# jan/29/2024 22:08:34 by RouterOS 6.46.5
# software id = **ELIDED**
#
# model = RB1100x4
# serial number = **ELIDED**
/interface ethernet
set [ find default-name=ether1 ] comment=star
set [ find default-name=ether2 ] mtu=1420
set [ find default-name=ether3 ] mtu=1420
set [ find default-name=ether4 ] mtu=1420
set [ find default-name=ether5 ] mtu=1420
set [ find default-name=ether6 ] mtu=1420
set [ find default-name=ether7 ] mtu=1420
set [ find default-name=ether8 ] mtu=1420
set [ find default-name=ether9 ] mtu=1420
set [ find default-name=ether10 ] mtu=1420
set [ find default-name=ether11 ] mtu=1420
set [ find default-name=ether12 ] mtu=1420
set [ find default-name=ether13 ] name=out
/interface pppoe-client
add interface=ether1 max-mtu=1400 name=1-123456 user=ASBS74
add disabled=no interface=ether2 max-mtu=1400 name=2-123456 user=#######
add disabled=no interface=ether3 max-mtu=1400 name=3-123456 user=#######
add disabled=no interface=ether4 max-mtu=1400 name=4-123456 user=#######
add disabled=no interface=ether5 max-mtu=1400 name=5-123456 user=#######
add disabled=no interface=ether6 max-mtu=1400 name=6-123456 user=#######
add disabled=no interface=ether7 max-mtu=1400 name=7-123456 user=#######
add disabled=no interface=ether8 max-mtu=1400 name=8-123456 user=#######
add disabled=no interface=ether9 max-mtu=1400 name=9-123456 user=#######
add disabled=no interface=ether10 max-mtu=1400 name=10-123456 user=#######
add disabled=no interface=ether11 max-mtu=1400 name=11-123456 user=#######
add disabled=no interface=ether12 max-mtu=1400 name=12-123456 user=#######

/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
set 12 default-vlan-id=0
set 13 default-vlan-id=0
set 14 default-vlan-id=0
set 15 default-vlan-id=0
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/lora servers
add address=eu.mikrotik.thethings.industries down-port=1700 name=TTN-EU \
    up-port=1700
add address=us.mikrotik.thethings.industries down-port=1700 name=TTN-US \
    up-port=1700
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
    sword,web,sniff,sensitive,api,romon,dude,tikapp"
/ip address
add address=7.7.7.1/24 interface=out network=7.7.7.0

add address=192.168.1.100/24 interface=ether1 network=192.168.1.0
/ip dhcp-client
add add-default-route=no interface=out use-peer-dns=no use-peer-ntp=no
add add-default-route=no interface=ether1 use-peer-dns=no use-peer-ntp=no
/ip dns
set cache-size=5000KiB max-udp-packet-size=2048 servers=1.1.1.1,8.8.8.8
/ip firewall mangle
add action=mark-connection chain=input in-interface=ether1 \
    new-connection-mark=in1_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=2-123456 \
    new-connection-mark=in2_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=3-123456 \
    new-connection-mark=in3_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=4-123456 \
    new-connection-mark=in4_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=5-123456 \
    new-connection-mark=in5_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=6-123456 \
    new-connection-mark=in6_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=7-123456 \
    new-connection-mark=in7_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=8-123456 \
    new-connection-mark=in8_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=9-123456 \
    new-connection-mark=in9_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=10-123456 \
    new-connection-mark=in10_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=11-123456 \
    new-connection-mark=in11_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-connection chain=input in-interface=12-123456 \
    new-connection-mark=in12_conn passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=output connection-mark=in1_conn \
    new-routing-mark=in1 out-interface=ether1 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in2_conn \
    new-routing-mark=in2 out-interface=2-123456 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in3_conn \
    new-routing-mark=in3 out-interface=3-123456 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in4_conn \
    new-routing-mark=in4 out-interface=4-123456 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in5_conn \
    new-routing-mark=in5 out-interface=5-123456 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in6_conn \
    new-routing-mark=in6 out-interface=6-123456 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in7_conn \
    new-routing-mark=in7 out-interface=7-123456 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in8_conn \
    new-routing-mark=in8 out-interface=8-123456 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in9_conn \
    new-routing-mark=in9 out-interface=9-123456 passthrough=yes src-address=\
    7.7.7.0/24
add action=mark-routing chain=output connection-mark=in10_conn \
    new-routing-mark=in10 out-interface=10-123456 passthrough=yes \
    src-address=7.7.7.0/24
add action=mark-routing chain=output connection-mark=in11_conn \
    new-routing-mark=in11 out-interface=11-123456 passthrough=yes \
    src-address=7.7.7.0/24
add action=mark-routing chain=output connection-mark=in12_conn \
    new-routing-mark=in12 out-interface=12-123456 passthrough=yes \
    src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in1_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/0 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in1_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/1 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in1_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/2 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in2_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/3 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in3_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/4 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in4_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/5 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in5_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/6 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in6_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/7 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in7_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/8 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in8_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/9 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in9_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/10 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in10_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/11 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in11_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/12 src-address=7.7.7.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=in12_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:14/13 src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in1_conn \
    new-routing-mark=in1 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in2_conn \
    new-routing-mark=in2 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in3_conn \
    new-routing-mark=in3 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in4_conn \
    new-routing-mark=in4 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in5_conn \
    new-routing-mark=in5 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in6_conn \
    new-routing-mark=in6 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in7_conn \
    new-routing-mark=in7 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in8_conn \
    new-routing-mark=in8 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in9_conn \
    new-routing-mark=in9 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in10_conn \
    new-routing-mark=in10 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in11_conn \
    new-routing-mark=in11 passthrough=yes src-address=7.7.7.0/24
add action=mark-routing chain=prerouting connection-mark=in12_conn \
    new-routing-mark=in12 passthrough=yes src-address=7.7.7.0/24

