/interface> export
# aug/22/2017 14:48:19 by RouterOS 6.40.1
# model = CRS125-24G-1S-2HnD
/interface bridge
add name=bridge-9
add name=bridge-10
add name=bridge-8
add name=bridge-1
add name=bridge-11
/interface wireless
# managed by CAPsMAN
# channel: 2427/20-Ce/gn(20dBm), SSID: LAN10, local forwarding
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no mode=station-pseudobridge ssid=MikroTik wireless-protocol=nv2-nstreme-802.11
add mac-address=6E:3B:6B:2B:5D:0B master-interface=wlan1 mode=station name=wlan2
# managed by CAPsMAN
# SSID: LAN9, local forwarding
add disabled=no mac-address=6E:3B:6B:2B:5D:0A master-interface=wlan1 mode=station name=wlan3
/interface vlan
add interface=ether24 name=vlan-9 vlan-id=9
add interface=ether24 name=vlan-10 vlan-id=10
add interface=ether24 name=vlan-8 vlan-id=8
add interface=ether24 name=vlan-1 vlan-id=1
add interface=ether24 name=vlan-11 vlan-id=11
/interface ethernet
set [ find default-name=ether1 ] master-port=ether24
set [ find default-name=ether2 ] master-port=ether24
set [ find default-name=ether3 ] master-port=ether24
set [ find default-name=ether4 ] master-port=ether24
set [ find default-name=ether5 ] master-port=ether24
set [ find default-name=ether6 ] master-port=ether24
set [ find default-name=ether7 ] master-port=ether24
set [ find default-name=ether8 ] master-port=ether24
set [ find default-name=ether9 ] master-port=ether24
set [ find default-name=ether10 ] master-port=ether24
set [ find default-name=ether11 ] master-port=ether24
set [ find default-name=ether12 ] master-port=ether24
set [ find default-name=ether13 ] master-port=ether24
set [ find default-name=ether14 ] master-port=ether24
set [ find default-name=ether15 ] master-port=ether24
set [ find default-name=ether16 ] master-port=ether24
set [ find default-name=ether17 ] master-port=ether24
set [ find default-name=ether18 ] master-port=ether24
set [ find default-name=ether19 ] master-port=ether24
set [ find default-name=ether20 ] master-port=ether24
set [ find default-name=ether21 ] master-port=ether24
set [ find default-name=ether22 ] master-port=ether24
set [ find default-name=ether23 ] master-port=ether24
/interface ethernet switch trunk
add member-ports=ether24,ether23 name=trunk-uplink
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge filter
/interface bridge port
add interface=ether1
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=ether6
add interface=ether7
add interface=ether8
add interface=ether9
add interface=ether10
add interface=ether11
add interface=ether12
add interface=ether13
add interface=ether14
add interface=ether15
add interface=ether16
add interface=ether17
add interface=ether18
add interface=ether19
add interface=ether20
add interface=ether21
add interface=ether22
add interface=ether23
add interface=sfp1
add bridge=bridge-9 interface=vlan-9
add bridge=bridge-10 interface=vlan-10
add bridge=bridge-8 interface=vlan-8
add bridge=bridge-1 interface=vlan-1
add bridge=bridge-11 interface=vlan-11
add interface=ether24
add bridge=bridge-10 interface=wlan1
add bridge=bridge-9 interface=wlan3
/interface bridge settings
set use-ip-firewall-for-vlan=yes
/interface ethernet switch egress-vlan-tag
add tagged-ports=trunk-uplink,ether1,switch1-cpu vlan-id=8
add tagged-ports=trunk-uplink,ether1,switch1-cpu vlan-id=9
add tagged-ports=trunk-uplink,ether1,switch1-cpu vlan-id=10
add tagged-ports=trunk-uplink,ether1,switch1-cpu vlan-id=1
add tagged-ports=trunk-uplink,ether1,switch1-cpu vlan-id=11
/interface ethernet switch egress-vlan-translation
add customer-vid=10 new-customer-vid=0 ports=\
    ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether18,ether19,ether20,ether21,ether22
add customer-vid=9 customer-vlan-format=untagged-or-tagged new-customer-vid=0 ports=ether2,ether17
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=10 ports=\
    ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether18,ether19,ether20,ether21,ether22
add customer-vid=0 new-customer-vid=9 ports=ether2,ether17
/interface ethernet switch vlan
add ports="trunk-uplink,ether1,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether18,ether19,ether20,ether21\
    ,ether22,switch1-cpu" vlan-id=10
add ports=trunk-uplink,ether1,ether12,switch1-cpu vlan-id=11
add ports=trunk-uplink,ether1,ether12,switch1-cpu vlan-id=8
add ports=trunk-uplink,ether1,ether2,ether12,ether17,switch1-cpu vlan-id=9
add ports="trunk-uplink,ether1,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,ether11,ether12,ether13,ether14,ether15,ether16,ether18,ether19,ether20,ether21\
    ,ether22,switch1-cpu" vlan-id=1

