#             version: 6.49.13 (long-term)
#        total-memory: 1984.0MiB
#                 cpu: tilegx
#           cpu-count: 9
#     total-hdd-space: 128.0MiB
#   architecture-name: tile
#          board-name: CCR1009-8G-1S-1S+
#            platform: MikroTik
#   installed-version: 6.49.13
# Flags: U - undoable, R - redoable, F - floating-undo
#   ACTION                                   BY               POLICY
# U log action changed                       usr_jeVThK       write
# U log action changed                       usr_jeVThK       write
# U user usr_jeVThK removed                  usr_jeVThK       write
#                                                             policy
# U script removed from scheduler            usr_jeVThK       write
# U ssh settings changed                     usr_jeVThK       write
# U user usr_jeVThK added                    0                write
#                                                             policy
# U new script scheduled                     0                write
# U device changed                           iper             write
# U route changed                            iper             write
# U address changed                          iper             write
# U route changed                            iper             write
# U route changed                            iper             write
# U device changed                           iper             write
# U address changed                          iper             write
# U address changed                          iper             write
# U address added                            iper             write
# U address added                            iper             write
# U address added                            iper             write
# U address added                            iper             write
# U bridge port added                        iper             write
# U bridge port added                        iper             write
# U bridge port added                        iper             write
# U bridge port added                        iper             write
# U bridge port added                        iper             write
# U device added                             iper             write
# U device added                             iper             write
# U address added                            iper             write
# U device added                             iper             write
# 
# software id = H67A-M2F9
#
# model = CCR1009-8G-1S-1S+
# serial number = 606F0494F373
/interface bridge
add mtu=1500 name=bridge-liderfarma
add name=loopback
/interface ethernet
set [ find default-name=ether1 ] name=ether1-to-router-bgp-atm-eth2
set [ find default-name=ether2 ] name=ether2-link-sw-ggnet
set [ find default-name=ether3 ] comment="bridge lider farma Host 245"
set [ find default-name=ether4 ] comment="bridge lider farma Host 243"
set [ find default-name=ether5 ] comment="bridge lider farma Host 242"
set [ find default-name=ether6 ] comment="bridge lider farma Host 241"
set [ find default-name=ether7 ] comment="bridge lider farma Host 240"
/interface eoip
add local-address=177.75.172.133 mac-address=02:DD:6A:29:37:32 name=eoip-amarante remote-address=177.75.162.38 tunnel-id=10
add local-address=177.73.253.251 mac-address=02:DD:6A:29:37:32 name=eoip-amarante-bkp remote-address=177.75.162.38 tunnel-id=1010
add local-address=177.75.172.133 mac-address=02:D5:10:11:F0:47 name=eoip-cacador-esperanca remote-address=177.155.128.78 tunnel-id=30
add local-address=177.73.253.251 mac-address=02:D5:10:11:F0:47 name=eoip-cacador-esperanca-bkp remote-address=177.155.128.78 tunnel-id=1030
add local-address=177.75.172.133 mac-address=02:37:80:93:2F:88 name=eoip-cacador-ipiranga remote-address=177.155.128.62 tunnel-id=99
add local-address=177.73.253.251 mac-address=02:37:80:93:2F:88 name=eoip-cacador-ipiranga-bkp remote-address=177.155.128.62 tunnel-id=1099
add local-address=177.75.172.133 mac-address=02:A1:35:AB:26:44 name=eoip-cacador-lider-popular remote-address=177.155.135.6 tunnel-id=42
add local-address=177.73.253.251 mac-address=02:A1:35:AB:26:44 name=eoip-cacador-lider-popular-bkp remote-address=177.155.135.6 tunnel-id=1042
add local-address=177.75.172.133 mac-address=02:A1:35:AB:26:44 name=eoip-cacador-martello remote-address=177.155.135.78 tunnel-id=37
add local-address=177.73.253.251 mac-address=02:A1:35:AB:26:44 name=eoip-cacador-martello-bkp remote-address=177.155.135.78 tunnel-id=1037
