General • DHCP in VLAN not working for virtual wireless interface

/export hide-sensitive# 2024-01-27 06:27:30 by RouterOS 7.13# software id = 65AU-E2NI## model = RB4011iGS+5HacQ2HnD# serial number =/interface bridgeadd admin-mac=DC:2C:6E:13:F3:B3 auto-mac=no comment=defconf igmp-snooping=yes igmp-version=3 mld-version=2 name=bridge port-cost-mode=short \    vlan-filtering=yes/interface wirelessset [ find default-name=wlan1 ] band=5ghz-onlyac country=brazil disabled=no distance=indoors frequency=5200 frequency-mode=superchannel mode=ap-bridge \    ssid=loveandrockets wireless-protocol=802.11 wps-mode=disabledset [ find default-name=wlan2 ] band=2ghz-g/n channel-width=20/40mhz-XX country=brazil disabled=no distance=indoors frequency=2447 frequency-mode=\    superchannel mode=ap-bridge ssid=loveandrockets wireless-protocol=802.11/interface wireless nstremeset wlan1 disable-csma=yes/interface vlanadd interface=bridge name=guest_vlan vlan-id=30add interface=bridge name=home_vlan vlan-id=10add interface=bridge name=work_vlan vlan-id=20/interface pppoe-clientadd add-default-route=yes disabled=no interface=ether1 max-mtu=1500 name=pppoe-out1 use-peer-dns=yes user=cliente@cliente/interface listadd comment=defconf name=WANadd comment=defconf name=LANadd name=VLAN/interface wireless security-profilesset [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTikadd authentication-types=wpa2-psk mode=dynamic-keys name=guest supplicant-identity=MikroTikadd authentication-types=wpa2-psk management-protection=allowed mode=dynamic-keys name=work supplicant-identity=MikroTik/interface wirelessadd disabled=no mac-address=DE:2C:6E:13:F3:BD master-interface=wlan1 name=wlan3 security-profile=guest ssid=maggie vlan-id=30 vlan-mode=use-tag \    wds-default-bridge=bridge wps-mode=disabled/ip ipsec proposalset [ find default=yes ] disabled=yes/ip pooladd name=dhcp ranges=192.168.1.2-192.168.1.254add name=dhcp-guest-pool ranges=192.168.10.100-192.168.10.200add name=dhcp-pool-work ranges=192.168.20.2-192.168.20.254add name=work_pool ranges=192.168.20.2-192.168.20.254add name=guest_pool ranges=192.168.30.2-192.168.30.254add name=home_pool ranges=192.168.10.2-192.168.10.254/ip dhcp-serveradd address-pool=dhcp always-broadcast=yes interface=bridge lease-time=1h5m name=defconf server-address=192.168.1.1add address-pool=work_pool interface=work_vlan name=work_dhcp server-address=192.168.20.1add address-pool=guest_pool interface=guest_vlan name=guest_dhcp server-address=192.168.30.1add address-pool=home_pool interface=home_vlan name=home_dhcp/portset 0 name=serial0set 1 name=serial1/system logging actionset 3 bsd-syslog=yes remote=192.168.1.2 src-address=192.168.1.1 syslog-severity=infoadd bsd-syslog=yes name=browsinglog remote=192.168.1.2 src-address=192.168.1.1 syslog-severity=info target=remoteadd bsd-syslog=yes name=nas remote=192.168.1.2 src-address=192.168.1.1 syslog-facility=syslog syslog-severity=info target=remote/interface wirelessadd disabled=no mac-address=DE:2C:6E:13:F3:BE master-interface=wlan2 name=wlan4 security-profile=work ssid=workshop vlan-id=20 vlan-mode=use-tag \    wds-default-bridge=*1E wps-mode=disabled/interface bridge filter# no interfaceadd action=drop chain=forward in-interface=*16# no interfaceadd action=drop chain=forward out-interface=*16# no interfaceadd action=drop chain=forward in-interface=*17# no interfaceadd action=drop chain=forward out-interface=*17/interface bridge portadd bridge=bridge comment=defconf interface=ether2 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf frame-types=admit-only-untagged-and-priority-tagged interface=ether3 internal-path-cost=10 path-cost=10 