# 2025-12-05 12:34:34 by RouterOS 7.20.5
# software id = R71A-HA5S
#
# model = CCR2004-16G-2S+
# serial number = HG809N0C8R9
/interface ethernet
set [ find default-name=ether1 ] disabled=yes
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] disabled=yes
set [ find default-name=ether4 ] disabled=yes
set [ find default-name=ether5 ] disabled=yes
set [ find default-name=ether6 ] disabled=yes
set [ find default-name=ether7 ] disabled=yes
set [ find default-name=ether8 ] disabled=yes
set [ find default-name=ether9 ] disabled=yes
set [ find default-name=ether10 ] disabled=yes
set [ find default-name=ether11 ] disabled=yes
set [ find default-name=ether12 ] disabled=yes
set [ find default-name=ether13 ] disabled=yes
set [ find default-name=ether14 ] disabled=yes
set [ find default-name=ether15 ] disabled=yes
set [ find default-name=ether16 ] disabled=yes
set [ find default-name=sfp-sfpplus2 ] disabled=yes
/interface vlan
add interface=sfp-sfpplus1 name=0024-GERENCIA-L2 vlan-id=24
add interface=sfp-sfpplus1 name=0042-Servicos-IPv4 vlan-id=42
add interface=sfp-sfpplus1 name=0124-GERENCIA-L3 vlan-id=124
add interface=sfp-sfpplus1 name=0620-Servicos-IPv6 vlan-id=620
add interface=sfp-sfpplus1 name=2142-OSPF_B1 vlan-id=2142
add interface=sfp-sfpplus1 name=2242-OSPF_B2 vlan-id=2242
add interface=sfp-sfpplus1 name=2602-IPv4-HEXA vlan-id=2602
add interface=sfp-sfpplus1 name=vlan1441-itx-sw-hw-04 vlan-id=1441
/interface list
add exclude=all include=static name=ospf-interfaces
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/ip pool
add name=pool1 ranges=198.18.0.5-198.18.0.8
/ip smb users
set [ find default=yes ] disabled=yes
/ipv6 pool
add name=pool-enlace prefix=2804:47e4:8000:1::1c/126 prefix-length=128
/port
set 0 name=serial0
/ppp profile
add change-tcp-mss=no local-address=10.0.24.33 name=L2TP remote-address=pool1 \
    use-compression=no use-encryption=yes use-upnp=no
/routing id
add disabled=no id=10.0.24.33 name=OSPF select-dynamic-id=only-static
/routing ospf instance
add disabled=no name=ospf originate-default=never out-filter-chain=OSPF-OUT \
    redistribute=connected,static router-id=OSPF routing-table=main
add disabled=no name=ospfv3 originate-default=never out-filter-chain=\
    OSPFv3-OUT redistribute=connected router-id=OSPF version=3
/routing ospf area
add disabled=no instance=ospf name=ospf-area-0
add disabled=no instance=ospfv3 name=ospfv3-area-0
/snmp community
set [ find default=yes ] addresses=10.0.0.0/8 name=ctcorp-lan
/system logging action
add name=Gray remote=10.0.24.69 remote-log-format=syslog src-address=\
    10.0.24.33 target=remote
/ip smb
set enabled=no
/ip firewall connection tracking
set enabled=yes udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=all
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set max-neighbor-entries=8192 soft-max-neighbor-entries=8191
/interface l2tp-server server
set allow-fast-path=yes authentication=chap,mschap1,mschap2 default-profile=\
    L2TP enabled=yes keepalive-timeout=60 l2tpv3-ether-interface-list=all \
    max-mru=1480 max-mtu=1480 one-session-per-host=yes use-ipsec=yes
/interface list member
add interface=2142-OSPF_B1 list=ospf-interfaces
add interface=2242-OSPF_B2 list=ospf-interfaces
/interface ovpn-server server
add mac-address=FE:6F:8A:36:83:70 name=ovpn-server1
/ip address
add address=10.0.24.33/24 interface=0024-GERENCIA-L2 network=10.0.24.0
add address=10.1.21.42/30 interface=2142-OSPF_B1 network=10.1.21.40
add address=10.1.22.42/30 interface=2242-OSPF_B2 network=10.1.22.40
add address=45.228.246.97/27 comment="### 246.97 - Gateway-042" interface=\
