # firmware-type: mt7621L # current-firmware: 6.48 # installed-version: 6.48 # Flags: U - undoable, R - redoable, F - floating-undo # ACTION BY POLICY # U user marcos.noc added bruna.noc write # policy # U user marcos.noc removed bruna.noc write # policy # U ip service changed bruna.noc write # U user oxidized changed jeffrey.noc write # policy # U user scripts.noc removed bruna.noc write # policy # U user oxidized added bruna.noc write # policy # U user oxidized removed bruna.noc write # policy # U ip service changed bruna.noc write # U user marcos.noc added bruna.noc write # policy # U user vanderson.noc removed bruna.noc write # policy # U user yan.noc removed bruna.noc write # policy # U user jose.noc removed bruna.noc write # policy # U user joao removed bruna.noc write # policy # U user luiz.noc removed bruna.noc write # policy # # software id = TL4Q-CPTP # # model = RB760iGS # serial number = D4500D8C251D /interface ethernet set [ find default-name=ether1 ] comment=LINK set [ find default-name=ether2 ] comment="Rede Interna (Firewall)" set [ find default-name=ether3 ] comment=Notebook-Teste /interface pppoe-client add add-default-route=yes allow=pap,chap interface=ether1 name=cecoviassa password=cesa150322 use-peer-dns=yes user=cecoviassa /interface vlan add interface=ether1 name=VLAN226-ECVA vlan-id=226 /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip pool add name=dhcp_pool0 ranges=192.168.77.2-192.168.77.254 add name=dhcp_pool1 ranges=192.168.77.2-192.168.77.254 /ip dhcp-server add address-pool=dhcp_pool1 disabled=no interface=ether3 lease-time=1d10m name=dhcp1 /routing ospf instance set [ find default=yes ] router-id=10.0.8.194 /snmp community set [ find default=yes ] addresses=143.0.252.0/22,2804:2994::/32 name=SnmP_Se77E /system logging action add name=Rsyslog remote=143.0.252.53 src-address=143.0.253.104 target=remote /user group set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp" /ip neighbor discovery-settings set discover-interface-list=!dynamic /ip address add address=192.168.77.1/24 comment=REDE-INTERNA interface=ether3 network=192.168.77.0 add address=10.0.8.194/30 comment=link interface=VLAN226-ECVA network=10.0.8.192 add address=143.0.255.113/30 comment="Rede Publica Cliente" interface=ether2 network=143.0.255.112 /ip dhcp-server network add address=192.168.77.0/24 dns-server=143.0.252.10,143.0.252.20 gateway=192.168.77.1 /ip firewall nat add action=same chain=srcnat comment=REDE-INTERNA same-not-by-dst=no src-address=192.168.77.0/24 to-addresses=143.0.255.113 /ip route add distance=120 gateway=10.0.8.193 /ip service set telnet address=143.0.252.0/22 disabled=yes port=2377 set ftp disabled=yes set www disabled=yes set ssh address=205.164.78.0/23,143.0.252.0/22,143.0.252.58/32 port=2277 set api disabled=yes set winbox address=143.0.252.0/22,205.164.78.0/23 set api-ssl disabled=yes /routing ospf interface add interface=VLAN226-ECVA network-type=point-to-point /routing ospf network add area=backbone comment="link srv1" network=10.0.8.192/30 add area=backbone comment="rede publica ecva" network=143.0.255.112/30 /snmp set enabled=yes trap-version=2 /system clock set time-zone-name=America/Sao_Paulo /system identity set name=SETTE-ECO-INT-KM420 /system logging add action=Rsyslog topics=info add action=Rsyslog topics=warning add action=Rsyslog topics=error add action=Rsyslog topics=critical /tool romon set enabled=yes secrets=@a7net@#