Segregating traffic between ports CRS125 and CCR1009

pingfx · April 21, 2016, 8:41pm

I am new to Mikrotik and am trying to install a CCR and some CRS switches to service an apartment complex. Each apartment will have a single switchport serving DHCP to whatever device they choose in their apartment. We do not want communication between user/apartment switch ports. Can anyone provide an example config to accomplish this? Keep in mind we also need to serve private IP's via DHCP to each apartment that will then be NAT'ed for internet access. Would creating a separate vlan for each switchport trunking the uplinks and serving a unique DHCP subnet to each VLAN do the trick? At that point wouldn't we need some sort of firewall on the CCR to prevent communication between "connected" subnets/routes? Is there a limitation on the number of DHCP scopes that can be served? I have been a networker for over a decade and understand concepts so you don't need to dumb things down too much I just have no experience with Mikrotik at all; though I am pumped to be getting in the game!! Any help at all is greatly appreciated.

Please see my rudimentary drawing below attempting to visually depict what we are trying to accomplish. I created this before realizing you can attach files...

ether1 - Apt1

CRS125-24G-1S - - ether2 - Apt2

                                - ether10 - Apt10

ether1 -ether3 - Apt33

CCR-1009-8G---- ether2 ---CRS125-24G-1S - - - ether 5 - Apt35

ether3 -ether 9 - Apt39

                                 - ether1 - Apt52

-CRS125-24G-1S - - - ether2 - Apt55

ether3 - Apt57

pingfx · April 22, 2016, 5:15pm

Am I posting this in the right section?

pingfx · May 16, 2016, 9:10pm

I ended up using many VLAN's and DHCP scopes... Here is my config from the CCR (6.35) and one CRS (6.35)

