RBSXTsq2nD 1/28/2019 10:03:15 PM

[admin@MikroTik wind] > export compact # jan/02/1970 00:05:35 by RouterOS 6.43.8 # software id = EW93-E1VN # # model = RBSXTsq2nD # serial number = *** /interface list add comment=defconf name=WAN add comment=defconf name=LAN /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik add authentication-types=wpa2-psk management-protection=allowed mode=dynamic-keys name=profile1 supplicant-identity="MikroTik wind" wpa2-pre-shared-key="***" /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2462 security-profile=profile1 ssid=MOOC-bgn wireless-protocol=802.11 /ip pool add name=default-dhcp ranges=192.168.88.10-192.168.88.254 /ip dhcp-server add address-pool=default-dhcp interface=ether1 name=defconf /ip neighbor discovery-settings set discover-interface-list=LAN /interface list member add comment=defconf interface=ether1 list=LAN add comment=defconf interface=wlan1 list=WAN add list=LAN /ip address add address=192.168.88.2/24 comment=defconf interface=ether1 network=192.168.88.0 /ip dhcp-client add comment=defconf dhcp-options=hostname,clientid disabled=no interface=wlan1 /ip dhcp-server network add address=192.168.88.0/24 comment=defconf gateway=192.168.88.2 netmask=24 /ip dns set allow-remote-requests=yes /ip dns static add address=192.168.88.2 name=router.lan /ip firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN /ip firewall nat add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes ipsec-policy=out,none out-interface-list=WAN /system identity set name="MikroTik wind" /tool mac-server set allowed-interface-list=LAN /tool mac-server mac-winbox set allowed-interface-list=LAN