# dec/24/1971 16:26:54 by RouterOS 6.47.7
# software id = S2NZ-H089
#
# model = 2011UiAS
# serial number = 77AD072033A2
/interface bridge
add name=Public-IP-Test-Bridge
add name=TestBed-Tunnel-Bridge
/interface ethernet
set [ find default-name=ether2 ] name=ether2-To-TB-BDCOM-1-G0/1
set [ find default-name=ether3 ] name=ether3-To-TB-BDCOM-2
set [ find default-name=ether8 ] advertise="10M-half,10M-full,100M-half,100M-f\
    ull,1000M-half,1000M-full,2500M-full,5000M-full,10000M-full" name=\
    ether8-iDRAC-MGT-Dlink
set [ find default-name=ether9 ] name=ether9-From-Shahjadpur-3-Via-Dlink-2
/interface eoip
add local-address=118.67.214.225 mac-address=02:55:2F:92:2A:E5 mtu=1500 name=\
    eoip-tunnel-for-Cloud-RTR remote-address=118.67.220.34 tunnel-id=1001
/interface gre
add local-address=118.67.214.225 name=GRE-TUNNEL-FOR-NVME-NETAPP \
    remote-address=118.67.220.34
/interface vlan
add comment="server mgmt" interface=ether8-iDRAC-MGT-Dlink name=104 vlan-id=\
    104
add comment=IDRAC interface=ether8-iDRAC-MGT-Dlink name=VLAN-105-iDRAC-DELL \
    vlan-id=105
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-106-External-Traffic \
    vlan-id=106
add interface=ether2-To-TB-BDCOM-1-G0/1 name=\
    VLAN-107-Interal-Traffic-Admin-Traffic vlan-id=107
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-109-Floating-Network-1 \
    vlan-id=109
add interface=ether2-To-TB-BDCOM-1-G0/1 name=VLAN-110-Floating-Network-2 \
    vlan-id=110
add interface=ether2-To-TB-BDCOM-1-G0/1 name=\
    VLAN-111-Floating-Network-3-Public-IP vlan-id=111
add interface=ether8-iDRAC-MGT-Dlink name=vlan-101-SW-MGT vlan-id=101
/interface bonding
add disabled=yes mode=balance-xor name=bonding-Testbed-Switchport-Aggregation \
    slaves=ether2-To-TB-BDCOM-1-G0/1,ether3-To-TB-BDCOM-2
/interface vlan
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
    VLAN-103-External-Traffic vlan-id=103
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
    VLAN-106-Tanet-Traffic vlan-id=106
add disabled=yes interface=bonding-Testbed-Switchport-Aggregation name=\
    VLAN1-112-Floating-Network-4 vlan-id=112
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-server option
add code=66 name=pxe-server value="'192.168.104.118'"
add code=67 name=pxe-file value="'pxelinux.0'"
/ip dhcp-server option sets
add name=maas-pxe options=pxe-server,pxe-file
/ip ipsec profile
add enc-algorithm=aes-256,aes-192,aes-128,3des hash-algorithm=sha256 name=\
    IPKA
add dh-group=modp2048 enc-algorithm=aes-256 hash-algorithm=sha256 name=1
/ip ipsec peer
add address=103.120.192.6/32 local-address=118.67.214.225 name=\
    Peer-To-Ibrahim-Bhai-Project profile=1
/ip ipsec proposal
set [ find default=yes ] lifetime=1h30m pfs-group=modp2048
add auth-algorithms=sha256 enc-algorithms=\
    aes-256-cbc,aes-256-gcm,aes-192-cbc,aes-128-cbc name=ike-phase-1 \
    pfs-group=modp2048
/ip pool
add name=L2VPN-Pool ranges=10.150.169.1-10.150.169.10
/ppp profile
add local-address=10.150.170.1 name=L2TP-VPN-Profile remote-address=\
    L2VPN-Pool
/interface bridge port
add bridge=TestBed-Tunnel-Bridge interface=vlan-101-SW-MGT
add bridge=TestBed-Tunnel-Bridge interface=eoip-tunnel-for-Cloud-RTR
add bridge=TestBed-Tunnel-Bridge interface=VLAN-105-iDRAC-DELL
add bridge=TestBed-Tunnel-Bridge interface=104
add bridge=TestBed-Tunnel-Bridge interface=VLAN-109-Floating-Network-1
add bridge=TestBed-Tunnel-Bridge interface=VLAN-106-External-Traffic
add bridge=TestBed-Tunnel-Bridge interface=VLAN-110-Floating-Network-2
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface l2tp-server server
set default-profile=L2TP-VPN-Profile enabled=yes ipsec-secret="cl0ud\$#@534" \
    use-ipsec=yes
/interface list member
add interface=ether1 list=WAN
add list=LAN
/ip address
add address=192.168.110.1/24 comment="LB- network-vlan-110" interface=\
    VLAN-110-Floating-Network-2 network=192.168.110.0
add address=118.67.214.225/29 comment="public network-vlan-103" interface=104 \
    network=118.67.214.224
