/interface bridge
add fast-forward=no name=bridge1
/interface ethernet
set [ find default-name=ether1 ] mac-address=[REDACTED] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
/interface l2tp-client
add add-default-route=yes allow=chap,mschap2 connect-to=home.tomsikr.eu default-route-distance=2 name="Home L2TP" use-ipsec=yes \
    user=tomsikr
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=tomsikr supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-onlyn channel-width=20/40mhz-eC country=no_country_set frequency=auto \
    frequency-mode=manual-txpower mode=ap-bridge security-profile=tomsikr ssid=tomsikr_2G station-roaming=enabled \
    wireless-protocol=802.11
set [ find default-name=wlan2 ] antenna-gain=0 band=5ghz-onlyac channel-width=20/40/80mhz-XXXX country=no_country_set disabled=no \
    frequency=auto frequency-mode=manual-txpower mode=ap-bridge security-profile=tomsikr ssid=tomsikr_5G station-roaming=enabled \
    wireless-protocol=802.11
/ip pool
add name=dhcp ranges=10.0.2.20-10.0.2.50
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 lease-time=5m name=dhcp1
/user group
set full policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add interface=ether1 list=WAN
add interface=bridge1 list=LAN
/ip address
add address=10.0.2.1/24 interface=bridge1 network=10.0.2.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server lease
add address=10.0.2.20 client-id=1:38:f3:ab:22:54:a mac-address=38:F3:AB:22:54:0A server=dhcp1
/ip dhcp-server network
add address=10.0.2.0/24 gateway=10.0.2.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=Europe/Prague
/system identity
set name=LEGION5
/tool mac-server mac-winbox
set allowed-interface-list=LAN