# aug/24/2022 09:52:50 by RouterOS 6.48.6
# software id = 8PQW-VGK7
#
# model = RB4011iGS+

/interface bridge
add admin-mac=E4:8D:8C:0B:60:ED auto-mac=no name=lanBridge protocol-mode=none pvid=156 vlan-filtering=yes

/interface ethernet
set [ find default-name=ether1 ] l2mtu=1598 mac-address=10:93:97:61:96:61 name=ether1-External
set [ find default-name=ether2 ] l2mtu=1598 mac-address=E4:8D:8C:0B:60:EE name=ether2-S1 speed=100Mbps
set [ find default-name=ether3 ] l2mtu=1598 mac-address=E4:8D:8C:0B:60:ED name=ether3-S1 speed=100Mbps
set [ find default-name=ether4 ] l2mtu=1598 mac-address=E4:8D:8C:0B:60:EC name=ether4-S1 speed=100Mbps
set [ find default-name=ether5 ] name=ether5-S1
set [ find default-name=ether6 ] l2mtu=1598 mac-address=E4:8D:8C:0B:60:F5 name=ether6-S2 speed=100Mbps
set [ find default-name=ether7 ] l2mtu=1598 mac-address=E4:8D:8C:0B:60:F4 name=ether7-S2 speed=100Mbps
set [ find default-name=ether8 ] l2mtu=1598 mac-address=E4:8D:8C:0B:60:F3 name=ether8-S2 speed=100Mbps
set [ find default-name=ether9 ] l2mtu=1598 mac-address=E4:8D:8C:0B:60:F2 name=ether9-S2 speed=100Mbps
set [ find default-name=ether10 ] name=ether10-S2
set [ find default-name=sfp-sfpplus1 ] name=sfp-brocade

/interface vlan
add interface=ether10-S2 name=vlan50-Guest vlan-id=50
add interface=sfp-brocade name=vlan156-Brocade vlan-id=156
add interface=ether10-S2 name=vlan156-WiFi vlan-id=156
add interface=sfp-brocade name=vlan172-VM vlan-id=172
add interface=sfp-brocade name=vlan180-Cameras vlan-id=180
add interface=ether10-S2 name=vlan190-SmartHome vlan-id=190

/interface list
add name=Isolated
add include=none name=WAN

/ip pool
add name=home-pool ranges=192.168.156.150-192.168.156.250
add name=vpn-pool ranges=192.168.8.10-192.168.8.30
add name=vm-pool ranges=172.16.156.50-172.16.156.99
add name=camera-pool ranges=10.180.1.100-10.180.1.120
add name=guest-pool ranges=192.168.199.100-192.168.199.200
add name=smarthome-pool ranges=10.190.1.100-10.190.1.199

/ip dhcp-server
add address-pool=home-pool disabled=no interface=lanBridge lease-time=1d name=gartin-net
add address-pool=camera-pool disabled=no interface=vlan180-Cameras lease-time=1d name=camera-net
add address-pool=guest-pool disabled=no interface=vlan50-Guest lease-time=1h name=guest-net
add address-pool=smarthome-pool disabled=no interface=vlan190-SmartHome lease-time=1d name=smarthome-net
add address-pool=vm-pool disabled=no interface=vlan172-VM lease-time=1d name=vm-net

/interface bridge port
add bridge=lanBridge frame-types=admit-only-untagged-and-priority-tagged interface=ether7-S2 pvid=156
add bridge=lanBridge frame-types=admit-only-untagged-and-priority-tagged interface=ether8-S2 pvid=156
add bridge=lanBridge frame-types=admit-only-untagged-and-priority-tagged interface=ether9-S2 pvid=156
add bridge=lanBridge frame-types=admit-only-untagged-and-priority-tagged interface=ether6-S2 pvid=156
add bridge=lanBridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=vlan156-Brocade pvid=156
add bridge=lanBridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=vlan156-WiFi pvid=156

/ip neighbor discovery-settings
set discover-interface-list=!dynamic

/interface bridge vlan
add bridge=lanBridge tagged=vlan156-Brocade,vlan156-WiFi untagged=ether8-S2,ether9-S2,ether6-S2,ether7-S2 vlan-ids=156

/interface detect-internet
set detect-interface-list=all

/interface list member
add interface=vlan50-Guest list=Isolated
add interface=vlan172-VM list=Isolated
add interface=vlan180-Cameras list=Isolated
add interface=vlan190-SmartHome list=Isolated
add interface=ether1-External list=WAN

/ip address
add address=192.168.156.1/24 comment="Core Network" interface=lanBridge network=192.168.156.0
add address=172.16.156.1/24 comment=Local-VM-Gateway interface=vlan172-VM network=172.16.156.0
add address=192.168.8.1/24 comment="VPN Gateway" interface=lanBridge network=192.168.8.0
add address=10.180.1.1/24 comment=Cameras interface=vlan180-Cameras network=10.180.1.0
add address=192.168.199.1/24 comment="Guest Network" interface=vlan50-Guest network=192.168.199.0
add address=10.190.1.1/24 comment=SmartHome interface=vlan190-SmartHome network=10.190.1.0