Roast my first ever Ros configure to be a switch

RouterOS Beginner Basics
1

I am ready, I am trying to configure some port to. TBH this look dumb to me
Btw how do i configure poe in wimbox

# 2025-01-29 20:11:55 by RouterOS 7.17
# software id = 
#
# model = CRS354-48P-4S+2Q+
# serial number = 
/interface bridge
add admin-mac=D4:01:C3:C5:B9:18 auto-mac=no comment=defconf name=bridge pvid=\
    20 vlan-filtering=yes
/interface vlan
add interface=bridge name=MGMT vlan-id=99
add interface=bridge name=Office vlan-id=20
/interface list
add name=WAN
add name=LAN
add name=TRUSTED
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface=ether1 pvid=20
add bridge=bridge comment=defconf interface=ether2 pvid=20
add bridge=bridge comment=defconf interface=ether3 pvid=20
add bridge=bridge comment=defconf interface=ether4 pvid=20
add bridge=bridge comment=defconf interface=ether5 pvid=20
add bridge=bridge comment=defconf interface=ether6 pvid=20
add bridge=bridge comment=defconf interface=ether7 pvid=20
add bridge=bridge comment=defconf interface=ether8 pvid=20
add bridge=bridge comment=defconf interface=ether9 pvid=20
add bridge=bridge comment=defconf interface=ether10 pvid=20
add bridge=bridge comment=defconf interface=ether11 pvid=20
add bridge=bridge comment=defconf interface=ether12 pvid=20
add bridge=bridge comment=defconf interface=ether13 pvid=20
add bridge=bridge comment=defconf interface=ether14 pvid=20
add bridge=bridge comment=defconf interface=ether15 pvid=20
add bridge=bridge comment=defconf interface=ether16 pvid=20
add bridge=bridge comment=defconf interface=ether17 pvid=20
add bridge=bridge comment=defconf interface=ether18 pvid=20
add bridge=bridge comment=defconf interface=ether19 pvid=20
add bridge=bridge comment=defconf interface=ether20 pvid=20
add bridge=bridge comment=defconf interface=ether21 pvid=20
add bridge=bridge comment=defconf interface=ether22 pvid=20
add bridge=bridge comment=defconf interface=ether23 pvid=20
add bridge=bridge comment=defconf interface=ether24 pvid=20
add bridge=bridge comment=defconf interface=ether25 pvid=20
add bridge=bridge comment=defconf interface=ether26 pvid=20
add bridge=bridge comment=defconf interface=ether27 pvid=20
add bridge=bridge comment=defconf interface=ether28 pvid=20
add bridge=bridge comment=defconf interface=ether29 pvid=20
add bridge=bridge comment=defconf interface=ether30 pvid=20
add bridge=bridge comment=defconf interface=ether31 pvid=20
add bridge=bridge comment=defconf interface=ether32 pvid=20
add bridge=bridge comment=defconf interface=ether33 pvid=20
add bridge=bridge comment=defconf interface=ether34 pvid=20
add bridge=bridge comment=defconf interface=ether35 pvid=20
add bridge=bridge comment=defconf interface=ether36 pvid=20
add bridge=bridge comment=defconf interface=ether37 pvid=20
add bridge=bridge comment=defconf interface=ether38 pvid=20
add bridge=bridge comment=defconf interface=ether39 pvid=20
add bridge=bridge comment=defconf interface=ether40 pvid=20
add bridge=bridge comment=defconf interface=ether41 pvid=20
add bridge=bridge comment=defconf interface=ether42 pvid=20
add bridge=bridge comment=defconf interface=ether43 pvid=99
add bridge=bridge comment=defconf interface=ether44 pvid=99
add bridge=bridge comment=defconf interface=ether45 pvid=99
add bridge=bridge comment=defconf interface=ether46 pvid=99
add bridge=bridge comment=defconf interface=ether47
add bridge=bridge comment=defconf interface=ether48
add bridge=bridge comment=defconf interface=qsfpplus1-1
add bridge=bridge comment=defconf interface=qsfpplus1-2
add bridge=bridge comment=defconf interface=qsfpplus1-3
add bridge=bridge comment=defconf interface=qsfpplus1-4
add bridge=bridge comment=defconf interface=qsfpplus2-1
add bridge=bridge comment=defconf interface=qsfpplus2-2
add bridge=bridge comment=defconf interface=qsfpplus2-3
