# model: 850Gx2 # serial-number: 4BF104444A12 # firmware-type: p1023 # current-firmware: 6.47.9 # installed-version: 6.48.6 # Flags: U - undoable, R - redoable, F - floating-undo # ACTION BY POLICY # U user nms added ol write # policy # U user admin removed ol write # policy # U item added ol write # U nat rule removed fed write # U nat rule removed fed write # U nat rule removed fed write # U nat rule removed fed write # U nat rule removed fed write # U nat rule removed fed write # U route changed write # U route changed write # U route changed write # U route changed write # U route changed write # U route changed write # U route changed write # U route changed write # # software id = YJWM-H9WB # # model = 850Gx2 # serial number = 4BF104444A12 /interface bridge add name=bridge-vlan300 add fast-forward=no name=bridge1 add name=null /interface ethernet set [ find default-name=ether1 ] comment=ISP_Unioncom set [ find default-name=ether2 ] comment="to CCR1009 rezerv" mac-address=4C:5E:0C:6B:9F:22 speed=100Mbps set [ find default-name=ether3 ] mac-address=4C:5E:0C:6B:9F:23 speed=100Mbps set [ find default-name=ether4 ] comment=sw-6 mac-address=4C:5E:0C:6B:9F:24 speed=100Mbps set [ find default-name=ether5 ] comment=WiFi_switchRB260GSP mac-address=4C:5E:0C:6B:9F:25 speed=100Mbps /interface eoip add !keepalive local-address=93.170.115.226 mac-address=02:59:9A:1F:11:B2 mtu=1500 name=eoip-pisochne remote-address=93.170.114.26 tunnel-id=4 /interface vlan add interface=ether4 name=vlan200-cust vlan-id=200 add interface=eoip-pisochne name=vlan300-mgnt-eoip vlan-id=300 add interface=ether4 name=vlan300-mgnt-ether3 vlan-id=300 add interface=ether4 name=vlan1234-ISP-UniCom vlan-id=1234 /interface list add name=winbox /ip pool add name=default-dhcp ranges=192.168.30.10-192.168.30.20 add name=pool-pppoe ranges=172.17.0.32-172.17.0.100 add name=PPPOE-STATIC ranges=95.47.164.49-95.47.164.55 add name=pool-dhcp ranges=192.168.30.10-192.168.30.250 add name=pool-dhcp-vid200 ranges=192.168.200.10-192.168.200.254 /ip dhcp-server add address-pool=pool-dhcp-vid200 interface=vlan200-cust lease-script=":local queueName \"queue \$leaseActMAC\";\n:if (\$leaseBound = \"1\") do={\n /queue simple add name=\$queueName parent=queue target=(\$leaseActIP\_. \"/32\") max-limit=30M/30M comment=[/ip dhcp-server lease get [find where active-mac-address=\$leaseActMAC && active-address=\$leaseActIP] host-name];\n} else={\n /queue simple remove \$queueName\n}" lease-time=1h name=dhcp-vid200 /port set 0 name=serial0 set 1 name=serial1 /ppp profile set *0 change-tcp-mss=default add dns-server=208.67.220.220,8.8.8.8 local-address=172.16.0.0 name=10M/10M only-one=yes rate-limit=15M/15M add dns-server=208.67.220.220,8.8.8.8 local-address=172.16.0.0 name=30M/30M only-one=yes rate-limit=30M/30M add dns-server=95.47.164.211,208.67.220.220 name=ugv only-one=yes rate-limit=20M/20M add dns-server=95.47.164.212,208.67.220.220 local-address=95.47.164.48 name=PPPOE-STATIC only-one=yes remote-address=PPPOE-STATIC add change-tcp-mss=yes dns-server=95.47.164.212,208.67.220.220 local-address=93.170.115.226 name=profile-PPPoE only-one=yes use-compression=no use-encryption=no use-mpls=no use-upnp=no add local-address=172.16.0.0 name=100M/100M only-one=yes rate-limit=100M/100M /queue simple add max-limit=200M/200M name=queue target=192.168.200.0/24 /routing bgp instance set default as=197520 redistribute-connected=yes router-id=93.170.115.226 /routing ospf area set [ find default=yes ] disabled=yes /routing ospf instance set [ find default=yes ] disabled=yes redistribute-connected=as-type-2 router-id=93.170.115.226 /snmp community set [ find default=yes ] name=snmptyphoon add addresses=95.46.108.3/32 name=doaquievee2zeiP /system logging action set 1 disk-lines-per-file=2000 set 2 remember=no