hi community, I am newbie in MikroTik, working with this vendor for the last two days only and I am having issues trying to read a config file of a ccr 1009-8g-1s-1s+.
Can anyone with me hand understanding this syntaxis?
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether7 ] name=“AD - ether3”
set [ find default-name=ether6 ] name=“Central- ether2”
set [ find default-name=ether5 ] name=“Internet - Ether1”
set [ find default-name=ether2 ] name=“Switch-1 - ether6”
set [ find default-name=ether3 ] name=“Switch-2 - ether7”
set [ find default-name=ether8 ] comment=Tinstar name=ether4
set [ find default-name=ether1 ] name=ether5
set [ find default-name=ether4 ] name=ether8
/ip neighbor discovery
set ether4 comment=Tinstar
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip firewall layer7-protocol
add name=Facebook regexp=“^.+(facebook.com).$"
add name=Youtube regexp="^.+(youtube.com).$”
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des,aes-128-cbc lifetime=8h
/ip pool
add name=pool1 ranges=172.16.1.50-172.16.1.250
/ip dhcp-server
add address-pool=pool1 disabled=no interface=bridge1 name=server1
/ppp profile
add change-tcp-mss=yes local-address=pool1 name=“DHCP Interno” remote-address=
pool1
/queue simple
add max-limit=2M/2M name=Central target=172.16.1.7/32
add max-limit=2M/2M name=Mikrotik target=172.16.1.254/32
add disabled=yes max-limit=2M/2M name=HugoRodriguez target=172.16.1.74/32
add max-limit=4M/4M name=Red target=172.16.1.0/24
/snmp community
set [ find default=yes ] name=soportedinamico
/system logging action
set 1 disk-file-count=20
/interface bridge port
add bridge=bridge1 interface=“Central- ether2”
add bridge=bridge1 interface=“AD - ether3”
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=“Switch-1 - ether6”
add bridge=bridge1 interface=“Switch-2 - ether7”
/interface pptp-server server
set enabled=yes
/ip address
add address=201.205.253.178/30 comment=“default configuration” interface=
“Internet - Ether1” network=201.205.253.176
add address=172.16.1.254/24 interface=bridge1 network=172.16.1.0
/ip dhcp-server lease
add address=172.16.1.48 client-id=1:f8:4f:57:1:5b:73 mac-address=
F8:4F:57:01:5B:73 server=server1
add address=172.16.1.125 client-id=1:0:13:20:c6:d9:cd comment=
“Servidor de Impresion” mac-address=00:13:20:C6:D9:CD server=server1
add address=172.16.1.49 mac-address=34:BD:C8:42:21:BA server=server1
/ip dhcp-server network
add address=172.16.1.0/24 dns-server=172.16.1.1 gateway=172.16.1.254
/ip dns
set servers=4.2.2.2
/ip firewall address-list
add address=194.168.1.0/24 list=Lan
add address=10.0.0.0/24 list=Clientes
/ip firewall filter
add chain=forward comment=“IPSEC NICOYA” dst-address=172.16.1.0/24 src-address=
192.168.3.0/24
add chain=forward comment=“IPSEC Panama” dst-address=172.16.1.0/24 src-address=
192.168.1.0/24
add chain=forward comment=“IPSEC San Ramon” dst-address=172.16.1.0/24
src-address=192.168.2.0/24
add chain=forward comment=“IPSEC Guadalupe” disabled=yes dst-address=
172.16.1.0/24 src-address=192.168.4.0/24
add chain=input comment=VPN dst-port=1723 protocol=tcp
add chain=input comment=VPN dst-port=1723 in-interface=“Internet - Ether1”
protocol=tcp
add chain=input comment=“default configuration” protocol=icmp
add chain=input dst-port=161-162 protocol=udp
add chain=input dst-port=8291 protocol=tcp
add chain=input comment=“default configuration” connection-state=
established,related
add action=drop chain=input comment=“default configuration” in-interface=
“Internet - Ether1”
add chain=forward comment=“default configuration” connection-state=
established,related
add action=drop chain=forward comment=“default configuration” connection-state=
invalid
add action=drop chain=forward comment=“default configuration”
connection-nat-state=!dstnat connection-state=new in-interface=
“Internet - Ether1”
/ip firewall nat
add chain=srcnat comment=" IPSEC Nicoya" dst-address=192.168.3.0/24
src-address=172.16.1.0/24
add chain=srcnat comment=" IPSEC Panama" dst-address=192.168.1.0/24
src-address=172.16.1.0/24
add chain=srcnat comment=" IPSEC San Ramon" dst-address=192.168.2.0/24
src-address=172.16.1.0/24
add chain=srcnat comment=" IPSEC Guadalupe" disabled=yes dst-address=
192.168.4.0/24 src-address=172.16.1.0/24
add chain=srcnat comment=“IPSEC Nicoya” dst-address=172.16.1.0/24 src-address=
192.168.3.0/24
add chain=srcnat comment=“IPSEC Guadalupe” disabled=yes dst-address=
172.16.1.0/24 src-address=192.168.4.0/24