add bridge=bridge comment=defconf interface=qsfpplus2-4
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
add bridge=bridge comment=defconf interface=sfp-sfpplus3
add bridge=bridge comment=defconf interface=sfp-sfpplus4
/ip neighbor discovery-settings
set discover-interface-list=TRUSTED
/interface bridge vlan
add bridge=bridge tagged=ether48,qsfpplus1-1 untagged=\
    ether46,ether47,ether45,ether44 vlan-ids=99
add bridge=bridge tagged=ether48 untagged="ether1,ether2,ether3,ether4,ether5,\
    ether6,ether7,ether8,ether9,ether10,ether11,ether12" vlan-ids=20
add bridge=bridge tagged=ether48,ether46 vlan-ids=40
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=ether14 list=LAN
add interface=ether15 list=LAN
add interface=ether16 list=LAN
add interface=ether17 list=LAN
add interface=ether18 list=LAN
add interface=ether19 list=LAN
add interface=ether20 list=LAN
add interface=ether21 list=LAN
add interface=ether22 list=LAN
add interface=ether23 list=LAN
add interface=ether24 list=LAN
add interface=ether25 list=LAN
add interface=ether26 list=LAN
add interface=ether27 list=LAN
add interface=ether28 list=LAN
add interface=ether29 list=LAN
add interface=ether30 list=LAN
add interface=ether31 list=LAN
add interface=ether32 list=LAN
add interface=ether33 list=LAN
add interface=ether34 list=LAN
add interface=ether35 list=LAN
add interface=ether36 list=LAN
add interface=ether37 list=LAN
add interface=ether38 list=LAN
add interface=ether39 list=LAN
add interface=ether40 list=LAN
add interface=ether41 list=LAN
add interface=ether42 list=LAN
add interface=ether43 list=LAN
add interface=ether44 list=LAN
add interface=ether45 list=LAN
add interface=ether46 list=LAN
add interface=ether47 list=LAN
add interface=ether48 list=LAN
add interface=ether49 list=LAN
add interface=qsfpplus1-1 list=LAN
add interface=qsfpplus1-2 list=LAN
add interface=qsfpplus1-3 list=LAN
add interface=qsfpplus1-4 list=LAN
add interface=qsfpplus2-1 list=LAN
add interface=qsfpplus2-2 list=LAN
add interface=qsfpplus2-3 list=LAN
add interface=qsfpplus2-4 list=LAN
add interface=sfp-sfpplus1 list=LAN
add interface=sfp-sfpplus2 list=LAN
add interface=sfp-sfpplus3 list=LAN
add interface=sfp-sfpplus4 list=LAN
add interface=MGMT list=TRUSTED
add interface=ether47 list=TRUSTED
/ip dhcp-client
add comment=defconf interface=MGMT
/system clock
set time-zone-name=Asia/Bangkok
/system identity
set name=sj-office-sw01
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key
/system swos
set identity=sj-office-sw01 static-ip-address=192.168.99.4
/tool romon
set enabled=yes
2

For all your VLAN questions, please have a look at this topic:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

Information on PoE:
https://help.mikrotik.com/docs/spaces/ROS/pages/19136769/PoE-Out

In regards to the roasting:

Untagged VLANs are set on the port (/interface brdige port), you don’t have to set them explicitely on the /interface bridge vlan (might cause conflicts).

Using /interface list member can be usefull when doing firewall (you can use interface list to block/accept). As you don’t do any firewalling, just feel free to remove it.

Last remark, add bridge to tagged vlan 99 as well (for management purposes).

3

on switch:

/ip/settings/set ip-forward=no
/ip/firewall/connection/tracking/set enabled=no

generally:

/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh port=20022
set api disabled=yes
set winbox port=28291
set api-ssl disabled=yes

/tool mac-server
set allowed-interface-list=TRUSTED
/tool mac-server mac-winbox
set allowed-interface-list=TRUSTED

/tool bandwidth-server
set authenticate=no enabled=no
4

btw, any possible way to manage a user that will be able to log in to mikrotik devices? Like a centralize user managing system or smth?

5

User-RemoteAAA
https://help.mikrotik.com/docs/spaces/ROS/pages/8978504/User#User-RemoteAAA