Wireless Devices Disconnect DHCP Assign

kanuns · June 13, 2023, 11:08pm

Hi
I am facing a strange issue which has never occured before. My many devices which are normally connected via the same wifi are not connecting now after a restart. They connect and disconnect. In logs i get

dhcp1 assigned XXX for MAC:XXX
dhcp1 deassigned XXX for MAC:XXX

And this is continuously happening.
I have made the devices Static in DHCP Server but no avail.

I am using CCR2004-16G-2S+
ROS v7.9.2 (upgraded just now, issue was occurring before the upgrade also)

jun/09 03:19:21 dhcp,debug dhcp1 sending offer with id 2403529180 to 255.255.255.255
 jun/09 03:19:21 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:21 dhcp,debug,packet     yiaddr = 178.17.0.19
 jun/09 03:19:21 dhcp,debug,packet     siaddr = 178.18.0.1
 jun/09 03:19:21 dhcp,debug,packet     chaddr = 40:A1:08:38:0A:8B
 jun/09 03:19:21 dhcp,debug,packet     Subnet-Mask = 255.255.252.0
 jun/09 03:19:21 dhcp,debug,packet     Router = 178.17.0.1
 jun/09 03:19:21 dhcp,debug,packet     Domain-Server = 178.17.0.1
 jun/09 03:19:21 dhcp,debug,packet     Vendor-Specific = 01-04-C0-A8-44-05
 jun/09 03:19:21 dhcp,debug,packet     Address-Time = 29400
 jun/09 03:19:21 dhcp,debug,packet     Msg-Type = offer
 jun/09 03:19:21 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:21 dhcp,debug dhcp1 received request id 2403529180 from 0.0.0.0 '1:40:a1:8:38:a:8b'
 jun/09 03:19:21 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:21 dhcp,debug,packet     chaddr = 40:A1:08:38:0A:8B
 jun/09 03:19:21 dhcp,debug,packet     Address-Request = 178.17.0.19
 jun/09 03:19:21 dhcp,debug,packet     Msg-Type = request
 jun/09 03:19:21 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:21 dhcp,debug,packet     Parameter-List = Subnet-Mask,Router,Domain-Server,Domain-Name,Interface-MTU,Broadcast-Address,Address-Time,Renewal-Time,Rebinding-Time,Vendor-Specific
 jun/09 03:19:21 dhcp,debug,packet     Max-DHCP-Message-Size = 1500
 jun/09 03:19:21 dhcp,debug,packet     Class-Id = "android-dhcp-8.1.0"
 jun/09 03:19:21 dhcp,debug,packet     Client-Id = 01-40-A1-08-38-0A-8B
 jun/09 03:19:21 dhcp,debug lease offered, addressed to me
 jun/09 03:19:21 dhcp,info dhcp1 assigned 178.17.0.19 for 40:A1:08:38:0A:8B 
 jun/09 03:19:21 dhcp,debug dhcp1 sending ack with id 2403529180 to 255.255.255.255
 jun/09 03:19:21 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:21 dhcp,debug,packet     yiaddr = 178.17.0.19
 jun/09 03:19:21 dhcp,debug,packet     siaddr = 178.18.0.1
 jun/09 03:19:21 dhcp,debug,packet     chaddr = 40:A1:08:38:0A:8B
 jun/09 03:19:21 dhcp,debug,packet     Subnet-Mask = 255.255.252.0
 jun/09 03:19:21 dhcp,debug,packet     Router = 178.17.0.1
 jun/09 03:19:21 dhcp,debug,packet     Domain-Server = 178.17.0.1
 jun/09 03:19:21 dhcp,debug,packet     Vendor-Specific = 01-04-C0-A8-44-05
 jun/09 03:19:21 dhcp,debug,packet     Address-Time = 29400
 jun/09 03:19:21 dhcp,debug,packet     Msg-Type = ack
 jun/09 03:19:21 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:22 l2tp,ppp,info To Wogue Wan: initializing...
 jun/09 03:19:22 l2tp,ppp,info To Wogue Wan: connecting...
 jun/09 03:19:23 dhcp,debug dhcp1 received discover id 3809542475 from 0.0.0.0 '1:40:a1:8:38:5e:7e'
 jun/09 03:19:23 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:23 dhcp,debug,packet     chaddr = 40:A1:08:38:5E:7E
 jun/09 03:19:23 dhcp,debug,packet     Msg-Type = discover
 jun/09 03:19:23 dhcp,debug,packet     Parameter-List = Subnet-Mask,Router,Domain-Server,Domain-Name,Interface-MTU,Broadcast-Address,Address-Time,Renewal-Time,Rebinding-Time,Vendor-Specific
 jun/09 03:19:23 dhcp,debug,packet     Max-DHCP-Message-Size = 1500
 jun/09 03:19:23 dhcp,debug,packet     Class-Id = "android-dhcp-8.1.0"
 jun/09 03:19:23 dhcp,debug,packet     Client-Id = 01-40-A1-08-38-5E-7E
 jun/09 03:19:23 dhcp,debug lease found, bound, offer
 jun/09 03:19:23 dhcp,info dhcp1 deassigned 178.17.0.18 for 40:A1:08:38:5E:7E 
 jun/09 03:19:23 dhcp,debug dhcp1 sending offer with id 3809542475 to 178.17.0.18
 jun/09 03:19:23 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:23 dhcp,debug,packet     yiaddr = 178.17.0.18
 jun/09 03:19:23 dhcp,debug,packet     siaddr = 178.18.0.1
 jun/09 03:19:23 dhcp,debug,packet     chaddr = 40:A1:08:38:5E:7E
 jun/09 03:19:23 dhcp,debug,packet     Subnet-Mask = 255.255.252.0
 jun/09 03:19:23 dhcp,debug,packet     Router = 178.17.0.1
 jun/09 03:19:23 dhcp,debug,packet     Domain-Server = 178.17.0.1
 jun/09 03:19:23 dhcp,debug,packet     Vendor-Specific = 01-04-C0-A8-44-05
 jun/09 03:19:23 dhcp,debug,packet     Address-Time = 29400
 jun/09 03:19:23 dhcp,debug,packet     Msg-Type = offer
 jun/09 03:19:23 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:23 dhcp,debug dhcp1 received request id 3809542475 from 0.0.0.0 '1:40:a1:8:38:5e:7e'
 jun/09 03:19:23 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:23 dhcp,debug,packet     chaddr = 40:A1:08:38:5E:7E
 jun/09 03:19:23 dhcp,debug,packet     Address-Request = 178.17.0.18
 jun/09 03:19:23 dhcp,debug,packet     Msg-Type = request
 jun/09 03:19:23 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:23 dhcp,debug,packet     Parameter-List = Subnet-Mask,Router,Domain-Server,Domain-Name,Interface-MTU,Broadcast-Address,Address-Time,Renewal-Time,Rebinding-Time,Vendor-Specific
 jun/09 03:19:23 dhcp,debug,packet     Max-DHCP-Message-Size = 1500
 jun/09 03:19:23 dhcp,debug,packet     Class-Id = "android-dhcp-8.1.0"
 jun/09 03:19:23 dhcp,debug,packet     Client-Id = 01-40-A1-08-38-5E-7E
 jun/09 03:19:23 dhcp,debug lease offered, addressed to me
 jun/09 03:19:23 dhcp,info dhcp1 assigned 178.17.0.18 for 40:A1:08:38:5E:7E 
 jun/09 03:19:23 dhcp,debug dhcp1 sending ack with id 3809542475 to 178.17.0.18
 jun/09 03:19:23 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:23 dhcp,debug,packet     yiaddr = 178.17.0.18
 jun/09 03:19:23 dhcp,debug,packet     siaddr = 178.18.0.1
 jun/09 03:19:23 dhcp,debug,packet     chaddr = 40:A1:08:38:5E:7E
 jun/09 03:19:23 dhcp,debug,packet     Subnet-Mask = 255.255.252.0
 jun/09 03:19:23 dhcp,debug,packet     Router = 178.17.0.1
 jun/09 03:19:23 dhcp,debug,packet     Domain-Server = 178.17.0.1
 jun/09 03:19:23 dhcp,debug,packet     Vendor-Specific = 01-04-C0-A8-44-05
 jun/09 03:19:23 dhcp,debug,packet     Address-Time = 29400