add chain=srcnat comment=“IPSEC Panama” dst-address=172.16.1.0/24 src-address=
192.168.1.0/24
add chain=srcnat comment=“IPSEC San Ramon” dst-address=172.16.1.0/24
src-address=192.168.2.0/24
add action=masquerade chain=srcnat disabled=yes out-interface=
“Internet - Ether1”
add action=masquerade chain=srcnat comment=“default configuration”
out-interface=“Internet - Ether1”
add action=dst-nat chain=dstnat comment=Alarma dst-port=10000 in-interface=
“Internet - Ether1” protocol=udp to-addresses=172.16.1.65 to-ports=10000
add action=dst-nat chain=dstnat comment=“Publicacion de puerto 55060 Central”
dst-port=55060 in-interface=“Internet - Ether1” protocol=udp to-addresses=
172.16.1.7 to-ports=5060
add action=dst-nat chain=dstnat comment=“Publicacion de puerto 55469 Central”
dst-port=55469 in-interface=“Internet - Ether1” protocol=udp to-addresses=
172.16.1.7 to-ports=4569
add action=dst-nat chain=dstnat dst-port=3386 protocol=tcp to-addresses=
172.16.1.10 to-ports=3389
add action=dst-nat chain=dstnat dst-port=3384 protocol=tcp to-addresses=
172.16.1.22 to-ports=3389
add action=dst-nat chain=dstnat comment=“SAP Server 1” dst-port=8843
in-interface=“Internet - Ether1” protocol=tcp to-addresses=172.16.1.10
to-ports=8843
add action=dst-nat chain=dstnat comment=“SAP Server 1” dst-port=3385
in-interface=“Internet - Ether1” protocol=tcp to-addresses=172.16.1.10
to-ports=3385
add action=dst-nat chain=dstnat comment=“SAP Server 1” dst-port=8443
in-interface=“Internet - Ether1” protocol=tcp to-addresses=172.16.1.10
to-ports=8443
/ip ipsec peer
add address=201.203.229.98/32 comment=Panama enc-algorithm=des,3des,aes-128
nat-traversal=no secret=cj040971
add address=181.193.6.10/32 disabled=yes enc-algorithm=des,3des,aes-128
nat-traversal=no secret=cj040971
add address=201.197.207.46/32 comment=“San Ramon” enc-algorithm=
des,3des,aes-128 secret=cj040971
add address=201.218.125.58/32 comment=Nicoya enc-algorithm=des,3des,aes-128
nat-traversal=no secret=cj040971
/ip ipsec policy
set 0 disabled=yes
add comment=Nicoya dst-address=192.168.3.0/24 sa-dst-address=201.203.229.98
sa-src-address=201.205.253.178 src-address=172.16.1.0/24 tunnel=yes
add disabled=yes dst-address=192.168.4.0/24 sa-dst-address=181.193.6.10
sa-src-address=201.205.253.178 src-address=172.16.1.0/24 tunnel=yes
add comment=“San Ramon” dst-address=192.168.2.0/24 sa-dst-address=
201.197.207.46 sa-src-address=201.205.253.178 src-address=172.16.1.0/24
tunnel=yes
add comment=Panama dst-address=192.168.1.0/24 sa-dst-address=201.218.125.58
sa-src-address=201.205.253.178 src-address=172.16.1.0/24 tunnel=yes
/ip route
add comment=Gateway distance=1 gateway=201.205.253.177
add distance=1 dst-address=10.6.2.0/24 gateway=10.10.5.4
add comment=Guadalupe distance=1 dst-address=172.16.2.0/24 gateway=10.10.5.8
add comment=“telefonos de red 5” distance=1 dst-address=172.16.5.0/24 gateway=
bridge1
/lcd
set backlight-timeout=never default-screen=interfaces touch-screen=disabled
/ppp secret
add local-address=10.10.5.5 name=rgzeledon password=fofozb115 remote-address=
10.10.5.6
add local-address=10.10.5.7 name=ZebolGuadalupe password=DepredadorZebol2016
remote-address=10.10.5.8
add local-address=10.10.5.9 name=ebolanos password=ebf056 remote-address=
10.10.5.10
add local-address=10.10.5.13 name=dcubero password=Danasara10038211
remote-address=10.10.5.14
add local-address=10.10.5.15 name=hrodriguez password=Hfro1234567
remote-address=10.10.5.16
add local-address=10.10.5.17 name=MEVARGAS password=Arias1234 remote-address=
10.10.5.18
add local-address=10.10.5.19 name=ealfaro password=eA654321 remote-address=
10.10.5.20
add local-address=10.10.5.21 name=jmairena password=Cuno3439 remote-address=
10.10.5.22
add local-address=10.10.5.23 name=haguilar password=Ingo0001 remote-address=
10.10.5.24
add local-address=10.10.5.25 name=CarlosJoseA password=qazwsxedc25*
remote-address=10.10.5.26
add local-address=10.10.5.27 name=jmarin password=..DIARE2015.. remote-address=
10.10.5.28
/snmp
set enabled=yes
/system clock
set time-zone-name=America/Costa_Rica
/system identity
set name=“ZEBOL S.A”
/system logging
set 0 action=disk
set 1 action=disk
set 2 action=disk
/system routerboard settings
set cpu-frequency=1200MHz memory-frequency=1066DDR
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
/tool netwatch
add host=172.16.2.50 interval=10s
add host=172.16.2.51 interval=10s
add disabled=yes host=172.16.2.47