    0042-Servicos-IPv4 network=45.228.246.96
add address=10.1.24.33/24 interface=0124-GERENCIA-L3 network=10.1.24.0
add address=45.228.246.31 interface=lo network=45.228.246.31
add address=45.228.246.16 interface=lo network=45.228.246.16
add address=10.0.5.9/30 interface=vlan1441-itx-sw-hw-04 network=10.0.5.8
add address=45.228.246.64 comment=IPv4-pub-NAT-HEXA interface=lo network=\
    45.228.246.64
add address=10.95.200.1/24 comment=IPv4-priv-NAT-HEXA interface=\
    2602-IPv4-HEXA network=10.95.200.0
/ip cloud
set update-time=no
/ip dns
set servers=45.228.246.122,45.228.244.121
/ip firewall address-list
add address=45.228.244.4 list=CONFIAVEIS
add address=45.228.246.4 list=CONFIAVEIS
add address=10.1.24.0/24 list=CONFIAVEIS
add address=10.0.24.0/24 list=CONFIAVEIS
add address=10.25.0.0/18 list=CONFIAVEIS
add address=45.228.244.8/29 list=CONFIAVEIS
add address=45.228.244.96/27 list=CONFIAVEIS
add address=45.228.246.96/27 list=CONFIAVEIS
add address=100.64.0.0/10 list=CONFIAVEIS
add address=10.64.69.0/30 list=CONFIAVEIS
add address=45.228.244.121 list=DNS-SERVERs
add address=45.228.246.122 list=DNS-SERVERs
add address=45.228.244.101 list=DNS-SERVERs
add address=45.228.246.102 list=DNS-SERVERs
add address=45.228.246.100 list=DNS-SERVERs
add address=45.228.244.8/29 list=0030-SERVIDORES
add address=45.228.244.96/27 list=SERVIDORES
add address=45.228.246.96/27 list=SERVIDORES
add address=10.25.0.25 list=GeniACS
add address=45.228.246.105 list=GeniACS
add address=45.228.245.0/24 list=ACS-CPEs
add address=45.228.247.0/24 list=ACS-CPEs
add address=10.25.0.0/18 list=ACS-CPEs
add address=198.18.0.8 list=POOL-GERENCIA
add address=198.18.0.7 list=POOL-GERENCIA
add address=198.18.0.6 list=POOL-GERENCIA
add address=198.18.0.5 list=POOL-GERENCIA
add address=10.0.24.0/24 list=LOCAL-VPN-NAT
add address=198.18.0.4/30 list=LOCAL-VPN-NAT
add address=45.228.244.0/22 list=BLOCO-FIX
add address=45.228.244.4 list=ACPT-INPUT
add address=10.1.24.0/24 list=ACPT-INPUT
add address=45.228.246.4 list=ACPT-INPUT
add address=10.0.24.0/24 list=ACPT-INPUT
add address=10.1.21.32/30 list=ACPT-INPUT
add address=10.1.22.32/30 list=ACPT-INPUT
add address=10.25.0.0/18 list=ACPT-INPUT
add address=45.228.244.8/29 list=ACPT-INPUT
add address=45.228.244.96/27 list=ACPT-INPUT
add address=10.0.5.4/30 list=ACPT-INPUT
add address=45.228.244.96/27 list=zabbix-agent
add address=45.228.246.96/27 list=zabbix-agent
add address=45.228.244.101 list=CWPs
add address=45.228.246.102 list=CWPs
add address=10.95.200.0/24 list=LAN-HEXA
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=\
    established,related hw-offload=yes
add action=accept chain=forward connection-state=established,related
add action=accept chain=forward comment="Permit - ICMP Protocol" disabled=yes \
    protocol=icmp
add action=accept chain=forward comment="Permit - DNS REVERSO" disabled=yes \
    dst-address=45.228.246.100 dst-port=53 protocol=tcp
add action=accept chain=forward comment="Permit - DNS REVERSO" disabled=yes \
    dst-address=45.228.246.100 dst-port=53 protocol=udp
add action=accept chain=forward comment="Permit - acs - 7547 tcp" disabled=\
    yes dst-address=45.228.246.105 dst-port=7547 protocol=tcp
add action=accept chain=forward comment="Permit - Upload SRC" disabled=yes \
    src-address-list=CONFIAVEIS
add action=accept chain=forward comment="Permit - DNS (TCP)" disabled=yes \
    dst-address-list=DNS-SERVERs dst-port=53 protocol=tcp src-address-list=\
    CONFIAVEIS
add action=accept chain=forward comment="Permit - DNS (UDP)" disabled=yes \