 jun/09 03:19:23 dhcp,debug,packet     Msg-Type = ack
 jun/09 03:19:23 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:24 dhcp,debug dhcp1 received discover id 2197255613 from 0.0.0.0 '1:40:a1:8:38:a:8b'
 jun/09 03:19:24 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:24 dhcp,debug,packet     chaddr = 40:A1:08:38:0A:8B
 jun/09 03:19:24 dhcp,debug,packet     Msg-Type = discover
 jun/09 03:19:24 dhcp,debug,packet     Parameter-List = Subnet-Mask,Router,Domain-Server,Domain-Name,Interface-MTU,Broadcast-Address,Address-Time,Renewal-Time,Rebinding-Time,Vendor-Specific
 jun/09 03:19:24 dhcp,debug,packet     Max-DHCP-Message-Size = 1500
 jun/09 03:19:24 dhcp,debug,packet     Class-Id = "android-dhcp-8.1.0"
 jun/09 03:19:24 dhcp,debug,packet     Client-Id = 01-40-A1-08-38-0A-8B
 jun/09 03:19:24 dhcp,debug lease found, bound, offer
 jun/09 03:19:24 dhcp,info dhcp1 deassigned 178.17.0.19 for 40:A1:08:38:0A:8B 
 jun/09 03:19:24 dhcp,debug dhcp1 sending offer with id 2197255613 to 255.255.255.255
 jun/09 03:19:24 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:24 dhcp,debug,packet     yiaddr = 178.17.0.19
 jun/09 03:19:24 dhcp,debug,packet     siaddr = 178.18.0.1
 jun/09 03:19:24 dhcp,debug,packet     chaddr = 40:A1:08:38:0A:8B
 jun/09 03:19:24 dhcp,debug,packet     Subnet-Mask = 255.255.252.0
 jun/09 03:19:24 dhcp,debug,packet     Router = 178.17.0.1
 jun/09 03:19:24 dhcp,debug,packet     Domain-Server = 178.17.0.1
 jun/09 03:19:24 dhcp,debug,packet     Vendor-Specific = 01-04-C0-A8-44-05
 jun/09 03:19:24 dhcp,debug,packet     Address-Time = 29400
 jun/09 03:19:24 dhcp,debug,packet     Msg-Type = offer
 jun/09 03:19:24 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:24 dhcp,debug dhcp1 received request id 2197255613 from 0.0.0.0 '1:40:a1:8:38:a:8b'
 jun/09 03:19:24 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:24 dhcp,debug,packet     chaddr = 40:A1:08:38:0A:8B
 jun/09 03:19:24 dhcp,debug,packet     Address-Request = 178.17.0.19
 jun/09 03:19:24 dhcp,debug,packet     Msg-Type = request
 jun/09 03:19:24 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:24 dhcp,debug,packet     Parameter-List = Subnet-Mask,Router,Domain-Server,Domain-Name,Interface-MTU,Broadcast-Address,Address-Time,Renewal-Time,Rebinding-Time,Vendor-Specific
 jun/09 03:19:24 dhcp,debug,packet     Max-DHCP-Message-Size = 1500
 jun/09 03:19:24 dhcp,debug,packet     Class-Id = "android-dhcp-8.1.0"
 jun/09 03:19:24 dhcp,debug,packet     Client-Id = 01-40-A1-08-38-0A-8B
 jun/09 03:19:24 dhcp,debug lease offered, addressed to me
 jun/09 03:19:24 dhcp,info dhcp1 assigned 178.17.0.19 for 40:A1:08:38:0A:8B 
 jun/09 03:19:24 dhcp,debug dhcp1 sending ack with id 2197255613 to 255.255.255.255
 jun/09 03:19:24 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:24 dhcp,debug,packet     yiaddr = 178.17.0.19
 jun/09 03:19:24 dhcp,debug,packet     siaddr = 178.18.0.1
 jun/09 03:19:24 dhcp,debug,packet     chaddr = 40:A1:08:38:0A:8B
 jun/09 03:19:24 dhcp,debug,packet     Subnet-Mask = 255.255.252.0
 jun/09 03:19:24 dhcp,debug,packet     Router = 178.17.0.1
 jun/09 03:19:24 dhcp,debug,packet     Domain-Server = 178.17.0.1
 jun/09 03:19:24 dhcp,debug,packet     Vendor-Specific = 01-04-C0-A8-44-05
 jun/09 03:19:24 dhcp,debug,packet     Address-Time = 29400
 jun/09 03:19:24 dhcp,debug,packet     Msg-Type = ack
 jun/09 03:19:24 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:26 dhcp,debug dhcp1 received discover id 4007259500 from 0.0.0.0 '1:28:9c:6e:9c:b:66'
 jun/09 03:19:26 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:26 dhcp,debug,packet     chaddr = 28:9C:6E:9C:0B:66
 jun/09 03:19:26 dhcp,debug,packet     Msg-Type = discover
 jun/09 03:19:26 dhcp,debug,packet     Parameter-List = Subnet-Mask,Router,Broadcast-Address,Domain-Server
 jun/09 03:19:26 dhcp,debug,packet     Max-DHCP-Message-Size = 1500
 jun/09 03:19:26 dhcp,debug,packet     Client-Id = 01-28-9C-6E-9C-0B-66
 jun/09 03:19:26 dhcp,debug lease found, bound, offer
 jun/09 03:19:26 dhcp,info dhcp1 deassigned 178.17.2.129 for 28:9C:6E:9C:0B:66 HF-LPT270
 jun/09 03:19:26 dhcp,debug dhcp1 sending offer with id 4007259500 to 255.255.255.255
 jun/09 03:19:26 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:26 dhcp,debug,packet     yiaddr = 178.17.2.129
 jun/09 03:19:26 dhcp,debug,packet     siaddr = 178.18.0.1
 jun/09 03:19:26 dhcp,debug,packet     chaddr = 28:9C:6E:9C:0B:66
 jun/09 03:19:26 dhcp,debug,packet     Subnet-Mask = 255.255.252.0
 jun/09 03:19:26 dhcp,debug,packet     Router = 178.17.0.1
 jun/09 03:19:26 dhcp,debug,packet     Domain-Server = 178.17.0.1
 jun/09 03:19:26 dhcp,debug,packet     Address-Time = 29400
 jun/09 03:19:26 dhcp,debug,packet     Msg-Type = offer
 jun/09 03:19:26 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:26 dhcp,debug dhcp1 received request id 4007259500 from 0.0.0.0 '1:28:9c:6e:9c:b:66'
 jun/09 03:19:26 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:26 dhcp,debug,packet     chaddr = 28:9C:6E:9C:0B:66
 jun/09 03:19:26 dhcp,debug,packet     Host-Name = "HF-LPT270"
 jun/09 03:19:26 dhcp,debug,packet     Address-Request = 178.17.2.129
 jun/09 03:19:26 dhcp,debug,packet     Msg-Type = request
 jun/09 03:19:26 dhcp,debug,packet     Server-Id = 178.17.0.1
 jun/09 03:19:26 dhcp,debug,packet     Parameter-List = Subnet-Mask,Router,Broadcast-Address,Domain-Server
 jun/09 03:19:26 dhcp,debug,packet     Max-DHCP-Message-Size = 1500
 jun/09 03:19:26 dhcp,debug,packet     Client-Id = 01-28-9C-6E-9C-0B-66
 jun/09 03:19:26 dhcp,debug lease offered, addressed to me
 jun/09 03:19:26 dhcp,info dhcp1 assigned 178.17.2.129 for 28:9C:6E:9C:0B:66 HF-LPT270
 jun/09 03:19:26 dhcp,debug dhcp1 sending ack with id 4007259500 to 255.255.255.255
 jun/09 03:19:26 dhcp,debug,packet     ciaddr = 0.0.0.0
 jun/09 03:19:26 dhcp,debug,packet     yiaddr = 178.17.2.129
 jun/09 03:19:26 dhcp,debug,packet     siaddr = 178.18.0.1
 jun/09 03:19:26 dhcp,debug,packet     chaddr = 28:9C:6E:9C:0B:66
 jun/09 03:19:26 dhcp,debug,packet     Subnet-Mask = 255.255.252.0
 jun/09 03:19:26 dhcp,debug,packet     Router = 178.17.0.1
 jun/09 03:19:26 dhcp,debug,packet     Domain-Server = 178.17.0.1
 jun/09 03:19:26 dhcp,debug,packet     Address-Time = 29400
 jun/09 03:19:26 dhcp,debug,packet     Msg-Type = ack
 jun/09 03:19:26 dhcp,debug,packet     Server-Id = 178.17.0.1

