Configuration for local wifi access point, typically a mAP lite.
Remember that in its default configuration a mAP lite can only be administered via wifi.
# 2025-08-21 09:22:25 by RouterOS 7.15.3
#
# model = RBmAPL-2nD
/interface bridge
add name=LAN port-cost-mode=short
/interface ethernet
set [ find default-name=ether1 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 country=no_country_set disabled=no frequency-mode=manual-txpower mode=ap-bridge radio-name=AP.CapitolPark ssid=HamWAN-CapitolPark station-roaming=enabled
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/routing bgp template
set default disabled=no output.network=bgp-networks
/routing ospf instance
add disabled=no name=default-v2
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
/snmp community
set [ find default=yes ] addresses=44.25.0.0/16 name=hamwan
/system logging action
set 3 remote=44.25.0.8
/interface bridge port
add bridge=LAN ingress-filtering=no interface=wlan1 internal-path-cost=10 path-cost=10
add bridge=LAN hw=no ingress-filtering=no interface=ether1 internal-path-cost=10 path-cost=10
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=44.25.240.13/27 interface=LAN network=44.25.240.0
/ip dns
set servers=44.25.0.1,44.25.1.1
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=44.25.240.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh port=222
set api disabled=yes
set api-ssl disabled=yes
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/ip ssh
set forwarding-enabled=remote
/routing bfd configuration
add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5
/snmp
set contact="#HamWAN-Support on irc.libera.chat" enabled=yes
/system clock
set time-zone-name=America/Los_Angeles
/system identity
set name=AP.CapitolPark
/system logging
add action=remote topics=info
add action=remote topics=warning
add action=remote topics=error
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=44.25.0.4
add address=44.25.1.4
/system routerboard settings
set auto-upgrade=yes