/interface bridge
add admin-mac=E4:8D:8C:98:E5:XX arp=proxy-arp auto-mac=no fast-forward=no mtu=1500 name=bridge1
/interface ethernet
set [ find default-name=ether2 ] arp=proxy-arp
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=dhcp_pool2 ranges=192.168.1.150-192.168.1.229
add name=PPTP_pool next-pool=dhcp_pool2 ranges=192.168.1.140-192.168.1.145
/ip dhcp-server
add address-pool=dhcp_pool2 authoritative=after-2sec-delay disabled=no interface=ether2 lease-time=3d name=dhcp1
/ppp profile
add bridge=bridge1 dns-server=11.46.0.3 local-address=PPTP_pool name=PPTP remote-address=PPTP_pool use-encryption=yes
/system logging action
set 1 disk-file-name=log
/interface bridge port
add interface=ether1
/interface pptp-server server
set default-profile=PPTP enabled=yes mrru=1600
/ip address
add address=192.168.1.1/24 interface=ether2 network=192.168.1.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server lease
add address=192.168.1.10 client-id=1:6c:f0:49:e6:90:xx mac-address=6C:F0:49:E6:90:xx server=dhcp1
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=11.46.0.3,11.46.0.1 gateway=192.168.1.1
/ip dns
set servers=11.46.0.3,11.46.0.1
/ip firewall filter
add action=accept chain=input src-address=192.168.1.0/24
add action=accept chain=input comment="PPTP VPN" dst-port=1723 protocol=tcp
add action=accept chain=input protocol=gre
/ip firewall nat
add action=src-nat chain=srcnat protocol=tcp src-address=192.168.1.5 src-port=8080 to-addresses=11.47.25.101 to-ports=8080
add action=dst-nat chain=dstnat dst-address=11.47.25.101 dst-port=8080 protocol=tcp to-addresses=192.168.1.5 to-ports=8080
add action=src-nat chain=srcnat protocol=tcp src-address=192.168.1.10 src-port=58442 to-addresses=11.47.25.101 to-ports=12950
add action=src-nat chain=srcnat protocol=udp src-address=192.168.1.10 src-port=58442 to-addresses=11.47.25.101 to-ports=12950
add action=dst-nat chain=dstnat dst-address=11.47.25.101 dst-port=58442 protocol=tcp to-addresses=192.168.1.10 to-ports=12950
add action=dst-nat chain=dstnat dst-address=11.47.25.101 dst-port=58442 protocol=udp to-addresses=192.168.1.10 to-ports=12950
add action=masquerade chain=srcnat
/ip route
add distance=1 gateway=11.47.25.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=192.168.1.0/24
/ip smb shares
set [ find default=yes ] directory=/pub
/ip upnp
set enabled=yes
/ppp secret
add name=uzivatel password=heslo profile=PPTP service=pptp
/system clock
set time-zone-name=Europe/Prague
/tool sniffer
set filter-interface=all