This is very annoying. Can anyone please help ?
By the way, not all devices are acting this way.

kanuns · June 14, 2023, 10:50am

Can anyone please please help

kanuns · June 14, 2023, 7:42pm

does anyone has any idea about it ?

kanuns · June 15, 2023, 8:05am

hopeless I am i guess.

erlinden · June 15, 2023, 8:10am

Can you please share your config (just to be sure):

/export file=anynameyoulike

Make sure to remove serial and any other privacy information (like public IP).

kanuns · June 15, 2023, 10:55am

Thank you for the reply

# jun/15/2023 15:50:03 by RouterOS 7.9.2
# software id = I25Y-SCVH
#
# model = CCR2004-16G-2S+
/interface bridge
add name=SIP
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] comment="WAN Mikrotik 150X3=450Mbps"
set [ find default-name=ether2 ] comment="WAN Backup 110Mbps "
set [ find default-name=ether6 ] loop-protect=on
set [ find default-name=ether8 ] loop-protect=on
set [ find default-name=ether10 ] comment="Entertainment Asia"
set [ find default-name=ether11 ] comment=SIP
set [ find default-name=sfp-sfpplus1 ] mac-address=DC:2C:6E:84:30:A9
set [ find default-name=sfp-sfpplus2 ] mac-address=DC:2C:6E:84:30:A8
/interface l2tp-client
add connect-to=18.170.149.27 disabled=no name="Cloud Router" use-ipsec=yes \
    user=h21-lan
add connect-to=45.249.10.48 disabled=no name="To Wogue Wan" user=h21-lan
/interface ovpn-client
add certificate="Vortex Cleint" cipher=aes256-cbc connect-to=18.170.149.27 \
    mac-address=02:21:70:AF:A7:85 name="Cloud Router Ovpn" use-peer-dns=no \
    user=h21lan-ovpn verify-server-certificate=yes
/interface list
add exclude=dynamic name=discover
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip dhcp-server option
add code=43 name=unifi value=0x0104C0A84405
/ip hotspot profile
add name="for raduis testing" radius-interim-update=30s use-radius=yes
/ip hotspot user profile
set [ find default=yes ] address-list="Normal Users" incoming-packet-mark=\
    NormalUsers mac-cookie-timeout=4w2d name=Team_DK outgoing-packet-mark=\
    NormalUsers rate-limit=8572k/8572k shared-users=5
add !idle-timeout !keepalive-timeout mac-cookie-timeout=1d name="Trial User" \
    rate-limit=7M/7M session-timeout=12h shared-users=unlimited
add address-list="Normal Users" idle-timeout=12h incoming-packet-mark=\
    NormalUsers !keepalive-timeout mac-cookie-timeout=4w2d name=Residents \
    outgoing-packet-mark=NormalUsers rate-limit=7572k/7572k shared-users=2
add address-list="Normal Users" idle-timeout=9h incoming-packet-mark=\
    NormalUsers !keepalive-timeout mac-cookie-timeout=3w1d name=housekeeping \
    outgoing-packet-mark=NormalUsers rate-limit=5072k/5072k session-timeout=\
    14h
add address-list="Normal Users" idle-timeout=12h incoming-packet-mark=\
    NormalUsers !keepalive-timeout mac-cookie-timeout=4w2d name=Premium \
    outgoing-packet-mark=NormalUsers rate-limit=10072k/10072k shared-users=3
add address-list="Normal Users" !idle-timeout incoming-packet-mark=\
    NormalUsers !keepalive-timeout mac-cookie-timeout=4w2d name=Devices \
    outgoing-packet-mark=NormalUsers rate-limit=7572k/7572k shared-users=20
add address-list="Normal Users" idle-timeout=3h incoming-packet-mark=\
    NormalUsers !keepalive-timeout mac-cookie-timeout=1d name=Event_Customers \
    outgoing-packet-mark=NormalUsers rate-limit=7572k/7572k shared-users=50
add address-list="Normal Users" idle-timeout=3h incoming-packet-mark=\
    NormalUsers !keepalive-timeout mac-cookie-timeout=5w5d name=Ultra \
    outgoing-packet-mark=NormalUsers rate-limit=22072k/22072k shared-users=3
add address-list="Normal Users" !idle-timeout incoming-packet-mark=\
    NormalUsers !keepalive-timeout mac-cookie-timeout=4w2d name=\
    "Safi testing" outgoing-packet-mark=NormalUsers shared-users=unlimited
add address-list="Normal Users" idle-timeout=12h incoming-packet-mark=\
    NormalUsers keepalive-timeout=none mac-cookie-timeout=4w2d name=Meeting \
    outgoing-packet-mark=NormalUsers rate-limit=7572k/7572k shared-users=50
add address-list="Normal Users" idle-timeout=12h incoming-packet-mark=\
    "Normal Users" keepalive-timeout=none mac-cookie-timeout=4w2d name=\
    "Premium Low" outgoing-packet-mark="Normal Users" rate-limit=7572k/7572k \
    shared-users=3
add address-list="For Static GPON 1" idle-timeout=12h incoming-packet-mark=\
    NormalUsers mac-cookie-timeout=4w2d name=GPON1_Static \
    outgoing-packet-mark=NormalUsers rate-limit=7572k/7572k shared-users=2
add address-list="Normal Users" idle-timeout=12h incoming-packet-mark=\
    NormalUsers !keepalive-timeout mac-cookie-timeout=4w2d name=\
    "Ultra max (only for dk staff)" outgoing-packet-mark=NormalUsers \
    rate-limit=50M/50M shared-users=2

