/interface bridge
add name=bridge_guest protocol-mode=none
add name=bridge_lan protocol-mode=none
/interface wifi channel
add band=2ghz-n disabled=no frequency=2412 name=channel_2.4G_LAN \
    skip-dfs-channels=all width=20mhz
add band=2ghz-n disabled=no frequency=2432 name=channel_2.4G_guest \
    skip-dfs-channels=all width=20mhz
add band=5ghz-ac disabled=no frequency=5180 name=channel_5G_LAN width=20mhz
add band=5ghz-ac disabled=no frequency=5200 name=channel_5G_guest width=20mhz
/interface wifi datapath
add bridge=bridge_lan disabled=no name=datapath_lan
add bridge=bridge_guest disabled=no name=datapath_guest
/interface wifi security
add authentication-types=wpa2-psk disabled=no name=sec_lan
add authentication-types=wpa2-psk disabled=no name=sec_guest
/interface wifi configuration
add chains=0,1 channel=channel_2.4G_LAN country=Russia datapath=datapath_lan \
    disabled=no mode=ap name=config_2.4G_LAN security=sec_lan ssid=lan \
    tx-chains=0,1 tx-power=17
add chains=0,1 channel=channel_2.4G_guest country=Russia datapath=\
    datapath_guest disabled=no mode=ap name=config_2.4G_guest security=\
    sec_guest ssid=guest tx-chains=0,1 tx-power=17
add chains=0,1 channel=channel_5G_LAN country=Russia datapath=datapath_lan \
    disabled=no mode=ap name=config_5G_LAN security=sec_lan ssid=lan \
    tx-chains=0,1 tx-power=17
add chains=0,1 channel=channel_5G_guest country=Russia datapath=\
    datapath_guest disabled=no mode=ap name=config_5G_guest security=\
    sec_guest ssid=guest tx-chains=0,1 tx-power=17
/interface wifi
add configuration=config_5G_LAN disabled=no name=cap-wifi1 radio-mac=\
    78:9A:18:27:CC:A8
add configuration=config_5G_guest disabled=no mac-address=7A:9A:18:27:CC:A8 \
    master-interface=cap-wifi1 name=cap-wifi2
add configuration=config_2.4G_LAN disabled=no name=cap-wifi3 radio-mac=\
    78:9A:18:27:CC:A9
add configuration=config_2.4G_guest disabled=no mac-address=7A:9A:18:27:CC:A9 \
    master-interface=cap-wifi3 name=cap-wifi4
/ip pool
add name=lan ranges=192.168.0.2-192.168.0.10
add name=guest ranges=192.168.1.2-192.168.1.10
/ip dhcp-server
add add-arp=yes address-pool=lan interface=bridge_lan name=server_lan
add add-arp=yes address-pool=guest interface=bridge_guest name=server_guest
/interface bridge port
add bridge=bridge_lan interface=ether2
add bridge=bridge_lan interface=ether3
add bridge=bridge_lan interface=ether4
add bridge=bridge_lan interface=ether5
add bridge=bridge_lan interface=*B
add bridge=bridge_lan interface=*C
add bridge=bridge_guest interface=*D
add bridge=bridge_guest interface=*E
/ip firewall connection tracking
set udp-timeout=10s
/ipv6 settings
set disable-ipv6=yes
/interface wifi capsman
set enabled=yes interfaces=bridge_lan package-path="" \
    require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=create-enabled disabled=no master-configuration=config_5G_LAN \
    radio-mac=78:9A:18:27:CC:A8 slave-configurations=config_5G_guest
add action=create-enabled disabled=no master-configuration=config_2.4G_LAN \
    radio-mac=78:9A:18:27:CC:A9 slave-configurations=config_2.4G_guest
/ip address
add address=192.168.0.1/24 interface=bridge_lan network=192.168.0.0
add address=192.168.1.1/24 interface=bridge_guest network=192.168.1.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=192.168.0.1 gateway=192.168.0.1 \
    netmask=24
add address=192.168.1.0/24 dns-server=192.168.1.1 gateway=192.168.1.1 \
    netmask=24
/ip dns
set allow-remote-requests=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/system clock
set time-zone-name=Europe/Moscow
/system logging
add topics=wireless
/system note
set show-at-login=no
/system routerboard settings
set auto-upgrade=yes