pvid=20add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf interface=ether5 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf interface=ether6 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf frame-types=admit-only-untagged-and-priority-tagged interface=ether7 internal-path-cost=10 path-cost=10 pvid=30add bridge=bridge comment=defconf interface=ether8 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf interface=ether9 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf interface=ether10 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf interface=sfp-sfpplus1 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf interface=wlan1 internal-path-cost=10 path-cost=10add bridge=bridge comment=defconf interface=wlan2 internal-path-cost=10 path-cost=10add bridge=bridge comment=work frame-types=admit-only-untagged-and-priority-tagged interface=wlan4 pvid=20add bridge=bridge comment=guest frame-types=admit-only-untagged-and-priority-tagged interface=wlan3 pvid=30/interface bridge settingsset use-ip-firewall=yes/ip neighbor discovery-settingsset discover-interface-list=none lldp-med-net-policy-vlan=1/ipv6 settingsset disable-ipv6=yes/interface bridge vlanadd bridge=bridge tagged=bridge vlan-ids=10add bridge=bridge tagged=bridge vlan-ids=20add bridge=bridge tagged=bridge untagged=wlan3 vlan-ids=30/interface list memberadd interface=bridge list=LANadd interface=ether1 list=WANadd interface=pppoe-out1 list=WANadd interface=*1B list=LANadd interface=*1E list=LANadd interface=home_vlan list=VLANadd interface=work_vlan list=VLANadd interface=guest_vlan list=VLAN/interface wireless access-listadd authentication=no forwarding=no interface=wlan2 mac-address=F8:4D:89:86:44:94add authentication=no forwarding=no interface=wlan2 mac-address=7C:2A:DB:8D:97:CA/interface wireless snifferset multiple-channels=yes receive-errors=yes/ip addressadd address=192.168.1.1/24 comment=defconf interface=bridge network=192.168.1.0add address=192.168.10.1/24 comment=guest interface=*1B network=192.168.10.0add address=192.168.20.1/24 comment=work interface=*1E network=192.168.20.0add address=192.168.20.1/24 interface=work_vlan network=192.168.20.0add address=192.168.30.1/24 interface=guest_vlan network=192.168.30.0add address=192.168.10.1/24 interface=home_vlan network=192.168.10.0/ip cloudset update-time=no/ip dhcp-clientadd comment=defconf disabled=yes interface=ether1/ip dhcp-server networkadd address=192.168.1.0/24 dns-server=192.168.1.2,1.1.1.1 domain=tunguska.cc gateway=192.168.1.1 netmask=24 ntp-server=192.168.1.1add address=192.168.10.0/24 dns-server=192.168.1.2 gateway=192.168.10.1add address=192.168.20.0/24 dns-server=192.168.1.2 gateway=192.168.20.1add address=192.168.30.0/24 dns-server=192.168.1.2 gateway=192.168.30.1/ip dnsset allow-remote-requests=yes cache-size=4096KiB max-concurrent-queries=300 max-concurrent-tcp-sessions=100 query-server-timeout=1s query-total-timeout=\    2s servers=1.1.1.1,1.0.0.1,9.9.9.9/ip firewall address-listadd address=8.8.8.8 comment="google DNS" list=GOOGLE_DNSadd address=8.8.4.4 comment="google DNS" list=GOOGLE_DNSadd address=0.0.0.0/8 comment="defconf: RFC6890" list=no_forward_ipv4add address=169.254.0.0/16 comment="defconf: RFC6890" list=no_forward_ipv4add address=224.0.0.0/4 comment="defconf: multicast" list=no_forward_ipv4add address=255.255.255.255 comment="defconf: RFC6890" list=no_forward_ipv4add address=127.0.0.0/8 comment="defconf: RFC6890" list=bad_ipv4add address=192.0.0.0/24 comment="defconf: RFC6890" list=bad_ipv4add address=192.0.2.0/24 comment="defconf: RFC6890 documentation" list=bad_ipv4add address=198.51.100.0/24 