added backup script for mikrotik, mikrotik backup for 23-feb taken

This commit is contained in:
Mosiur Rahman
2026-02-23 11:40:37 +06:00
parent 2a7656040d
commit 4a9d026b42
5 changed files with 800 additions and 0 deletions

15
backup-script.sh Normal file
View File

@@ -0,0 +1,15 @@
#!/bin/bash
DATE=$(date +%F)
#echo $DATE
echo "Backing up Wifi router"
sshpass -p '!CL46#$)CL0uD#@eNT%(*#$5FrgE' ssh admin@163.53.151.2 -p 7900 '/export' >> mikrotik/cloud-wifi-mkt-rtr-$DATE.conf
echo "Backing up RND Router"
sshpass -p 'B!r!P46346t@#chQmE=' ssh admin@118.67.214.225 -p 7900 '/export' >> mikrotik/RND-mkt-rtr-$DATE.conf
#sshpass -p '!"N@zud@br!11!@nT@%$%^-oh65v8346@#45' ssh admin@118.67.220.34 -p 7900 '/export' >> mgt-mkt-rtr-$DATE.conf
echo "Backing up MGT Router"
sshpass -p 'N@zud@br!11!@nT@%$%^-oh65v8346@#45' ssh -o HostKeyAlgorithms=+ssh-dss -o PubkeyAcceptedAlgorithms=+ssh-rsa admin@118.67.220.34 -p 7900 /export >> mikrotik/mgt-mkt-rtr-$DATE.conf

BIN
mikrotik/Addresses.CDB Normal file

Binary file not shown.

View File

@@ -0,0 +1,185 @@
# dec/24/1971 16:26:54 by RouterOS 6.47.7
# software id = S2NZ-H089
#
# model = 2011UiAS
# serial number = 77AD072033A2
/interface bridge
add name=Public-IP-Test-Bridge
add name=TestBed-Tunnel-Bridge
/interface ethernet
set [ find default-name=ether2 ] name=ether2-To-TB-BDCOM-1-G0/1
set [ find default-name=ether3 ] name=ether3-To-TB-BDCOM-2
set [ find default-name=ether8 ] advertise="10M-half,10M-full,100M-half,100M-f\
ull,1000M-half,1000M-full,2500M-full,5000M-full,10000M-full" name=\
ether8-iDRAC-MGT-Dlink
set [ find default-name=ether9 ] name=ether9-From-Shahjadpur-3-Via-Dlink-2
/interface eoip
add local-address=118.67.214.225 mac-address=02:55:2F:92:2A:E5 mtu=1500 name=\
eoip-tunnel-for-Cloud-RTR remote-address=118.67.220.34 tunnel-id=1001
/interface gre
add local-address=118.67.214.225 name=GRE-TUNNEL-FOR-NVME-NETAPP \
remote-address=118.67.220.34
/interface vlan
add comment="server mgmt" interface=ether8-iDRAC-MGT-Dlink name=104 vlan-id=\
104
add comment=IDRAC interface=ether8-iDRAC-MGT-Dlink name=VLAN-105-iDRAC-DELL \
vlan-id=105
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-106-External-Traffic \
vlan-id=106
add interface=ether2-To-TB-BDCOM-1-G0/1 name=\
VLAN-107-Interal-Traffic-Admin-Traffic vlan-id=107
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-109-Floating-Network-1 \
vlan-id=109
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-110-Floating-Network-2 \
vlan-id=110
add interface=ether2-To-TB-BDCOM-1-G0/1 name=\
VLAN-111-Floating-Network-3-Public-IP vlan-id=111
add interface=ether8-iDRAC-MGT-Dlink name=vlan-101-SW-MGT vlan-id=101
/interface bonding
add disabled=yes mode=balance-xor name=bonding-Testbed-Switchport-Aggregation \
slaves=ether2-To-TB-BDCOM-1-G0/1,ether3-To-TB-BDCOM-2
/interface vlan
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
VLAN-103-External-Traffic vlan-id=103
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
VLAN-106-Tanet-Traffic vlan-id=106
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
VLAN1-112-Floating-Network-4 vlan-id=112
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-server option
add code=66 name=pxe-server value="'192.168.104.118'"
add code=67 name=pxe-file value="'pxelinux.0'"
/ip dhcp-server option sets
add name=maas-pxe options=pxe-server,pxe-file
/ip ipsec profile
add enc-algorithm=aes-256,aes-192,aes-128,3des hash-algorithm=sha256 name=\
IPKA
add dh-group=modp2048 enc-algorithm=aes-256 hash-algorithm=sha256 name=1
/ip ipsec peer
add address=103.120.192.6/32 local-address=118.67.214.225 name=\
Peer-To-Ibrahim-Bhai-Project profile=1
/ip ipsec proposal
set [ find default=yes ] lifetime=1h30m pfs-group=modp2048
add auth-algorithms=sha256 enc-algorithms=\
aes-256-cbc,aes-256-gcm,aes-192-cbc,aes-128-cbc name=ike-phase-1 \
pfs-group=modp2048
/ip pool
add name=L2VPN-Pool ranges=10.150.169.1-10.150.169.10
/ppp profile
add local-address=10.150.170.1 name=L2TP-VPN-Profile remote-address=\
L2VPN-Pool
/interface bridge port
add bridge=TestBed-Tunnel-Bridge interface=vlan-101-SW-MGT
add bridge=TestBed-Tunnel-Bridge interface=eoip-tunnel-for-Cloud-RTR
add bridge=TestBed-Tunnel-Bridge interface=VLAN-105-iDRAC-DELL
add bridge=TestBed-Tunnel-Bridge interface=104
add bridge=TestBed-Tunnel-Bridge interface=VLAN-109-Floating-Network-1
add bridge=TestBed-Tunnel-Bridge interface=VLAN-106-External-Traffic
add bridge=TestBed-Tunnel-Bridge interface=VLAN-110-Floating-Network-2