add local-address=177.75.172.133 mac-address=02:74:13:B6:16:44 name=eoip-cacador-santa-maria remote-address=177.155.135.196 tunnel-id=11
add local-address=177.73.253.251 mac-address=02:74:13:B6:16:44 name=eoip-cacador-santa-maria-bkp remote-address=177.155.135.196 tunnel-id=1011
add local-address=177.75.172.133 mac-address=02:71:73:0F:9D:7B name=eoip-cacador-super-pao remote-address=177.155.128.68 tunnel-id=9
add local-address=177.73.253.251 mac-address=02:71:73:0F:9D:7B name=eoip-cacador-super-pao-bkp remote-address=177.155.128.68 tunnel-id=1009
add local-address=177.75.172.133 mac-address=02:74:13:B6:16:44 name=eoip-centralfarma-shopping remote-address=168.90.168.83 tunnel-id=41
add local-address=177.73.253.251 mac-address=02:74:13:B6:16:44 name=eoip-centralfarma-shopping-bkp remote-address=168.90.168.83 tunnel-id=1041
add local-address=177.75.172.133 mac-address=02:48:5A:F2:8C:C2 name=eoip-frai-av-curitibanos remote-address=168.90.168.81 tunnel-id=25
add local-address=177.73.253.251 mac-address=02:48:5A:F2:8C:C2 name=eoip-frai-av-curitibanos-bkp remote-address=168.90.168.81 tunnel-id=1025
add local-address=177.73.253.251 mac-address=02:48:5A:F2:8C:C2 mtu=1500 name=eoip-frai-av-curitibanos-novo remote-address=177.155.253.175 tunnel-id=225
add local-address=177.75.172.133 mac-address=02:2E:65:E9:14:57 name=eoip-frai-centro remote-address=168.90.168.82 tunnel-id=32
add local-address=177.73.253.251 mac-address=02:2E:65:E9:14:57 name=eoip-frai-centro-bkp remote-address=168.90.168.82 tunnel-id=1032
add local-address=177.75.172.133 mac-address=02:99:5E:9B:A5:99 name=eoip-frai-viza remote-address=177.75.162.60 tunnel-id=8
add local-address=177.73.253.251 mac-address=02:99:5E:9B:A5:99 name=eoip-frai-viza-bkp remote-address=177.75.162.60 tunnel-id=1008
add local-address=177.75.172.133 mac-address=02:2E:65:E9:14:57 name=eoip-iomere remote-address=168.90.168.80 tunnel-id=15
add local-address=177.73.253.251 mac-address=02:2E:65:E9:14:57 name=eoip-iomere-bkp remote-address=168.90.168.80 tunnel-id=1015
add local-address=177.75.172.133 mac-address=02:65:D8:F6:1D:E6 mtu=1500 name=eoip-lebon-regis remote-address=177.155.135.30 tunnel-id=39
add local-address=177.73.253.251 mac-address=02:65:D8:F6:1D:E6 mtu=1500 name=eoip-lebon-regis-bkp remote-address=177.155.135.30 tunnel-id=1039
add local-address=177.75.172.133 mac-address=02:71:73:0F:9D:7B name=eoip-lider-dois-trevos remote-address=177.75.162.68 tunnel-id=5
add local-address=177.73.253.251 mac-address=02:71:73:0F:9D:7B name=eoip-lider-dois-trevos-bkp remote-address=177.75.162.68 tunnel-id=1005
add local-address=177.75.172.133 mac-address=02:74:13:B6:16:44 name=eoip-lider-dom-pedro remote-address=168.90.168.85 tunnel-id=4
add local-address=177.73.253.251 mac-address=02:74:13:B6:16:44 name=eoip-lider-dom-pedro-bkp remote-address=168.90.168.85 tunnel-id=1004
add allow-fast-path=no local-address=177.75.172.133 mac-address=02:B4:17:9E:A8:2C name=eoip-lider-floresta remote-address=177.75.161.227 tunnel-id=71
add allow-fast-path=no local-address=177.73.253.251 mac-address=02:B4:17:9E:A8:2C name=eoip-lider-floresta-bkp remote-address=177.75.161.227 tunnel-id=1071
add local-address=177.75.172.133 mac-address=02:B0:30:DA:4E:52 name=eoip-lider-joao-zardo remote-address=168.90.168.91 tunnel-id=35
add local-address=177.73.253.251 mac-address=02:B0:30:DA:4E:52 name=eoip-lider-joao-zardo-bkp remote-address=168.90.168.91 tunnel-id=1035
add local-address=177.75.172.133 mac-address=02:74:13:B6:16:44 name=eoip-lider-lauro-muller remote-address=168.90.168.86 tunnel-id=38
add local-address=177.73.253.251 mac-address=02:74:13:B6:16:44 name=eoip-lider-lauro-muller-bkp remote-address=168.90.168.86 tunnel-id=1038
add local-address=177.75.172.133 mac-address=02:19:BB:B3:8F:1E name=eoip-lider-pedro-andreazza remote-address=177.155.128.67 tunnel-id=2867
add local-address=177.73.253.251 mac-address=02:19:BB:B3:8F:1E name=eoip-lider-pedro-andreazza-bkp remote-address=177.155.128.67 tunnel-id=1867
add allow-fast-path=no local-address=177.75.172.133 mac-address=02:B4:17:9E:A8:2C name=eoip-lider-treze-tilias-2 remote-address=45.190.175.155 tunnel-id=169
add allow-fast-path=no local-address=177.73.253.251 mac-address=02:B4:17:9E:A8:2C name=eoip-lider-treze-tilias-2-bkp remote-address=45.190.175.155 tunnel-id=1169
add local-address=177.75.172.133 mac-address=02:74:13:B6:16:44 name=eoip-lidercosmeticos-saul remote-address=168.90.168.84 tunnel-id=100
add local-address=177.73.253.251 mac-address=02:74:13:B6:16:44 name=eoip-lidercosmeticos-saul-bkp remote-address=168.90.168.84 tunnel-id=1100
