[admin@MikroTik] > export compact
# sep/11/2013 04:33:17 by RouterOS 6.3
/interface ethernet
set 1 arp=proxy-arp name=ether2-gateway
set 2 name=ether3-master-local
set 3 master-port=ether3-master-local
set 4 master-port=ether3-master-local
/interface pppoe-client
add add-default-route=yes default-route-distance=2 interface=ether2-gateway \
    name=pppoe-out1 password=asdf user=asdf
/interface l2tp-server
add name=l2tp-in1 user=asdf
/interface pptp-server
add name="from cloud" user=asdf
/ip neighbor discovery
set "from cloud" discover=no
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \
    mac-cookie-timeout=3d
/ip pool
add name=default-dhcp ranges=192.168.125.150-192.168.125.175
add name=vpn ranges=192.168.125.220-192.168.125.250
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=ether3-master-local name=\
    default
/port
set 0 name=serial0
/ppp profile
add local-address=192.168.125.3 name="from cloud" remote-address=vpn \
    use-encryption=no
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/interface l2tp-server server
set enabled=yes
/interface pptp-server server
set default-profile="from cloud" enabled=yes max-mru=1460 max-mtu=1460
/ip address
add address=192.168.125.1/24 interface=ether3-master-local network=\
    192.168.125.0
add address=8.8.6.8/30 interface=ether1-gateway network=8.8.6.6
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=no \
    interface=ether1-gateway
/ip dhcp-server network
add address=192.168.125.0/24 comment="default configuration" dns-server=\
    192.168.125.2,8.8.8.8 gateway=192.168.125.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add chain=forward
add chain=input
add chain=output
add action=drop chain=input comment="default configuration" disabled=yes \
    in-interface=ether1-gateway
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=8.8.3.8 dst-port=3910 protocol=\
    tcp to-addresses=192.168.125.2 to-ports=3910
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=ether1-gateway to-addresses=0.0.0.0
add action=src-nat chain=srcnat src-address=192.168.125.2 to-addresses=\
    8.8.6.8
/ip route
add distance=1 gateway=8.8.6.7
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
/ip traffic-flow
set cache-entries=4k
/ppp secret
add name=asdf password=asdf profile="from cloud" remote-address=\
    192.168.125.125
/system logging
add topics=pptp
/system ntp client
set enabled=yes primary-ntp=189.211.62.210 secondary-ntp=173.244.211.10
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-gateway
add interface=ether3-master-local
add interface=ether4-slave-local
add interface=ether5-slave-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-gateway
add interface=ether3-master-local
add interface=ether4-slave-local
add interface=ether5-slave-local
[admin@MikroTik] >