set 3 bsd-syslog=yes remote=95.47.136.9 src-address=93.170.115.226 syslog-facility=local0 /user group set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp" add name=fuII policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp" add name=OnOff policy="local,reboot,read,write,test,winbox,web,api,!telnet,!ssh,!ftp,!policy,!password,!sniff,!sensitive,!romon,!dude,!tikapp" /interface bridge port add bridge=bridge1 interface=ether5 add bridge=bridge1 interface=ether4 add bridge=bridge1 interface=ether3 add bridge=bridge-vlan300 interface=vlan300-mgnt-eoip add bridge=bridge-vlan300 interface=vlan300-mgnt-ether3 /ip neighbor discovery-settings set discover-interface-list=all /interface list member add interface=bridge-vlan300 list=winbox add interface=ether3 list=winbox /interface pppoe-server server add authentication=chap default-profile=30M/30M disabled=no interface=bridge1 one-session-per-host=yes service-name=service1 add authentication=chap default-profile=ugv disabled=no interface=bridge1 one-session-per-host=yes service-name=LGV add authentication=chap default-profile=profile-PPPoE disabled=no interface=vlan200-cust keepalive-timeout=20 max-mru=1500 max-mtu=1500 mrru=1600 one-session-per-host=yes service-name=service-vid200 /ip address add address=93.170.115.226/30 interface=vlan1234-ISP-UniCom network=93.170.115.224 add address=192.168.0.2/16 interface=bridge1 network=192.168.0.0 add address=100.64.1.10/24 interface=bridge-vlan300 network=100.64.1.0 add address=192.168.200.1/24 disabled=yes interface=vlan200-cust network=192.168.200.0 add address=192.168.88.169/30 interface=ether5 network=192.168.88.168 /ip dhcp-client add disabled=no interface=ether2 /ip dhcp-server network add address=192.168.200.0/24 dns-server=192.168.200.1 domain=typhoon.lan gateway=192.168.200.1 netmask=24 /ip dns set servers=8.8.8.8,208.67.220.220,8.8.4.4 /ip firewall address-list add address=1.1.1.10 list=admin add address=77.120.35.170 list=admin add address=95.46.108.0/24 list=admin add address=95.47.136.9 list=admin add address=95.47.136.14 list=admin add address=93.170.114.26 list=admin add address=172.16.2.65 disabled=yes list=off add address=192.168.7.30 list=off add address=192.168.7.31 list=off add address=192.168.7.32 list=off add address=192.168.7.33 disabled=yes list=off add address=192.168.7.34 disabled=yes list=off add address=192.168.7.35 disabled=yes list=off add address=192.168.7.36 list=off add address=192.168.7.37 disabled=yes list=off add address=192.168.7.38 disabled=yes list=off add address=192.168.7.39 list=off add address=192.168.7.40 list=off add address=192.168.7.41 list=off add address=192.168.7.42 list=off add address=192.168.7.43 list=off add address=192.168.7.44 list=off add address=192.168.7.45 list=off add address=192.168.7.46 list=off add address=192.168.7.47 list=off add address=192.168.7.48 list=off add address=192.168.7.49 disabled=yes list=off add address=192.168.7.50 list=off add address=192.168.7.51 list=off add address=192.168.7.52 list=off add address=192.168.7.53 disabled=yes list=off add address=192.168.7.54 disabled=yes list=off add address=192.168.7.55 disabled=yes list=off add address=192.168.7.56 list=off add address=192.168.7.57 list=off add address=192.168.7.58 list=off add address=192.168.7.59 list=off add address=192.168.7.60 disabled=yes list=off add address=192.168.7.61 list=off add address=192.168.7.62 list=off add address=192.168.7.63 disabled=yes list=off add address=192.168.7.64 list=off add address=192.168.7.65 disabled=yes list=off add address=192.168.7.66 disabled=yes list=off add address=192.168.7.67 list=off add address=192.168.7.68 list=off add address=192.168.7.69 list=off add address=192.168.7.70 list=off add address=192.168.7.71 disabled=yes list=off add address=192.168.7.72 list=off