add local-address=177.75.172.133 mac-address=02:2E:65:E9:14:57 name=eoip-pinheiro-preto remote-address=168.90.168.79 tunnel-id=33
add local-address=177.73.253.251 mac-address=02:2E:65:E9:14:57 name=eoip-pinheiro-preto-bkp remote-address=168.90.168.79 tunnel-id=1033
add local-address=177.75.172.133 mac-address=02:FF:46:A3:B1:6C name=eoip-praca remote-address=168.90.168.112 tunnel-id=2
add local-address=177.73.253.251 mac-address=02:FF:46:A3:B1:6C name=eoip-praca-bkp remote-address=168.90.168.112 tunnel-id=1002
add local-address=177.75.172.133 mac-address=02:15:8F:FB:06:E9 name=eoip-rio-das-antas remote-address=177.155.135.17 tunnel-id=43
add local-address=177.73.253.251 mac-address=02:15:8F:FB:06:E9 name=eoip-rio-das-antas-bkp remote-address=177.155.135.17 tunnel-id=1043
add local-address=177.75.172.133 mac-address=02:DC:8B:21:26:36 name=eoip-rio-das-pedras remote-address=168.90.168.88 tunnel-id=31
add local-address=177.73.253.251 mac-address=02:DC:8B:21:26:36 name=eoip-rio-das-pedras-bkp remote-address=168.90.168.88 tunnel-id=1031
add local-address=177.75.172.133 mac-address=02:DD:6A:29:37:32 name=eoip-santa-lucia remote-address=177.75.160.214 tunnel-id=13
add local-address=177.73.253.251 mac-address=02:DD:6A:29:37:32 name=eoip-santa-lucia-bkp remote-address=177.75.160.214 tunnel-id=1013
add local-address=177.75.172.133 mac-address=02:B4:17:9E:A8:2C name=eoip-treze-tilias remote-address=177.155.128.250 tunnel-id=20
add local-address=177.73.253.251 mac-address=02:B4:17:9E:A8:2C name=eoip-treze-tilias-bkp remote-address=177.155.128.250 tunnel-id=1020
add local-address=177.75.172.133 mac-address=02:2E:65:E9:14:57 name=eoip-universitario remote-address=177.75.160.182 tunnel-id=3
add local-address=177.73.253.251 mac-address=02:2E:65:E9:14:57 name=eoip-universitario-bkup remote-address=177.75.160.182 tunnel-id=1003
/interface vlan
add interface=bridge-liderfarma name=vlan10-gerencias-hosts vlan-id=10
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ppp profile
set *0 use-encryption=no use-upnp=no
add change-tcp-mss=yes local-address=192.168.254.1 name=profile-lider use-encryption=no use-upnp=no
add change-tcp-mss=yes dns-server=177.75.161.22,8.8.8.8 local-address=10.0.0.1 name=Lider use-encryption=no use-upnp=no
/queue simple
add max-limit=50M/50M name=queue-link-atm target=ether1-to-router-bgp-atm-eth2
/routing ospf instance
set [ find default=yes ] router-id=177.75.172.133
/snmp community
set [ find default=yes ] addresses=177.75.161.12/32,177.73.253.0/24,192.168.50.200/32,10.0.0.254/32 name=observium
add addresses=::/0 name=atmonitor
add addresses=::/0 name=ipermonitor
/system logging action
add name=iper remote=45.163.13.106 remote-port=8514 src-address=177.75.172.133 target=remote
add name=atm remote=177.73.253.4 target=remote
/user group
set read policy="local,telnet,ssh,reboot,read,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp,!ftp,!write,!policy"
/interface bridge port
add bridge=bridge-liderfarma interface=ether3
add bridge=bridge-liderfarma interface=ether4
add bridge=bridge-liderfarma interface=ether5
add bridge=bridge-liderfarma interface=ether6
add bridge=bridge-liderfarma interface=ether7
/ip neighbor discovery-settings
set discover-interface-list=all
/interface l2tp-server server
set authentication=mschap1,mschap2 enabled=yes ipsec-secret="V*\"l\\tjY850;~}9" use-ipsec=yes
/interface pptp-server server
set authentication=chap,mschap1,mschap2 enabled=yes keepalive-timeout=10 max-mru=1500 max-mtu=1500
/ip address
add address=172.22.0.62/30 interface=ether2-link-sw-ggnet network=172.22.0.60
add address=192.168.253.1/30 interface=eoip-universitario network=192.168.253.0
add address=192.168.252.1/30 interface=eoip-praca network=192.168.252.0
add address=192.168.233.1/30 interface=eoip-pinheiro-preto network=192.168.233.0
add address=192.168.215.1/30 interface=eoip-iomere network=192.168.215.0
add address=192.168.225.1/30 interface=eoip-frai-av-curitibanos network=192.168.225.0
add address=192.168.232.1/30 interface=eoip-frai-centro network=192.168.232.0
add address=192.168.241.1/30 interface=eoip-centralfarma-shopping network=192.168.241.0
add address=192.168.245.1/30 interface=eoip-amarante network=192.168.245.0
add address=192.168.204.1/30 interface=eoip-lider-dom-pedro network=192.168.204.0
add address=192.168.238.1/30 interface=eoip-lider-lauro-muller network=192.168.238.0
add address=192.168.231.1/30 interface=eoip-rio-das-pedras network=192.168.231.0
add address=192.168.235.1/30 interface=eoip-lider-joao-zardo network=192.168.235.0
