# feb/23/2026 11:38:13 by RouterOS 6.49.15
# software id = FM63-EBFC
#
# model = 2011UiAS-2HnD
# serial number = 5E6D057D6D6C
/interface bridge
add name=BR-VPN-QUAR
add name=LAN-Bridge
add name=Loopback-Softify-Test
add name=PPTP-Clients
add name=Public_IP-WAN_Bridge
add name=loopback
/interface ethernet
set [ find default-name=ether1 ] name=ether1-UPlink-Shahjadpur-3
set [ find default-name=ether2 ] name=ether2-Public-Interface
set [ find default-name=ether3 ] name=ether3-Public-Interface
set [ find default-name=ether4 ] name=ether4-To-TestBed-SW
set [ find default-name=ether5 ] name=ether5-Mosiur-PC
set [ find default-name=ether6 ] name=ether6-LAN-Interface
set [ find default-name=ether7 ] name=ether7-LAN-Interface
set [ find default-name=ether8 ] name=ether8-LAN-Interface
set [ find default-name=ether9 ] name=\
    ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23
set [ find default-name=ether10 ] name=ether10-LAN-Interface
/interface gre
add disabled=yes dont-fragment=inherit local-address=163.53.151.2 mtu=1326 \
    name=Test-GRE-Tunnel remote-address=10.20.30.14
add disabled=yes local-address=163.53.151.2 mtu=1426 name=gre-CHR \
    remote-address=118.67.212.21
add local-address=163.53.151.2 name=gre-tunnel-Cloud-Wifi-iDRAC \
    remote-address=118.67.220.34
/interface eoip
add mac-address=02:24:D1:15:90:51 name=EoIP-For-Cloud-Wifi-To-MGT-SW \
    remote-address=118.67.220.34 tunnel-id=1002
/interface vlan
add disabled=yes interface=ether4-To-TestBed-SW name=VLAN-TestBed-1010 \
    vlan-id=1010
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=\
    Cloud-Wifi-Security-Profile supplicant-identity="" wpa2-pre-shared-key=\
    M3gh3r-T0r0ng0-B@rta
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=bangladesh disabled=\
    no frequency=2462 installation=indoor mode=ap-bridge security-profile=\
    Cloud-Wifi-Security-Profile ssid=cloud wps-mode=push-button-virtual-only
/ip dhcp-server
add disabled=no interface=PPTP-Clients lease-time=1h name=dhcp2
add disabled=no lease-time=1h name=dhcp3
add disabled=no interface=ether5-Mosiur-PC lease-time=1h name=dhcp4
add disabled=no interface=sfp1 lease-time=1h name=dhcp5
add disabled=no lease-time=1h name=dhcp6
/ip pool
add name=dhcp_pool0 ranges=10.100.200.20-10.100.200.254
add name=dhcp_pool1 ranges=10.100.200.20-10.100.200.254
add name=Pool-Quar ranges=10.10.10.0/24
add name=hs-pool-30 ranges=10.10.10.2-10.10.10.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=LAN-Bridge name=dhcp1
add address-pool=hs-pool-30 disabled=no interface=BR-VPN-QUAR lease-time=1h \
    name=dhcp7
/ppp profile
add bridge=BR-VPN-QUAR bridge-learning=yes dns-server=10.10.10.1 \
    local-address=10.10.10.1 name=prof-quar remote-address=Pool-Quar
/interface bridge port
add bridge=Public_IP-WAN_Bridge interface=ether2-Public-Interface
add bridge=Public_IP-WAN_Bridge interface=ether3-Public-Interface
add bridge=Public_IP-WAN_Bridge interface=ether4-To-TestBed-SW
add bridge=Public_IP-WAN_Bridge interface=ether5-Mosiur-PC
add bridge=Public_IP-WAN_Bridge interface=ether1-UPlink-Shahjadpur-3
add bridge=LAN-Bridge interface=wlan1
add bridge=LAN-Bridge interface=\
    ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23
add bridge=LAN-Bridge interface=ether7-LAN-Interface
add bridge=LAN-Bridge interface=ether8-LAN-Interface
add bridge=LAN-Bridge interface=ether10-LAN-Interface
/ip firewall connection tracking
set enabled=yes
/interface l2tp-server server
set default-profile=default
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=prof-quar \
    enabled=yes
/interface wireless cap
set interfaces=wlan1
/ip address
add address=163.53.151.2/29 interface=Public_IP-WAN_Bridge network=\
    163.53.151.0
add address=10.100.200.1/24 interface=LAN-Bridge network=10.100.200.0
add address=10.255.255.1/30 interface=\
    ether9-To-Meeting-Room-From-C15-To-A22-Testbed-C23 network=10.255.255.0
add address=10.12.13.2/30 interface=EoIP-For-Cloud-Wifi-To-MGT-SW network=\
    10.12.13.0
add address=172.16.10.1/24 interface=ether5-Mosiur-PC network=172.16.10.0
add address=10.10.10.1/24 interface=BR-VPN-QUAR network=10.10.10.0
add address=10.100.200.15/24 disabled=yes interface=\
    EoIP-For-Cloud-Wifi-To-MGT-SW network=10.100.200.0
add address=10.222.10.2/30 interface=gre-CHR network=10.222.10.0