/interface bridge port
add bridge=bridge-9 interface=vlan-9
add bridge=bridge-10 interface=vlan-10
add bridge=bridge-8 interface=vlan-8
add bridge=bridge-1 interface=vlan-1
add bridge=bridge-11 interface=vlan-11

config autocable_diag ports 15 state disable
config autocable_diag ports 16 state disable

disable asymmetric_vlan
config vlan default delete 1-28
config vlan default add tagged 15-28 advertisement disable
create vlan vlan8 tag 8
create vlan vlan9 tag 9
create vlan vlan10 tag 10
create vlan vlan11 tag 11
config vlan vlan8 add tagged 15-28 advertisement enable
config vlan vlan9 add tagged 15-28 advertisement enable
config vlan vlan10 add tagged 15-18,25-28 advertisement enable
config vlan vlan10 add untagged 1-14,19-24 advertisement enable
config vlan vlan11 add tagged 15-28 advertisement enable
enable pvid auto_assign

disable loopdetect

disable igmp_snooping multicast_vlan

config link_aggregation state enable
config link_aggregation algorithm mac_source
config lacp port_priority 1-28 128 timeout long
config lacp_ports 1-28 mode active
create link_aggregation group_id 4 type lacp
config link_aggregation group_id 4 master_port 15 ports 15-16

config mac_based_vlan method single

create link_aggregation group_id 1 type lacp
create link_aggregation group_id 2 type lacp
config link_aggregation group_id 1 ports 1:(1-2)
config link_aggregation group_id 2 ports 1:(3-4)
config vlan default delete 1:(3-4,7-24)
create vlan vlan8 tag 8
create vlan vlan9 tag 9
create vlan vlan10 tag 10
create vlan vlan11 tag 11
create vlan vlan12 tag 12
create vlan vlan13 tag 13
create vlan vlan14 tag 14
create vlan vlan15 tag 15
create vlan vlan16 tag 16
create vlan vlan17 tag 17
config vlan default add tagged 1:(5-6),ch(1-2)
config vlan vlan8 add tagged 1:(5-18),ch(1-2)
config vlan vlan9 add tagged 1:(5-18),ch(1-2)
config vlan vlan10 add tagged 1:(5-6,17-18),ch(1-2)
config vlan vlan11 add tagged 1:(5-6,17-18),ch(1-2)
config vlan vlan12 add tagged 1:(7-16)
config vlan vlan12 add untagged 1:24
config vlan vlan13 add tagged 1:(7-16)
config vlan vlan13 add untagged 1:22
config vlan vlan14 add tagged 1:(7-16)
config vlan vlan14 add untagged 1:23
config vlan vlan15 add tagged 1:(7-16)
config vlan vlan15 add untagged 1:21
config vlan vlan16 add tagged 1:(7-16)
config vlan vlan16 add untagged 1:20
config vlan vlan17 add tagged 1:(7-12,15-16)
config vlan vlan17 add untagged 1:19
config vlan vlan17 add forbidden 1:(13-14)
config gvrp 1:19 pvid 17
config gvrp 1:20 pvid 16
config gvrp 1:21 pvid 15
config gvrp 1:22 pvid 13
config gvrp 1:23 pvid 14
config gvrp 1:24 pvid 12
enable vlan_trunk
enable stp
config stp version rstp
config stp priority 16384 instance_id 0
config stp ports 1:(19-24) state disable fbpdu disable