From 4a9d026b42eb3cae398ea34603c28ec90b6bf4a7 Mon Sep 17 00:00:00 2001 From: Mosiur Rahman Date: Mon, 23 Feb 2026 11:40:37 +0600 Subject: [PATCH] added backup script for mikrotik, mikrotik backup for 23-feb taken --- backup-script.sh | 15 + mikrotik/Addresses.CDB | Bin 0 -> 620 bytes mikrotik/RND-mkt-rtr-2026-02-23.conf | 185 +++++++++ mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf | 196 ++++++++++ mikrotik/mgt-mkt-rtr-2026-02-23.conf | 404 ++++++++++++++++++++ 5 files changed, 800 insertions(+) create mode 100644 backup-script.sh create mode 100644 mikrotik/Addresses.CDB create mode 100644 mikrotik/RND-mkt-rtr-2026-02-23.conf create mode 100644 mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf create mode 100644 mikrotik/mgt-mkt-rtr-2026-02-23.conf diff --git a/backup-script.sh b/backup-script.sh new file mode 100644 index 0000000..020332f --- /dev/null +++ b/backup-script.sh @@ -0,0 +1,15 @@ +#!/bin/bash + +DATE=$(date +%F) + +#echo $DATE + +echo "Backing up Wifi router" +sshpass -p '!CL46#$)CL0uD#@eNT%(*#$5FrgE' ssh admin@163.53.151.2 -p 7900 '/export' >> mikrotik/cloud-wifi-mkt-rtr-$DATE.conf + +echo "Backing up RND Router" +sshpass -p 'B!r!P46346t@#chQmE=' ssh admin@118.67.214.225 -p 7900 '/export' >> mikrotik/RND-mkt-rtr-$DATE.conf +#sshpass -p '!"N@zud@br!11!@nT@%$%^-oh65v8346@#45' ssh admin@118.67.220.34 -p 7900 '/export' >> mgt-mkt-rtr-$DATE.conf + +echo "Backing up MGT Router" +sshpass -p 'N@zud@br!11!@nT@%$%^-oh65v8346@#45' ssh -o HostKeyAlgorithms=+ssh-dss -o PubkeyAcceptedAlgorithms=+ssh-rsa admin@118.67.220.34 -p 7900 /export >> mikrotik/mgt-mkt-rtr-$DATE.conf diff --git a/mikrotik/Addresses.CDB b/mikrotik/Addresses.CDB new file mode 100644 index 0000000000000000000000000000000000000000..f0bc013bb0f0417ac532e7bdadd981364be14941 GIT binary patch literal 620 zcmbWy-%7%86bJA#b-LB`rs%4`HH8Ws`~CL&tr-k z5z!Hcs zl_8g=ENc?Ny4@T1{Q;pyCf)40Lx04vR6?4rVy&(ctYU0F&+c%LJOX4`XUiYOL&Bx^ zm)JZvNX)>ekW3yDQ7k|r@Gza7-0WHpv1?t1GD5O7a;$2ldQl7d2E8+NVps~HDNpG5 zgD`OX!7>|QM*sThr?iNWsT#XXsi``7VT=y`Gc=n*`R~w`h8)VL#9*k%Qm*=E!`4A6 zTXVc|)bQN$NiXsyz5B8q#E};+cCOByh%hVNqh=lJPygfQesS03W}6sFWxLtd;v>cK ox=wX#N2$=`@TQfzOU>ILc5CPUwO_Lxd$CtShOSawMHH#{9WMZX&j0`b literal 0 HcmV?d00001 diff --git a/mikrotik/RND-mkt-rtr-2026-02-23.conf b/mikrotik/RND-mkt-rtr-2026-02-23.conf new file mode 100644 index 0000000..ca11f0b --- /dev/null +++ b/mikrotik/RND-mkt-rtr-2026-02-23.conf @@ -0,0 +1,185 @@ +# dec/24/1971 16:26:54 by RouterOS 6.47.7 +# software id = S2NZ-H089 +# +# model = 2011UiAS +# serial number = 77AD072033A2 +/interface bridge +add name=Public-IP-Test-Bridge +add name=TestBed-Tunnel-Bridge +/interface ethernet +set [ find default-name=ether2 ] name=ether2-To-TB-BDCOM-1-G0/1 +set [ find default-name=ether3 ] name=ether3-To-TB-BDCOM-2 +set [ find default-name=ether8 ] advertise="10M-half,10M-full,100M-half,100M-f\ + ull,1000M-half,1000M-full,2500M-full,5000M-full,10000M-full" name=\ + ether8-iDRAC-MGT-Dlink +set [ find default-name=ether9 ] name=ether9-From-Shahjadpur-3-Via-Dlink-2 +/interface eoip +add local-address=118.67.214.225 mac-address=02:55:2F:92:2A:E5 mtu=1500 name=\ + eoip-tunnel-for-Cloud-RTR remote-address=118.67.220.34 tunnel-id=1001 +/interface gre +add local-address=118.67.214.225 name=GRE-TUNNEL-FOR-NVME-NETAPP \ + remote-address=118.67.220.34 +/interface vlan +add comment="server mgmt" interface=ether8-iDRAC-MGT-Dlink name=104 vlan-id=\ + 104 +add comment=IDRAC interface=ether8-iDRAC-MGT-Dlink name=VLAN-105-iDRAC-DELL \ + vlan-id=105 +add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-106-External-Traffic \ + vlan-id=106 +add interface=ether2-To-TB-BDCOM-1-G0/1 name=\ + VLAN-107-Interal-Traffic-Admin-Traffic vlan-id=107 +add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-109-Floating-Network-1 \ + vlan-id=109 +add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-110-Floating-Network-2 \ + vlan-id=110 +add interface=ether2-To-TB-BDCOM-1-G0/1 name=\ + VLAN-111-Floating-Network-3-Public-IP vlan-id=111 +add interface=ether8-iDRAC-MGT-Dlink name=vlan-101-SW-MGT vlan-id=101 +/interface bonding +add disabled=yes mode=balance-xor name=bonding-Testbed-Switchport-Aggregation \ + slaves=ether2-To-TB-BDCOM-1-G0/1,ether3-To-TB-BDCOM-2 +/interface vlan +add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\ + VLAN-103-External-Traffic vlan-id=103 +add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\ + VLAN-106-Tanet-Traffic vlan-id=106 +add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\ + VLAN1-112-Floating-Network-4 vlan-id=112 +/interface list +add name=WAN +add name=LAN +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +/ip dhcp-server option +add code=66 name=pxe-server value="'192.168.104.118'" +add code=67 name=pxe-file value="'pxelinux.0'" +/ip dhcp-server option sets +add name=maas-pxe options=pxe-server,pxe-file +/ip