# aug/08/2015 04:12:45 by RouterOS 6.29.1
# software id = G3F6-173I
#
/interface bridge
add name="Bridge Intern"
/interface ethernet
set [ find default-name=ether1 ] mac-address=D4:CA:6D:4A:BF:9A name=\    "ether01 - Telenet" speed=1Gbps
set [ find default-name=ether2 ] mac-address=D4:CA:6D:4A:BF:9B name=\    "ether02 - Belgacom" speed=1Gbps
set [ find default-name=ether3 ] mac-address=D4:CA:6D:4A:BF:9C name=\    "ether03 - WB" speed=1Gbps
set [ find default-name=ether4 ] mac-address=D4:CA:6D:4A:BF:9D name=\    "ether04 - WiFi" speed=1Gbps
set [ find default-name=ether5 ] mac-address=D4:CA:6D:4A:BF:9E name=ether05 \    speed=1Gbps
set [ find default-name=ether6 ] mac-address=D4:CA:6D:4A:BF:9F name=\    "ether06 - EOIP" speed=1Gbps
set [ find default-name=ether7 ] mac-address=D4:CA:6D:4A:BF:A0 name=ether07 \    speed=1Gbps
set [ find default-name=ether8 ] mac-address=D4:CA:6D:4A:BF:A1 name=ether08 \    speed=1Gbps
set [ find default-name=ether9 ] mac-address=D4:CA:6D:4A:BF:A2 name=ether09 \    speed=1Gbps
set [ find default-name=ether10 ] mac-address=D4:CA:6D:4A:BF:A3 speed=1Gbps
set [ find default-name=sfp1 ] name="sfp01 - LAN"
/interface pppoe-client
add add-default-route=yes default-route-distance=5 disabled=no interface=\
    "ether02 - Belgacom" max-mru=1480 max-mtu=1480 mrru=1600 name=\
    "PPPoE Belgacom" password=justapassword user=justausername
/interface vlan
add interface="ether04 - WiFi" l2mtu=1594 name="VLAN 101 - Wifi Private" \
    vlan-id=101
add interface="ether04 - WiFi" l2mtu=1594 name="VLAN 102 - Wifi Public" \
    vlan-id=102
add interface="ether04 - WiFi" l2mtu=1594 name="VLAN 103 - Wifi Trusted" \
    vlan-id=103
/ip neighbor discovery
set "VLAN 101 - Wifi Private" discover=no
set "VLAN 102 - Wifi Public" discover=no
set "VLAN 103 - Wifi Trusted" discover=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=identity
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name="DHCP Lan" ranges=10.0.0.101-10.0.0.254
add name="DHCP Wifi Private" ranges=10.101.0.101-10.101.0.254
add name="DHCP Wifi Public" ranges=10.102.0.101-10.102.0.254
add name="DHCP Wifi Trusted" ranges=10.103.0.101-10.103.0.254
add name="DHCP EOIP" ranges=172.16.0.11-172.16.3.254
/ip dhcp-server
add add-arp=yes address-pool="DHCP Lan" disabled=no interface="Bridge Intern" \
    lease-time=1d name=Lan
add add-arp=yes address-pool="DHCP Wifi Private" disabled=no interface=\
    "VLAN 101 - Wifi Private" lease-time=1d name="Wifi Private"
add add-arp=yes address-pool="DHCP Wifi Public" disabled=no interface=\
    "VLAN 102 - Wifi Public" lease-time=1d name="Wifi Public"
add add-arp=yes address-pool="DHCP Wifi Trusted" disabled=no interface=\
    "VLAN 103 - Wifi Trusted" lease-time=1d name="Wifi Trusted"
add add-arp=yes address-pool="DHCP EOIP" disabled=no interface=\
    "ether06 - EOIP" lease-time=1d name=EOIP
/port
set 0 name=serial0
/ppp profile
set [ find name=default ] name=default
set [ find name=default-encryption ] name=default-encryption
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw
/interface bridge port
add bridge="Bridge Intern" interface="ether04 - WiFi"
add bridge="Bridge Intern" interface="sfp01 - LAN"
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/ip firewall connection tracking
set enabled=yes
/ip address
