added backup script for mikrotik, mikrotik backup for 23-feb taken
This commit is contained in:
Mosiur Rahman
404
mikrotik/mgt-mkt-rtr-2026-02-23.conf
Normal file
404
mikrotik/mgt-mkt-rtr-2026-02-23.conf
Normal file
@@ -0,0 +1,404 @@
|
||||
# feb/23/2026 11:38:53 by RouterOS 6.43.8
|
||||
# software id = QH40-TY32
|
||||
#
|
||||
# model = RouterBOARD 3011UiAS
|
||||
# serial number = 781006ECE3E4
|
||||
/interface pptp-server
|
||||
add name=pptp-in1 user=""
|
||||
/interface bridge
|
||||
add arp=proxy-arp name=Bridge-Local
|
||||
add name=NVCM-MGT-Bridge
|
||||
add name=Test
|
||||
add name=bridge-for-idrac-access
|
||||
/interface ethernet
|
||||
set [ find default-name=ether1 ] speed=100Mbps
|
||||
set [ find default-name=ether2 ] name=ether2-To-Dlink-for-Vlan-10,11,12,16 \
|
||||
speed=100Mbps
|
||||
set [ find default-name=ether3 ] name=ether3-To-iDRAC-Dlink-SW-4 speed=\
|
||||
100Mbps
|
||||
set [ find default-name=ether4 ] speed=100Mbps
|
||||
set [ find default-name=ether5 ] speed=100Mbps
|
||||
set [ find default-name=ether6 ] name=ether6-To-Cisco-48-Port-SW speed=\
|
||||
100Mbps
|
||||
set [ find default-name=ether7 ] speed=100Mbps
|
||||
set [ find default-name=ether8 ] speed=100Mbps
|
||||
set [ find default-name=ether9 ] name=ether9-To-Meeting-Room-From-C15-To-A22 \
|
||||
speed=100Mbps
|
||||
set [ find default-name=ether10 ] speed=100Mbps
|
||||
set [ find default-name=sfp1 ] advertise=\
|
||||
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3
|
||||
/interface l2tp-server
|
||||
add name=l2tp-Server user=cloud-operation
|
||||
/interface ovpn-server
|
||||
add name=ovpn-in1 user=cloud
|
||||
/interface eoip
|
||||
add mac-address=02:B8:09:8A:07:F9 name=EoIP-For-Cloud-Wifi-To-MGT-SW \
|
||||
remote-address=163.53.151.2 tunnel-id=1002
|
||||
add local-address=118.67.220.34 mac-address=02:BA:28:7F:6E:BB mtu=1500 name=\
|
||||
eoip-tunnel-For-Testbed remote-address=118.67.214.225 tunnel-id=1001
|
||||
/interface gre
|
||||
add local-address=118.67.220.34 name=GRE-TUNNEL-FOR-NETAPP remote-address=\
|
||||
118.67.214.225
|
||||
add local-address=118.67.220.34 name=gre-tunnel-Cloud-Wifi-iDRAC \
|
||||
remote-address=163.53.151.2
|
||||
/interface vlan
|
||||
add interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=VLAN-101-NOVO-MGT \
|
||||
vlan-id=101
|
||||
add arp=proxy-arp interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=\
|
||||
vlan-10-iDRAC-MGT vlan-id=10
|
||||
add interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=vlan-12-Storage-MGT \
|
||||
vlan-id=12
|
||||
add arp=proxy-arp interface=ether6-To-Cisco-48-Port-SW name=\
|
||||
vlan-20-Server-Management vlan-id=20
|
||||
add arp=proxy-arp interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=\
|
||||
vlan-25-iDRAC-MGT vlan-id=25
|
||||
add comment="for idrac access" interface=ether3-To-iDRAC-Dlink-SW-4 name=\
|
||||
vlan-25-idrac-access vlan-id=25
|
||||
add comment="for mgt vlan" interface=ether3-To-iDRAC-Dlink-SW-4 name=\
|
||||
vlan-111-cloud-mgt-idrac vlan-id=111
|
||||
/interface wireless security-profiles
|
||||
set [ find default=yes ] supplicant-identity=MikroTik
|
||||
/ip ipsec peer profile
|
||||
set [ find default=yes ] dh-group=modp1024 enc-algorithm=aes-256
|
||||
add dh-group=modp1024 enc-algorithm=aes-256 name=pfsencesanjidaprofile1
|
||||
add dh-group=ecp256,modp2048,modp1024 enc-algorithm=aes-256,aes-128,3des \
|
||||
hash-algorithm=sha256 name=PFSese nat-traversal=no
|
||||
/ip ipsec proposal
|
||||
set [ find default=yes ] pfs-group=none
|
||||
add auth-algorithms=sha256 enc-algorithms=aes-256-cbc,aes-256-ctr,aes-256-gcm \
|
||||
lifetime=1d30m name=proposal-Cloud pfs-group=modp1536
|
||||
/ip pool
|
||||
add name=SVR-MGT-POOL ranges=192.168.20.230-192.168.20.254
|
||||
add name=IDRAC-10-MGT-POOL ranges=192.168.10.151-192.168.10.165
|
||||
add name=IDRAC-25-MGT-POOL ranges=192.168.25.151-192.168.25.185
|
||||
add name=ovpn-pool ranges=192.168.30.1-192.168.30.100
|
||||
add name=vpn_pool ranges=192.168.40.1-192.168.40.100
|
||||
/ppp profile
|
||||
set *0 change-tcp-mss=default dns-server=103.248.12.62,8.8.8.8 local-address=\
|
||||
SVR-MGT-POOL remote-address=SVR-MGT-POOL
|
||||
