Mon Jul 22, 2019 9:49 am
# model = 2011iL
# serial number = 762507C3378A
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] name=ether1WAN1
set [ find default-name=ether2 ] name=ether2WAN2
set [ find default-name=ether9 ] name=ether9LANlocal
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=pool1 ranges=192.168.1.2-192.168.1.254
/ip dhcp-server
add address-pool=pool1 disabled=no interface=bridge1 name=server1
/interface bridge port
add bridge=bridge1 interface=ether9LANlocal
/ip address
add address=192.168.2.99/24 interface=ether1WAN1 network=192.168.2.0
add address=192.168.3.99/24 interface=ether2WAN2 network=192.168.3.0
add address=192.168.1.1/24 interface=ether9LANlocal network=192.168.1.0
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.1.1 \
netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat
/ip route
add check-gateway=ping distance=1 gateway=8.8.8.8 routing-mark=ISP1
add check-gateway=ping distance=2 gateway=208.67.222.222 routing-mark=ISP1
add check-gateway=ping distance=1 gateway=208.67.222.222 routing-mark=ISP2
add check-gateway=ping distance=2 gateway=8.8.8.8 routing-mark=ISP2
add distance=1 dst-address=8.8.8.8/32 gateway=192.168.2.1 scope=10
add distance=1 dst-address=208.67.222.222/32 gateway=192.168.3.1 scope=10
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=Europe/Rome