/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n channel-width=20/40mhz-XX country=russia disabled=no frequency=auto mode=ap-bridge ssid=testik
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys radius-mac-authentication=yes supplicant-identity=MikroTik \
    wpa2-pre-shared-key=12345678
/tool user-manager customer
set admin access=own-routers,own-users,own-profiles,own-limits,config-payment-gw
/tool user-manager profile
add name=acces name-for-users="" override-shared-users=off owner=admin price=0 starts-at=logon validity=0s
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=bridge1
/radius
add address=192.168.2.157 secret=123456 service=wireless
/system clock
set time-zone-name=Asia/Yekaterinburg
/tool user-manager database
set db-path=user-manager
/tool user-manager router
add coa-port=1700 customer=admin disabled=no ip-address=192.168.2.157 log=auth-ok,auth-fail name=192.168.2.157 shared-secret=123456 use-coa=no
/tool user-manager user
add customer=admin disabled=no password="" shared-users=1 username=18:F0:E4:D7:DC:CF wireless-enc-algo=none wireless-enc-key="" wireless-psk=""