add address=192.168.240.1/30 interface=eoip-lider-pedro-andreazza network=192.168.240.0
add address=192.168.230.1/30 interface=eoip-cacador-esperanca network=192.168.230.0
add address=192.168.205.1/30 interface=eoip-lider-dois-trevos network=192.168.205.0
add address=192.168.220.1/30 interface=eoip-treze-tilias network=192.168.220.0
add address=192.168.239.1/30 interface=eoip-lebon-regis network=192.168.239.0
add address=192.168.237.1/30 interface=eoip-cacador-martello network=192.168.237.0
add address=192.168.242.1/30 interface=eoip-cacador-lider-popular network=192.168.242.0
add address=192.168.243.1/30 interface=eoip-rio-das-antas network=192.168.243.0
add address=192.168.244.1/30 interface=eoip-cacador-ipiranga network=192.168.244.0
add address=192.168.236.1/30 interface=eoip-cacador-super-pao network=192.168.236.0
add address=192.168.101.1/30 interface=eoip-lidercosmeticos-saul network=192.168.101.0
add address=192.168.211.1/30 interface=eoip-frai-viza network=192.168.211.0
add address=192.168.246.1/30 interface=eoip-cacador-santa-maria network=192.168.246.0
add address=192.168.214.1/30 interface=eoip-santa-lucia network=192.168.214.0
add address=192.168.169.1/30 interface=eoip-lider-treze-tilias-2 network=192.168.169.0
add address=192.168.171.1/30 interface=eoip-lider-floresta network=192.168.171.0
add address=172.16.0.38/30 interface=ether1-to-router-bgp-atm-eth2 network=172.16.0.36
add address=192.168.253.5/30 interface=eoip-universitario-bkup network=192.168.253.4
add address=192.168.252.5/30 interface=eoip-praca-bkp network=192.168.252.4
add address=192.168.246.5/30 interface=eoip-cacador-santa-maria-bkp network=192.168.246.4
add address=192.168.245.5/30 interface=eoip-amarante-bkp network=192.168.245.4
add address=192.168.244.5/30 interface=eoip-cacador-ipiranga-bkp network=192.168.244.4
add address=192.168.243.5/30 interface=eoip-rio-das-antas-bkp network=192.168.243.4
add address=192.168.242.5/30 interface=eoip-cacador-lider-popular-bkp network=192.168.242.4
add address=192.168.241.5/30 interface=eoip-centralfarma-shopping-bkp network=192.168.241.4
add address=192.168.240.5/30 interface=eoip-lider-pedro-andreazza-bkp network=192.168.240.4
add address=192.168.239.5/30 interface=eoip-lebon-regis-bkp network=192.168.239.4
add address=192.168.238.5/30 interface=eoip-lider-lauro-muller-bkp network=192.168.238.4
add address=192.168.237.5/30 interface=eoip-cacador-martello-bkp network=192.168.237.4
add address=192.168.236.5/30 interface=eoip-cacador-super-pao-bkp network=192.168.236.4
add address=192.168.235.5/30 interface=eoip-lider-joao-zardo-bkp network=192.168.235.4
add address=192.168.233.5/30 interface=eoip-pinheiro-preto-bkp network=192.168.233.4
add address=192.168.232.5/30 interface=eoip-frai-centro-bkp network=192.168.232.4
add address=192.168.231.5/30 interface=eoip-rio-das-pedras-bkp network=192.168.231.4
add address=192.168.230.5/30 interface=eoip-cacador-esperanca-bkp network=192.168.230.4
add address=192.168.225.5/30 interface=eoip-frai-av-curitibanos-bkp network=192.168.225.4
add address=192.168.220.5/30 interface=eoip-treze-tilias-bkp network=192.168.220.4
add address=192.168.215.5/30 interface=eoip-iomere-bkp network=192.168.215.4
add address=192.168.214.5/30 interface=eoip-santa-lucia-bkp network=192.168.214.4
add address=192.168.211.5/30 interface=eoip-frai-centro-bkp network=192.168.211.4
add address=192.168.205.5/30 interface=eoip-lider-dois-trevos-bkp network=192.168.205.4
add address=192.168.204.5/30 interface=eoip-lider-dom-pedro-bkp network=192.168.204.4
add address=192.168.171.5/30 interface=eoip-lider-floresta-bkp network=192.168.171.4
add address=192.168.169.5/30 interface=eoip-lider-treze-tilias-2-bkp network=192.168.169.4
add address=192.168.101.5/30 interface=eoip-lidercosmeticos-saul-bkp network=192.168.101.4
add address=192.168.225.9/30 interface=eoip-frai-av-curitibanos-novo network=192.168.225.8
add address=177.75.172.133 interface=loopback network=177.75.172.133
add address=10.0.0.1/24 interface=bridge-liderfarma network=10.0.0.0
add address=10.10.10.1/24 interface=vlan10-gerencias-hosts network=10.10.10.0
add address=10.1.1.1/24 interface=bridge-liderfarma network=10.1.1.0
add address=177.73.253.251 interface=loopback network=177.73.253.251
/ip dns
set servers=187.85.152.10,187.85.152.11
/ip firewall address-list
add address=186.250.186.157 list=orya-acesso
add address=45.175.1.178 list=orya-acesso
add address=54.207.60.242 list=orya-acesso
/ip firewall nat
