# jul/01/1970 03:17:09 by RouterOS 6.49.7
# software id = NREX-WJQA
#
# model = RouterBOARD 962UiGS-5HacT2HnT
# serial number = 6F120602FD05
/interface ethernet
set [ find default-name=ether1 ] comment="wan (rb3011)" name=ether1-LAN
set [ find default-name=ether2 ] comment="AMD PC" name=ether2-LAN
set [ find default-name=ether3 ] comment="Kuhnya 1" name=ether3-LAN
set [ find default-name=ether4 ] comment="Kuhnya 2" name=ether4-LAN
set [ find default-name=ether5 ] comment=Zal name=ether5-LAN poe-out=off
set [ find default-name=sfp1 ] advertise=\
    10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-onlyn channel-width=\
    20/40mhz-XX country=russia disabled=no frequency-mode=manual-txpower \
    installation=indoor mode=ap-bridge ssid=WiFiHome station-roaming=enabled \
    wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] adaptive-noise-immunity=ap-and-client-mode \
    band=5ghz-onlyac channel-width=20/40/80mhz-XXXX country=russia disabled=\
    no disconnect-timeout=15s distance=indoors frequency=auto frequency-mode=\
    manual-txpower hw-protection-mode=rts-cts hw-retries=10 installation=\
    outdoor mode=ap-bridge multicast-helper=full name="wlan2 5g" \
    on-fail-retry-time=1s radio-name=WiFiHome ssid=WiFiHome \
    wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/interface bridge
add name=bridge1 protocol-mode=none
/interface wireless nstreme
set "wlan2 5g" enable-polling=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk disable-pmkid=yes \
    eap-methods="" group-key-update=1h mode=dynamic-keys supplicant-identity=\
    MikroTik
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
    sword,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=bridge1 interface=ether1-LAN
add bridge=bridge1 interface=ether2-LAN
add bridge=bridge1 interface=ether3-LAN
add bridge=bridge1 interface=ether4-LAN
add bridge=bridge1 interface=ether5-LAN
add bridge=bridge1 interface=sfp1
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface="wlan2 5g"
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=10.0.0.13/24 disabled=yes interface=sfp1 network=10.0.0.0
/ip dhcp-client
add disabled=no interface=bridge1 use-peer-dns=no
/ip dhcp-relay
add dhcp-server=10.0.0.1 disabled=no interface=ether1-LAN name=relay1
/ip dns
set allow-remote-requests=yes servers=10.0.0.1,77.88.8.8,77.88.8.1
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=\
    established,related disabled=yes
add action=log chain=input disabled=yes log=yes src-address=10.0.0.1
add action=log chain=input disabled=yes dst-port=2000 protocol=tcp
add action=accept chain=input disabled=yes
add action=accept chain=forward connection-state=established,related \
    disabled=yes
add action=fasttrack-connection chain=forward connection-state=\
    established,related disabled=yes
add action=accept chain=forward connection-state=established,related \
    disabled=yes
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api address=10.0.0.5/32
set api-ssl disabled=yes
/ip ssh
set forwarding-enabled=remote
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=HomeRB
/system ntp client
set primary-ntp=89.109.251.22 secondary-ntp=89.109.251.23
/system routerboard settings
set auto-upgrade=yes
/system script
add dont-require-permissions=yes name=WoL_AMD owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
    "/tool wol mac=FC:75:16:64:7B:28"
/tool bandwidth-server
set authenticate=no