ipsec profile +add enc-algorithm=aes-256,aes-192,aes-128,3des hash-algorithm=sha256 name=\ + IPKA +add dh-group=modp2048 enc-algorithm=aes-256 hash-algorithm=sha256 name=1 +/ip ipsec peer +add address=103.120.192.6/32 local-address=118.67.214.225 name=\ + Peer-To-Ibrahim-Bhai-Project profile=1 +/ip ipsec proposal +set [ find default=yes ] lifetime=1h30m pfs-group=modp2048 +add auth-algorithms=sha256 enc-algorithms=\ + aes-256-cbc,aes-256-gcm,aes-192-cbc,aes-128-cbc name=ike-phase-1 \ + pfs-group=modp2048 +/ip pool +add name=L2VPN-Pool ranges=10.150.169.1-10.150.169.10 +/ppp profile +add local-address=10.150.170.1 name=L2TP-VPN-Profile remote-address=\ + L2VPN-Pool +/interface bridge port +add bridge=TestBed-Tunnel-Bridge interface=vlan-101-SW-MGT +add bridge=TestBed-Tunnel-Bridge interface=eoip-tunnel-for-Cloud-RTR +add bridge=TestBed-Tunnel-Bridge interface=VLAN-105-iDRAC-DELL +add bridge=TestBed-Tunnel-Bridge interface=104 +add bridge=TestBed-Tunnel-Bridge interface=VLAN-109-Floating-Network-1 +add bridge=TestBed-Tunnel-Bridge interface=VLAN-106-External-Traffic +add bridge=TestBed-Tunnel-Bridge interface=VLAN-110-Floating-Network-2 +/ip neighbor discovery-settings +set discover-interface-list=!dynamic +/interface l2tp-server server +set default-profile=L2TP-VPN-Profile enabled=yes ipsec-secret="cl0ud\$#@534" \ + use-ipsec=yes +/interface list member +add interface=ether1 list=WAN +add list=LAN +/ip address +add address=192.168.110.1/24 comment="LB- network-vlan-110" interface=\ + VLAN-110-Floating-Network-2 network=192.168.110.0 +add address=118.67.214.225/29 comment="public network-vlan-103" interface=104 \ + network=118.67.214.224 +add address=192.168.104.1/24 comment="server mgmt-vlan-104" interface=104 \ + network=192.168.104.0 +add address=172.21.1.78/30 interface=ether9-From-Shahjadpur-3-Via-Dlink-2 \ + network=172.21.1.76 +add address=192.168.105.1/24 comment=IDRAC-vlan-105 interface=\ + VLAN-105-iDRAC-DELL network=192.168.105.0 +add address=192.168.106.1/24 comment=tenant-vlan-106 interface=\ + VLAN-106-External-Traffic network=192.168.106.0 +add address=192.168.107.1/24 comment="admin/internal IP-107-Geneve" \ + interface=VLAN-107-Interal-Traffic-Admin-Traffic network=192.168.107.0 +add address=192.168.103.1/24 comment="public network-vlan-103" interface=\ + VLAN-103-External-Traffic network=192.168.103.0 +add address=192.168.109.1/24 comment="floating network-vlan-109-temp" \ + interface=VLAN-109-Floating-Network-1 network=192.168.109.0 +add address=103.120.192.1/28 comment="floating ip-vlan-111" interface=\ + VLAN-111-Floating-Network-3-Public-IP network=103.120.192.0 +add address=192.168.112.1/24 interface=VLAN1-112-Floating-Network-4 network=\ + 192.168.112.0 +add address=10.200.200.1/24 interface=vlan-101-SW-MGT network=10.200.200.0 +add address=172.16.1.1/24 interface=ether6 network=172.16.1.0 +add address=118.67.221.217/29 interface=104 network=118.67.221.216 +add address=10.11.14.2/30 interface=GRE-TUNNEL-FOR-NVME-NETAPP network=\ + 10.11.14.0 +/ip arp +add address=192.168.112.183 interface=VLAN1-112-Floating-Network-4 \ + mac-address=FA:16:3E:0C:47:90 +/ip dhcp-server network +add address=192.168.104.0/24 dhcp-option-set=maas-pxe +/ip firewall filter +add action=accept chain=input dst-port=500 protocol=udp +add action=accept chain=input dst-port=4500 protocol=udp +add action=accept chain=input protocol=ipsec-esp +add action=accept chain=forward dst-address=192.168.106.0/24 src-address=\ + 192.168.104.0/24 +add action=accept chain=forward dst-address=192.168.104.0/24 src-address=\ + 192.168.106.0/24 +/ip firewall nat +add action=accept chain=srcnat dst-address=192.168.20.0/24 +add action=accept chain=srcnat dst-address=10.10.50.0/24 src-address=\ + 192.168.104.0/24 +add action=src-nat chain=srcnat src-address=192.168.104.0/24 to-addresses=\ + 118.67.214.225 +add action=src-nat chain=srcnat src-address=10.10.10.0/24 src-address-list="" \ + to-addresses=118.67.214.225 +add action=src-nat chain=srcnat src-address=10.150.169.0/24 src-address-list=\ + "" to-addresses=118.67.214.225 +add action=src-nat chain=srcnat src-address=192.168.111.0/24 to-addresses=\ + 118.67.214.225 +add action=src-nat chain=srcnat src-address=192.168.109.0/24 to-addresses=\ + 118.67.214.225 +add action=src-nat chain=srcnat src-address=192.168.110.0/24 to-addresses=\ + 118.67.214.225 +add action=accept chain=srcnat dst-address=192.168.106.0/24 src-address=\ + 192.168.104.0/24 +add action=accept chain=srcnat dst-address=192.168.104.0/24 src-address=\ + 192.168.106.0/24 +add action=src-nat chain=srcnat src-address=192.168.106.0/24 to-addresses=\ + 118.67.214.225 +/ip ipsec identity +add peer=Peer-To-Ibrahim-Bhai-Project secret="@sdf123\$" +/ip ipsec policy +add dst-address=10.10.50.0/24 peer=Peer-To-Ibrahim-Bhai-Project proposal=\ + ike-phase-1 sa-dst-address=103.120.192.6 