/ip hotspot profile
add dns-name=wifi.daftarkhwan.com hotspot-address=178.17.0.1 login-by=\
    cookie,http-chap,http-pap,trial,mac-cookie name=hsprof1 \
    trial-uptime-reset=8h trial-user-profile="Trial User"
/ip pool
add name=dhcp_pool0 ranges=192.168.201.20-192.168.201.254
add name=spillover_pool1 ranges=178.18.0.10-178.18.3.253
add name="Hotspot Pool1" next-pool=spillover_pool1 ranges=\
    178.17.0.15-178.17.3.254
add name=dhcp_pool3 ranges=192.168.201.10-192.168.201.254
add name=dhcp_pool4 ranges=192.168.210.10-192.168.210.254
add name=dhcp_pool5 ranges=192.169.21.2-192.169.21.254
add name=dhcp_pool6 ranges=178.17.0.15-178.17.3.254
/ip dhcp-server
add address-pool=dhcp_pool4 interface=SIP lease-time=8h10m name=dhcp2
add address-pool=dhcp_pool5 interface=ether10 lease-time=8h10m name=dhcp3
add address-pool=dhcp_pool6 interface=bridge1 lease-time=8h30m name=dhcp1
/ip hotspot
add address-pool="Hotspot Pool1" addresses-per-mac=1 disabled=no \
    idle-timeout=none interface=bridge1 name=hotspot1 profile=hsprof1
/queue type
add kind=pfifo name=openvpn-default pfifo-limit=250
/queue simple
add comment=Devices limit-at=5M/5M max-limit=5M/5M name="VoIP Server" \
    priority=1/1 queue=openvpn-default/openvpn-default target=\
    192.168.201.252/32
/routing bgp template
set default disabled=no output.network=bgp-networks
/routing ospf instance
add disabled=no name=default-v2
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0 disabled=yes name=notpublic
add addresses=0.0.0.0/0 name=librenms security=private
/system logging action
add email-start-tls=yes email-to=dk.phase3@gmail.com name=email target=email
/interface bridge port
add bridge=bridge1 ingress-filtering=no interface=ether3
add bridge=bridge1 ingress-filtering=no interface=ether4
add bridge=bridge1 ingress-filtering=no interface=ether5
add bridge=bridge1 ingress-filtering=no interface=ether6
add bridge=bridge1 ingress-filtering=no interface=ether7
add bridge=bridge1 ingress-filtering=no interface=ether9
add bridge=SIP ingress-filtering=no interface=ether11
add bridge=SIP ingress-filtering=no interface=ether12
add bridge=bridge1 interface=ether8
/ip neighbor discovery-settings
set discover-interface-list=all
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface ovpn-server server
set auth=sha1,md5 certificate=*1 cipher=blowfish128,aes128-cbc,aes256-cbc
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether15 network=\
    192.168.88.0
add address=192.168.210.1/24 interface=SIP network=192.168.210.0
add address=193.11.69.15/24 interface=ether2 network=193.11.69.0
add address=192.168.154.10/24 interface=ether1 network=192.168.154.0
add address=192.169.21.1/24 comment="Entertainment Asia Port" interface=\
    ether10 network=192.169.21.0
add address=178.17.0.1/22 interface=bridge1 network=178.17.0.0
add address=178.18.0.1/22 interface=bridge1 network=178.18.0.0
/ip dhcp-client
add add-default-route=no disabled=yes interface=ether1 use-peer-dns=no
/ip dhcp-server alert
add disabled=no interface=bridge1 on-alert="#if rougue is detected\r\
    \n#send email\r\
    \n/tool e-mail send subject=(\"Rogue DHCP Server is detected at Downtown\"\
    ) \\\r\
    \nbody=(\"this is the mac adddress\" . [/ip dhcp-server alert get [find in\
    terface=bridge1] unknown-server]) \\ to=(\"dk.phase3@gmail.com\") tls=yes\
    \r\
    \n" valid-server=18:FD:74:B0:22:A6,18:FD:74:B0:22:AE,DC:2C:6E:84:30:A1
/ip dhcp-server lease
add address=178.17.3.254 client-id=1:74:83:c2:93:cb:ea comment="AP 01 GF" \
    mac-address=74:83:C2:93:CB:EA server=dhcp1
add address=178.17.3.253 client-id=1:74:83:c2:39:a7:73 comment="AP 2  GF " \
    mac-address=74:83:C2:39:A7:73 server=dhcp1
add address=178.17.3.252 client-id=1:74:83:c2:39:a9:1e comment="AP 04 GF" \
    mac-address=74:83:C2:39:A9:1E server=dhcp1
add address=178.17.3.248 client-id=1:18:e8:29:cc:73:9f comment="AP 03 GF" \
    mac-address=18:E8:29:CC:73:9F server=dhcp1
add address=178.17.3.250 client-id=1:74:83:c2:39:a5:1d comment="AP 05 GF" \
    mac-address=74:83:C2:39:A5:1D server=dhcp1
add address=178.17.3.244 client-id=1:74:83:c2:80:b4:e3 comment="AP 06 GF" \
    mac-address=74:83:C2:80:B4:E3 server=dhcp1
add address=178.17.3.243 client-id=1:24:5a:4c:78:1d:f1 comment="AP 07 GF" \
    mac-address=24:5A:4C:78:1D:F1 server=dhcp1
add address=178.17.3.242 client-id=1:74:83:c2:93:c7:25 comment="AP 08 GF" \
    mac-address=74:83:C2:93:C7:25 server=dhcp1
add address=178.17.3.241 client-id=1:74:83:c2:39:a7:74 comment="AP 09 GF" \
    mac-address=74:83:C2:39:A7:74 server=dhcp1
add address=178.17.3.240 client-id=1:e0:63:da:a0:9d:87 comment="AP 10 FF" \
    mac-address=E0:63:DA:A0:9D:87 server=dhcp1
add address=178.17.3.239 client-id=1:74:83:c2:40:a6:72 comment="AP 11 FF" \
    mac-address=74:83:C2:40:A6:72 server=dhcp1
add address=178.17.3.237 client-id=1:80:2a:a8:93:84:fa comment="AP 12 FF" \
    mac-address=80:2A:A8:93:84:FA server=dhcp1
add address=178.17.3.236 client-id=1:fc:ec:da:8c:ef:2c comment="AP 13 FF" \
    mac-address=FC:EC:DA:8C:EF:2C server=dhcp1
add address=178.17.3.235 client-id=1:78:45:58:2:a:62 comment="AP 14 FF" \
    mac-address=78:45:58:02:0A:62 server=dhcp1
add address=178.17.3.234 client-id=1:fc:ec:da:1c:3d:9d comment="AP 15 2F" \
    mac-address=FC:EC:DA:1C:3D:9D server=dhcp1
add address=178.17.3.233 client-id=1:fc:ec:da:1c:3d:7a comment="AP 16 2F" \
    mac-address=FC:EC:DA:1C:3D:7A server=dhcp1
add address=178.17.3.232 client-id=1:80:2a:a8:86:66:8a comment="AP 17 2F" \
    mac-address=80:2A:A8:86:66:8A server=dhcp1
add address=178.17.3.231 client-id=1:80:2a:a8:86:65:ad comment="AP 18 2F" \
    mac-address=80:2A:A8:86:65:AD server=dhcp1
add address=178.17.3.230 client-id=1:80:2a:a8:86:66:38 comment="AP 19 2F" \
    mac-address=80:2A:A8:86:66:38 server=dhcp1
add address=178.17.3.247 client-id=1:74:ac:b9:2:3e:80 comment="AP 20 2F" \
    mac-address=74:AC:B9:02:3E:80 server=dhcp1
add address=178.17.3.229 client-id=1:fc:ec:da:1c:3f:d1 comment="AP 21 3F" \
    mac-address=FC:EC:DA:1C:3F:D1 server=dhcp1
add address=178.17.3.228 client-id=1:80:2a:a8:86:64:d2 comment="AP 22 3F" \
    mac-address=80:2A:A8:86:64:D2 server=dhcp1
add address=178.17.3.227 client-id=1:80:2a:a8:93:83:f5 comment="AP 23 3F" \
    mac-address=80:2A:A8:93:83:F5 server=dhcp1
add address=178.17.3.226 client-id=1:74:83:c2:36:42:5 comment="AP 24 3F" \
    mac-address=74:83:C2:36:42:05 server=dhcp1
add address=178.17.3.225 client-id=1:24:5a:4c:78:18:dd mac-address=\
    24:5A:4C:78:18:DD server=dhcp1
add address=178.17.3.224 client-id=1:78:8a:20:56:8b:a4 comment="AP 26 3F" \
    mac-address=78:8A:20:56:8B:A4 server=dhcp1
add address=178.17.3.221 client-id=1:80:7c:62:5:db:80 comment="DVR 1" \
    mac-address=80:7C:62:05:DB:80 server=dhcp1
add address=178.17.3.220 client-id=1:80:7c:62:1b:47:ff comment="DVR 2" \
    mac-address=80:7C:62:1B:47:FF server=dhcp1
add address=178.17.3.217 client-id=1:34:f6:4b:7e:27:7d comment=\
    "daniyal laptop" mac-address=34:F6:4B:7E:27:7D server=dhcp1
add address=178.17.1.244 client-id=1:F0:1F:C7:D7:C1:55 comment="Rogue 14 Pro" \
    mac-address=F0:1F:C7:D7:C1:55 server=dhcp1
add address=178.17.1.245 client-id=1:5C:E9:1E:97:54:E5 comment=\
    "Ahmad new pro M2" mac-address=5C:E9:1E:97:54:E5 server=dhcp1
add address=178.17.1.242 client-id=1:20:78:CD:AB:B2:E0 comment=\
    "Ahmad apple watch" mac-address=20:78:CD:AB:B2:E0 server=dhcp1
add address=178.17.1.243 client-id=1:CC:66:0A:BD:FD:EE comment=\
    "Ahmad rogue 11" mac-address=CC:66:0A:BD:FD:EE server=dhcp1
add address=178.17.1.54 client-id=1:70:3E:97:05:B0:6C comment=\
    "Zkteco software finder personal device" mac-address=70:3E:97:05:B0:6C \
    server=dhcp1
add address=178.17.0.128 client-id=1:78:f2:35:45:97:b3 comment="ezviz camera" \
    mac-address=78:F2:35:45:97:B3 server=dhcp1
add address=178.17.1.165 client-id=1:34:f6:4b:3a:4e:6d comment=\
    "FDO Zeenat Nazeer" mac-address=34:F6:4B:3A:4E:6D server=dhcp1
add address=178.17.1.48 client-id=1:50:9a:4c:4b:4b:47 comment="Yellowbar PC" \
    mac-address=50:9A:4C:4B:4B:47 server=dhcp1
add address=178.17.2.36 client-id=1:00:17:61:10:41:BC comment="Zkteco Main" \
    mac-address=00:17:61:10:41:BC server=dhcp1
add address=178.17.2.129 client-id=1:28:9c:6e:9c:b:66 comment=\
    "Bijli Bachao kit" mac-address=28:9C:6E:9C:0B:66 server=dhcp1
add address=178.17.0.25 client-id=1:68:d7:9a:13:fd:b8 comment="AP 20 N" \
    mac-address=68:D7:9A:13:FD:B8 server=*4
add address=178.17.0.53 client-id=1:0:17:61:11:5d:d0 comment="Downtown B1" \
    mac-address=00:17:61:11:5D:D0 server=*4
add address=178.17.1.98 client-id=1:78:8a:20:d6:88:6 comment="AP basment " \
    mac-address=78:8A:20:D6:88:06 server=dhcp1
add address=192.168.210.254 comment="Voip Server" mac-address=\
    50:9A:4C:3E:AA:01 server=dhcp2
add address=192.168.210.253 comment="Reception 300" mac-address=\
    00:04:F2:29:AD:FE server=dhcp2
add address=178.17.2.25 client-id=1:28:9c:6e:9c:b:d8 comment=\
    "Bijli Bachao kit Entertainer" mac-address=28:9C:6E:9C:0B:D8 server=dhcp1
add address=178.17.1.86 client-id=1:28:9c:6e:7d:14:3a comment=\
    "Bijli Bachai kit Downtown Main" mac-address=28:9C:6E:7D:14:3A server=\
