microtik_conf_basic

# mar/19/2021 15:26:10 by RouterOS 6.48.1

# software id = X5L2-J78L

#

# model = 750GL

# serial number = 467B04284134

/interface bridge

add admin-mac=4C:5E:0C:77:22:7F auto-mac=no comment="created from master port" name=bridge1 protocol-mode=none

/interface ethernet

set [ find default-name=ether1 ] speed=100Mbps

set [ find default-name=ether2 ] name=ether2-master speed=100Mbps

set [ find default-name=ether3 ] speed=100Mbps

set [ find default-name=ether4 ] speed=100Mbps

set [ find default-name=ether5 ] speed=100Mbps

/interface list

add exclude=dynamic name=discover

add name=mactel

add name=mac-winbox

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/ip pool

add name=default-dhcp ranges=192.168.88.10-192.168.88.254

/ip dhcp-server

add address-pool=default-dhcp authoritative=after-2sec-delay disabled=no interface=bridge1 name=defconf

/user group

set full policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp

/interface bridge port

add bridge=bridge1 interface=ether3

add bridge=bridge1 interface=ether4

add bridge=bridge1 interface=ether5

/ip neighbor discovery-settings

set discover-interface-list=discover

/interface list member

add interface=bridge1 list=discover

add interface=ether3 list=discover

add interface=ether4 list=discover

add interface=ether5 list=discover

add interface=bridge1 list=mactel

add interface=bridge1 list=mac-winbox

/ip address

add address=192.168.88.1/24 comment=defconf interface=bridge1 network=192.168.88.0

/ip dhcp-client

add comment=defconf disabled=no interface=ether1

/ip dhcp-server network

add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1

/ip dns

set allow-remote-requests=yes

/ip dns static

add address=192.168.88.1 name=router

/ip firewall filter

add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp

add action=accept chain=input comment="defconf: accept established,related" connection-state=established,related

add action=drop chain=input comment="defconf: drop all from WAN" in-interface=ether1

add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related

add action=accept chain=forward comment="defconf: accept established,related" connection-state=established,related

add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid

add action=drop chain=forward comment="defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface=ether1

/ip firewall nat

add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=ether1

/system clock

set time-zone-name=America/New_York

/system ntp client

set enabled=yes primary-ntp=216.240.36.24

/tool mac-server

set allowed-interface-list=mactel

/tool mac-server mac-winbox

set allowed-interface-list=mac-winbox