# 2024-02-10 10:11:22 by RouterOS 7.13.4
# software id =*
#
# model = CRS310-8G+2S+
# serial number = *
/interface bridge
add arp=local-proxy-arp name="Lan Bridge" port-cost-mode=short
/interface ethernet
set [ find default-name=ether1 ] advertise=\
    10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-full,2.5G-baseT
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=pool1 ranges=192.168.1.115-192.168.1.199
add name=dhcp_pool1 ranges=192.168.1.115-192.168.1.199
/ip dhcp-server
add address-pool=dhcp_pool1 interface="Lan Bridge" name=dhcp1
/interface bridge port
add bridge="Lan Bridge" interface=ether2 internal-path-cost=10 path-cost=10
add bridge="Lan Bridge" interface=ether3 internal-path-cost=10 path-cost=10
add bridge="Lan Bridge" interface=ether4 internal-path-cost=10 path-cost=10
add bridge="Lan Bridge" interface=ether5 internal-path-cost=10 path-cost=10
add bridge="Lan Bridge" interface=ether6 internal-path-cost=10 path-cost=10
add bridge="Lan Bridge" interface=ether7 internal-path-cost=10 path-cost=10
add bridge="Lan Bridge" interface=ether8 internal-path-cost=10 path-cost=10
add bridge="Lan Bridge" interface=sfp-sfpplus1 internal-path-cost=10 \
    path-cost=10
add bridge="Lan Bridge" interface=sfp-sfpplus2 internal-path-cost=10 \
    path-cost=10
/ip address
add address=192.168.1.1/24 interface="Lan Bridge" network=192.168.1.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server lease
add address=192.168.1.126 client-id=1:0:f:ff:b:11:6b mac-address=\
    00:0F:FF:0B:11:6B server=dhcp1
add address=192.168.1.144 client-id=1:b4:2e:99:36:d3:ca mac-address=\
    B4:2E:99:36:D3:CA server=dhcp1
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1
/ip firewall filter
add action=accept chain=forward comment=Obseron dst-address=192.168.1.102 \
    port=9191 protocol=tcp
add action=accept chain=forward connection-state=\
    established,related,untracked
add action=accept chain=forward protocol=icmp
add action=accept chain=input connection-state=established,related,untracked
add action=drop chain=input connection-state=invalid connection-type=""
add action=drop chain=input in-interface="!Lan Bridge"
add action=drop chain=forward connection-state=invalid connection-type=""
add action=drop chain=forward connection-nat-state=!dstnat connection-state=\
    new connection-type="" in-interface=ether1
add action=fasttrack-connection chain=forward hw-offload=yes out-interface=\
    ether1
/ip firewall nat
add action=masquerade chain=srcnat
add action=netmap chain=dstnat comment="Obseron Server" port=9191 protocol=\
    tcp to-addresses=192.168.1.102 to-ports=9191
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=America/Denver
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os