add action=src-nat chain=srcnat src-address=192.168.254.0/24 to-addresses=177.75.172.133
add action=src-nat chain=srcnat src-address=10.0.0.0/24 to-addresses=177.75.172.133
add action=src-nat chain=srcnat src-address=10.1.1.0/24 to-addresses=177.75.172.133
add action=src-nat chain=srcnat src-address=10.10.10.0/24 to-addresses=177.75.172.133
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=5432 protocol=tcp src-address-list=orya-acesso to-addresses=10.0.0.144
add action=dst-nat chain=dstnat comment="TS wagner vitamedica" dst-port=33002 protocol=tcp to-addresses=10.0.0.144 to-ports=3389
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=3281 protocol=tcp to-addresses=10.1.1.100
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=8088 protocol=tcp to-addresses=10.0.0.100 to-ports=80
add action=dst-nat chain=dstnat disabled=yes dst-address=177.75.172.133 dst-port=9532 protocol=tcp to-addresses=10.1.1.39 to-ports=5432
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10003 protocol=tcp to-addresses=10.1.1.3 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10004 protocol=tcp to-addresses=10.1.1.4 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10005 protocol=tcp to-addresses=10.1.1.5 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10006 protocol=tcp to-addresses=10.1.1.6 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10007 protocol=tcp to-addresses=10.1.1.7 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10008 protocol=tcp to-addresses=10.1.1.8 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10009 protocol=tcp to-addresses=10.1.1.9 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10010 protocol=tcp to-addresses=10.1.1.10 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10011 protocol=tcp to-addresses=10.1.1.11 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10012 protocol=tcp to-addresses=10.1.1.12 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10014 protocol=tcp to-addresses=10.1.1.14 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10015 protocol=tcp to-addresses=10.1.1.15 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10020 protocol=tcp to-addresses=10.1.1.20 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10025 protocol=tcp to-addresses=10.1.1.25 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10030 protocol=tcp to-addresses=10.1.1.30 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10032 protocol=tcp to-addresses=10.1.1.32 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10033 protocol=tcp to-addresses=10.1.1.33 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10037 protocol=tcp to-addresses=10.1.1.37 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10038 protocol=tcp to-addresses=10.1.1.38 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10039 protocol=tcp to-addresses=10.1.1.39 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10040 protocol=tcp to-addresses=10.1.1.40 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10041 protocol=tcp to-addresses=10.1.1.41 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10042 protocol=tcp to-addresses=10.1.1.42 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10043 protocol=tcp to-addresses=10.1.1.43 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10044 protocol=tcp to-addresses=10.1.1.44 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10050 protocol=tcp to-addresses=10.1.1.50 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10069 protocol=tcp to-addresses=10.1.1.69 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10071 protocol=tcp to-addresses=10.1.1.71 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10100 protocol=tcp to-addresses=10.1.1.100 to-ports=4647
add action=dst-nat chain=dstnat dst-address=177.75.172.133 dst-port=10110 protocol=tcp to-addresses=10.1.1.110 to-ports=4647
/ip firewall raw
add action=drop chain=prerouting dst-address=10.10.10.0/24 src-address=10.0.0.0/24
/ip route
add check-gateway=ping distance=120 gateway=172.16.0.37 routing-mark=atm
add check-gateway=ping distance=120 gateway=172.16.0.37
add distance=1 dst-address=177.73.186.58/32 gateway=172.22.0.61 pref-src=177.75.172.133
add check-gateway=ping comment=lidercosmeticos-saul-brandalise distance=1 dst-address=192.168.0.0/24 gateway=192.168.101.2
add check-gateway=ping comment=lidercosmeticos-saul-brandalise distance=10 dst-address=192.168.0.0/24 gateway=192.168.101.6
add check-gateway=ping comment=praca distance=1 dst-address=192.168.2.0/24 gateway=192.168.252.2
