Without seeing what your configuration is, we are guessing. Please post a sanitized version of your your configuration. To export and paste your configuration (and I'm assuming you are using WebFig or Winbox), open a terminal window, and type (without the quotes) "/export hide-sensitive file=any-filename-you-wish". Then open the files section and right click on the filename you created and select download in order to download the file to your computer. It will be a text file with whatever name you saved to with an extension of .rsc. Suggest you then open the .rsc file in your favorite text editor and redact any sensitive information. Then in your message here, click the code display icon in the toolbar above the text entry (the code display icon is the 7th one from the left and looks like a square with a blob in the middle). Then paste the text from the file in between the two code words in brackets.
Thank you for your reply.
I attached my configurations below.
# aug/27/2022 09:16:06 by RouterOS 7.4.1
# software id = S77I-JIVN
#
# model = RBD52G-5HacD2HnD
# serial number =
/interface bridge
add admin-mac=C4:AD:34:87:DC:30 arp=reply-only auto-mac=no comment=defconf \
name=bridge
/interface wireless
set [ find default-name=wlan1 ] disabled=no hide-ssid=yes mode=ap-bridge \
ssid=Jay wireless-protocol=802.11
set [ find default-name=wlan2 ] disabled=no hide-ssid=yes mode=ap-bridge \
ssid=Jay wireless-protocol=802.11
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
mode=dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=dhcp2 ranges=10.1.2.101-10.1.2.150
add name=dhcp next-pool=dhcp2 ranges=10.1.1.101-10.1.1.150
/ip dhcp-server
add add-arp=yes address-pool=dhcp interface=bridge lease-time=10h name=dhcp1
/routing bgp template
set default disabled=no output.network=bgp-networks
/routing ospf instance
add disabled=no name=default-v2
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
sword,web,sniff,sensitive,api,romon,dude,rest-api"
/interface bridge port
add bridge=bridge comment=defconf disabled=yes ingress-filtering=no \
interface=ether1
add bridge=bridge comment=defconf ingress-filtering=no interface=ether2
add bridge=bridge comment=defconf ingress-filtering=no interface=ether3
add bridge=bridge comment=defconf ingress-filtering=no interface=ether4
add bridge=bridge comment=defconf ingress-filtering=no interface=ether5
add bridge=bridge ingress-filtering=no interface=wlan2
add bridge=bridge ingress-filtering=no interface=wlan1
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=ether1 list=WAN
add interface=bridge list=LAN
/interface ovpn-server server
set auth=sha1,md5
/interface pptp-server server
# PPTP connections are considered unsafe, it is suggested to use a more modern VPN protocol instead
set enabled=yes
/interface wireless cap
set bridge=bridge caps-man-addresses=10.1.1.1 discovery-interfaces=bridge \
interfaces=wlan1,wlan2
/ip address
add address=10.1.1.1/24 interface=bridge network=10.1.1.0
add address=10.12.13.33/24 interface=ether1 network=10.12.13.0
add address=10.1.2.1/24 interface=bridge network=10.1.2.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=10.1.1.0/24 gateway=10.1.1.1 netmask=24
/ip dns
set servers=10.12.11.222,8.8.8.8
/ip firewall filter
add action=reject chain=forward dst-address=10.12.11.210 reject-with=\
icmp-network-unreachable
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=dst-nat chain=dstnat dst-address=10.12.13.33 dst-port=3389 \
protocol=tcp to-addresses=10.1.1.11 to-ports=3389
/ip firewall service-port
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.12.13.2 pref-src=\
0.0.0.0 routing-table=main scope=30 suppress-hw-offload=no target-scope=\
10
/ppp secret
add name=jay
/system clock
set time-zone-name=Asia/Bangkok