# version: 7.24.3 (stable) # minimum-version: 7.4.1 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.24.3 # # software id = G4DH-CTP0 # # model = CCR2004-16G-2S+ # serial number = HEE08MYC93N /interface bridge add name=loopback port-cost-mode=short /interface ethernet set [ find default-name=ether1 ] name=ether1-link-ggnet set [ find default-name=ether2 ] advertise=10M-baseT-full,100M-baseT-full,1G-baseT-full name=ether2-to-router-farmacias-eth1 set [ find default-name=ether3 ] name=ether3-router-dns set [ find default-name=ether4 ] name=ether4-router-interno set [ find default-name=ether5 ] name=ether5-router-servers-1 set [ find default-name=ether6 ] name=ether6-router-hospedagem set [ find default-name=ether7 ] name=ether7-link-ultranet set [ find default-name=ether8 ] name=ether8-router-sermatica-eth1 set [ find default-name=ether9 ] name=ether9-to-router-infonet-ether8 set [ find default-name=ether10 ] comment=Gerenciamento set [ find default-name=ether11 ] name=ether11-router-servers-2 set [ find default-name=ether12 ] name=ether12-link-unifique set [ find default-name=ether13 ] name=ether13-router-servers-backup set [ find default-name=ether14 ] name=ether14-link-backup-telecom set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no speed=1G-baseX /interface eoip add local-address=177.73.253.1 mac-address=02:9E:30:87:B6:EC name=eoip-iper remote-address=177.75.162.43 tunnel-id=260 add local-address=177.73.253.1 mac-address=02:7D:9B:45:29:93 name=eoip-iper-1 remote-address=177.73.253.85 tunnel-id=102 add local-address=177.73.253.1 mac-address=02:47:DD:CD:B4:F6 name=eoip-iper-2 remote-address=45.163.13.106 tunnel-id=202 /interface vlan add interface=ether10 name="vlan Gerenciamento 4" vlan-id=4 add interface=ether10 name=vlan10-gerencia-switchs vlan-id=10 add interface=ether14-link-backup-telecom name=vlan351-bgp-backup-telecom vlan-id=351 add interface=ether4-router-interno name=vlan2100-router-interno-v6 vlan-id=2100 add interface=ether1-link-ggnet name=vlan2312-bgp-ggnet vlan-id=2312 add interface=ether12-link-unifique name=vlan2387-bgp-unifique vlan-id=2387 add interface=ether7-link-ultranet name=vlan3001-bgp-ultranet vlan-id=3001 /interface list add exclude=all name=no-neighbors /ip smb users set [ find default=yes ] disabled=yes /ppp profile set *0 dns-server=177.73.253.254 local-address=177.73.253.2 add change-tcp-mss=yes name="Atm 50M" rate-limit=50M/50M add change-tcp-mss=yes name="Atm Ilimitado" add change-tcp-mss=yes name="Atm 40M" rate-limit=40M/40M add change-tcp-mss=yes name="Atm 20M" rate-limit=20M/20M add change-tcp-mss=yes name=Atm10M rate-limit=10M/10M /queue simple add max-limit=100M/100M name=router-interno target=ether4-router-interno /routing bgp instance add as=270734 name=bgp-instance-1 router-id=177.73.253.1 /routing bgp template set default afi=ip as=270734 disabled=no multihop=yes output.network=prefix-bgp-ipv4 routing-table=main add afi=ipv6 as=270734 disabled=no name=v6 output.network=prefix-bgp-ipv6 routing-table=main /routing ospf instance add disabled=no name=ospf-instance-v6 originate-default=always version=3 /routing ospf area add disabled=no instance=ospf-instance-v6 name=area-0 /snmp community set [ find default=yes ] name=ipermonitor /system logging action add name=iper remote=10.10.10.69 src-address=177.73.253.1 target=remote /system script add dont-require-permissions=no name=script_backup_ftp owner=iper policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":log info \"Iniciado Backup FTP\"\n\n:local ident [/system identity get name]\n:local data [/system clock get date]\n\n:local arquivo (\$ident . \"-\" . \$data . \".rsc\")\n\n/export show-sensitive file=backup-ftp.rsc\n\n/tool fetch address=10.10.10.69 \\\n user=bkp.atm \\\n password=atm.bkp \\\n mode=ftp \\\n upload=yes \\\n