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface l2tp-server server
set default-profile=L2TP-VPN-Profile enabled=yes ipsec-secret="cl0ud\$#@534" \
use-ipsec=yes
/interface list member
add interface=ether1 list=WAN
add list=LAN
/ip address
add address=192.168.110.1/24 comment="LB- network-vlan-110" interface=\
VLAN-110-Floating-Network-2 network=192.168.110.0
add address=118.67.214.225/29 comment="public network-vlan-103" interface=104 \
network=118.67.214.224
add address=192.168.104.1/24 comment="server mgmt-vlan-104" interface=104 \
network=192.168.104.0
add address=172.21.1.78/30 interface=ether9-From-Shahjadpur-3-Via-Dlink-2 \
network=172.21.1.76
add address=192.168.105.1/24 comment=IDRAC-vlan-105 interface=\
VLAN-105-iDRAC-DELL network=192.168.105.0
add address=192.168.106.1/24 comment=tenant-vlan-106 interface=\
VLAN-106-External-Traffic network=192.168.106.0
add address=192.168.107.1/24 comment="admin/internal IP-107-Geneve" \
interface=VLAN-107-Interal-Traffic-Admin-Traffic network=192.168.107.0
add address=192.168.103.1/24 comment="public network-vlan-103" interface=\
VLAN-103-External-Traffic network=192.168.103.0
add address=192.168.109.1/24 comment="floating network-vlan-109-temp" \
interface=VLAN-109-Floating-Network-1 network=192.168.109.0
add address=103.120.192.1/28 comment="floating ip-vlan-111" interface=\
VLAN-111-Floating-Network-3-Public-IP network=103.120.192.0
add address=192.168.112.1/24 interface=VLAN1-112-Floating-Network-4 network=\
192.168.112.0
add address=10.200.200.1/24 interface=vlan-101-SW-MGT network=10.200.200.0
add address=172.16.1.1/24 interface=ether6 network=172.16.1.0
add address=118.67.221.217/29 interface=104 network=118.67.221.216
add address=10.11.14.2/30 interface=GRE-TUNNEL-FOR-NVME-NETAPP network=\
10.11.14.0
/ip arp
add address=192.168.112.183 interface=VLAN1-112-Floating-Network-4 \
mac-address=FA:16:3E:0C:47:90
/ip dhcp-server network
add address=192.168.104.0/24 dhcp-option-set=maas-pxe
/ip firewall filter
add action=accept chain=input dst-port=500 protocol=udp
add action=accept chain=input dst-port=4500 protocol=udp
add action=accept chain=input protocol=ipsec-esp
add action=accept chain=forward dst-address=192.168.106.0/24 src-address=\
192.168.104.0/24
add action=accept chain=forward dst-address=192.168.104.0/24 src-address=\
192.168.106.0/24
/ip firewall nat
add action=accept chain=srcnat dst-address=192.168.20.0/24
add action=accept chain=srcnat dst-address=10.10.50.0/24 src-address=\
192.168.104.0/24
add action=src-nat chain=srcnat src-address=192.168.104.0/24 to-addresses=\
118.67.214.225
add action=src-nat chain=srcnat src-address=10.10.10.0/24 src-address-list="" \
to-addresses=118.67.214.225
add action=src-nat chain=srcnat src-address=10.150.169.0/24 src-address-list=\
"" to-addresses=118.67.214.225
add action=src-nat chain=srcnat src-address=192.168.111.0/24 to-addresses=\
118.67.214.225
add action=src-nat chain=srcnat src-address=192.168.109.0/24 to-addresses=\
118.67.214.225
add action=src-nat chain=srcnat src-address=192.168.110.0/24 to-addresses=\
118.67.214.225
add action=accept chain=srcnat dst-address=192.168.106.0/24 src-address=\
192.168.104.0/24
add action=accept chain=srcnat dst-address=192.168.104.0/24 src-address=\
192.168.106.0/24
add action=src-nat chain=srcnat src-address=192.168.106.0/24 to-addresses=\
118.67.214.225
/ip ipsec identity
add peer=Peer-To-Ibrahim-Bhai-Project secret="@sdf123\$"
/ip ipsec policy
add dst-address=10.10.50.0/24 peer=Peer-To-Ibrahim-Bhai-Project proposal=\
ike-phase-1 sa-dst-address=103.120.192.6 sa-src-address=118.67.214.225 \
src-address=192.168.104.0/24 tunnel=yes
/ip route
add distance=1 gateway=172.21.1.77
add check-gateway=ping disabled=yes distance=1 dst-address=10.90.90.90/32 \
gateway=ether8-iDRAC-MGT-Dlink
add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\
10.11.14.1
add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\
10.11.14.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=8090
set ssh port=7900
set api disabled=yes
set winbox port=58923
set api-ssl disabled=yes
/ipv6 address
add address=2406:f100:9:100::2/126 advertise=no interface=\
ether9-From-Shahjadpur-3-Via-Dlink-2
/ppp secret
add name=L2TP-CLOUD password="cl0ud\$#@534e" profile=L2TP-VPN-Profile \
service=l2tp
/system identity
set name=Cloud-RND
/system logging
add topics=debug

View File

@@ -0,0 +1,196 @@
