#        routerboard: yes
#         board-name: hAP ac
#              model: RouterBOARD 962UiGS-5HacT2HnT
#      serial-number: 673706FE47BB
#      firmware-type: qca9550L
#   factory-firmware: 3.31
#   current-firmware: 6.46
#   upgrade-firmware: 6.46
# 
#             channel: stable
#   installed-version: 6.46
# 
# Flags: U - undoable, R - redoable, F - floating-undo 
#   ACTION                                   BY               POLICY             
# 
# software id = BJZX-XMI3
#
# model = RouterBOARD 962UiGS-5HacT2HnT
# serial number = 673706FE47BB
/interface bridge
add name=br_lan protocol-mode=none
add name=br_robert protocol-mode=none
add name=br_server protocol-mode=none
add name=br_voip protocol-mode=none
/interface wireless
# managed by CAPsMAN
# channel: 2412/20/gn(10dBm), SSID: wifis.org/ke/bertling, CAPsMAN forwarding
set [ find default-name=wlan1 ] ssid=MikroTik
# managed by CAPsMAN
# channel: 5180/20/ac(20dBm), SSID: wifis.org/ke/bertling, CAPsMAN forwarding
set [ find default-name=wlan2 ] ssid=MikroTik
/interface vlan
add interface=br_lan name=vlan1 vlan-id=1
add interface=br_lan name=vlan10 vlan-id=10
add interface=br_lan name=vlan42 vlan-id=42
add interface=br_lan name=vlan60 vlan-id=60
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=br_lan interface=sfp1
add bridge=br_voip interface=ether2
add bridge=br_robert interface=vlan42
add bridge=br_server interface=vlan10
add bridge=br_server interface=ether3
add bridge=br_voip interface=vlan60
/interface wireless cap
# 
set caps-man-addresses=172.24.1.97 enabled=yes interfaces=wlan1,wlan2
/ip address
add address=172.24.1.93/24 interface=vlan1 network=172.24.1.0
add address=172.24.42.93/24 interface=vlan42 network=172.24.42.0
add address=172.24.10.93/24 interface=vlan10 network=172.24.10.0
/ip dns
set servers=172.24.10.11,172.24.10.12
/ip route
add distance=1 gateway=172.24.1.1
/ip ssh
set forwarding-enabled=remote
/ipv6 nd
set [ find default=yes ] advertise-dns=no
/system clock
set time-zone-name=Europe/Berlin
/system identity
set name=mt-eg
/system ntp client
set enabled=yes primary-ntp=172.24.10.11 secondary-ntp=172.24.10.12
/tool romon
set enabled=yes id=6C:3B:6B:19:62:A8 secrets=78f244b59c