ros code
/interface bridge add admin-mac=4C:5E:0C:43:AC:86 auto-mac=no disabled=yes name=bridge-local add admin-mac=4C:5E:0C:43:AC:89 auto-mac=no l2mtu=1598 name=bridge_lan /interface ethernet set [ find default-name=ether1 ] name=ether1-gateway set [ find default-name=ether6 ] name=ether6-master-local set [ find default-name=ether7 ] master-port=ether6-master-local name=\ ether7-slave-local set [ find default-name=ether8 ] master-port=ether6-master-local name=\ ether8-slave-local set [ find default-name=ether9 ] master-port=ether6-master-local name=\ ether9-slave-local set [ find default-name=ether10 ] master-port=ether6-master-local name=\ ether10-slave-local /ip neighbor discovery set ether1-gateway discover=no /interface vlan add disabled=yes interface=ether2 name=vlan1 vlan-id=10 add disabled=yes interface=ether2 name=vlan2 vlan-id=20 /ip ipsec proposal set [ find default=yes ] enc-algorithms=3des /ip pool add name=default-dhcp ranges=192.168.88.10-192.168.88.254 add name=dhcp_lan_pool ranges=192.168.10.100-192.168.10.200 add name=dhcp_wlan_pool ranges=192.168.20.100-192.168.20.200 add name=vpn_pool ranges=192.168.30.100-192.168.30.200 /ip dhcp-server add address-pool=default-dhcp interface=bridge-local name=default add address-pool=dhcp_lan_pool disabled=no interface=bridge_lan name=dhcp_lan add address-pool=dhcp_wlan_pool disabled=no interface=wlan1 name=dhcp_wlan /interface bridge port add bridge=bridge_lan interface=ether3 add bridge=bridge_lan interface=ether4 add bridge=bridge_lan interface=ether5 add bridge=bridge-local disabled=yes interface=ether6-master-local add bridge=bridge-local disabled=yes interface=sfp1 add bridge=bridge_lan interface=ether2 /interface ethernet switch vlan add disabled=yes ports=ether2,switch1-cpu switch=switch1 vlan-id=10 add disabled=yes ports=ether3,switch1-cpu switch=switch1 vlan-id=20 /ip address add address=192.168.88.1/24 comment="default configuration" disabled=yes \ interface=wlan1 network=192.168.88.0 add address=192.168.10.1/24 interface=bridge_lan network=192.168.10.0 add address=192.168.20.1/24 interface=wlan1 network=192.168.20.0 /ip dhcp-client add comment="default configuration" dhcp-options=hostname,clientid interface=\ ether1-gateway /ip dhcp-server network add address=192.168.10.0/24 comment=lan gateway=192.168.10.1 add address=192.168.20.0/24 comment=wlan gateway=192.168.20.1 add address=192.168.88.0/24 comment="default configuration" gateway=\ 192.168.88.1 /ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4 /ip dns static add address=192.168.88.1 name=router add address=192.168.1.1 name=gw /ip firewall filter add chain=input comment="default configuration" protocol=icmp add chain=input comment="default configuration" connection-state=established add chain=input comment="default configuration" connection-state=related add action=drop chain=input comment="default configuration" in-interface=\ ether1-gateway add chain=forward comment="default configuration" connection-state=\ established add chain=forward comment="default configuration" connection-state=related add action=drop chain=forward comment="default configuration" \ connection-state=invalid add action=drop chain=input dst-port=22 in-interface=pppoe-out1 protocol=tcp add action=drop chain=input dst-port=23 in-interface=pppoe-out1 protocol=tcp add action=drop chain=input dst-port=21 in-interface=pppoe-out1 protocol=tcp add action=drop chain=input dst-port=80 in-interface=pppoe-out1 protocol=tcp /ip firewall nat add action=masquerade chain=srcnat comment="default configuration" disabled=\ yes out-interface=ether1-gateway add action=masquerade chain=srcnat out-interface=pppoe-out1 add action=masquerade chain=srcnat out-interface="(unknown)" /ip traffic-flow set enabled=yes /ip upnp set enabled=yes /ip upnp interfaces add interface=bridge_lan type=external add interface=wlan1 type=external