add address=10.0.0.1/24 comment=LAN interface="Bridge Intern" network=\
    10.0.0.0
add address=10.101.0.1/24 comment="WiFi Private" interface=\
    "VLAN 101 - Wifi Private" network=10.101.0.0
add address=10.102.0.1/24 comment="WiFi Trusted" interface=\
    "VLAN 102 - Wifi Public" network=10.102.0.0
add address=10.103.0.1/24 comment="WiFi Public" interface=\
    "VLAN 103 - Wifi Trusted" network=10.103.0.0
add address=172.16.0.1/22 comment="EOIP Tunnels" interface="ether06 - EOIP" \
    network=172.16.0.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid disabled=no \
    interface="ether01 - Telenet" use-peer-dns=no use-peer-ntp=no
add add-default-route=no dhcp-options=hostname,clientid disabled=no \
    interface="ether02 - Belgacom" use-peer-dns=no use-peer-ntp=no
add add-default-route=no dhcp-options=hostname,clientid disabled=no \
    interface="ether03 - WB" use-peer-dns=no
/ip dhcp-server lease
add address=10.0.0.11 client-id=1:0:1d:7e:d0:55:7f mac-address=\
    00:1D:7E:D0:55:7F server=Lan
add address=10.0.0.101 client-id=1:0:24:21:10:fd:1 mac-address=\
    00:24:21:10:FD:01 server=Lan
add address=10.0.0.102 always-broadcast=yes client-id=1:0:24:21:10:fd:2 \
    mac-address=00:24:21:10:FD:02 server=Lan
add address=10.101.0.112 always-broadcast=yes client-id=1:68:94:23:49:17:97 \
    mac-address=68:94:23:49:17:97 server="Wifi Private"
add address=10.0.0.21 always-broadcast=yes client-id=1:0:c:42:fc:8:20 \
    mac-address=00:0C:42:FC:08:20 server=Lan
add address=10.101.0.120 always-broadcast=yes client-id=1:70:11:24:14:a4:e8 \
    mac-address=70:11:24:14:A4:E8 server="Wifi Private"
add address=10.0.0.18 always-broadcast=yes mac-address=7C:2F:80:59:E7:43 \
    server=Lan
add address=10.0.0.103 client-id=1:a4:5d:36:35:b4:2e mac-address=\
    A4:5D:36:35:B4:2E server=Lan
add address=10.0.0.31 client-id=1:24:a4:3c:2:1c:21 mac-address=\
    24:A4:3C:02:1C:21 server=Lan
add address=10.0.0.3 client-id=1:4c:5e:c:9f:2f:f1 mac-address=\
    4C:5E:0C:9F:2F:F1 server=Lan
add address=10.0.0.41 mac-address=00:30:48:DB:06:4A server=Lan
add address=10.0.0.51 client-id=1:4:18:d6:26:5c:f0 mac-address=\
    04:18:D6:26:5C:F0 server=Lan
add address=10.0.0.4 always-broadcast=yes client-id=1:d4:ca:6d:f9:14:5d \
    mac-address=D4:CA:6D:F9:14:5D server=Lan
add address=10.0.0.42 mac-address=00:30:48:DB:07:5E server=Lan
add address=10.0.0.110 client-id=1:0:11:32:41:9e:b1 mac-address=\
    00:11:32:41:9E:B1 server=Lan
add address=10.0.0.5 client-id=1:e4:8d:8c:81:80:2e mac-address=\
    E4:8D:8C:81:80:2E server=Lan
add address=10.0.0.2 client-id=1:d4:ca:6d:f9:14:77 mac-address=\
    D4:CA:6D:F9:14:77 server=Lan
add address=10.0.0.92 client-id=1:0:62:6e:56:a1:68 mac-address=\
    00:62:6E:56:A1:68 server=Lan
add address=10.0.0.91 client-id=1:c4:d6:55:39:ca:13 mac-address=\
    C4:D6:55:39:CA:13 server=Lan
/ip dhcp-server network
add address=10.0.0.0/24 dns-server=8.8.8.8,8.8.4.4 domain=it2go.eu gateway=\
    10.0.0.1 netmask=24
add address=10.101.0.0/24 dns-server=8.8.8.8,8.8.4.4 domain=it2go.eu gateway=\
    10.101.0.1 netmask=24 ntp-server=193.190.198.43
add address=10.102.0.0/24 dns-server=8.8.8.8,8.8.4.4 domain=it2go.eu gateway=\
    10.102.0.1 netmask=24 ntp-server=193.190.198.43
add address=10.103.0.0/24 dns-server=8.8.8.8,8.8.4.4 domain=it2go.eu gateway=\
    10.103.0.1 netmask=24 ntp-server=193.190.198.43