comment="defconf: RFC6890 documentation" list=bad_ipv4add address=203.0.113.0/24 comment="defconf: RFC6890 documentation" list=bad_ipv4add address=240.0.0.0/4 comment="defconf: RFC6890 reserved" list=bad_ipv4add address=0.0.0.0/8 comment="defconf: RFC6890" list=not_global_ipv4add address=10.0.0.0/8 comment="defconf: RFC6890" list=not_global_ipv4add address=100.64.0.0/10 comment="defconf: RFC6890" list=not_global_ipv4add address=169.254.0.0/16 comment="defconf: RFC6890" list=not_global_ipv4add address=172.16.0.0/12 comment="defconf: RFC6890" list=not_global_ipv4add address=192.0.0.0/29 comment="defconf: RFC6890" list=not_global_ipv4add address=192.168.0.0/16 comment="defconf: RFC6890" list=not_global_ipv4add address=198.18.0.0/15 comment="defconf: RFC6890 benchmark" list=not_global_ipv4add address=255.255.255.255 comment="defconf: RFC6890" list=not_global_ipv4add address=224.0.0.0/4 comment="defconf: multicast" list=bad_src_ipv4add address=255.255.255.255 comment="defconf: RFC6890" list=bad_src_ipv4add address=0.0.0.0/8 comment="defconf: RFC6890" list=bad_dst_ipv4add address=224.0.0.0/4 comment="defconf: RFC6890" disabled=yes list=bad_dst_ipv4add address=192.168.1.1-192.168.1.254 list=allowed_to_routeradd address=10.0.5.1-10.0.5.254 list=allowed_to_routeradd address=192.168.0.0/16 comment="internal networks, including VLANs" list=allowed_lan/ip firewall filteradd action=accept chain=input comment="defconf: accept ICMP after RAW" protocol=icmpadd action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untrackedadd action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN log=yes log-prefix=notlanadd action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yesadd action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untrackedadd action=accept chain=forward comment="log ntp" dst-port=123 log=yes protocol=udpadd action=drop chain=forward comment="Drop google DNS" dst-address-list=GOOGLE_DNS log=yes log-prefix=googlednsadd action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid log=yes log-prefix=fw_invalidadd action=drop chain=forward comment="defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WANadd action=drop chain=forward comment="defconf: drop bad forward IPs" src-address-list=no_forward_ipv4add action=drop chain=forward comment="defconf: drop bad forward IPs" dst-address-list=no_forward_ipv4 log=yesadd action=drop chain=forward disabled=yes layer7-protocol=redditadd action=accept chain=input comment="Allow VLAN" in-interface-list=VLAN/ip firewall natadd action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WANadd action=dst-nat chain=dstnat dst-port=51413 protocol=tcp to-addresses=192.168.1.2 to-ports=51413add action=dst-nat chain=dstnat dst-address=192.168.1.8 dst-port=53 protocol=udp to-addresses=192.168.1.2 to-ports=53add action=masquerade chain=srcnat dst-address=192.168.1.8 protocol=udp src-address=192.168.1.0/24/ip firewall rawadd action=accept chain=prerouting comment="defconf: enable for transparent firewall" disabled=yesadd action=accept chain=prerouting comment="defconf: accept DHCP discover" dst-address=255.255.255.255 dst-port=67 in-interface-list=LAN protocol=udp \    src-address=0.0.0.0 src-port=68add action=accept chain=prerouting comment="accept UPnP" dst-address=239.255.255.250 log=yes log-prefix=unpn-prerouteadd action=drop chain=prerouting comment="defconf: drop bogon IP's" src-address-list=bad_ipv4add action=drop chain=prerouting comment="defconf: drop bogon IP's" dst-address-list=bad_ipv4 log=yes log-prefix=bad_ip_bogonadd action=drop chain=prerouting comment="defconf: drop bogon IP's" src-address-list=bad_src_ipv4add action=drop