# model: CRS310-1G-5S-4S+ # serial-number: HDF08D4TS1G # firmware-type: dx3230L # current-firmware: 7.16.2 # installed-version: 7.18.2 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U item changed daniel write 2025-09-28 18:11:45 # U item removed daniel write 2025-09-28 18:11:42 # # software id = 6VXM-R01E # # model = CRS310-1G-5S-4S+ # serial number = HDF08D4TS1G /interface bridge add admin-mac=18:FD:74:FD:2A:16 auto-mac=no ingress-filtering=no name=bridge port-cost-mode=short vlan-filtering=yes /interface ethernet set [ find default-name=ether1 ] l2mtu=9200 mtu=9000 set [ find default-name=sfp-sfpplus1 ] comment=SW0 l2mtu=9200 mtu=9000 set [ find default-name=sfp-sfpplus2 ] disabled=yes l2mtu=1596 set [ find default-name=sfp-sfpplus3 ] auto-negotiation=no comment=L14-T5 l2mtu=1596 speed=1G-baseX set [ find default-name=sfp-sfpplus4 ] comment="L12 Customer Tenancy HA-2" l2mtu=1596 set [ find default-name=sfp1 ] auto-negotiation=no comment=L5-T1 l2mtu=1596 set [ find default-name=sfp2 ] comment=L25-T1 l2mtu=1596 set [ find default-name=sfp3 ] comment="L14 Tenancy Handoff" l2mtu=1596 set [ find default-name=sfp4 ] comment="L12 Podium T2 Handoff" l2mtu=1596 set [ find default-name=sfp5 ] comment="L14 T4" l2mtu=1596 /interface vlan add interface=bridge name=BR.VL5 vlan-id=5 add interface=bridge name=BR.VL25 vlan-id=25 add interface=bridge name=BR.VL99 vlan-id=99 add interface=bridge name=BR.VL141 vlan-id=141 add interface=bridge name=BR.VL143 vlan-id=143 add interface=bridge name=BR.VL144 vlan-id=144 add interface=bridge name=BR.VL3000 vlan-id=3000 add interface=bridge name=BR.VL3001 vlan-id=3001 add interface=bridge name=BR.VL3002 vlan-id=3002 add interface=bridge name=VL26 vlan-id=26 /interface pppoe-client add add-default-route=yes interface=BR.VL3000 name=pppoe-out1 password=TGill240643 user=240643-974@nwb.truetelco.com.au /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip smb users set [ find default=yes ] disabled=yes /port set 0 name=serial0 /snmp community set [ find default=yes ] name=CFNCOM /system logging action add name=Syslog remote=172.16.0.250 src-address=172.16.1.4 target=remote /interface bridge port add bridge=bridge interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10 add bridge=bridge interface=sfp-sfpplus2 internal-path-cost=10 path-cost=10 pvid=26 add bridge=bridge interface=sfp-sfpplus3 internal-path-cost=10 path-cost=10 pvid=3000 add bridge=bridge interface=sfp2 internal-path-cost=10 path-cost=10 pvid=3000 add bridge=bridge interface=sfp3 internal-path-cost=10 path-cost=10 pvid=143 add bridge=bridge interface=sfp5 internal-path-cost=10 path-cost=10 pvid=144 add bridge=bridge interface=sfp1 internal-path-cost=10 path-cost=10 pvid=3000 add bridge=bridge interface=sfp4 internal-path-cost=10 path-cost=10 pvid=3000 add bridge=bridge interface=sfp-sfpplus4 internal-path-cost=10 path-cost=10 pvid=3000 /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=!dynamic /interface bridge vlan add bridge=bridge tagged=bridge,sfp-sfpplus1 untagged=sfp-sfpplus2 vlan-ids=26 add bridge=bridge tagged=bridge,sfp-sfpplus1 vlan-ids=99 add bridge=bridge tagged=bridge,sfp-sfpplus1 untagged=sfp2 vlan-ids=25 add bridge=bridge tagged=sfp-sfpplus1 untagged=sfp2 vlan-ids=3001 add bridge=bridge tagged=bridge,sfp-sfpplus1 untagged=sfp3 vlan-ids=143 add bridge=bridge tagged=bridge,sfp-sfpplus1 untagged=sfp5 vlan-ids=144 add bridge=bridge tagged=bridge,sfp-sfpplus1 vlan-ids=5 add bridge=bridge tagged=bridge,sfp-sfpplus1 untagged=sfp4,sfp-sfpplus4,sfp1,sfp-sfpplus3,sfp2 vlan-ids=3000 add bridge=bridge tagged=bridge,sfp-sfpplus1 untagged=sfp2 vlan-ids=3002 add bridge=bridge tagged=bridge,sfp-sfpplus1 untagged=sfp2 vlan-ids=141 /interface ovpn-server server add mac-address=FE:26:7A:3A:BA:A5 name=ovpn-server1 /ip address add address=192.168.99.251/24 interface=BR.VL99 network=192.168.99.0 add address=172.16.1.4/16 interface=BR.VL5 network=172.16.0.0 /ip dns set servers=1.1.1.1,8.8.4.4 /ip hotspot profile set [ find default=yes ] html-directory=hotspot /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=172.16.0.1 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=192.168.255.0/24 gateway=172.16.0.1 pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no distance=1 dst-address=192.168.1.0/24 gateway=172.16.0.1 pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 /ip service set telnet disabled=yes set ftp disabled=yes set www disabled=yes set api disabled=yes set api-ssl disabled=yes /ip smb shares set [ find default=yes ] directory=/flash/pub /radius add address=172.16.0.1 require-message-auth=no secret=CFNCOM service=login src-address=172.16.1.4 /snmp set contact=noc@corefibre.com.au enabled=yes location=Melbourne,Australia trap-community=*1 trap-version=2 /system clock set time-zone-name=Australia/Sydney /system identity set name=SW2.530C.MEL.CFN.net.au /system logging add action=Syslog topics=info add action=Syslog topics=warning add action=Syslog topics=error add action=Syslog topics=critical /system note set show-at-login=no /system ntp client set enabled=yes /system ntp client servers add address=172.16.0.1 /system routerboard settings set enter-setup-on=delete-key /system scheduler add name=reboot-at-10pm on-event=reboot-schedule policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2024-12-27 start-time=22:00:00 /system script add dont-require-permissions=no name=reboot-schedule owner=daniel policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/system reboot" /tool romon set enabled=yes id=18:FD:74:FD:2A:10 secrets=CFN /user aaa set use-radius=yes