    dhcp1
add address=192.168.210.252 comment="301 Phone" mac-address=00:04:F2:A5:A7:FA \
    server=dhcp2
add address=192.168.210.250 comment=306 mac-address=00:04:F2:40:CA:05 server=\
    dhcp2
add address=192.168.210.249 comment="308 Phone " mac-address=\
    00:04:F2:C3:04:41 server=dhcp2
add address=192.168.210.248 comment="307 Phone" mac-address=00:04:F2:A9:77:D7 \
    server=dhcp2
add address=192.168.210.246 comment="302 Phone" mac-address=00:04:F2:40:C8:CC \
    server=dhcp2
add address=192.168.210.245 comment="303 PHONE" mac-address=00:04:F2:43:43:6D \
    server=dhcp2
add address=192.168.210.244 comment="304 Phone" mac-address=00:04:F2:AB:0D:A4 \
    server=dhcp2
add address=192.168.210.243 comment=305 mac-address=64:16:7F:85:2F:DC server=\
    dhcp2
add address=192.168.210.242 comment="309 Yellowbar" mac-address=\
    64:16:7F:85:30:9D server=dhcp2
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=8C:C6:81:45:C9:BE
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=4C:1D:96:99:F1:6F
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=14:7D:DA:41:24:68
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=24:41:8C:1C:42:51
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=5C:BA:EF:78:80:29
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=62:27:37:EA:CB:C5
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=00:28:F8:0A:68:06
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:51:24:A4
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=5C:BA:EF:78:6F:4B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=A4:C3:F0:AB:34:70
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=60:FF:8E:C3:1E:49
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:74:9B:92
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F8:FF:C2:69:CF:F3
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=60:DD:8E:F4:BC:1C
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=B8:81:98:2C:BD:A7
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=08:11:96:CC:28:E4
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=94:65:9C:2B:89:41
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:29:0D:19
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=04:EA:56:FA:E9:5C
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:EB:71:35:C0:FA
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:22:FB:65:8E:88
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:50:EA:72
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:50:E0:88
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:76:F7:BB
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=08:00:27:4D:81:CF
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=10:F0:05:3C:73:E1
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=2C:6E:85:C2:06:C8
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=20:DA:22:C7:AA:F4
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=00:23:12:11:70:49
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:77:89:C3
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=60:DD:8E:C3:1F:18
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F8:FF:C2:11:0A:15
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=78:4F:43:8F:AB:28
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:50:DA:C4
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=80:2B:F9:5C:FD:BB
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F0:18:98:58:B3:AA
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=14:7D:DA:42:9B:4E
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E4:A7:A0:A2:9A:2C
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=60:DD:8E:F4:BD:5C
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=A4:83:E7:E4:8F:37
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:2F:9B:C9:C3:EF
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=4C:1D:96:94:19:F2
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F4:46:37:51:21:8D
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:74:06:35
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=98:AF:65:99:D7:7A
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=60:DD:8E:F1:FC:1B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:50:DA:C6
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:83:E5:84
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=1C:C1:0C:B2:5E:8A
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:29:3C:CB
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:19:35:F7
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=8C:C6:81:46:9E:6B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=A4:83:E7:D4:26:78
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=9C:B6:D0:00:19:E9
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=4C:1D:96:1E:15:68
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=84:EF:18:D2:8F:34
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:22:FB:CE:42:FE
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=20:2B:20:83:AE:57
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=04:EA:56:FA:E9:52
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:2F:9B:C6:F6:7E
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=D8:F2:CA:42:C4:44
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=08:3E:8E:70:6D:41
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=30:E3:7A:AD:3D:06
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=10:40:F3:B1:00:16
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:3E:AA:50:A6:97
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:51:BA:62
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=04:ED:33:78:0A:28
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F8:FF:C2:6A:77:F5
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:76:F8:C2
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E4:A4:71:2F:DF:9B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=98:AF:65:9A:01:F0
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=DC:FB:48:CB:FA:7F
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=2C:3B:70:85:57:1E
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:50:DA:D0
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F4:46:37:50:D4:A3
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=88:66:5A:0E:11:F6
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:28:D7:49
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:22:FB:DE:DE:56
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:29:1B:6F
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F4:46:37:50:D1:9C
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=84:EF:18:87:4D:53
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:2F:9B:C9:CE:A3
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:51:28:D8
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=98:AF:65:B0:98:CF
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=98:AF:65:99:D7:C5
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:28:B4:93
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:DE:B4:F2
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=4C:1D:96:AC:94:82
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=08:D4:0C:F6:A6:99
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=48:F1:7F:48:21:E1
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:22:FB:27:82:CE
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F0:18:98:B5:A5:00
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:77:7E:7B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=04:ED:33:39:E3:7E
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=60:DD:8E:C3:4F:BF
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=98:AF:65:B0:98:8E
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=A4:C3:F0:AB:81:14
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:2F:9B:C6:D9:A5
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=94:E6:F7:E1:51:45
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:78:81:55
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:99:0F:A5
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:EB:71:5B:CB:0B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:28:F6:6B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=6C:96:CF:DB:E6:0B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=A4:83:E7:E4:92:53
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F4:46:37:50:D2:69
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:77:95:8B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=CC:F9:E4:72:9F:ED
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:51:BA:34
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=D8:F2:CA:41:BE:28
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F4:46:37:50:D2:5A
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:15:C2:BC:CB:36
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:2D:DB:80
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F0:18:98:58:C3:CE
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=0C:96:E6:D1:7E:D9
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=AC:D1:B8:43:DE:8B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:22:FB:7D:71:D7
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=10:02:B5:4C:93:48
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=14:F6:D8:2A:83:E3