########################### CCR ###########################################

[admin@SBN-HOF-GW01] /ip firewall nat> / export hide-sensitive

may/16/2016 17:07:40 by RouterOS 6.35.2

software id = GX11-41Y3

/interface bridge
add name=bridge-mgmt
add name=bridge-wlan
/interface ethernet
set [ find default-name=sfp1 ] name=sfp1-gateway
/interface vlan
add interface=ether2 name=VLAN0101-ETH2 vlan-id=101
add interface=ether2 name=VLAN0102-ETH2 vlan-id=102
add interface=ether2 name=VLAN0103-ETH2 vlan-id=103
add interface=ether2 name=VLAN0104-ETH2 vlan-id=104
add interface=ether2 name=VLAN0201-ETH2 vlan-id=201
add interface=ether2 name=VLAN0202-ETH2 vlan-id=202
add interface=ether2 name=VLAN0203-ETH2 vlan-id=203
add interface=ether2 name=VLAN0204-ETH2 vlan-id=204
add interface=ether2 name=VLAN0301-ETH2 vlan-id=301
add interface=ether2 name=VLAN0302-ETH2 vlan-id=302
add interface=ether2 name=VLAN0303-ETH2 vlan-id=303
add interface=ether2 name=VLAN0304-ETH2 vlan-id=304
add interface=ether2 name=VLAN0401-ETH2 vlan-id=401
add interface=ether2 name=VLAN0402-ETH2 vlan-id=402
add interface=ether2 name=VLAN0403-ETH2 vlan-id=403
add interface=ether2 name=VLAN0404-ETH2 vlan-id=404
add interface=ether3 name=VLAN0501-ETH3 vlan-id=501
add interface=ether3 name=VLAN0502-ETH3 vlan-id=502
add interface=ether3 name=VLAN0503-ETH3 vlan-id=503
add interface=ether3 name=VLAN0504-ETH3 vlan-id=504
add interface=ether3 name=VLAN0601-ETH3 vlan-id=601
add interface=ether3 name=VLAN0602-ETH3 vlan-id=602
add interface=ether3 name=VLAN0603-ETH3 vlan-id=603
add interface=ether3 name=VLAN0604-ETH3 vlan-id=604
add interface=ether3 name=VLAN0701-ETH3 vlan-id=701
add interface=ether3 name=VLAN0702-ETH3 vlan-id=702
add interface=ether3 name=VLAN0703-ETH3 vlan-id=703
add interface=ether3 name=VLAN0704-ETH3 vlan-id=704
add interface=ether3 name=VLAN0801-ETH3 vlan-id=801
add interface=ether3 name=VLAN0802-ETH3 vlan-id=802
add interface=ether3 name=VLAN0803-ETH3 vlan-id=803
add interface=ether3 name=VLAN0804-ETH3 vlan-id=804
add interface=ether4 name=VLAN0901-ETH4 vlan-id=901
add interface=ether4 name=VLAN0902-ETH4 vlan-id=902
add interface=ether4 name=VLAN0903-ETH4 vlan-id=903
add interface=ether4 name=VLAN0904-ETH4 vlan-id=904
add interface=ether4 name=VLAN1001-ETH4 vlan-id=1001
add interface=ether4 name=VLAN1002-ETH4 vlan-id=1002
add interface=ether4 name=VLAN1003-ETH4 vlan-id=1003
add interface=ether4 name=VLAN1004-ETH4 vlan-id=1004
add interface=ether4 name=VLAN1101-ETH4 vlan-id=1101
add interface=ether4 name=VLAN1102-ETH4 vlan-id=1102
add interface=ether4 name=VLAN1103-ETH4 vlan-id=1103
add interface=ether4 name=VLAN1104-ETH4 vlan-id=1104
add interface=ether4 name=VLAN1201-ETH4 vlan-id=1201
add interface=ether4 name=VLAN1202-ETH4 vlan-id=1202
add interface=ether4 name=VLAN1203-ETH4 vlan-id=1203
add interface=ether4 name=VLAN1204-ETH4 vlan-id=1204
add interface=ether1 name=VLAN4094-ETH1-MGMT vlan-id=4094
add interface=ether2 name=VLAN4094-ETH2-MGMT vlan-id=4094
add interface=ether3 name=VLAN4094-ETH3-MGMT vlan-id=4094
add interface=ether4 name=VLAN4094-ETH4-MGMT vlan-id=4094
add interface=ether5 name=VLAN4094-ETH5-MGMT vlan-id=4094
add interface=ether6 name=VLAN4094-ETH6-MGMT vlan-id=4094
add interface=ether7 name=VLAN4094-ETH7-MGMT vlan-id=4094
add interface=sfp1-gateway name=sfp1-gateway-V0339 vlan-id=339
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=dhcp_pool1 ranges=10.1.1.99-10.1.1.240
add name=dhcp_pool2 ranges=10.1.2.2-10.1.2.254
add name=dhcp_pool3 ranges=10.1.3.2-10.1.3.254
add name=dhcp_pool4 ranges=10.1.4.2-10.1.4.254
add name=dhcp_pool5 ranges=10.2.1.2-10.2.1.254
add name=dhcp_pool6 ranges=10.2.2.2-10.2.2.254
add name=dhcp_pool7 ranges=10.2.3.2-10.2.3.254
add name=dhcp_pool8 ranges=10.2.4.2-10.2.4.254
add name=dhcp_pool9 ranges=10.3.1.2-10.3.1.254
add name=dhcp_pool10 ranges=10.3.2.2-10.3.2.254
add name=dhcp_pool11 ranges=10.3.3.2-10.3.3.254
add name=dhcp_pool12 ranges=10.3.4.2-10.3.4.254
add name=dhcp_pool13 ranges=10.4.1.2-10.4.1.254
add name=dhcp_pool14 ranges=10.4.2.2-10.4.2.254
