/interface ethernet
set [ find default-name=sfp-sfpplus1 ] advertise=10000M-full \
    auto-negotiation=no l2mtu=9014 mtu=9014 name=NAS rx-flow-control=on \
    tx-flow-control=on
set [ find default-name=ether1 ] auto-negotiation=no
set [ find default-name=ether2 ] advertise=1000M-full auto-negotiation=no
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] speed=100Mbps
set [ find default-name=ether7 ] speed=100Mbps
set [ find default-name=ether8 ] speed=100Mbps
set [ find default-name=ether9 ] speed=100Mbps
set [ find default-name=ether10 ] auto-negotiation=no
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether10 name=Biznet \
    use-peer-dns=yes user=12345678
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_hotspot ranges=10.8.8.2-10.8.8.254
add name=dhcp_monster ranges=10.9.9.2-10.9.9.254
add name=dhcp_nas ranges=10.10.10.2-10.10.10.254
/ip dhcp-server
add add-arp=yes address-pool=dhcp_hotspot always-broadcast=yes disabled=no \
    interface=ether1 name=Hotspot
add add-arp=yes address-pool=dhcp_monster always-broadcast=yes disabled=no \
    interface=ether2 name=Monster
add add-arp=yes address-pool=dhcp_nas always-broadcast=yes disabled=no \
    interface=NAS name=NAS
/interface bridge settings
set allow-fast-path=no
/ip firewall connection tracking
set enabled=yes
/ip settings
set tcp-syncookies=yes
/ip address
add address=10.8.8.1/24 interface=ether1 network=10.8.8.0
add address=10.9.9.1/24 interface=ether2 network=10.9.9.0
add address=10.10.10.1/24 interface=NAS network=10.10.10.0
/ip dhcp-server network
add address=10.8.8.0/24 dns-server=10.8.8.1 gateway=10.8.8.1
add address=10.9.9.0/24 dns-server=10.9.9.1 gateway=10.9.9.1
add address=10.10.10.0/24 dns-server=10.10.10.1 gateway=10.10.10.1
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=\
    established,related
add action=accept chain=forward connection-state=established,related
/ip firewall mangle
add action=change-mss chain=forward comment="Normalize MTU for IndiHome" \
    new-mss=1492 out-interface=Biznet passthrough=yes protocol=tcp tcp-flags=\
    syn tcp-mss=1493-65535
add action=change-mss chain=forward in-interface=Biznet new-mss=1492 \
    passthrough=yes protocol=tcp tcp-flags=syn tcp-mss=1493-65535
/ip firewall nat
add action=masquerade chain=srcnat out-interface=Biznet src-address=\
    10.8.8.0/24
add action=masquerade chain=srcnat out-interface=Biznet src-address=\
    10.9.9.0/24
add action=masquerade chain=srcnat out-interface=Biznet src-address=\
    10.8.8.0/24
add action=masquerade chain=srcnat out-interface=Biznet src-address=\
    10.9.9.0/24
add action=masquerade chain=srcnat out-interface=Biznet src-address=\
    10.10.10.0/24
/ip route
add check-gateway=ping comment=NAS disabled=yes distance=1 dst-address=\
    10.10.10.0/24 gateway=ether1
add check-gateway=ping comment=NAS disabled=yes distance=1 dst-address=\
    10.10.10.0/24 gateway=ether2
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=ether1 type=internal
add interface=Biznet type=external
add interface=NAS type=internal
/system clock
set time-zone-name=Asia/Jakarta
/system identity
set name=Sentinel
/system logging
add topics=pppoe
add topics=debug
/system ntp client
set enabled=yes primary-ntp=211.233.40.78 secondary-ntp=202.156.0.34