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=10:F0:05:BF:62:9C
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:2F:9B:C6:F6:C4
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=A8:6D:AA:96:A1:9F
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:77:D5:82
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=14:7D:DA:74:B2:F7
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:92:F7:D4
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=40:49:0F:51:5C:21
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:29:0E:9B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=60:DD:8E:F4:BB:E5
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=E8:FB:1C:50:D8:64
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F0:18:98:2A:7A:D8
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=A4:34:D9:7C:E1:01
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=4C:1D:96:AA:11:80
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=4C:1D:96:AD:68:8A
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:DD:A3:FF
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=98:AF:65:BA:DF:79
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=F4:46:37:50:D1:D3
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=60:DD:8E:C3:1F:8B
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:22:FB:BF:3A:61
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:F9:D3:2F:2D:C3
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=38:00:25:46:34:58
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=94:0E:6B:46:14:DD
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=3C:55:76:77:A8:29
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=28:3D:C2:1D:0A:40
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=14:F6:D8:2A:74:FC
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=5C:BA:EF:78:6E:D5
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=50:2F:9B:C9:C3:DB
add block-access=yes comment="Entertainment Asia MACs to block" disabled=yes \
    mac-address=30:24:32:0A:2C:38
add address=178.17.2.49 client-id=1:28:9c:6e:9c:b:be comment=\
    "Downtown bijli bachao unknow kit" mac-address=28:9C:6E:9C:0B:BE server=\
    dhcp1
add address=192.168.210.241 client-id=1:a0:48:1c:69:59:df comment=\
    "Downtown Printer" mac-address=A0:48:1C:69:59:DF server=dhcp2
add address=178.17.1.213 client-id=1:0:17:61:10:b:bd comment=\
    "Zkteco Careem 1" mac-address=00:17:61:10:0B:BD server=dhcp1
add address=178.17.1.233 client-id=1:0:17:61:10:b:e0 comment=\
    "Zkteco Careem 2" mac-address=00:17:61:10:0B:E0 server=dhcp1
add address=178.17.1.238 client-id=1:0:17:61:10:b:62 comment=\
    "Zkteco Careem 3" mac-address=00:17:61:10:0B:62 server=dhcp1
add address=178.17.2.151 client-id=1:58:3:fb:3:81:68 comment=\
    "Dvr 4 Down town" mac-address=58:03:FB:03:81:68 server=dhcp1
add address=178.17.0.18 client-id=1:40:a1:8:38:5e:7e comment="Downtown Tabs" \
    mac-address=40:A1:08:38:5E:7E server=*4
add address=178.17.1.218 client-id=1:0:17:61:12:8a:3b comment=\
    "Software Finder Zketeco" mac-address=00:17:61:12:8A:3B server=dhcp1
/ip dhcp-server network
add address=178.17.0.0/22 dhcp-option=unifi dns-server=178.17.0.1 gateway=\
    178.17.0.1 next-server=178.18.0.1
add address=178.18.0.0/22 dhcp-option=unifi dns-server=178.18.0.1 gateway=\
    178.18.0.1
add address=192.168.210.0/24 dns-server=192.168.210.1 gateway=192.168.210.1
add address=192.169.21.0/24 dns-server=192.169.21.1 gateway=192.169.21.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=192.168.68.5 name=unifi.daftarkhwan.com
add address=192.168.68.244 name=helpdesk.daftarkhwan.com
add address=192.168.68.230 name=erp.daftarkhwan.com
/ip firewall address-list
add address=192.168.68.9 list="to Block for Servers"
add address=192.168.68.8 list="to Block for Servers"
add address=192.168.68.7 list="to Block for Servers"
add address=192.168.68.6 list="to Block for Servers"
add address=192.168.68.5 list="to Block for Servers"
add address=192.168.68.4 list="to Block for Servers"
add address=192.168.0.245 comment="Ahmed Mac Pro" list="Rogue Pro"
add address=191.1.1.0/24 comment="Ahmed Mac Pro" list="Rogue Pro"
add address=192.168.0.1 comment="Ahmed Mac Pro" list="Rogue Pro"
add address=192.168.68.1 comment="Ahmed Mac Pro" list="Rogue Pro"
add address=192.168.88.0/24 comment="Ahmed Mac Pro" list="Rogue Pro"
add address=192.168.50.245 comment="Ahmad GPON 1" disabled=yes list=\
    "For Static GPON 1"
add address=192.168.60.220 list="For Static GPON 1"
add address=192.168.60.221 list="For Static GPON 2"
add address=192.168.60.221 disabled=yes list="For Static GPON 4"
add address=177.16.1.184 comment="Ahmed Mac Pro" list="For Static GPON 1"
add address=177.16.1.187 comment="Ahmed Mac Pro" list="For Static GPON 1"
add address=192.168.201.252 list="SIP Servers"
add address=192.168.68.240 list="SIP Servers"
add address=177.16.1.54 comment="Zkteco software finder personal device" \
    list="For Static GPON 1"
add address=178.17.1.54 comment="Attendance Machine" list="For Static GPON 1"
add address=192.168.210.254 list="SIP Servers"
/ip firewall filter
add action=fasttrack-connection chain=forward hw-offload=no src-address-list=\
    "SIP Servers"
add action=fasttrack-connection chain=forward dst-address-list="SIP Servers" \
    hw-offload=no
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=accept chain=input comment=OpenVPN dst-port=1194 protocol=tcp
add action=accept chain=input dst-port=500,1701,4500,8047 protocol=udp
add action=accept chain=input dst-port=1723 protocol=tcp
add action=accept chain=input protocol=gre
add action=accept chain=input dst-port=123 protocol=udp
add action=accept chain=input dst-port=443,587,8047 protocol=tcp
add action=accept chain=input dst-port=1812,1813 protocol=udp
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
    connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" \
    in-interface=ether1
add action=drop chain=input comment="defconf: drop all from WAN" disabled=yes \
    in-interface=ether2
add action=accept chain=forward comment="defconf: accept established,related" \
    connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface=ether1
add action=drop chain=forward comment=\
    "defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new disabled=yes in-interface=ether2
add action=drop chain=input comment="drop ssh brute forcers" dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 in-interface=ether1 \
    protocol=tcp src-address-list=ssh_blacklist
add action=drop chain=input comment="drop ssh brute forcers" dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 in-interface=ether1 \
    protocol=udp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
    address-list-timeout=1d chain=input connection-state=new dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 protocol=tcp \
    src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_blacklist \
    address-list-timeout=1d chain=input connection-state=new dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 protocol=udp \
    src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
    address-list-timeout=1m chain=input connection-state=new dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 protocol=tcp \
    src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage3 \
    address-list-timeout=1m chain=input connection-state=new dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 protocol=udp \
    src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
    address-list-timeout=1m chain=input connection-state=new dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 protocol=tcp \
    src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage2 \
    address-list-timeout=1m chain=input connection-state=new dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 protocol=udp \
    src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
    address-list-timeout=1m chain=input connection-state=new dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 protocol=tcp
add action=add-src-to-address-list address-list=ssh_stage1 \
    address-list-timeout=1m chain=input connection-state=new dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 protocol=udp
add action=drop chain=forward comment="drop ssh brute downstream" dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 in-interface=ether1 \
    protocol=tcp src-address-list=ssh_blacklist
add action=drop chain=forward comment="drop ssh brute downstream" dst-port=\
    1928,22,21,80,23,5000,5060,1701,500,4500,1194 in-interface=ether1 \
    protocol=udp src-address-list=ssh_blacklist
add action=drop chain=forward disabled=yes dst-port=68 out-interface=ether2 \
    protocol=udp
/ip firewall mangle
add action=fasttrack-connection chain=prerouting src-address-list=\
    "SIP Servers"
add action=fasttrack-connection chain=prerouting dst-address-list=\
    "SIP Servers"
add action=change-dscp chain=prerouting new-dscp=60 passthrough=yes \
    src-address-list="For Static GPON 1"
add action=change-dscp chain=prerouting dst-address-list="For Static GPON 1" \
    new-dscp=60 passthrough=yes
add action=change-dscp chain=prerouting new-dscp=61 passthrough=yes \