    dst-address-list=DNS-SERVERs dst-port=53 protocol=udp src-address-list=\
    CONFIAVEIS
add action=accept chain=forward comment="Permit - NTPSec (UDP)" disabled=yes \
    dst-address-list=DNS-SERVERs dst-port=123 protocol=udp src-address-list=\
    CONFIAVEIS
add action=accept chain=forward comment="Permit - HTTPs (TCP)" disabled=yes \
    dst-address-list=SERVIDORES dst-port=80,443 protocol=tcp
add action=accept chain=forward comment="Permit - HTTPs (UDP)" disabled=yes \
    dst-address-list=SERVIDORES dst-port=80,443 protocol=udp
add action=accept chain=forward comment="Permit - Servicos (TCP)" disabled=\
    yes dst-address-list=SERVIDORES dst-port=3000,3001,8443,8080 protocol=tcp
add action=accept chain=forward comment="Permit - Servicos (UDP)" disabled=\
    yes dst-address-list=SERVIDORES dst-port=3000,3001,8443,8080 protocol=udp
add action=accept chain=forward comment="Permit - Servicos" disabled=yes \
    dst-address-list=SERVIDORES src-address-list=SERVIDORES
add action=accept chain=forward comment="Permit - Radios" disabled=yes \
    in-interface=*16
add action=accept chain=forward comment="Permit - Radios" disabled=yes \
    out-interface=*16
add action=accept chain=forward comment="Permit - OpaSuite (exception)" \
    disabled=yes dst-address=45.228.246.98
add action=accept chain=input comment="Permit - Estab and Related" \
    connection-state=established,related disabled=yes
add action=accept chain=input comment="Permit - ICMP" disabled=yes protocol=\
    icmp
add action=accept chain=input comment="Permit - OSPF Protocol" disabled=yes \
    in-interface-list=ospf-interfaces protocol=ospf
add action=accept chain=input comment="Permit - IPsec Ports" disabled=yes \
    dst-port=500,1701,4500 protocol=udp
add action=accept chain=input comment="Permit - IPsec Protocol" disabled=yes \
    protocol=ipsec-esp
add action=accept chain=input comment="Permit - L2TP Protocol" disabled=yes \
    protocol=l2tp
add action=accept chain=input comment="Permit - Winbox Service" disabled=yes \
    dst-port=8292 protocol=tcp src-address-list=ACPT-INPUT
add action=accept chain=input comment="Permit - Trusted" disabled=yes \
    src-address-list=ACPT-INPUT
add action=accept chain=forward disabled=yes dst-address-list=CWPs
add action=drop chain=forward disabled=yes log-prefix=drop-all-
add action=drop chain=input disabled=yes
/ip firewall nat
add action=src-nat chain=srcnat comment=\
    "NAT DA VPN PARA ACESSO A GERENCIA 10.0.24.0/24" disabled=yes \
    dst-address=10.0.24.0/24 src-address-list=POOL-GERENCIA to-addresses=\
    10.0.24.33
add action=src-nat chain=srcnat comment="SRC-NAT-HEXA  - 45.228.246.64" \
    src-address-list=LAN-HEXA to-addresses=45.228.246.64
add action=src-nat chain=srcnat comment="DEFAULT NAT - 246.31" dst-address=\
    !10.0.0.0/8 dst-address-list=!SERVIDORES protocol=!ospf src-address=\
    10.0.24.0/24 to-addresses=45.228.246.31
add action=src-nat chain=srcnat comment="## regra UPDATE" disabled=yes \
    dst-address-list=!POOL-GERENCIA protocol=!ospf to-addresses=45.228.246.31
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip route
add blackhole comment="## Rota em Blackhole" disabled=no distance=255 \
    dst-address=45.228.246.64/27 gateway="" pref-src="" routing-table=main \
    scope=30 suppress-hw-offload=no target-scope=10
add blackhole comment="## Rota em Blackhole" disabled=no distance=255 \
    dst-address=45.228.246.16/28 gateway="" pref-src="" routing-table=main \
    scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=210 dst-address=0.0.0.0/0 gateway=10.1.22.41 \
