2 WAN Local-Network Script

100 working

/interface bridge

add name=Local-Network
/interface ethernet
set [ find default-name=ether1 ] name=WAN1
set [ find default-name=ether2 ] name=WAN2
set [ find default-name=ether3 ] comment=Tariq_20-MB name=ether3-LAN
set [ find default-name=ether4 ] name=ether4-LAN
set [ find default-name=ether5 ] name=ether5-LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik/ip firewall layer7-protocol
add name=SpeedTest regexp="^.+(speedtest).\\\$"
/ip hotspot profile
set [ find default=yes ] rate-limit=500M/500M
add name=Pool ranges=10.10.11.2-10.10.11.254
add name="EXpire pool" ranges=10.0.0.2-10.0.0.254
add name=Hs-pool ranges=172.168.205.2-172.168.205.254
set [ find default=yes ] address-pool=Hs-pool rate-limit=500M/10M
add address-pool=Hs-pool name=2-MB-Pool rate-limit=2M/2M
add address-pool=Hs-pool name=3-MB-Pool rate-limit=3M/3M
add address-pool=Hs-pool name=4-MB-Pool rate-limit=4M/4M
add address-pool=Hs-pool name=5-MB-Pool rate-limit=5M/5M
add address-pool=Hs-pool name=1-Kb-Pool rate-limit=1k/1kset 0 local-address=172.168.205.1 remote-address=Hs-pool
add local-address=10.10.11.1 name=2-MB-Pool only-one=yes rate-limit=\
"2M/2M 4M/4M 2M/2M 10/10" remote-address=Pool
add local-address=10.10.11.1 name=3-MB-Pool only-one=yes rate-limit=\
"3M/3M 6M/6M 3M/3M 10/10 " remote-address=Pool
add local-address=10.10.11.1 name=4-MB-Pool only-one=yes rate-limit=\
"4M/4M 8M/8M 4M/4M 10/10 " remote-address=Pool
add local-address=10.10.11.1 name=5-MB-Pool only-one=yes rate-limit=\
"5M/5M 10M/10M 5M/5M 10/10 " remote-address=Pool
add local-address=10.10.11.1 name=6-MB-Pool only-one=yes rate-limit=\
"6M/6M 12M/12M 6M/6M 10/10 " remote-address=Pool
add local-address=10.10.11.1 name=7-MB-Pool only-one=yes rate-limit=\
"7M/7M 14M/14M 7M/7M 10/10 " remote-address=Pool
add local-address=10.10.11.1 name=8-MB-Pool only-one=yes rate-limit=\
"8M/8M 16M/16M 8M/8M 10/10 " remote-address=Pool
add local-address=10.10.11.1 name=9-MB-Pool only-one=yes rate-limit=\
"9M/9M 18M/18M 9M/9M 10/10 " remote-address=Pool
add local-address=10.10.11.1 name=10-MB-Pool only-one=yes rate-limit=\
"10M/10M 20M/20M 10M/10M 10/10 " remote-address=Pool
add local-address=10.10.11.1 name=Pool remote-address=Pool
add local-address="EXpire pool" name="EXpire pool" only-one=yes rate-limit=\
1k/1k remote-address="EXpire pool"
add local-address=10.10.11.1 name=50-MB-Pool rate-limit=50M/50M \
remote-address=Pool
add local-address=10.10.11.1 name=20-MB-Pool only-one=yes rate-limit=\
"20M/20M 20M/20M 20M/20M 10/10 " remote-address=Pool
set *FFFFFFFE local-address=172.168.205.1 remote-address=Hs-pool
/queue simple
add max-limit=20M/20M name=Tariq_20 target=192.168.201.0/29
add max-limit=1k/1k name="EXpire pool" target=10.0.0.0/24
add max-limit=500M/500M name=SkyUkTv target=172.168.205.0/24
/interface bridge port
add bridge=Local-Network interface=ether4-LAN
add bridge=Local-Network interface=ether5-LAN
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface pppoe-server server
add authentication=pap,chap disabled=no interface=Local-Network max-mru=1488 \
max-mtu=1488 mrru=1500 service-name=service1

