[mario99@rb_rd_favorit4] > export
# feb/28/2019 16:11:06 by RouterOS 6.44
# software id = WQQ2-BWQT
#
# model = RouterBOARD cAP Gi-5acD2nD
# serial number = 81CF08F10808
/interface bridge
add name=lan
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto ssid="" wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee disabled=no distance=indoors frequency=auto ssid="" wireless-protocol=802.11
/interface l2tp-client
add allow=mschap2 connect-to=185.46.198.156 disabled=no mrru=1600 name=vpn01 password=5446565757 user=radar360
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/snmp community
set [ find default=yes ] addresses=10.100.24.1/32
/interface bridge port
add bridge=lan interface=ether1
add bridge=lan interface=ether2
/ip address
add address=10.0.26.104/21 interface=ether2 network=10.0.24.0
add address=10.250.8.1/19 interface=ether1 network=10.250.0.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no
add dhcp-options=hostname,clientid disabled=no interface=lan use-peer-dns=no use-peer-ntp=no
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip firewall filter
add chain=input in-interface=all-ppp
add chain=input connection-state=established,related
add action=drop chain=input connection-state=invalid
add chain=input protocol=icmp
add chain=input dst-port=22 protocol=tcp src-address=91.240.25.0/24
add chain=input dst-port=22 protocol=tcp src-address=185.46.196.0/22
add chain=input dst-port=22 protocol=tcp src-address=10.0.7.0/24
add chain=input dst-port=22 protocol=tcp src-address=10.7.0.0/16
add chain=input dst-port=22 protocol=tcp src-address=10.0.24.0/21
add action=drop chain=input
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set winbox disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes
/snmp
set contact=admin enabled=yes location="Radar,TRC Favorit sputnik, alert"
/system clock
set time-zone-name=Asia/Yekaterinburg
/system identity
set name=rb_rd_favorit4
/system ntp client
set enabled=yes server-dns-names=0.pool.ntp.org
/system routerboard mode-button
set enabled=yes on-event=dark-mode
/system script
add comment=defconf dont-require-permissions=no name=dark-mode owner=*sys policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
    "\r\
    \n   :if ([system leds settings get all-leds-off] = \"never\") do={\r\
    \n     /system leds settings set all-leds-off=immediate \r\
    \n   } else={\r\
    \n     /system leds settings set all-leds-off=never \r\
    \n   }\r\
    \n "
[mario99@rb_rd_favorit4] >