/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether5 ] master-port=ether4
/interface l2tp-client
add connect-to=184.107.96.114 disabled=no max-mru=1410 max-mtu=1410 mrru=1600 \
    name=l2tp-out1 password=1xxx user=Jxxxx
/ip neighbor discovery
set ether1 discover=no
/ip dhcp-server option
add code=66 name=Option66 value="'xxxx'"
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=DHCP ranges=192.168.88.10-192.168.88.200
add name=Phone ranges=172.16.150.50-172.16.150.150
/ip dhcp-server
add address-pool=DHCP disabled=no interface=ether2-master name=defconf
add address-pool=Phone disabled=no interface=ether4 name=Phone
/snmp community
add addresses=1xxxxx name="xxxx"
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2-master network=\
    192.168.88.0
add address=172.16.150.1/24 interface=ether4 network=172.16.150.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
    interface=ether3
/ip dhcp-server network
add address=172.16.150.0/24 dhcp-option=Option66 gateway=172.16.150.1
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall address-list
add address=172.16.150.0/24 list=Access
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related" \
    connection-state=established,related
add action=accept chain=input src-address-list=Access
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=\
    ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
    connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
    invalid
add action=drop chain=forward comment=\
    "defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface=ether1
/ip firewall mangle
add action=mark-connection chain=input in-interface=ether3 new-connection-mark=\
    no-mark passthrough=no
add action=mark-connection chain=input in-interface=ether1 new-connection-mark=\
    no-mark passthrough=no
add action=mark-routing chain=output connection-mark=WAN2_conn \
    new-routing-mark=to_WAN1 out-interface=ether1 passthrough=no
add action=mark-routing chain=output connection-mark=WAN1_conn \
    new-routing-mark=to_WAN2 out-interface=ether3 passthrough=no
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
    all-ethernet src-address-list=""
/ip route
add distance=1 gateway=192.168.2.1
add distance=2 gateway=192.168.15.5
/snmp
set contact=TEST enabled=yes trap-community="xxxx$" trap-version=2
/system clock
set time-zone-name=America/Toronto
/system logging
add disabled=yes topics=snmp
add topics=tftp
add disabled=yes topics=dhcp
/system package update
set channel=release-candidate
/system routerboard settings
set cpu-frequency=850MHz protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master
/tool traffic-monitor
add disabled=yes interface=ether1 name=tmon1 threshold=0