# feb/23/2026 11:38:13 by RouterOS 6.49.15
# software id = FM63-EBFC
#
# model = 2011UiAS-2HnD
# serial number = 5E6D057D6D6C
/interface bridge
add name=BR-VPN-QUAR
add name=LAN-Bridge
add name=Loopback-Softify-Test
add name=PPTP-Clients
add name=Public_IP-WAN_Bridge
add name=loopback
/interface ethernet
set [ find default-name=ether1 ] name=ether1-UPlink-Shahjadpur-3
set [ find default-name=ether2 ] name=ether2-Public-Interface
set [ find default-name=ether3 ] name=ether3-Public-Interface
set [ find default-name=ether4 ] name=ether4-To-TestBed-SW
set [ find default-name=ether5 ] name=ether5-Mosiur-PC
set [ find default-name=ether6 ] name=ether6-LAN-Interface
set [ find default-name=ether7 ] name=ether7-LAN-Interface
set [ find default-name=ether8 ] name=ether8-LAN-Interface
set [ find default-name=ether9 ] name=\
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23
set [ find default-name=ether10 ] name=ether10-LAN-Interface
/interface gre
add disabled=yes dont-fragment=inherit local-address=163.53.151.2 mtu=1326 \
name=Test-GRE-Tunnel remote-address=10.20.30.14
add disabled=yes local-address=163.53.151.2 mtu=1426 name=gre-CHR \
remote-address=118.67.212.21
add local-address=163.53.151.2 name=gre-tunnel-Cloud-Wifi-iDRAC \
remote-address=118.67.220.34
/interface eoip
add mac-address=02:24:D1:15:90:51 name=EoIP-For-Cloud-Wifi-To-MGT-SW \
remote-address=118.67.220.34 tunnel-id=1002
/interface vlan
add disabled=yes interface=ether4-To-TestBed-SW name=VLAN-TestBed-1010 \
vlan-id=1010
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=\
Cloud-Wifi-Security-Profile supplicant-identity="" wpa2-pre-shared-key=\
M3gh3r-T0r0ng0-B@rta
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=bangladesh disabled=\
no frequency=2462 installation=indoor mode=ap-bridge security-profile=\
Cloud-Wifi-Security-Profile ssid=cloud wps-mode=push-button-virtual-only
/ip dhcp-server
add disabled=no interface=PPTP-Clients lease-time=1h name=dhcp2
add disabled=no lease-time=1h name=dhcp3
add disabled=no interface=ether5-Mosiur-PC lease-time=1h name=dhcp4
add disabled=no interface=sfp1 lease-time=1h name=dhcp5
add disabled=no lease-time=1h name=dhcp6
/ip pool
add name=dhcp_pool0 ranges=10.100.200.20-10.100.200.254
add name=dhcp_pool1 ranges=10.100.200.20-10.100.200.254
add name=Pool-Quar ranges=10.10.10.0/24
add name=hs-pool-30 ranges=10.10.10.2-10.10.10.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=LAN-Bridge name=dhcp1
add address-pool=hs-pool-30 disabled=no interface=BR-VPN-QUAR lease-time=1h \
name=dhcp7
/ppp profile
add bridge=BR-VPN-QUAR bridge-learning=yes dns-server=10.10.10.1 \
local-address=10.10.10.1 name=prof-quar remote-address=Pool-Quar
/interface bridge port
add bridge=Public_IP-WAN_Bridge interface=ether2-Public-Interface
add bridge=Public_IP-WAN_Bridge interface=ether3-Public-Interface
add bridge=Public_IP-WAN_Bridge interface=ether4-To-TestBed-SW
add bridge=Public_IP-WAN_Bridge interface=ether5-Mosiur-PC
add bridge=Public_IP-WAN_Bridge interface=ether1-UPlink-Shahjadpur-3
add bridge=LAN-Bridge interface=wlan1
add bridge=LAN-Bridge interface=\
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23
add bridge=LAN-Bridge interface=ether7-LAN-Interface
add bridge=LAN-Bridge interface=ether8-LAN-Interface
add bridge=LAN-Bridge interface=ether10-LAN-Interface
/ip firewall connection tracking
set enabled=yes
/interface l2tp-server server
set default-profile=default
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=prof-quar \
enabled=yes
/interface wireless cap
set interfaces=wlan1
/ip address
add address=163.53.151.2/29 interface=Public_IP-WAN_Bridge network=\
163.53.151.0
add address=10.100.200.1/24 interface=LAN-Bridge network=10.100.200.0
add address=10.255.255.1/30 interface=\
ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23 network=10.255.255.0
add address=10.12.13.2/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\
10.12.13.0
add address=172.16.10.1/24 interface=ether5-Mosiur-PC network=172.16.10.0
add address=10.10.10.1/24 interface=BR-VPN-QUAR network=10.10.10.0
add address=10.100.200.15/24 disabled=yes interface=\
EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0
add address=10.222.10.2/30 interface=gre-CHR network=10.222.10.0
/ip arp
add address=10.100.200.182 interface=LAN-Bridge mac-address=F4:A9:97:DD:9F:75
/ip dhcp-server lease
add address=10.100.200.182 client-id=1:f4:a9:97:dd:9f:75 mac-address=\
F4:A9:97:DD:9F:75 server=dhcp1
