/interface vlan
add interface=ether5 name=vlan200 vlan-id=200
add interface=ether5 name=vlan201 vlan-id=201
add interface=ether5 name=vlan202 vlan-id=202
add interface=ether5 name=vlan203 vlan-id=203
add interface=ether5 name=vlan204 vlan-id=204
add interface=ether5 name=vlan205 vlan-id=205

/ip address
add address=10.17.20.201/24 interface=bridge1720 network=10.17.20.0
add address=192.168.0.2/24 interface=vlan202 network=192.168.0.0
add address=192.168.0.2/24 interface=vlan203 network=192.168.0.0
add address=192.168.0.2/24 interface=vlan205 network=192.168.0.0
add address=192.168.0.2/24 interface=vlan204 network=192.168.0.0
add address=192.168.0.2/24 interface=vlan200 network=192.168.0.0
add address=192.168.0.2/24 interface=vlan201 network=192.168.0.0
add address=172.17.2.254/24 interface=bridge-MGMT-CPE network=172.17.2.0
add address=172.17.2.200/24 interface=bridge-MGMT-CPE network=172.17.2.0
add address=172.17.2.202/24 interface=bridge-MGMT-CPE network=172.17.2.0
add address=172.17.2.201/24 interface=bridge-MGMT-CPE network=172.17.2.0
add address=172.17.2.204/24 interface=bridge-MGMT-CPE network=172.17.2.0
add address=172.17.2.205/24 interface=bridge-MGMT-CPE network=172.17.2.0
add address=172.17.2.203/24 interface=bridge-MGMT-CPE network=172.17.2.0


/ip firewall mangle
add action=mark-routing chain=prerouting disabled=yes dst-address=10.17.20.1 new-routing-mark=main passthrough=yes
add action=mark-routing chain=prerouting dst-address=172.17.20.254 new-routing-mark=main passthrough=yes
add action=mark-routing chain=prerouting dst-address=172.17.2.200 log=yes new-routing-mark=200 passthrough=yes
add action=mark-routing chain=prerouting dst-address=172.17.2.201 log=yes new-routing-mark=201 passthrough=yes
add action=mark-routing chain=prerouting dst-address=172.17.2.202 log=yes new-routing-mark=202 passthrough=yes
add action=mark-routing chain=prerouting dst-address=172.17.2.203 log=yes new-routing-mark=203 passthrough=yes
add action=mark-routing chain=prerouting dst-address=172.17.2.204 log=yes new-routing-mark=204 passthrough=yes
add action=mark-routing chain=prerouting dst-address=172.17.2.205 log=yes new-routing-mark=205 passthrough=yes
/ip firewall nat
add action=dstnat chain=dstnat dst-address=172.17.2.200 in-interface=bridge-MGMT-CPE   to-addresses=192.168.0.1
add action=src-nat chain=srcnat log=yes out-interface=vlan200 to-addresses=192.168.0.2
add action=dst-nat chain=dstnat dst-address=172.17.2.201 in-interface=bridge-MGMT-CPE  to-addresses=192.168.0.1
add action=src-nat chain=srcnat log=yes out-interface=vlan201 to-addresses=192.168.0.2
add action=dst-nat chain=dstnat dst-address=172.17.2.202 in-interface=bridge-MGMT-CPE  to-addresses=192.168.0.1
add action=src-nat chain=srcnat log=yes out-interface=vlan202 to-addresses=192.168.0.2
add action=dst-nat chain=dstnat dst-address=172.17.2.203 in-interface=bridge-MGMT-CPE  to-addresses=192.168.0.1
add action=src-nat chain=srcnat log=yes out-interface=vlan203 to-addresses=192.168.0.2
add action=dst-nat chain=dstnat dst-address=172.17.2.204 in-interface=bridge-MGMT-CPE  to-addresses=192.168.0.1
add action=src-nat chain=srcnat log=yes out-interface=vlan204 to-addresses=192.168.0.2
add action=dst-nat chain=dstnat dst-address=172.17.2.205 in-interface=bridge-MGMT-CPE  to-addresses=192.168.0.1
add action=src-nat chain=srcnat log=yes out-interface=vlan205 to-addresses=192.168.0.2
/ip route
add distance=1 gateway=172.17.2.1
add disabled=yes distance=1 gateway=10.17.20.1
/ip route vrf
add interfaces=vlan202 routing-mark=202
add interfaces=vlan203 routing-mark=203
add interfaces=vlan204 routing-mark=204
add interfaces=vlan205 routing-mark=205
add interfaces=vlan200 routing-mark=200
add interfaces=vlan201 routing-mark=201