sa-src-address=118.67.214.225 \ + src-address=192.168.104.0/24 tunnel=yes +/ip route +add distance=1 gateway=172.21.1.77 +add check-gateway=ping disabled=yes distance=1 dst-address=10.90.90.90/32 \ + gateway=ether8-iDRAC-MGT-Dlink +add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\ + 10.11.14.1 +add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\ + 10.11.14.1 +/ip service +set telnet disabled=yes +set ftp disabled=yes +set www port=8090 +set ssh port=7900 +set api disabled=yes +set winbox port=58923 +set api-ssl disabled=yes +/ipv6 address +add address=2406:f100:9:100::2/126 advertise=no interface=\ + ether9-From-Shahjadpur-3-Via-Dlink-2 +/ppp secret +add name=L2TP-CLOUD password="cl0ud\$#@534e" profile=L2TP-VPN-Profile \ + service=l2tp +/system identity +set name=Cloud-RND +/system logging +add topics=debug diff --git a/mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf b/mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf new file mode 100644 index 0000000..f6ac916 --- /dev/null +++ b/mikrotik/cloud-wifi-mkt-rtr-2026-02-23.conf @@ -0,0 +1,196 @@ +# feb/23/2026 11:38:13 by RouterOS 6.49.15 +# software id = FM63-EBFC +# +# model = 2011UiAS-2HnD +# serial number = 5E6D057D6D6C +/interface bridge +add name=BR-VPN-QUAR +add name=LAN-Bridge +add name=Loopback-Softify-Test +add name=PPTP-Clients +add name=Public_IP-WAN_Bridge +add name=loopback +/interface ethernet +set [ find default-name=ether1 ] name=ether1-UPlink-Shahjadpur-3 +set [ find default-name=ether2 ] name=ether2-Public-Interface +set [ find default-name=ether3 ] name=ether3-Public-Interface +set [ find default-name=ether4 ] name=ether4-To-TestBed-SW +set [ find default-name=ether5 ] name=ether5-Mosiur-PC +set [ find default-name=ether6 ] name=ether6-LAN-Interface +set [ find default-name=ether7 ] name=ether7-LAN-Interface +set [ find default-name=ether8 ] name=ether8-LAN-Interface +set [ find default-name=ether9 ] name=\ + ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23 +set [ find default-name=ether10 ] name=ether10-LAN-Interface +/interface gre +add disabled=yes dont-fragment=inherit local-address=163.53.151.2 mtu=1326 \ + name=Test-GRE-Tunnel remote-address=10.20.30.14 +add disabled=yes local-address=163.53.151.2 mtu=1426 name=gre-CHR \ + remote-address=118.67.212.21 +add local-address=163.53.151.2 name=gre-tunnel-Cloud-Wifi-iDRAC \ + remote-address=118.67.220.34 +/interface eoip +add mac-address=02:24:D1:15:90:51 name=EoIP-For-Cloud-Wifi-To-MGT-SW \ + remote-address=118.67.220.34 tunnel-id=1002 +/interface vlan +add disabled=yes interface=ether4-To-TestBed-SW name=VLAN-TestBed-1010 \ + vlan-id=1010 +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +add authentication-types=wpa2-psk mode=dynamic-keys name=\ + Cloud-Wifi-Security-Profile supplicant-identity="" wpa2-pre-shared-key=\ + M3gh3r-T0r0ng0-B@rta +/interface wireless +set [ find default-name=wlan1 ] band=2ghz-b/g/n country=bangladesh disabled=\ + no frequency=2462 installation=indoor mode=ap-bridge security-profile=\ + Cloud-Wifi-Security-Profile ssid=cloud wps-mode=push-button-virtual-only +/ip dhcp-server +add disabled=no interface=PPTP-Clients lease-time=1h name=dhcp2 +add disabled=no lease-time=1h name=dhcp3 +add disabled=no interface=ether5-Mosiur-PC lease-time=1h name=dhcp4 +add disabled=no interface=sfp1 lease-time=1h name=dhcp5 +add disabled=no lease-time=1h name=dhcp6 +/ip pool +add name=dhcp_pool0 ranges=10.100.200.20-10.100.200.254 +add name=dhcp_pool1 ranges=10.100.200.20-10.100.200.254 +add name=Pool-Quar ranges=10.10.10.0/24 +add name=hs-pool-30 ranges=10.10.10.2-10.10.10.254 +/ip dhcp-server +add address-pool=dhcp_pool1 disabled=no interface=LAN-Bridge name=dhcp1 +add address-pool=hs-pool-30 disabled=no interface=BR-VPN-QUAR lease-time=1h \ + name=dhcp7 +/ppp profile +add bridge=BR-VPN-QUAR bridge-learning=yes dns-server=10.10.10.1 \ + local-address=10.10.10.1 name=prof-quar remote-address=Pool-Quar +/interface bridge port +add bridge=Public_IP-WAN_Bridge interface=ether2-Public-Interface +add bridge=Public_IP-WAN_Bridge interface=ether3-Public-Interface +add bridge=Public_IP-WAN_Bridge interface=ether4-To-TestBed-SW +add bridge=Public_IP-WAN_Bridge interface=ether5-Mosiur-PC +add bridge=Public_IP-WAN_Bridge interface=ether1-UPlink-Shahjadpur-3 +add bridge=LAN-Bridge interface=wlan1 +add bridge=LAN-Bridge interface=\ + ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23 +add bridge=LAN-Bridge interface=ether7-LAN-Interface +add bridge=LAN-Bridge interface=ether8-LAN-Interface +add bridge=LAN-Bridge interface=ether10-LAN-Interface +/ip firewall connection tracking +set enabled=yes +/interface l2tp-server server +set default-profile=default +/interface pptp-server server +set authentication=pap,chap,mschap1,mschap2 default-profile=prof-quar \ + enabled=yes +/interface wireless cap +set