/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=2-123456
add action=masquerade chain=srcnat out-interface=3-123456
add action=masquerade chain=srcnat out-interface=4-123456
add action=masquerade chain=srcnat out-interface=5-123456
add action=masquerade chain=srcnat out-interface=6-123456
add action=masquerade chain=srcnat out-interface=7-123456
add action=masquerade chain=srcnat out-interface=8-123456
add action=masquerade chain=srcnat out-interface=9-123456
add action=masquerade chain=srcnat out-interface=10-123456
add action=masquerade chain=srcnat out-interface=11-123456
add action=masquerade chain=srcnat out-interface=12-123456


/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add check-gateway=ping distance=1 gateway=192.168.1.1 routing-mark=in1
add check-gateway=ping distance=1 gateway=2-123456 routing-mark=in2
add check-gateway=ping distance=1 gateway=3-123456 routing-mark=in3
add check-gateway=ping distance=1 gateway=4-123456 routing-mark=in4
add check-gateway=ping distance=1 gateway=5-123456 routing-mark=in5
add check-gateway=ping distance=1 gateway=6-123456 routing-mark=in6
add check-gateway=ping distance=1 gateway=7-123456 routing-mark=in7
add check-gateway=ping distance=1 gateway=8-123456 routing-mark=in8
add check-gateway=ping distance=1 gateway=9-123456 routing-mark=in9
add check-gateway=ping distance=1 gateway=10-123456 routing-mark=in10
add check-gateway=ping distance=1 gateway=11-123456 routing-mark=in11
add check-gateway=ping distance=1 gateway=12-123456 routing-mark=in12
add check-gateway=ping distance=1 gateway=192.168.1.1
add check-gateway=ping distance=2 gateway=2-123456
add check-gateway=ping distance=3 gateway=3-123456
add check-gateway=ping distance=4 gateway=4-123456
add check-gateway=ping distance=5 gateway=5-123456
add check-gateway=ping distance=6 gateway=6-123456
add check-gateway=ping distance=7 gateway=7-123456
add check-gateway=ping distance=8 gateway=8-123456
add check-gateway=ping distance=9 gateway=9-123456
add check-gateway=ping distance=10 gateway=10-123456
add check-gateway=ping distance=11 gateway=11-123456
add check-gateway=ping distance=12 gateway=12-123456
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-autodetect=no time-zone-name=
/system scheduler
add disabled=yes interval=10s name=schedule1 on-event=":local in \r\
    \n:set 2-123456\r\
    \n:local WANIP [/ip address get [find where interface=\$in] address]; \r\
    \n:set WANIP [:pick \$WANIP 0 ([:len \$WANIP]-3) ];\r\
    \n:if (\$WANIP ~\"^[0-9 ]*10\") do={ \r\
    \n:log warning \"Private ip address found !!!\"\r\
    \n/interface pppoe-client disable \$in\r\
    \n:delay 3\r\
    \n/interface pppoe-client enable \$in }\r\
    \n" policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
/tool bandwidth-server
set enabled=no
/tool user-manager database
set db-path=user-manager