#              model: CRS326-24G-2S+
#      serial-number: F5F80F7F48EF
#      firmware-type: dx3230L
#   current-firmware: 6.47.10
#   installed-version: 6.48.6
# Flags: U - undoable, R - redoable, F - floating-undo 
#   ACTION                                   BY               POLICY             
# U user daniel added                        cfnadmin         write              
#                                                             policy             
# U user oxidized added                      cfnadmin         write              
#                                                             policy             
# U user automation@valve added              valvenetworks    write              
#                                                             policy             
# U ip service changed                       valvenetworks    write              
# U ip service changed                       valvenetworks    write              
# U ip service changed                       valvenetworks    write              
# U ip service changed                       valvenetworks    write              
# U ip service changed                       valvenetworks    write              
# U ip service changed                       valvenetworks    write              
# U device changed                           cfnadmin         write              
# U device changed                           cfnadmin         write              
# U device changed                           cfnadmin         write              
# U device changed                           cfnadmin         write              
# U item changed                             valvenetworks    write              
# U item changed                             valvenetworks    write              
# U device changed                           valvenetworks    write              
# U RoMON configuration changed              valvenetworks    write              
# 
# software id = 89QP-04AP
#
# model = CRS326-24G-2S+
# serial number = F5F80F7F48EF
/interface bridge
add name=bridge-lan vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment="Client Access port 1"
set [ find default-name=ether2 ] comment="Client Access port 2"
set [ find default-name=ether3 ] comment="Client Access port 3"
set [ find default-name=ether4 ] comment="Client Access port 4"
set [ find default-name=ether5 ] comment="Client Access port 5"
set [ find default-name=ether6 ] comment="Client Access port 6"
set [ find default-name=ether7 ] comment="Client Access port 7"
set [ find default-name=ether8 ] comment="Client Access port 8"
set [ find default-name=ether17 ] comment="router uplink"
set [ find default-name=sfp-sfpplus1 ] comment="Uplink to Core Router"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/snmp community
add addresses=::/0 name=CFNCOM
/interface bridge port
add bridge=bridge-lan ingress-filtering=yes interface=ether1 pvid=100
add bridge=bridge-lan ingress-filtering=yes interface=ether2 pvid=100
add bridge=bridge-lan ingress-filtering=yes interface=ether3 pvid=100
add bridge=bridge-lan ingress-filtering=yes interface=ether4 pvid=100
add bridge=bridge-lan ingress-filtering=yes interface=ether5 pvid=100
add bridge=bridge-lan ingress-filtering=yes interface=ether6 pvid=100
add bridge=bridge-lan ingress-filtering=yes interface=ether7 pvid=100
add bridge=bridge-lan ingress-filtering=yes interface=ether23 pvid=99
add bridge=bridge-lan interface=sfp-sfpplus1
add bridge=bridge-lan ingress-filtering=yes interface=ether8 pvid=100
add bridge=bridge-lan ingress-filtering=yes interface=ether22 pvid=101
/interface bridge vlan
add bridge=bridge-lan comment="Mgnt Vlan" tagged=sfp-sfpplus1 untagged=ether23 vlan-ids=99
add bridge=bridge-lan comment="PPPoE Vlan" tagged=sfp-sfpplus1 untagged=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8 vlan-ids=100
add bridge=bridge-lan comment="CCTV Vlan" tagged=sfp-sfpplus1 untagged=ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether22 vlan-ids=101
/ip dhcp-client
add interface=sfp-sfpplus1
add disabled=no interface=bridge-lan
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/snmp
set contact=noc@corefibre.com.au enabled=yes location=Melbourne,Victoria,Australia trap-community=CFNCOM trap-version=2
/system clock
set time-zone-name=Australia/Sydney
/system identity
set name=401StKildaRd-SW1.CFN.VIC.intervisp.net
/system routerboard settings
set boot-os=router-os
/tool romon
set enabled=yes