microtik_vpn07_final

# mar/20/2021 22:07:12 by RouterOS 6.48.1
# software id = X5L2-J78L
#
# model = 750GL
# serial number = 467B04284134
/interface bridge
add name=BR1
/interface vlan
add interface=BR1 name=OpnsenseLan vlan-id=100
add interface=BR1 name=OpnsenseWan vlan-id=10
/interface ethernet switch port
set 1 default-vlan-id=0 vlan-mode=secure
set 2 default-vlan-id=100 vlan-mode=secure
set 3 default-vlan-id=100 vlan-mode=secure
set 4 default-vlan-id=200 vlan-mode=secure
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=108.20.117.100-108.20.117.110
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=OpnsenseWan name=dhcp1
/interface bridge port
add bridge=BR1 interface=ether2
add bridge=BR1 interface=ether3
add bridge=BR1 interface=ether4
add bridge=BR1 interface=ether5
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface ethernet switch vlan
add independent-learning=yes ports=ether2,switch1-cpu switch=switch1 vlan-id=\
    10
add independent-learning=yes ports=ether2,ether3,ether4,switch1-cpu switch=\
    switch1 vlan-id=100
add independent-learning=yes ports=ether2,ether5,switch1-cpu switch=switch1 \
    vlan-id=200
/ip address
add address=108.20.117.1/24 interface=OpnsenseWan network=108.20.117.0
add address=192.168.1.253/24 interface=OpnsenseLan network=192.168.1.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=108.20.117.0/24 gateway=108.20.117.1
/ip firewall nat
add action=masquerade chain=srcnat
/system clock
set time-zone-name=America/New_York
/system ntp client
set enabled=yes primary-ntp=192.168.200.30