add address=10.100.200.252 client-id=1:6c:3b:6b:cf:d5:cc mac-address=\
6C:3B:6B:CF:D5:CC server=dhcp1
add address=10.100.200.175 mac-address=B4:2E:99:16:BC:4C server=dhcp1
/ip dhcp-server network
add address=10.5.50.0/24 comment="hotspot network" gateway=10.5.50.1
add address=10.10.10.0/24 comment="hotspot network" gateway=10.10.10.1
add address=10.100.200.0/24 dns-server=8.8.8.8 gateway=10.100.200.1
add address=10.202.201.0/24 comment="hotspot network" gateway=10.202.201.1
add address=172.16.10.0/24 comment="hotspot network" gateway=172.16.10.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1
/ip firewall address-list
add address=10.100.200.0/24 list=DHCP-Pool
add address=163.53.149.35 list=DHCP-Pool
add address=10.100.200.175 list=10.100.200-Reach-ACL
add address=10.100.200.182 list=10.100.200-Reach-ACL
/ip firewall filter
add action=accept chain=forward src-address=10.100.200.0/24
add action=accept chain=input comment="Allow GRE" protocol=gre
/ip firewall mangle
add action=mark-routing chain=prerouting dst-address=118.67.220.34 dst-port=\
1723 new-routing-mark=pptp-traffic passthrough=yes protocol=tcp \
src-address-list=DHCP-Pool
add action=mark-routing chain=prerouting dst-address=118.67.220.34 \
new-routing-mark=pptp-traffic passthrough=yes protocol=gre \
src-address-list=DHCP-Pool
add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes \
protocol=tcp tcp-flags=syn
/ip firewall nat
add action=src-nat chain=srcnat disabled=yes src-address=10.20.30.14 \
to-addresses=103.209.42.105
add action=accept chain=srcnat dst-address=118.67.220.34 dst-port=1723 \
protocol=tcp
add action=accept chain=srcnat dst-address=118.67.220.34 protocol=gre
add action=src-nat chain=srcnat comment=\
"NAT Rule for Reaching 10.100.200.X using iDRAC VPN" dst-address-list=\
10.100.200-Reach-ACL src-address=10.12.13.1 to-addresses=10.100.200.1
add action=masquerade chain=srcnat out-interface=Public_IP-WAN_Bridge \
src-address-list="" to-addresses=163.53.151.2
/ip route
add check-gateway=ping distance=1 gateway=10.12.13.1 routing-mark=\
pptp-traffic
add check-gateway=ping distance=1 gateway=163.53.151.1
add check-gateway=ping distance=1 dst-address=10.200.200.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
add disabled=yes distance=10 dst-address=118.67.220.34/32 gateway=10.12.13.1
add check-gateway=ping disabled=yes distance=1 dst-address=118.67.220.34/32 \
gateway=10.12.13.1
add distance=1 dst-address=192.168.10.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\
10.12.13.1
add check-gateway=ping distance=1 dst-address=192.168.25.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.104.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.105.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.106.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.109.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.110.0/24 gateway=\
gre-tunnel-Cloud-Wifi-iDRAC
/ip service
set telnet disabled=yes port=12312
set ftp disabled=yes
set www port=7980
set ssh port=7900
set api disabled=yes
set api-ssl disabled=yes
/lcd interface pages
set 0 interfaces="sfp1,ether1-UPlink-Shahjadpur-3,ether2-Public-Interface,ethe\
r3-Public-Interface,ether4-To-TestBed-SW,ether5-Mosiur-PC,ether6-LAN-Inter\
face,ether7-LAN-Interface,ether8-LAN-Interface,ether9-To-Meeting-Room-From\
-C15-To-A22-Testbed-C23,ether10-LAN-Interface"
/ppp aaa
set use-radius=yes
/ppp secret
add name=silvarno password=123Rashik456
/radius
add address=163.53.151.4 secret=testing123 service=ppp
/system clock
set time-zone-name=Asia/Dhaka
/system identity
set name=Cloud-Wifi
/tool sniffer
set file-limit=10000KiB file-name=Test-WAN-VPN-14-01-26 filter-interface=all \
filter-port=47 memory-limit=1000KiB
/user aaa
set use-radius=yes

View File

@@ -0,0 +1,404 @@
# feb/23/2026 11:38:53 by RouterOS 6.43.8
# software id = QH40-TY32
#
# model = RouterBOARD 3011UiAS
# serial number = 781006ECE3E4
/interface pptp-server
add name=pptp-in1 user=""
/interface bridge
add arp=proxy-arp name=Bridge-Local
add name=NVCM-MGT-Bridge
add name=Test
add name=bridge-for-idrac-access
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] name=ether2-To-Dlink-for-Vlan-10,11,12,16 \
speed=100Mbps
set [ find default-name=ether3 ] name=ether3-To-iDRAC-Dlink-SW-4 speed=\
100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] name=ether6-To-Cisco-48-Port-SW speed=\
100Mbps
set [ find default-name=ether7 ] speed=100Mbps
