/interface ethernet
set [ find default-name=ether2 ] disable-running-check=no loop-protect=off \
    name=ISP_TTK
set [ find default-name=ether1 ] arp=local-proxy-arp disable-running-check=no \
    loop-protect=off name=Local
set [ find default-name=ether3 ] disable-running-check=no disabled=yes
/interface list
add name=WAN
/ip ipsec policy group
add name=work
/ip pool
add name=vpn_users ranges=172.16.29.10-172.16.29.254
/ppp profile
add bridge-learning=yes change-tcp-mss=yes dns-server=\
    10.10.100.110,10.10.100.111 local-address=172.16.29.1 name=vpn \
    remote-address=vpn_users
/interface bridge port
add interface=Local multicast-router=disabled
/interface l2tp-server server
set authentication=chap,mschap2 default-profile=vpn enabled=yes ipsec-secret=\
    1111 keepalive-timeout=60 use-ipsec=yes
/interface list member
add interface=ISP_TTK list=WAN
/interface pptp-server server
set default-profile=vpn enabled=yes
/ip address
add address=xxxxxx interface=ISP_TTK network=xxxxx
/ip dhcp-client
add add-default-route=no disabled=no interface=Local
/ip dhcp-relay
add dhcp-server=10.10.100.111 disabled=no interface=Local name=vpn_dhcp
/ip firewall filter
add action=accept chain=input in-interface=Local
add action=accept chain=input dst-port=500 in-interface-list=WAN protocol=udp
add action=accept chain=input dst-port=1701 in-interface-list=WAN protocol=udp
add action=accept chain=input dst-port=4500 in-interface-list=WAN protocol=udp
add action=accept chain=input in-interface-list=WAN protocol=gre
add action=accept chain=input dst-port=1723 in-interface-list=WAN protocol=tcp
add action=accept chain=input connection-state=established,related \
    connection-type="" in-interface-list=WAN
add action=drop chain=input in-interface-list=WAN log-prefix=BLOCK
/ip route
add distance=1 gateway=xxxxx
add distance=1 dst-address=10.0.0.0/8 gateway=10.10.100.254
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh address=10.0.0.0/8
set api disabled=yes
set winbox address=10.0.0.0/8
set api-ssl disabled=yes
/ppp aaa
set use-radius=yes
/radius
add address=10.10.100.240 secret=1111 service=ppp
/system clock
set time-zone-name=Europe/Moscow