add check-gateway=ping comment=praca distance=10 dst-address=192.168.2.0/24 gateway=192.168.252.6
add check-gateway=ping comment=universidade distance=1 dst-address=192.168.3.0/24 gateway=192.168.253.2
add check-gateway=ping comment=universidade distance=10 dst-address=192.168.3.0/24 gateway=192.168.253.6
add check-gateway=ping comment=formulas distance=1 dst-address=192.168.4.0/24 gateway=192.168.204.2
add check-gateway=ping comment=formulas distance=10 dst-address=192.168.4.0/24 gateway=192.168.204.6
add check-gateway=ping comment=dois-trevos distance=1 dst-address=192.168.5.0/24 gateway=192.168.205.2
add check-gateway=ping comment=dois-trevos distance=10 dst-address=192.168.5.0/24 gateway=192.168.205.6
add check-gateway=ping comment="cacador super pao" distance=1 dst-address=192.168.9.0/24 gateway=192.168.236.2
add check-gateway=ping comment="cacador super pao" distance=10 dst-address=192.168.9.0/24 gateway=192.168.236.6
add check-gateway=ping comment=amarante distance=1 dst-address=192.168.10.0/24 gateway=192.168.245.2
add check-gateway=ping comment=amarante distance=10 dst-address=192.168.10.0/24 gateway=192.168.245.6
add check-gateway=ping comment="fraiburgo lider viza" distance=1 dst-address=192.168.11.0/24 gateway=192.168.211.2
add check-gateway=ping comment="fraiburgo lider viza" distance=10 dst-address=192.168.11.0/24 gateway=192.168.211.6
add check-gateway=ping comment="cacador santa maria" distance=1 dst-address=192.168.12.0/24 gateway=192.168.246.2
add check-gateway=ping comment="cacador santa maria" distance=10 dst-address=192.168.12.0/24 gateway=192.168.246.6
add check-gateway=ping comment="santa lucia" distance=1 dst-address=192.168.14.0/24 gateway=192.168.214.2
add check-gateway=ping comment="santa lucia" distance=10 dst-address=192.168.14.0/24 gateway=192.168.214.6
add check-gateway=ping comment=iomere distance=1 dst-address=192.168.15.0/24 gateway=192.168.215.2
add check-gateway=ping comment=iomere distance=10 dst-address=192.168.15.0/24 gateway=192.168.215.6
add check-gateway=ping comment=treze-tilias distance=1 dst-address=192.168.20.0/24 gateway=192.168.220.2
add check-gateway=ping comment=treze-tilias distance=10 dst-address=192.168.20.0/24 gateway=192.168.220.6
add check-gateway=ping comment=fraiburgo-avenida distance=1 dst-address=192.168.25.0/24 gateway=192.168.225.10
add check-gateway=ping comment=fraiburgo-avenida distance=10 dst-address=192.168.25.0/24 gateway=192.168.225.6
add check-gateway=ping comment=cacador-speranca distance=1 dst-address=192.168.30.0/24 gateway=192.168.230.2
add check-gateway=ping comment=cacador-speranca distance=10 dst-address=192.168.30.0/24 gateway=192.168.230.6
add check-gateway=ping comment=rio-das-pedras distance=1 dst-address=192.168.31.0/24 gateway=192.168.231.2
add check-gateway=ping comment=rio-das-pedras distance=10 dst-address=192.168.31.0/24 gateway=192.168.231.6
add check-gateway=ping comment=fraiburgo-centro distance=1 dst-address=192.168.32.0/24 gateway=192.168.232.2
add check-gateway=ping comment=fraiburgo-centro distance=10 dst-address=192.168.32.0/24 gateway=192.168.232.6
add check-gateway=ping comment=pinheiro-preto distance=1 dst-address=192.168.33.0/24 gateway=192.168.233.2
add check-gateway=ping comment=pinheiro-preto distance=10 dst-address=192.168.33.0/24 gateway=192.168.233.6
add check-gateway=ping comment=joao-zardo distance=1 dst-address=192.168.35.0/24 gateway=192.168.235.2
add check-gateway=ping comment=joao-zardo distance=10 dst-address=192.168.35.0/24 gateway=192.168.235.6
add check-gateway=ping comment=cacador-martello distance=1 dst-address=192.168.37.0/24 gateway=192.168.237.2
add check-gateway=ping comment=cacador-martello distance=10 dst-address=192.168.37.0/24 gateway=192.168.237.6
add check-gateway=ping comment=lauro-muller distance=1 dst-address=192.168.38.0/24 gateway=192.168.238.2
add check-gateway=ping comment=lauro-muller distance=10 dst-address=192.168.38.0/24 gateway=192.168.238.6
add check-gateway=ping comment=lebon-regis distance=1 dst-address=192.168.39.0/24 gateway=192.168.239.2
add check-gateway=ping comment=lebon-regis distance=10 dst-address=192.168.39.0/24 gateway=192.168.239.6
add check-gateway=ping comment=centralfarma-pedro-andreazza distance=1 dst-address=192.168.40.0/24 gateway=192.168.240.2
add check-gateway=ping comment=centralfarma-pedro-andreazza distance=10 dst-address=192.168.40.0/24 gateway=192.168.240.6
add check-gateway=ping comment=centralfarma-shopping distance=1 dst-address=192.168.41.0/24 gateway=192.168.241.2