add dns-server=103.248.12.62 local-address=IDRAC-10-MGT-POOL name=IDRAC-10 \
|
||||
remote-address=IDRAC-10-MGT-POOL wins-server=8.8.8.8
|
||||
add dns-server=8.8.8.8 local-address=IDRAC-25-MGT-POOL name=IDRAC-25 \
|
||||
remote-address=IDRAC-25-MGT-POOL wins-server=1.1.1.1
|
||||
add local-address=192.168.30.200 name=ovpn remote-address=ovpn-pool
|
||||
add local-address=192.168.40.1 name=vpn_profile remote-address=vpn_pool
|
||||
/snmp community
|
||||
add addresses=103.248.12.32/27,172.30.30.0/24 name=intercLoud
|
||||
/system logging action
|
||||
set 3 remote=172.30.30.42 src-address=118.67.220.34
|
||||
/interface bridge port
|
||||
add bridge=bridge-for-idrac-access interface=vlan-25-idrac-access
|
||||
add bridge=bridge-for-idrac-access interface=vlan-25-iDRAC-MGT
|
||||
/interface l2tp-server server
|
||||
set default-profile=IDRAC-25 ipsec-secret=K!ngK0rt0BB0B!muR-Cl0ud use-ipsec=\
|
||||
yes
|
||||
/interface ovpn-server server
|
||||
set certificate=SERVER cipher=aes256 default-profile=IDRAC-25 enabled=yes
|
||||
/interface pptp-server server
|
||||
set enabled=yes
|
||||
/ip address
|
||||
add address=192.168.20.1/24 interface=vlan-20-Server-Management network=\
|
||||
192.168.20.0
|
||||
add address=192.168.10.150/24 interface=vlan-10-iDRAC-MGT network=\
|
||||
192.168.10.0
|
||||
add address=192.168.12.150/24 interface=vlan-12-Storage-MGT network=\
|
||||
192.168.12.0
|
||||
add address=192.168.25.150/24 interface=bridge-for-idrac-access network=\
|
||||
192.168.25.0
|
||||
add address=172.17.1.59/26 interface=VLAN-101-NOVO-MGT network=172.17.1.0
|
||||
add address=10.10.200.1/24 interface=ether3-To-iDRAC-Dlink-SW-4 network=\
|
||||
10.10.200.0
|
||||
add address=10.209.42.1/24 interface=vlan-111-cloud-mgt-idrac network=\
|
||||
10.209.42.0
|
||||
add address=10.200.200.254/24 comment="IP For Switch Mangement" interface=\
|
||||
eoip-tunnel-For-Testbed network=10.200.200.0
|
||||
add address=192.168.106.254/24 comment="IP For BR-EX " interface=\
|
||||
eoip-tunnel-For-Testbed network=192.168.106.0
|
||||
add address=192.168.104.254/24 interface=eoip-tunnel-For-Testbed network=\
|
||||
192.168.104.0
|
||||
add address=10.12.13.1/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\
|
||||
10.12.13.0
|
||||
add address=192.168.109.254/24 comment="IP For Floating-IP-1" interface=\
|
||||
eoip-tunnel-For-Testbed network=192.168.109.0
|
||||
add address=192.168.110.254/24 comment="IP For Floating-IP-2" interface=\
|
||||
eoip-tunnel-For-Testbed network=192.168.110.0
|
||||
add address=118.67.220.34/30 interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
network=118.67.220.32
|
||||
add address=192.168.105.254/24 comment=iDRAC interface=\
|
||||
eoip-tunnel-For-Testbed network=192.168.105.0
|
||||
add address=10.100.200.14/24 disabled=yes interface=\
|
||||
EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0
|
||||
add address=10.11.14.1/30 interface=GRE-TUNNEL-FOR-NETAPP network=10.11.14.0
|
||||
/ip dns
|
||||
set servers=8.8.8.8,1.1.1.1
|
||||
/ip firewall address-list
|
||||
add address=103.9.136.34 list=admin-access
|
||||
add address=103.9.136.35 list=admin-access
|
||||
add address=103.248.12.62 list=admin-access
|
||||
add address=103.9.136.66 list=admin-access
|
||||
add address=118.67.220.8/30 list=admin-access
|
||||
add address=172.17.1.0/26 list=admin-access
|
||||
add address=103.248.12.0/24 list=admin-access
|
||||
add address=103.23.40.0/24 list=admin-access
|
||||
add address=172.30.30.0/24 list=admin-access
|
||||
add address=163.53.150.248/29 list=admin-access
|
||||
add address=103.248.13.66 list=admin-access
|
||||
add address=163.53.151.2 list=admin-access
|
||||
add address=118.67.212.97 list=ceph-export-allow
|
||||
add address=118.67.212.115 list=ceph-export-allow
|
||||
add address=163.53.151.2 list=ceph-export-allow
|
||||
add address=103.248.13.66 list=ceph-export-allow
|
||||
add address=36.255.68.74 comment=gk list=ceph-export-allow
|
||||
add address=36.255.68.5 comment=gk list=ceph-export-allow
|
||||
add address=103.209.43.134 list=admin-access
|
||||
add address=163.53.151.0/29 list=admin-access
|
||||
/ip firewall filter
|
||||
add chain=input comment="For RTR" src-address-list=admin-access