add name=dhcp_pool15 ranges=10.4.3.2-10.4.3.254
add name=dhcp_pool16 ranges=10.4.4.2-10.4.4.254
add name=dhcp_pool17 ranges=10.5.1.2-10.5.1.254
add name=dhcp_pool18 ranges=10.5.2.2-10.5.2.254
add name=dhcp_pool19 ranges=10.5.3.2-10.5.3.254
add name=dhcp_pool20 ranges=10.5.4.2-10.5.4.254
add name=dhcp_pool21 ranges=10.6.1.2-10.6.1.254
add name=dhcp_pool22 ranges=10.6.2.2-10.6.2.254
add name=dhcp_pool23 ranges=10.6.3.2-10.6.3.254
add name=dhcp_pool24 ranges=10.6.4.2-10.6.4.254
add name=dhcp_pool25 ranges=10.7.1.2-10.7.1.254
add name=dhcp_pool26 ranges=10.7.2.2-10.7.2.254
add name=dhcp_pool27 ranges=10.7.3.2-10.7.3.254
add name=dhcp_pool28 ranges=10.7.4.2-10.7.4.254
add name=dhcp_pool29 ranges=10.8.1.2-10.8.1.254
add name=dhcp_pool30 ranges=10.8.2.2-10.8.2.254
add name=dhcp_pool31 ranges=10.8.3.2-10.8.3.254
add name=dhcp_pool32 ranges=10.8.4.2-10.8.4.254
add name=dhcp_pool33 ranges=10.9.1.2-10.9.1.254
add name=dhcp_pool34 ranges=10.9.2.2-10.9.2.254
add name=dhcp_pool35 ranges=10.9.3.2-10.9.3.254
add name=dhcp_pool36 ranges=10.9.4.2-10.9.4.254
add name=dhcp_pool37 ranges=10.10.1.2-10.10.1.254
add name=dhcp_pool38 ranges=10.10.2.2-10.10.2.254
add name=dhcp_pool39 ranges=10.10.3.2-10.10.3.254
add name=dhcp_pool40 ranges=10.10.4.2-10.10.4.254
add name=dhcp_pool41 ranges=10.11.1.2-10.11.1.254
add name=dhcp_pool42 ranges=10.11.2.2-10.11.2.254
add name=dhcp_pool43 ranges=10.11.3.2-10.11.3.254
add name=dhcp_pool44 ranges=10.11.4.2-10.11.4.254
add name=dhcp_pool45 ranges=10.12.1.2-10.12.1.254
add name=dhcp_pool46 ranges=10.12.2.2-10.12.2.254
add name=dhcp_pool47 ranges=10.12.3.2-10.12.3.254
add name=dhcp_pool48 ranges=10.12.4.2-10.12.4.254
add name=dhcp_pool4094 ranges=10.40.94.100-10.40.94.199
add name=dhcp_pool49 ranges=10.40.94.2-10.40.94.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=VLAN0101-ETH2 lease-time=8h name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=VLAN0102-ETH2 lease-time=8h name=dhcp2
add address-pool=dhcp_pool3 disabled=no interface=VLAN0103-ETH2 lease-time=8h name=dhcp3
add address-pool=dhcp_pool4 disabled=no interface=VLAN0104-ETH2 lease-time=8h name=dhcp4
add address-pool=dhcp_pool5 disabled=no interface=VLAN0201-ETH2 lease-time=8h name=dhcp5
add address-pool=dhcp_pool6 disabled=no interface=VLAN0202-ETH2 lease-time=8h name=dhcp6
add address-pool=dhcp_pool7 disabled=no interface=VLAN0203-ETH2 lease-time=8h name=dhcp7
add address-pool=dhcp_pool8 disabled=no interface=VLAN0204-ETH2 lease-time=8h name=dhcp8
add address-pool=dhcp_pool9 disabled=no interface=VLAN0301-ETH2 lease-time=8h name=dhcp9
add address-pool=dhcp_pool10 disabled=no interface=VLAN0302-ETH2 lease-time=8h name=dhcp10
add address-pool=dhcp_pool11 disabled=no interface=VLAN0303-ETH2 lease-time=8h name=dhcp11
add address-pool=dhcp_pool12 disabled=no interface=VLAN0304-ETH2 lease-time=8h name=dhcp12
add address-pool=dhcp_pool17 disabled=no interface=VLAN0501-ETH3 lease-time=8h name=dhcp17
add address-pool=dhcp_pool18 disabled=no interface=VLAN0502-ETH3 lease-time=8h name=dhcp18
add address-pool=dhcp_pool19 disabled=no interface=VLAN0503-ETH3 lease-time=8h name=dhcp19
add address-pool=dhcp_pool20 disabled=no interface=VLAN0504-ETH3 lease-time=8h name=dhcp20
add address-pool=dhcp_pool21 disabled=no interface=VLAN0601-ETH3 lease-time=8h name=dhcp21
add address-pool=dhcp_pool22 disabled=no interface=VLAN0602-ETH3 lease-time=8h name=dhcp22
add address-pool=dhcp_pool23 disabled=no interface=VLAN0603-ETH3 lease-time=8h name=dhcp23
add address-pool=dhcp_pool24 disabled=no interface=VLAN0604-ETH3 lease-time=8h name=dhcp24
add address-pool=dhcp_pool25 disabled=no interface=VLAN0701-ETH3 lease-time=8h name=dhcp25
add address-pool=dhcp_pool26 disabled=no interface=VLAN0702-ETH3 lease-time=8h name=dhcp26
add address-pool=dhcp_pool27 disabled=no interface=VLAN0703-ETH3 lease-time=8h name=dhcp27
add address-pool=dhcp_pool28 disabled=no interface=VLAN0704-ETH3 lease-time=8h name=dhcp28
add address-pool=dhcp_pool29 disabled=no interface=VLAN0801-ETH3 lease-time=8h name=dhcp29
