#        routerboard: yes
#              model: 2011UiAS
#           revision: r2
#      serial-number: 7DD50871B3F8
#      firmware-type: ar9344
#   factory-firmware: 3.41
#   current-firmware: 6.44.5
#   upgrade-firmware: 6.44.5
# 
#             channel: long-term
#   installed-version: 6.44.5
# 
# Flags: U - undoable, R - redoable, F - floating-undo 
#   ACTION                                   BY               POLICY             
# 
# software id = ADBE-IZF1
#
# model = 2011UiAS
# serial number = 7DD50871B3F8
/interface bridge
add name=bridge-radiosantana
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether7 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether8 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether9 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether10 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface eoip
add mac-address=02:9F:70:99:B2:EC name=eoip-tunnel-radiosantana remote-address=10.10.11.10 tunnel-id=3950
/interface vlan
add interface=sfp1 name="vlan 3951 radio santana" vlan-id=3951
add disabled=yes interface=ether1 name=vlan3950 vlan-id=3950
/ip pool
add name=dhcp_pool0 ranges=192.168.0.2-192.168.0.200
add name=vpn-pool2 ranges=192.168.89.2-192.168.89.100
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether3 name=dhcp1
/ppp profile
set *0 dns-server=8.8.8.8,127.0.0.1 local-address=192.168.89.1 remote-address=vpn-pool2
/snmp community
set [ find default=yes ] addresses=45.225.65.10/32 name=onnet@2017
/interface bridge port
add bridge=bridge-radiosantana interface=ether1
add bridge=bridge-radiosantana interface=eoip-tunnel-radiosantana
/ip neighbor discovery-settings
set discover-interface-list=all
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 enabled=yes
/ip address
add address=192.168.150.3/24 interface=sfp1 network=192.168.150.0
add address=45.225.66.178/30 interface="vlan 3951 radio santana" network=45.225.66.176
add address=192.168.0.1/24 interface=ether3 network=192.168.0.0
/ip dhcp-server network
add address=192.168.0.0/24 gateway=192.168.0.1
/ip dns
set servers=45.225.64.10,8.8.8.8
/ip firewall filter
add chain=input port=1701,500,4500 protocol=udp
add chain=input protocol=ipsec-esp
/ip firewall nat
add action=masquerade chain=srcnat out-interface="vlan 3951 radio santana"
add action=masquerade chain=srcnat src-address=192.168.0.0/16
/ip route
add distance=1 gateway=45.225.66.177
add disabled=yes distance=1 gateway=192.168.150.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh address=45.225.65.10/32 port=2222
set api disabled=yes
set winbox port=25000
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/lcd
set time-interval=hour
/ppp secret
add name=vpn password=vpn
/snmp
set enabled=yes
/system clock
set time-zone-name=America/Sao_Paulo
/system identity
set name=PR-PGO-ONNET-A001-R0-RADIO_SANTANA-001
/system package update
set channel=long-term
/tool romon
set enabled=yes secrets=0nn3t*8102