/interface bridge
add name=Switch
/interface ethernet
set 0 name=ether1-gateway
set 1 name=ether2-master-local
set 2 master-port=ether2-master-local name=ether3-slave-local
set 3 master-port=ether2-master-local name=ether4-slave-local
set 4 master-port=ether2-master-local name=ether5-slave-local
/ip hotspot user profile
set idle-timeout=none keepalive-timeout=2m \
mac-cookie-timeout=3d
/ip ipsec proposal
set pfs-group=none
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=VPN-pool ranges=1.1.1.10-1.1.1.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=ether2-master-local name=\
default
/ppp profile
set 1 dns-server=8.8.8.8,8.8.4.4 local-address=1.1.1.1 remote-address=\
VPN-pool
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/interface l2tp-server server
set enabled=yes
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 enabled=yes
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=\
ether2-master-local network=192.168.88.0
/ip arp
add address=10.0.0.1 interface=ether1-gateway mac-address=24
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=\
no interface=ether1-gateway
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" dns-server=\
192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add chain=input comment="default configuration" in-interface=ether1-gateway
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
out-interface=ether1-gateway to-addresses=0.0.0.0
/ip ipsec peer
add exchange-mode=main-l2tp generate-policy=port-override hash-algorithm=sha1 \
nat-traversal=yes secret=hqtesting
/ip route
add check-gateway=ping distance=1 dst-address=1.0.0.0/32 gateway=10.0.0.1
/ip service
set api disabled=yes
/ppp secret
add local-address=1.1.1.1 name=ppp1 password=ppp1 profile=default-encryption \
remote-address=1.1.1.2 service=pptp
/system clock
set time-zone-name=Europe/Prague
/system ntp client
set enabled=yes mode=unicast primary-ntp=17.72.148.53 secondary-ntp=\
17.72.148.52
/tool mac-server
set disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
/tool mac-server mac-winbox
set disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