src-path=backup-ftp.rsc \\\n dst-path=\$arquivo\n\n:log info \"Terminado Backup FTP\"\n" add dont-require-permissions=no name=script_backup_email owner=iper policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":log info \"Inciando Backup Email\"\n\n:local ident [/system identity get name]\n:local data [/system clock get date]\n\n:local name (\$ident . \"-\" . \$data)\n\n/export show-sensitive file=backup-email.rsc\n\n/tool e-mail send \\\n to=\"bkp.rb@iper.net.br\" \\\n subject=\$ident \\\n body=\$name \\\n file=\"backup-email.rsc\"\n\n:log info \"Terminado Backup Email\"\n" add dont-require-permissions=no name=netsync237 owner=0 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/system package update download; /system package update install" /ip firewall connection tracking set enabled=no udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=!no-neighbors /interface list member add interface=ether1-link-ggnet list=no-neighbors add interface=ether7-link-ultranet list=no-neighbors add interface=ether9-to-router-infonet-ether8 list=no-neighbors add interface=ether12-link-unifique list=no-neighbors add interface=ether14-link-backup-telecom list=no-neighbors add interface=ether10 list=no-neighbors /interface ovpn-server server add mac-address=FE:5B:4B:30:A1:90 name=ovpn-server1 /interface pppoe-server server add authentication=chap,mschap1,mschap2 disabled=no interface=ether8-router-sermatica-eth1 max-mru=1492 max-mtu=1492 service-name="PPPoE Server" /ip address add address=177.73.253.1 interface=loopback network=177.73.253.1 add address=172.16.0.1/30 interface=ether4-router-interno network=172.16.0.0 add address=172.16.0.5/30 interface=ether5-router-servers-1 network=172.16.0.4 add address=172.16.0.9/30 interface=ether6-router-hospedagem network=172.16.0.8 add address=172.16.0.17/30 interface=ether3-router-dns network=172.16.0.16 add address=172.16.0.21/30 interface=ether9-to-router-infonet-ether8 network=172.16.0.20 add address=172.16.0.25/30 interface=ether8-router-sermatica-eth1 network=172.16.0.24 add address=172.23.52.34/30 interface=vlan2312-bgp-ggnet network=172.23.52.32 add address=172.26.254.6/29 interface=vlan3001-bgp-ultranet network=172.26.254.0 add address=10.10.10.2/30 interface=eoip-iper network=10.10.10.0 add address=172.30.63.246/30 interface=vlan2387-bgp-unifique network=172.30.63.244 add address=172.16.0.33/30 interface=ether11-router-servers-2 network=172.16.0.32 add address=192.168.200.1/24 disabled=yes interface=vlan351-bgp-backup-telecom network=192.168.200.0 add address=172.16.0.129/30 interface=vlan351-bgp-backup-telecom network=172.16.0.128 add address=172.16.0.37/30 interface=ether2-to-router-farmacias-eth1 network=172.16.0.36 add address=172.16.0.29/30 interface=vlan10-gerencia-switchs network=172.16.0.28 add address=172.16.0.41/30 interface=vlan10-gerencia-switchs network=172.16.0.40 add address=10.10.10.134/30 interface=eoip-iper-1 network=10.10.10.132 add address=10.10.10.70/30 interface=eoip-iper-2 network=10.10.10.68 /ip dns set servers=177.73.253.254,8.8.8.8 /ip firewall address-list add address=177.73.253.0/24 list=prefix-bgp-ipv4 /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add distance=5 dst-address=177.73.253.3/32 gateway=172.16.0.2 scope=10 add distance=1 dst-address=177.73.253.4/32 gateway=172.16.0.6 add distance=1 dst-address=177.73.253.5/32 gateway=172.16.0.10 add distance=1 dst-address=177.73.253.6/32 gateway=172.16.0.10 add distance=1 dst-address=177.73.253.8/32 gateway=172.16.0.6 add comment=ip-sebastiao-freire-router-servers-1 distance=1 dst-address=177.73.253.45/32 gateway=172.16.0.6 add comment=ip-sermatica-router-servers-1 distance=1 dst-address=177.73.253.46/32 gateway=172.16.0.6 add comment=ip-sermatica-router-servers-1 distance=1 dst-address=177.73.253.47/32 gateway=172.16.0.6 add