[admin@MikroTik] > /export compact
# jun/08/2018 23:26:56 by RouterOS 6.42.3
# software id = WWT0-11NI
#
# model = 951Ui-2HnD
# serial number = 628105D44727
/interface bridge
add admin-mac=E4:8D:8C:B6:DB:A9 auto-mac=no comment=defconf name=br-lan-wlan
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether1 ] name=wan-bisv
/interface l2tp-client
add add-default-route=yes connect-to=inter.net disabled=no name=l2tp-bisv \
    password=5GNMB user=688281
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n channel-width=20/40mhz-Ce \
    country=russia disabled=no distance=indoors frequency=auto mode=ap-bridge \
    ssid=BlackAss wireless-protocol=802.11 wps-mode=disabled
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=pool-lan-wlan ranges=10.77.77.5-10.77.77.254
/ip dhcp-server
add address-pool=pool-lan-wlan authoritative=after-2sec-delay disabled=no \
    interface=br-lan-wlan name=defconf
/ppp profile
set *FFFFFFFE use-compression=no use-encryption=no use-mpls=no
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw
/interface bridge port
add bridge=br-lan-wlan comment=defconf interface=ether2-master
add bridge=br-lan-wlan interface=wlan1
add bridge=br-lan-wlan interface=ether3
add bridge=br-lan-wlan interface=ether4
add bridge=br-lan-wlan interface=ether5
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface list member
add interface=ether2-master list=discover
add interface=ether3 list=discover
add interface=ether4 list=discover
add interface=ether5 list=discover
add interface=wlan1 list=discover
add interface=br-lan-wlan list=discover
add interface=l2tp-bisv list=discover
add interface=br-lan-wlan list=mactel
add interface=br-lan-wlan list=mac-winbox
/ip address
add address=10.77.77.1/24 comment=defconf interface=br-lan-wlan network=\
    10.77.77.0
/ip dhcp-client
add comment=defconf default-route-distance=10 dhcp-options=hostname,clientid \
    disabled=no interface=wan-bisv
/ip dhcp-server network
add address=10.77.77.0/24 comment=defconf gateway=10.77.77.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
    connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=\
    wan-bisv
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
    connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
    invalid
add action=drop chain=forward comment=\
    "defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface=wan-bisv
/ip firewall nat
add action=masquerade chain=srcnat out-interface=wan-bisv src-address=\
    10.77.77.0/24
add action=masquerade chain=srcnat out-interface=l2tp-bisv src-address=\
    10.77.77.0/24
/system clock
set time-zone-name=Europe/Moscow
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set l2tp-bisv disabled=yes display-time=5s
set br-lan-wlan disabled=yes display-time=5s
set wlan1 disabled=yes display-time=5s
set wan-bisv disabled=yes display-time=5s
set ether2-master disabled=yes display-time=5s
set ether3 disabled=yes display-time=5s
set ether4 disabled=yes display-time=5s
set ether5 disabled=yes display-time=5s
/system routerboard settings
set silent-boot=no
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
/tool user-manager database
set db-path=user-manager