add address=192.168.7.73 list=off add address=192.168.7.74 list=off add address=192.168.7.75 list=off add address=192.168.7.76 list=off add address=192.168.7.77 list=off add address=192.168.7.78 list=off add address=192.168.7.79 disabled=yes list=off add address=192.168.7.80 disabled=yes list=off add address=192.168.7.81 list=off add address=192.168.7.82 list=off add address=192.168.7.83 list=off add address=192.168.7.84 list=off add address=192.168.7.85 disabled=yes list=off add address=192.168.7.86 list=off add address=192.168.7.87 list=off add address=192.168.7.88 list=off add address=192.168.7.89 list=off add address=192.168.7.90 list=off add address=192.168.7.91 list=off add address=192.168.7.92 list=off add address=192.168.7.93 list=off add address=192.168.15.126 list=off add address=192.168.7.95 disabled=yes list=off add address=192.168.7.96 list=off add address=192.168.7.97 list=off add address=192.168.7.98 disabled=yes list=off add address=192.168.7.99 disabled=yes list=off add address=192.168.7.100 list=off add address=192.168.7.101 list=off add address=192.168.7.102 disabled=yes list=off add address=192.168.7.103 list=off add address=192.168.7.104 disabled=yes list=off add address=192.168.7.105 list=off add address=192.168.7.106 list=off add address=192.168.7.107 list=off add address=192.168.7.108 list=off add address=192.168.7.109 list=off add address=192.168.7.110 list=off add address=192.168.7.111 list=off add address=192.168.7.112 list=off add address=192.168.7.113 list=off add address=192.168.7.114 list=off add address=192.168.7.115 disabled=yes list=off add address=192.168.7.116 list=off add address=192.168.7.117 disabled=yes list=off add address=192.168.7.118 list=off add address=192.168.7.119 list=off add address=192.168.7.120 list=off add address=192.168.7.121 list=off add address=192.168.7.122 disabled=yes list=off add address=192.168.7.123 list=off add address=192.168.7.124 list=off add address=192.168.7.125 list=off add address=192.168.7.126 list=off add address=192.168.7.127 list=off add address=192.168.7.128 list=off add address=192.168.7.129 list=off add address=192.168.7.130 disabled=yes list=off add address=192.168.7.131 list=off add address=192.168.7.132 list=off add address=192.168.7.133 list=off add address=192.168.7.134 list=off add address=192.168.7.135 list=off add address=192.168.7.136 list=off add address=192.168.7.137 disabled=yes list=off add address=192.168.7.138 list=off add address=192.168.7.139 list=off add address=192.168.7.140 disabled=yes list=off add address=192.168.7.141 disabled=yes list=off add address=192.168.7.142 disabled=yes list=off add address=192.168.7.143 disabled=yes list=off add address=192.168.7.144 list=off add address=192.168.7.145 list=off add address=192.168.7.146 disabled=yes list=off add address=192.168.7.147 list=off add address=192.168.7.148 disabled=yes list=off add address=192.168.7.149 disabled=yes list=off add address=192.168.7.150 list=off add address=192.168.7.151 disabled=yes list=off add address=192.168.7.152 list=off add address=192.168.7.153 list=off add address=192.168.7.154 list=off add address=192.168.7.155 disabled=yes list=off add address=192.168.7.156 list=off add address=192.168.7.157 list=off add address=192.168.7.158 list=off add address=192.168.7.159 list=off add address=192.168.7.160 list=off add address=192.168.7.161 list=off add address=192.168.7.162 list=off add address=192.168.7.163 disabled=yes list=off add address=192.168.7.164 list=off add address=192.168.7.165 list=off add address=192.168.7.166 list=off add address=192.168.7.167 list=off add address=192.168.7.168 list=off add address=192.168.7.169 list=off add address=192.168.7.170 disabled=yes list=off add address=192.168.7.171 list=off add address=192.168.7.172 disabled=yes list=off