add address=10.200.0.0/24 dns-server=8.8.8.8,8.8.4.4 domain=it2go.eu gateway=\
    10.200.0.254
add address=172.16.0.0/22 gateway=172.16.0.1
/ip dns
set cache-max-ttl=15m servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface="ether01 - Telenet" \
    protocol=udp
add action=drop chain=input dst-port=53 in-interface="ether02 - Belgacom" \
    protocol=udp
add action=drop chain=input dst-port=53 in-interface="ether03 - WB" protocol=\
    udp
/ip firewall nat
add action=masquerade chain=srcnat comment="Telenet NAT" out-interface=\
    "ether01 - Telenet"
add action=masquerade chain=srcnat comment="Belgacom NAT" out-interface=\
    "PPPoE Belgacom"
add action=masquerade chain=srcnat comment="NAT Modem" out-interface=ether09
add action=dst-nat chain=dstnat comment="SiHotspot admin access" dst-port=\
    8221 protocol=tcp to-addresses=10.0.0.21 to-ports=8221
add action=dst-nat chain=dstnat comment="SiHotspot admin access" dst-port=\
    8161 protocol=tcp to-addresses=10.0.0.21 to-ports=8161
add action=dst-nat chain=dstnat comment="RPI Temp 01" dst-port=2301 protocol=\
    tcp to-addresses=10.0.0.107 to-ports=22
add action=dst-nat chain=dstnat comment="S02 http" dst-port=1081 protocol=tcp \
    to-addresses=10.0.0.42 to-ports=80
add action=dst-nat chain=dstnat comment="S01 ssh" dst-port=1022 protocol=tcp \
    to-addresses=10.0.0.41 to-ports=22
add action=dst-nat chain=dstnat comment="S02 ssh" dst-port=1023 protocol=tcp \
    to-addresses=10.0.0.42 to-ports=22
add action=dst-nat chain=dstnat comment=Routerboard dst-port=10280 protocol=\
    tcp to-addresses=10.0.0.124 to-ports=80
add action=dst-nat chain=dstnat comment=UBNT dst-port=10443 protocol=tcp \
    to-addresses=10.0.0.119 to-ports=443
add action=dst-nat chain=dstnat comment=UBNT dst-port=10380 protocol=tcp \
    to-addresses=10.0.0.119 to-ports=80
add action=dst-nat chain=dstnat comment="SiHotspot SNMP" dst-port=8161 \
    protocol=udp to-addresses=10.0.0.21 to-ports=161
add action=dst-nat chain=dstnat comment="NAT Voip ATA" disabled=yes dst-port=\
    10080 protocol=tcp to-addresses=10.0.0.11 to-ports=80
add action=dst-nat chain=dstnat comment="RTP forward ATA" disabled=yes \
    dst-port=10050-10099 protocol=udp to-addresses=10.0.0.11 to-ports=\
    10050-10099
add action=dst-nat chain=dstnat comment=NAS01 dst-port=5000 protocol=tcp \
    src-address=!10.0.0.0/24 to-addresses=10.0.0.110 to-ports=5000
add action=dst-nat chain=dstnat comment="NAS01 FTP" dst-port=2121 protocol=\
    tcp to-addresses=10.0.0.110 to-ports=21
add action=dst-nat chain=dstnat comment="Cam PTZ 01" dst-port=8081 protocol=\
    tcp to-addresses=10.101.0.11 to-ports=88
add action=dst-nat chain=dstnat comment="Cam PTZ 02" dst-port=8082 protocol=\
    tcp to-addresses=10.101.0.12 to-ports=88
add action=dst-nat chain=dstnat comment="Raspberry01 HTTP" dst-port=8001 \
    protocol=tcp to-addresses=10.200.0.1 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry02 HTTP" dst-port=8002 \
    protocol=tcp to-addresses=10.200.0.2 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry03 HTTP" dst-port=8003 \
    protocol=tcp to-addresses=10.200.0.3 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry04 HTTP" dst-port=8004 \
    protocol=tcp to-addresses=10.200.0.4 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry05 HTTP" dst-port=8005 \