add address=192.168.104.1/24 comment="server mgmt-vlan-104" interface=104 \
    network=192.168.104.0
add address=172.21.1.78/30 interface=ether9-From-Shahjadpur-3-Via-Dlink-2 \
    network=172.21.1.76
add address=192.168.105.1/24 comment=IDRAC-vlan-105 interface=\
    VLAN-105-iDRAC-DELL network=192.168.105.0
add address=192.168.106.1/24 comment=tenant-vlan-106 interface=\
    VLAN-106-External-Traffic network=192.168.106.0
add address=192.168.107.1/24 comment="admin/internal IP-107-Geneve" \
    interface=VLAN-107-Interal-Traffic-Admin-Traffic network=192.168.107.0
add address=192.168.103.1/24 comment="public network-vlan-103" interface=\
    VLAN-103-External-Traffic network=192.168.103.0
add address=192.168.109.1/24 comment="floating network-vlan-109-temp" \
    interface=VLAN-109-Floating-Network-1 network=192.168.109.0
add address=103.120.192.1/28 comment="floating ip-vlan-111" interface=\
    VLAN-111-Floating-Network-3-Public-IP network=103.120.192.0
add address=192.168.112.1/24 interface=VLAN1-112-Floating-Network-4 network=\
    192.168.112.0
add address=10.200.200.1/24 interface=vlan-101-SW-MGT network=10.200.200.0
add address=172.16.1.1/24 interface=ether6 network=172.16.1.0
add address=118.67.221.217/29 interface=104 network=118.67.221.216
add address=10.11.14.2/30 interface=GRE-TUNNEL-FOR-NVME-NETAPP network=\
    10.11.14.0
/ip arp
add address=192.168.112.183 interface=VLAN1-112-Floating-Network-4 \
    mac-address=FA:16:3E:0C:47:90
/ip dhcp-server network
add address=192.168.104.0/24 dhcp-option-set=maas-pxe
/ip firewall filter
add action=accept chain=input dst-port=500 protocol=udp
add action=accept chain=input dst-port=4500 protocol=udp
add action=accept chain=input protocol=ipsec-esp
add action=accept chain=forward dst-address=192.168.106.0/24 src-address=\
    192.168.104.0/24
add action=accept chain=forward dst-address=192.168.104.0/24 src-address=\
    192.168.106.0/24
/ip firewall nat
add action=accept chain=srcnat dst-address=192.168.20.0/24
add action=accept chain=srcnat dst-address=10.10.50.0/24 src-address=\
    192.168.104.0/24
add action=src-nat chain=srcnat src-address=192.168.104.0/24 to-addresses=\
    118.67.214.225
add action=src-nat chain=srcnat src-address=10.10.10.0/24 src-address-list="" \
    to-addresses=118.67.214.225
add action=src-nat chain=srcnat src-address=10.150.169.0/24 src-address-list=\
    "" to-addresses=118.67.214.225
add action=src-nat chain=srcnat src-address=192.168.111.0/24 to-addresses=\
    118.67.214.225
add action=src-nat chain=srcnat src-address=192.168.109.0/24 to-addresses=\
    118.67.214.225
add action=src-nat chain=srcnat src-address=192.168.110.0/24 to-addresses=\
    118.67.214.225
add action=accept chain=srcnat dst-address=192.168.106.0/24 src-address=\
    192.168.104.0/24
add action=accept chain=srcnat dst-address=192.168.104.0/24 src-address=\
    192.168.106.0/24
add action=src-nat chain=srcnat src-address=192.168.106.0/24 to-addresses=\
    118.67.214.225
/ip ipsec identity
add peer=Peer-To-Ibrahim-Bhai-Project secret="@sdf123\$"
/ip ipsec policy
add dst-address=10.10.50.0/24 peer=Peer-To-Ibrahim-Bhai-Project proposal=\
    ike-phase-1 sa-dst-address=103.120.192.6 sa-src-address=118.67.214.225 \
    src-address=192.168.104.0/24 tunnel=yes
/ip route
add distance=1 gateway=172.21.1.77
add check-gateway=ping disabled=yes distance=1 dst-address=10.90.90.90/32 \
    gateway=ether8-iDRAC-MGT-Dlink
add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\
    10.11.14.1
add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\
    10.11.14.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=8090
set ssh port=7900
set api disabled=yes
set winbox port=58923
set api-ssl disabled=yes
/ipv6 address
add address=2406:f100:9:100::2/126 advertise=no interface=\
    ether9-From-Shahjadpur-3-Via-Dlink-2
/ppp secret
add name=L2TP-CLOUD password="cl0ud\$#@534e" profile=L2TP-VPN-Profile \
    service=l2tp
/system identity
set name=Cloud-RND
/system logging
add topics=debug