# nov/12/2021 10:16:06 by RouterOS 6.49
# software id = VPLR-UNP3
#
# model = RB2011UiAS
# serial number = D5210DC35806
/interface bridge
add name=buh
add name=other
/interface ethernet
set [ find default-name=ether10 ] name=Enforta
/interface pppoe-client
add add-default-route=yes disabled=no interface=Enforta name=pppoe-out1 \
    password=***** user=*****
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.0.2-192.168.0.254
add name=dhcp_pool1 ranges=192.168.61.2-192.168.61.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=buh name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=other name=dhcp2
/ppp profile
add change-tcp-mss=yes dns-server=192.168.0.1 local-address=192.168.0.233 \
    name=l2tp remote-address=192.168.0.234
/interface bridge port
add bridge=buh interface=ether1
add bridge=buh interface=ether2
add bridge=buh interface=ether3
add bridge=buh interface=ether4
add bridge=other interface=ether5
add bridge=other interface=ether6
add bridge=other interface=ether7
add bridge=other interface=ether8
/ip neighbor discovery-settings
set discover-interface-list=all
/interface l2tp-server server
set authentication=mschap2 enabled=yes ipsec-secret="1234" use-ipsec=\
    required
/ip address
add address=192.168.0.1/24 interface=buh network=192.168.0.0
add address=192.168.61.1/24 interface=other network=192.168.61.0
/ip dhcp-server network
add address=192.168.0.0/24 gateway=192.168.0.1
add address=192.168.61.0/24 gateway=192.168.61.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,5.3.5.5
/ip firewall filter
add action=accept chain=input dst-port=500,1701,4500 in-interface=Enforta \
    protocol=udp
add action=accept chain=input connection-state=established,related
add action=drop chain=input connection-state=invalid
/ip firewall nat
add action=src-nat chain=srcnat out-interface=Enforta to-addresses=\
    176.213.133.128
/ip route
add distance=1 gateway=Enforta
add disabled=yes distance=1 dst-address=192.168.0.250/32 gateway=pppoe-out1
/ip service
set telnet address=192.168.0.0/24
set ftp disabled=yes
set www disabled=yes
set ssh address=192.168.0.0/24
/system clock
set time-zone-name=Europe/Moscow
/system ntp client
set enabled=yes primary-ntp=31.28.161.68 secondary-ntp=79.142.192.4