    protocol=tcp to-addresses=10.200.0.5 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry06 HTTP" dst-port=8006 \
    protocol=tcp to-addresses=10.200.0.6 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry07 HTTP" dst-port=8007 \
    protocol=tcp to-addresses=10.200.0.7 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry08 HTTP" dst-port=8008 \
    protocol=tcp to-addresses=10.200.0.8 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry09 HTTP" dst-port=8009 \
    protocol=tcp to-addresses=10.200.0.9 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry10 HTTP" dst-port=8010 \
    protocol=tcp to-addresses=10.200.0.10 to-ports=80
add action=dst-nat chain=dstnat comment="Raspberry01 SSH" dst-port=2201 \
    protocol=tcp to-addresses=10.200.0.1 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry01 SSH" dst-port=1022 \
    protocol=tcp to-addresses=10.0.0.107 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry02 SSH" dst-port=2202 \
    protocol=tcp to-addresses=10.200.0.2 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry03 SSH" dst-port=2203 \
    protocol=tcp to-addresses=10.200.0.3 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry04 SSH" dst-port=2204 \
    protocol=tcp to-addresses=10.200.0.4 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry05 SSH" dst-port=2205 \
    protocol=tcp to-addresses=10.200.0.5 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry06 SSH" dst-port=2206 \
    protocol=tcp to-addresses=10.200.0.6 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry07 SSH" dst-port=2207 \
    protocol=tcp to-addresses=10.200.0.7 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry08 SSH" dst-port=2208 \
    protocol=tcp to-addresses=10.200.0.8 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry09 SSH" dst-port=2209 \
    protocol=tcp to-addresses=10.200.0.9 to-ports=22
add action=dst-nat chain=dstnat comment="Raspberry10 SSH" dst-port=2210 \
    protocol=tcp to-addresses=10.200.0.10 to-ports=22
add action=dst-nat chain=dstnat comment="UBNT mfi http" dst-port=2080 \
    protocol=tcp to-addresses=10.0.0.51 to-ports=80
add action=dst-nat chain=dstnat comment=VOIP dst-port=3080 protocol=tcp \
    to-addresses=10.0.0.18 to-ports=80
/ip firewall service-port
set sip ports=5060,5070
/ip ipsec policy
set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0
/ip proxy
set cache-path=web-proxy1 parent-proxy=0.0.0.0
/ip service
set telnet disabled=yes port=1223
set ftp disabled=yes
set www port=8080
set ssh disabled=yes port=8022
set api-ssl disabled=yes
/ip upnp
set allow-disable-external-interface=yes enabled=yes
/ip upnp interfaces
add interface=ether10 type=internal
add type=external
add interface="ether01 - Telenet" type=external
/ipv6 address
add address=2001:470:1f15:8e1:101::1 disabled=yes interface=\
    "VLAN 101 - Wifi Private"
add address=2001:470:1f15:8e1:102::1 disabled=yes interface=\
    "VLAN 102 - Wifi Public"
add address=2001:470:1f15:8e1:103::1 disabled=yes interface=\
    "VLAN 103 - Wifi Trusted"
/ipv6 route
add disabled=yes distance=1 dst-address=2000::/3 gateway=2001:470:1f14:8e1::1
add disabled=yes distance=1 dst-address=2000::/3 gateway=2001:470:1f14:8e1::1
/lcd
set backlight-timeout=15m default-screen=informative-slideshow \
    read-only-mode=yes
/lcd screen
