# 2026-10-01 08:55:25 by RouterOS 7.24.4
# software id = 4761-A9J3
#
/interface ethernet
set [ find default-name=ether2 ] comment=WAN disable-running-check=no name=ether1
set [ find default-name=ether1 ] comment=LAN disable-running-check=no name=ether2
/interface gre
add local-address=199.47.240.213 name=tun10044 remote-address=104.156.136.33
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/routing bgp instance
add as=213434 disabled=no name=default router-id=10.0.0.1
/routing bgp template
add as=213434 comment=Default disabled=no name=Default output.network=""
/routing table
add disabled=no name=BGP
/interface detect-internet
set detect-interface-list=all internet-interface-list=WAN lan-interface-list=LAN wan-interface-list=WAN
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
/ip address
add address=199.47.240.213/24 interface=ether1 network=199.47.240.0
add address=10.0.0.1/24 interface=ether2 network=10.0.0.0
add address=5.144.177.1/24 interface=ether1 network=5.144.177.0
add address=169.254.1.90/30 interface=tun10044 network=169.254.1.88
/ip dhcp-server
add address-pool=dhcp interface=ether2 name=dhcp1
/ip dhcp-server network
add address=10.0.0.0/24 dns-server=10.0.0.1 domain=gltx.local gateway=10.0.0.1 netmask=24
/ip dns
set servers=1.1.1.1,1.0.0.1
/ip firewall address-list
add address=5.144.177.0/24 list=bgp
/ip firewall filter
add action=accept chain=input comment="Allow established/related" connection-state=established,related
add action=accept chain=input comment="Allow Winbox from management IP" dst-port=8291 protocol=tcp src-address=51.219.134.102
add action=accept chain=input comment="Allow SSH from management IP" dst-port=22 protocol=tcp src-address=51.219.134.102
add action=accept chain=input comment="Allow WebFig from management IP" dst-port=443 protocol=tcp src-address=51.219.134.102
add action=accept chain=input comment="Allow ICMP from management IP" protocol=icmp src-address=51.219.134.102
add action=drop chain=input comment="Drop all other router input"
add action=accept chain=input comment="FreeTransit GRE" dst-address=199.47.240.213 protocol=gre src-address=104.156.136.33
add action=accept chain=input comment="FreeTransit BGP" dst-address=169.254.1.90 dst-port=179 protocol=tcp src-address=169.254.1.89
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
/ip pool
add name=dhcp next-pool=dhcp ranges=10.0.0.0/24
/ip route
add gateway=199.47.240.1
add blackhole dst-address=5.144.177.0/24
add blackhole dst-address=5.144.177.0/24 routing-table=BGP
add blackhole dst-address=5.144.177.0/24
add blackhole disabled=no dst-address=5.144.177.0/24
/ipv6 route
add dst-address=2a0f:85c1:b79::/48
add blackhole dst-address=2a0f:85c1:b79::/48
/ip service
set ftp disabled=yes
set telnet disabled=yes
/ipv6 address
add address=2a0f:6280:1f:22::1 comment=WAN interface=ether1
add address=2a01:20e:1000:152::2 comment="FreeTransit IPv6 BGP" interface=tun10044
/routing bgp connection
add as=213434 disabled=no instance=default local.role=ebgp name="HyeHost BGP0" output.filter-chain=TEST_OUT .network=5.144.177.0/24 \
remote.address=199.47.240.10 .as=47272 routing-table=main templates=Default
add as=213434 disabled=no instance=default local.role=ebgp name="HyeHost BGP1" output.filter-chain=FT_OUT .network=5.144.177.0/24 \
remote.address=199.47.240.11 .as=47272 routing-table=main templates=Default
add as=213434 disabled=no instance=default local.address=169.254.1.90 .role=ebgp multihop=yes name=FreeTransit output.filter-chain=\
FT_OUT .network=5.144.177.0/24 remote.address=169.254.1.89/32 .as=41051 routing-table=main templates=default
/routing filter rule
add chain="" comment=BGP disabled=no rule="if (dst == 5.144.177.0/24) { accept }\
\nif (dst == 2a0f:85c1:b79::/48) { accept }\
\nif (dst == 2a06:9801:70::/44) { accept }\
\nreject"
add chain=FT_OUT rule="if (dst == 5.144.177.0/24) { accept }"
add chain=FT_OUT rule=reject
add chain=TEST_OUT rule="if (dst == 5.144.177.0/24) { accept }"
add chain=TEST_OUT rule=reject
/system gps
set set-system-time=yes
/system identity
set name="ROUTER 1"