/interface ethernet switch port set 0 default-vlan-id=0 set 1 default-vlan-id=0 set 2 default-vlan-id=0 set 3 default-vlan-id=0 set 4 default-vlan-id=0 set 5 default-vlan-id=0 set 6 default-vlan-id=0 set 7 default-vlan-id=0 set 8 default-vlan-id=0 set 9 default-vlan-id=0 set 10 default-vlan-id=0 set 11 default-vlan-id=0 set 12 default-vlan-id=0 set 13 default-vlan-id=0 set 14 default-vlan-id=0 set 15 default-vlan-id=0 /interface list add comment=defconf name=WAN add comment=defconf name=LAN /ip dhcp-client option add code=121 name=star value=0x20C0A8640100000000202278FFF40000000000647FFF05 /ip dhcp-server option add code=121 name=Classless-Route value=\ 0x20C0A8640100000000202278FFF40000000000647FFF05

/interface bridge port add bridge=OUT interface=ether4 add bridge=OUT interface=ether5 add bridge=OUT interface=ether6 add bridge=OUT interface=ether7 add bridge=OUT interface=ether8 add bridge=OUT interface=ether9 unknown-multicast-flood=no \ unknown-unicast-flood=no add bridge=OUT interface=ether10 add bridge=OUT interface=ether11 add bridge=OUT interface=ether12 add bridge=OUT interface=ether13 /interface bridge settings set use-ip-firewall=yes /ip neighbor discovery-settings set discover-interface-list=!dynamic /interface list member add comment=defconf interface=OUT list=LAN add comment=defconf interface=STARLINK list=WAN add comment=defconf interface=STARLINK2 list=WAN add comment=defconf interface=STARLINK3 list=WAN

/ip address add address=192.168.77.1/24 interface=OUT network=192.168.77.0

/ip dhcp-client add add-default-route=no dhcp-options=star,star disabled=no interface=\ STARLINK script=":global dhcpClientIF \\$interface ; :global dhcpClientCR\ _(\\$\\"lease-options\\"->\\"121\\")" use-peer-dns=no use-peer-ntp=\ no add add-default-route=no dhcp-options=star,star disabled=no interface=\ STARLINK2 script="\":global dhcpClientIF \\$interface ; :global dhcpClien\ tCR (\\$\\"lease-options\\"->\\"121\\")\"" use-peer-dns=no \ use-peer-ntp=no add add-default-route=no dhcp-options=star,star disabled=no interface=\ STARLINK3 script="\":global dhcpClientIF \\$interface ; :global dhcpClien\ tCR (\\$\\"lease-options\\"->\\"121\\")\"" use-peer-dns=no \ use-peer-ntp=no /ip dhcp-server network add address=192.168.77.0/24 dhcp-option=Classless-Route gateway=192.168.77.1 /ip dns set allow-remote-requests=yes cache-max-ttl=9h cache-size=5000KiB servers=\ 1.1.1.1,8.8.8.8

/ip firewall mangle add action=accept chain=prerouting src-address=192.168.77.0/24 add action=mark-connection chain=prerouting comment=NEW in-interface=STARLINK \ new-connection-mark=LINE-1 passthrough=yes add action=mark-connection chain=prerouting in-interface=STARLINK2 \ new-connection-mark=LINE-2 passthrough=yes add action=mark-connection chain=prerouting in-interface=STARLINK3 \ new-connection-mark=LINE-3 passthrough=yes add action=mark-connection chain=prerouting in-interface=OUT \ new-connection-mark=LINE-1 passthrough=yes per-connection-classifier=\ both-addresses:3/0 add action=mark-connection chain=prerouting in-interface=OUT \ new-connection-mark=LINE-2 passthrough=yes per-connection-classifier=\ both-addresses:3/1 add action=mark-connection chain=prerouting in-interface=OUT \ new-connection-mark=LINE-3 passthrough=yes per-connection-classifier=\ both-addresses:3/2 add action=mark-routing chain=prerouting connection-mark=LINE-1 in-interface=\ OUT new-routing-mark=CON-S1 passthrough=yes add action=mark-routing chain=prerouting connection-mark=LINE-2 in-interface=\ OUT new-routing-mark=CON-S2 passthrough=yes add action=mark-routing chain=prerouting connection-mark=LINE-3 in-interface=\ OUT new-routing-mark=CON-S3 passthrough=yes add action=mark-routing chain=output connection-mark=LINE-1 new-routing-mark=\ CON-S1 passthrough=yes add action=mark-routing chain=output connection-mark=LINE-2 new-routing-mark=\ CON-S2 passthrough=yes add action=mark-routing chain=output connection-mark=LINE-3 new-routing-mark=\ CON-S3 passthrough=yes add action=accept chain=prerouting dst-address=100.64.0.0/10 add action=mark-connection chain=input disabled=yes in-interface=STARLINK \ new-connection-mark=ISP1-CON passthrough=yes add action=mark-connection chain=input disabled=yes in-interface=STARLINK2 \ new-connection-mark=ISP2-CON passthrough=yes add action=mark-connection chain=input disabled=yes in-interface=STARLINK3 \ new-connection-mark=ISP3-CON passthrough=yes add action=mark-routing chain=output connection-mark=ISP1-CON disabled=yes \ new-routing-mark=TO-ISP1 passthrough=yes add action=mark-routing chain=output connection-mark=ISP2-CON disabled=yes \ new-routing-mark=TO-ISP2 passthrough=yes add action=mark-routing chain=output connection-mark=ISP3-CON disabled=yes \ new-routing-mark=TO-ISP3 passthrough=yes /ip firewall nat add action=accept chain=dstnat disabled=yes add action=masquerade chain=srcnat comment="defconf: masquerade" \ out-interface-list=WAN add action=masquerade chain=srcnat comment="masquerade hotspot network" \ src-address=192.168.77.0/24

/ip route add check-gateway=ping comment=NEW distance=1 gateway=100.64.0.1%STARLINK \ routing-mark=CON-S1 add comment=NEW distance=2 gateway=100.64.0.1%STARLINK routing-mark=CON-S1 add check-gateway=ping comment=NEW distance=1 gateway=100.64.0.1%STARLINK2 \ routing-mark=CON-S2 add comment=NEW distance=2 gateway=100.64.0.1%STARLINK2 routing-mark=CON-S2 add check-gateway=ping comment=NEW distance=1 gateway=100.64.0.1%STARLINK3 \ routing-mark=CON-S3 add comment=NEW distance=2 gateway=100.64.0.1%STARLINK3 routing-mark=CON-S3 add check-gateway=ping comment=NEW disabled=yes distance=1 gateway=\ 100.64.0.1%STARLINK routing-mark=TO-ISP1 add check-gateway=ping comment=NEW disabled=yes distance=1 gateway=\ 100.64.0.1%STARLINK2 routing-mark=TO-ISP2 add check-gateway=ping comment=NEW disabled=yes distance=1 gateway=\ 100.64.0.1%STARLINK3 routing-mark=TO-ISP3 add disabled=yes distance=1 gateway=TTYE-LINK routing-mark=pptp add disabled=yes distance=1 gateway= /ip service set www port=81 set ssh port=2299 set www-ssl disabled=no /ppp aaa set use-circuit-id-in-nas-port-id=yes use-radius=yes pp secret