set 0 timeout=3s
set 1 timeout=3s
set 2 timeout=3s
set 3 timeout=3s
set 4 timeout=3s
set 5 timeout=3s
/snmp
set contact=info@mymail.eu enabled=yes location=Somewhere
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Brussels
/system identity
set name="IT2GO - Router"
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=no display-time=3s
set resources disabled=no display-time=3s
set uptime disabled=no display-time=3s
set packets disabled=no display-time=3s
set bits disabled=no display-time=3s
set version disabled=no display-time=3s
set identity disabled=no display-time=3s
set "Bridge Intern" disabled=yes display-time=5s
set "sfp01 - LAN" disabled=yes display-time=5s
set "ether01 - Telenet" disabled=yes display-time=5s
set "ether02 - Belgacom" disabled=yes display-time=5s
set "ether03 - WB" disabled=yes display-time=5s
set "ether04 - WiFi" disabled=yes display-time=5s
set ether05 disabled=yes display-time=5s
set "ether06 - EOIP" disabled=yes display-time=5s
set ether07 disabled=yes display-time=5s
set ether08 disabled=yes display-time=5s
set ether09 disabled=yes display-time=5s
set "PPPoE Belgacom" disabled=yes display-time=5s
set ether10 disabled=no display-time=3s
set "VLAN 101 - Wifi Private" disabled=yes display-time=5s
set "VLAN 102 - Wifi Public" disabled=yes display-time=5s
set "VLAN 103 - Wifi Trusted" disabled=yes display-time=5s
/system leds
add interface="sfp01 - LAN" leds="" type=interface-status
/system ntp client
set enabled=yes primary-ntp=195.130.132.18 secondary-ntp=195.13.23.5
/system scheduler
add interval=1d name=Backup on-event=Backup policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
    feb/24/2013 start-time=00:00:00
add interval=1d name="DHCP Leases" on-event=DHCP-Leases policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
    feb/24/2013 start-time=00:00:00
/system script
add name=Backup policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive source="export \
    file=export;\r\
    \n/system backup save name=email;\
    \n\r\
    \n/tool e-mail send to=\"info@mymail.eu\" subject=([/system identity get na\
    me].\" \r\
    \nbackup MikroTikBackup\") \r\
    \n:log info \"Export e-mail sent.\";\r\
    \n\r\
    \nfile=email.backup;\r\
    \n/tool e-mail send to=\"info@mymail.eu\" subject=([/system identity get na\
    me].\" export MikroTikBackup\") \r\
    \nfile=export.rsc;\r\
    \n\
    \n:log info \"Backup e-mail sent.\";"
add name=DHCP-Leases policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":local \
    i;\r\
    \n:local hostip;\r\
    \n:local hostname;\r\
    \n:local dhcplist \"\";\r\
    \n\r\
    \n/ip dhcp-server lease;\r\
    \n:foreach i in=[find where server=EOIP] do={\r\
    \n  :set hostname [get \$i host-name];\r\
    \n  :set hostip [get \$i address];\r\
    \n  :set dhcplist ( \$dhcplist . \$hostname . \" \" . \"\$hostip . \"\\n\"\
    \_)\r\
    \n}\r\
    \n/tool e-mail send to=info@it2go.eu subject=\"DHCP Leases EOIP\" body=\$d\
    hcplist;\r\
    \n"
/tool e-mail
set address=74.125.136.108 from=kris.de.rocker@mymail.com password=justapassword \
    port=587 start-tls=yes user=kris.de.rocker
/tool graphing interface
add
/tool graphing resource
add
/tool romon port
add disabled=no
/tool sniffer
set filter-stream=yes
/tool user-manager database
set db-path=/user-manager1