/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode \
band=2ghz-onlyg disabled=no frequency-mode=superchannel hw-protection-mode=\
rts-cts l2mtu=2290 mode=ap-bridge ssid=""
add disabled=no l2mtu=2290 mac-address=02:15:6D:6A:A4:70 master-interface=wlan1 \
name=wlan2 ssid=mikrotik wds-cost-range=0 wds-default-cost=0
add disabled=no l2mtu=2290 mac-address=02:15:6D:6A:A4:71 master-interface=wlan1 \
name=wlan3 ssid=mikrotik2 wds-cost-range=0 wds-default-cost=0
/interface vlan
add interface=ether2 l2mtu=1514 name=rf_vlan1 vlan-id=501
add interface=wlan2 l2mtu=2286 name=rf_vlan2 vlan-id=501
/interface bonding
add arp-ip-targets=192.168.191.2 mode=broadcast name=bonding1 slaves=\
rf_vlan2,rf_vlan1,ether2,wlan2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool1 ranges=1.1.1.2-1.1.1.254
add name=dhcp_pool2 ranges=192.168.10.2-192.168.10.254
add name=dhcp_pool3 ranges=2.2.2.2-2.2.2.126
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether3 lease-time=3d name=\
dhcp1
add address-pool=dhcp_pool2 interface=ether2 lease-time=3d name=dhcp2
add address-pool=dhcp_pool3 always-broadcast=yes disabled=no interface=bonding1 \
lease-time=3d name=dhcp3
/port
set 0 name=serial0
/ip address
add address=1.1.1.1/24 interface=ether3 network=1.1.1.0
add address=192.168.10.1/24 disabled=yes interface=ether2 network=192.168.10.0
add address=2.2.2.1/25 interface=bonding1 network=2.2.2.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
interface=ether1
/ip dhcp-server network
add address=1.1.1.0/24 gateway=1.1.1.1
add address=2.2.2.0/25 gateway=2.2.2.1
add address=192.168.10.0/24 gateway=192.168.10.1
/ip dns
set allow-remote-requests=yes servers=192.168.10.1,1.1.1.1
/ip firewall nat
add chain=srcnat comment="vpn traffic" dst-address=192.168.20.0/24 src-address=\
192.168.10.0/24
add action=masquerade chain=srcnat src-address=1.1.1.0/24
add action=masquerade chain=srcnat src-address=192.168.10.0/24
add action=masquerade chain=srcnat src-address=2.2.2.0/25
/ip route
add distance=1 dst-address=192.168.20.0/24 gateway=192.168.30.2