set [ find default-name=ether8 ] speed=100Mbps
set [ find default-name=ether9 ] name=ether9-To-Meeting-Room-From-C15-To-A22 \
speed=100Mbps
set [ find default-name=ether10 ] speed=100Mbps
set [ find default-name=sfp1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3
/interface l2tp-server
add name=l2tp-Server user=cloud-operation
/interface ovpn-server
add name=ovpn-in1 user=cloud
/interface eoip
add mac-address=02:B8:09:8A:07:F9 name=EoIP-For-Cloud-Wifi-To-MGT-SW \
remote-address=163.53.151.2 tunnel-id=1002
add local-address=118.67.220.34 mac-address=02:BA:28:7F:6E:BB mtu=1500 name=\
eoip-tunnel-For-Testbed remote-address=118.67.214.225 tunnel-id=1001
/interface gre
add local-address=118.67.220.34 name=GRE-TUNNEL-FOR-NETAPP remote-address=\
118.67.214.225
add local-address=118.67.220.34 name=gre-tunnel-Cloud-Wifi-iDRAC \
remote-address=163.53.151.2
/interface vlan
add interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=VLAN-101-NOVO-MGT \
vlan-id=101
add arp=proxy-arp interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=\
vlan-10-iDRAC-MGT vlan-id=10
add interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=vlan-12-Storage-MGT \
vlan-id=12
add arp=proxy-arp interface=ether6-To-Cisco-48-Port-SW name=\
vlan-20-Server-Management vlan-id=20
add arp=proxy-arp interface=ether2-To-Dlink-for-Vlan-10,11,12,16 name=\
vlan-25-iDRAC-MGT vlan-id=25
add comment="for idrac access" interface=ether3-To-iDRAC-Dlink-SW-4 name=\
vlan-25-idrac-access vlan-id=25
add comment="for mgt vlan" interface=ether3-To-iDRAC-Dlink-SW-4 name=\
vlan-111-cloud-mgt-idrac vlan-id=111
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec peer profile
set [ find default=yes ] dh-group=modp1024 enc-algorithm=aes-256
add dh-group=modp1024 enc-algorithm=aes-256 name=pfsencesanjidaprofile1
add dh-group=ecp256,modp2048,modp1024 enc-algorithm=aes-256,aes-128,3des \
hash-algorithm=sha256 name=PFSese nat-traversal=no
/ip ipsec proposal
set [ find default=yes ] pfs-group=none
add auth-algorithms=sha256 enc-algorithms=aes-256-cbc,aes-256-ctr,aes-256-gcm \
lifetime=1d30m name=proposal-Cloud pfs-group=modp1536
/ip pool
add name=SVR-MGT-POOL ranges=192.168.20.230-192.168.20.254
add name=IDRAC-10-MGT-POOL ranges=192.168.10.151-192.168.10.165
add name=IDRAC-25-MGT-POOL ranges=192.168.25.151-192.168.25.185
add name=ovpn-pool ranges=192.168.30.1-192.168.30.100
add name=vpn_pool ranges=192.168.40.1-192.168.40.100
/ppp profile
set *0 change-tcp-mss=default dns-server=103.248.12.62,8.8.8.8 local-address=\
SVR-MGT-POOL remote-address=SVR-MGT-POOL
add dns-server=103.248.12.62 local-address=IDRAC-10-MGT-POOL name=IDRAC-10 \
remote-address=IDRAC-10-MGT-POOL wins-server=8.8.8.8
add dns-server=8.8.8.8 local-address=IDRAC-25-MGT-POOL name=IDRAC-25 \
remote-address=IDRAC-25-MGT-POOL wins-server=1.1.1.1
add local-address=192.168.30.200 name=ovpn remote-address=ovpn-pool
add local-address=192.168.40.1 name=vpn_profile remote-address=vpn_pool
/snmp community
add addresses=103.248.12.32/27,172.30.30.0/24 name=intercLoud
/system logging action
set 3 remote=172.30.30.42 src-address=118.67.220.34
/interface bridge port
add bridge=bridge-for-idrac-access interface=vlan-25-idrac-access
add bridge=bridge-for-idrac-access interface=vlan-25-iDRAC-MGT
/interface l2tp-server server
set default-profile=IDRAC-25 ipsec-secret=K!ngK0rt0BB0B!muR-Cl0ud use-ipsec=\
yes
/interface ovpn-server server
set certificate=SERVER cipher=aes256 default-profile=IDRAC-25 enabled=yes
/interface pptp-server server
set enabled=yes
/ip address
add address=192.168.20.1/24 interface=vlan-20-Server-Management network=\
192.168.20.0
add address=192.168.10.150/24 interface=vlan-10-iDRAC-MGT network=\
192.168.10.0
add address=192.168.12.150/24 interface=vlan-12-Storage-MGT network=\
192.168.12.0
add address=192.168.25.150/24 interface=bridge-for-idrac-access network=\
192.168.25.0
add address=172.17.1.59/26 interface=VLAN-101-NOVO-MGT network=172.17.1.0
add address=10.10.200.1/24 interface=ether3-To-iDRAC-Dlink-SW-4 network=\
10.10.200.0
add address=10.209.42.1/24 interface=vlan-111-cloud-mgt-idrac network=\
10.209.42.0
add address=10.200.200.254/24 comment="IP For Switch Mangement" interface=\
eoip-tunnel-For-Testbed network=10.200.200.0
add address=192.168.106.254/24 comment="IP For BR-EX " interface=\
eoip-tunnel-For-Testbed network=192.168.106.0
add address=192.168.104.254/24 interface=eoip-tunnel-For-Testbed network=\