comment=ip-sermatica distance=1 dst-address=177.73.253.48/29 gateway=172.16.0.26 add comment=ip-alm distance=1 dst-address=177.73.253.55/32 gateway=172.16.0.6 add comment=ip-amusical distance=1 dst-address=177.73.253.57/32 gateway=172.16.0.6 add comment=ip-sigasul distance=1 dst-address=177.73.253.58/32 gateway=172.16.0.6 add comment=ip-sigasul distance=1 dst-address=177.73.253.59/32 gateway=172.16.0.6 add comment=ip-sigasul distance=1 dst-address=177.73.253.60/32 gateway=172.16.0.6 add comment=ip-sigasul distance=1 dst-address=177.73.253.61/32 gateway=172.16.0.6 add comment=ip-sigasul disabled=no distance=1 dst-address=177.73.253.62/32 gateway=172.16.0.6 routing-table=main scope=30 target-scope=10 add comment=ip-skoretech distance=1 dst-address=177.73.253.64/32 gateway=172.16.0.6 add comment=ip-plaslini distance=1 dst-address=177.73.253.65/32 gateway=172.16.0.6 add comment=ip-farmacia-geremias distance=1 dst-address=177.73.253.66/32 gateway=172.16.0.6 add distance=1 dst-address=177.73.253.254/32 gateway=172.16.0.18 scope=10 add comment="BGP GGNET RR1" distance=1 dst-address=177.155.141.254/32 gateway=172.23.52.33 add comment="BGP GGNET RR2" distance=1 dst-address=186.211.109.254/32 gateway=172.23.52.33 add disabled=yes distance=1 dst-address=45.190.175.145/32 gateway=172.16.0.22 pref-src="" routing-table=main scope=30 target-scope=10 add comment=rota-phpipam-iper distance=1 dst-address=192.168.5.52/32 gateway=172.16.0.2 add comment=rede-interna-atm distance=1 dst-address=192.168.40.0/24 gateway=172.16.0.2 add disabled=no distance=100 dst-address=0.0.0.0/0 gateway=172.23.52.33 pref-src="" routing-table=main scope=30 target-scope=10 add blackhole dst-address=177.73.253.0/24 add disabled=yes distance=1 dst-address=186.225.10.38/32 gateway=100.70.255.1 pref-src="" routing-table=main scope=30 target-scope=10 add comment=Sermatica disabled=no distance=1 dst-address=186.225.11.31/32 gateway=172.26.254.1 pref-src="" routing-table=main scope=30 target-scope=10 add disabled=yes distance=1 dst-address=191.191.39.20/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-tgs-sistemas disabled=no distance=1 dst-address=177.73.253.68/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-felipe-web disabled=no distance=1 dst-address=177.73.253.69/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=177.73.253.9/32 gateway=172.16.0.34 pref-src="" routing-table=main scope=30 target-scope=10 add disabled=yes distance=1 dst-address=170.0.121.18/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=30 target-scope=10 add comment=cartorio-goias-ip-algar disabled=yes distance=1 dst-address=189.15.0.40/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=30 target-scope=10 add disabled=yes distance=1 dst-address=45.190.175.145/32 gateway=172.26.254.1 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-cartorio-anta-gorda disabled=no distance=1 dst-address=177.73.253.71/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-teste-relootica disabled=no distance=1 dst-address=177.73.253.72/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-tm-midia-2 disabled=no distance=1 dst-address=177.73.253.75/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-tm-midia-2 disabled=no distance=1 dst-address=177.73.253.76/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=vpn-sermatica-via-unifique disabled=no distance=20 dst-address=200.203.128.0/18 gateway=172.30.63.245 pref-src="" routing-table=main scope=40 target-scope=10 add comment=contawil-campos-novos disabled=no distance=1 dst-address=131.108.12.59/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=40 target-scope=10 add comment=ip-vm-laerte disabled=no distance=1 dst-address=177.73.253.77/32 gateway=172.16.0.34 pref-src="" routing-table=main scope=30 target-scope=10 add comment=vpn-sermatica disabled=yes distance=20 