add address-pool=dhcp_pool30 disabled=no interface=VLAN0802-ETH3 lease-time=8h name=dhcp30
add address-pool=dhcp_pool31 disabled=no interface=VLAN0803-ETH3 lease-time=8h name=dhcp31
add address-pool=dhcp_pool32 disabled=no interface=VLAN0804-ETH3 lease-time=8h name=dhcp32
add address-pool=dhcp_pool33 disabled=no interface=VLAN0901-ETH4 lease-time=8h name=dhcp33
add address-pool=dhcp_pool34 disabled=no interface=VLAN0902-ETH4 lease-time=8h name=dhcp34
add address-pool=dhcp_pool35 disabled=no interface=VLAN0903-ETH4 lease-time=8h name=dhcp35
add address-pool=dhcp_pool36 disabled=no interface=VLAN0904-ETH4 lease-time=8h name=dhcp36
add address-pool=dhcp_pool39 disabled=no interface=VLAN1003-ETH4 lease-time=8h name=dhcp39
add address-pool=dhcp_pool40 disabled=no interface=VLAN1004-ETH4 lease-time=8h name=dhcp40
add address-pool=dhcp_pool41 disabled=no interface=VLAN1101-ETH4 lease-time=8h name=dhcp41
add address-pool=dhcp_pool42 disabled=no interface=VLAN1102-ETH4 lease-time=8h name=dhcp42
add address-pool=dhcp_pool43 disabled=no interface=VLAN1103-ETH4 lease-time=8h name=dhcp43
add address-pool=dhcp_pool44 disabled=no interface=VLAN1104-ETH4 lease-time=8h name=dhcp44
add address-pool=dhcp_pool45 disabled=no interface=VLAN1201-ETH4 lease-time=8h name=dhcp45
add address-pool=dhcp_pool46 disabled=no interface=VLAN1202-ETH4 lease-time=8h name=dhcp46
add address-pool=dhcp_pool47 disabled=no interface=VLAN1203-ETH4 lease-time=8h name=dhcp47
add address-pool=dhcp_pool48 disabled=no interface=VLAN1204-ETH4 lease-time=8h name=dhcp48
add address-pool=dhcp_pool13 disabled=no interface=VLAN0401-ETH2 lease-time=8h name=dhcp13
add address-pool=dhcp_pool14 disabled=no interface=VLAN0402-ETH2 lease-time=8h name=dhcp14
add address-pool=dhcp_pool15 disabled=no interface=VLAN0403-ETH2 lease-time=8h name=dhcp15
add address-pool=dhcp_pool16 disabled=no interface=VLAN0404-ETH2 lease-time=8h name=dhcp16
add address-pool=dhcp_pool37 disabled=no interface=VLAN1001-ETH4 lease-time=8h name=dhcp37
add address-pool=dhcp_pool38 disabled=no interface=VLAN1002-ETH4 lease-time=8h name=dhcp38
add address-pool=dhcp_pool49 disabled=no interface=bridge-wlan lease-time=8h name=dhcp49
/queue tree
add name=queue1 parent=global queue=default
/system logging action
set 3 remote=207.32.225.78
/interface bridge port
add bridge=bridge-mgmt interface=ether1
add bridge=bridge-mgmt interface=ether2
add bridge=bridge-mgmt interface=ether3
add bridge=bridge-mgmt interface=ether4
add bridge=bridge-mgmt interface=ether5
add bridge=bridge-mgmt interface=ether6
add bridge=bridge-mgmt interface=ether7
add bridge=bridge-mgmt interface=ether8
add bridge=bridge-wlan interface=VLAN4094-ETH1-MGMT
add bridge=bridge-wlan interface=VLAN4094-ETH2-MGMT
add bridge=bridge-wlan interface=VLAN4094-ETH3-MGMT
add bridge=bridge-wlan interface=VLAN4094-ETH4-MGMT
/interface ethernet switch vlan
add independent-learning=no ports=ether2 switch=switch1 vlan-id=101
add independent-learning=no ports=ether2 switch=switch1 vlan-id=102
add independent-learning=no ports=ether2 switch=switch1 vlan-id=103
add independent-learning=no ports=ether2 switch=switch1 vlan-id=104
add independent-learning=no ports=ether2 switch=switch1 vlan-id=201
add independent-learning=no ports=ether2 switch=switch1 vlan-id=202
add independent-learning=no ports=ether2 switch=switch1 vlan-id=203
add independent-learning=no ports=ether2 switch=switch1 vlan-id=204
add independent-learning=no ports=ether2 switch=switch1 vlan-id=301
add independent-learning=no ports=ether2 switch=switch1 vlan-id=302
add independent-learning=no ports=ether2 switch=switch1 vlan-id=303
add independent-learning=no ports=ether2 switch=switch1 vlan-id=304
add independent-learning=no ports=ether2 switch=switch1 vlan-id=401
add independent-learning=no ports=ether2 switch=switch1 vlan-id=402
add independent-learning=no ports=ether2 switch=switch1 vlan-id=403
add independent-learning=no ports=ether2 switch=switch1 vlan-id=404
add independent-learning=no ports=ether3 switch=switch1 vlan-id=501
add independent-learning=no ports=ether3 switch=switch1 vlan-id=502