192.168.104.0
add address=10.12.13.1/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\
10.12.13.0
add address=192.168.109.254/24 comment="IP For Floating-IP-1" interface=\
eoip-tunnel-For-Testbed network=192.168.109.0
add address=192.168.110.254/24 comment="IP For Floating-IP-2" interface=\
eoip-tunnel-For-Testbed network=192.168.110.0
add address=118.67.220.34/30 interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
network=118.67.220.32
add address=192.168.105.254/24 comment=iDRAC interface=\
eoip-tunnel-For-Testbed network=192.168.105.0
add address=10.100.200.14/24 disabled=yes interface=\
EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0
add address=10.11.14.1/30 interface=GRE-TUNNEL-FOR-NETAPP network=10.11.14.0
/ip dns
set servers=8.8.8.8,1.1.1.1
/ip firewall address-list
add address=103.9.136.34 list=admin-access
add address=103.9.136.35 list=admin-access
add address=103.248.12.62 list=admin-access
add address=103.9.136.66 list=admin-access
add address=118.67.220.8/30 list=admin-access
add address=172.17.1.0/26 list=admin-access
add address=103.248.12.0/24 list=admin-access
add address=103.23.40.0/24 list=admin-access
add address=172.30.30.0/24 list=admin-access
add address=163.53.150.248/29 list=admin-access
add address=103.248.13.66 list=admin-access
add address=163.53.151.2 list=admin-access
add address=118.67.212.97 list=ceph-export-allow
add address=118.67.212.115 list=ceph-export-allow
add address=163.53.151.2 list=ceph-export-allow
add address=103.248.13.66 list=ceph-export-allow
add address=36.255.68.74 comment=gk list=ceph-export-allow
add address=36.255.68.5 comment=gk list=ceph-export-allow
add address=103.209.43.134 list=admin-access
add address=163.53.151.0/29 list=admin-access
/ip firewall filter
add chain=input comment="For RTR" src-address-list=admin-access
add action=drop chain=input disabled=yes dst-port=21,22,23,80,443,8291 \
protocol=tcp
add action=accept chain=forward dst-address=10.10.200.0/24 src-address=\
10.10.20.0/24
add action=accept chain=input port=1701,500,4500 protocol=udp
add action=accept chain=input protocol=ipsec-esp
/ip firewall nat
add action=dst-nat chain=dstnat comment=nexus-3 dst-port=1613 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.45 \
to-ports=161
add action=dst-nat chain=dstnat comment=nexus-2 dst-port=1638 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.23 \
to-ports=161
add action=dst-nat chain=dstnat comment=nexus-1 dst-port=1637 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.20 \
to-ports=161
add action=dst-nat chain=dstnat comment=nexus-5 dst-port=1641 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.61 \
to-ports=161
add action=dst-nat chain=dstnat comment=Toku-BDCOM-SW disabled=yes dst-port=\
1637 in-interface=ether1 protocol=udp to-addresses=172.28.10.58 to-ports=\
161
add action=dst-nat chain=dstnat comment=nexus-4 dst-port=1614 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.46 \
to-ports=161
add action=dst-nat chain=dstnat comment=nexus-6 dst-port=1642 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.62 \
to-ports=161
add action=dst-nat chain=dstnat comment=Cisco-48-Port-SW dst-port=1627 \
in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
172.17.1.47 to-ports=161
add action=dst-nat chain=dstnat comment=\
"controller1-phy.brilliant.com.bd\r\
\n" dst-port=1615 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.111 to-ports=161
add action=dst-nat chain=dstnat comment=\
"controller2-phy.brilliant.com.bd\r\
\n" dst-port=1616 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.112 to-ports=161
add action=dst-nat chain=dstnat comment=\
"controller3-phy.brilliant.com.bd\r\
\n" dst-port=1617 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.114 to-ports=161
add action=dst-nat chain=dstnat comment="ceph-mgt-phy1.brilliant.com.bd\r\
\n" dst-port=1618 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.161 to-ports=161
add action=dst-nat chain=dstnat comment="ceph-mgt-phy2.brilliant.com.bd\r\
\n" dst-port=1619 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.162 to-ports=161
add action=dst-nat chain=dstnat comment="ceph-mgt-phy3.brilliant.com.bd\r\
\n" dst-port=1620 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.163 to-ports=161
add action=dst-nat chain=dstnat comment="cephosd1.brilliant.com.bd\r\
\n" dst-port=1621 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.81 to-ports=161
