Вот моя конфигурация (без файрвола):
# sep/18/2021 15:27:30 by RouterOS 6.48.4
# software id = JXXW-XVN1
#
# модель = 1100
# серийный номер = 2C6100147CF6E
/interface bridge
add fast-forward=no name=bridge-dmz
add name=bridge-dmz-interno
add name=bridge-gostje
add name=bridge-management
add name=bridge-trunk
add name=bridge-uporabniki
add name=loopback_ospf
/interface ethernet
set [ find default-name=ether1 ] name=ether1--t2-optika
set [ find default-name=ether2 ] name=ether2-b1-trunk
set [ find default-name=ether3 ] name=ether3-b1-trunk
set [ find default-name=ether4 ] name=ether4-b2-trunk
set [ find default-name=ether5 ] name=ether5-b2-trunk
set [ find default-name=ether6 ] name=ether6-gostje
set [ find default-name=ether7 ] name=ether7
set [ find default-name=ether8 ] name=ether8-uporabniki
set [ find default-name=ether10 ] name=ether10-telekom-optika
set [ find default-name=ether11 ] name=ether11-dmz
set [ find default-name=ether12 ] disabled=yes name=ether12-dmz
set [ find default-name=ether13 ] name=ether13-management
/interface bonding
add name=bonding1-trunk slaves=ether2-b1-trunk,ether3-b1-trunk transmit-hash-policy=layer-2-and-3
add name=bonding2-trunk slaves=ether4-b2-trunk,ether5-b2-trunk transmit-hash-policy=layer-2-and-3
/interface vlan
add interface=bridge-trunk name=vlan20-uporabniki vlan-id=20
add interface=bridge-trunk name=vlan41-dmz-interno vlan-id=41
add interface=bridge-trunk name=vlan80-gostje vlan-id=80
add interface=bridge-trunk name=vlan200-management vlan-id=200
/ip dhcp-server option
add code=46 name=netbios-node-type_PNode value="'2'"
/ip pool
add name=pool-manage ranges=172.100.200.100-172.100.200.120
add name=pool-gostje ranges=172.100.80.150-172.100.80.180
add name=pool-uporabniki ranges=172.100.20.200-172.100.20.240
add name=pool-dmz-interno ranges=172.100.41.200-172.100.41.210
/ip dhcp-server
add address-pool=pool-gostje authoritative=after-2sec-delay disabled=no interface=bridge-gostje lease-time=2h name=gostje
add address-pool=pool-manage authoritative=after-2sec-delay disabled=no interface=bridge-management lease-time=3d10m name=management
add address-pool=pool-uporabniki authoritative=after-2sec-delay disabled=no interface=bridge-uporabniki lease-time=2d name=uporabniki
add address-pool=pool-dmz-interno authoritative=after-2sec-delay disabled=no interface=bridge-dmz-interno lease-time=2d name=dmz-interno
/routing ospf instance
set [ find default=yes ] distribute-default=always-as-type-1 redistribute-static=as-type-1 router-id=10.255.1.1
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=bridge-management interface=vlan200-management
add bridge=bridge-trunk interface=bonding1-trunk
add bridge=bridge-trunk interface=bonding2-trunk
add bridge=bridge-uporabniki interface=vlan20-uporabniki
add bridge=bridge-uporabniki interface=ether8-uporabniki
add bridge=bridge-gostje interface=vlan80-gostje
add bridge=bridge-gostje interface=ether6-gostje
add bridge=bridge-management interface=ether13-management
add bridge=bridge-dmz-interno interface=vlan41-dmz-interno
add bridge=bridge-dmz interface=ether11-dmz
add bridge=bridge-dmz interface=ether12-dmz multicast-router=disabled
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip address
add address=10.255.1.1/24 interface=loopback_ospf network=10.255.1.0
add address=172.100.20.1/25 interface=bridge-uporabniki network=172.100.20.0
add address=172.100.20.129/25 interface=bridge-uporabniki network=172.100.20.128
add address=172.100.80.1/24 interface=bridge-gostje network=172.100.80.0
add address=172.100.200.1/24 interface=bridge-management network=172.100.200.0
add address=172.100.41.1/24 interface=bridge-dmz-interno network=172.100.41.0
add address=89.121.174.117/16 comment="T2 optika" interface=ether1--t2-optika network=89.121.0.0
add address=176.76.242.178/30 comment="Telekom optika" interface=ether10-telekom-optika network=176.76.242.176
add address=176.76.240.17/28 comment="Telekom optika dmz Gateway - public_ip" interface=bridge-dmz network=176.76.240.16
/ip dhcp-server network
add address=172.100.20.0/25 comment="ICT - uporabniki (NetBIOS over TCP/IP (code 46) node type 2 (Peer2Peer) - PNode )" dhcp-option=netbios-node-type_PNode dns-server=172.100.20.101,172.100.20.106,172.91.20.104 domain=ict.users gateway=172.100.20.1 netmask=25 wins-server=172.100.20.101,172.100.20.106,172.91.20.104
add address=172.100.20.128/25 comment="ICT - uporabniki gostje" dns-server=193.189.160.13,193.189.160.23,84.255.209.79,84.255.210.79 domain=ict.guest gateway=172.100.20.129 netmask=25
add address=172.100.41.0/24 comment="ICT - dmz - interno" dhcp-option=netbios-node-type_PNode dns-server=172.100.20.101,172.100.20.106,172.91.20.104 domain=ict.dmz-interno gateway=172.100.41.1 netmask=24 wins-server=172.100.20.101,172.100.20.106,172.91.20.104
add address=172.100.80.0/24 comment="ICT - gostje" dns-server=8.8.8.8,84.255.209.79,84.255.210.79 domain=ict.guest gateway=172.100.80.1 netmask=24
add address=172.100.200.0/24 comment="ICT - management" dhcp-option=netbios-node-type_PNode dns-server=172.100.20.101,172.100.20.106,172.91.20.104 domain=ict.manage gateway=172.100.200.1 netmask=24 wins-server=172.100.20.101,172.100.20.106,172.91.20.104
/ip dns
set servers="193.189.160.13,193.189.160.23,84.255.209.79,84.255.210.79,8.8.8.8"
/routing filter
add action=discard chain=ospf-in prefix=10.99.21.0/25
add action=discard chain=ospf-out prefix=10.99.21.0/25
/routing ospf network
add area=backbone network=172.100.20.0/25
add area=backbone network=172.100.200.0/24