    src-address-list="For Static GPON 2"
add action=change-dscp chain=prerouting dst-address-list="For Static GPON 2" \
    new-dscp=61 passthrough=yes
add action=change-dscp chain=prerouting new-dscp=62 passthrough=yes \
    src-address-list="For Static GPON 3"
add action=change-dscp chain=prerouting dst-address-list="For Static GPON 3" \
    new-dscp=62 passthrough=yes
add action=change-dscp chain=prerouting new-dscp=10 passthrough=yes \
    src-address-list="For Static GPON 4"
add action=change-dscp chain=prerouting dst-address-list="For Static GPON 4" \
    new-dscp=10 passthrough=yes
/ip firewall nat
add action=netmap chain=dstnat dst-address=192.168.154.10 dst-port=8047 log=\
    yes protocol=tcp to-addresses=178.17.1.54 to-ports=8047
add action=netmap chain=dstnat dst-address=192.168.154.10 dst-port=8047 log=\
    yes protocol=udp to-addresses=178.17.1.54 to-ports=8047
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=dst-nat chain=dstnat dst-address=197.2.2.19 dst-port=8291 \
    protocol=tcp src-address=197.2.2.1 to-addresses=197.2.2.19 to-ports=1928
add action=masquerade chain=srcnat
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=10.5.50.0/24
/ip hotspot ip-binding
add address=178.17.0.10 comment="Cisco LAN Main Rack 1" mac-address=\
    00:1D:71:93:A2:C0 server=hotspot1 to-address=178.17.0.10 type=bypassed
add address=178.17.0.11 comment="Cisco LAN Rack 2" mac-address=\
    E0:5F:B9:87:91:40 server=hotspot1 to-address=178.17.0.11 type=bypassed
add address=178.17.3.254 comment="AP 01 GF" mac-address=74:83:C2:93:CB:EA \
    server=hotspot1 to-address=178.17.3.254 type=bypassed
add address=178.17.3.253 comment="AP 02 GF" mac-address=74:83:C2:39:A7:73 \
    server=hotspot1 to-address=178.17.3.253 type=bypassed
add address=178.17.3.252 comment="AP 04 GF" mac-address=74:83:C2:39:A9:1E \
    server=hotspot1 to-address=178.17.3.252 type=bypassed
add address=178.17.3.248 comment="AP 03 GF" mac-address=18:E8:29:CC:73:9F \
    server=hotspot1 to-address=178.17.3.248 type=bypassed
add address=178.17.1.213 comment="Zkteco Careem 1" mac-address=\
    00:17:61:10:0B:BD server=hotspot1 to-address=178.17.1.213 type=bypassed
add address=178.17.1.233 comment="Zkteco Careem 2" mac-address=\
    00:17:61:10:0B:E0 server=hotspot1 to-address=178.17.1.233 type=bypassed
add address=178.17.1.238 comment="Zkteco Careem 3" mac-address=\
    00:17:61:10:0B:62 server=hotspot1 to-address=178.17.1.238 type=bypassed
add address=178.17.1.54 comment="Zkteco software finder personal device" \
    mac-address=70:3E:97:05:B0:6C server=hotspot1 to-address=178.17.1.54 \
    type=bypassed
add address=178.17.3.250 comment="AP 05 GF" mac-address=74:83:C2:39:A5:1D \
    server=hotspot1 to-address=178.17.3.250 type=bypassed
add address=178.17.3.244 comment="AP 06 GF" mac-address=74:83:C2:80:B4:E3 \
    server=hotspot1 to-address=178.17.3.244 type=bypassed
add address=178.17.3.243 comment="AP 07 GF" mac-address=24:5A:4C:78:1D:F1 \
    server=hotspot1 to-address=178.17.3.243 type=bypassed
add address=178.17.3.242 comment="AP 08 GF" mac-address=74:83:C2:93:C7:25 \
    server=hotspot1 to-address=178.17.3.242 type=bypassed
add address=178.17.3.241 comment="AP 09 GF" mac-address=74:83:C2:39:A7:74 \
    server=hotspot1 to-address=178.17.3.241 type=bypassed
add address=178.17.3.240 comment="AP10 FF" mac-address=E0:63:DA:A0:9D:87 \
    server=hotspot1 to-address=178.17.3.240 type=bypassed
add address=178.17.3.239 comment="AP 11 FF" mac-address=74:83:C2:40:A6:72 \
    server=hotspot1 to-address=178.17.3.239 type=bypassed
add address=178.17.3.238 mac-address=80:2A:A8:93:84:FA server=hotspot1 \
    to-address=178.17.3.238 type=bypassed
add address=178.17.3.237 comment="AP 12 FF" mac-address=80:2A:A8:93:84:FA \
    server=hotspot1 to-address=178.17.3.237 type=bypassed
add address=178.17.3.236 comment="AP 13 FF" mac-address=FC:EC:DA:8C:EF:2C \
    server=hotspot1 to-address=178.17.3.236 type=bypassed
add address=178.17.3.235 comment="AP 14 FF" mac-address=78:45:58:02:0A:62 \
    server=hotspot1 to-address=178.17.3.235 type=bypassed
add address=178.17.3.234 comment="AP 15 2F" mac-address=FC:EC:DA:1C:3D:9D \
    server=hotspot1 to-address=178.17.3.234 type=bypassed
add address=178.17.3.233 comment="AP 16 2F" mac-address=FC:EC:DA:1C:3D:7A \
    server=hotspot1 to-address=178.17.3.233 type=bypassed
add address=178.17.3.232 comment="AP 17 2F" mac-address=80:2A:A8:86:66:8A \
    server=hotspot1 to-address=178.17.3.232 type=bypassed
add address=178.17.3.231 comment="AP 18 2F" mac-address=80:2A:A8:86:65:AD \
    server=hotspot1 to-address=178.17.3.231 type=bypassed
add address=178.17.3.230 comment="AP 19 2F" mac-address=80:2A:A8:86:66:38 \
    server=hotspot1 to-address=178.17.3.230 type=bypassed
add address=178.17.3.247 comment="AP20 2F" mac-address=74:AC:B9:02:3E:80 \
    server=hotspot1 to-address=178.17.3.247 type=bypassed
add address=178.17.3.229 comment="AP 21 3F" mac-address=FC:EC:DA:1C:3F:D1 \
    server=hotspot1 to-address=178.17.3.229 type=bypassed
add address=178.17.3.228 comment="AP 22 3F" mac-address=80:2A:A8:86:64:D2 \
    server=hotspot1 to-address=178.17.3.228 type=bypassed
add address=178.17.3.227 comment="AP 23 3F" mac-address=80:2A:A8:93:83:F5 \
    server=hotspot1 to-address=178.17.3.227 type=bypassed
add address=178.17.3.226 comment="AP 24 3F" mac-address=74:83:C2:36:42:05 \
    server=hotspot1 to-address=178.17.3.226 type=bypassed
add address=178.17.3.225 comment="AP 25 3F" mac-address=24:5A:4C:78:18:DD \
    server=hotspot1 to-address=178.17.3.225 type=bypassed
add address=178.17.3.224 comment="AP 26 3F" mac-address=78:8A:20:56:8B:A4 \
    server=hotspot1 to-address=178.17.3.224 type=bypassed
add address=178.17.3.221 comment="DVR 1 " mac-address=80:7C:62:05:DB:80 \
    server=hotspot1 to-address=178.17.3.221 type=bypassed
add address=178.17.3.220 comment="DVR 2" mac-address=80:7C:62:1B:47:FF \
    server=hotspot1 to-address=178.17.3.220 type=bypassed
add address=178.17.3.219 comment="DVR 4" mac-address=78:F2:35:45:97:B3 \
    server=hotspot1 to-address=178.17.3.219 type=bypassed
add address=178.17.3.217 comment="daniyal laptop" mac-address=\
    34:F6:4B:7E:27:7D server=hotspot1 to-address=178.17.3.217 type=bypassed
add address=178.17.3.222 comment="Dvr 3" mac-address=80:7C:62:1B:47:BA \
    server=hotspot1 to-address=178.17.3.222 type=bypassed
add address=178.17.1.244 comment="Ahmad rogue 14 Pro" mac-address=\
    F0:1F:C7:D7:C1:55 server=hotspot1 to-address=178.17.1.244 type=bypassed
add address=178.17.1.245 comment="Ahmad new pro M2" mac-address=\
    5C:E9:1E:97:54:E5 server=hotspot1 to-address=178.17.1.245 type=bypassed
add address=178.17.1.243 comment="Ahmad rogue 11" mac-address=\
    CC:66:0A:BD:FD:EE server=hotspot1 to-address=178.17.1.243 type=bypassed
add address=178.17.1.242 comment="Ahmad apple watch" mac-address=\
    20:78:CD:AB:B2:E0 server=hotspot1 to-address=178.17.1.242 type=bypassed
add address=178.17.2.1 comment="Xcorebit camera" mac-address=\
    78:F2:35:45:97:B3 server=hotspot1 to-address=178.17.2.1 type=bypassed
add address=178.17.0.128 comment="ezviz camera" mac-address=78:F2:35:45:97:B3 \
    server=hotspot1 to-address=178.17.0.128 type=bypassed
add address=178.17.1.48 comment="Yellowbar PC" mac-address=50:9A:4C:4B:4B:47 \
    server=hotspot1 to-address=178.17.1.48 type=bypassed
add address=178.17.2.36 comment="Zkteco Main" mac-address=00:17:61:10:41:BC \
    server=hotspot1 to-address=178.17.2.36 type=bypassed
add address=178.17.0.53 comment="Zkteco B1" mac-address=00:17:61:11:5D:D0 \
    server=hotspot1 to-address=178.17.0.53 type=bypassed
add address=178.17.2.129 comment="bijli bachao kit" mac-address=\
    28:9C:6E:9C:0B:66 server=hotspot1 to-address=178.17.2.129 type=bypassed
add address=178.17.0.25 comment="AP 20 3F" mac-address=68:D7:9A:13:FD:B8 \
    server=hotspot1 to-address=178.17.0.25 type=bypassed
add address=178.17.1.98 comment="AP Basment " mac-address=78:8A:20:D6:88:06 \
    server=hotspot1 to-address=178.17.1.98 type=bypassed
add address=178.17.2.25 comment="Bijli Bachao kit Entertainer" mac-address=\
    28:9C:6E:9C:0B:D8 server=hotspot1 to-address=178.17.2.25 type=bypassed
add address=178.17.1.86 comment="Bijli Bachai kit Downtown main" mac-address=\
    28:9C:6E:7D:14:3A server=hotspot1 to-address=178.17.1.86 type=bypassed
add address=178.17.2.49 comment="bijli bachao unknow kit" mac-address=\
    28:9C:6E:9C:0B:BE server=hotspot1 to-address=178.17.2.49 type=bypassed
add address=178.17.2.151 comment="dvr 4 downtown" mac-address=\
    58:03:FB:03:81:68 server=hotspot1 to-address=178.17.2.151 type=bypassed
add address=178.17.0.19 comment="Downtown Tabs" mac-address=40:A1:08:38:0A:8B \
    server=hotspot1 to-address=178.17.0.19 type=bypassed
add address=178.17.0.34 comment="Downtown Tabs" mac-address=40:A1:08:DB:16:69 \
    server=hotspot1 to-address=178.17.0.34 type=bypassed
add address=178.17.0.18 comment="Downtown Tabs" mac-address=40:A1:08:38:5E:7E \
    server=hotspot1 to-address=178.17.0.18 type=bypassed
/ip hotspot user
set [ find default=yes ] limit-bytes-total=10000000000
add name=1111@1 profile=Devices server=hotspot1

