134 lines
5.8 KiB
Plaintext
134 lines
5.8 KiB
Plaintext
# 2026-02-26 08:29:06 by RouterOS 7.12.2
|
|
# software id = 2U0N-G8EU
|
|
#
|
|
# model = CCR2216-1G-12XS-2XQ
|
|
# serial number = HFA098NA23B
|
|
/interface ethernet
|
|
set [ find default-name=sfp28-1 ] advertise=\
|
|
10G-baseT,10G-baseSR-LR,10G-baseCR comment=to_core_router
|
|
set [ find default-name=sfp28-2 ] auto-negotiation=no comment=FS speed=\
|
|
10G-baseSR-LR
|
|
set [ find default-name=sfp28-3 ] comment=To_CCR1009
|
|
/interface eoip
|
|
add disabled=yes local-address=125.208.136.205 mac-address=02:D7:B4:33:3A:D0 \
|
|
name=eoip200-ToNix remote-address=103.109.158.23 tunnel-id=200
|
|
/interface vlan
|
|
add comment=AS136106 interface=sfp28-2 name=vlan245 vlan-id=245
|
|
add comment="Dimensi Site Kuta CBN" interface=sfp28-2 name=vlan3912 vlan-id=\
|
|
3912
|
|
add interface=sfp28-1 name=vlan_99_ptp vlan-id=99
|
|
/interface wireless security-profiles
|
|
set [ find default=yes ] supplicant-identity=MikroTik
|
|
/ip pool
|
|
add name=pool1 ranges=103.138.63.179-103.138.63.182
|
|
add name=pool2 ranges=10.10.0.10-10.10.0.254
|
|
/port
|
|
set 0 name=serial0
|
|
/ppp profile
|
|
set *0 dns-server=202.158.3.7
|
|
/routing bgp template
|
|
add address-families=ip as=138843 disabled=no input.filter=in-Iptransit name=\
|
|
GLS-IPT nexthop-choice=force-self output.filter-chain=out-ipTransit \
|
|
.network=Ip-GLS router-id=103.87.186.155 routing-table=main
|
|
add address-families=ip as=138843 disabled=no input.filter=in-Konten \
|
|
multihop=no name=GLS-Konten output.filter-chain=out-Konten .network=\
|
|
Ip-GLS router-id=125.208.136.205 routing-table=main
|
|
add address-families=ip as=138843 disabled=no input.filter=IN-GLS name=To-NIX \
|
|
output.filter-chain=OUT-GLS .network=Ip-GLS .redistribute=connected \
|
|
router-id=103.138.63.69 routing-table=main
|
|
/ip neighbor discovery-settings
|
|
set discover-interface-list=!dynamic
|
|
/ip settings
|
|
set accept-source-route=yes
|
|
/ip address
|
|
add address=125.208.136.205/31 interface=vlan3912 network=125.208.136.204
|
|
add address=103.87.186.155 interface=vlan245 network=103.87.186.154
|
|
add address=103.138.63.65/30 comment="IP Disribusi GLS" interface=vlan_99_ptp \
|
|
network=103.138.63.64
|
|
add address=103.138.63.69 comment="IP PTP NIX" disabled=yes interface=\
|
|
eoip200-ToNix network=103.138.63.68
|
|
add address=10.254.1.2/24 disabled=yes interface=eoip200-ToNix network=\
|
|
10.254.1.0
|
|
/ip dns
|
|
set servers=202.158.3.7,202.158.3.6
|
|
/ip firewall address-list
|
|
add address=103.138.63.0/24 list=Ip-GLS
|
|
/ip route
|
|
add disabled=yes distance=1 dst-address=0.0.0.0/0 gateway=125.208.136.204 \
|
|
pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
|
|
target-scope=10
|
|
add disabled=yes distance=2 dst-address=0.0.0.0/0 gateway=103.87.186.154 \
|
|
pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
|
|
target-scope=10
|
|
add disabled=yes distance=1 dst-address=103.138.62.0/24 gateway=10.254.1.1 \
|
|
pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
|
|
target-scope=10
|
|
add dst-address=103.138.63.0/24 gateway=103.138.63.66
|
|