/ip arp
add address=10.100.200.182 interface=LAN-Bridge mac-address=F4:A9:97:DD:9F:75
/ip dhcp-server lease
add address=10.100.200.182 client-id=1:f4:a9:97:dd:9f:75 mac-address=\
    F4:A9:97:DD:9F:75 server=dhcp1
add address=10.100.200.252 client-id=1:6c:3b:6b:cf:d5:cc mac-address=\
    6C:3B:6B:CF:D5:CC server=dhcp1
add address=10.100.200.175 mac-address=B4:2E:99:16:BC:4C server=dhcp1
/ip dhcp-server network
add address=10.5.50.0/24 comment="hotspot network" gateway=10.5.50.1
add address=10.10.10.0/24 comment="hotspot network" gateway=10.10.10.1
add address=10.100.200.0/24 dns-server=8.8.8.8 gateway=10.100.200.1
add address=10.202.201.0/24 comment="hotspot network" gateway=10.202.201.1
add address=172.16.10.0/24 comment="hotspot network" gateway=172.16.10.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1
/ip firewall address-list
add address=10.100.200.0/24 list=DHCP-Pool
add address=163.53.149.35 list=DHCP-Pool
add address=10.100.200.175 list=10.100.200-Reach-ACL
add address=10.100.200.182 list=10.100.200-Reach-ACL
/ip firewall filter
add action=accept chain=forward src-address=10.100.200.0/24
add action=accept chain=input comment="Allow GRE" protocol=gre
/ip firewall mangle
add action=mark-routing chain=prerouting dst-address=118.67.220.34 dst-port=\
    1723 new-routing-mark=pptp-traffic passthrough=yes protocol=tcp \
    src-address-list=DHCP-Pool
add action=mark-routing chain=prerouting dst-address=118.67.220.34 \
    new-routing-mark=pptp-traffic passthrough=yes protocol=gre \
    src-address-list=DHCP-Pool
add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes \
    protocol=tcp tcp-flags=syn
/ip firewall nat
add action=src-nat chain=srcnat disabled=yes src-address=10.20.30.14 \
    to-addresses=103.209.42.105
add action=accept chain=srcnat dst-address=118.67.220.34 dst-port=1723 \
    protocol=tcp
add action=accept chain=srcnat dst-address=118.67.220.34 protocol=gre
add action=src-nat chain=srcnat comment=\
    "NAT Rule for Reaching 10.100.200.X using iDRAC VPN" dst-address-list=\
    10.100.200-Reach-ACL src-address=10.12.13.1 to-addresses=10.100.200.1
add action=masquerade chain=srcnat out-interface=Public_IP-WAN_Bridge \
    src-address-list="" to-addresses=163.53.151.2
/ip route
add check-gateway=ping distance=1 gateway=10.12.13.1 routing-mark=\
    pptp-traffic
add check-gateway=ping distance=1 gateway=163.53.151.1
add check-gateway=ping distance=1 dst-address=10.200.200.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
add disabled=yes distance=10 dst-address=118.67.220.34/32 gateway=10.12.13.1
add check-gateway=ping disabled=yes distance=1 dst-address=118.67.220.34/32 \
    gateway=10.12.13.1
add distance=1 dst-address=192.168.10.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
add check-gateway=ping distance=1 dst-address=192.168.12.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
add check-gateway=ping distance=1 dst-address=192.168.20.0/24 gateway=\
    10.12.13.1
add check-gateway=ping distance=1 dst-address=192.168.25.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.104.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.105.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.106.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.109.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
add distance=1 dst-address=192.168.110.0/24 gateway=\
    gre-tunnel-Cloud-Wifi-iDRAC
/ip service
set telnet disabled=yes port=12312
set ftp disabled=yes
set www port=7980
set ssh port=7900
set api disabled=yes
set api-ssl disabled=yes
/lcd interface pages
set 0 interfaces="sfp1,ether1-UPlink-Shahjadpur-3,ether2-Public-Interface,ethe\
    r3-Public-Interface,ether4-To-TestBed-SW,ether5-Mosiur-PC,ether6-LAN-Inter\
    face,ether7-LAN-Interface,ether8-LAN-Interface,ether9-To-Meeting-Room-From\
    -C15-To-A22-Testbed-C23,ether10-LAN-Interface"
/ppp aaa
set use-radius=yes
/ppp secret
add name=silvarno password=123Rashik456
/radius
add address=163.53.151.4 secret=testing123 service=ppp
/system clock
set time-zone-name=Asia/Dhaka
/system identity
set name=Cloud-Wifi
/tool sniffer
set file-limit=10000KiB file-name=Test-WAN-VPN-14-01-26 filter-interface=all \
    filter-port=47 memory-limit=1000KiB
/user aaa
set use-radius=yes