#        routerboard: yes
#              model: CRS317-1G-16S+
#      serial-number: 955C09350497
#      firmware-type: dx3230L
#   factory-firmware: 6.41
#   current-firmware: 6.48.5
#   upgrade-firmware: 6.48.5
# 
#             channel: long-term
#   installed-version: 6.48.5
# 
# Flags: U - undoable, R - redoable, F - floating-undo 
#   ACTION                                   BY               POLICY             
# 
# software id = 0MCH-U9S5
#
# model = CRS317-1G-16S+
# serial number = 955C09350497
/interface bridge
add admin-mac=CC:2D:E0:8F:7C:A4 auto-mac=no comment=defconf name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment="UPLINK: RB MUNDI" l2mtu=9200 mtu=9200 speed=100Mbps
set [ find default-name=sfp-sfpplus1 ] l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus2 ] l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus3 ] l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus4 ] l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus5 ] full-duplex=no l2mtu=1592 speed=100Mbps
set [ find default-name=sfp-sfpplus6 ] auto-negotiation=no l2mtu=1592
set [ find default-name=sfp-sfpplus7 ] l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus8 ] l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus9 ] comment="UPLINK: LEONARDO xgi0/0/4" l2mtu=9200 mtu=9200 speed=10Gbps
set [ find default-name=sfp-sfpplus10 ] comment="UPLINK: LEONARDO xgi0/0/5" l2mtu=9200 mtu=9200 speed=10Gbps
set [ find default-name=sfp-sfpplus11 ] comment="UPLINK: NACIONAL NEGOCIOS e COBRANCAS" l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus12 ] comment=blacknarguile l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus13 ] comment="EVENTO SERP/ON" l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus14 ] l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus15 ] l2mtu=1592 speed=10Gbps
set [ find default-name=sfp-sfpplus16 ] l2mtu=1592 speed=10Gbps
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/snmp community
set [ find default=yes ] addresses=45.225.65.10/32 name=onnet@2017
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf disabled=yes interface=sfp-sfpplus2
add bridge=bridge comment=defconf disabled=yes interface=sfp-sfpplus3
add bridge=bridge comment=defconf disabled=yes interface=sfp-sfpplus4
add bridge=bridge comment=defconf interface=sfp-sfpplus5
add bridge=bridge comment=defconf interface=sfp-sfpplus6
add bridge=bridge comment=defconf interface=sfp-sfpplus7
add bridge=bridge comment=defconf interface=sfp-sfpplus8
add bridge=bridge comment=defconf interface=sfp-sfpplus9
add bridge=bridge comment=defconf interface=sfp-sfpplus10
add bridge=bridge comment=defconf interface=sfp-sfpplus11 pvid=708
add bridge=bridge comment=defconf interface=sfp-sfpplus12
add bridge=bridge ingress-filtering=yes interface=sfp-sfpplus13 pvid=3039
add bridge=bridge interface=sfp-sfpplus14
add bridge=bridge interface=sfp-sfpplus15
add bridge=bridge interface=sfp-sfpplus16 pvid=3039
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=bridge tagged=ether1,sfp-sfpplus9 vlan-ids=751
add bridge=bridge tagged=ether1,sfp-sfpplus9 vlan-ids=755
add bridge=bridge tagged=sfp-sfpplus9,ether1 vlan-ids=706
add bridge=bridge tagged=sfp-sfpplus10,ether1 vlan-ids=707
add bridge=bridge comment="Evento Serp" tagged=sfp-sfpplus10 untagged=sfp-sfpplus13 vlan-ids=3039
add bridge=bridge tagged=sfp-sfpplus11,sfp-sfpplus10 vlan-ids=129
add bridge=bridge comment="NACIONAL NEGOCIOS e COBRANCAS" tagged=sfp-sfpplus10 untagged=sfp-sfpplus11 vlan-ids=708
add bridge=bridge tagged=sfp-sfpplus11,sfp-sfpplus10 vlan-ids=1212
/ip address
add address=192.168.3.49/24 interface=bridge network=192.168.3.0
add address=192.168.8.2/24 interface=bridge network=192.168.8.0
/ip dns
set servers=8.8.8.8
/ip route
add distance=1 gateway=192.168.8.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh address=45.225.65.10/32 port=2222
set api disabled=yes
set winbox port=25000
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/snmp
set enabled=yes
/system clock
set time-zone-name=America/Sao_Paulo
/system identity
set name="CRS317 Radio Mundi - PGO"
/system package update
set channel=long-term
/system routerboard settings
set boot-os=router-os
/tool romon
set enabled=yes secrets=0nn3t*8102