interfaces=wlan1 +/ip address +add address=163.53.151.2/29 interface=Public_IP-WAN_Bridge network=\ + 163.53.151.0 +add address=10.100.200.1/24 interface=LAN-Bridge network=10.100.200.0 +add address=10.255.255.1/30 interface=\ + ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23 network=10.255.255.0 +add address=10.12.13.2/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\ + 10.12.13.0 +add address=172.16.10.1/24 interface=ether5-Mosiur-PC network=172.16.10.0 +add address=10.10.10.1/24 interface=BR-VPN-QUAR network=10.10.10.0 +add address=10.100.200.15/24 disabled=yes interface=\ + EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0 +add address=10.222.10.2/30 interface=gre-CHR network=10.222.10.0 +/ip arp +add address=10.100.200.182 interface=LAN-Bridge mac-address=F4:A9:97:DD:9F:75 +/ip dhcp-server lease +add address=10.100.200.182 client-id=1:f4:a9:97:dd:9f:75 mac-address=\ + F4:A9:97:DD:9F:75 server=dhcp1 +add address=10.100.200.252 client-id=1:6c:3b:6b:cf:d5:cc mac-address=\ + 6C:3B:6B:CF:D5:CC server=dhcp1 +add address=10.100.200.175 mac-address=B4:2E:99:16:BC:4C server=dhcp1 +/ip dhcp-server network +add address=10.5.50.0/24 comment="hotspot network" gateway=10.5.50.1 +add address=10.10.10.0/24 comment="hotspot network" gateway=10.10.10.1 +add address=10.100.200.0/24 dns-server=8.8.8.8 gateway=10.100.200.1 +add address=10.202.201.0/24 comment="hotspot network" gateway=10.202.201.1 +add address=172.16.10.0/24 comment="hotspot network" gateway=172.16.10.1 +/ip dns +set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1 +/ip firewall address-list +add address=10.100.200.0/24 list=DHCP-Pool +add address=163.53.149.35 list=DHCP-Pool +add address=10.100.200.175 list=10.100.200-Reach-ACL +add address=10.100.200.182 list=10.100.200-Reach-ACL +/ip firewall filter +add action=accept chain=forward src-address=10.100.200.0/24 +add action=accept chain=input comment="Allow GRE" protocol=gre +/ip firewall mangle +add action=mark-routing chain=prerouting dst-address=118.67.220.34 dst-port=\ + 1723 new-routing-mark=pptp-traffic passthrough=yes protocol=tcp \ + src-address-list=DHCP-Pool +add action=mark-routing chain=prerouting dst-address=118.67.220.34 \ + new-routing-mark=pptp-traffic passthrough=yes protocol=gre \ + src-address-list=DHCP-Pool +add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes \ + protocol=tcp tcp-flags=syn +/ip firewall nat +add action=src-nat chain=srcnat disabled=yes src-address=10.20.30.14 \ + to-addresses=103.209.42.105 +add action=accept chain=srcnat dst-address=118.67.220.34 dst-port=1723 \ + protocol=tcp +add action=accept chain=srcnat dst-address=118.67.220.34 protocol=gre +add action=src-nat chain=srcnat comment=\ + "NAT Rule for Reaching 10.100.200.X using iDRAC VPN" dst-address-list=\ + 10.100.200-Reach-ACL src-address=10.12.13.1 to-addresses=10.100.200.1 +add action=masquerade chain=srcnat out-interface=Public_IP-WAN_Bridge \ + src-address-list="" to-addresses=163.53.151.2 +/ip route +add check-gateway=ping distance=1 gateway=10.12.13.1 routing-mark=\ + pptp-traffic +add check-gateway=ping distance=1 gateway=163.53.151.1 +add check-gateway=ping distance=1 dst-address=10.200.200.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +add disabled=yes distance=10 dst-address=118.67.220.34/32 gateway=10.12.13.1 +add check-gateway=ping disabled=yes distance=1 dst-address=118.67.220.34/32 \ + gateway=10.12.13.1 +add distance=1 dst-address=192.168.10.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\ + 10.12.13.1 +add check-gateway=ping distance=1 dst-address=192.168.25.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +add distance=1 dst-address=192.168.104.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +add distance=1 dst-address=192.168.105.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +add distance=1 dst-address=192.168.106.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +add distance=1 dst-address=192.168.109.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +add distance=1 dst-address=192.168.110.0/24 gateway=\ + gre-tunnel-Cloud-Wifi-iDRAC +/ip service +set telnet disabled=yes port=12312 +set ftp disabled=yes +set www port=7980 +set ssh port=7900 +set api disabled=yes +set api-ssl disabled=yes +/lcd interface pages +set 0 interfaces="sfp1,ether1-UPlink-Shahjadpur-3,ether2-Public-Interface,ethe\ + r3-Public-Interface,ether4-To-TestBed-SW,ether5-Mosiur-PC,ether6-LAN-Inter\ + face,ether7-LAN-Interface,ether8-LAN-Interface,ether9-To-Meeting-Room-From\ + -C15-To-A22-Testbed-C23,ether10-LAN-Interface" +/ppp aaa +set use-radius=yes +/ppp secret +add name=silvarno password=123Rashik456 +/radius +add address=163.53.151.4 secret=testing123 service=ppp +/system clock +set time-zone-name=Asia/Dhaka +/system identity +set name=Cloud-Wifi +/tool sniffer +set file-limit=10000KiB file-name=Test-WAN-VPN-14-01-26 