add action=dst-nat chain=dstnat comment="cephosd2.brilliant.com.bd\r\
\n\r\
\n" dst-port=1622 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.82 to-ports=161
add action=dst-nat chain=dstnat comment="cephosd3.brilliant.com.bd\r\
\n\r\
\n" dst-port=1623 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.83 to-ports=161
add action=dst-nat chain=dstnat comment="cephosd4.brilliant.com.bd\r\
\n\r\
\n" dst-port=1624 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.84 to-ports=161
add action=dst-nat chain=dstnat comment="cephosd5.brilliant.com.bd\r\
\n\r\
\n" dst-port=1625 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.85 to-ports=161
add action=dst-nat chain=dstnat comment="cephssd5.brilliant.com.bd\r\
\n\r\
\n" dst-port=1631 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.118 to-ports=161
add action=dst-nat chain=dstnat comment="cephosd6.brilliant.com.bd\r\
\n\r\
\n" dst-port=1636 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.95 to-ports=161
add action=dst-nat chain=dstnat comment="cephssd1.brilliant.com.bd\r\
\n\r\
\n" disabled=yes dst-port=1628 in-interface=ether1 protocol=udp \
to-addresses=192.168.20.86 to-ports=161
add action=dst-nat chain=dstnat comment="cephssd2.brilliant.com.bd\r\
\n\r\
\n" dst-port=1629 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.87 to-ports=161
add action=dst-nat chain=dstnat comment="cephssd3.brilliant.com.bd\r\
\n\r\
\n" dst-port=1630 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.94 to-ports=161
add action=dst-nat chain=dstnat comment="cephssd4.brilliant.com.bd\r\
\n\r\
\n" dst-port=1632 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.89 to-ports=161
add action=dst-nat chain=dstnat comment="cephssd6.brilliant.com.bd\r\
\n\r\
\n" dst-port=1633 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.117 to-ports=161
add action=dst-nat chain=dstnat comment="cephssd7.brilliant.com.bd\r\
\n\r\
\n" dst-port=1634 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 \
protocol=udp to-addresses=192.168.20.93 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd1.brilliant.com.bd dst-port=\
1639 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.96 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd9.brilliant.com.bd dst-port=\
1640 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.97 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd8.brilliant.com.bd dst-port=\
1643 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.115 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd12.brilliant.com.bd dst-port=\
1644 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.116 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd6.brilliant.com.bd dst-port=\
1645 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.117 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd2.brilliant.com.bd dst-port=\
1646 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.87 to-ports=161
add action=dst-nat chain=dstnat comment=cephosd7.brilliant.com.bd dst-port=\
1647 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.126 to-ports=161
add action=dst-nat chain=dstnat comment=cephosd8.brilliant.com.bd dst-port=\
1648 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.129 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd13.brilliant.com.bd dst-port=\
1635 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.205 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd14.brilliant.com.bd dst-port=\
1636 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.211 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd11.brilliant.com.bd dst-port=\
1637 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
src-port="" to-addresses=192.168.20.203 to-ports=161
add action=dst-nat chain=dstnat comment="ceph-export\r\
\n\r\
\n" dst-address=118.67.220.34 dst-port=9283 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=tcp src-address-list=\
ceph-export-allow to-addresses=192.168.20.72 to-ports=9283
add action=src-nat chain=srcnat disabled=yes dst-address=118.67.212.88 \
to-addresses=172.17.1.59
add action=src-nat chain=srcnat dst-address=118.67.212.115 to-addresses=\
172.17.1.59
add action=dst-nat chain=dstnat comment=BDCOM-SW-CLoud dst-port=1626 \
in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
172.28.10.58 to-ports=161
add action=masquerade chain=srcnat src-address=192.168.20.0/24
add action=masquerade chain=srcnat src-address=192.168.25.0/24
add action=src-nat chain=srcnat dst-address=192.168.20.0/24 src-address=\
