#        routerboard: yes
#         board-name: hEX
#              model: RB750Gr3
#           revision: r4
#      serial-number: CC210CEA892E
#      firmware-type: mt7621L
#   factory-firmware: 6.47.1
#   current-firmware: 6.47.1
#   upgrade-firmware: 6.47.1
# 
#             channel: long-term
#   installed-version: 6.47.1
# 
# Flags: U - undoable, R - redoable, F - floating-undo 
#   ACTION                                   BY               POLICY             
# U ip service changed                       admin            write              
# U ip service changed                       admin            write              
# U device changed                           admin            write              
# U nat rule changed                         admin            write              
# U address changed                          admin            write              
# U bridge port added                        admin            write              
# 
# software id = GZN5-ZFTQ
#
# model = RB750Gr3
# serial number = CC210CEA892E
/interface bridge
add mtu=1500 name=bridge1-/29 protocol-mode=none
/interface ethernet
set [ find default-name=ether2 ] comment="DEDICADO /29"
set [ find default-name=ether3 ] comment="TRANSMISS\C3O AO VIVO"
set [ find default-name=ether5 ] comment="Servidor Proxy Interno"
/interface vlan
add comment="VLAN Link: Rota 1" interface=ether1 name=vlan706 vlan-id=706
add comment="VLAN Link: Rota 2" interface=ether1 name=vlan707 vlan-id=707
add comment=VLAN:DIRETO disabled=yes interface=ether1 name=vlan751 vlan-id=751
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/queue simple
add disabled=yes limit-at=50M/50M max-limit=50M/50M name=dedicado target=45.225.66.152/29
/routing ospf instance
set [ find default=yes ] disabled=yes redistribute-connected=as-type-1 redistribute-static=as-type-1 router-id=10.99.254.1
/snmp community
set [ find default=yes ] addresses=45.225.65.10/32 name=onnet@2017
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=bridge1-/29 interface=ether4
add bridge=bridge1-/29 interface=ether2
add bridge=bridge1-/29 interface=ether3
add bridge=bridge1-/29 interface=ether5
/ip address
add address=45.225.66.153/29 comment="IP VALIDO /29 SERVIDORES" interface=bridge1-/29 network=45.225.66.152
add address=192.168.8.1/24 interface=ether1 network=192.168.8.0
add address=10.80.80.10/30 interface=vlan706 network=10.80.80.8
add address=10.80.80.14/30 interface=vlan707 network=10.80.80.12
add address=45.225.66.149/30 comment="Servidor Proxy Interno" interface=bridge1-/29 network=45.225.66.148
/ip dns
set servers=172.16.20.40
/ip firewall nat
add action=dst-nat chain=dstnat disabled=yes dst-address=!177.10.56.3 protocol=udp to-addresses=177.10.56.3 to-ports=53
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add check-gateway=ping distance=1 gateway=10.80.80.9 pref-src=45.225.66.149
add check-gateway=ping distance=1 gateway=10.80.80.9 pref-src=45.225.66.149
add check-gateway=ping distance=2 gateway=10.80.80.13
add check-gateway=ping distance=2 gateway=10.80.80.13
add disabled=yes distance=200 gateway=10.10.0.89
add disabled=yes distance=200 gateway=10.10.0.89
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh address=45.225.65.10/32,177.10.56.0/24 port=2222
set api disabled=yes
set winbox address=177.10.56.0/24 port=25000
set api-ssl disabled=yes
/mpls ldp
set enabled=yes lsr-id=10.99.254.1 transport-address=10.99.254.1
/routing ospf network
add area=backbone network=10.10.254.0/30
add area=backbone network=10.99.254.2/32
add area=backbone network=10.10.0.128/30
add area=backbone network=10.10.0.88/30
add area=backbone network=10.10.254.8/30
add area=backbone network=10.10.254.12/30
/snmp
set enabled=yes
/system clock
set time-zone-name=America/Sao_Paulo
/system identity
set name=RB_MUNDI
/system package update
set channel=long-term
/tool romon
set enabled=yes secrets=0nn3t*8102