add check-gateway=ping comment=centralfarma-shopping distance=10 dst-address=192.168.41.0/24 gateway=192.168.241.6
add check-gateway=ping comment=cacador-lider-popular distance=1 dst-address=192.168.42.0/24 gateway=192.168.242.2
add check-gateway=ping comment=cacador-lider-popular distance=10 dst-address=192.168.42.0/24 gateway=192.168.242.6
add check-gateway=ping comment=rio-das-antas distance=1 dst-address=192.168.43.0/24 gateway=192.168.243.2
add check-gateway=ping comment=rio-das-antas distance=10 dst-address=192.168.43.0/24 gateway=192.168.243.6
add check-gateway=ping comment="ca\E7ador-ipiranga" distance=1 dst-address=192.168.44.0/24 gateway=192.168.244.2
add check-gateway=ping comment="ca\E7ador-ipiranga" distance=10 dst-address=192.168.44.0/24 gateway=192.168.244.6
add comment=rede-infra-atm distance=1 dst-address=192.168.50.0/24 gateway=192.168.254.101
add check-gateway=ping comment="treze tilias 2" distance=1 dst-address=192.168.69.0/24 gateway=192.168.169.2
add check-gateway=ping comment="treze tilias 2" distance=10 dst-address=192.168.69.0/24 gateway=192.168.169.6
add check-gateway=ping comment=floresta distance=1 dst-address=192.168.71.0/24 gateway=192.168.171.2
add check-gateway=ping comment=floresta distance=10 dst-address=192.168.71.0/24 gateway=192.168.171.6
/ip route rule
add disabled=yes dst-address=177.75.162.60/32 table=atm
add src-address=177.73.253.251/32 table=atm
/ip service
set telnet address=177.75.160.0/20,187.85.146.0/23,187.85.148.0/23,168.90.168.0/22 disabled=yes port=2300
set ftp address=0.0.0.0/0 disabled=yes port=2100
set www address="177.75.160.0/20,187.85.146.0/23,187.85.148.0/23,168.90.168.0/22,192.168.0.0/16,10.0.0.0/24,177.73.253.0/24" port=8080
set ssh port=2200
set www-ssl address=0.0.0.0/0
set api address=0.0.0.0/0 disabled=yes
set winbox address="177.75.160.0/20,187.85.146.0/23,187.85.148.0/23,187.85.152.0/24,168.90.168.0/22,45.163.12.252/30,192.168.0.0/16,10.0.0.0/24,177.73.253.0/24,45.163.13.106/32,187.85.152.42/32"
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes always-allow-password-login=yes forwarding-enabled=remote
/lcd
set color-scheme=dark
/ppp secret
add name=lidercosmeticos-saul-brandalise password=lsb2019 profile=profile-lider remote-address=192.168.254.100 service=l2tp
add name=centralfarma-shopping password=cfs2019 profile=profile-lider remote-address=192.168.254.41 service=l2tp
add name=centralfarma-pedro-andreazza password=cfpa2019 profile=profile-lider remote-address=192.168.254.40 service=l2tp
add name=lebon-regis password=lr2019 profile=profile-lider remote-address=192.168.254.39 service=l2tp
add name=lauro-muller password=lm2019 profile=profile-lider remote-address=192.168.254.38 service=l2tp
add name=cacador-martello password=cm2019 profile=profile-lider remote-address=192.168.254.37 service=l2tp
add name=joao-zardo password=jz2019 profile=profile-lider remote-address=192.168.254.35 service=l2tp
add name=pinheiro-preto password=pp2019 profile=profile-lider remote-address=192.168.254.33 service=l2tp
add name=fraiburgo-centro password=fc2019 profile=profile-lider remote-address=192.168.254.32 service=l2tp
add name=rio-das-pedras password=rp2019 profile=profile-lider remote-address=192.168.254.31 service=l2tp
add name=cacador-speranca password=cs2019 profile=profile-lider remote-address=192.168.254.30 service=l2tp
add name=fraiburgo-avenida password=fa2019 profile=profile-lider remote-address=192.168.254.25 service=l2tp
add name=treze-tilias password=tt2019 profile=profile-lider remote-address=192.168.254.20 service=l2tp
add name=iomere password=i2019 profile=profile-lider remote-address=192.168.254.15 service=l2tp
add name=cacador-avenida password=ca2019 profile=profile-lider remote-address=192.168.254.5 service=l2tp
add name=formulas password=f2019 profile=profile-lider remote-address=192.168.254.4 service=l2tp
add name=universidade password=u2019 profile=profile-lider remote-address=192.168.254.3 service=l2tp
add name=praca password=p2019 profile=profile-lider remote-address=192.168.254.2 service=l2tp
add name=cacador-lider-popular password=clp2019 profile=profile-lider remote-address=192.168.254.42 service=l2tp
add name=atm password=atm@2020 profile=profile-lider remote-address=192.168.254.101 service=l2tp
add local-address=10.0.0.1 name=ricardo password=ricardo19 profile=Lider remote-address=10.0.0.221 service=l2tp
add local-address=10.0.0.1 name=farmafacil password=06092019 profile=Lider remote-address=10.0.0.223 service=pptp
add local-address=10.0.0.1 name=lider-elaine password=13072021 profile=Lider remote-address=10.0.0.222 service=l2tp
