/interface ethernet
set [ find default-name=ether6 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-full arp=enabled arp-timeout=auto \
    auto-negotiation=yes cable-settings=default disable-running-check=no disabled=no l2mtu=9014 loop-protect=default loop-protect-disable-time=5m \
    loop-protect-send-interval=5s mac-address=********:C1 mtu=1500 name=DMZ orig-mac-address=********:C1 rx-flow-control=off tx-flow-control=\
    off
set [ find default-name=ether1 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-full arp=enabled arp-timeout=auto \
    auto-negotiation=yes cable-settings=default disable-running-check=no disabled=no l2mtu=9014 loop-protect=default loop-protect-disable-time=5m \
    loop-protect-send-interval=5s mac-address=********:C2 mtu=1500 name=LAN orig-mac-address=********:C2 rx-flow-control=off tx-flow-control=\
    off
set [ find default-name=ether4 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-full arp=enabled arp-timeout=auto \
    auto-negotiation=yes cable-settings=default disable-running-check=no disabled=no l2mtu=9014 loop-protect=default loop-protect-disable-time=5m \
    loop-protect-send-interval=5s mac-address=********:C5 mtu=1500 name=MNG orig-mac-address=********:C5 rx-flow-control=off tx-flow-control=\
    off
set [ find default-name=ether5 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-full arp=enabled arp-timeout=auto \
    auto-negotiation=yes cable-settings=default disable-running-check=no disabled=no l2mtu=9014 loop-protect=default loop-protect-disable-time=5m \
    loop-protect-send-interval=5s mac-address=********:C0 mtu=1500 name=WAN orig-mac-address=********:C0 rx-flow-control=off tx-flow-control=\
    off
set [ find default-name=ether2 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-full arp=enabled arp-timeout=auto \
    auto-negotiation=yes cable-settings=default disable-running-check=no disabled=no l2mtu=9014 loop-protect=default loop-protect-disable-time=5m \
    loop-protect-send-interval=5s mac-address=********:C3 mtu=1500 name=ether4 orig-mac-address=********:C3 rx-flow-control=off \
    tx-flow-control=off
set [ find default-name=ether3 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-full arp=enabled arp-timeout=auto \
    auto-negotiation=yes cable-settings=default disable-running-check=no disabled=no l2mtu=9014 loop-protect=default loop-protect-disable-time=5m \
    loop-protect-send-interval=5s mac-address=********:C4 mtu=1500 name=ether5 orig-mac-address=********:C4 rx-flow-control=off \
    tx-flow-control=off
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 default-route-distance=1 dial-on-demand=no disabled=no interface=WAN keepalive-timeout=\
    10 max-mru=auto max-mtu=auto mrru=disabled name=pppoe-out1 profile=default service-name="" use-peer-dns=no user=*******
/interface list
set [ find name=all ] comment="contains all interfaces" exclude="" include="" name=all
set [ find name=none ] comment="contains no interfaces" exclude="" include="" name=none
set [ find name=dynamic ] comment="contains dynamic interfaces" exclude="" include="" name=dynamic
set [ find name=static ] comment="contains static interfaces" exclude="" include="" name=static
/interface lte apn
set [ find default=yes ] add-default-route=yes apn=internet authentication=none default-route-distance=2 ip-type=ipv4 name=default use-network-apn=no \
    use-peer-dns=yes
/interface macsec profile
set [ find default-name=default ] name=default server-priority=10
/interface wireless security-profiles
set [ find default=yes ] authentication-types="" disable-pmkid=no eap-methods=passthrough group-ciphers=aes-ccm group-key-update=5m interim-update=0s \
    management-protection=disabled mode=none mschapv2-username="" name=default radius-called-format=mac:ssid radius-eap-accounting=no \
    radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
    static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=none static-sta-private-algo=none static-transmit-key=key-0 supplicant-identity=\
    MikroTik tls-certificate=none tls-mode=no-certificates unicast-ciphers=aes-ccm
/interface bridge port-controller
# disabled
set bridge=none cascade-ports="" switch=none
/interface bridge port-extender
# disabled
set control-ports="" excluded-ports="" switch=none
/interface bridge settings
set allow-fast-path=yes use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no
/interface detect-internet
set detect-interface-list=none internet-interface-list=none lan-interface-list=none wan-interface-list=none
/interface l2tp-server server
set accept-proto-version=all accept-pseudowire-type=all allow-fast-path=no authentication=pap,chap,mschap1,mschap2 caller-id-type=ip-address \
    default-profile=default-encryption enabled=no keepalive-timeout=30 l2tpv3-circuit-id="" l2tpv3-cookie-length=0 l2tpv3-digest-hash=md5 \
    !l2tpv3-ether-interface-list max-mru=1450 max-mtu=1450 max-sessions=unlimited mrru=disabled one-session-per-host=no use-ipsec=no
/interface lte settings
set firmware-path=firmware mode=auto
/interface ovpn-server server
set auth=sha1 certificate=ovpn-server cipher=aes128-gcm,aes256-gcm default-profile=ovpn-server enable-tun-ipv6=no enabled=yes ipv6-prefix-len=64 \
    keepalive-timeout=120 mac-address=****** max-mtu=1500 mode=ip netmask=24 port=****** protocol=udp redirect-gateway=disabled reneg-sec=3600 \
    require-client-certificate=yes tls-version=only-1.2 tun-server-ipv6=::
/interface pptp-server server
# PPTP connections are considered unsafe, it is suggested to use a more modern VPN protocol instead
set authentication=mschap1,mschap2 default-profile=default-encryption enabled=no keepalive-timeout=30 max-mru=1450 max-mtu=1450 mrru=disabled
/interface sstp-server server
set authentication=pap,chap,mschap1,mschap2 certificate=none default-profile=default enabled=no keepalive-timeout=60 max-mru=1500 max-mtu=1500 mrru=\
    disabled pfs=no port=443 tls-version=any verify-client-certificate=no
/interface wifi cap
set enabled=no
/interface wifi capsman
set enabled=no
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300 frames-per-second=25 \
    receive-all=no ssid-all=no
/interface wireless cap
set bridge=none caps-man-addresses="" caps-man-certificate-common-names="" caps-man-names="" certificate=none discovery-interfaces="" enabled=no \
    interfaces="" lock-to-caps-man=no static-virtual=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name="" memory-limit=10 multiple-channels=no only-headers=no receive-errors=no streaming-enabled=no \
    streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=no