Cap Lite

# mar/31/2022 20:12:56 by RouterOS 7.1.5
#
# model = RBcAPL-2nD
# serial number = F0FA0E43C3EE
/interface bridge
add admin-mac=2C:C8:1B:B7:44:D2 auto-mac=no name=bridge-cap protocol-mode=\
    none
/interface ethernet
set [ find default-name=ether1 ] name=ether-cap
/interface wireless
# managed by CAPsMAN
# channel: 2462/20-eC/gn(18dBm), SSID: Hirurg, local forwarding
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
    country=ukraine disabled=no distance=indoors frequency=2422 l2mtu=2290 \
    mode=ap-bridge name=wlan-local ssid=HirurgCap wireless-protocol=802.11
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk group-ciphers=\
    tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
    unicast-ciphers=tkip,aes-ccm
/interface bridge filter
add action=drop chain=input dst-port=68 in-interface=ether-cap ip-protocol=\
    udp mac-protocol=ip
/interface bridge port
add bridge=bridge-cap ingress-filtering=no interface=wlan-local
add bridge=bridge-cap interface=ether-cap
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\
    LAN wan-interface-list=WAN
/interface list member
add interface=ether-cap list=WAN
add interface=wlan-local list=LAN
/interface wireless cap
#
set bridge=bridge-cap caps-man-addresses=192.168.88.1 discovery-interfaces=\
    bridge-cap enabled=yes interfaces=wlan-local
/ip dhcp-client
add interface=bridge-cap
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Kiev
/system identity
set name=KitchenCap
/system ntp client
set mode=broadcast
/system package update
set channel=long-term