hAP

# 2024-04-13 22:24:43 by RouterOS 7.14.2
# software id = Q129-L0RF
#
# model = RB962UiGS-5HacT2HnT
# serial number = CC4F0F0B5EC5
/interface bridge
add frame-types=admit-only-vlan-tagged name=vlan_bridge port-cost-mode=short \
    pvid=100 vlan-filtering=yes
/interface ethernet
set [ find default-name=sfp1 ] disabled=yes
/interface wireless
# managed by CAPsMAN
set [ find default-name=wlan1 ] ssid=MikroTik
# managed by CAPsMAN
set [ find default-name=wlan2 ] mode=ap-bridge ssid=MikroTik
/interface vlan
add interface=vlan_bridge name=vlan10-main vlan-id=10
add interface=vlan_bridge name=vlan20-iot vlan-id=20
add interface=vlan_bridge name=vlan30-guest vlan-id=30
add interface=vlan_bridge name=vlan100-mgmt vlan-id=100
/interface list
add name=WAN
add name=LAN
add name=WiFi
add name=trunks
add name=main
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/user group
add name=dude policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbo\
    x,password,web,sniff,sensitive,api,romon,rest-api"
/interface bridge port
add bridge=vlan_bridge disabled=yes ingress-filtering=no interface=all \
    internal-path-cost=10 path-cost=10
add bridge=vlan_bridge interface=main internal-path-cost=10 path-cost=10 \
    pvid=10
add bridge=vlan_bridge interface=trunks pvid=100
/ip firewall connection tracking
set udp-timeout=10s
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface bridge vlan
add bridge=vlan_bridge tagged=vlan_bridge,ether1 vlan-ids=10
add bridge=vlan_bridge tagged=vlan_bridge,ether1 vlan-ids=20
add bridge=vlan_bridge tagged=vlan_bridge,ether1 vlan-ids=30
add bridge=vlan_bridge tagged=vlan_bridge,ether1 vlan-ids=100
/interface detect-internet
set detect-interface-list=all internet-interface-list=WAN wan-interface-list=\
    WAN
/interface list member
add interface=ether1 list=trunks
add interface=ether2 list=main
add interface=ether3 list=main
add interface=ether4 list=main
add interface=ether5 list=main
add interface=wlan1 list=LAN
add interface=wlan2 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/interface wifi capsman
set package-path="" require-peer-certificate=no upgrade-policy=none
/interface wireless cap
#
set enabled=yes interfaces=wlan1,wlan2
/ip dhcp-client
add disabled=yes interface=vlan_bridge
add interface=vlan10-main
add interface=vlan20-iot
add interface=vlan30-guest
add interface=vlan100-mgmt
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/routing bfd configuration
add disabled=no
/snmp
set enabled=yes trap-version=2
/system clock
set time-zone-name=Europe/Warsaw
/system identity
set name=Jagoda
/system note
set show-at-login=no
/system ntp client
set enabled=yes