add address=192.168.7.173 list=off add address=192.168.7.174 list=off add address=192.168.7.175 disabled=yes list=off add address=192.168.7.176 list=off add address=192.168.7.177 list=off add address=192.168.7.178 list=off add address=192.168.7.179 list=off add address=192.168.7.180 list=off add address=192.168.7.181 list=off add address=192.168.7.182 list=off add address=192.168.7.183 list=off add address=192.168.7.184 list=off add address=192.168.7.185 list=off add address=192.168.7.194 list=off add address=192.168.8.31 list=off add address=192.168.8.32 disabled=yes list=off add address=192.168.8.34 disabled=yes list=off add address=192.168.8.151 disabled=yes list=off add address=192.168.8.172 disabled=yes list=off add address=192.168.8.35 list=off add address=192.168.8.41 list=off add address=192.168.8.44 list=off add address=192.168.7.197 comment=muzyka disabled=yes list=off add address=95.47.164.185 list=admin add address=192.168.2.60 list=off add address=172.16.14.39 disabled=yes list=off add address=172.16.2.31 disabled=yes list=off add address=172.16.2.104 list=off add address=172.16.14.57 disabled=yes list=off add address=172.16.2.59 list=off add address=172.16.2.47 list=off add address=172.16.14.59 disabled=yes list=off add address=172.16.10.90 disabled=yes list=off add address=172.16.2.92 list=off add address=172.16.2.100 list=off add address=172.16.2.102 disabled=yes list=off add address=172.16.2.107 disabled=yes list=off add address=172.16.2.57 disabled=yes list=off add address=172.16.2.32 disabled=yes list=off add address=172.16.14.39 disabled=yes list=off add address=172.16.10.81 list=off /ip firewall filter add action=drop chain=input connection-state="" disabled=yes dst-address=192.168.1.1 add action=drop chain=forward connection-state="" disabled=yes dst-address=192.168.0.0 add action=drop chain=input connection-state="" disabled=yes src-address=192.168.1.1 add action=drop chain=forward connection-state="" disabled=yes src-address=192.168.0.0 add action=drop chain=forward src-address-list=off add action=accept chain=input comment=ICMP protocol=icmp add action=accept chain=forward comment=DIC connection-state=established add action=accept chain=forward connection-state=related add action=accept chain=input connection-state=established add action=accept chain=input connection-state=related add action=drop chain=forward connection-state=invalid add action=accept chain=input comment=DNS dst-port=53 protocol=tcp src-address=192.168.200.0/24 add action=accept chain=input dst-port=53 protocol=udp src-address=192.168.200.0/24 add action=accept chain=input comment=BGP dst-port=179 protocol=tcp src-address=93.170.115.225 add action=accept chain=input comment=adm src-address-list=admin add action=accept chain=input protocol=gre add action=accept chain=input dst-port=1723 protocol=tcp add action=accept chain=input disabled=yes dst-port=520 protocol=udp src-address=93.170.115.225 add action=drop chain=input add action=accept chain=forward comment=TMP disabled=yes dst-address=192.168.88.170 add action=drop chain=forward comment=spoof_protect dst-address=192.168.0.0/16 add action=drop chain=output comment="switch to reserve" dst-address=8.8.4.4 out-interface=ether2 protocol=icmp /ip firewall nat add action=accept chain=srcnat src-address=95.47.164.48/29 add action=src-nat chain=srcnat comment=NAT_4_192.168.200.0/24 out-interface=vlan1234-ISP-UniCom src-address=192.168.200.0/24 to-addresses=93.170.115.226 add action=src-nat chain=srcnat out-interface=vlan1234-ISP-UniCom src-address=192.168.30.0/24 to-addresses=93.170.115.226 add action=netmap chain=srcnat out-interface=vlan1234-ISP-UniCom to-addresses=93.170.115.226 add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether2 add action=dst-nat chain=dstnat disabled=yes dst-address=!1.1.1.10 dst-port=80 protocol=tcp src-address=!1.1.1.10 src-address-list=off to-addresses=1.1.1.10 to-ports=80 add action=dst-nat chain=dstnat comment=!!!