|
||||
add action=drop chain=input disabled=yes dst-port=21,22,23,80,443,8291 \
|
||||
protocol=tcp
|
||||
add action=accept chain=forward dst-address=10.10.200.0/24 src-address=\
|
||||
10.10.20.0/24
|
||||
add action=accept chain=input port=1701,500,4500 protocol=udp
|
||||
add action=accept chain=input protocol=ipsec-esp
|
||||
/ip firewall nat
|
||||
add action=dst-nat chain=dstnat comment=nexus-3 dst-port=1613 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.45 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=nexus-2 dst-port=1638 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.23 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=nexus-1 dst-port=1637 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.20 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=nexus-5 dst-port=1641 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.61 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=Toku-BDCOM-SW disabled=yes dst-port=\
|
||||
1637 in-interface=ether1 protocol=udp to-addresses=172.28.10.58 to-ports=\
|
||||
161
|
||||
add action=dst-nat chain=dstnat comment=nexus-4 dst-port=1614 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.46 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=nexus-6 dst-port=1642 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.62 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=Cisco-48-Port-SW dst-port=1627 \
|
||||
in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
|
||||
172.17.1.47 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=\
|
||||
"controller1-phy.brilliant.com.bd\r\
|
||||
\n" dst-port=1615 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.111 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=\
|
||||
"controller2-phy.brilliant.com.bd\r\
|
||||
\n" dst-port=1616 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.112 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=\
|
||||
"controller3-phy.brilliant.com.bd\r\
|
||||
\n" dst-port=1617 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.114 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="ceph-mgt-phy1.brilliant.com.bd\r\
|
||||
\n" dst-port=1618 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.161 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="ceph-mgt-phy2.brilliant.com.bd\r\
|
||||
\n" dst-port=1619 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.162 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="ceph-mgt-phy3.brilliant.com.bd\r\
|
||||
\n" dst-port=1620 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.163 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd1.brilliant.com.bd\r\
|
||||
\n" dst-port=1621 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.81 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd2.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1622 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.82 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd3.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1623 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.83 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd4.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1624 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.84 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd5.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1625 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.85 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd5.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1631 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.118 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephosd6.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1636 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.95 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd1.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" disabled=yes dst-port=1628 in-interface=ether1 protocol=udp \
|
||||
