MMM MMM KKK TTTTTTTTTTT KKK

MMMM MMMM KKK TTTTTTTTTTT KKK

MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK

MikroTik RouterOS 7.15.3 (c) 1999-2024 https://www.mikrotik.com/

Press F1 for help

###
### ###
#### ### ### ###
########## ### ###
#### #### ### ####### ###### ########
 #### ### ##### ### ###### ############
### ### ### ### #### #### ####
#### ### ######## ### ### ### ####
#### #### ### ### ### ### #### ####
########## ### ######### ### ############
#### ### #### ## ### ########
_______________________________________________________
| Usted esta a punto de utilizar un recurso informatico |
| de uso privado, cualquier intento de acceso quedara |
| registrado y puede tener implicaciones legales. |
| ODH-5G Ver 2.3 |
|_______________________________________________________|
| You are on the verge of using private resources, any |
| attempt of access will be recorded and can have |
| legal implications. |
|_______________________________________________________|
**************************************************************
* ATENCION: *
* Este equipo es propiedad de: *
* CLARO COLOMBIA - SOLUCIONES FIJAS *
* El uso no autorizado esta estrictamente prohibido. *
* Todos los usuarios son legalmente responsables de sus *
* acciones sobre el sistema y toda actividad sera registrada *
**************************************************************

[telmexuser@ODH_5G-19182-FTIC000194] > ping 8.8.8.

invalid value for argument address:
invalid value of mac-address, mac address required
invalid value for argument ipv6-address
while resolving ip-address: could not get answer from dns server

