MIK_client

# aug/25/2022 08:23:59 by RouterOS 7.3.1
# software id = XNCE-Z5SM
#
# model = RBD52G-5HacD2HnD
# serial number = E5780F8F6F52
/interface sstp-client
add connect-to=35.234.126.61 disabled=no name=sstp-out1 user=SSTP
/interface bridge
add name=bridge
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys \
    name=profile1 supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n mode=ap-bridge \
    security-profile=profile1 ssid=MikroTik_2g
set [ find default-name=wlan2 ] band=5ghz-a/n disabled=no mode=ap-bridge \
    security-profile=profile1 ssid=MikroTik_5g
/ip pool
add name=SSTP_Pool ranges=10.10.0.100-10.10.0.254
/interface bridge port
add bridge=bridge interface=ether4
add bridge=bridge interface=ether2
add bridge=bridge interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=all
/interface ovpn-server server
set auth=sha1,md5,sha256 certificate=*9 cipher=aes256 \
    require-client-certificate=yes
/ip address
add address=192.168.2.5/24 interface=ether2 network=192.168.2.0
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat
add action=netmap chain=dstnat dst-address=10.10.100.0/24 to-addresses=\
    192.168.2.0/24
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.2.1 routing-table=main \
    suppress-hw-offload=no
add disabled=no distance=1 dst-address=10.10.100.0/24 gateway=192.168.2.1 \
    pref-src=0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
/ppp secret
add local-address=10.20.1.1 name=User1 remote-address=10.20.1.2 service=sstp
/system clock
set time-zone-name=Europe/Rome
/system identity
set name=Marco_Okram