#                   version: 7.20.8 (long-term)
#          factory-software: 6.40.1
#              total-memory: 1024.0MiB
#                       cpu: ARM
#                 cpu-count: 2
#           total-hdd-space: 16.0MiB
#         architecture-name: arm
#                board-name: CRS317-1G-16S+
#                  platform: MikroTik
#   installed-version: 7.20.8
# Flags: U - UNDOABLE
# Columns: ACTION, BY, POLICY, TIME
#   ACTION                   BY     POLICY  TIME
# U package channel changed  admin  write   2026-03-26 22:57:47
# U package channel changed  admin  write   2026-03-26 22:57:41
# U system identity changed  admin  write   2026-03-14 11:01:47
# 
# software id = C2FP-1IHL
#
# model = CRS317-1G-16S+
# serial number = 7A1407043754
/interface bridge
add ingress-filtering=no name=br_lan port-cost-mode=short protocol-mode=none vlan-filtering=yes
/interface vlan
add interface=br_lan name=vlan10 vlan-id=10
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/interface bridge port
add bridge=br_lan interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10
add bridge=br_lan interface=sfp-sfpplus2 internal-path-cost=10 path-cost=10
add bridge=br_lan interface=sfp-sfpplus3 internal-path-cost=10 path-cost=10
add bridge=br_lan interface=sfp-sfpplus4 internal-path-cost=10 path-cost=10
add bridge=br_lan interface=sfp-sfpplus5
add bridge=br_lan interface=sfp-sfpplus6
add bridge=br_lan interface=sfp-sfpplus7
add bridge=br_lan interface=sfp-sfpplus8
add bridge=br_lan interface=sfp-sfpplus9
add bridge=br_lan interface=sfp-sfpplus10
add bridge=br_lan interface=sfp-sfpplus11
add bridge=br_lan interface=sfp-sfpplus12
add bridge=br_lan interface=sfp-sfpplus13
add bridge=br_lan interface=sfp-sfpplus14
add bridge=br_lan interface=sfp-sfpplus15
add bridge=br_lan interface=sfp-sfpplus16
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=br_lan tagged="br_lan,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8,sfp-sfpplus9,sfp-sfpplus10,sfp-sfpplus11,sfp-sfpplus12,sfp-sfpplus13,sfp-sfpplus14,sfp-sfpplus15,sfp-sfpplus16" vlan-ids=5,10,15
add bridge=br_lan untagged="br_lan,sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8,sfp-sfpplus9,sfp-sfpplus10,sfp-sfpplus11,sfp-sfpplus12,sfp-sfpplus13,sfp-sfpplus14,sfp-sfpplus15,sfp-sfpplus16" vlan-ids=1
/interface ovpn-server server
add mac-address=FE:54:2F:9F:36:26 name=ovpn-server1
/ip dhcp-client
# Interface not active
add interface=ether1
add interface=br_lan
add default-route-tables=main interface=vlan10
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/system clock
set time-zone-name=Europe/Berlin
/system identity
set name=dg-nw-sw-01
/system ntp client
set enabled=yes
/system ntp client servers
add address=172.26.1.1
add address=192.168.178.1
/system package update
set channel=long-term