/ip address
add address=172.168.100.3/29 interface=WAN1 network=172.168.100.0
add address=192.168.2.2/24 interface=WAN2 network=192.168.2.0
add address=192.168.201.1/29 comment=Tariq_20-MB interface=ether3-LAN \
network=192.168.201.0
add address=172.168.205.1/24 comment=BEST-IPTV interface=Local-Network \
network=172.168.205.0
/ip dns
set allow-remote-requests=yes cache-size=5000KiB max-udp-packet-size=512 \
servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes

add action=mark-connection chain=input in-interface=WAN1 new-connection-mark=\
WAN1_conn
add action=mark-connection chain=input in-interface=WAN2 new-connection-mark=\
WAN2_conn
add action=mark-routing chain=output connection-mark=WAN1_conn \
new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn \
new-routing-mark=to_WAN2
add action=accept chain=prerouting dst-address=172.168.100.0/29 in-interface=\
Local-Network
add action=accept chain=prerouting dst-address=192.168.2.0/24 in-interface=\
Local-Network
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=Local-Network new-connection-mark=WAN1_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=Local-Network new-connection-mark=WAN2_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting connection-mark=WAN1_conn \
in-interface=Local-Network new-routing-mark=to_WAN1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=WAN2_conn \
in-interface=Local-Network new-routing-mark=to_WAN2 passthrough=yes

/ip pool

/ip hotspot user profile

/ppp profile

/ip firewall mangle

/ip firewall nat
add action=masquerade chain=srcnat src-address=10.10.11.0/24
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
add action=dst-nat chain=dstnat dst-address=116.71.133.63 dst-port=8080 \
protocol=tcp to-addresses=172.168.205.50 to-ports=8080
add action=dst-nat chain=dstnat dst-address=116.71.133.63 dst-port=4242 \
protocol=tcp to-addresses=172.168.205.50 to-ports=4242
add action=dst-nat chain=dstnat dst-address=116.71.133.63 dst-port=8096 \
protocol=tcp to-addresses=172.168.205.110 to-ports=8096

/ip firewall raw
add action=add-dst-to-address-list address-list=whatsapp \
address-list-timeout=4d chain=prerouting content=whatsapp disabled=yes
add action=add-dst-to-address-list address-list=facebook \
address-list-timeout=4d chain=prerouting content=facebook disabled=yes
add action=add-dst-to-address-list address-list=youtube.com \
address-list-timeout=4d chain=prerouting content=youtube disabled=yes
add action=add-dst-to-address-list address-list=dmasti-list \
address-list-timeout=4d chain=prerouting content=dmasti.pk disabled=yes
add action=add-dst-to-address-list address-list=172.168.205.50-list \
address-list-timeout=4d chain=prerouting content=172.168.205.50
add action=add-dst-to-address-list address-list=172.168.205.110-list \
address-list-timeout=4d chain=prerouting content=172.168.205.110
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip hotspot ip-binding
add address=172.168.205.111 comment="TOTOLINK C300" mac-address=\
78:44:76:D5:7C:1C to-address=172.168.205.111 type=bypassed
add address=172.168.205.50 comment=IPTV mac-address=90:2B:34:9E:26:34 \
to-address=172.168.205.50 type=bypassed
add address=172.168.205.110 comment=PC to-address=172.168.205.110 type=\
bypassed
add address=172.168.205.152 comment=Redmi-10A mac-address=E0:80:6B:C3:69:96 \
to-address=172.168.205.152 type=bypassed

/ip hotspot user
add name=admin password=1122
/ip route
add check-gateway=ping distance=1 gateway=172.168.100.1 routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=to_WAN2
add check-gateway=ping distance=1 gateway=172.168.100.1
add check-gateway=ping distance=2 gateway=192.168.2.1

/ip service
set www port=82
set www-ssl disabled=no
set winbox port=7929
/ppp aaa
set interim-update=3m use-circuit-id-in-nas-port-id=yes use-radius=yes
/ppp secret

/radius
add address=185.202.236.229 secret=123456 service=ppp,dhcp
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Karachi
/system identity
set name=Sky.Network
/system package update
set channel=development
add address=185.202.236.229 secret=123456 service=ppp,dhcp
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Karachi
/system identity
set name=Sky.Network
/system package update
set channel=development
add address=185.202.236.229 secret=123456 service=ppp,dhcp
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Karachi
/system identity
set name=Sky.Network
/system package update
set channel=development

add address=185.202.236.229 secret=123456 service=ppp,dhcp
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Karachi
/system identity
set name=Sky.Network
/system package update
set channel=developmentadd address=185.202.236.229 secret=123456 service=ppp,dhcp
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Karachi
/system identity
set name=Sky.Network
/system package update
set channel=developmentadd address=185.202.236.229 secret=123456 service=ppp,dhcp
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Karachi
/system identity
set name=Sky.Network
/system package update
set channel=development