# 2026-02-26 08:29:06 by RouterOS 7.12.2
# software id = 2U0N-G8EU
#
# model = CCR2216-1G-12XS-2XQ
# serial number = HFA098NA23B
/interface ethernet
set [ find default-name=sfp28-1 ] advertise=\
    10G-baseT,10G-baseSR-LR,10G-baseCR comment=to_core_router
set [ find default-name=sfp28-2 ] auto-negotiation=no comment=FS speed=\
    10G-baseSR-LR
set [ find default-name=sfp28-3 ] comment=To_CCR1009
/interface eoip
add disabled=yes local-address=125.208.136.205 mac-address=02:D7:B4:33:3A:D0 \
    name=eoip200-ToNix remote-address=103.109.158.23 tunnel-id=200
/interface vlan
add comment=AS136106 interface=sfp28-2 name=vlan245 vlan-id=245
add comment="Dimensi Site Kuta CBN" interface=sfp28-2 name=vlan3912 vlan-id=\
    3912
add interface=sfp28-1 name=vlan_99_ptp vlan-id=99
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=pool1 ranges=103.138.63.179-103.138.63.182
add name=pool2 ranges=10.10.0.10-10.10.0.254
/port
set 0 name=serial0
/ppp profile
set *0 dns-server=202.158.3.7
/routing bgp template
add address-families=ip as=138843 disabled=no input.filter=in-Iptransit name=\
    GLS-IPT nexthop-choice=force-self output.filter-chain=out-ipTransit \
    .network=Ip-GLS router-id=103.87.186.155 routing-table=main
add address-families=ip as=138843 disabled=no input.filter=in-Konten \
    multihop=no name=GLS-Konten output.filter-chain=out-Konten .network=\
    Ip-GLS router-id=125.208.136.205 routing-table=main
add address-families=ip as=138843 disabled=no input.filter=IN-GLS name=To-NIX \
    output.filter-chain=OUT-GLS .network=Ip-GLS .redistribute=connected \
    router-id=103.138.63.69 routing-table=main
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set accept-source-route=yes
/ip address
add address=125.208.136.205/31 interface=vlan3912 network=125.208.136.204
add address=103.87.186.155 interface=vlan245 network=103.87.186.154
add address=103.138.63.65/30 comment="IP Disribusi GLS" interface=vlan_99_ptp \
    network=103.138.63.64
add address=103.138.63.69 comment="IP PTP NIX" disabled=yes interface=\
    eoip200-ToNix network=103.138.63.68
add address=10.254.1.2/24 disabled=yes interface=eoip200-ToNix network=\
    10.254.1.0
/ip dns
set servers=202.158.3.7,202.158.3.6
/ip firewall address-list
add address=103.138.63.0/24 list=Ip-GLS
/ip route
add disabled=yes distance=1 dst-address=0.0.0.0/0 gateway=125.208.136.204 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
add disabled=yes distance=2 dst-address=0.0.0.0/0 gateway=103.87.186.154 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
add disabled=yes distance=1 dst-address=103.138.62.0/24 gateway=10.254.1.1 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
add dst-address=103.138.63.0/24 gateway=103.138.63.66
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=103.138.63.0/24
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ipv6 nd
set [ find default=yes ] advertise-mac-address=no disabled=yes
/ppp secret
add disabled=yes local-address=103.138.63.65 name=ogeb password=network135 \
    remote-address=103.138.63.66
/routing bgp connection
add address-families=ip as=138843 connect=yes disabled=no input.filter=\
    in-Iptransit listen=yes local.address=103.87.186.155 .role=ebgp multihop=\
    no name=FS-IPtansit nexthop-choice=force-self output.filter-chain=\
    out-ipTransit .network=Ip-GLS .redistribute=connected remote.address=\
    103.87.186.154/32 .as=136106 router-id=103.87.186.155 routing-table=main \
    templates=GLS-IPT
add address-families=ip as=138843 connect=yes disabled=no input.filter=\
    in-Konten listen=yes local.role=ebgp multihop=no name=FS-CDN \
    output.filter-chain=out-Konten .network=Ip-GLS remote.address=\
    125.208.136.204/32 .as=4787 router-id=125.208.136.205 routing-table=main \
    templates=GLS-Konten
add address-families=ip as=138843 connect=yes disabled=yes input.filter=\
    IN-GLS listen=yes local.role=ibgp name=GLS-to-NIX output.filter-chain=\
    OUT-GLS .network=Ip-GLS .redistribute=connected,static remote.address=\
    103.138.63.68/32 .as=138843 router-id=103.138.63.69 routing-table=main \
    templates=To-NIX
/routing filter rule
add chain=in-Iptransit comment=IPTansit disabled=no rule=\
    "if (dst-len <= 7 ) { reject; }"
add chain=in-Iptransit disabled=no rule="if ( dst-len in 8-24 ) { accept; }"
add chain=in-Iptransit disabled=no rule="if ( dst-len > 25 ) { reject; }"
add chain=out-ipTransit disabled=no rule=\
    "if ( dst in 103.138.63.0/24 )  { accept;}"
add chain=in-Konten comment="Rule Konten" disabled=no rule=\
    "if (dst-len <= 7 ) { reject; }"
add chain=in-Konten disabled=no rule="if (dst-len in 8-24 ) { set bgp-local-pr\
    ef 800; set distance -5; accept}"
add chain=in-Konten disabled=no rule="if ( dst-len >= 25 ) { reject; }"
add chain=out-Konten disabled=no rule=\
    "if ( dst in 103.138.63.0/24 )  {accept;}"
add chain=IN-GLS comment="IN GLS" disabled=no rule=\
    "if ( dst-len in 25-32 && dst in 103.138.63.0/24 ) { accept; }"
add chain=IN-GLS disabled=yes rule=\
    "if ( dst in 103.138.63.0/24 ) { accept; }"
add chain=OUT-GLS disabled=no rule=\
    "if ( dst in 103.138.63.0/24 ) { set bgp-local-pref 600 ;  accept; }"
/system clock
set time-zone-autodetect=no time-zone-name=Asia/Makassar
/system identity
set name=GLS-Core-Sukawati
/system note
set show-at-login=no
/system package update
set channel=long-term
/system routerboard settings
set enter-setup-on=delete-key
/system scheduler
add name=schedule1 on-event=/system/reboot policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-date=2025-07-21 start-time=03:00:00
/tool graphing interface
add interface=sfp28-2
add interface=vlan245
add interface=vlan3912