# feb/28/2020 11:49:25 by RouterOS 6.43.9
# software id = CIYX-38PJ
#
# model = RB951Ui-2nD
# serial number = 92500AF61BCB
/interface bridge
add name=reserv
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] comment=LAN
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no mode=ap-bridge \
    ssid=hec-yt-4643
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" \
    group-ciphers=tkip mode=dynamic-keys supplicant-identity=MikroTik \
    unicast-ciphers=tkip wpa2-pre-shared-key=k1aidark2
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool0 ranges=10.10.5.2-10.10.5.254
add name=dhcp_pool1 ranges=10.10.4.2-10.10.4.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=reserv name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=ether5 name=dhcp2
/interface bridge port
add bridge=reserv interface=ether2
add bridge=reserv interface=ether3
add bridge=reserv interface=ether4
add bridge=reserv interface=wlan1
/ip address
add address=10.10.5.1/24 interface=reserv network=10.10.5.0
add address=10.10.4.1/24 interface=ether5 network=10.10.4.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=10.10.4.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=10.10.4.1
add address=10.10.5.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=10.10.5.1
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established in-interface=ether1
add action=accept chain=input connection-state=related in-interface=ether1
add action=drop chain=input in-interface=ether1
add action=jump chain=forward in-interface=ether1 jump-target=customer
add action=accept chain=customer connection-state=established
add action=accept chain=customer connection-state=related
add action=drop chain=customer
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=ether1
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set sctp disabled=yes
/ip upnp interfaces
add interface=ether1 type=external
add interface=ether2 type=internal
add interface=ether3 type=internal
add interface=ether4 type=internal
add interface=ether5 type=internal
add interface=reserv type=internal