filter-interface=all \ + filter-port=47 memory-limit=1000KiB +/user aaa +set use-radius=yes diff --git a/mikrotik/mgt-mkt-rtr-2026-02-23.conf b/mikrotik/mgt-mkt-rtr-2026-02-23.conf new file mode 100644 index 0000000..c156227 --- /dev/null +++ b/mikrotik/mgt-mkt-rtr-2026-02-23.conf @@ -0,0 +1,404 @@ +# feb/23/2026 11:38:53 by RouterOS 6.43.8 +# software id = QH40-TY32 +# +# model = RouterBOARD 3011UiAS +# serial number = 781006ECE3E4 +/interface pptp-server +add name=pptp-in1 user="" +/interface bridge +add arp=proxy-arp name=Bridge-Local +add name=NVCM-MGT-Bridge +add name=Test +add name=bridge-for-idrac-access +/interface ethernet +set [ find default-name=ether1 ] speed=100Mbps +set [ find default-name=ether2 ] name=ether2-To-Dlink-for-Vlan-10,11,12,16 \ + speed=100Mbps +set [ find default-name=ether3 ] name=ether3-To-iDRAC-Dlink-SW-4 speed=\ + 100Mbps +set [ find default-name=ether4 ] speed=100Mbps +set [ find default-name=ether5 ] speed=100Mbps +set [ find default-name=ether6 ] name=ether6-To-Cisco-48-Port-SW speed=\ + 100Mbps +set [ find default-name=ether7 ] speed=100Mbps +set [ find default-name=ether8 ] speed=100Mbps +set [ find default-name=ether9 ] name=ether9-To-Meeting-Room-From-C15-To-A22 \ + speed=100Mbps +set [ find default-name=ether10 ] speed=100Mbps +set [ find default-name=sfp1 ] advertise=\ + 10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 +/interface l2tp-server +add name=l2tp-Server user=cloud-operation +/interface ovpn-server +add name=ovpn-in1 user=cloud +/interface eoip +add mac-address=02:B8:09:8A:07:F9 name=EoIP-For-Cloud-Wifi-To-MGT-SW \ + remote-address=163.53.151.2 tunnel-id=1002 +add local-address=118.67.220.34 mac-address=02:BA:28:7F:6E:BB mtu=1500 name=\ + eoip-tunnel-For-Testbed remote-address=118.67.214.225 tunnel-id=1001 +/interface gre +add local-address=118.67.220.34 name=GRE-TUNNEL-FOR-NETAPP remote-address=\ + 118.67.214.225 +add local-address=118.67.220.34 name=gre-tunnel-Cloud-Wifi-iDRAC \ + remote-address=163.53.151.2 +/interface vlan +add interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=VLAN-101-NOVO-MGT \ + vlan-id=101 +add arp=proxy-arp interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=\ + vlan-10-iDRAC-MGT vlan-id=10 +add interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=vlan-12-Storage-MGT \ + vlan-id=12 +add arp=proxy-arp interface=ether6-To-Cisco-48-Port-SW name=\ + vlan-20-Server-Management vlan-id=20 +add arp=proxy-arp interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=\ + vlan-25-iDRAC-MGT vlan-id=25 +add comment="for idrac access" interface=ether3-To-iDRAC-Dlink-SW-4 name=\ + vlan-25-idrac-access vlan-id=25 +add comment="for mgt vlan" interface=ether3-To-iDRAC-Dlink-SW-4 name=\ + vlan-111-cloud-mgt-idrac vlan-id=111 +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +/ip ipsec peer profile +set [ find default=yes ] dh-group=modp1024 enc-algorithm=aes-256 +add dh-group=modp1024 enc-algorithm=aes-256 name=pfsencesanjidaprofile1 +add dh-group=ecp256,modp2048,modp1024 enc-algorithm=aes-256,aes-128,3des \ + hash-algorithm=sha256 name=PFSese nat-traversal=no +/ip ipsec proposal +set [ find default=yes ] pfs-group=none +add auth-algorithms=sha256 enc-algorithms=aes-256-cbc,aes-256-ctr,aes-256-gcm \ + lifetime=1d30m name=proposal-Cloud pfs-group=modp1536 +/ip pool +add name=SVR-MGT-POOL ranges=192.168.20.230-192.168.20.254 +add name=IDRAC-10-MGT-POOL ranges=192.168.10.151-192.168.10.165 +add name=IDRAC-25-MGT-POOL ranges=192.168.25.151-192.168.25.185 +add name=ovpn-pool ranges=192.168.30.1-192.168.30.100 +add name=vpn_pool ranges=192.168.40.1-192.168.40.100 +/ppp profile +set *0 change-tcp-mss=default dns-server=103.248.12.62,8.8.8.8 local-address=\ + SVR-MGT-POOL remote-address=SVR-MGT-POOL +add dns-server=103.248.12.62 local-address=IDRAC-10-MGT-POOL name=IDRAC-10 \ + remote-address=IDRAC-10-MGT-POOL wins-server=8.8.8.8 +add dns-server=8.8.8.8 local-address=IDRAC-25-MGT-POOL name=IDRAC-25 \ + remote-address=IDRAC-25-MGT-POOL wins-server=1.1.1.1 +add local-address=192.168.30.200 name=ovpn remote-address=ovpn-pool +add local-address=192.168.40.1 name=vpn_profile remote-address=vpn_pool +/snmp community +add addresses=103.248.12.32/27,172.30.30.0/24 name=intercLoud +/system logging action +set 3 remote=172.30.30.42 src-address=118.67.220.34 +/interface bridge port +add bridge=bridge-for-idrac-access interface=vlan-25-idrac-access +add bridge=bridge-for-idrac-access interface=vlan-25-iDRAC-MGT +/interface l2tp-server server +set default-profile=IDRAC-25 ipsec-secret=K!ngK0rt0BB0B!muR-Cl0ud use-ipsec=\ + yes +/interface ovpn-server server +set certificate=SERVER cipher=aes256 default-profile=IDRAC-25 enabled=yes +/interface pptp-server server +set enabled=yes +/ip address +add address=192.168.20.1/24 interface=vlan-20-Server-Management network=\ + 