# oct/17/2020 10:14:11 by RouterOS 6.45.6
# software id = HAA2-EDXW
#
# model = RouterBOARD 941-2nD
# serial number = 7CE30722EEBE
/interface bridge
add name=bridge-lan
/interface ethernet
set [ find default-name=ether1 ] comment=dovod-mt-otroska-ether4
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] disabled=yes
/interface vlan
add interface=bridge-lan name=mgmt vlan-id=99
/interface ethernet switch port
set 0 vlan-header=add-if-missing vlan-mode=secure
set 3 default-vlan-id=301 vlan-header=always-strip vlan-mode=secure
set 4 vlan-mode=secure
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=tosic \
    supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=leal \
    supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=auto \
    supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=guest \
    supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] amsdu-limit=2048 antenna-gain=2 band=2ghz-b/g/n channel-width=20/40mhz-eC \
    country=slovenia distance=indoors frequency=2437 frequency-mode=regulatory-domain installation=indoor mode=\
    ap-bridge multicast-helper=disabled name=wlan-mgmt radio-name=mt-dnevna security-profile=leal ssid=itsMGMT \
    tx-power-mode=all-rates-fixed vlan-id=99 vlan-mode=use-tag wmm-support=enabled wps-mode=disabled
add keepalive-frames=disabled mac-address=66:D1:54:4C:FF:71 master-interface=wlan-mgmt multicast-buffering=\
    disabled multicast-helper=disabled name=wlan-tosic security-profile=tosic ssid=itsHOME vlan-id=11 vlan-mode=\
    use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add keepalive-frames=disabled mac-address=66:D1:54:4C:FF:6F master-interface=wlan-mgmt multicast-buffering=\
    disabled multicast-helper=disabled name=wlan-auto security-profile=auto ssid=itsAUTO vlan-id=101 vlan-mode=\
    use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add keepalive-frames=disabled mac-address=66:D1:54:4C:FF:70 master-interface=wlan-mgmt multicast-buffering=\
    disabled multicast-helper=disabled name=wlan-guest security-profile=guest ssid=itsGUEST vlan-id=201 \
    vlan-mode=use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add keepalive-frames=disabled mac-address=66:D1:54:4C:FF:6E master-interface=wlan-mgmt multicast-buffering=\
    disabled multicast-helper=disabled name=wlan-leal security-profile=leal ssid=its vlan-id=12 vlan-mode=use-tag \
    wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/interface bridge port
add bridge=bridge-lan interface=wlan-mgmt unknown-multicast-flood=no
add bridge=bridge-lan interface=wlan-leal unknown-multicast-flood=no
add bridge=bridge-lan interface=wlan-auto unknown-multicast-flood=no
add bridge=bridge-lan interface=wlan-guest unknown-multicast-flood=no
add bridge=bridge-lan interface=wlan-tosic unknown-multicast-flood=no
add bridge=bridge-lan interface=ether1
add bridge=bridge-lan interface=ether2
add bridge=bridge-lan interface=ether3
add bridge=bridge-lan interface=ether4
/interface ethernet switch vlan
add ports=ether1,switch1-cpu switch=switch1 vlan-id=99
add ports=ether1,switch1-cpu switch=switch1 vlan-id=101
add ports=ether1,switch1-cpu switch=switch1 vlan-id=11
add ports=ether1,switch1-cpu switch=switch1 vlan-id=12
add ports=ether1,switch1-cpu switch=switch1 vlan-id=201
add ports=ether1,ether4,switch1-cpu switch=switch1 vlan-id=301
/ip address
add address=192.168.99.250/24 interface=mgmt network=192.168.99.0
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip route
add distance=1 gateway=192.168.99.254
/system clock
set time-zone-name=Europe/Ljubljana
/system identity
set name=mt-dnevna