/interface bridge
add name=bridge_vlan7
add name=bridge_vlan10
add name=bridge_vlan30
add name=bridge_vlan40
add name=briege_vlan20
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] poe-out=off speed=100Mbps
set [ find default-name=ether3 ] poe-out=off speed=100Mbps
set [ find default-name=ether4 ] poe-out=off speed=100Mbps
set [ find default-name=ether5 ] poe-out=off speed=100Mbps
set [ find default-name=sfp1 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface vlan
add interface=ether4 name=eth4.10 vlan-id=10
add interface=ether4 name=eth4.20 vlan-id=20
add interface=ether4 name=eth4.30 vlan-id=30
add interface=ether4 name=eth4.7 vlan-id=7
add interface=ether5 name=eth5.10 vlan-id=10
add interface=ether5 name=eth5.20 vlan-id=20
add interface=ether5 name=eth5.30 vlan-id=30
add interface=ether5 name=eth5.7 vlan-id=7
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool1 ranges=192.168.10.50-192.168.10.250
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge_vlan30 name=dhcp-vlan30
/interface bridge port
add bridge=bridge_vlan7 hw=no interface=ether2
add bridge=bridge_vlan40 interface=sfp1
add bridge=bridge_vlan7 interface=eth5.7
add bridge=bridge_vlan7 interface=eth4.7
add bridge=bridge_vlan10 interface=eth4.10
add bridge=bridge_vlan10 interface=eth5.10
add bridge=briege_vlan20 interface=eth4.20
add bridge=briege_vlan20 interface=eth5.20
add bridge=bridge_vlan30 interface=eth4.30
add bridge=bridge_vlan30 interface=eth5.30
add bridge=bridge_vlan40 interface=ether1
add bridge=bridge_vlan30 interface=ether3
/ip address
add address=192.168.1.200/24 interface=bridge_vlan7 network=192.168.1.0
add address=172.16.1.254/24 interface=briege_vlan20 network=172.16.1.0
add address=10.10.10.254/24 interface=bridge_vlan7 network=10.10.10.0
add address=192.168.10.1/24 interface=bridge_vlan30 network=192.168.10.0
add address=192.168.0.253/24 interface=bridge_vlan10 network=192.168.0.0
add address=192.168.11.1/24 interface=bridge_vlan30 network=192.168.11.0
add address=192.168.0.254/24 interface=bridge_vlan10 network=192.168.0.0
/ip dhcp-server network
add address=192.168.10.0/24 dns-server=192.168.10.1 gateway=192.168.10.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall filter
add action=accept chain=input in-interface=bridge_vlan40 protocol=icmp
add action=accept chain=input dst-port=61946 in-interface=bridge_vlan40 in-interface-list=all protocol=tcp
add action=accept chain=input dst-port=9090 in-interface=bridge_vlan40 protocol=tcp
add action=accept chain=input connection-state=established,related in-interface=bridge_vlan40
add action=drop chain=input in-interface=bridge_vlan40
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=9090
set ssh port=61946
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Moscow




/interface bridge
add admin-mac=B8:69:F4:33:47:88 auto-mac=no comment=defconf name=bridge
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge comment=defconf hw=no interface=ether1
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus1
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus2
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus3
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus4
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus5
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus6
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus7
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus8
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus9
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus10
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus11
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus12
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus13
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus14
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus15 pvid=7
add bridge=bridge comment=defconf hw=no interface=sfp-sfpplus16 pvid=30
/interface bridge vlan
add bridge=bridge tagged="sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8,sfp-sfpplus9,sfp-sfpplus10,sfp-sfppl\
    us11,sfp-sfpplus12,sfp-sfpplus13,sfp-sfpplus14,ether1" vlan-ids=30
add bridge=bridge tagged="sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8,sfp-sfpplus9,sfp-sfpplus10,sfp-sfppl\
    us11,sfp-sfpplus12,sfp-sfpplus13,sfp-sfpplus14,ether1" vlan-ids=10
add bridge=bridge tagged="sfp-sfpplus1,sfp-sfpplus2,sfp-sfpplus3,sfp-sfpplus4,sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8,sfp-sfpplus9,sfp-sfpplus10,sfp-sfppl\
    us11,sfp-sfpplus12,sfp-sfpplus13,sfp-sfpplus14,ether1" vlan-ids=20
add bridge=bridge tagged=ether1,bridge vlan-ids=7
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=10.10.10.10/24 interface=bridge network=10.10.10.0
/system routerboard settings
set boot-os=router-os silent-boot=no