/ip service
|
|
set telnet disabled=yes
|
|
set ftp disabled=yes
|
|
set www address=103.138.63.0/24
|
|
set ssh disabled=yes
|
|
set api disabled=yes
|
|
set api-ssl disabled=yes
|
|
/ipv6 nd
|
|
set [ find default=yes ] advertise-mac-address=no disabled=yes
|
|
/ppp secret
|
|
add disabled=yes local-address=103.138.63.65 name=ogeb password=network135 \
|
|
remote-address=103.138.63.66
|
|
/routing bgp connection
|
|
add address-families=ip as=138843 connect=yes disabled=no input.filter=\
|
|
in-Iptransit listen=yes local.address=103.87.186.155 .role=ebgp multihop=\
|
|
no name=FS-IPtansit nexthop-choice=force-self output.filter-chain=\
|
|
out-ipTransit .network=Ip-GLS .redistribute=connected remote.address=\
|
|
103.87.186.154/32 .as=136106 router-id=103.87.186.155 routing-table=main \
|
|
templates=GLS-IPT
|
|
add address-families=ip as=138843 connect=yes disabled=no input.filter=\
|
|
in-Konten listen=yes local.role=ebgp multihop=no name=FS-CDN \
|
|
output.filter-chain=out-Konten .network=Ip-GLS remote.address=\
|
|
125.208.136.204/32 .as=4787 router-id=125.208.136.205 routing-table=main \
|
|
templates=GLS-Konten
|
|
add address-families=ip as=138843 connect=yes disabled=yes input.filter=\
|
|
IN-GLS listen=yes local.role=ibgp name=GLS-to-NIX output.filter-chain=\
|
|
OUT-GLS .network=Ip-GLS .redistribute=connected,static remote.address=\
|
|
103.138.63.68/32 .as=138843 router-id=103.138.63.69 routing-table=main \
|
|
templates=To-NIX
|
|
/routing filter rule
|
|
add chain=in-Iptransit comment=IPTansit disabled=no rule=\
|
|
"if (dst-len <= 7 ) { reject; }"
|
|
add chain=in-Iptransit disabled=no rule="if ( dst-len in 8-24 ) { accept; }"
|
|
add chain=in-Iptransit disabled=no rule="if ( dst-len > 25 ) { reject; }"
|
|
add chain=out-ipTransit disabled=no rule=\
|
|
"if ( dst in 103.138.63.0/24 ) { accept;}"
|
|
add chain=in-Konten comment="Rule Konten" disabled=no rule=\
|
|
"if (dst-len <= 7 ) { reject; }"
|
|
add chain=in-Konten disabled=no rule="if (dst-len in 8-24 ) { set bgp-local-pr\
|
|
ef 800; set distance -5; accept}"
|
|
add chain=in-Konten disabled=no rule="if ( dst-len >= 25 ) { reject; }"
|
|
add chain=out-Konten disabled=no rule=\
|
|
"if ( dst in 103.138.63.0/24 ) {accept;}"
|
|
add chain=IN-GLS comment="IN GLS" disabled=no rule=\
|
|
"if ( dst-len in 25-32 && dst in 103.138.63.0/24 ) { accept; }"
|
|
add chain=IN-GLS disabled=yes rule=\
|
|
"if ( dst in 103.138.63.0/24 ) { accept; }"
|
|
add chain=OUT-GLS disabled=no rule=\
|
|
"if ( dst in 103.138.63.0/24 ) { set bgp-local-pref 600 ; accept; }"
|
|
/system clock
|
|
set time-zone-autodetect=no time-zone-name=Asia/Makassar
|
|
/system identity
|
|
set name=GLS-Core-Sukawati
|
|
/system note
|
|
set show-at-login=no
|
|
/system package update
|
|
set channel=long-term
|
|
/system routerboard settings
|
|
set enter-setup-on=delete-key
|
|
/system scheduler
|
|
add name=schedule1 on-event=/system/reboot policy=\
|
|
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
|
|
start-date=2025-07-21 start-time=03:00:00
|
|
/tool graphing interface
|
|
add interface=sfp28-2
|
|
add interface=vlan245
|
|
add interface=vlan3912
|