add local-address=10.0.0.1 name=trier-wilson password=n@*r8c4UPh profile=Lider remote-address=10.0.0.224 service=l2tp
add local-address=10.0.0.1 name=lider password=17112021 profile=Lider remote-address=10.0.0.225 service=l2tp
add local-address=10.0.0.1 name=suporte-trier password=1e#lsW!s profile=Lider remote-address=10.0.0.222 service=l2tp
add local-address=10.0.0.1 name=stefani password="zD1)T&uq28>6JEM" profile=Lider remote-address=10.0.0.226 service=l2tp
/routing filter
add action=accept chain=ospf-in prefix=0.0.0.0/0
add action=discard chain=ospf-in
/routing ospf interface
add network-type=broadcast passive=yes
add interface=ether3 network-type=broadcast passive=yes
add interface=ether2-link-sw-ggnet network-type=point-to-point
/routing ospf network
add area=backbone network=172.22.0.60/30
add area=backbone network=177.75.172.132/30
add area=backbone network=177.75.172.136/29
add area=backbone network=177.75.160.220/32
add area=backbone network=187.85.152.0/26
/snmp
set contact=noc@iper.net.br enabled=yes location=br-sc-vii-vinhedo
/system clock
set time-zone-name=America/Sao_Paulo
/system console
set [ find ] disabled=yes
/system identity
set name=atm-router-farmacias
/system logging
add action=iper topics=info,!firewall
add action=atm topics=info
/system ntp client
set enabled=yes primary-ntp=177.75.161.10 secondary-ntp=200.144.121.33
/system scheduler
add interval=1d name=script_backup_ftp on-event=script_backup_ftp policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=jan/01/1970 start-time=00:02:00
add disabled=yes interval=1d name=Logs on-event=Logs policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=nov/03/2020 start-time=13:00:00
add disabled=yes interval=1d name=Bkp on-event=Bkp policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=nov/03/2020 start-time=13:00:00
add interval=1d name=backup_email on-event=backup_email policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-date=jan/01/1970 start-time=01:05:00
add interval=1d name=backup_ftp on-event=backup_ftp policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=jan/01/1970 start-time=01:00:00
/system script
add dont-require-permissions=no name=script_backup_ftp owner=everton policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":log info \"Iniciado Backup FTP\"\r\nexport file=backup\r\ntool fetch address=187.85.149.218 port=21 src-path=backup.rsc user=bkp.corporativo mode=ftp password=corporativo.bkp dst-path=([/system identity get name].\".rsc\") upload=yes\r\n:log info \"Fim Envio Backup FTP\""
add dont-require-permissions=no name=Logs owner=4tm policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/log print file=LOGMKT.txt\r\n:delay 2s\r\n:global data [/system clock get date]\r\n:global hora [/system clock get time]\r\n/tool e-mail send to=\"wandeftto@gmail.com\" subject=\"Mikrotik: Log Automatico realizado em \$data as \$hora\" file=\"LOGMKT.txt\" body=\"Em anexo, arquivo de log do equipamento RB LIDER FARMA ATM realizado as \$hora de\_\$data.\"\r\n"
add dont-require-permissions=no name=Bkp owner=4tm policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/system backup save name=BKPMKT.backup\r\n:delay 2s\r\n:global data [/system clock get date]\r\n:global hora [/system clock get time]\r\n/tool e-mail send to=\"wandeftto@gmail.com\" subject=\"Mikrotik: Backup Automatico realizado em \$data as \$hora\" file=\"BKPMKT.backup\" body=\"Em anexo, arquivo de backup do equipamento RB ATM LIDER FARMA realizado as \$hora de \$data.\"\r\n"
add dont-require-permissions=no name=backup_email owner=4tm policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":log info message=\"enviando backup por email\"\r\n:global data [/system clock get date]\r\n:global hora [/system clock get time]\r\n/tool e-mail send to=\"clientes.atm@iper.net.br\" subject=\"\$[/system identity get name]\" body=\"\$[/system clock get date]\" file=\"backup.rsc\"\r\n"
add dont-require-permissions=no name=backup_ftp owner=interedes policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive source="export file=backup\r\ntool fetch address=ftp.iper.net.br port=8021 src-path=backup.rsc user=clientes.atm mode=ftp password=atm.clientes dst-path=([/system identity get name].\".rsc\") upload=yes\r\n"
/tool e-mail
set address=mail.iper.net.br from=envia.bkp@iper.net.br password=Iper@2022 port=587 start-tls=yes user=envia.bkp@iper.net.br
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
/tool romon
set enabled=yes
/user aaa
set use-radius=yes