/interface ethernet set 0 name=ether1-gateway set 1 name=ether2-master-local set 2 master-port=ether2-master-local name=ether3-slave-local set 3 master-port=ether2-master-local name=ether4-slave-local set 4 master-port=ether2-master-local name=ether5-slave-local /interface vlan add interface=ether1-gateway name=vlan1074 vlan-id=1074 add interface=ether2-master-local name=vlan1074lan vlan-id=1074 /ip pool add name=dhcp ranges=192.168.1.201-192.168.1.249 add name=vpn ranges=192.168.3.10-192.168.3.20 add name=voip ranges=192.168.4.10-192.168.4.12 /ip dhcp-server add address-pool=dhcp disabled=no interface=ether2-master-local lease-time=1d \ name=dhcp1 add address-pool=voip disabled=no interface=vlan1074lan lease-time=1d name=\ dhcp2 /ppp profile set 1 dns-server=192.168.3.250 local-address=192.168.3.250 remote-address=vpn /interface pptp-server server set authentication=mschap2 enabled=yes /ip address add address=192.168.1.1/24 interface=ether2-master-local add address=192.168.100.10/24 interface=ether1-gateway add address=192.168.4.1/24 interface=vlan1074lan /ip dhcp-client add add-default-route=yes disabled=no interface=vlan1074 use-peer-ntp=no /ip dhcp-server network add address=192.168.1.0/24 dns-server=192.168.1.1 gateway=192.168.1.1 add address=192.168.4.0/24 dns-server=192.168.4.1 gateway=192.168.4.1 /ip dns set allow-remote-requests=yes /ip dns static add address=192.168.1.1 name=router add address=192.168.4.1 name=routervlan /ip firewall filter add chain=input comment="default configuration" protocol=icmp add chain=input comment="default configuration" connection-state=established add chain=input comment="default configuration" connection-state=related add chain=input disabled=yes dst-port=23,80 in-interface=vlan1074 protocol=\ tcp add chain=input dst-port=8291 in-interface=vlan1074 protocol=tcp add chain=input dst-port=1723 in-interface=vlan1074 protocol=tcp add action=drop chain=input comment="default configuration" in-interface=\ vlan1074 add chain=forward comment="default configuration" connection-state=\ established add chain=forward comment="default configuration" connection-state=related add action=drop chain=forward comment="default configuration" \ connection-state=invalid /ip firewall nat add action=masquerade chain=srcnat comment="default configuration" \ out-interface=vlan1074 add action=masquerade chain=srcnat comment="default configuration" \ out-interface=ether1-gateway add action=masquerade chain=srcnat disabled=yes out-interface=vlan1074lan add action=masquerade chain=srcnat disabled=yes out-interface=\ ether2-master-local add action=dst-nat chain=dstnat disabled=yes dst-port=80 in-interface=\ vlan1074 protocol=tcp to-addresses=192.168.1.125 add action=dst-nat chain=dstnat disabled=yes dst-port=21 in-interface=\ vlan1074 protocol=tcp to-addresses=192.168.1.125 /ip route add distance=255 gateway=255.255.255.255 /ip upnp set enabled=yes /ip upnp interfaces add interface=ether2-master-local type=internal add interface=vlan1074 type=external /system clock set time-zone-name=Europe/Madrid /system ntp client set enabled=yes primary-ntp=163.117.202.33 secondary-ntp=89.248.104.162