#              model: CRS310-1G-5S-4S+
#      serial-number: HEG08PTB3WZ     
#      firmware-type: dx3230L         
#   current-firmware: 7.16.2          
#   installed-version: 7.18.2
# Flags: U - UNDOABLE
# Columns: ACTION, BY, POLICY, TIME
#   ACTION                 BY      POLICY  TIME               
# U changed snmp settings  daniel  write   2025-09-28 23:26:28
# U item changed           daniel  write   2025-09-28 23:26:26
# U item removed           daniel  write   2025-09-28 23:26:24
# 
# software id = 1E8V-5XPC
#
# model = CRS310-1G-5S-4S+
# serial number = HEG08PTB3WZ
/interface bridge
add admin-mac=48:A9:8A:CC:61:E7 auto-mac=no name=bridge port-cost-mode=short protocol-mode=none vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] l2mtu=9200 mtu=9000
set [ find default-name=sfp-sfpplus1 ] disabled=yes l2mtu=1596
set [ find default-name=sfp-sfpplus2 ] l2mtu=1596
set [ find default-name=sfp-sfpplus3 ] l2mtu=1596
set [ find default-name=sfp-sfpplus4 ] l2mtu=9200 mtu=9000
set [ find default-name=sfp1 ] comment="Podium L14-T2" l2mtu=1596
set [ find default-name=sfp2 ] comment=L14-T1 disabled=yes l2mtu=1596
set [ find default-name=sfp3 ] comment=L17-T3 disabled=yes l2mtu=1596
set [ find default-name=sfp4 ] comment=L23-T1 l2mtu=1596
set [ find default-name=sfp5 ] auto-negotiation=no comment=L26-T1-Link2 l2mtu=1596
/interface vlan
add interface=bridge name=BR.VL5 vlan-id=5
add interface=bridge name=BR.VL264 vlan-id=264
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/port
set 0 name=serial0
/snmp community
set [ find default=yes ] name=CFNCOM
/system logging action
add name=Syslog remote=172.16.0.250 src-address=172.16.1.5 target=remote
/interface bridge port
add bridge=bridge interface=sfp-sfpplus4 internal-path-cost=10 path-cost=10
add bridge=bridge interface=sfp1 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=sfp2 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=sfp3 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=sfp4 internal-path-cost=10 path-cost=10 pvid=3000
add bridge=bridge interface=sfp5 internal-path-cost=10 path-cost=10 pvid=3000
add bridge=bridge interface=sfp-sfpplus3 pvid=141
add bridge=bridge interface=sfp-sfpplus2 pvid=264
/ip firewall connection tracking
set udp-timeout=10s
/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-sfpplus4 untagged=sfp4,sfp5 vlan-ids=3000
add bridge=bridge tagged=bridge,sfp-sfpplus4 vlan-ids=5
add bridge=bridge tagged=bridge,sfp-sfpplus4 untagged=sfp1,sfp2,sfp3 vlan-ids=11
add bridge=bridge tagged=bridge,sfp-sfpplus4 untagged=sfp-sfpplus3 vlan-ids=141
add bridge=bridge tagged=bridge,sfp-sfpplus4 untagged=sfp-sfpplus2 vlan-ids=264
/interface ovpn-server server
add mac-address=FE:6B:4A:BD:05:DE name=ovpn-server1
/ip address
add address=172.16.1.5/16 interface=BR.VL5 network=172.16.0.0
/ip dns
set servers=1.1.1.1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=172.16.0.1 pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=192.168.255.0/24 gateway=172.16.0.1 pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=192.168.1.0/24 gateway=172.16.0.1 pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/radius
add address=172.16.0.1 require-message-auth=no secret=CFNCOM service=login src-address=172.16.1.5
/snmp
set contact=noc@corefibre.com.au enabled=yes location=Melbourne,Australia trap-version=2
/system clock
set time-zone-name=Australia/Sydney
/system identity
set name=SW3.530C.MEL.CFN.net.au
/system logging
add action=Syslog topics=info
add action=Syslog topics=warning
add action=Syslog topics=error
add action=Syslog topics=critical
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=172.16.0.1
/system routerboard settings
set enter-setup-on=delete-key
/system scheduler
add name=reboot-at-10pm on-event=reboot-schedule policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2024-12-27 start-time=22:00:00
/system script
add dont-require-permissions=no name=reboot-schedule owner=daniel policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/system reboot"
/tool romon
set enabled=yes id=48:A9:8A:CC:61:DE secrets=CFN
/user aaa
set use-radius=yes