add independent-learning=no ports=ether3 switch=switch1 vlan-id=503
add independent-learning=no ports=ether3 switch=switch1 vlan-id=504
add independent-learning=no ports=ether3 switch=switch1 vlan-id=601
add independent-learning=no ports=ether3 switch=switch1 vlan-id=602
add independent-learning=no ports=ether3 switch=switch1 vlan-id=603
add independent-learning=no ports=ether3 switch=switch1 vlan-id=604
add independent-learning=no ports=ether3 switch=switch1 vlan-id=701
add independent-learning=no ports=ether3 switch=switch1 vlan-id=702
add independent-learning=no ports=ether3 switch=switch1 vlan-id=703
add independent-learning=no ports=ether3 switch=switch1 vlan-id=704
add independent-learning=no ports=ether3 switch=switch1 vlan-id=801
add independent-learning=no ports=ether3 switch=switch1 vlan-id=802
add independent-learning=no ports=ether3 switch=switch1 vlan-id=803
add independent-learning=no ports=ether3 switch=switch1 vlan-id=804
add independent-learning=no ports=ether4 switch=switch1 vlan-id=901
add independent-learning=no ports=ether4 switch=switch1 vlan-id=902
add independent-learning=no ports=ether4 switch=switch1 vlan-id=903
add independent-learning=no ports=ether4 switch=switch1 vlan-id=904
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1001
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1002
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1003
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1004
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1101
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1102
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1103
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1104
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1201
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1202
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1203
add independent-learning=no ports=ether4 switch=switch1 vlan-id=1204
/ip address
add address=38.123.81.92/29 interface=sfp1-gateway-V0339 network=38.123.81.88
add address=10.1.1.1/24 interface=VLAN0101-ETH2 network=10.1.1.0
add address=10.1.2.1/24 interface=VLAN0102-ETH2 network=10.1.2.0
add address=10.1.3.1/24 interface=VLAN0103-ETH2 network=10.1.3.0
add address=10.1.4.1/24 interface=VLAN0104-ETH2 network=10.1.4.0
add address=10.2.1.1/24 interface=VLAN0201-ETH2 network=10.2.1.0
add address=10.2.2.1/24 interface=VLAN0202-ETH2 network=10.2.2.0
add address=10.2.3.1/24 interface=VLAN0203-ETH2 network=10.2.3.0
add address=10.2.4.1/24 interface=VLAN0204-ETH2 network=10.2.4.0
add address=10.3.1.1/24 interface=VLAN0301-ETH2 network=10.3.1.0
add address=10.3.2.1/24 interface=VLAN0302-ETH2 network=10.3.2.0
add address=10.3.3.1/24 interface=VLAN0303-ETH2 network=10.3.3.0
add address=10.3.4.1/24 interface=VLAN0304-ETH2 network=10.3.4.0
add address=10.0.0.250/24 interface=bridge-mgmt network=10.0.0.0
add address=10.40.94.1/24 interface=bridge-wlan network=10.40.94.0
add address=10.4.1.1/24 interface=VLAN0401-ETH2 network=10.4.1.0
add address=10.4.2.1/24 interface=VLAN0402-ETH2 network=10.4.2.0
add address=10.4.3.1/24 interface=VLAN0403-ETH2 network=10.4.3.0
add address=10.4.4.1/24 interface=VLAN0404-ETH2 network=10.4.4.0
add address=10.5.1.1/24 interface=VLAN0501-ETH3 network=10.5.1.0
add address=10.5.2.1/24 interface=VLAN0502-ETH3 network=10.5.2.0
add address=10.5.3.1/24 interface=VLAN0503-ETH3 network=10.5.3.0
add address=10.5.4.1/24 interface=VLAN0504-ETH3 network=10.5.4.0
add address=10.6.1.1/24 interface=VLAN0601-ETH3 network=10.6.1.0
add address=10.6.2.1/24 interface=VLAN0602-ETH3 network=10.6.2.0
add address=10.6.3.1/24 interface=VLAN0603-ETH3 network=10.6.3.0
add address=10.6.4.1/24 interface=VLAN0604-ETH3 network=10.6.4.0
add address=10.7.1.1/24 interface=VLAN0701-ETH3 network=10.7.1.0
add address=10.7.2.1/24 interface=VLAN0702-ETH3 network=10.7.2.0
add address=10.7.3.1/24 interface=VLAN0703-ETH3 network=10.7.3.0
add address=10.7.4.1/24 interface=VLAN0704-ETH3 network=10.7.4.0
add address=10.8.1.1/24 interface=VLAN0801-ETH3 network=10.8.1.0