192.168.10.0/24 to-addresses=192.168.20.1
add action=masquerade chain=srcnat src-address=192.168.10.0/24
add action=masquerade chain=srcnat src-address=192.168.12.253
add action=masquerade chain=srcnat comment="test smtp" disabled=yes \
src-address=192.168.12.0/24
add action=masquerade chain=srcnat src-address=192.168.12.90
add action=masquerade chain=srcnat
add action=dst-nat chain=dstnat comment=cephosd8 dst-port=1648 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=\
192.168.20.129 to-ports=161
add action=dst-nat chain=dstnat comment=cephssd10.brilliant.com.bd dst-port=\
1656 in-interface=sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp \
to-addresses=192.168.20.202 to-ports=161
add action=dst-nat chain=dstnat comment=Nexus-7 dst-port=1681 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.72 \
to-ports=161
add action=dst-nat chain=dstnat comment=Nexus-8 dst-port=1681 in-interface=\
sfp1-To-SHJ-Core-MKT-Via-D-Link-3 protocol=udp to-addresses=172.17.1.72 \
to-ports=161
/ip ipsec peer
add address=163.53.151.2/32 disabled=yes profile=pfsencesanjidaprofile1 \
secret=123456
add address=0.0.0.0/0 exchange-mode=main-l2tp generate-policy=port-override \
passive=yes secret=K!ngK0rt0BB0B!muR-Cl0ud
add address=118.67.213.32/32 exchange-mode=ike2 local-address=118.67.220.34 \
profile=PFSese secret=K!ngK0rt0BB0B!muR-Cl0ud
/ip ipsec policy
add disabled=yes dst-address=10.10.20.0/24 proposal=proposal-Cloud \
sa-dst-address=36.255.69.66 sa-src-address=118.67.220.34 src-address=\
10.10.200.0/24 tunnel=yes
add comment="For VM Reachability" disabled=yes dst-address=10.100.10.0/24 \
proposal=proposal-Cloud sa-dst-address=118.67.213.32 sa-src-address=\
118.67.220.34 src-address=192.168.25.0/24 tunnel=yes
add comment="For VM Reachability" disabled=yes dst-address=10.100.10.0/24 \
proposal=proposal-Cloud sa-dst-address=118.67.213.32 sa-src-address=\
118.67.220.34 src-address=0.0.0.0/0 tunnel=yes
/ip route
add distance=1 gateway=118.67.220.33
add check-gateway=ping distance=1 dst-address=10.100.200.0/24 gateway=\
10.12.13.2
add check-gateway=ping disabled=yes distance=1 dst-address=192.168.12.20/32 \
gateway=vlan-12-Storage-MGT pref-src=118.67.215.44
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh port=7900
set api disabled=yes
set api-ssl disabled=yes
/lcd
set time-interval=hour
/ppp secret
add disabled=yes name=cloud password="0p3n\$t@cK-Br!ll!@nT-Cl0uD" service=\
pptp
add disabled=yes name=cloud-idrac password=\
"N@1zOpwn4557@39875@\$%#\$@34yteivt" profile=IDRAC-25 service=pptp
add disabled=yes name=cloud-enable password=Cl0uD-3n@bl3 service=pptp
add disabled=yes name=cloud-idrac-old password="!icl0ud-0p3n\$t@c!@ng\$#22" \
profile=IDRAC-10 service=pptp
add disabled=yes name=ovpn password="!icl0ud-0p3n\$t@c!@ng\$#22" profile=ovpn \
service=ovpn
add disabled=yes name=cloud.operation password="!icl0ud-0p3n\$t@c!@ng\$#22" \
service=ovpn
add disabled=yes name=openvpn password="!icl0ud-0p3n\$t@c!@ng\$#22" profile=\
vpn_profile service=ovpn
add disabled=yes name=cloud-idrac password="N@1zOpw@\$%#\$@34ytl2tp%" \
profile=IDRAC-25 service=l2tp
add name=sys-likhon password="l@#\$%i#\$fo0l@#\$B!1w!h864@8783y5g6@8grN" \
profile=IDRAC-25 service=pptp
add name=sabbir password="C0##\$tl@#\$B!11!h@73y5g6@8gr" profile=IDRAC-25 \
service=pptp
add name=tanvir password=@Cloud@1994#Rahman# profile=IDRAC-25 service=pptp
add name=farhad password="\$h@ik@t1990" profile=IDRAC-25 service=pptp
add name=mostofa password=Piprardimgol164@ profile=IDRAC-25 service=pptp
add name=pranto password=Pie@3.1416 profile=IDRAC-25 service=pptp
add name=ibrahim password=ibr@2025 profile=IDRAC-25 service=pptp
add name=mosiur password="123R@\$h!k4560ny789Me" profile=IDRAC-25 service=\
pptp
add name=nazmul password=N@zmul!231 profile=IDRAC-25 service=pptp
add name=riyad password=Br!ll!@nt-F0rR!@D#4Y profile=IDRAC-25 service=pptp
/snmp
set contact=cloud.operations enabled=yes location=Shahjadpur trap-community=\
intercLoud trap-generators=interfaces trap-interfaces=all trap-version=2
/system clock
set time-zone-name=Asia/Dhaka
/system identity
set name=CLOUD-MGT-GW-RTR
/system logging
add action=remote topics=critical
add action=remote topics=error
add action=remote topics=info
add action=remote topics=warning
add action=remote disabled=yes topics=l2tp
add disabled=yes topics=pptp
add action=remote disabled=yes topics=pptp
/system routerboard settings
set auto-upgrade=yes