    pref-src="" routing-table=main scope=20 suppress-hw-offload=no \
    target-scope=10
/ipv6 route
add disabled=no distance=200 dst-address=::/0 gateway=2804:47e4:8000:1::21 \
    routing-table=main scope=30 target-scope=10
add disabled=yes distance=20 dst-address=::/0 gateway=2804:47e4:8000:1::19 \
    routing-table=main scope=30 suppress-hw-offload=no target-scope=10
/ip service
set ftp disabled=yes
set ssh disabled=yes
set telnet disabled=yes
set www disabled=yes
set winbox address=45.228.244.0/22,10.0.0.0/8,198.18.0.0/30,2804:47e4::/32 \
    port=8292
set api disabled=yes
set api-ssl disabled=yes
/ip smb shares
set [ find default=yes ] directory=/pub
/ip traffic-flow
set active-flow-timeout=5m cache-entries=64k interfaces=2142-OSPF_B1
/ip traffic-flow target
add dst-address=10.0.24.128 port=9996 src-address=10.0.24.24 version=5
add dst-address=10.0.24.128 port=9996 src-address=10.0.24.24 version=5
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=*16 type=internal
add interface=2142-OSPF_B1 type=external
/ipv6 address
add address=2804:47e4:8002::33 advertise=no comment=\
    "# Desativar o Advertase  e depois desativar ND |  BUG com Firewall" \
    interface=0620-Servicos-IPv6
add address=2804:47e4:8000:1::22/126 advertise=no interface=2242-OSPF_B2
add address=2804:47e4:0:1::22/126 advertise=no interface=2142-OSPF_B1
add address=2804:47e4:8000:1::1a/126 advertise=no disabled=yes interface=\
    2602-IPv4-HEXA
add address=2804:47e4:8002:2601::33 advertise=no comment="## LAN SAGE" \
    disabled=yes interface=lo
/ipv6 firewall address-list
add address=2804:47e4::/32 list=FIX-MeuBloco
add address=2804:47e4:1::/64 list=AL-ACPT-SERVICOS
add address=2804:47e4:1::141/128 list=ACL-hosepdage
add address=2804:47e4:8002::142/128 list=ACL-hosepdage
add address=2804:47e4:1::125/128 list=ACL-hosepdage
add address=2804:47e4:8002::/64 list=AL-ACPT-SERVICOS
add address=2804:47e4:1::122/128 list=ACL-hosepdage
add address=2804:47e4::/32 list=CONFIAVEIS
add address=2804:47e4:8002::/64 list=SERVIDORES
add address=2804:47e4:1::/64 list=SERVIDORES
add address=2804:47e4:1::120/128 list=DNS-SERVER
add address=2804:47e4:8002::124/128 list=DNS-SERVER
add address=2804:47e4:0:1::22/128 list=INPUT-OSPFv3
add address=2804:47e4:8000:1::22/128 list=INPUT-OSPFv3
add address=2804:47e4:8002::7777/128 list=ACL-hosepdage
add address=2804:47e4:8002::230/128 list=DNS-SERVER
add address=2804:47e4:8002::110/128 list=ACL-hosepdage
add address=2804:47e4:8002::228/128 list=ACL-hosepdage
add address=2804:47e4:8002::145/128 list=ACL-hosepdage
add address=2804:47e4:8002::15/128 disabled=yes list=ACL-hosepdage
add address=2804:47e4:1::141/128 list=CWPs
add address=2804:47e4:8002::142/128 list=CWPs
/ipv6 firewall filter
add action=accept chain=input comment=ICMPV6 protocol=icmpv6
add action=accept chain=forward comment="Permit - Established, related" \
    connection-state=established,related
add action=accept chain=forward comment="Permit - ICMPv6" protocol=icmpv6
add action=accept chain=input comment="Permit - input - estab, related" \
    connection-state=established,related
add action=accept chain=input comment="Permit - OSPFv3" in-interface-list=\
    ospf-interfaces protocol=ospf
add action=accept chain=input comment="Permit - Link Local" src-address=\
    fe80::/10
add action=accept chain=forward comment="Permit - Upload" src-address-list=\
    FIX-MeuBloco
add action=accept chain=forward comment="Permit - All (excecao)" \
    dst-address-list=ACL-hosepdage
add action=accept chain=forward comment=IXC dst-address=\
