Entao vamos la:
/ interface ethernet
set Link name="Link" mtu=1500 mac-address=00:00:00:00: arp=enabled \
disable-running-check=yes auto-negotiation=yes full-duplex=yes \
cable-settings=default speed=100Mbps comment="" disabled=no
set Clientes name="Clientes" mtu=1500 mac-address=00:00:00:00: \
arp=enabled disable-running-check=yes auto-negotiation=yes full-duplex=yes \
cable-settings=default speed=100Mbps comment="" disabled=no
/ interface wireless
set wlan1 name="wlan1" mtu=1500 mac-address=00:00:00:00: arp=enabled \
disable-running-check=no radio-name="MK RHSuporte" mode=ap-bridge \
ssid="Empresarial" area="" frequency-mode=superchannel \
country=no_country_set antenna-gain=0 frequency=2412 band=2.4ghz-b/g \
scan-list=default rate-set=default \
supported-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps \
supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps \
basic-rates-b=1Mbps basic-rates-a/g=6Mbps max-station-count=2007 \
ack-timeout=dynamic tx-power=25 tx-power-mode=card-rates \
noise-floor-threshold=default periodic-calibration=default \
periodic-calibration-interval=300 burst-time=disabled dfs-mode=none \
antenna-mode=ant-a wds-mode=dynamic wds-default-bridge=none \
wds-default-cost=100 wds-cost-range=50-150 wds-ignore-ssid=no \
update-stats-interval=disabled default-authentication=yes \
default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 \
proprietary-extensions=post-2.9.25 hide-ssid=no security-profile=RHSuporte \
disconnect-timeout=3s on-fail-retry-time=100ms preamble-mode=both \
compression=no allow-sharedkey=no comment="" disabled=no
/ interface wireless nstreme
set wlan1 enable-nstreme=no enable-polling=yes framer-policy=none \
framer-limit=3200
/ interface wireless manual-tx-power-table
set wlan1 manual-tx-powers=1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9Mbp\
s:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17
/ interface wireless security-profiles
set default name="default" mode=dynamic-keys authentication-types=wpa-psk \
unicast-ciphers=tkip group-ciphers=tkip \
wpa-pre-shared-key="***********" wpa2-pre-shared-key="" \
tls-mode=no-certificates tls-certificate=none static-algo-0=none \
static-key-0="" static-algo-1=none static-key-1="" static-algo-2=none \
static-key-2="" static-algo-3=none static-key-3="" \
static-transmit-key=key-0 static-sta-private-algo=none \
static-sta-private-key="" radius-mac-authentication=no group-key-update=5m
add name="RHSuporte" mode=dynamic-keys authentication-types=wpa-psk \
unicast-ciphers=tkip group-ciphers=tkip \
wpa-pre-shared-key="************" \
wpa2-pre-shared-key="***********" tls-mode=no-certificates \
tls-certificate=none static-algo-0=none static-key-0="" static-algo-1=none \
static-key-1="" static-algo-2=none static-key-2="" static-algo-3=none \
static-key-3="" static-transmit-key=key-0 static-sta-private-algo=none \
static-sta-private-key="" radius-mac-authentication=no group-key-update=5m
/ interface wireless align
set frame-size=300 active-mode=yes receive-all=no \
audio-monitor=00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 ssid-all=no \
frames-per-second=25 audio-min=-100 audio-max=-20
/ interface wireless snooper
set multiple-channels=yes channel-time=200ms receive-errors=no
/ interface wireless sniffer
set multiple-channels=no channel-time=200ms only-headers=no receive-errors=no \
memory-limit=10 file-name="" file-limit=10 streaming-enabled=no \
streaming-server=0.0.0.0 streaming-max-rate=0
/ interface l2tp-server server
set enabled=no max-mtu=1460 max-mru=1460 \
authentication=pap,chap,mschap1,mschap2 default-profile=default-encryption
/ interface pptp-server server
set enabled=no max-mtu=1460 max-mru=1460 authentication=mschap1,mschap2 \
keepalive-timeout=30 default-profile=default-encryption
/ ip web-proxy
set enabled=yes src-address=0.0.0.0 port=3128 hostname="proxy" \
transparent-proxy=yes parent-proxy=0.0.0.0:0 \
cache-administrator="
[email protected]" max-object-size=30960KiB \
cache-drive=system max-cache-size=unlimited max-ram-cache-size=unlimited
/ ip web-proxy access
add dst-port=23-25 action=deny comment="block telnet & spam e-mail relaying" \
disabled=no
/ ip web-proxy cache
add url=":cgi-bin \\?" action=deny comment="don't cache dynamic http pages" \
disabled=no
add url="https://" action=deny comment="no cache dynamic https pages" \
disabled=no