dst-address=179.109.119.240/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=40 target-scope=10 add comment=ip-marcos-cartorio-goias disabled=no distance=1 dst-address=177.73.253.78/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-aguia-corretora disabled=no distance=1 dst-address=177.73.253.79/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-ccr-farmacias disabled=no distance=1 dst-address=177.73.253.251/32 gateway=172.16.0.38 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-produsoft disabled=no distance=1 dst-address=177.73.253.80/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=160.238.197.251/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=30 target-scope=10 add comment=cartorio-goias-ip-vivo disabled=no distance=1 dst-address=179.151.34.68/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=30 target-scope=10 add comment=pladisa-lages-bruna disabled=no distance=1 dst-address=179.186.198.153/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=30 target-scope=10 add comment="ip cn system" disabled=no distance=1 dst-address=177.73.253.83/32 gateway=172.16.0.34 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-lab-vida disabled=no distance=1 dst-address=177.73.253.84/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=mafercon disabled=no distance=1 dst-address=179.109.119.160/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=30 target-scope=10 add disabled=no distance=1 dst-address=45.191.187.36/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=30 target-scope=10 add comment="ip prefeitura calmon" disabled=no distance=1 dst-address=177.73.253.81/32 gateway=172.16.0.34 pref-src="" routing-table=main scope=30 target-scope=10 add comment="ip engegraph" disabled=no distance=1 dst-address=177.73.253.74/32 gateway=172.16.0.34 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-auryn disabled=no distance=1 dst-address=177.73.253.56/32 gateway=172.16.0.6 routing-table=main scope=30 target-scope=10 add comment=gerwal-via-unifique disabled=yes distance=20 dst-address=170.150.2.234/32 gateway=172.30.63.245 pref-src="" routing-table=main scope=40 target-scope=10 add comment=ip-iper disabled=no distance=1 dst-address=177.73.253.85/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-adesul disabled=no distance=1 dst-address=177.73.253.86/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-cartorio-reg-civ-tg disabled=no distance=1 dst-address=177.73.253.67/32 gateway=172.16.0.6 routing-table=main scope=30 target-scope=10 add comment=Sermatica disabled=yes distance=1 dst-address=177.173.25.254/32 gateway=172.26.254.1 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-sermatica-dedicado disabled=no distance=1 dst-address=177.73.253.87/32 gateway=172.16.0.6 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-lemon-play disabled=no distance=1 dst-address=177.73.253.43/32 gateway=172.16.0.34 pref-src="" routing-table=main scope=30 target-scope=10 add comment=ip-bmais disabled=no distance=1 dst-address=177.73.253.44/32 gateway=172.16.0.34 pref-src="" routing-table=main scope=30 target-scope=10 /ipv6 route add comment="BGP GGNET RR1" distance=1 dst-address=2804:3b0:8000:0:177:155:141:254/128 gateway=2804:3b0:8200:20c0::1 add comment="BGP GGNET RR2" distance=1 dst-address=2804:3b0:8000:0:186:211:109:254/128 gateway=2804:3b0:8200:20c0::1 add comment=peer-login distance=1 dst-address=2804:5e0c::100:127:255:255/128 gateway=2804:5e0c:0:1000:100:70:255:1 add blackhole dst-address=2804:7090::/32 /ip service set ftp disabled=yes set telnet disabled=yes set www disabled=yes set ssh port=2200 set api disabled=yes set api-ssl disabled=yes set winbox available-from=177.73.253.3/32,45.163.13.106/32,177.75.162.43/32,192.168.38.200/32 port=46837 /ip traffic-flow set sampling-interval=1 sampling-space=100 /ipv6 address