to-addresses=192.168.20.86 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd2.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1629 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.87 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd3.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1630 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.94 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd4.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1632 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.89 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd6.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1633 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.117 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="cephssd7.brilliant.com.bd\r\
|
||||
\n\r\
|
||||
\n" dst-port=1634 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
|
||||
protocol=udp to-addresses=192.168.20.93 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd1.brilliant.com.bd dst-port=\
|
||||
1639 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.96 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd9.brilliant.com.bd dst-port=\
|
||||
1640 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.97 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd8.brilliant.com.bd dst-port=\
|
||||
1643 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.115 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd12.brilliant.com.bd dst-port=\
|
||||
1644 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.116 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd6.brilliant.com.bd dst-port=\
|
||||
1645 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.117 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd2.brilliant.com.bd dst-port=\
|
||||
1646 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.87 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephosd7.brilliant.com.bd dst-port=\
|
||||
1647 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.126 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephosd8.brilliant.com.bd dst-port=\
|
||||
1648 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.129 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd13.brilliant.com.bd dst-port=\
|
||||
1635 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.205 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd14.brilliant.com.bd dst-port=\
|
||||
1636 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.211 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd11.brilliant.com.bd dst-port=\
|
||||
1637 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
src-port="" to-addresses=192.168.20.203 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment="ceph-export\r\
|
||||
\n\r\
|
||||
\n" dst-address=118.67.220.34 dst-port=9283 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=tcp src-address-list=\
|
||||
ceph-export-allow to-addresses=192.168.20.72 to-ports=9283
|
||||
add action=src-nat chain=srcnat disabled=yes dst-address=118.67.212.88 \
|
||||
to-addresses=172.17.1.59
|
||||
add action=src-nat chain=srcnat dst-address=118.67.212.115 to-addresses=\
|
||||
172.17.1.59
|
||||
add action=dst-nat chain=dstnat comment=BDCOM-SW-CLoud dst-port=1626 \
|
||||
in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
|
||||
172.28.10.58 to-ports=161
|
||||
add action=masquerade chain=srcnat src-address=192.168.20.0/24
|
||||
add action=masquerade chain=srcnat src-address=192.168.25.0/24
|
||||
add action=src-nat chain=srcnat dst-address=192.168.20.0/24 src-address=\
|
||||
192.168.10.0/24 to-addresses=192.168.20.1
|
||||
add action=masquerade chain=srcnat src-address=192.168.10.0/24
|
||||
add action=masquerade chain=srcnat src-address=192.168.12.253
|
||||
add action=masquerade chain=srcnat comment="test smtp" disabled=yes \
|
||||
src-address=192.168.12.0/24
|
||||
add action=masquerade chain=srcnat src-address=192.168.12.90
|
||||
add action=masquerade chain=srcnat
|
||||
add action=dst-nat chain=dstnat comment=cephosd8 dst-port=1648 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
|
||||
192.168.20.129 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=cephssd10.brilliant.com.bd dst-port=\
|
||||
1656 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
|
||||
to-addresses=192.168.20.202 to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=Nexus-7 dst-port=1681 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.72 \
