#              model: CRS310-1G-5S-4S+
#      serial-number: HEG08Q180NC     
#      firmware-type: dx3230L         
#   current-firmware: 7.16.2          
#   installed-version: 7.18.2
# Flags: U - UNDOABLE
# Columns: ACTION, BY, POLICY, TIME
#   ACTION          BY      POLICY  TIME               
# U device changed  daniel  write   2025-09-29 19:25:59
# U device changed  daniel  write   2025-09-29 19:25:54
# U item changed    daniel  write   2025-09-28 22:38:55
# U item removed    daniel  write   2025-09-28 22:38:53
# 
# software id = 6HNY-48RZ
#
# model = CRS310-1G-5S-4S+
# serial number = HEG08Q180NC
/interface bridge
add admin-mac=48:A9:8A:CC:61:1B auto-mac=no name=bridge port-cost-mode=short vlan-filtering=yes
add name=bridge-egis port-cost-mode=short
/interface ethernet
set [ find default-name=ether1 ] l2mtu=9200 mtu=9000
set [ find default-name=sfp-sfpplus1 ] l2mtu=1596
set [ find default-name=sfp-sfpplus2 ] l2mtu=1596
set [ find default-name=sfp-sfpplus3 ] disabled=yes l2mtu=1596
set [ find default-name=sfp-sfpplus4 ] l2mtu=9200 mtu=9000
set [ find default-name=sfp1 ] comment=L27-T1 l2mtu=1596
set [ find default-name=sfp2 ] comment=L27-T2 l2mtu=1596
set [ find default-name=sfp3 ] comment=L27-T3 l2mtu=1596
set [ find default-name=sfp4 ] l2mtu=1596
set [ find default-name=sfp5 ] l2mtu=1596
/interface l2tp-client
add connect-to=138.217.187.210 ipsec-secret=H7YgjCUbr8Ny name=l2tp-out1 password=global use-ipsec=yes user=infininet
/interface eoip
add local-address=10.10.1.249 mac-address=02:00:A4:6F:0A:50 name=eoip-tunnel1 remote-address=10.10.1.1 tunnel-id=123
/interface vlan
add interface=bridge name=BR.VL5 vlan-id=5
add interface=bridge name=BR.VL26 vlan-id=26
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/port
set 0 name=serial0
/snmp community
set [ find default=yes ] name=CFNCOM
/system logging action
add name=Syslog remote=172.16.0.250 src-address=172.16.1.6 target=remote
/interface bridge port
add bridge=bridge interface=sfp-sfpplus4 internal-path-cost=10 path-cost=10
add bridge=bridge interface=sfp1 internal-path-cost=10 path-cost=10 pvid=3000
add bridge=bridge interface=sfp2 internal-path-cost=10 path-cost=10 pvid=11
add bridge=bridge interface=sfp3 internal-path-cost=10 path-cost=10 pvid=26
add bridge=bridge interface=sfp5 internal-path-cost=10 path-cost=10 pvid=3000
add bridge=bridge interface=sfp4 internal-path-cost=10 path-cost=10 pvid=163
add bridge=bridge-egis interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10
add bridge=bridge-egis interface=sfp-sfpplus2 internal-path-cost=10 path-cost=10
/ip firewall connection tracking
set udp-timeout=10s
/interface bridge vlan
add bridge=bridge tagged=bridge,sfp-sfpplus4 vlan-ids=5
add bridge=bridge tagged=bridge,sfp-sfpplus4 untagged=sfp2 vlan-ids=11
add bridge=bridge tagged=bridge,sfp-sfpplus4 untagged=sfp5,sfp1 vlan-ids=3000
add bridge=bridge tagged=bridge,sfp-sfpplus4 untagged=sfp4 vlan-ids=163
add bridge=bridge tagged=bridge,sfp-sfpplus4 untagged=sfp3 vlan-ids=26
/interface ovpn-server server
add mac-address=FE:5C:B5:9E:C2:DD name=ovpn-server1
/ip address
add address=172.16.1.6/16 interface=BR.VL5 network=172.16.0.0
add address=10.253.0.2/30 interface=eoip-tunnel1 network=10.253.0.0
/ip dns
set servers=1.1.1.1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=172.16.0.1 routing-table=main suppress-hw-offload=no
add disabled=no distance=1 dst-address=192.168.255.0/24 gateway=172.16.0.1 pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=192.168.1.0/24 gateway=172.16.0.1 pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no target-scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/radius
add address=172.16.0.1 require-message-auth=no secret=CFNCOM service=login src-address=172.16.1.6
/snmp
set contact=noc@corefibre.com.au enabled=yes location=Melbourne,Australia trap-community=*1 trap-version=2
/system clock
set time-zone-name=Australia/Sydney
/system identity
set name=SW4.530C.MEL.CFN.net.au
/system logging
add action=Syslog topics=info
add action=Syslog topics=warning
add action=Syslog topics=error
add action=Syslog topics=critical
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=172.16.0.1
/system routerboard settings
set enter-setup-on=delete-key
/system scheduler
add name=reboot-at-10pm on-event=reboot-schedule policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2024-12-27 start-time=22:00:00
/system script
add dont-require-permissions=no name=reboot-schedule owner=daniel policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/system reboot"
/tool romon
set enabled=yes id=48:A9:8A:CC:61:12 secrets=CFN
/user aaa
set use-radius=yes