# may/11/2023 13:25:22 by RouterOS 6.49.7
# software id = ***
#
# model = RBD52G-5HacD2HnD
# serial number = ***
/interface bridge
add admin-mac=18:FD:*** auto-mac=no name=bridge1
/interface ethernet
set [ find default-name=ether1 ] comment="sxt (lte) interface"
set [ find default-name=ether2 ] comment="alarm interface"
set [ find default-name=ether3 ] comment="***"
set [ find default-name=ether4 ] comment="***"
set [ find default-name=ether5 ] comment="***"
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=prolife_home supplicant-identity=""
add authentication-types=wpa2-psk mode=dynamic-keys name=profile_guest supplicant-identity=MikroTik
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce country=italy disabled=no frequency=auto installation=indoor mode=ap-bridge name=wlan2 security-profile=prolife_home ssid=*** wireless-protocol=802.11
add mac-address=1A:FD:74:0F:5B:B2 master-interface=wlan2 name=wlan2.1 security-profile=profile_guest ssid="*** Guests"
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-eeCe country=italy disabled=no frequency=auto installation=indoor mode=ap-bridge name=wlan5 security-profile=prolife_home ssid=*** wireless-protocol=802.11
add mac-address=1A:FD:74:0F:5B:B3 master-interface=wlan5 name=wlan5.1 security-profile=profile_guest ssid="*** Guests"
/ip pool
add name=pool1 ranges=192.168.88.100-192.168.88.199
/ip dhcp-server
add address-pool=pool1 disabled=no interface=bridge1 lease-time=1h name=server1
/system logging action
set 0 memory-lines=10000
set 1 disk-file-name=MikrotikHAP.log
/interface bridge filter
# wlan5.1 not ready
# in/out-bridge-port matcher not possible when interface (wlan5.1) is not slave
add action=drop chain=forward in-interface=wlan5.1
# wlan5.1 not ready
# in/out-bridge-port matcher not possible when interface (wlan5.1) is not slave
add action=drop chain=forward out-interface=wlan5.1
# wlan2.1 not ready
# in/out-bridge-port matcher not possible when interface (wlan2.1) is not slave
add action=drop chain=forward in-interface=wlan2.1
# wlan2.1 not ready
# in/out-bridge-port matcher not possible when interface (wlan2.1) is not slave
add action=drop chain=forward out-interface=wlan2.1
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=wlan5
add bridge=bridge1 interface=wlan2
add bridge=bridge1 interface=wlan5.1
add bridge=bridge1 interface=wlan2.1
add bridge=bridge1 interface=ether2
/ip neighbor discovery-settings
set discover-interface-list=all
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=wlan5 list=LAN
add interface=wlan2 list=LAN
add interface=bridge1 list=LAN
/interface wireless access-list
***
/ip address
add address=192.168.88.1/24 interface=bridge1 network=192.168.88.0
/ip dhcp-server lease
***
add address=192.168.88.200 comment=Alarm disabled=yes mac-address=00:03:***
***
add address=192.168.88.254 comment=GATEWAY-SXTR mac-address=DC:2C:*** server=server1
***
/ip dhcp-server network
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=192.168.88.254
/ip route
add distance=1 gateway=192.168.88.254
/system clock
set time-zone-name=Europe/Rome
/system identity
set name="MikroTik HAP"
/system ntp client
set enabled=yes server-dns-names=pool.ntp.org,0.pool.ntp.org,1.pool.ntp.org,2..pool.ntp.org,3.pool.ntp.org
/tool sniffer
set filter-interface=ether2