#              model: CRS328-24P-4S+
#      serial-number: HD30867KST6   
#      firmware-type: dx3230L       
#   current-firmware: 7.18.2        
#   installed-version: 7.18.2
# 
# software id = X6B5-0FZV
#
# model = CRS328-24P-4S+
# serial number = HD30867KST6
/interface bridge
add ingress-filtering=no name=bridge-local port-cost-mode=short vlan-filtering=yes
/interface ethernet
set [ find default-name=ether8 ] comment="B2 AP"
set [ find default-name=ether24 ] comment=Backhaul
set [ find default-name=sfp-sfpplus2 ] comment="Router Uplink"
/interface vlan
add interface=bridge-local name=bridge-local.90 vlan-id=90
add interface=bridge-local name=bridge-local.91 vlan-id=91
add interface=bridge-local name=bridge-local.99 vlan-id=99
add interface=bridge-local name=bridge-local.101 vlan-id=101
add interface=bridge-local name=bridge-local.3830 vlan-id=3830
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/port
set 0 name=serial0
/routing bgp template
set default disabled=no output.network=bgp-networks
/routing ospf instance
add disabled=no name=default-v2
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
/snmp community
add addresses=::/0 name=CFNCOM
/interface bridge port
add bridge=bridge-local ingress-filtering=no interface=ether1 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether2 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether3 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether4 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether5 internal-path-cost=10 path-cost=10 pvid=92
add bridge=bridge-local ingress-filtering=no interface=ether6 internal-path-cost=10 path-cost=10 pvid=92
add bridge=bridge-local ingress-filtering=no interface=ether7 internal-path-cost=10 path-cost=10 pvid=92
add bridge=bridge-local ingress-filtering=no interface=ether8 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether9 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether10 internal-path-cost=10 path-cost=10 pvid=92
add bridge=bridge-local ingress-filtering=no interface=ether11 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether12 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether13 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether14 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether15 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether16 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether17 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether18 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether19 internal-path-cost=10 path-cost=10 pvid=91
add bridge=bridge-local ingress-filtering=no interface=ether20 internal-path-cost=10 path-cost=10 pvid=91
add bridge=bridge-local ingress-filtering=no interface=ether21 internal-path-cost=10 path-cost=10 pvid=90
add bridge=bridge-local ingress-filtering=no interface=ether22 internal-path-cost=10 path-cost=10 pvid=90
add bridge=bridge-local ingress-filtering=no interface=ether23 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=ether24 internal-path-cost=10 path-cost=10 pvid=3830
add bridge=bridge-local ingress-filtering=no interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=sfp-sfpplus2 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=sfp-sfpplus3 internal-path-cost=10 path-cost=10
add bridge=bridge-local ingress-filtering=no interface=sfp-sfpplus4 internal-path-cost=10 path-cost=10
/ip firewall connection tracking
set udp-timeout=10s
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes
/interface bridge vlan
add bridge=bridge-local tagged=bridge-local,sfp-sfpplus2 untagged=ether24 vlan-ids=3830
add bridge=bridge-local tagged=bridge-local,sfp-sfpplus2,ether1,ether2,ether3,ether4 vlan-ids=99
add bridge=bridge-local tagged=bridge-local,sfp-sfpplus2 untagged=ether22,ether21 vlan-ids=90
add bridge=bridge-local tagged=sfp-sfpplus2 untagged=ether19,ether20 vlan-ids=91
add bridge=bridge-local tagged=sfp-sfpplus2 untagged=ether5,ether6,ether7,ether10 vlan-ids=92
add bridge=bridge-local tagged=bridge-local,sfp-sfpplus2,ether24,ether1,ether2,ether3,ether4 vlan-ids=100,101
/interface ovpn-server server
add auth=sha1,md5 mac-address=FE:F2:41:ED:2C:CC name=ovpn-server1
/ip dhcp-client
add interface=bridge-local.99
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/routing bfd configuration
add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5
/snmp
set contact=noc@corefibre.com.au enabled=yes location="Moonee Ponds, VIC, Australia" trap-community=CFNCOM trap-version=2
/system clock
set time-zone-name=Australia/Melbourne
/system identity
set name=95BuckleySt-SW.CFN.VIC.intervisp.net
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=au.pool.ntp.org