    2804:47e4:8002::15/128 dst-port=80,443 protocol=tcp
add action=accept chain=forward comment=IXC dst-address=\
    2804:47e4:8002::15/128 dst-port=80,443 protocol=udp
add action=accept chain=forward comment="Permit - REVERSO" dst-address=\
    2804:47e4:8002::230/128 dst-port=53 protocol=udp
add action=accept chain=forward comment="Permit - REVERSO" dst-address=\
    2804:47e4:8002::230/128 dst-port=53 protocol=tcp
add action=accept chain=forward comment="Permit - Servicos (all)" \
    dst-address-list=AL-ACPT-SERVICOS src-address-list=AL-ACPT-SERVICOS
add action=accept chain=forward comment="Permit - DNS (udp)" \
    dst-address-list=DNS-SERVER dst-port=53 protocol=udp src-address-list=\
    FIX-MeuBloco
add action=accept chain=forward comment="Permit - DNS (tcp)" \
    dst-address-list=DNS-SERVER dst-port=53 protocol=tcp src-address-list=\
    FIX-MeuBloco
add action=accept chain=forward comment="Permit - WebServer (udp)" \
    dst-address-list=SERVIDORES dst-port=443,3000,3001,8080,8443,8880 \
    protocol=udp
add action=accept chain=forward comment="Permit - WebServer (tcp)" \
    dst-address-list=SERVIDORES dst-port=443,3000,3001,8080,8443,8880 \
    protocol=tcp
add action=accept chain=input comment="Permit - Winbox" dst-port=8292 \
    protocol=tcp src-address-list=FIX-MeuBloco
add action=accept chain=input comment="Permit - SSH" dst-port=9022 protocol=\
    tcp src-address-list=FIX-MeuBloco
add action=accept chain=input comment="Permit - SSH" dst-address=\
    2804:47e4:8002::f120/128 dst-port=9022 protocol=tcp
add action=accept chain=forward comment="Permit - CWP" dst-address-list=CWPs
add action=drop chain=input comment=drop-input
add action=drop chain=forward comment="drop - All" log-prefix=dropv6-
/ipv6 nd
set [ find default=yes ] advertise-dns=no disabled=yes \
    managed-address-configuration=yes other-configuration=yes ra-preference=\
    low
add advertise-dns=no interface=0620-Servicos-IPv6 \
    managed-address-configuration=yes
add advertise-dns=no interface=2142-OSPF_B1 managed-address-configuration=yes
add advertise-dns=no interface=2242-OSPF_B2 managed-address-configuration=yes
/ppp secret
add name=andrefix profile=L2TP service=l2tp
add name=danielfix profile=L2TP service=l2tp
add name=otaviofix profile=L2TP service=l2tp
/radius
add address=10.0.24.24 disabled=yes require-message-auth=no service=login \
    timeout=300ms
add address=10.0.24.24 disabled=yes require-message-auth=no service=login \
    timeout=300ms
/routing bfd configuration
add disabled=yes interfaces=all min-rx=200us min-tx=200us multiplier=5
add disabled=yes interfaces=all min-rx=200us min-tx=200us multiplier=5
/routing filter rule
add chain=OSPF-OUT disabled=no rule=\
    "if (dst in 45.228.246.96/27 && dst-len >  27) {reject} else {accept}"
add chain=OSPF-OUT disabled=no rule=\
    "if (dst in 45.228.246.64/27 && dst-len >  27) {reject} else {accept}"
add chain=OSPF-OUT disabled=no rule=\
    "if (dst in 45.228.246.16/28 && dst-len >  28) {reject} else {accept}"
add chain=OSPFv3-OUT disabled=no rule=\
    "if (dst in 2804:47e4:8002::/48 && dst-len >  48) {reject} else {accept}"
/routing ospf area range
add area=ospf-area-0 disabled=no prefix=45.228.246.96/27
add area=ospfv3-area-0 disabled=no prefix=2804:47e4:8002::/64
add area=ospf-area-0 disabled=no prefix=45.228.246.64/27
/routing ospf interface-template
add area=ospf-area-0 auth=md5 auth-id=1 cost=20 disabled=no interfaces=\
    2242-OSPF_B2 networks=10.1.22.40/30 priority=1 type=ptp
add area=ospf-area-0 auth=md5 auth-id=1 cost=100 disabled=no interfaces=\