chain=prerouting comment="defconf: drop bogon IP's" dst-address-list=bad_dst_ipv4 log=yes log-prefix=bad_ip_bogonadd action=drop chain=prerouting comment="defconf: drop non global from WAN" in-interface-list=WAN log=yes log-prefix=global_wan src-address-list=\    not_global_ipv4add action=drop chain=prerouting comment="defconf: drop forward to local lan from WAN" dst-address-list=allowed_lan in-interface-list=WANadd action=drop chain=prerouting comment="defconf: drop local if not from default IP range" in-interface-list=LAN log=yes log-prefix=ip_out_range \    src-address-list=!allowed_lanadd action=drop chain=prerouting comment="defconf: drop bad UDP" port=0 protocol=udpadd action=jump chain=prerouting comment="defconf: jump to ICMP chain" jump-target=icmp4 protocol=icmpadd action=jump chain=prerouting comment="defconf: jump to TCP chain" jump-target=bad_tcp protocol=tcpadd action=accept chain=prerouting comment="defconf: accept everything else from LAN" in-interface-list=LANadd action=accept chain=prerouting comment="defconf: accept everything else from WAN" in-interface-list=WANadd action=drop chain=prerouting comment="defconf: drop the rest"add action=drop chain=bad_tcp comment="defconf: TCP flag filter" protocol=tcp tcp-flags=!fin,!syn,!rst,!ackadd action=drop chain=bad_tcp comment=defconf protocol=tcp tcp-flags=fin,synadd action=drop chain=bad_tcp comment=defconf protocol=tcp tcp-flags=fin,rstadd action=drop chain=bad_tcp comment=defconf protocol=tcp tcp-flags=fin,!ackadd action=drop chain=bad_tcp comment=defconf protocol=tcp tcp-flags=fin,urgadd action=drop chain=bad_tcp comment=defconf protocol=tcp tcp-flags=syn,rstadd action=drop chain=bad_tcp comment=defconf protocol=tcp tcp-flags=rst,urgadd action=drop chain=bad_tcp comment="defconf: TCP port 0 drop" port=0 protocol=tcpadd action=accept chain=icmp4 comment="defconf: echo reply" icmp-options=0:0 limit=5,10:packet protocol=icmpadd action=accept chain=icmp4 comment="defconf: net unreachable" icmp-options=3:0 protocol=icmpadd action=accept chain=icmp4 comment="defconf: host unreachable" icmp-options=3:1 protocol=icmpadd action=accept chain=icmp4 comment="defconf: protocol unreachable" icmp-options=3:2 protocol=icmpadd action=accept chain=icmp4 comment="defconf: port unreachable" icmp-options=3:3 protocol=icmpadd action=accept chain=icmp4 comment="defconf: fragmentation needed" icmp-options=3:4 protocol=icmpadd action=accept chain=icmp4 comment="defconf: echo" icmp-options=8:0 limit=5,10:packet protocol=icmpadd action=accept chain=icmp4 comment="defconf: time exceeded " icmp-options=11:0-255 protocol=icmpadd action=drop chain=icmp4 comment="defconf: drop other icmp" protocol=icmp/ip firewall service-portset ftp disabled=yesset pptp disabled=yes/ip ipsec policyset 0 disabled=yes/ip routeadd disabled=yes distance=1 dst-address=10.0.5.0/24 gateway=*10 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10/ip serviceset telnet address=192.168.1.0/24,192.168.88.0/24 disabled=yesset ftp address=192.168.1.0/24 disabled=yesset www address=192.168.1.0/24 disabled=yesset ssh address=192.168.1.0/24,192.168.10.0/24,192.168.20.0/24 port=2233set www-ssl address=192.168.0.0/16 certificate=tunguska.cc.cer_0 disabled=no tls-version=only-1.2set api address=192.168.1.0/24 disabled=yesset winbox address=192.168.1.0/24 disabled=yesset api-ssl certificate=*1 disabled=yes/ip smbset allow-guests=no/ip sshset forwarding-enabled=local host-key-size=4096 strong-crypto=yes/ip traffic-flowset active-flow-timeout=1m enabled=yes/ip traffic-flow targetadd dst-address=192.168.1.2 v9-template-timeout=1m/ip upnpset allow-disable-external-interface=yes