[telmexuser@ODH_5G-19182-FTIC000194] > export

# 1970-01-01 19:09:30 by RouterOS 7.15.3
# software id = WMBM-0YA6
#
# model = RB4011iGS+
# serial number = HEF08H4XKST
/interface bridge
add name=bridge_LAN
/interface ethernet
set [ find default-name=ether1 ] disabled=yes
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] name=ether3-Ups
set [ find default-name=ether4 ] name=ether4-Gateway
set [ find default-name=ether5 ] name=ether5-Bateria
set [ find default-name=ether6 ] disabled=yes
set [ find default-name=ether7 ] disabled=yes
set [ find default-name=ether8 ] auto-negotiation=no name=ether8-AP-Indoor
set [ find default-name=ether9 ] auto-negotiation=no name=ether9-AP-Outdoor1
set [ find default-name=ether10 ] auto-negotiation=no name=ether10-AP-Outdoor2
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no name=sfp1-WAN speed=1G-
baseT-full
/interface vlan
add interface=bridge_LAN name=vlan-1-Gestion vlan-id=1
add interface=bridge_LAN name=vlan-30-AP-Indoor vlan-id=30
add interface=bridge_LAN name=vlan-40-AP-Outdoor vlan-id=40
add interface=sfp1-WAN name=vlan-WAN vlan-id=1308
/ip dhcp-server option
add code=43 name=option43 value=0xc0a80a01
/ip pool
add name=Indoor_AP_E410 ranges=172.16.6.50-172.16.6.150
add name=OutDoor_AP_E510 ranges=172.20.6.50-172.20.6.250
/port
set 0 name=serial0
set 1 name=serial1
/snmp community
add addresses=::/0 name=CRpWE3677TeLmEx write-access=yes
/interface bridge port
add bridge=bridge_LAN interface=ether3-Ups
add bridge=bridge_LAN interface=ether4-Gateway
add bridge=bridge_LAN interface=ether5-Bateria
add bridge=bridge_LAN interface=ether8-AP-Indoor
add bridge=bridge_LAN interface=ether9-AP-Outdoor1
add bridge=bridge_LAN interface=ether10-AP-Outdoor2
/ipv6 settings
set disable-ipv6=yes
/ip address
add address=10.167.31.26/30 interface=vlan-WAN network=10.167.31.24
add address=172.26.248.1/28 interface=bridge_LAN network=172.26.248.0
add address=172.16.6.1/24 interface=vlan-30-AP-Indoor network=172.16.6.0
add address=172.20.6.1/24 interface=vlan-40-AP-Outdoor network=172.20.6.0
/ip dhcp-server
add address-pool=Indoor_AP_E410 interface=vlan-30-AP-Indoor name=dhcp1
add address-pool=OutDoor_AP_E510 interface=vlan-40-AP-Outdoor name=dhcp2
/ip dhcp-server network
add address=172.16.6.0/24 dns-server=200.26.137.100,200.14.207.210
gateway=172.16.6.1
add address=172.20.6.0/24 dns-server=200.26.137.100,200.14.207.210
gateway=172.20.6.1
add address=172.26.248.0/28 dns-server=200.26.137.100,200.14.207.210
gateway=172.26.248.1
/ip firewall address-list
add address=100.123.27.209 list=speed_test_server
add address=100.123.27.210 list=speed_test_server
add address=100.125.66.55 list=speed_test_server
add address=100.125.66.56 list=speed_test_server
/ip firewall filter
add action=drop chain=input comment="Bloquear acceso indoor desde LAN" dst-
port=8291,22,80,443 in-interface=vlan-30-AP-Indoor protocol=tcp
add action=drop chain=input comment="Bloquear acceso outdoor1 desde LAN" dst-
port=8291,22,80,443 in-interface=vlan-40-AP-Outdoor protocol=tcp
/ip firewall mangle
add action=add-src-to-address-list address-list=speedtest address-list-
timeout=none-dynamic chain=forward comment="Reportar Speedtest" dst-
address=172.26.248.0/28 \
src-address-list=speed_test_server
add action=mark-packet chain=forward dst-address=172.26.248.0/28 new-packet-
mark=SpeedTest_ENTRADA passthrough=no src-address-list=speed_test_server
add action=mark-packet chain=forward dst-address-list=speed_test_server new-packet-
mark=SpeedTest_SALIDA passthrough=no src-address=172.26.248.0/28
/ip route
add gateway=10.167.31.25
/ip service
set telnet disabled=yes
set www disabled=yes
set ssh address=10.167.31.24/30,172.31.238.0/23
/radius
add address=172.22.192.4 service=login src-address=10.167.31.26
/snmp
set enabled=yes location=19182-FTIC000194 trap-community=CRpWE3677TeLmEx trap-
version=2
/system clock
set time-zone-name=America/Bogota
/system identity
set name=ODH_5G-19182-FTIC000194
/system note
set note="\
\n ###\
\n ### ###\
\n #### ### ### ###\
\n ########## ### ###\
\n #### #### ### ####### ###### ########\
\n #### ### ##### ### ###### ############\
\n ### ### ### ### #### #### ####\
\n #### ### ######## ### ### ### ####\
\n #### #### ### ### ### ### #### ####\
\n ########## ### ######### ### ############\
\n #### ### #### ## ### ########\
\n _______________________________________________________\