192.168.20.0 +add address=192.168.10.150/24 interface=vlan-10-iDRAC-MGT network=\ + 192.168.10.0 +add address=192.168.12.150/24 interface=vlan-12-Storage-MGT network=\ + 192.168.12.0 +add address=192.168.25.150/24 interface=bridge-for-idrac-access network=\ + 192.168.25.0 +add address=172.17.1.59/26 interface=VLAN-101-NOVO-MGT network=172.17.1.0 +add address=10.10.200.1/24 interface=ether3-To-iDRAC-Dlink-SW-4 network=\ + 10.10.200.0 +add address=10.209.42.1/24 interface=vlan-111-cloud-mgt-idrac network=\ + 10.209.42.0 +add address=10.200.200.254/24 comment="IP For Switch Mangement" interface=\ + eoip-tunnel-For-Testbed network=10.200.200.0 +add address=192.168.106.254/24 comment="IP For BR-EX " interface=\ + eoip-tunnel-For-Testbed network=192.168.106.0 +add address=192.168.104.254/24 interface=eoip-tunnel-For-Testbed network=\ + 192.168.104.0 +add address=10.12.13.1/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\ + 10.12.13.0 +add address=192.168.109.254/24 comment="IP For Floating-IP-1" interface=\ + eoip-tunnel-For-Testbed network=192.168.109.0 +add address=192.168.110.254/24 comment="IP For Floating-IP-2" interface=\ + eoip-tunnel-For-Testbed network=192.168.110.0 +add address=118.67.220.34/30 interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + network=118.67.220.32 +add address=192.168.105.254/24 comment=iDRAC interface=\ + eoip-tunnel-For-Testbed network=192.168.105.0 +add address=10.100.200.14/24 disabled=yes interface=\ + EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0 +add address=10.11.14.1/30 interface=GRE-TUNNEL-FOR-NETAPP network=10.11.14.0 +/ip dns +set servers=8.8.8.8,1.1.1.1 +/ip firewall address-list +add address=103.9.136.34 list=admin-access +add address=103.9.136.35 list=admin-access +add address=103.248.12.62 list=admin-access +add address=103.9.136.66 list=admin-access +add address=118.67.220.8/30 list=admin-access +add address=172.17.1.0/26 list=admin-access +add address=103.248.12.0/24 list=admin-access +add address=103.23.40.0/24 list=admin-access +add address=172.30.30.0/24 list=admin-access +add address=163.53.150.248/29 list=admin-access +add address=103.248.13.66 list=admin-access +add address=163.53.151.2 list=admin-access +add address=118.67.212.97 list=ceph-export-allow +add address=118.67.212.115 list=ceph-export-allow +add address=163.53.151.2 list=ceph-export-allow +add address=103.248.13.66 list=ceph-export-allow +add address=36.255.68.74 comment=gk list=ceph-export-allow +add address=36.255.68.5 comment=gk list=ceph-export-allow +add address=103.209.43.134 list=admin-access +add address=163.53.151.0/29 list=admin-access +/ip firewall filter +add chain=input comment="For RTR" src-address-list=admin-access +add action=drop chain=input disabled=yes dst-port=21,22,23,80,443,8291 \ + protocol=tcp +add action=accept chain=forward dst-address=10.10.200.0/24 src-address=\ + 10.10.20.0/24 +add action=accept chain=input port=1701,500,4500 protocol=udp +add action=accept chain=input protocol=ipsec-esp +/ip firewall nat +add action=dst-nat chain=dstnat comment=nexus-3 dst-port=1613 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.45 \ + to-ports=161 +add action=dst-nat chain=dstnat comment=nexus-2 dst-port=1638 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.23 \ + to-ports=161 +add action=dst-nat chain=dstnat comment=nexus-1 dst-port=1637 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.20 \ + to-ports=161 +add action=dst-nat chain=dstnat comment=nexus-5 dst-port=1641 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.61 \ + to-ports=161 +add action=dst-nat chain=dstnat comment=Toku-BDCOM-SW disabled=yes dst-port=\ + 1637 in-interface=ether1 protocol=udp to-addresses=172.28.10.58 to-ports=\ + 161 +add action=dst-nat chain=dstnat comment=nexus-4 dst-port=1614 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.46 \ + to-ports=161 +add action=dst-nat chain=dstnat comment=nexus-6 dst-port=1642 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.62 \ + to-ports=161 +add action=dst-nat chain=dstnat comment=Cisco-48-Port-SW dst-port=1627 \ + in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\ + 172.17.1.47 to-ports=161 +add action=dst-nat chain=dstnat comment=\ + "controller1-phy.brilliant.com.bd\r\ + \n" dst-port=1615 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.111 to-ports=161 +add action=dst-nat chain=dstnat comment=\ + "controller2-phy.brilliant.com.bd\r\ + \n" dst-port=1616 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.112 to-ports=161 +add action=dst-nat chain=dstnat comment=\ + "controller3-phy.brilliant.com.bd\r\ + \n" dst-port=1617 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.114 to-ports=161 +add action=dst-nat chain=dstnat comment="ceph-mgt-phy1.brilliant.com.bd\r\ + \n" dst-port=1618 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.161 to-ports=161 +add action=dst-nat chain=dstnat comment="ceph-mgt-phy2.brilliant.com.bd\r\ + \n" dst-port=1619 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.162 to-ports=161 +add action=dst-nat chain=dstnat comment="ceph-mgt-phy3.brilliant.com.bd\r\ + \n" dst-port=1620 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.163 to-ports=161 +add action=dst-nat chain=dstnat comment="cephosd1.brilliant.com.bd\r\ + \n" dst-port=1621 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.81 to-ports=161 +add action=dst-nat chain=dstnat comment="cephosd2.