# version: 7.24.4 (stable) # minimum-version: 6.44 # total-memory: 64.0MiB # cpu: MIPS 24Kc V7.4 # cpu-count: 1 # total-hdd-space: 16.0MiB # architecture-name: mipsbe # board-name: hEX lite # platform: MikroTik # installed-version: 7.24.4 # # software id = SKK0-CQKZ # # model = RB750r2 # serial number = AA840BAC0039 /interface bridge add name=loopback port-cost-mode=short protocol-mode=none /interface ethernet set [ find default-name=ether1 ] comment="Wan DNS" set [ find default-name=ether2 ] comment=Gerenciamento /interface vlan add interface=ether2 name="vlan 4 Gerenciamento" vlan-id=4 add interface=ether2 name=vlan85 vlan-id=85 /interface lte apn set [ find default=yes ] ip-type=ipv4 use-network-apn=no /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip pool add name=dhcp_pool0 ranges=192.168.156.108-192.168.156.110 /routing ospf instance add disabled=no name=default-v2 add disabled=no name=default-v3 redistribute=connected,static,vpn,dhcp,modem router-id=177.73.253.254 version=3 /routing ospf area add disabled=yes instance=default-v2 name=backbone-v2 add disabled=no instance=default-v3 name=backbone-v3 /snmp community set [ find default=yes ] name=ipermonitor /system logging action add name=iper remote=10.10.10.69 src-address=177.73.253.254 target=remote /system script add dont-require-permissions=no name=script_backup_ftp owner=iper policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":log info \"Iniciado Backup FTP\"\r\nexport file=backup-ftp\r\n/tool fetch address=ftp.iper.net.br port=8021 src-path=backup-ftp.rsc user=bkp.atm mode=ftp password=atm.bkp dst-path=([/system identity get name].\".rsc\") upload=yes\r\n:log info \"Terminado Backup FTP\"\r\n" add dont-require-permissions=no name=script_backup_email owner=iper policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":log info \"Inciando Backup Email\"\r\nexport file=backup-email\r\n/tool e-mail send to=\"bkp.rb@iper.net.br\" subject=\"\$[/system identity get name]\" body=\"\$[/system clock get date]\" file=\"backup-email.rsc\"\r\n:log info \"Terminado Backup Email\"\r\n" add dont-require-permissions=no name=autoupdate200 owner=0 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/system package update download; /system package update install" /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=!dynamic /ip settings set max-neighbor-entries=8192 /ipv6 settings set disable-ipv6=yes max-neighbor-entries=8192 /interface ovpn-server server add auth=sha1,md5 mac-address=FE:93:2A:F3:23:59 name=ovpn-server1 /ip address add address=192.168.50.248/24 interface="vlan 4 Gerenciamento" network=192.168.50.0 add address=177.73.253.254 interface=loopback network=177.73.253.254 add address=172.16.0.18/30 interface=ether1 network=172.16.0.16 add address=192.168.156.107/29 interface=vlan85 network=192.168.156.104 /ip dhcp-server add address-pool=dhcp_pool0 disabled=yes interface=vlan85 lease-time=10m name=dhcp1 /ip dhcp-server network add address=192.168.156.104/29 gateway=192.168.156.105 /ip dns set allow-remote-requests=yes cache-size=6500KiB servers=8.8.8.8,1.1.1.1 /ip firewall filter add action=accept chain=input dst-port=53 protocol=udp src-address=172.16.0.17 add action=drop chain=input dst-port=53 protocol=udp src-address=!177.73.253.0/24 add action=drop chain=input dst-port=53 protocol=tcp src-address=!177.73.253.0/24 add action=accept chain=input disabled=yes dst-port=53 protocol=udp src-address=177.73.253.0/24 add action=accept chain=input disabled=yes dst-port=53 protocol=tcp src-address=177.73.253.0/24 add action=drop chain=input disabled=yes dst-port=53 protocol=udp add action=drop chain=input disabled=yes dst-port=53 protocol=tcp /ip firewall nat add action=redirect chain=dstnat disabled=yes dst-port=53 protocol=udp to-ports=53 add action=redirect chain=dstnat disabled=yes dst-port=53 protocol=tcp to-ports=53 /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add disabled=no distance=5 dst-address=0.0.0.0/0 gateway=172.16.0.17 pref-src=177.73.253.254 /ipv6 route add disabled=no dst-address=::/0 gateway=2804:7090:0:1::1 /ip service set ftp disabled=yes set telnet disabled=yes set www disabled=yes set ssh port=2200 set api disabled=yes set api-ssl disabled=yes set winbox available-from=192.168.0.0/16,177.75.162.43/32,45.163.13.106/32 port=46837 /ipv6 address add address=2804:7090:0:1::2 advertise=no interface=ether1 add address=2804:7090::177:73:253:254/128 advertise=no interface=loopback /routing bfd configuration add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5 add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5 /routing ospf interface-template add area=backbone-v3 cost=10 disabled=no interfaces=ether1 priority=1 type=ptp use-bfd=no /snmp set contact=noc@iper.net.br enabled=yes location=br-sc-vii-vinhedo /system clock set time-zone-name=America/Sao_Paulo /system identity set name=atm-router-dns /system logging set 0 action=echo set 1 action=echo set 2 action=echo add action=iper topics=info,!firewall /system note set show-at-login=no /system ntp client set enabled=yes /system ntp client servers add address=200.160.0.8 add address=200.144.121.33 /system scheduler add !days interval=1d name=script_backup_email on-event=script_backup_email policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=1970-01-01 start-time=03:30:00 add !days interval=1d name=script_backup_ftp on-event=script_backup_ftp policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=1970-01-01 start-time=03:00:00 add !days name=autoupdate200 on-event=autoupdate200 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=2026-09-17 start-time=20:00:45 /tool e-mail set certificate-verification=no from=envia.bkp@iper.net.br password=Iper@2022 port=587 server=45.163.12.11 tls=starttls user=envia.bkp@iper.net.br