add address=10.8.2.1/24 interface=VLAN0802-ETH3 network=10.8.2.0
add address=10.8.3.1/24 interface=VLAN0803-ETH3 network=10.8.3.0
add address=10.8.4.1/24 interface=VLAN0804-ETH3 network=10.8.4.0
add address=10.9.1.1/24 interface=VLAN0901-ETH4 network=10.9.1.0
add address=10.9.2.1/24 interface=VLAN0902-ETH4 network=10.9.2.0
add address=10.9.3.1/24 interface=VLAN0903-ETH4 network=10.9.3.0
add address=10.9.4.1/24 interface=VLAN0904-ETH4 network=10.9.4.0
add address=10.10.1.1/24 interface=VLAN1001-ETH4 network=10.10.1.0
add address=10.10.2.1/24 interface=VLAN1002-ETH4 network=10.10.2.0
add address=10.10.3.1/24 interface=VLAN1003-ETH4 network=10.10.3.0
add address=10.10.4.1/24 interface=VLAN1004-ETH4 network=10.10.4.0
add address=10.11.1.1/24 interface=VLAN1101-ETH4 network=10.11.1.0
add address=10.11.2.1/24 interface=VLAN1102-ETH4 network=10.11.2.0
add address=10.11.3.1/24 interface=VLAN1103-ETH4 network=10.11.3.0
add address=10.11.4.1/24 interface=VLAN1104-ETH4 network=10.11.4.0
add address=10.12.1.1/24 interface=VLAN1201-ETH4 network=10.12.1.0
add address=10.12.2.1/24 interface=VLAN1202-ETH4 network=10.12.2.0
add address=10.12.3.1/24 interface=VLAN1203-ETH4 network=10.12.3.0
add address=10.12.4.1/24 interface=VLAN1204-ETH4 network=10.12.4.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=sfp-sfpplus1
/ip dhcp-server network
add address=10.0.0.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.0.0.1 netmask=24
add address=10.1.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.1.1.1 netmask=24
add address=10.1.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.1.2.1 netmask=24
add address=10.1.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.1.3.1 netmask=24
add address=10.1.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.1.4.1 netmask=24
add address=10.2.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.2.1.1 netmask=24
add address=10.2.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.2.2.1 netmask=24
add address=10.2.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.2.3.1 netmask=24
add address=10.2.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.2.4.1 netmask=24
add address=10.3.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.3.1.1 netmask=24
add address=10.3.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.3.2.1 netmask=24
add address=10.3.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.3.3.1 netmask=24
add address=10.3.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.3.4.1 netmask=24
add address=10.4.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.4.1.1 netmask=24
add address=10.4.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.4.2.1 netmask=24
add address=10.4.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.4.3.1 netmask=24
add address=10.4.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.4.4.1 netmask=24
add address=10.5.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.5.1.1 netmask=24
add address=10.5.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.5.2.1 netmask=24
add address=10.5.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.5.3.1 netmask=24
add address=10.5.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.5.4.1 netmask=24
add address=10.6.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.6.1.1 netmask=24
add address=10.6.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.6.2.1 netmask=24
add address=10.6.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.6.3.1 netmask=24
add address=10.6.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.6.4.1 netmask=24
add address=10.7.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.7.1.1 netmask=24
add address=10.7.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.7.2.1 netmask=24
add address=10.7.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.7.3.1 netmask=24
add address=10.7.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.7.4.1 netmask=24
add address=10.8.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.8.1.1 netmask=24
add address=10.8.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.8.2.1 netmask=24