add address=2804:7090::1/128 advertise=no interface=loopback add address=2804:7090:0:1000::1 advertise=no interface=vlan351-bgp-backup-telecom add address=2804:7090:0:1::1 advertise=no interface=ether3-router-dns add address=2804:7090:0:2::1 advertise=no interface=vlan2100-router-interno-v6 add address=2804:7090:0:3::1 advertise=no interface=ether5-router-servers-1 add address=2804:3b0:8200:20c0::2 advertise=no interface=vlan2312-bgp-ggnet add address=2804:e24::172:26:254:6/125 advertise=no interface=vlan3001-bgp-ultranet add address=2804:30c:4:80::23:2/112 advertise=no interface=vlan2387-bgp-unifique /ipv6 firewall address-list add address=2804:7090::/32 list=prefix-bgp-ipv6 /ipv6 nd # automatic dns option advertising is not started, re-apply dns config set [ find default=yes ] advertise-dns=yes /ppp secret add disabled=yes name=atmservidores password=Atm@servidores profile="Atm Ilimitado" remote-address=177.73.253.4 service=pppoe add disabled=yes name=atmemail password=Atm@email profile="Atm Ilimitado" remote-address=177.73.253.5 service=pppoe add disabled=yes name=atmweb password=Atm@web profile="Atm Ilimitado" remote-address=177.73.253.6 service=pppoe add name=sermatica1 password=Ser@server20 profile="Atm Ilimitado" remote-address=177.73.253.51 service=pppoe add name=sermatica2 password=Ser@server20 profile="Atm Ilimitado" remote-address=177.73.253.52 service=pppoe add name=sermatica3 password=Ser@server20 profile="Atm 40M" remote-address=177.73.253.53 service=pppoe add disabled=yes name=isaias password=isa@server20 profile="Atm 20M" remote-address=177.73.253.54 service=pppoe add disabled=yes name=atmservicores2 password=Atm@servidores2 profile="Atm Ilimitado" remote-address=177.73.253.7 service=pppoe add name=alm password=alm@server20 profile=Atm10M remote-address=177.73.253.55 service=pppoe add disabled=yes name=dns password=Atm@dns profile="Atm Ilimitado" remote-address=177.73.253.254 service=pppoe /queue simple add max-limit=1G/1G name=queue1 target=*F00008 add max-limit=1G/1G name=queue2 target=*F00009 /routing bgp connection add afi=ip connect=yes disabled=no input.filter=bkup-in-v4 instance=bgp-instance-1 listen=yes local.role=ebgp multihop=no name=peer_bkup_v4 output.filter-chain=bkup-out-v4 .network=prefix-bgp-ipv4 remote.address=172.16.0.130/32 .as=263119 routing-table=main templates=default add afi=ip connect=yes disabled=no input.filter=ggnet-in-v4 instance=bgp-instance-1 listen=yes local.address=172.23.52.34 .role=ebgp multihop=yes name=peer_ggnet_rr1_v4 output.filter-chain=ggnet-out-v4 .network=prefix-bgp-ipv4 remote.address=177.155.141.254/32 .as=53062 routing-table=main templates=default add afi=ip connect=yes disabled=no input.filter=ggnet-in-v4 instance=bgp-instance-1 listen=yes local.address=172.23.52.34 .role=ebgp multihop=yes name=peer_ggnet_rr2_v4 output.filter-chain=ggnet-out-v4 .network=prefix-bgp-ipv4 remote.address=186.211.109.254/32 .as=53062 routing-table=main templates=default add connect=yes disabled=no input.filter=ultranet-in-v4 instance=bgp-instance-1 listen=yes local.role=ebgp multihop=no name=peer_ultranet_lages_v4 output.filter-chain=ultranet-out-v4 remote.address=172.26.254.1/32 .as=262417 routing-table=main templates=default add connect=yes disabled=no input.filter=ultranet-in-v4 instance=bgp-instance-1 listen=yes local.role=ebgp multihop=no name=peer_ultranet_mcarlo_v4 output.filter-chain=ultranet-out-v4 .network=prefix-bgp-ipv4 remote.address=172.26.254.2/32 .as=262417 routing-table=main templates=default add afi=ip connect=yes disabled=no input.filter=infonet-in-v4 instance=bgp-instance-1 listen=yes local.role=ebgp multihop=no name=peer_infonet_v4 output.filter-chain=infonet-out-v4 .network=prefix-bgp-ipv4 remote.address=172.16.0.22/32 .as=268410 routing-table=main templates=default add afi=ipv6 