\n | Usted esta a punto de utilizar un recurso informatico |\
\n | de uso privado, cualquier intento de acceso quedara |\
\n | registrado y puede tener implicaciones legales. |\
\n | ODH-5G Ver 2.3 |\
\n |_______________________________________________________|\
\n | You are on the verge of using private resources, any |\
\n | attempt of access will be recorded and can have |\
\n | legal implications. |\
\n |_______________________________________________________|\
\n**************************************************************\
\n* ATENCION: *\
\n* Este equipo es propiedad de: *\
\n* CLARO COLOMBIA - SOLUCIONES FIJAS *\
\n* El uso no autorizado esta estrictamente prohibido. *\
\n* Todos los usuarios son legalmente responsables de sus *\
\n* acciones sobre el sistema y toda actividad sera registrada *\
\n**************************************************************\
\n"
/system ntp client
set enabled=yes
/system ntp client servers
add address=172.31.239.53
add address=100.123.74.10
/system package update
set channel=long-term
/system routerboard settings
set enter-setup-on=delete-key
/system scheduler
add comment="Reduce ancho de banda al 60% de 7:00 AM a 1:00 PM" interval=1d
name=reduce-bandwidth-scheduler on-event=reduce-bandwidth policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-
date=1970-01-02 start-time=07:00:00
add comment="Restablece ancho de banda al 100% despu\E9s de las 1:00 PM"
interval=1d name=normalizar-servicio on-event=normalizar-servicio policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-
date=1970-01-02 start-time=13:00:00
add comment="Detecta Pruebas De BW" interval=2s name=speedtest_detect on-
event=":foreach listItem in=[/ip firewall address-list find list=\"speedtest\"]
do={\
\nip firewall address-list remove [/ip firewall address-list find
list=\"speedtest\"]\
\nsystem script run disable_vlans\
\n}" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
start-time=startup
/system script
add dont-require-permissions=no name=reduce-bandwidth owner=admin
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\r\
\n:global TotalDowload 40960;\r\
\n:global TotalUp 11264;\r\
\n:global downloadBandwidthPerUserIndoor ((\$TotalDowload * 60) / 100)\r\
\n:global uploadBandwidthPerUserIndoor ((\$TotalUp * 60) / 100)\r\
\n:global downloadBandwidthPerUserOutdoor ((\$TotalDowload * 40) / 100)\r\
\n:global uploadBandwidthPerUserOutdoor ((\$TotalUp * 40) / 100)\r\
\n/queue/simple/remove [find ]\r\
\n/queue simple\r\
\nadd name=\"Indoor_VLAN_30\" target=vlan-30-AP-Indoor max-limit=(\
$uploadBandwidthPerUserIndoor / \$downloadBandwidthPerUserIndoor) priority=1/1
time=7h-13h,mon,tue,w\
ed,thu,fri\r\
\n:foreach i in=[find where name=\"Indoor_VLAN_30\"] do={\r\
\n set \$i max-limit=(\$uploadBandwidthPerUserIndoor . \"k/\" . \
$downloadBandwidthPerUserIndoor . \"k\")\r\
\n}\r\
\n/queue simple\r\
\nadd name=\"Outdoor_VLAN_40\" target=vlan-40-AP-Outdoor max-limit=(\
$uploadBandwidthPerUserOutdoor / \$downloadBandwidthPerUserOutdoor) priority=2/2
time=7h-13h,mon,t\
ue,wed,thu,fri\r\
\n:foreach i in=[find where name=\"Outdoor_VLAN_40\"] do={\r\
\n set \$i max-limit=(\$uploadBandwidthPerUserOutdoor . \"k/\" . \
$downloadBandwidthPerUserOutdoor . \"k\")\r\
\n}\r\
\n"
add dont-require-permissions=no name=normalizar-servicio owner=admin
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
"\r\
\n:global uploadBandwidthPerUserOutdoor (\$TotalUp / 2)\r\
\n/queue/simple/remove [find ]\r\
\n/queue simple\r\
\n/queue/simple\r\
\nremove [find ]\r\
\n"
add dont-require-permissions=no name=disable_vlans owner=telmexuser
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
source="system scheduler disabl\
e speedtest_detect\r\
\n/interface vlan disable vlan-30-AP-Indoor\r\
\n/interface vlan disable vlan-40-AP-Outdoor\r\
\ndelay 23s\r\
\nsystem script run enable_vlans"
add dont-require-permissions=no name=enable_vlans owner=telmexuser
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
source="/interface vlan enable v\
lan-30-AP-Indoor\r\
\n/interface vlan enable vlan-40-AP-Outdoor\r\
\nsystem scheduler enable speedtest_detect\r\
\nip firewall address-list remove [/ip firewall address-list find
list=\"speedtest\"]\r\
\nsystem script job remove [find owner=telmexuser]\r\
\n"
/user aaa
set default-group=full use-radius=yes
[telmexuser@ODH_5G-19182-FTIC000194] >