#        routerboard: yes
#         board-name: hEX lite
#              model: RouterBOARD 750 r2
#      serial-number: 67D207B83D12
#      firmware-type: qca9531L
#   factory-firmware: 3.36
#   current-firmware: 6.44
#   upgrade-firmware: 6.44
# 
#             channel: stable
#   installed-version: 6.44
# 
# Flags: U - undoable, R - redoable, F - floating-undo 
#   ACTION                                   BY               POLICY             
# 
# software id = 6ZVS-I9DQ
#
# model = RouterBOARD 750 r2
# serial number = 67D207B83D12
/interface ethernet
set [ find default-name=ether5 ] disabled=yes
/interface bridge
add name=bridge1
/interface list
add name=WAN
add name=LAN
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.2.50-192.168.2.250
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 name=dhcp1
/snmp community
set [ find default=yes ] addresses=45.225.65.10/32 name=onnet@2017
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether3
/interface list member
add interface=ether1 list=WAN
add interface=bridge1 list=LAN
/ip address
add address=45.225.66.146/30 interface=ether1 network=45.225.66.144
add address=192.168.2.1/24 interface=ether2 network=192.168.2.0
/ip dhcp-server network
add address=192.168.2.0/24 gateway=192.168.2.1 netmask=24
/ip dns
set servers=172.16.20.40,8.8.8.8
/ip firewall filter
add action=accept chain=input disabled=yes dst-address=45.225.66.142 protocol=icmp src-address=172.16.20.50
add action=accept chain=input disabled=yes dst-address=45.225.66.142 protocol=icmp src-address=45.225.64.0/22
add action=accept chain=input disabled=yes in-interface=ether1 src-address=45.225.64.0/22
add action=accept chain=input disabled=yes src-address=192.168.2.0/24
add action=accept chain=forward disabled=yes src-address=192.168.2.0/24
add action=drop chain=input disabled=yes in-interface=ether1 log-prefix=FW
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add distance=1 gateway=45.225.66.145
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=45.225.64.0/22,192.168.0.0/16
set ssh address=45.225.65.10/32 port=2222
set api disabled=yes
set winbox port=25000
set api-ssl disabled=yes
/snmp
set enabled=yes
/system clock
set time-zone-name=America/Sao_Paulo
/system identity
set name=Monteiro