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1622 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.82 to-ports=161 +add action=dst-nat chain=dstnat comment="cephosd3.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1623 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.83 to-ports=161 +add action=dst-nat chain=dstnat comment="cephosd4.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1624 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.84 to-ports=161 +add action=dst-nat chain=dstnat comment="cephosd5.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1625 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.85 to-ports=161 +add action=dst-nat chain=dstnat comment="cephssd5.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1631 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.118 to-ports=161 +add action=dst-nat chain=dstnat comment="cephosd6.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1636 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.95 to-ports=161 +add action=dst-nat chain=dstnat comment="cephssd1.brilliant.com.bd\r\ + \n\r\ + \n" disabled=yes dst-port=1628 in-interface=ether1 protocol=udp \ + to-addresses=192.168.20.86 to-ports=161 +add action=dst-nat chain=dstnat comment="cephssd2.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1629 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.87 to-ports=161 +add action=dst-nat chain=dstnat comment="cephssd3.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1630 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.94 to-ports=161 +add action=dst-nat chain=dstnat comment="cephssd4.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1632 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.89 to-ports=161 +add action=dst-nat chain=dstnat comment="cephssd6.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1633 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.117 to-ports=161 +add action=dst-nat chain=dstnat comment="cephssd7.brilliant.com.bd\r\ + \n\r\ + \n" dst-port=1634 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \ + protocol=udp to-addresses=192.168.20.93 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd1.brilliant.com.bd dst-port=\ + 1639 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.96 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd9.brilliant.com.bd dst-port=\ + 1640 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.97 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd8.brilliant.com.bd dst-port=\ + 1643 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.115 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd12.brilliant.com.bd dst-port=\ + 1644 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.116 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd6.brilliant.com.bd dst-port=\ + 1645 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.117 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd2.brilliant.com.bd dst-port=\ + 1646 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.87 to-ports=161 +add action=dst-nat chain=dstnat comment=cephosd7.brilliant.com.bd dst-port=\ + 1647 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.126 to-ports=161 +add action=dst-nat chain=dstnat comment=cephosd8.brilliant.com.bd dst-port=\ + 1648 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.129 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd13.brilliant.com.bd dst-port=\ + 1635 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.205 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd14.brilliant.com.bd dst-port=\ + 1636 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.211 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd11.brilliant.com.bd dst-port=\ + 1637 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + src-port="" to-addresses=192.168.20.203 to-ports=161 +add action=dst-nat chain=dstnat comment="ceph-export\r\ + \n\r\ + \n" dst-address=118.67.220.34 dst-port=9283 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=tcp src-address-list=\ + ceph-export-allow to-addresses=192.168.20.72 to-ports=9283 +add action=src-nat chain=srcnat disabled=yes dst-address=118.67.212.88 \ + to-addresses=172.17.1.59 +add action=src-nat chain=srcnat dst-address=118.67.212.115 to-addresses=\ + 172.17.1.59 +add action=dst-nat chain=dstnat