CRS305 Fastweb SFP Router Mode

[admin@MikroTik] > export
# oct/09/2022 19:03:11 by RouterOS 7.5
# software id = PJPJ-REYZ
#
# model = CRS305-1G-4S+
/interface bridge
add admin-mac=aa:bb:cc:dd:ee:ff auto-mac=no comment=defconf name=bridge
add ingress-filtering=no name=bridge-wan vlan-filtering=yes
/interface ethernet
# Change router MAC address
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no mac-address=aa:bb:cc:dd:ee:ff speed=2.5Gbps
/interface ethernet switch
set 0 l3-hw-offloading=yes
/interface ethernet switch port
set 0 l3-hw-offloading=no
set 1 l3-hw-offloading=no
set 2 l3-hw-offloading=no
set 3 l3-hw-offloading=no
set 4 l3-hw-offloading=no
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=lan ranges=192.168.88.10-192.168.88.100
/ip dhcp-server
add address-pool=lan interface=bridge name=lan
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
add bridge=bridge comment=defconf interface=sfp-sfpplus3
add bridge=bridge comment=defconf interface=sfp-sfpplus4
add bridge=bridge-wan interface=sfp-sfpplus1
/ip firewall connection tracking
set icmp-timeout=30s tcp-close-wait-timeout=1m tcp-fin-wait-timeout=2m tcp-last-ack-timeout=30s tcp-syn-received-timeout=2m \
    tcp-syn-sent-timeout=2m tcp-time-wait-timeout=2m udp-timeout=30s
/interface list member
add interface=bridge list=LAN
add interface=sfp-sfpplus1 list=WAN
add interface=bridge-wan list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=192.168.1.1/24 interface=bridge-wan network=192.168.1.0
/ip dhcp-client
add !dhcp-options interface=bridge-wan
/ip dhcp-server network
add address=192.168.88.0/24 gateway=192.168.88.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=established,related disabled=yes hw-offload=yes
add action=accept chain=forward connection-state=established,related disabled=yes
add action=drop chain=input in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=src-nat chain=srcnat dst-address=192.168.1.10 src-address-type=!local to-addresses=192.168.1.1
/system clock
set time-zone-name=Europe/Rome
/system logging
add topics=dhcp,debug
/system routerboard settings
set boot-os=router-os
/system swos
set allow-from-ports=p1,p2,p3,p4,p5 identity=MikroTik
/tool sniffer
set file-name=capture filter-interface=sfp-sfpplus1 filter-stream=yes streaming-server=192.168.88.2