/interface bridge

add fast-forward=no name=LAN

/interface ipip
add !keepalive local-address=172.21.99.86 name="IPIP Tunnel to Anwar Cement
Factory" remote-address=172.21.99.34
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=dhcp_pool0 ranges=192.168.12.1,192.168.12.3-192.168.12.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=LAN lease-time=8h10m name=dhcp1
/user group
set full
policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff
,sensitive,api,romon,dude,tikapp
/interface bridge port
add interface=ether4
add interface=ether2
add bridge=LAN interface=ether3
add bridge=LAN interface=ether5
add interface=ether1
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface pptp-server server
set enabled=yes
/ip address
add address=115.127.63.18/29 comment=Internet-WAN interface=ether1
network=115.127.63.16
add address=192.168.12.2/24 comment=LAN interface=LAN network=192.168.12.0
add address=172.21.99.86/30 comment=DATA-WAN interface=ether1 network=172.21.99.84
add address=10.10.10.42/30 comment=Tunnel-TO-HQ interface="IPIP Tunnel to Anwar
Cement Factory" network=10.10.10.40
add address=115.127.63.22/29 comment=Internet-WAN interface=ether1
network=115.127.63.16
/ip dhcp-server network
add address=192.168.12.0/24 dns-server=192.168.100.5,192.168.100.4,8.8.8.8
gateway=192.168.12.2
/ip dns
set allow-remote-requests=yes servers=192.168.100.5,192.168.100.4,8.8.8.8
/ip firewall nat
add action=src-nat chain=srcnat src-address=192.168.12.0/24 to-
addresses=115.127.63.22
/ip route
add check-gateway=ping distance=1 gateway=115.127.63.17
add distance=220 gateway=172.21.99.85
add check-gateway=ping distance=1 dst-address=172.21.99.34/32 gateway=172.21.99.85
add check-gateway=ping distance=1 dst-address=192.168.100.0/22 gateway=10.10.10.41
add distance=1 dst-address=192.168.102.0/24 gateway=10.10.10.41
add distance=1 dst-address=192.168.103.0/24 gateway=10.10.10.41
/ip service
set telnet port=232
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/ppp secret
add local-address=192.168.12.2 name=factory password=12345 remote-
address=192.168.12.200
/radius
add address=115.127.71.28 secret=BRACNetCorp service=login
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Dhaka
/system identity
set name="Anwar Cement Factory"
/system logging
add
/system package update
set channel=long-term
/user aaa
set use-radius=yes
[bracnet@Anwar Cement Factory] >