# dec/03/2020 20:41:00 by RouterOS 6.47.8
# software id = BQMS-Z1ZQ
#
# model = RBSXTR
# serial number = xxxxx
/interface ethernet
set [ find default-name=ether1 ] mac-address=48:8F:5A:34:AE:B0
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set [ find default=yes ] apn=everywhere name=EE
add apn=3internet default-route-distance=1 name=Three
add apn=payandgo.o2.co.uk default-route-distance=1 name=O2
add apn=wap.vodafone.co.uk authentication=pap default-route-distance=1 name=\
    "Vodafone (Pay Monthly)" user=wap
add apn=pp.vodafone.co.uk authentication=pap default-route-distance=1 name=\
    "Vodafone PAYG" user=wap
/interface lte
set [ find ] apn-profiles=Three band=3 mtu=1400 name=lte1 network-mode=lte
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether1 lease-time=23h name=\
    defconf
/system logging action
set 1 disk-lines-per-file=2000
add email-to=xxxx name=email target=email
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
    sword,web,sniff,sensitive,api,romon,dude,tikapp"
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=ether1 list=LAN
add comment=defconf interface=lte1 list=WAN
add list=LAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether1 network=\
    192.168.88.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input dst-port=8291 protocol=tcp
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=Europe/London
/system leds
set 0 leds="" type=modem-technology
set 1 leds="" type=interface-activity
/system logging
set 0 action=disk
add action=disk topics=lte
add action=disk topics=gsm
/system scheduler
add disabled=yes interval=6h name="Email Logs" on-event="/log print file=logs\
    \ndelay 10\
    \n/tool e-mail send to=\"xxxxx\" subject=\"\$[/system\
    \_identity get name]  logs\" \\\
    \nbody=\"\$[/system clock get date] log file\" file=logs.txt" policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-date=oct/10/2020 start-time=08:55:00
add disabled=yes interval=1d name="System Reboot" on-event="system reboot" \
    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-date=oct/10/2020 start-time=12:00:00
add comment="Runs LTE Monitor script on a schedule." disabled=yes interval=2m \
    name="LTE Reboot" on-event="LTE Monitor" policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-date=oct/11/2020 start-time=13:58:00
/system script
add dont-require-permissions=no name="LTE Monitor" owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
    if ([/ping 8.8.8.8 count=5 size=64 interval=2s]=0) do={\
    \n:tool sms send lte1 \"xxxx\" message=\"LTE Connection Down\"\
    \n:delay 10s\
    \n:interface lte set lte1 disabled=yes\
    \n:delay 5s\
    \n:interface lte set lte1 disabled=no\
    \n}"
/tool e-mail
set address=smtp.gmail.com from=xxxxx port=587 start-tls=yes \
    user=xxxxxx
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool netwatch
add disabled=yes host=8.8.8.8 interval=10s timeout=2s up-script=\
    "tool sms send lte1 \"xxxxx\" message=\"LTE Connection Up\""
/tool sms
set allowed-number=,,,,, port=lte1 receive-enabled=yes

/interface list member
add comment=defconf interface=ether1 list=LAN
add comment=defconf interface=lte1 list=WAN
add list=LAN

/ip dns
set allow-remote-requests=yes