R3

# nov/03/2017 13:42:34 by RouterOS 6.40.4
# software id = 8M71-I4IR
#
# model = RouterBOARD 941-2nD
# serial number = 661606EF912F
/interface bridge
add admin-mac=6C:3B:6B:65:78:64 auto-mac=no comment=defconf fast-forward=no \
    name=bridge
/interface ethernet
set [ find default-name=ether1 ] name="ether1 wan"
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
/interface l2tp-client
add connect-to=tpk4.riat.ru disabled=no name=l2tp-to-tpk4-mts password=\
    ****** user=Svobodny
/ip neighbor discovery
set "ether1 wan" discover=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" group-ciphers=\
    tkip,aes-ccm management-protection=allowed mode=dynamic-keys name=\
    profile1 supplicant-identity="" unicast-ciphers=tkip,aes-ccm \
    wpa-pre-shared-key=1234554321 wpa2-pre-shared-key=1234554321
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
    country=russia disabled=no distance=indoors frequency=auto mode=ap-bridge \
    radio-name=MikroTik-riat security-profile=profile1 ssid=TD-RIAT \
    wireless-protocol=802.11
/ip pool
add name=dhcp_pool1 ranges=192.168.83.50-192.168.83.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge name=dhcp1
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge interface=wlan1
/ip address
add address=192.168.83.1/24 comment=defconf interface=bridge network=\
    192.168.83.0
add address=213.87.96.84/24 interface="ether1 wan" network=213.87.96.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=\
    "ether1 wan"
/ip dhcp-server network
add address=192.168.83.0/24 dns-server=\
    10.104.0.4,213.87.103.249,213.87.96.241 gateway=192.168.83.1
/ip dns
set allow-remote-requests=yes servers=10.104.0.4,213.87.103.249,213.87.96.241
/ip dns static
add address=192.168.88.1 name=router
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    out-interface="ether1 wan"
add action=masquerade chain=srcnat out-interface=l2tp-to-tpk4-mts
/ip route
add distance=1 gateway=213.87.96.1
add comment="route to 4505" distance=1 dst-address=10.100.0.0/22 gateway=\
    10.50.0.10 pref-src=10.50.0.11
add comment="route to tpk4" distance=1 dst-address=10.104.0.0/22 gateway=\
    10.50.0.10 pref-src=10.50.0.11
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Asia/Krasnoyarsk
/system identity
set name=MikroTik_Svobodny
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge