[PASS]
telnet / ftp / www / api / api-ssl disabled
[PASS]
winbox restricted to LAN subnets
[PASS]
input chain: established,related -> drop invalid -> icmp -> LAN -> BGP179
[PASS]
input chain: default drop on WAN
[PASS]
forward: web 80/443 to 172.100.20.10 only, WAN new dropped
[PASS]
admin user bound to LAN address list
[PASS]
MNDP / neighbor discovery LAN-only
[PASS]
mac-server & mac-winbox LAN-only, mac ping off
[PASS]
romon disabled
[PASS]
bandwidth-server disabled
[PASS]
ssh strong-crypto enabled
[PASS]
SNMP disabled (was public community, ::/0)
[PASS]
NTP client enabled (id.pool.ntp.org)
[INFO]
RouterOS 6.49.19 - v6 branch, no v7 migration planned
[WARN]
ipv6 package staged, pending reboot (deferred)
[FAIL]
BGP peering AS58495 not established - awaiting ION VLAN 1060
[PASS]
ISP failover: ISP-01 primary dist=1, ISP-02 backup dist=2