connect=yes disabled=yes input.filter=bkup-in-v6 instance=bgp-instance-1 listen=yes local.role=ebgp multihop=no name=peer_bkup_v6 output.filter-chain=bkup-out-v6 .network=prefix-bgp-ipv6 remote.address=2804:7090:0:1000::2/128 .as=263119 routing-table=main templates=v6 add afi=ipv6 connect=yes disabled=no input.filter=ggnet-in-v6 instance=bgp-instance-1 listen=yes local.address=2804:3b0:8200:20c0::2 .role=ebgp multihop=yes name=peer_ggnet_rr1_v6 output.filter-chain=ggnet-out-v6 .network=prefix-bgp-ipv6 remote.address=2804:3b0:8000:0:177:155:141:254/128 .as=53062 routing-table=main templates=v6 add afi=ipv6 connect=yes disabled=no input.filter=ggnet-in-v6 instance=bgp-instance-1 listen=yes local.address=2804:3b0:8200:20c0::2 .role=ebgp multihop=yes name=peer_ggnet_rr2_v6 output.filter-chain=ggnet-out-v6 .network=prefix-bgp-ipv6 remote.address=2804:3b0:8000:0:186:211:109:254/128 .as=53062 routing-table=main templates=v6 add afi=ipv6 connect=yes disabled=no input.filter=ultranet-in-v6 instance=bgp-instance-1 listen=yes local.role=ebgp multihop=no name=peer_ultranet_v6_m_carlos output.filter-chain=ultranet-out-v6 .network=prefix-bgp-ipv6 remote.address=2804:e24::172:26:254:2/128 .as=262417 routing-table=main templates=v6 add connect=yes disabled=no input.filter=ultranet-in-v6 instance=bgp-instance-1 listen=yes local.role=ebgp multihop=no name=peer_ultranet_v6_lages output.filter-chain=ultranet-out-v6 .network=prefix-bgp-ipv6 remote.address=2804:e24::172:26:254:1/128 .as=262417 routing-table=main templates=v6 add afi=ip connect=yes disabled=no input.filter=unifique-in-v4 instance=bgp-instance-1 listen=yes local.address=172.30.63.246 .role=ebgp multihop=no name=peer_unifique_v4 output.filter-chain=unifique-out-v4 .network=prefix-bgp-ipv4 remote.address=172.30.63.245/32 .as=28343 routing-table=main templates=default add afi=ipv6 connect=yes disabled=no input.filter=unifique-in-v6 instance=bgp-instance-1 listen=yes local.address=2804:30c:4:80::23:2 .role=ebgp multihop=no name=peer_unifique_v6 output.filter-chain=unifique-out-v6 .network=prefix-bgp-ipv6 remote.address=2804:30c:4:80::23:1/128 .as=28343 routing-table=main templates=v6 /routing filter rule add chain=ggnet-out-v4 comment=------------------------- disabled=no rule="if (dst in 177.73.253.0/24 && dst-len==24) { accept; }" add chain=ggnet-out-v4 disabled=no rule="reject;" add chain=ggnet-in-v4 disabled=no rule="if (dst in 0.0.0.0/0 && dst-len==0) { set bgp-weight 100; accept; }" add chain=ggnet-in-v4 disabled=no rule="if (dst in 0.0.0.0/0 && dst-len in 1-24 && bgp-path-len ==1) { accept; }" add chain=ggnet-in-v4 disabled=no rule="reject;" add chain=ggnet-out-v6 disabled=no rule="if (dst in 2804:7090::/32 && dst-len==32) { accept; }" add chain=ggnet-out-v6 disabled=no rule="reject;" add chain=ggnet-in-v6 disabled=no rule="if (dst in ::/0 && dst-len==0) { set bgp-weight 100; accept; }" add chain=ggnet-in-v6 disabled=no rule="if (dst in ::/0 && dst-len in 1-48 && bgp-path-len ==1) { accept; }" add chain=ggnet-in-v6 disabled=no rule="reject;" add chain=unifique-out-v4 comment=------------------------- disabled=no rule="if (dst in 177.73.253.0/24 && dst-len==24) { accept; }" add chain=unifique-out-v4 disabled=no rule="reject;" add chain=unifique-in-v4 disabled=no rule="if (dst in 0.0.0.0/0 && dst-len==0) { set bgp-weight 90; accept; }" add chain=unifique-in-v4 disabled=no rule="if (dst in 0.0.0.0/0 && dst-len in 1-24 && bgp-path-len ==1) { accept; }" add chain=unifique-in-v4 disabled=no rule="reject;" add chain=unifique-out-v6 disabled=no rule="if (dst in 2804:7090::/32 && dst-len==32) { accept; }" add chain=unifique-out-v6 disabled=no rule="reject;" add chain=unifique-in-v6 disabled=no rule="if (dst in ::/0 && dst-len==0) { set bgp-weight 90; accept; }" add chain=unifique-in-v6 disabled=no rule="if (dst