enabled=yes/ip upnp interfacesadd interface=bridge type=internal/ipv6 firewall address-listadd address=::/128 comment="defconf: unspecified address" list=bad_ipv6add address=::1/128 comment="defconf: lo" list=bad_ipv6add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6add address=100::/64 comment="defconf: discard only " list=bad_ipv6add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6add address=fe80::/16 list=allowedadd address=ff02::/16 comment=multicast list=allowedadd address=fe80::/10 comment="defconf: RFC6890 Linked-Scoped Unicast" list=no_forward_ipv6add address=ff00::/8 comment="defconf: multicast" list=no_forward_ipv6add address=2001::/23 comment="defconf: RFC6890" list=bad_ipv6add address=100::/64 comment="defconf: RFC6890 Discard-only" list=not_global_ipv6add address=2001::/32 comment="defconf: RFC6890 TEREDO" list=not_global_ipv6add address=2001:2::/48 comment="defconf: RFC6890 Benchmark" list=not_global_ipv6add address=fc00::/7 comment="defconf: RFC6890 Unique-Local" list=not_global_ipv6add address=::/128 comment="defconf: unspecified" list=bad_dst_ipv6add address=::/128 comment="defconf: unspecified" list=bad_src_ipv6add address=ff00::/8 comment="defconf: multicast" list=bad_src_ipv6/ipv6 firewall filteradd action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untrackedadd action=drop chain=input comment="defconf: drop invalid" connection-state=invalidadd action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udpadd action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udpadd action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ahadd action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-espadd action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsecadd action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LANadd action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untrackedadd action=drop chain=forward comment="defconf: drop invalid" connection-state=invalidadd action=drop chain=forward comment="defconf: drop bad forward IPs" src-address-list=no_forward_ipv6add action=drop chain=forward comment="defconf: drop bad forward IPs" dst-address-list=no_forward_ipv6add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6add action=accept chain=forward comment="defconf: accept ICMPv6 after RAW" protocol=icmpv6add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN/ipv6 firewall rawadd action=accept chain=prerouting comment="defconf: enable for transparent firewall" disabled=yesadd action=accept chain=prerouting comment="defconf: RFC4291, section 2.7.1" dst-address=ff02::1:ff00:0/104 icmp-options=135 protocol=icmpv6 src-address=\    ::/128add action=drop chain=prerouting comment="defconf: drop bogon IP's" src-address-list=bad_ipv6add action=drop chain=prerouting comment="defconf: drop bogon IP's" dst-address-list=bad_ipv6add action=drop chain=prerouting comment="defconf: drop packets with bad SRC ipv6" src-address-list=bad_src_ipv6add action=drop chain=prerouting comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_dst_ipv6add action=drop chain=prerouting comment="defconf: drop non global from WAN" in-interface-list=WAN src-address-list=not_global_ipv6add action=jump chain=prerouting comment="defconf: jump to ICMPv6 chain" jump-target=icmp6 protocol=icmpv6add action=accept chain=prerouting comment="defconf: accept local multicast scope" dst-address=ff02::/16add action=drop chain=prerouting comment="defconf: drop other multicast destinations" dst-address=ff00::/8add action=accept chain=prerouting comment="defconf: accept everything else from WAN" in-interface-list=WANadd action=accept chain=prerouting comment="defconf: accept everything else from LAN" in-interface-list=LANadd action=drop chain=prerouting comment="defconf: drop the rest"add action=accept chain=icmp6 comment="defconf: rfc4890 drop ll if hop-limit!