_TMP_!!! dst-port=7070 protocol=tcp to-addresses=192.168.88.170 to-ports=80 add action=masquerade chain=srcnat comment=TMP disabled=yes dst-address=192.168.88.170 add action=dst-nat chain=dstnat disabled=yes dst-port=7071 protocol=tcp to-addresses=100.1.1.1 to-ports=80 /ip route add comment=ISP1 distance=1 gateway=93.170.115.225 add comment=ISP2 disabled=yes distance=2 gateway=134.249.170.62 add distance=1 dst-address=8.8.4.4/32 gateway=93.170.115.225 add comment=static_IP distance=1 dst-address=95.47.164.48/29 gateway=null /ip service set telnet disabled=yes set ftp disabled=yes set www-ssl certificate=mikroTik.ca.cert.pem_0 set api disabled=yes set api-ssl disabled=yes /ppp aaa set use-radius=yes /ppp secret add disabled=yes name=k1431 password=1693 profile=30M/30M remote-address=172.16.14.31 service=pppoe add name=k232 password=5478 profile=10M/10M remote-address=172.16.2.32 service=pppoe add disabled=yes name=k241 password=9687 profile=10M/10M remote-address=172.16.2.41 service=pppoe add name=k242 password=4832 profile=10M/10M remote-address=172.16.2.42 service=pppoe add disabled=yes name=k247 password=9433 profile=10M/10M remote-address=172.16.2.47 service=pppoe add name=k257 password=2574 profile=10M/10M remote-address=172.16.2.57 service=pppoe add disabled=yes name=k259 password=2734 profile=10M/10M remote-address=172.16.2.59 service=pppoe add disabled=yes name=k260 password=2938 profile=10M/10M remote-address=172.16.2.60 service=pppoe add name=k267 password=8765 profile=10M/10M remote-address=172.16.2.67 service=pppoe add name=k291 password=9283 profile=10M/10M remote-address=172.16.2.91 service=pppoe add name=k1439 password=6379 profile=10M/10M remote-address=172.16.14.39 service=pppoe add disabled=yes name=k1446 password=0971 profile=10M/10M remote-address=172.16.14.46 service=pppoe add disabled=yes name=k1448 password=0393 profile=10M/10M remote-address=172.16.14.48 service=pppoe add disabled=yes name=k1443 password=3491 profile=10M/10M remote-address=172.16.14.43 service=pppoe add name=k1451 password=0891 profile=10M/10M remote-address=172.16.14.51 service=pppoe add disabled=yes name=k1454 password=8526 profile=10M/10M remote-address=172.16.14.54 service=pppoe add name=k1457 password=7469 profile=10M/10M remote-address=172.16.14.57 service=pppoe add disabled=yes name=k1460 password=2581 profile=10M/10M remote-address=172.16.14.60 service=pppoe add disabled=yes name=k2100 password=4234 profile=10M/10M remote-address=172.16.2.100 service=pppoe add disabled=yes name=k2104 password=8065 profile=10M/10M remote-address=172.16.2.104 service=pppoe add name=k2102 password=2347 profile=10M/10M remote-address=172.16.2.102 service=pppoe add name=k1055 password=6453 profile=10M/10M remote-address=172.16.10.55 service=pppoe add disabled=yes name=k1087 password=7339 profile=10M/10M remote-address=172.16.10.87 service=pppoe add disabled=yes name=k1064 password=7086 profile=10M/10M remote-address=172.16.10.64 service=pppoe add disabled=yes name=k1071 password=3624 profile=10M/10M remote-address=172.16.10.71 service=pppoe add disabled=yes name=k1060 password=8347 profile=10M/10M remote-address=172.16.10.60 service=pppoe add disabled=yes name=k1082 password=2734 profile=10M/10M remote-address=172.16.10.82 service=pppoe add name=k1452 password=0506 profile=10M/10M remote-address=172.16.14.52 service=pppoe add name=k263 password=3748 profile=10M/10M remote-address=172.16.2.63 service=pppoe add disabled=yes name=k255 password=5043 profile=10M/10M remote-address=172.16.2.55 service=pppoe add name=k233 password=5843 profile=10M/10M remote-address=172.16.2.33 service=pppoe add disabled=yes