in ::/0 && dst-len in 1-48 && bgp-path-len ==1) { accept; }" add chain=unifique-in-v6 disabled=no rule="reject;" add chain=ultranet-out-v4 comment=----------------------------------- disabled=yes rule="if (dst in 177.73.253.0/24 && dst-len==24) { accept; }" add chain=ultranet-out-v4 disabled=yes rule="reject;" add chain=ultranet-in-v4 disabled=yes rule="if (dst in 0.0.0.0/0 && dst-len==0) { set bgp-weight 80; accept; }" add chain=ultranet-in-v4 disabled=yes rule="if (dst in 0.0.0.0/0 && dst-len in\_1-24 && bgp-path-len ==1) { accept; }" add chain=ultranet-in-v4 disabled=yes rule="reject;" add chain=ultranet-out-v6 disabled=yes rule="if (dst in 2804:7090::/32 && dst-len==32) { accept; }" add chain=ultranet-out-v6 disabled=yes rule="reject;" add chain=ultranet-in-v6 disabled=yes rule="if (dst in ::/0 && dst-len==0) { set bgp-weight 80; accept; }" add chain=ultranet-in-v6 disabled=yes rule="if (dst in ::/0 && dst-len in 1-48 && bgp-path-len ==1) { accept; }" add chain=ultranet-in-v6 disabled=yes rule="reject;" add chain=bkup-out-v4 comment=----------------------------------- disabled=no rule="if (dst in 177.73.253.0/24 && dst-len==24) { accept; }" add chain=bkup-out-v4 disabled=no rule="reject;" add chain=bkup-in-v4 disabled=yes rule="if (dst in 0.0.0.0/0 && dst-len==0) { set bgp-weight 70; accept; }" add chain=bkup-in-v4 disabled=no rule="if (dst in 0.0.0.0/0 && dst-len in 1-24\_&& bgp-path-len ==1) { accept; }" add chain=bkup-in-v4 disabled=no rule="reject;" add chain=bkup-out-v6 disabled=no rule="if (dst in 2804:7090::/32 && dst-len==32) { accept; }" add chain=bkup-out-v6 disabled=no rule="reject;" add chain=bkup-in-v6 disabled=yes rule="if (dst in ::/0 && dst-len==0) { set bgp-weight 70; accept; }" add chain=bkup-in-v6 disabled=no rule="if (dst in ::/0 && dst-len in 1-48 && bgp-path-len ==1) { accept; }" add chain=bkup-in-v6 disabled=no rule="reject;" add chain=infonet-out-v4 comment=----------------------------------- disabled=no rule="if (dst in 177.73.253.0/24 && dst-len==24) { accept; }" add chain=infonet-out-v4 disabled=no rule="reject;" add chain=infonet-in-v4 disabled=no rule="if (dst in 0.0.0.0/0) { set distance 30; accept; }" add chain=infonet-in-v4 disabled=no rule="if (dst in 0.0.0.0/0 && dst-len in 1-24 && bgp-path-len ==1) { accept; }" add chain=infonet-in-v4 disabled=no rule="reject;" /routing ospf interface-template add area=area-0 cost=10 disabled=no interfaces=ether3-router-dns priority=1 type=ptp add area=area-0 cost=10 disabled=no interfaces=ether5-router-servers-1 priority=1 type=ptp add area=area-0 cost=10 disabled=no interfaces=vlan2100-router-interno-v6 priority=1 type=ptp add area=area-0 cost=10 disabled=no interfaces=ether11-router-servers-2 priority=1 type=ptp /snmp set contact=noc@iper.net.br enabled=yes location=br-sc-vii-vinhedo /system clock set time-zone-name=America/Sao_Paulo /system identity set name=atm-router-bgp /system logging set 0 action=echo set 1 action=echo set 2 action=echo add action=iper topics=info,!firewall /system ntp client set enabled=yes /system ntp client servers add address=200.144.121.33 add address=10.10.10.1 /system routerboard settings set enter-setup-on=delete-key /system scheduler add !days interval=1d name=script_backup_email on-event=script_backup_email policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=1970-01-01 start-time=03:30:00 add !days interval=1d name=script_backup_ftp on-event=script_backup_ftp policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=1970-01-01 start-time=03:00:00 add !days name=netsync237 on-event=netsync237 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2026-09-15 start-time=23:52:56 /tool e-mail set certificate-verification=no from=envia.bkp@iper.net.br password=Iper@2022 port=587 server=45.163.12.11 tls=starttls user=envia.bkp@iper.net.br