add address=10.8.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.8.3.1 netmask=24
add address=10.8.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.8.4.1 netmask=24
add address=10.9.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.9.1.1 netmask=24
add address=10.9.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.9.2.1 netmask=24
add address=10.9.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.9.3.1 netmask=24
add address=10.9.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.9.4.1 netmask=24
add address=10.10.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.10.1.1 netmask=24
add address=10.10.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.10.2.1 netmask=24
add address=10.10.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.10.3.1 netmask=24
add address=10.10.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.10.4.1 netmask=24
add address=10.11.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.11.1.1 netmask=24
add address=10.11.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.11.2.1 netmask=24
add address=10.11.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.11.3.1 netmask=24
add address=10.11.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.11.4.1 netmask=24
add address=10.12.1.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.12.1.1 netmask=24
add address=10.12.2.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.12.2.1 netmask=24
add address=10.12.3.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.12.3.1 netmask=24
add address=10.12.4.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.12.4.1 netmask=24
add address=10.40.94.0/24 dns-server=8.8.8.8,4.2.2.2 gateway=10.40.94.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,4.2.2.2
/ip firewall address-list
add address=10.0.0.0/8 list=RFC1918
add address=172.16.0.0/12 list=RFC1918
add address=192.168.0.0/16 list=RFC1918
/ip firewall filter
add chain=forward comment="Forward Allow MGMT ICMP" dst-address=10.0.0.0/8 protocol=icmp src-address=10.0.0.0/24
add chain=forward comment="Dish Network SmartBox" dst-address=10.0.0.20 dst-port=443 log=yes protocol=tcp
add chain=forward comment="Forward Accept Related and Established" connection-state=established,related
add action=drop chain=forward comment="Forward Drop Inter VLAN traffic" dst-address=10.0.0.0/8 src-address=10.0.0.0/8
add action=drop chain=forward comment="Forward Drop Invalid" connection-state=invalid
add chain=input comment="Input Accept Related and Established" connection-state=established,related
add chain=input in-interface=bridge-mgmt
add chain=input dst-port=22,8291,8000 in-interface=sfp1-gateway-V0339 protocol=tcp
add action=drop chain=input
/ip firewall nat
add action=masquerade chain=srcnat out-interface=sfp1-gateway-V0339
add action=dst-nat chain=dstnat dst-address=38.123.81.92 dst-port=2016 log=yes protocol=tcp to-addresses=10.0.0.20 to-ports=443
add action=masquerade chain=srcnat dst-address=10.1.1.20 dst-port=2016,443 protocol=tcp src-address-list=RFC1918
add chain=srcnat disabled=yes src-address=0.0.0.0
/ip route
add check-gateway=ping distance=1 gateway=38.123.81.89
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=10.0.0.0/8 port=8000
set api disabled=yes
set api-ssl disabled=yes
/lcd
set backlight-timeout=never default-screen=stat-slideshow
/system clock
set time-zone-name=America/Indiana/Indianapolis
/system identity
set name=SBN-HOF-GW01
/system leds
set 0 interface=sfp-sfpplus1
set 1 interface=sfp-sfpplus1
set 2 interface=sfp1-gateway
/system logging
add action=remote topics=error
/system ntp client
set enabled=yes primary-ntp=207.32.233.1
/system resource irq rps
set sfp-sfpplus1 disabled=no
set sfp1-gateway disabled=no
set ether5 disabled=no
set ether6 disabled=no
set ether7 disabled=no
set ether8 disabled=no
/system routerboard settings
set cpu-frequency=1200MHz memory-frequency=1066DDR protected-routerboot=disabled
/tool graphing interface
add interface=sfp1-gateway
/tool graphing resource
add
/tool romon port
add