name=k245 password=4753 profile=10M/10M remote-address=172.16.2.45 service=pppoe add name=k249 password=1823 profile=10M/10M remote-address=172.16.2.49 service=pppoe add name=k1058 password=7254 profile=10M/10M remote-address=172.16.10.58 service=pppoe add disabled=yes name=k1061 password=5483 profile=10M/10M remote-address=172.16.10.61 service=pppoe add disabled=yes name=k1081 password=7432 profile=10M/10M remote-address=172.16.10.81 service=pppoe add disabled=yes name=k256 password=9348 profile=10M/10M remote-address=172.16.2.56 service=pppoe add name=k2107 password=7962 profile=10M/10M remote-address=172.16.2.107 service=pppoe add name=k231 password=3625 profile=10M/10M remote-address=172.16.2.31 service=pppoe add disabled=yes name=k1459 password=3095 profile=10M/10M remote-address=172.16.14.59 service=pppoe add disabled=yes name=k1453 password=0931 profile=10M/10M remote-address=172.16.14.53 service=pppoe add name=k1433 password=6576 profile=10M/10M remote-address=172.16.14.33 service=pppoe add name=k1438 password=7309 profile=10M/10M remote-address=172.16.14.38 service=pppoe add disabled=yes name=k1442 password=2585 profile=10M/10M remote-address=172.16.14.42 service=pppoe add name=k1050 password=5134 profile=10M/10M remote-address=172.16.10.50 service=pppoe add disabled=yes name=k295 password=4735 profile=10M/10M remote-address=172.16.2.95 service=pppoe add disabled=yes name=k293 password=8097 profile=10M/10M remote-address=172.16.2.93 service=pppoe add disabled=yes name=k261 password=3719 profile=10M/10M remote-address=172.16.2.61 service=pppoe add disabled=yes name=k290 password=9883 profile=10M/10M remote-address=172.16.2.90 service=pppoe add name=k1070 password=3854 profile=10M/10M remote-address=172.16.10.70 service=pppoe add name=k266 password=662 profile=10M/10M remote-address=172.16.2.66 service=pppoe add disabled=yes name=k292 password=5784 profile=10M/10M remote-address=172.16.2.92 service=pppoe add disabled=yes name=k270 password=270270 profile=10M/10M remote-address=172.16.2.70 service=pppoe add name=k1068 password=1068 profile=10M/10M remote-address=172.16.10.68 service=pppoe add comment=95.47.164.50 name=letnyaugv password=19122018 profile=PPPOE-STATIC remote-address=95.47.164.50 service=pppoe add disabled=yes name=k877 password=7133 profile=10M/10M remote-address=172.16.8.77 service=pppoe add name=733 password=8512 profile=10M/10M remote-address=172.16.7.33 service=pppoe add comment=95.47.164.49 name=oparilgv password=19122018 profile=PPPOE-STATIC remote-address=95.47.164.51 service=pppoe add name=k2106 password=1507 profile=10M/10M remote-address=172.16.2.106 service=pppoe add name=k1440 password=6982 profile=10M/10M remote-address=172.16.14.40 service=pppoe add name=k265 password=3587 profile=10M/10M remote-address=172.16.2.65 service=pppoe add disabled=yes name=k10001 password=10101 profile=10M/10M remote-address=172.16.10.90 service=pppoe add name=10002 password=1002 profile=10M/10M remote-address=172.16.10.102 service=pppoe add disabled=yes name=k10002 password=10102 profile=10M/10M remote-address=172.16.10.91 service=pppoe add name=d30test password=test profile=30M/30M remote-address=172.16.30.100 service=pppoe add disabled=yes name=d3033 password=9875 profile=30M/30M remote-address=172.16.30.33 service=pppoe add disabled=yes name=d3030 password=1345 profile=30M/30M remote-address=172.16.30.30 service=pppoe add disabled=yes name=d3019 password=6768 profile=30M/30M remote-address=172.16.30.19 service=pppoe add disabled=yes name=d3031 password=0929 profile=30M/30M remote-address=172.16.30.31 service=pppoe add disabled=yes name=d3028 password=5412 profile=30M/30M remote-address=172.16.30.28 service=pppoe add name=d3020 password=8138 profile=100M/100M remote-address=172.16.30.20 service=pppoe add