# enable masquerade on the srcnat chain
/ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

# allow ether2（LAN Interface）traffic to pass through the firewall
/ip firewall filter add chain=forward action=accept in-interface=ether1 out-interface=ether2