add name=bushra.aleem@softwarefinder.com profile=Residents server=hotspot1
add name=nomad1 profile=Nomad server=hotspot1
add name=nomad2 profile=Nomad server=hotspot1
add name=nomad3 profile=Nomad server=hotspot1
add name=nomad4 profile=Nomad server=hotspot1
add name=nomad5 profile=Nomad server=hotspot1
add name=nomad6 profile=Nomad server=hotspot1
add name=nomad7 profile=Nomad server=hotspot1
add name=nomad8 profile=Nomad server=hotspot1
add name=nomad9 profile=Nomad server=hotspot1
add name=nomad10 profile=Nomad server=hotspot1
add name=nomad11 profile=Nomad server=hotspot1
add name=nomad12 profile=Nomad server=hotspot1
add name=nomad13 profile=Nomad server=hotspot1
add name=nomad14 profile=Nomad server=hotspot1
add name=nomad15 profile=Nomad server=hotspot1
add name=nomad16 profile=Nomad server=hotspot1
add name=nomad17 profile=Nomad server=hotspot1
add name=nomad18 profile=Nomad server=hotspot1
add name=nomad19 profile=Nomad server=hotspot1
add name=nomad20 profile=Nomad server=hotspot1
add name=xcorebit profile=Devices server=hotspot1
/ip route
add disabled=yes dst-address=192.168.30.0/24 gateway=191.1.1.1
add disabled=yes dst-address=192.168.35.0/24 gateway=191.1.1.1
add comment="Probe Primary" disabled=no distance=1 dst-address=8.8.8.8/32 \
    gateway=192.168.154.1 pref-src=0.0.0.0 routing-table=main scope=10 \
    suppress-hw-offload=no target-scope=10
add check-gateway=ping comment=Primary disabled=no distance=1 dst-address=\
    0.0.0.0/0 gateway=192.168.154.1 pref-src=0.0.0.0 routing-table=main \
    scope=30 suppress-hw-offload=no target-scope=10
add comment=Secondary disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    193.11.69.1 pref-src="" routing-table=main scope=30 suppress-hw-offload=\
    no target-scope=10
add disabled=yes dst-address=192.168.40.0/24 gateway=191.1.1.1
add disabled=no dst-address=192.168.0.0/24 gateway=191.1.1.1
add disabled=no dst-address=192.168.88.0/24 gateway=191.1.1.1
add disabled=yes dst-address=192.168.99.0/24 gateway=191.1.1.1
add disabled=no distance=1 dst-address=172.16.0.2/32 gateway=198.2.2.1 \
    pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
add disabled=no dst-address=192.168.68.240/32 gateway=191.1.1.1 \
    routing-table=main suppress-hw-offload=no
add disabled=no dst-address=192.168.68.0/24 gateway=198.2.2.1 routing-table=\
    main suppress-hw-offload=no
add disabled=no dst-address=192.168.0.0/16 gateway=198.2.2.1 routing-table=\
    main suppress-hw-offload=no
add disabled=no distance=1 dst-address=178.17.0.1/32 gateway=198.2.2.1 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
add disabled=no distance=1 dst-address=178.17.0.1/32 gateway=191.1.1.1 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
/ip traffic-flow
set cache-entries=64k enabled=yes
/ip traffic-flow target
add dst-address=192.168.68.7 port=5570 version=5

/system logging
add action=email topics=critical
add action=*5 topics=dns
add action=*6 topics=info
add disabled=yes topics=dhcp,debug
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/tool graphing
set store-every=24hours
/tool graphing interface
add
/tool graphing queue
add allow-target=no
/tool graphing resource
add store-on-disk=no
/tool mac-server mac-winbox
set allowed-interface-list=none
/tool mac-server ping
set enabled=no

kanuns · June 15, 2023, 10:56am

By the way, I have connected this router to switch and APs Unifi AP AC LR, connected on that switch. Not all devices are getting disconnected.

kanuns · June 27, 2023, 10:41am

Anyone ?
any solution for me ?

kanuns · June 28, 2023, 12:04pm

I guess there is no solution for me in this community

erlinden · June 28, 2023, 12:37pm

Only option I can think of is by using Wireshark and analyse the DHCP communication.

You are aware that the current DHCP client is disabled?

/ip dhcp-client
add add-default-route=no disabled=yes interface=ether1 use-peer-dns=no

kanuns · June 28, 2023, 12:39pm

yes DHCP Client is disabled because this router is given a static IP 192.168.154.10 on port 1.

Can you help me if I send you the packet sniffing file ?