    2142-OSPF_B1 networks=10.1.21.40/30 priority=1 type=ptp
add area=ospfv3-area-0 cost=20 disabled=no interfaces=2242-OSPF_B2 networks=\
    2804:47e4:8000:1::22/126 priority=1 type=ptp
add area=ospfv3-area-0 cost=100 disabled=no interfaces=2142-OSPF_B1 networks=\
    2804:47e4:0:1::22/126 priority=1 type=ptp
add area=ospf-area-0 disabled=no interfaces=all passive
add area=ospfv3-area-0 disabled=no interfaces=all passive
/snmp
set contact="FIX FIBRA" enabled=yes location=\
    "\"R. Antonio Dias Adorno, 375,Diadema,SP,BR\"" trap-version=2
/system clock
set time-zone-name=America/Sao_Paulo
/system identity
set name=NAT02-CCR2004
/system logging
add action=echo disabled=yes prefix=snmp_ topics=debug,snmp
add action=Gray disabled=yes prefix=snmp_ topics=debug,snmp
add action=Gray prefix=CRI topics=critical
add action=Gray prefix=BK topics=backup
add action=Gray prefix=INFO topics=info
add action=Gray prefix=WARM topics=warning
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=10.0.24.120
add address=10.0.24.124
/system routerboard settings
set enter-setup-on=delete-key
/system scheduler
add comment="Crodar dia 25/01 as 3 da manha" name=Atualizacao on-event=\
    "/system reboot" policy=reboot start-date=2025-03-11 start-time=03:00:00
/system script
add dont-require-permissions=no name=backupSFTP owner=otaviofix policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
    log warning \"***************************************\"\
    \n#Conexao SFTP\
    \n\
    \n:global host 10.1.24.137\
    \n:global usuario backups\
    \n:global senha backups@fixfibra2@\
    \n:global diretorio /SFTP/backups/mikrotik/router/CGNAT02\
    \n\
    \n#Pega o nome do Router\
    \n\
    \n:global identifica [/system identity get name]\
    \n\
    \n#Gera data no formato AAAA-MM-DD\
    \n\
    \n:global data [/system clock get date]\
    \n:global ano [:pick \$data 0 4]\
    \n:global mes [:pick \$data 5 7]\
    \n:global dia [:pick \$data 8 10]\
    \n\
    \n:log info \"Gerando backup: \$dia-\$mes-\$ano.\$identifica.backup\";\
    \n/system backup save name=\"\$dia-\$mes-\$ano.\$identifica\";\
    \n:log info \"Gerando export: \$dia-\$mes-\$ano.\$identifica.rsc\";\
    \n/export file=\"\$dia-\$mes-\$ano.\$identifica\"\
    \n:log info \"Processando...\";\
    \n:delay 5s\
    \n\
    \n:log info \"Conectando SFTP Server...\";\
    \n:log info \"Enviando Backup [\$dia-\$mes-\$ano.\$identifica.backup] ...\
    \";\
    \n/tool fetch address=\$host src-path=\"\$dia-\$mes-\$ano.\$identifica.bac\
    kup\" user=\"\$usuario\" password=\"\$senha\" port=9022 upload=yes mode=sf\
    tp dst-path=\"\$diretorio/\$dia-\$mes-\$ano.\$identifica.backup\"\
    \n:log info \"Enviando Export [\$dia-\$mes-\$ano.\$identifica.rsc] ...\";\
    \n/tool fetch address=\$host src-path=\"\$dia-\$mes-\$ano.\$identifica.rsc\
    \" user=\"\$usuario\" password=\"\$senha\" port=9022 upload=yes mode=sftp \
    dst-path=\"\$diretorio/\$dia-\$mes-\$ano.\$identifica.rsc\"\
    \n:delay 1\
    \n\
    \n:log info \"Backup enviado com sucesso...\";\
    \n:log info \"Removendo arquivos...\";\
    \n/file remove \"\$dia-\$mes-\$ano.\$identifica.backup\"\
    \n/file remove \"\$dia-\$mes-\$ano.\$identifica.rsc\"\
    \n:log info \"Rotina de backup finalizada...\";\
    \n:log warning \"***************************************\";\
    \n"
/tool bandwidth-server
set enabled=no
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=none
/tool mac-server ping
set enabled=no
/tool romon
set enabled=yes
/user aaa
set use-radius=yes