=255" dst-address=fe80::/10 hop-limit=not-equal:255 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: dst unreachable" icmp-options=1:0-255 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: packet too big" icmp-options=2:0-255 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: limit exceeded" icmp-options=3:0-1 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: bad header" icmp-options=4:0-2 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: Mobile home agent address discovery" icmp-options=144:0-255 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: Mobile home agent address discovery" icmp-options=145:0-255 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: Mobile prefix solic" icmp-options=146:0-255 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: Mobile prefix advert" icmp-options=147:0-255 protocol=icmpv6add action=accept chain=icmp6 comment="defconf: echo request limit 5,10" icmp-options=128:0-255 limit=5,10:packet protocol=icmpv6add action=accept chain=icmp6 comment="defconf: echo reply limit 5,10" icmp-options=129:0-255 limit=5,10:packet protocol=icmpv6add action=accept chain=icmp6 comment="defconf: rfc4890 router solic limit 5,10 only LAN" hop-limit=equal:255 icmp-options=133:0-255 in-interface-list=\    LAN limit=5,10:packet protocol=icmpv6add action=accept chain=icmp6 comment="defconf: rfc4890 router advert limit 5,10 only LAN" hop-limit=equal:255 icmp-options=134:0-255 in-interface-list=\    LAN limit=5,10:packet protocol=icmpv6add action=accept chain=icmp6 comment="defconf: rfc4890 neighbor solic limit 5,10 only LAN" hop-limit=equal:255 icmp-options=135:0-255 in-interface-list=\    LAN limit=5,10:packet protocol=icmpv6add action=accept chain=icmp6 comment="defconf: rfc4890 neighbor advert limit 5,10 only LAN" hop-limit=equal:255 icmp-options=136:0-255 \    in-interface-list=LAN limit=5,10:packet protocol=icmpv6add action=accept chain=icmp6 comment="defconf: rfc4890 inverse ND solic limit 5,10 only LAN" hop-limit=equal:255 icmp-options=141:0-255 \    in-interface-list=LAN limit=5,10:packet protocol=icmpv6add action=accept chain=icmp6 comment="defconf: rfc4890 inverse ND advert limit 5,10 only LAN" hop-limit=equal:255 icmp-options=142:0-255 \    in-interface-list=LAN limit=5,10:packet protocol=icmpv6add action=drop chain=icmp6 comment="defconf: drop other icmp" protocol=icmpv6/ipv6 ndset [ find default=yes ] disabled=yes/routing pimsm interface-templateadd disabled=no instance=*1 interfaces=LAN/system clockset time-zone-name=America/Sao_Paulo/system identityset name=router.tunguska.cc/system ledsadd interface=wlan2 leds=wlan2_signal1-led,wlan2_signal2-led,wlan2_signal3-led,wlan2_signal4-led,wlan2_signal5-led type=wireless-signal-strengthadd interface=wlan2 leds=wlan2_tx-led type=interface-transmitadd interface=wlan2 leds=wlan2_rx-led type=interface-receive/system loggingset 0 disabled=yesadd action=nas topics=firewalladd action=nas prefix=dhcp topics=dhcpadd action=nas topics=infoadd action=nas topics=warningadd action=nas topics=criticaladd action=nas topics=erroradd action=nas prefix=pppoe topics=pppoeadd action=remote prefix=ssh topics=sshadd prefix=dhcp-connect topics=debug,dhcp,packet/system noteset show-at-login=no/system ntp clientset enabled=yes/system ntp client serversadd address=200.189.40.8/tool bandwidth-serverset enabled=no/tool mac-serverset allowed-interface-list=none/tool mac-server mac-winboxset allowed-interface-list=LAN