Here's the most important from RB2011
*Bridges dont use IP firewall
/interface bridge
add arp=disabled name=BridgeGuest
add name=BridgeLAN
/interface ethernet
set [ find default-name=sfp1 ] disabled=yes name=SFP1
set [ find default-name=ether1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-full
set [ find default-name=ether2 ] advertise=10M-half,1000M-full \
speed=100Mbps
set [ find default-name=ether3 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-full
set [ find default-name=ether4 ] advertise=100M-full,1000M-full
set [ find default-name=ether5 ] advertise=1000M-full \
speed=100Mbps
set [ find default-name=ether6 ] rx-flow-control=auto \
tx-flow-control=auto
set [ find default-name=ether7 ] advertise=100M-full \
rx-flow-control=auto tx-flow-control=auto
set [ find default-name=ether8 ] rx-flow-control=auto \
tx-flow-control=auto
set [ find default-name=ether9 ] advertise=100M-full \
rx-flow-control=auto tx-flow-control=auto
set [ find default-name=ether10 ] advertise=100M-full \
rx-flow-control=auto tx-flow-control=auto
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether4 keepalive-timeout=60 \
max-mru=1492 max-mtu=1492 name=pppoe-internet use-peer-dns=yes user=
/interface vlan
add arp=disabled interface=ether5 name=vlan100 vlan-id=100
/ip pool
add name=poolBridgeLAN ranges=10.0.0.100-10.0.0.125
add name=poolGuest ranges=192.168.190.2-192.168.190.20
/ip dhcp-server
add address-pool=poolBridgeLAN bootp-lease-time=lease-time bootp-support=\
dynamic disabled=no interface=BridgeLAN lease-time=4w2d name=\
dhcp-BridgeLAN
add add-arp=yes address-pool=poolGuest always-broadcast=yes bootp-lease-time=\
lease-time bootp-support=dynamic disabled=no interface=BridgeGuest \
lease-time=4w2d name=dhcp-BridgeGuest
/interface bridge port
add bridge=BridgeLAN interface=ether2
add bridge=BridgeLAN interface=ether3
add bridge=BridgeLAN interface=ether5
add bridge=BridgeLAN interface=ether1
add bridge=BridgeLAN hw=no interface=ether7
add bridge=BridgeLAN hw=no interface=ether6
add bridge=BridgeGuest interface=vlan100
/interface bridge settings
set use-ip-firewall-for-pppoe=yes use-ip-firewall-for-vlan=yes
/ip address
add address=10.0.0.1/25 interface=BridgeLAN network=10.0.0.0
add address=192.168.1.100/24 interface=ether4 network=192.168.1.0
add address=192.168.190.0/24 interface=BridgeGuest network=192.168.190.0