disabled=yes name=d3008 password=7790 profile=30M/30M remote-address=172.16.30.8 service=pppoe add disabled=yes name=d3012 password=7080 profile=30M/30M remote-address=172.16.30.12 service=pppoe add disabled=yes name=d3004 password=7243 profile=30M/30M remote-address=172.16.30.4 service=pppoe add disabled=yes name=d3032 password=2939 profile=30M/30M remote-address=172.16.30.32 service=pppoe add name=k10138 password=5577 profile=30M/30M remote-address=172.16.10.138 service=pppoe add disabled=yes name=k2110 password=5611 profile=30M/30M remote-address=172.16.2.110 service=pppoe add name=verhovyna password=14105 profile=10M/10M remote-address=172.16.14.105 service=pppoe add disabled=yes name=d3002 password=8192 profile=30M/30M remote-address=172.16.30.2 service=pppoe add disabled=yes name=d3009 password=6882 profile=30M/30M remote-address=172.16.30.9 service=pppoe add disabled=yes name=d3010 password=1314 profile=30M/30M remote-address=172.16.30.10 service=pppoe add disabled=yes name=d3013 password=9833 profile=30M/30M remote-address=172.16.30.13 service=pppoe add disabled=yes name=d3014 password=6567 profile=30M/30M remote-address=172.16.30.14 service=pppoe add disabled=yes name=d3011 password=1113 profile=30M/30M remote-address=172.16.30.11 service=pppoe add disabled=yes name=d3001 password=4423 profile=30M/30M remote-address=172.16.30.1 service=pppoe add disabled=yes name=d3016 password=7833 profile=30M/30M remote-address=172.16.30.16 service=pppoe add name=pani_lyuba password=pani_lyuba profile=30M/30M remote-address=172.16.30.100 service=pppoe add disabled=yes name=d3005 password=6302 profile=30M/30M remote-address=172.16.30.5 service=pppoe add disabled=yes name=d3006 password=1212 profile=30M/30M remote-address=172.16.30.6 service=pppoe add disabled=yes name=d3018 password=9230 profile=30M/30M remote-address=172.16.30.18 service=pppoe add disabled=yes name=d3021 password=9215 profile=30M/30M remote-address=172.16.30.21 service=pppoe add disabled=yes name=d3015 password=6833 profile=30M/30M remote-address=172.16.30.15 service=pppoe add disabled=yes name=d3035 password=7890 profile=30M/30M remote-address=172.16.30.35 service=pppoe add disabled=yes name=d3022 password=0120 profile=30M/30M remote-address=172.16.30.22 service=pppoe add disabled=yes name=d3036 password=8899 profile=30M/30M remote-address=172.16.30.36 service=pppoe add disabled=yes name=d3037 password=3215 profile=30M/30M remote-address=172.16.30.37 service=pppoe add comment=ferma name=k2111 password=0901 profile=10M/10M remote-address=172.16.2.111 service=pppoe add name=k2108 password=3121 profile=10M/10M remote-address=172.16.2.108 service=pppoe add name=k2109 password=4342 profile=10M/10M remote-address=172.16.2.109 service=pppoe add name=k2112 password=5399 profile=30M/30M remote-address=172.16.2.112 service=pppoe add name=k10003 password=5992 profile=10M/10M remote-address=10.10.10.103 service=pppoe add disabled=yes name=k2139 password=3921 profile=10M/10M remote-address=172.16.2.139 service=pppoe add disabled=yes name=d3040 password=0403 profile=30M/30M remote-address=176.16.30.40 service=pppoe add disabled=yes name=d3038 password=7245 profile=30M/30M remote-address=172.16.30.38 service=pppoe add disabled=yes name=d3041 password=2988 profile=30M/30M remote-address=172.16.30.41 service=pppoe add disabled=yes name=d3042 password=9202 profile=30M/30M remote-address=172.16.30.42 service=pppoe /radius add address=185.86.78.166 secret=hardpass5 service=ppp /radius incoming set accept=yes /routing bgp network add disabled=yes network=93.170.115.224/30 synchronize=no add network=95.47.164.48/29 synchronize=no /routing bgp peer add in-filter=bgp-in name=peer-UniCom nexthop-choice=force-self out-filter=bgp-out remote-address=93.170.115.225 remote-as=197520 tcp-md5-key=Iehae1ujie