comment=BDCOM-SW-CLoud dst-port=1626 \ + in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\ + 172.28.10.58 to-ports=161 +add action=masquerade chain=srcnat src-address=192.168.20.0/24 +add action=masquerade chain=srcnat src-address=192.168.25.0/24 +add action=src-nat chain=srcnat dst-address=192.168.20.0/24 src-address=\ + 192.168.10.0/24 to-addresses=192.168.20.1 +add action=masquerade chain=srcnat src-address=192.168.10.0/24 +add action=masquerade chain=srcnat src-address=192.168.12.253 +add action=masquerade chain=srcnat comment="test smtp" disabled=yes \ + src-address=192.168.12.0/24 +add action=masquerade chain=srcnat src-address=192.168.12.90 +add action=masquerade chain=srcnat +add action=dst-nat chain=dstnat comment=cephosd8 dst-port=1648 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\ + 192.168.20.129 to-ports=161 +add action=dst-nat chain=dstnat comment=cephssd10.brilliant.com.bd dst-port=\ + 1656 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \ + to-addresses=192.168.20.202 to-ports=161 +add action=dst-nat chain=dstnat comment=Nexus-7 dst-port=1681 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.72 \ + to-ports=161 +add action=dst-nat chain=dstnat comment=Nexus-8 dst-port=1681 in-interface=\ + sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.72 \ + to-ports=161 +/ip ipsec peer +add address=163.53.151.2/32 disabled=yes profile=pfsencesanjidaprofile1 \ + secret=123456 +add address=0.0.0.0/0 exchange-mode=main-l2tp generate-policy=port-override \ + passive=yes secret=K!ngK0rt0BB0B!muR-Cl0ud +add address=118.67.213.32/32 exchange-mode=ike2 local-address=118.67.220.34 \ + profile=PFSese secret=K!ngK0rt0BB0B!muR-Cl0ud +/ip ipsec policy +add disabled=yes dst-address=10.10.20.0/24 proposal=proposal-Cloud \ + sa-dst-address=36.255.69.66 sa-src-address=118.67.220.34 src-address=\ + 10.10.200.0/24 tunnel=yes +add comment="For VM Reachability" disabled=yes dst-address=10.100.10.0/24 \ + proposal=proposal-Cloud sa-dst-address=118.67.213.32 sa-src-address=\ + 118.67.220.34 src-address=192.168.25.0/24 tunnel=yes +add comment="For VM Reachability" disabled=yes dst-address=10.100.10.0/24 \ + proposal=proposal-Cloud sa-dst-address=118.67.213.32 sa-src-address=\ + 118.67.220.34 src-address=0.0.0.0/0 tunnel=yes +/ip route +add distance=1 gateway=118.67.220.33 +add check-gateway=ping distance=1 dst-address=10.100.200.0/24 gateway=\ + 10.12.13.2 +add check-gateway=ping disabled=yes distance=1 dst-address=192.168.12.20/32 \ + gateway=vlan-12-Storage-MGT pref-src=118.67.215.44 +/ip service +set telnet disabled=yes +set ftp disabled=yes +set ssh port=7900 +set api disabled=yes +set api-ssl disabled=yes +/lcd +set time-interval=hour +/ppp secret +add disabled=yes name=cloud password="0p3n\$t@cK-Br!ll!@nT-Cl0uD" service=\ + pptp +add disabled=yes name=cloud-idrac password=\ + "N@1zOpwn4557@39875@\$%#\$@34yteivt" profile=IDRAC-25 service=pptp +add disabled=yes name=cloud-enable password=Cl0uD-3n@bl3 service=pptp +add disabled=yes name=cloud-idrac-old password="!icl0ud-0p3n\$t@c!@ng\$#22" \ + profile=IDRAC-10 service=pptp +add disabled=yes name=ovpn password="!icl0ud-0p3n\$t@c!@ng\$#22" profile=ovpn \ + service=ovpn +add disabled=yes name=cloud.operation password="!icl0ud-0p3n\$t@c!@ng\$#22" \ + service=ovpn +add disabled=yes name=openvpn password="!icl0ud-0p3n\$t@c!@ng\$#22" profile=\ + vpn_profile service=ovpn +add disabled=yes name=cloud-idrac password="N@1zOpw@\$%#\$@34ytl2tp%" \ + profile=IDRAC-25 service=l2tp +add name=sys-likhon password="l@#\$%i#\$fo0l@#\$B!1w!h864@8783y5g6@8grN" \ + profile=IDRAC-25 service=pptp +add name=sabbir password="C0##\$tl@#\$B!11!h@73y5g6@8gr" profile=IDRAC-25 \ + service=pptp +add name=tanvir password=@Cloud@1994#Rahman# profile=IDRAC-25 service=pptp +add name=farhad password="\$h@ik@t1990" profile=IDRAC-25 service=pptp +add name=mostofa password=Piprardimgol164@ profile=IDRAC-25 service=pptp +add name=pranto password=Pie@3.1416 profile=IDRAC-25 service=pptp +add name=ibrahim password=ibr@2025 profile=IDRAC-25 service=pptp +add name=mosiur password="123R@\$h!k4560ny789Me" profile=IDRAC-25 service=\ + pptp +add name=nazmul password=N@zmul!231 profile=IDRAC-25 service=pptp +add name=riyad password=Br!ll!@nt-F0rR!@D#4Y profile=IDRAC-25 service=pptp +/snmp +set contact=cloud.operations enabled=yes location=Shahjadpur trap-community=\ + intercLoud trap-generators=interfaces trap-interfaces=all trap-version=2 +/system clock +set time-zone-name=Asia/Dhaka +/system identity +set name=CLOUD-MGT-GW-RTR +/system logging +add action=remote topics=critical +add action=remote topics=error +add action=remote topics=info +add action=remote topics=warning +add action=remote disabled=yes topics=l2tp +add disabled=yes topics=pptp +add action=remote disabled=yes topics=pptp +/system routerboard settings +set auto-upgrade=yes