############### CRS ####################################

[admin@SBN-HOF-SW06] /interface ethernet> /export hide-sensitive

may/15/2016 17:09:21 by RouterOS 6.35.2

software id = NYIK-0DZ1

/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] name=ether1-master-local
set [ find default-name=ether2 ] master-port=ether1-master-local name=ether2-slave-local
set [ find default-name=ether3 ] master-port=ether1-master-local name=ether3-slave-local
set [ find default-name=ether4 ] master-port=ether1-master-local name=ether4-slave-local
set [ find default-name=ether5 ] master-port=ether1-master-local name=ether5-slave-local
set [ find default-name=ether6 ] master-port=ether1-master-local name=ether6-slave-local
set [ find default-name=ether7 ] master-port=ether1-master-local name=ether7-slave-local
set [ find default-name=ether8 ] master-port=ether1-master-local name=ether8-slave-local
set [ find default-name=ether9 ] master-port=ether1-master-local name=ether9-slave-local
set [ find default-name=ether10 ] master-port=ether1-master-local name=ether10-slave-local
set [ find default-name=ether11 ] master-port=ether1-master-local name=ether11-slave-local
set [ find default-name=ether12 ] master-port=ether1-master-local name=ether12-slave-local
set [ find default-name=ether13 ] master-port=ether1-master-local name=ether13-slave-local
set [ find default-name=ether14 ] master-port=ether1-master-local name=ether14-slave-local
set [ find default-name=ether15 ] master-port=ether1-master-local name=ether15-slave-local
set [ find default-name=ether16 ] master-port=ether1-master-local name=ether16-slave-local
set [ find default-name=ether17 ] master-port=ether1-master-local name=ether17-slave-local
set [ find default-name=ether18 ] master-port=ether1-master-local name=ether18-slave-local
set [ find default-name=ether19 ] master-port=ether1-master-local name=ether19-slave-local
set [ find default-name=ether20 ] master-port=ether1-master-local name=ether20-slave-local
set [ find default-name=ether21 ] master-port=ether1-master-local name=ether21-slave-local
set [ find default-name=ether22 ] master-port=ether1-master-local name=ether22-slave-local
set [ find default-name=ether23 ] master-port=ether1-master-local name=ether23-slave-local
set [ find default-name=ether24 ] master-port=ether1-master-local name=ether24-slave-local
set [ find default-name=sfp1 ] master-port=ether1-master-local name=sfp1-slave-local
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/interface bridge port
add bridge=bridge1 interface=ether1-master-local
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether24-slave-local vlan-id=501
add tagged-ports=ether24-slave-local vlan-id=502
add tagged-ports=ether24-slave-local vlan-id=503
add tagged-ports=ether24-slave-local vlan-id=504
add tagged-ports=ether24-slave-local vlan-id=601
add tagged-ports=ether24-slave-local vlan-id=602
add tagged-ports=ether24-slave-local vlan-id=603
add tagged-ports=ether24-slave-local vlan-id=604
add tagged-ports=ether24-slave-local vlan-id=701
add tagged-ports=ether24-slave-local vlan-id=702
add tagged-ports=ether24-slave-local vlan-id=703
add tagged-ports=ether24-slave-local vlan-id=704
add tagged-ports=ether24-slave-local vlan-id=801
add tagged-ports=ether24-slave-local vlan-id=802
add tagged-ports=ether24-slave-local vlan-id=803
add tagged-ports=ether24-slave-local vlan-id=804
add tagged-ports=ether24-slave-local vlan-id=4094
/interface ethernet switch ingress-port-policer
add meter-unit=packet packet-types=broadcast port=ether3-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether4-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether5-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether6-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether7-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether8-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether9-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether10-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether11-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether12-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether13-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether14-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether15-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether16-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether17-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether18-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether19-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether20-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether21-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether22-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether23-slave-local rate=500
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether3-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether4-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether5-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether6-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether7-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether8-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether9-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether10-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether11-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether12-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether13-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether14-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether15-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether16-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether17-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether18-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether19-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether20-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether21-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether22-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether23-slave-local rate=5k
add meter-unit=packet packet-types=broadcast port=ether2-slave-local rate=500
add meter-unit=packet packet-types=broadcast port=ether1-master-local rate=500
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether2-slave-local rate=5k
add meter-unit=packet packet-types=arp-or-nd,broadcast,unregistered-multicast port=ether1-master-local rate=5k
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=502 ports=ether2-slave-local
add customer-vid=0 new-customer-vid=503 ports=ether3-slave-local
add customer-vid=0 new-customer-vid=504 ports=ether4-slave-local
add customer-vid=0 new-customer-vid=601 ports=ether5-slave-local
add customer-vid=0 new-customer-vid=601 ports=ether5-slave-local
add customer-vid=0 new-customer-vid=602 ports=ether6-slave-local
add customer-vid=0 new-customer-vid=603 ports=ether7-slave-local
add customer-vid=0 new-customer-vid=604 ports=ether8-slave-local
add customer-vid=0 new-customer-vid=701 ports=ether9-slave-local
add customer-vid=0 new-customer-vid=702 ports=ether10-slave-local
add customer-vid=0 new-customer-vid=703 ports=ether11-slave-local
add customer-vid=0 new-customer-vid=704 ports=ether12-slave-local
add customer-vid=0 new-customer-vid=801 ports=ether13-slave-local
add customer-vid=0 new-customer-vid=802 ports=ether14-slave-local
add customer-vid=0 new-customer-vid=803 ports=ether15-slave-local
add customer-vid=0 new-customer-vid=804 ports=ether16-slave-local
add customer-vid=0 new-customer-vid=501 ports=ether1-master-local
add customer-vid=0 new-customer-vid=4094 ports=ether23-slave-local
/interface ethernet switch port
set 0 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 1 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 2 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 3 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 4 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 5 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 6 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 7 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 8 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 9 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 10 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 11 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 12 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 13 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 14 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 15 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 16 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 17 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 18 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 19 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 20 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 21 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 22 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 23 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 24 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
set 25 per-queue-scheduling=wrr-group0:1,wrr-group0:2,wrr-group0:4,wrr-group0:8,wrr-group0:16,wrr-group0:32,wrr-group0:64,wrr-group0:128
/interface ethernet switch vlan
add ports=ether1-master-local,ether24-slave-local vlan-id=501
add ports=ether2-slave-local,ether24-slave-local vlan-id=502
add ports=ether3-slave-local,ether24-slave-local vlan-id=503
add ports=ether4-slave-local,ether24-slave-local vlan-id=504
add ports=ether5-slave-local,ether24-slave-local vlan-id=601
add ports=ether6-slave-local,ether24-slave-local vlan-id=602
add ports=ether7-slave-local,ether24-slave-local vlan-id=603
add ports=ether8-slave-local,ether24-slave-local vlan-id=604
add ports=ether9-slave-local,ether24-slave-local vlan-id=701
add ports=ether10-slave-local,ether24-slave-local vlan-id=702
add ports=ether11-slave-local,ether24-slave-local vlan-id=703
add ports=ether12-slave-local,ether24-slave-local vlan-id=704
add ports=ether13-slave-local,ether24-slave-local vlan-id=801
add ports=ether14-slave-local,ether24-slave-local vlan-id=802
add ports=ether15-slave-local,ether24-slave-local vlan-id=803
add ports=ether16-slave-local,ether24-slave-local vlan-id=804
add ports=ether17-slave-local,ether18-slave-local,ether19-slave-local,ether20-slave-local,ether21-slave-local,ether22-slave-local,ether23-slave-local,ether24-slave-local vlan-id=4094
/ip address
add address=10.0.0.248/24 interface=ether24-slave-local network=10.0.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid interface=bridge1
/ip dns
set servers=8.8.8.8,4.4.4.4
/system clock
set time-zone-name=America/Indiana/Indianapolis
/system identity
set name=SBN-HOF-SW06
/system routerboard settings
set boot-device=flash-boot protected-routerboot=disabled