|
||||
to-ports=161
|
||||
add action=dst-nat chain=dstnat comment=Nexus-8 dst-port=1681 in-interface=\
|
||||
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.72 \
|
||||
to-ports=161
|
||||
/ip ipsec peer
|
||||
add address=163.53.151.2/32 disabled=yes profile=pfsencesanjidaprofile1 \
|
||||
secret=123456
|
||||
add address=0.0.0.0/0 exchange-mode=main-l2tp generate-policy=port-override \
|
||||
passive=yes secret=K!ngK0rt0BB0B!muR-Cl0ud
|
||||
add address=118.67.213.32/32 exchange-mode=ike2 local-address=118.67.220.34 \
|
||||
profile=PFSese secret=K!ngK0rt0BB0B!muR-Cl0ud
|
||||
/ip ipsec policy
|
||||
add disabled=yes dst-address=10.10.20.0/24 proposal=proposal-Cloud \
|
||||
sa-dst-address=36.255.69.66 sa-src-address=118.67.220.34 src-address=\
|
||||
10.10.200.0/24 tunnel=yes
|
||||
add comment="For VM Reachability" disabled=yes dst-address=10.100.10.0/24 \
|
||||
proposal=proposal-Cloud sa-dst-address=118.67.213.32 sa-src-address=\
|
||||
118.67.220.34 src-address=192.168.25.0/24 tunnel=yes
|
||||
add comment="For VM Reachability" disabled=yes dst-address=10.100.10.0/24 \
|
||||
proposal=proposal-Cloud sa-dst-address=118.67.213.32 sa-src-address=\
|
||||
118.67.220.34 src-address=0.0.0.0/0 tunnel=yes
|
||||
/ip route
|
||||
add distance=1 gateway=118.67.220.33
|
||||
add check-gateway=ping distance=1 dst-address=10.100.200.0/24 gateway=\
|
||||
10.12.13.2
|
||||
add check-gateway=ping disabled=yes distance=1 dst-address=192.168.12.20/32 \
|
||||
gateway=vlan-12-Storage-MGT pref-src=118.67.215.44
|
||||
/ip service
|
||||
set telnet disabled=yes
|
||||
set ftp disabled=yes
|
||||
set ssh port=7900
|
||||
set api disabled=yes
|
||||
set api-ssl disabled=yes
|
||||
/lcd
|
||||
set time-interval=hour
|
||||
/ppp secret
|
||||
add disabled=yes name=cloud password="0p3n\$t@cK-Br!ll!@nT-Cl0uD" service=\
|
||||
pptp
|
||||
add disabled=yes name=cloud-idrac password=\
|
||||
"N@1zOpwn4557@39875@\$%#\$@34yteivt" profile=IDRAC-25 service=pptp
|
||||
add disabled=yes name=cloud-enable password=Cl0uD-3n@bl3 service=pptp
|
||||
add disabled=yes name=cloud-idrac-old password="!icl0ud-0p3n\$t@c!@ng\$#22" \
|
||||
profile=IDRAC-10 service=pptp
|
||||
add disabled=yes name=ovpn password="!icl0ud-0p3n\$t@c!@ng\$#22" profile=ovpn \
|
||||
service=ovpn
|
||||
add disabled=yes name=cloud.operation password="!icl0ud-0p3n\$t@c!@ng\$#22" \
|
||||
service=ovpn
|
||||
add disabled=yes name=openvpn password="!icl0ud-0p3n\$t@c!@ng\$#22" profile=\
|
||||
vpn_profile service=ovpn
|
||||
add disabled=yes name=cloud-idrac password="N@1zOpw@\$%#\$@34ytl2tp%" \
|
||||
profile=IDRAC-25 service=l2tp
|
||||
add name=sys-likhon password="l@#\$%i#\$fo0l@#\$B!1w!h864@8783y5g6@8grN" \
|
||||
profile=IDRAC-25 service=pptp
|
||||
add name=sabbir password="C0##\$tl@#\$B!11!h@73y5g6@8gr" profile=IDRAC-25 \
|
||||
service=pptp
|
||||
add name=tanvir password=@Cloud@1994#Rahman# profile=IDRAC-25 service=pptp
|
||||
add name=farhad password="\$h@ik@t1990" profile=IDRAC-25 service=pptp
|
||||
add name=mostofa password=Piprardimgol164@ profile=IDRAC-25 service=pptp
|
||||
add name=pranto password=Pie@3.1416 profile=IDRAC-25 service=pptp
|
||||
add name=ibrahim password=ibr@2025 profile=IDRAC-25 service=pptp
|
||||
add name=mosiur password="123R@\$h!k4560ny789Me" profile=IDRAC-25 service=\
|
||||
pptp
|
||||
add name=nazmul password=N@zmul!231 profile=IDRAC-25 service=pptp
|
||||
add name=riyad password=Br!ll!@nt-F0rR!@D#4Y profile=IDRAC-25 service=pptp
|
||||
/snmp
|
||||
set contact=cloud.operations enabled=yes location=Shahjadpur trap-community=\
|
||||
intercLoud trap-generators=interfaces trap-interfaces=all trap-version=2
|
||||
/system clock
|
||||
set time-zone-name=Asia/Dhaka
|
||||
/system identity
|
||||
set name=CLOUD-MGT-GW-RTR
|
||||
/system logging
|
||||
add action=remote topics=critical
|
||||
add action=remote topics=error
|
||||
add action=remote topics=info
|
||||
add action=remote topics=warning
|
||||
add action=remote disabled=yes topics=l2tp
|
||||
add disabled=yes topics=pptp
|
||||
add action=remote disabled=yes topics=pptp
|
||||
/system routerboard settings
|
||||
set auto-upgrade=yes
|
||||
Reference in New Issue
Block a user