# jan/02/1970 08:20:58 by RouterOS 6.47.9

/interface bridge
add name=bridge-LAN

/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN1
set [ find default-name=ether2 ] name=ether2-WAN2
set [ find default-name=ether3 ] name=ether3-LAN

/interface vlan
add interface=ether3-LAN name="vlan 33 BH" vlan-id=33

/ip pool
add name="BH Pool" ranges=30.0.0.20-30.0.0.254
add name="LAN Pool" ranges=50.0.0.50-50.0.0.254
add name="PPPoE pool" ranges=60.0.0.20-60.0.0.254

/ip dhcp-server
add address-pool="LAN Pool" disabled=no interface=bridge-LAN lease-time=1d \
    name="LAN dhcp"
    
/interface bridge port
add bridge=bridge-LAN interface=ether3-LAN

/ip address
add address=50.0.0.1/24 interface=bridge-LAN network=50.0.0.0
add address=30.0.0.1/24 interface="vlan 33 BH" network=30.0.0.0

/ip dhcp-client
add add-default-route=no disabled=no interface=ether2-WAN2 use-peer-dns=no \
    use-peer-ntp=no
add add-default-route=no disabled=no interface=ether1-WAN1 use-peer-dns=no \
    use-peer-ntp=no

/ip dhcp-server network
add address=30.0.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=30.0.0.1
add address=50.0.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=50.0.0.1

/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8,8.8.4.4

/ip firewall filter
add action=drop chain=output comment="==================================DUAL W\
    AN RECURSIVE ROUTE TEST(always off)" disabled=yes dst-address=8.8.8.8 \
    protocol=icmp
add action=drop chain=output disabled=yes dst-address=8.8.4.4 protocol=icmp
add action=accept chain=prerouting in-interface=ether1-WAN1
add action=accept chain=prerouting in-interface=ether2-WAN2

/ip firewall mangle
add action=accept chain=prerouting in-interface=ether1-WAN1
add action=accept chain=prerouting in-interface=ether2-WAN2
add action=mark-connection chain=prerouting comment="=====PCC 30Mbps/10Mbps" \
    dst-address-type=!local in-interface=bridge-LAN new-connection-mark=\
    ISP1-M-conn passthrough=yes per-connection-classifier=both-addresses:4/0
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=bridge-LAN new-connection-mark=ISP1-M-conn passthrough=yes \
    per-connection-classifier=both-addresses:4/1
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=bridge-LAN new-connection-mark=ISP1-M-conn passthrough=yes \
    per-connection-classifier=both-addresses:4/2
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=bridge-LAN new-connection-mark=ISP2-M-conn passthrough=yes \
    per-connection-classifier=both-addresses:4/3 priority=0
add action=mark-routing chain=prerouting connection-mark=ISP1-M-conn \
    in-interface=bridge-LAN new-routing-mark=ISP1-out passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP2-M-conn \
    in-interface=bridge-LAN new-routing-mark=ISP2-out passthrough=yes
add action=mark-routing chain=output connection-mark=ISP1-M-conn \
    new-routing-mark=ISP1-out passthrough=yes
add action=mark-routing chain=output connection-mark=ISP2-M-conn \
    new-routing-mark=ISP2-out passthrough=yes

/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1-WAN1
add action=masquerade chain=srcnat out-interface=ether2-WAN2

/ip route
add check-gateway=ping distance=1 gateway=8.8.8.8 routing-mark=ISP1-out \
    target-scope=30
add distance=2 gateway=192.168.4.1 routing-mark=ISP1-out
add check-gateway=ping distance=1 gateway=8.8.4.4 routing-mark=ISP2-out \
    target-scope=30
add distance=2 gateway=192.168.0.1 routing-mark=ISP2-out
add check-gateway=ping distance=1 dst-address=8.8.4.4/32 gateway=192.168.4.1
add check-gateway=ping distance=1 dst-address=8.8.8.8/32 gateway=192.168.0.1

/tool netwatch
add host=8.8.4.4 interval=12s timeout=400ms
add host=8.8.8.8 interval=12s timeout=400ms