/interface bridge
add name=bridge-LAN
add name=bridge-eoip

/interface ethernet
set [ find default-name=ether1 ] comment="WAN"
set [ find default-name=ether1 ] comment="RETE diretta su SIM >>sede3"
set [ find default-name=ether5 ] comment="EOIP>>rete SEDE1" poe-out=off

/interface l2tp-client
add connect-to=xx.xx.xx.disabled=no ipsec-secret=xxxxxxx name=\
    l2tp-client<<sede1 password=m@rio_sede3 use-ipsec=yes user=sede3

/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=no_country_set \
    disabled=no frequency=auto frequency-mode=superchannel mode=\
    station-pseudobridge ssid=Obd

/interface eoip
add allow-fast-path=no local-address=10.10.119.1 mac-address=\
    02:9C:22:E8:ED:35 name=eoip-tunnel remote-address=10.108.1.1 tunnel-id=20

/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=\
    12345678 wpa2-pre-shared-key=12345678
/ip pool
add name=pool-dhcp ranges=10.10.119.100-10.10.119.200

/ip dhcp-server
add address-pool=pool-dhcp disabled=no interface=bridge-LAN lease-time=12h10m \
    name=server-dhcp

/interface bridge port
add bridge=bridge-LAN interface=ether1
add bridge=bridge-LAN interface=ether2
add bridge=bridge-LAN interface=ether3
add bridge=bridge-LAN interface=ether4
add bridge=bridge-eoip interface=ether5
add bridge=bridge-eoip interface=eoip-tunnel

/ip address
add address=10.10.119.1/24 interface=bridge-LAN network=10.10.119.0

/ip dhcp-client
add disabled=no interface=wlan1

/ip dhcp-server network
add address=10.10.119.0/24 dns-server=1.1.1.1,1.0.0.1 gateway=10.10.119.1 \
    netmask=24
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8

/ip firewall filter
add action=accept chain=forward connection-state=\
    established,related,untracked
add action=drop chain=forward connection-state=invalid

/ip firewall nat
add action=masquerade chain=srcnat out-interface=wlan1

/ip route
add distance=1 dst-address=10.10.118.0/24 gateway=172.16.26.1
add distance=1 dst-address=10.10.120.0/24 gateway=172.16.26.1
add distance=1 dst-address=10.10.121.0/24 gateway=172.16.26.1
add distance=1 dst-address=10.108.1.0/24 gateway=172.16.26.1

/system clock
set time-zone-name=Europe/Rome
/system identity
set name="RB3-REMOTA-hotspot_"
/system leds
add interface=eoip-tunnel leds=user-led type=interface-transmit
/system ntp client
set enabled=yes primary-ntp=193.204.114.105