ttl=default /routing filter add action=accept chain=ospf-out disabled=yes prefix=95.47.164.48/29 prefix-length=32 add action=accept chain=ospf-out disabled=yes prefix=95.47.164.48/29 add action=discard chain=ospf-in disabled=yes prefix-length=0-128 add action=discard chain=ospf-in disabled=yes add action=discard chain=ospf-in disabled=yes prefix=0.0.0.0/0 add action=discard chain=ospf-in disabled=yes prefix=0.0.0.0/0 prefix-length=0-128 add action=discard chain=ospf-out disabled=yes prefix=93.170.115.224/29 prefix-length=0-128 add action=discard chain=ospf-out disabled=yes prefix=10.0.0.0/8 prefix-length=0-128 add action=discard chain=ospf-out disabled=yes prefix=172.0.0.0/8 prefix-length=0-128 add action=discard chain=ospf-out disabled=yes prefix-length=0-128 add action=discard chain=ospf-out disabled=yes add action=discard chain=ospf-out disabled=yes prefix=0.0.0.0/0 prefix-length=0-128 add action=discard chain=ospf-out disabled=yes prefix=0.0.0.0/0 add action=discard chain=bgp-in prefix=172.16.0.0/12 add action=discard chain=bgp-in prefix=169.254.0.0/16 add action=discard chain=bgp-in prefix=224.0.0.0/4 add action=discard chain=bgp-in prefix=240.0.0.0/4 add action=discard chain=bgp-in prefix=127.0.0.0/8 add action=discard chain=bgp-in prefix=10.0.0.0/8 add action=discard chain=bgp-in prefix=192.168.0.0/16 add action=discard chain=bgp-in prefix=95.47.164.48/29 add action=discard chain=bgp-in prefix=93.170.115.224/30 add action=accept chain=bgp-in prefix=0.0.0.0/0 prefix-length=0 add action=discard chain=bgp-in add action=accept chain=bgp-out prefix=95.47.164.48/29 prefix-length=29 add action=discard chain=bgp-out add action=discard chain=bgp-out prefix=0.0.0.0/0 prefix-length=0-128 /routing ospf network add area=backbone disabled=yes network=93.170.115.224/29 /routing prefix-lists add chain=rip-out disabled=yes prefix=95.47.164.48/29 prefix-length=32 add action=discard chain=rip-out disabled=yes add action=discard chain=rip-out disabled=yes prefix-length=0-128 add action=discard chain=rip-in disabled=yes add action=discard chain=rip-in disabled=yes prefix-length=0-128 /routing rip interface add authentication=md5 authentication-key=Ljcneg18_1226_20 disabled=yes in-prefix-list=rip-in interface=ether2 out-prefix-list=rip-out passive=yes receive=v2 /routing rip neighbor add address=93.170.115.225 disabled=yes /routing rip network add disabled=yes network=93.170.115.224/29 add disabled=yes network=95.47.164.48/29 /snmp set contact=hostmaster@gal.net.ua enabled=yes location="Drohobych, typhoon" /system clock set time-zone-name=Europe/Kiev /system identity set name="typ #gw-drohobych" /system leds add leds="" type=interface-activity /system logging set 0 action=disk set 1 action=disk set 2 action=disk set 3 action=disk add action=remote topics=critical add action=remote topics=error add action=remote topics=info add action=remote topics=warning /system resource irq rps set ether2 disabled=no set ether3 disabled=no set ether4 disabled=no set ether5 disabled=no /tool bandwidth-server set authenticate=no enabled=no /tool graphing interface add interface=ether3 add interface=ether2 add interface=ether1 add interface=ether4 add interface=ether5 add interface=vlan1234-ISP-UniCom /tool graphing resource add /tool mac-server set allowed-interface-list=winbox /tool mac-server mac-winbox set allowed-interface-list=winbox /tool mac-server ping set enabled=no /tool netwatch add down-script="/ip route set [find comment=\"ISP1\"] disabled=yes\r\n/ip route set [find comment=\"ISP2\"] disabled=no\r\n/interface ethernet set [find comment=\"WAN2\"] disabled=no" host=8.8.4.4 up-script="/ip route set [find comment=\"ISP1\"] disabled=no\r\n/ip route set [find comment=\"ISP2\"] disabled=yes\r\n/interface ethernet set [find comment=\"WAN2\"] disabled=yes"